Release 1.1.2 build13: record notarized install, native scoped QA and verified recovery

README.md

@@ -2,11 +2,11 @@
 
 基于本仓库的 FxPlug4 初始工程制作的人像美化滤镜，支持 Motion 和 Final Cut Pro。源码使用 Objective-C、Vision、Core Image 与 Metal。
 
-功能包括磨皮、肤色、细节、牙齿美白、眼睛提亮、九类脸型调整、画面选脸、三目标分析跟踪扩展和蒙版预览。原版 MSE18V2 的静态分析依据、近似实现与尚未对齐的部分见 [分析说明](docs/analysis/REA-分析与复刻说明.md)。本版尚未完成原版逐像素与复杂运动跟踪对照。
+功能包括磨皮、肤色、细节、牙齿美白、眼睛提亮、九类脸型调整、自动人脸跟随和多人处理。原版 MSE18V2 的静态分析依据、近似实现与尚未对齐的部分见 [分析说明](docs/analysis/REA-分析与复刻说明.md)。本版尚未完成原版逐像素与复杂运动跟踪对照。
 
 ## 使用
 
-正式安装路径为 `/Library/Plug-Ins/FxPlug/beatygril.app`。Motion 滤镜分类为「大鱼」，滤镜名「大鱼人像美化」。Final Cut Pro 在「效果 → 大鱼 → 大鱼人像美化」中使用配套 Motion 效果，模板目录必须同时保留 `.moef` 与 `Drop Zone.tiff`。美化会随当前帧的人脸自动更新，不需要先点分析；默认脸型跟随主要人脸，开启多人高速模式后对多脸变形。可按需调中频磨皮、肤色与脸型；「只处理选中人脸」用于画面重选目标。三个目标的向前/向后分析属于可选扩展，数据可随工程保存。
+正式安装路径为 `/Library/Plug-Ins/FxPlug/beatygril.app`。Motion 滤镜分类为「大鱼」，滤镜名「大鱼人像美化」。Final Cut Pro 在「效果 → 大鱼 → 大鱼人像美化」中使用配套 Motion 效果，模板目录必须同时保留 `.moef` 与 `Drop Zone.tiff`。美化会随当前帧的人脸自动更新，不需要点击分析。界面以磨皮、美白、瘦脸三张卡片呈现，默认跟随主要人脸；多人模式对多脸变形。单项眼睛可暂时停用并保留数值，右侧箭头恢复默认；磨皮半径、饱和度、锐化和整体混合等收在「更多设置」。旧手动分析与调试参数仅保留隐藏兼容，实际输出统一使用实时自动跟随。
 
 ## 开发和恢复
 
@@ -28,3 +28,25 @@ xcodebuild -project beatygril/beatygril.xcodeproj -scheme 'Wrapper Application'
 瘦脸现固定使用Vision revision 3的76点配置，以17组轮廓到鼻部/瞳孔锚点的局部逆向采样替代脸框水平挤压，包含原版尺寸增益与滑块强度映射。完整点阵贯通实时稳定与离线存储；旧分析记录没有完整76点时跳过瘦脸，重新分析可补齐。其他脸型项仍使用原有近似实现，不能将本次对齐扩张为全部脸型逐像素等价。
 
 离屏验证新增224项：含48组脸部投影/尺寸/歪头与独立17-pin数值场对照、数据恢复和缺点保护；完整回归604项通过。Motion/FCP界面由用户自测。可运行 `python3 scripts/deliver.py --wait-for-hosts --user-tests`，签名公证后只读等待宿主自然退出，安装验证与清理无需操作宿主界面。
+
+## 1.0.6 下巴与图像坐标修复
+
+下巴改为76点中68→38、67→37、66→36的三组局部位移，正值上收、负值延伸，保留原版正负不同系数及尺寸增益。Core Image/IOSurface输入输出移除按TOP_LEFT额外翻转，和原版图像链对齐。修复依据与离屏复现见[下巴与坐标分析](docs/analysis/下巴与坐标分析.md)。七类其余脸型项仍是近似实现。
+
+旧版分析记录无法区分是否包含额外翻转，新版保留原字符串但暂用实时跟随；重新分析即可写入新坐标标记并恢复离线跟踪。最终Motion/FCP画面由用户自行测试。
+
+1.0.6（8）已完成正式签名、Apple公证、票据、安装和模板同步。904项完整回归及独立远程恢复核验通过；最终宿主视觉由用户自测。交付回执在`docs/verification/v1.0.6/`，恢复标签为`v1.0.6`。
+
+## 1.1.0 原生卡片面板
+
+使用AppKit自绘卡片、滑块和开关，原生数值输入、肤色圆点、单项/分组启停及重置。FCP仅发布自定义面板210和两项版权信息，撤掉平铺参数与手动分析板块。新面板使用独立NSSecureCoding状态对象完整保存设置，支持复制、撤销数据和数值插值；未编辑时保持旧文档参数值。旧分析数据不参与实时渲染。
+
+`./scripts/test-inspector.sh`验证参数路由、保存恢复、事务、绕过/重置和离屏布局；`python3 scripts/inspector-template.py audit Templates/大鱼人像美化/大鱼人像美化.moef`验证模板自定义数据和发布入口。离屏截图和模拟宿主检查不能替代Motion/FCP的实际嵌入、键盘/VoiceOver和工程重开验收，仍由用户自测。完整1039项回归通过，Inspector/宿主适配/OSC启用ASan。离屏演示图见[面板预览](docs/verification/v1.1.0/inspector-preview.png)。1.1.0（9）已完成通用Release正式签名、Apple公证、票据粘附、唯一正式目录安装及配套模板同步。签名源码`f79d24eb0185f31feaae58b83b632f92dcb3ca91`的111文件及16项必要资源已独立远端恢复核验，clone内134项Inspector ASan和模板审计通过。
+
+正式安装回执见`docs/verification/v1.1.0/installed-verification.json`，恢复标签为`v1.1.0`。签名、票据、Gatekeeper、双架构身份、PluginKit正式路径及配套模板字节核验通过；已清理本次临时APP、旧APP备份和公证ZIP。有界扫描只发现正式路径的产品外层APP，未把该范围表述为所有卷的完整扫描。未操作Motion/FCP界面，实际面板嵌入与工程重开由用户自测。
+
+## 1.1.2 面板交互与下半脸定位修复
+
+面板改为先在真实视图的宿主 action 内取得读写接口，修复控件一直禁用的问题。短脸改用76点下半脸闭合区域和鼻梁位移轴，下颌骨改为六组相邻轮廓半径的局部位移，移除旧脸框近似场；详见[分析](docs/analysis/短脸与下颌骨分析.md)。其余五项脸型仍保留近似实现，不能将局部算法恢复视为全部效果逐像素一致。
+
+1551项回归通过，含335项宿主适配、98项OSC和157项面板ASan检查；28种控制/原点组合均核验实际解剖位置，改变原点标签时逐字节一致。额外真实帧ASan专项886项通过，含重复基础用例。1.1.2（13）已完成正式签名、公证、票据、唯一正式路径安装及副本清理。Motion/FCP原生数值、重置和隔离画面响应已验证，Motion保存重开与撤销通过；按住滑杆时画布持续刷新的实际观感仍等待用户反馈。连续步进在松手前提交已通过独立模拟宿主验证，不能将它等同于每个鼠标事件都排出一帧。

RECOVERY.md

@@ -12,7 +12,7 @@
 ```sh
 git clone https://dayu.media/git/dayu/paintfcp-fxplug.git
 cd paintfcp-fxplug
-git switch --detach v1.0.5
+git switch --detach v1.1.2
 ```
 
 需要继续编辑时，基于该提交创建新分支。安装 Xcode 与 Apple FxPlug 4 SDK；盘点版本和构建入口见 README.md。SDK/framework 为 Apple 外部开发依赖，应重新安装匹配版本。证书、私钥和公证凭据需从独立加密备份恢复或重新申请；Git 不包含它们。
@@ -48,3 +48,41 @@ FCP模板从 `Templates/大鱼人像美化/` 恢复，将 `.moef` 和 `Drop Zone
 从最终标签恢复后，关闭Motion/FCP，运行 `python3 scripts/deliver.py --wait-for-hosts --user-tests` 可完成签名公证安装、只读宿主退出等待、静态发现及副本清理；它不会操作宿主界面。若上次因非产品错误在Accepted且stapled后停止，可加 `--resume-prepared`，脚本必须重新核对签名CDHash、版本、票据及产品源码未变才会继续。缺少原staging或回执时应完整重新构建，不能伪造回执。
 
 1.0.5瘦脸需要完整76点；旧离线记录缺该字段时保留其余功能并跳过瘦脸。关闭使用跟踪数据可使用当前帧自动76点，或重新分析生成新记录。没有引入原版metallib或CoreML模型，运行只依赖本产品及Apple系统框架。最终安装、配套模板和扫描范围见验证记录。
+
+## 1.0.6 恢复入口
+
+本次签名构建源码SHA为`ad54726b17fabd11f46bc6121e664eac38960a23`，APP版本1.0.6、build8；最终发布标签为`v1.0.6`。恢复该SHA可重建相同产品源码，最终标签另包含交付文档与回执。Release恢复仍用上节同一构建/公证命令、固定Bundle ID和正式安装路径；用户自测模式不会操作Motion/FCP界面。
+
+新增下巴三pin与图像适配轴修复；新分析档案使用`hostCoordinateSpace=iosurface-ci-y-up-v1`。旧未标记档案保留原字符串但回退实时跟随，重新分析后才能用于离线重放，不能直接补字段伪装成新档案。七类剩余脸型项及组合顺序仍有近似边界。
+
+`ad54726b17fabd11f46bc6121e664eac38960a23`已独立从上述远程克隆，87文件的byte/blob/mode与14项资源一致，strict/full fsck和559项核心测试通过，无LFS、子模块或APP产物。临时恢复目录已清理，完整报告见`docs/verification/v1.0.6/recovery-ad54726.json`。
+
+1.0.6已完成正式签名、公证（Accepted ab0271c8-0c4b-4b10-9474-cebe9b55385b）、票据粘附、唯一正式目录安装和配套模板同步；临时APP/旧备份APP/公证ZIP已清理。完整回执及有界副本扫描见`docs/verification/v1.0.6/installed-verification.json`。未操作Motion/FCP界面，最终视觉验收保留为用户自测。
+
+## 1.1.0 面板与自动处理
+
+1.1.0（9）使用自有原生卡片面板和PGInspectorState安全归档。源代码、面板资源（全部程序绘制）、Motion模板与自有自定义参数数据均在仓库；新增`./scripts/test-inspector.sh`及`scripts/inspector-template.py audit`验证入口。恢复时需完整保留`.moef`中的自定义参数210、实际dataValue/defaultVal和两项版权发布；不要删掉仍用于旧工程迁移的隐藏参数定义和组路径。不得拿其他插件的自定义归档替换本产品自己的归档。
+
+新渲染统一实时自动人脸跟随，旧手动分析数据仍保存在旧文档中但不参与本版渲染；主界面不再显示前后分析、目标列表、蒙版调试与平铺控件。三张卡片之外的细调收在更多设置。自定义对象保存完整界面状态，首次编辑前兼容旧参数；数值、开关、启停mask按已测试的复制/插值规则恢复。真实宿主UI及工程重开仍需用户自测。
+
+正式构建、公证、安装仍使用同一`python3 scripts/deliver.py --wait-for-hosts --user-tests`，保持固定Bundle ID与APP路径，仅在用户自行退出Motion/FCP后替换，最终版本节点与回执随交付记录补齐。
+
+兼容边界：未编辑面板时读取旧文档原参数；首次编辑会把当前数值采集为完整面板状态。旧版各项独立关键帧曲线尚未自动迁移为新面板关键帧，不宣称编辑前后任意旧动画逐帧等价。面板本身的数值插值与开关保持已做离屏验证，实际宿主关键帧交互仍待用户测试。
+
+1.1.0签名构建源码为完整SHA`f79d24eb0185f31feaae58b83b632f92dcb3ca91`，源码工作区在构建时干净。该节点已独立从大鱼远程克隆，111文件的bytes/blob/mode及16项必要资源一致，strict/full fsck、134项Inspector ASan和模板审计通过，无LFS或子模块，临时克隆已清理。报告见`docs/verification/v1.1.0/recovery-f79d24e.json`。Apple公证Accepted（ce26be63-9dcd-436a-bcb5-bd294fcc92a9）和票据验证已通过；安装前曾等待用户自行退出宿主，随后完成下述正式替换。
+
+1.1.0（9）现已安装到固定正式路径；APP与嵌套插件为arm64/x86_64通用版本，Developer ID团队、可信时间戳、Hardened Runtime、严格签名、公证票据、Gatekeeper及PluginKit正式路径全部核验通过。配套`.moef` SHA256为`e1c0cff1dd3541ed97cab2cb39a76ad4f28dc659b3be7991cc7ac92dd8ea090b`，和TIFF一起同步到正式模板目录并逐字节核对。本次临时/旧APP及公证ZIP已清理；扫描范围和回执在`docs/verification/v1.1.0/`。最终恢复标签为`v1.1.0`，后续记录提交不改变签名产品源码f79d24e。原生UI和视觉仍由用户自测。
+
+交付偏好（2026-10-21用户明确更新）：后续本产品安装需释放Motion时，可直接结束Motion进程，不再重复请求保存退出；用户说明不在Motion里进行工作。保持不自动操作Motion/FCP界面的约定。本次检查时两个宿主已经退出，没有执行强退。
+
+## 1.1.2 合并修复准备
+
+版本1.1.2（13）合并面板action上下文修复和76点短脸/下颌骨局部场。构建/恢复依赖、正式路径、签名公证入口保持不变；自动检查1551项及额外886项真实帧ASan专项通过。原生验收使用build/native-112独立Motion副本，用户素材、截图和完整AX数据不随源码上传。用户已明确授权接手Motion/FCP进行测试；先前不操作界面的偏好已被本次授权更新。
+
+## 1.1.2 正式恢复入口
+
+发布标签`v1.1.2`，版本1.1.2（13），正式签名源码完整SHA为`a2e33e8e00a99b95dc29d67a819cb0897eda5756`；后续交付记录不改变产品源码。独立远程恢复核验149个文件的bytes/blob/mode、16项资源、strict/full fsck和157项Inspector ASan全部通过，无LFS或子模块。恢复依赖与构建入口同前文；`PAINTFCP_INSPECTOR_ASAN=1 ./scripts/test-inspector.sh`可运行新增数值焦点与每步预览检查。
+
+正式Release已使用固定团队逐层签名，Apple公证Accepted `5f5ce378-8430-467b-ae97-048e6bc81573`，票据、Gatekeeper、通用架构和PluginKit正式路径全部通过。唯一正式安装APP为`/Library/Plug-Ins/FxPlug/beatygril.app`，模板moef SHA256为`e9fa97dc14323d0daa7d3d61b06a78ba4000a70ab9f5e67ebffd750d49df1e15`，TIFF逐字节一致。临时APP、旧APP和公证ZIP已清理，有界目录及现存Spotlight索引产品路径中仅发现正式APP，扫描错误0，不宣称扫描了所有卷。
+
+Motion/FCP原生验收范围及未完成项见`docs/verification/v1.1.2/native-qa.json`：数值、重置、隔离短脸/下颌骨响应通过；Motion撤销和保存关闭重开通过。连续步进已改为每步完整宿主action，模拟宿主确认鼠标松开前可发布中间设置；原生按住鼠标期间的画布时序仍待用户反馈。后续人脸素材和全AX只保留本机build，不是产品依赖或上传资源。

Templates/大鱼人像美化/PARAMETERS.json

@@ -1,9 +1,28 @@
 {
-  "version": "1.0.2",
+  "version": "1.1.0",
   "pluginUUID": "FB14B0E6-59B2-4836-916F-CD0C559E9241",
   "filterObject": "510000005",
-  "visiblePublished": 46,
+  "visiblePublished": 1,
   "parameters": [
+    {
+      "id": 210,
+      "name": "",
+      "channel": "./210",
+      "kind": "custom-archive",
+      "class": "PGInspectorState",
+      "published": true,
+      "hasEdits": false,
+      "schema": 1,
+      "templateFlags": "12901679104",
+      "panelCards": [
+        "磨皮",
+        "美白",
+        "瘦脸"
+      ],
+      "secondarySection": "更多",
+      "valueStorage": "Own secure keyed archive; Custom Data inside BlindDataObject, DataIsLegacy=false",
+      "nativeLoadingValidation": "pending user"
+    },
     {
       "id": 70,
       "name": "启用磨皮",
@@ -12,7 +31,9 @@
       "kind": "bool",
       "default": 1,
       "value": 1,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 1,
@@ -22,7 +43,9 @@
       "kind": "float",
       "default": 1,
       "value": 1,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 12,
@@ -32,7 +55,9 @@
       "kind": "float",
       "default": 0,
       "value": 0.5,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 3,
@@ -42,7 +67,9 @@
       "kind": "float",
       "default": 8,
       "value": 8,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 30,
@@ -52,7 +79,9 @@
       "kind": "bool",
       "default": 1,
       "value": 1,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 71,
@@ -62,7 +91,9 @@
       "kind": "bool",
       "default": 1,
       "value": 1,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 42,
@@ -72,7 +103,9 @@
       "kind": "popup",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12901744656"
     },
     {
       "id": 2,
@@ -82,7 +115,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 14,
@@ -92,7 +127,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 15,
@@ -102,7 +139,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 41,
@@ -112,7 +151,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 31,
@@ -122,7 +163,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 32,
@@ -132,7 +175,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 73,
@@ -142,7 +187,9 @@
       "kind": "bool",
       "default": 1,
       "value": 1,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 17,
@@ -152,7 +199,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 4,
@@ -162,7 +211,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 72,
@@ -172,7 +223,9 @@
       "kind": "bool",
       "default": 1,
       "value": 1,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 18,
@@ -182,7 +235,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 33,
@@ -192,7 +247,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 22,
@@ -202,7 +259,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 23,
@@ -212,7 +271,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 24,
@@ -222,7 +283,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 25,
@@ -232,7 +295,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 26,
@@ -242,7 +307,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 27,
@@ -252,7 +319,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 28,
@@ -262,7 +331,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 29,
@@ -272,7 +343,9 @@
       "kind": "float",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 20,
@@ -282,7 +355,9 @@
       "kind": "bool",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 21,
@@ -292,7 +367,9 @@
       "kind": "point",
       "default": 0.5,
       "value": 0.5,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905943072"
     },
     {
       "id": 39,
@@ -302,7 +379,9 @@
       "kind": "bool",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 40,
@@ -312,7 +391,9 @@
       "kind": "float",
       "default": 1.8,
       "value": 1.8,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 45,
@@ -322,7 +403,9 @@
       "kind": "bool",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 46,
@@ -332,7 +415,9 @@
       "kind": "popup",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12901744656"
     },
     {
       "id": 50,
@@ -342,7 +427,9 @@
       "kind": "button",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": null
     },
     {
       "id": 51,
@@ -352,7 +439,9 @@
       "kind": "button",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": null
     },
     {
       "id": 52,
@@ -362,7 +451,9 @@
       "kind": "button",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": null
     },
     {
       "id": 53,
@@ -372,7 +463,9 @@
       "kind": "status",
       "default": "选择画面中的人脸后开始分析",
       "value": "选择画面中的人脸后开始分析",
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 19,
@@ -382,7 +475,9 @@
       "kind": "bool",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 35,
@@ -392,7 +487,9 @@
       "kind": "bool",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 7,
@@ -402,7 +499,9 @@
       "kind": "float",
       "default": 148,
       "value": 148,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 8,
@@ -412,7 +511,9 @@
       "kind": "float",
       "default": 0.6,
       "value": 0.6,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 9,
@@ -422,7 +523,9 @@
       "kind": "float",
       "default": 0.4,
       "value": 0.4,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 10,
@@ -432,7 +535,9 @@
       "kind": "bool",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 43,
@@ -442,7 +547,9 @@
       "kind": "bool",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 44,
@@ -452,7 +559,9 @@
       "kind": "popup",
       "default": 0,
       "value": 0,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12901744656"
     },
     {
       "id": 5,
@@ -462,7 +571,9 @@
       "kind": "float",
       "default": 1,
       "value": 1,
-      "published": true
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 60,
@@ -470,7 +581,9 @@
       "channel": "./60",
       "kind": "hidden-string",
       "value": "",
-      "published": false
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 61,
@@ -478,7 +591,9 @@
       "channel": "./61",
       "kind": "hidden-string",
       "value": "",
-      "published": false
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     },
     {
       "id": 62,
@@ -486,7 +601,9 @@
       "channel": "./62",
       "kind": "hidden-string",
       "value": "",
-      "published": false
+      "published": false,
+      "hiddenCompatibility": true,
+      "templateFlags": "12905938976"
     }
   ],
   "effectSource": {
@@ -498,5 +615,43 @@
     "dropZone": 1,
     "path": "Drop Zone.tiff",
     "resourceBundled": true
+  },
+  "informationalPublished": 2,
+  "totalPublished": 3,
+  "legacyDefinitionCount": 49,
+  "legacyGroupsPreserved": [
+    100,
+    101,
+    102,
+    103,
+    104,
+    105
+  ],
+  "nativeHiddenPolicy": "All legacy groups and parameters remain registered with SDK kFxParameterFlag_HIDDEN. Known scalar/point/string hidden XML flags are copied from observed native structures; group/popup/button private flags are preserved.",
+  "publishSettings": [
+    {
+      "object": "510000011",
+      "channel": "./2/100",
+      "name": "FCP 版本作者→"
+    },
+    {
+      "object": "510000012",
+      "channel": "./2/100",
+      "name": "更多模板浏览器访问→"
+    },
+    {
+      "object": "510000005",
+      "channel": "./210",
+      "name": ""
+    }
+  ],
+  "defaults": {
+    "legacyMidtoneDefault": 0,
+    "legacyMidtoneValue": 0.5,
+    "customStateHasEdits": false,
+    "initialEffectiveMidtone": 0.5,
+    "publishOSC": 0,
+    "manualAnalysisVisible": false,
+    "trackingMode": "automatic primary realtime follow"
   }
 }

Templates/大鱼人像美化/README.md

@@ -1,35 +1,43 @@
 # 大鱼人像美化 FCP 效果模板
 
-版本：1.0.5。滤镜 UUID：`FB14B0E6-59B2-4836-916F-CD0C559E9241`。模板必须与已安装的大鱼人像美化 FxPlug APP 配套使用。
+版本：1.1.2。滤镜 UUID：`FB14B0E6-59B2-4836-916F-CD0C559E9241`。需配套同版大鱼人像美化 FxPlug APP。
 
-## 默认数值
+## 三卡片与自动跟随
 
-模板首次应用时，“中频磨皮”为 **50%（0.5）**；直接在 Motion 添加裸 FxPlug 滤镜时为 **0%（0）**。模板保存了 `default=0 / value=0.5`，保留裸插件的重置基准；其他功能参数与插件默认一致。整体混合为100%，脸型、肤色提亮、锐化、牙齿和眼睛提亮初始为0，跟踪初始关闭。此模板不预置人脸身份或跟踪记录。
+FCP 发布列表仅保留作者、网站两个空绑定展示项，以及一个空名称的自定义面板入口 `./210`，共3项。面板内提供“磨皮、美白、瘦脸”三张卡片和“更多”附加设置。主体人脸由当前画面自动选择并实时跟随，无需手动前向/后向分析。多人模式、预览框、防跳脸与各项调节由插件自定义面板承载。
 
-## 参数与输入
+原有46个平铺功能入口已撤下。旧49个参数定义及六组路径仍保留供旧项目兼容，插件以 SDK 隐藏标记注册；旧手动分析按钮、跟踪目标/状态、选脸点和目标数据不再发布为界面入口。隐藏的目标数据60/61/62不删除。发布 OSC 初始为0；旧OSC类注册由插件保留。
 
-- 保留磨皮、肤色、细节、脸型、人脸选择与跟踪、蒙版与输出六个原生 FxPlug 参数组，发布46项可见功能参数，包括前向/后向分析及清除按钮。
+## 默认与旧项目
-- 目标1–3的隐藏分析数据以参数60/61/62保留在滤镜节点中，不发布成用户控件；分析完成后由插件写入宿主参数并随工程保存。
-- 选脸位置发布为原生二维参数，并启用滤镜的“发布 OSC”宿主通道。跟踪按钮、OSC与工程关闭重开后的数据恢复须由实际 FCP 验证。
-- 画面只含一个标准 Effect Source（Type=3、Drop Zone=1），其 Source Media 指向 clip `510000006`，clip 位于 footage `510000007`。`pathURL=Drop Zone.tiff` 为模板同目录内的相对引用，标准1200×1200占位图已随模板附带，没有外部安装目录依赖、示例人像、旧滤镜或新动画。FCP时间线片段的实际替换已在独立验收项目中确认正常出图。
-- 作者与网站为两个原生空绑定展示菜单，不改变渲染。
 
-建议模板安装位置：`~/Movies/Motion Templates.localized/Effects.localized/大鱼/大鱼人像美化/`。APP正式安装与模板安装、Motion/FCP原生验收由主任务处理。
+模板首次应用时，旧原生“中频磨皮”仍保存 `default=0 / value=0.5`，即初始局部磨皮50%；直接添加裸插件时为0%。自定义 `PGInspectorState` 初始 `hasEdits=NO`，因此读取并保留旧原生参数，不会用面板归档中的默认0覆盖模板0.5或旧项目数值。面板经过编辑后由自定义状态持久保存调节值。此模板不预置任何人脸身份或跟踪记录。
 
-## 结构来源与静态验证
+## 自有状态归档
 
-Apple项目、群组、Effect Source和滤镜节点骨架来源于用户自有“大鱼去黑.moef”；仅保留这些原生结构，已替换滤镜UUID、名称、版本和全部功能参数。FxPlug组/字符串/点参数的原生结构交叉参照自有Number与Zoom and Pan样本；作者/网站空绑定来自ae-to-motion技能的原生版权样本。
+参数210使用本插件生成的 `PGInspectorState` 安全键控归档：内部 `Custom Data` 对象、外部 `BlindDataObject` 与 `DataIsLegacy=false`，再按已核对的Motion文本编码和长度封装。保存 `schema=1 / edited=false`，不使用原版私有数据、类名、品牌资源或空 `<dataValue>` 猜测初始化。默认和当前归档相同，可完整解码并往返核验。
 
-`PARAMETERS.json`逐项记录参数ID、组、发布通道及初始值；`VALIDATION.json`记录本次静态核验。48个发布路径（46功能＋2信息）均能反查实际对象和通道，实体ID无冲突，三个隐藏数据通道未发布；必要占位媒体以相对路径随包附带，保存选择状态为0个内容对象且焦点为项目。技能`motion_selection.py check`与`audit_motion.py --require-no-selection`通过。
+该编码依据原生文件静态结构及独立Foundation归档检查；1.1.0自定义面板在Motion/FCP中的实际创建、显示、交互、撤销和关闭重开恢复仍待用户验收，不能以XML可解析或归档解码成功代替宿主加载通过。
 
-结构核验之外，已用实际素材在FCP和Motion完成加载、画面及提亮回归测试。详细范围及尚未覆盖的边界见 [验证记录](../../docs/验证记录.md)。
+## 输入、媒体与版权
 
-## 前版输入链错误与本次修复
+输入链沿用已修复的标准 Effect Source（Type=3、Drop Zone=1）：Source Media→clip `510000006`→footage `510000007`→相对文件 `Drop Zone.tiff`。该占位图随模板附带，420128字节，SHA256 `a7f8e3a2a431dbb3ce9e777040bb55e701cfe9ab9632e8cbb10359732bc8692e`。没有外部素材、示例人像或新动画。
 
-前版生成稿（SHA256 `3b7984e11a92487834ab67121fd3814bf13c22b77a70851298efa84206f91478`）将效果源的 Source Media 设为0，并删除了原生clip/footage。用户在FCP应用后实测整幅黑屏。这是模板装配错误；保留Type=3本身并不能证明FCP输入替换链完整。此前XML解析、发布路径和无缺媒体检查通过，也没有覆盖真实FCP画面输入，不能当作该模板已经可用的证据。
+作者与网站仍是同一个Rig下的两个无受控参数菜单：“FCP 版本作者→／大鱼先森Media”和“更多模板浏览器访问→／dayu.media”。仅展示信息，不改变渲染。
 
-黑屏修复恢复标准效果源clip/footage和Source Media关联，并随包加入标准`Drop Zone.tiff`，保留49个插件参数、48个发布入口与Type=3/Drop Zone=1。1.0.4同时包含独立的提亮蒙版与选脸坐标修复。该占位图从Apple Motion的Ozone.framework标准资源复制，实际运行只引用本模板内的相对副本。图像SHA256为 `a7f8e3a2a431dbb3ce9e777040bb55e701cfe9ab9632e8cbb10359732bc8692e`，420128字节。
+正式安装位置：`~/Movies/Motion Templates.localized/Effects.localized/大鱼/大鱼人像美化/`。1.1.0模板和占位TIFF已同步并逐字节核验，配套APP已正式签名、公证、安装；没有操作Motion/FCP界面，用户自测原生面板。
 
-本次已经静态核验Source Media→clip→相对文件链存在、文件字节一致、48项发布仍解析、隐藏数据未发布和保存选择状态；修复后已在FCP独立验收项目新增实例，确认输入替换、实际人像和提亮画面正常；Mix=0逐字节直通由宿主适配器IOSurface回归测试覆盖，未将其混称为FCP截图逐像素核验。
+## 验证边界与历史修复
 
-1.0.5将瘦脸改为76点驱动的17组局部位移，供用户在Motion/FCP自测最大瘦脸与转脸。旧跟踪记录若没有全点阵，需重新分析后才有瘦脸，或关闭“使用跟踪数据”采用当前帧自动检测。
+`PARAMETERS.json`记录新旧参数和3条发布路径；`VALIDATION.json`分开记录结构/归档核验与当前宿主待验项。内容选择状态保持为空，效果源、clip/footage、占位资源和版权绑定结构均保留。
+
+早期模板曾误删clip/footage、将Source Media设为0，用户在FCP实测黑屏；随后恢复完整标准输入链，历史版本已实际出图。该历史结果只支持输入链，不能证明新1.1.0自定义面板已加载。1.0.5加入76点17组局部瘦脸；1.0.6移除IOSurface重复翻转并修复下巴三组局部位移。旧未标记坐标空间的跟踪数据保留但不重放，自动回退实时跟随。
+
+## 可复现的只读核验
+
+在仓库根目录执行：
+
+```sh
+python3 scripts/inspector-template.py audit "Templates/大鱼人像美化/大鱼人像美化.moef"
+```
+
+脚本可提取内外归档并核验自有类、schema、初始状态、3条发布和媒体引用；`encode --inner <本插件生成的Custom Data归档> --text-output <输出文件>` 可重新包装文本值，不启动宿主。其结果明确保留宿主加载待验状态。

Templates/大鱼人像美化/VALIDATION.json

@@ -1,11 +1,11 @@
 {
-  "version": "1.0.5",
+  "version": "1.1.2",
-  "sha256": "ba08de6916cd837b3733aa0c6fcb78f2e8224431d25e1310089ae67d18445f2d",
+  "sha256": "e9fa97dc14323d0daa7d3d61b06a78ba4000a70ab9f5e67ebffd750d49df1e15",
   "filterUUID": "FB14B0E6-59B2-4836-916F-CD0C559E9241",
-  "publishedFunctionalControls": 46,
+  "publishedFunctionalControls": 1,
   "informationalControls": 2,
   "hiddenTrackingSlots": 3,
-  "publishedPathsResolved": 48,
+  "publishedPathsResolved": 3,
   "sourceType": 3,
   "sourceMedia": "510000006",
   "clip": "510000006",
@@ -23,18 +23,203 @@
     "problem": "Previous generated template removed the standard source clip and could not establish the native effect-source input chain. XML/reference checks did not validate FCP timeline replacement.",
     "change": "Restored the user-owned reference template clip/footage skeleton with new unique IDs; restored the Source Media link; bundled standard Drop Zone.tiff; filter, publications and Type=3/Drop Zone=1 preserved."
   },
-  "hostValidation": {
-    "date": "2026-10-21",
-    "FCP": "Restored input-chain template shows supplied real video; effect parameters and forward analysis responded in independent QA project.",
-    "Motion": "1.0.4 installed formal app loaded the real-video QA project and rendered brightness/geometry with a primary box at different playhead positions; offline tracking disabled.",
-    "scope": "1.0.5 native visual QA is reserved for user self-testing; no Motion/FCP UI operations in the slimming repair. Historical input/brightness validation remains scoped to prior releases.",
-    "version105": "Formal 1.0.5 (7) signed/notarized/stapled/installed and PluginKit formal path verified. User closed hosts before replacement; no Motion/FCP UI operated. Native visual testing pending user."
-  },
   "slimValidation": {
     "offlineFullChecks": 604,
     "slimChecks": 224,
     "extraRealVideoASanChecks": 264,
     "sampledVideoFrames": 11,
     "maxUVOracleError": 1.09828022e-05
+  },
+  "coordinateChinValidation": {
+    "offlineFullChecks": 904,
+    "thinChinChecks": 394,
+    "hostAdapterChecksASan": 247,
+    "oscChecksASan": 98,
+    "extraRealVideoASanChecks": 494,
+    "sampledVideoFrames": 11,
+    "independentAnatomicalChecks": 12,
+    "originCombinations": 16,
+    "allOriginTagsPixelIdentical": true,
+    "maxByteErrorVsIndependentCIReference": 2,
+    "maxUVOracleError": 1.09828022e-05,
+    "nativeVisualQA": "pending user"
+  },
+  "historicalHostValidation": {
+    "date": "2026-10-21",
+    "FCP": "Restored input-chain template shows supplied real video; effect parameters and forward analysis responded in independent QA project.",
+    "Motion": "1.0.4 installed formal app loaded the real-video QA project and rendered brightness/geometry with a primary box at different playhead positions; offline tracking disabled.",
+    "scope": "1.0.6 coordinate/chin repair native visual QA is reserved for user self-testing; no Motion/FCP UI operations. Historical host tests remain scoped to their versions.",
+    "version105": "Formal 1.0.5 (7) signed/notarized/stapled/installed and PluginKit formal path verified. User closed hosts before replacement; no Motion/FCP UI operated. Native visual testing pending user.",
+    "version106": "Formal 1.0.6 (8) universal Release signed/notarized/stapled/installed, identity/Gatekeeper/formal PluginKit path verified. User closed hosts; companion moef and TIFF synchronized and byte-verified. Generated outer APPs and notarization ZIP removed. No Motion/FCP UI operations; native visual QA pending user."
+  },
+  "totalPublished": 3,
+  "hiddenCompatibilityParameters": 49,
+  "legacyGroupPathsPreserved": true,
+  "legacyValuesPreserved": true,
+  "publishOSC": 0,
+  "currentHostValidation": {
+    "version": "1.1.2",
+    "build": "13",
+    "Motion": "pass: native number/reset/undo and save-close-reopen; isolated shape/profile images inspected with identical geometry source",
+    "FCP": "pass: formal load, number/reset and same-frame isolated short/jaw render",
+    "continuousPreview": "per-step host completion verified automatically; native held-mouse canvas timing pending user observation"
+  },
+  "customParameter": {
+    "id": 210,
+    "channel": "./210",
+    "name": "",
+    "flags": "12901679104",
+    "flagsOrigin": "Observed original custom parameter native structure, without copying its data blob",
+    "class": "PGInspectorState",
+    "schema": 1,
+    "hasEdits": false,
+    "valueCount": 30,
+    "disabledCount": 0,
+    "classes": [
+      "NSDictionary",
+      "NSSet",
+      "PGInspectorState"
+    ],
+    "innerBytes": 935,
+    "innerSHA256": "257540ac6079756a76f3d31dff1b9bca2b33393962057927791316965495ab60",
+    "outerBytes": 1127,
+    "outerSHA256": "95d5f1e2c35c40e9f1234b1480894bcc0ee68c0822c9bd3f7c04338062e6a26b",
+    "encodedCharacters": 1516,
+    "encodingAlphabet": "*-0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",
+    "envelope": "8-byte big-endian outer archive length, byte 0x2a, outer NSKeyedArchiver payload, zero padding to 3-byte boundary, custom base64 alphabet",
+    "outerTopKeys": [
+      "BlindDataObject",
+      "DataIsLegacy"
+    ],
+    "innerTopKey": "Custom Data",
+    "legacyFlag": false,
+    "defaultEqualsCurrent": true,
+    "exactEncodeDecodeRoundtrip": true,
+    "outerSecureDecodeRoundtrip": true,
+    "vendorClassesOrBlobReused": false,
+    "emptyDataValueFallback": "not established and not relied upon",
+    "nativeLoadStatus": "instantiated in Motion and FCP"
+  },
+  "publicationTransition": {
+    "previousFunctionalControls": 46,
+    "currentFunctionalControls": 1,
+    "informationControls": 2,
+    "manualAnalysisPublished": false,
+    "retainedForCompatibility": [
+      45,
+      46,
+      50,
+      51,
+      52,
+      53,
+      60,
+      61,
+      62
+    ],
+    "oldParameterPathsUnchanged": true
+  },
+  "xmlFlagPolicy": {
+    "scalarBooleanString": "12905938976; complete observed hidden native flags",
+    "point": "12905943072; complete observed hidden native point flags",
+    "groupPopupButton": "existing private XML flags retained; no guessed bit patch",
+    "pluginHiddenRegistration": "verified in current source: kFxParameterFlag_HIDDEN for all legacy groups, numeric/point/popup/string parameters; commands additionally disabled"
+  },
+  "nonVisualAcceptance": {
+    "XMLAndReferences": "pass: own codec audit and ae-to-motion audit_motion.py",
+    "mediaClosure": "pass: Source Media/clip/footage/relative TIFF and media SHA256",
+    "publications": "pass: exactly two copyright menus plus empty-name ./210",
+    "copyrightBindings": "pass: complete Rig/widget trees unchanged from baseline, own audit resolves menus/publications",
+    "selection": "pass: 0 selected content objects; project focus",
+    "customArchiveStructure": "pass: exact inner bytes, own class/schema/values; Foundation outer secure decode",
+    "customHostInstantiation": "pass: both native hosts"
+  },
+  "semanticPreservation": {
+    "inverseDiffPassed": true,
+    "allowedChanges": [
+      "description/version",
+      "46 native functional publications replaced by custom210",
+      "custom210 own state archive",
+      "observed scalar/point/string hidden flags",
+      "publish OSC value 1 to 0"
+    ],
+    "otherStructureAndLegacyValuesUnchanged": true
+  },
+  "reproducibleCodec": {
+    "script": "../../scripts/inspector-template.py",
+    "commands": [
+      "python3 scripts/inspector-template.py audit \"Templates/大鱼人像美化/大鱼人像美化.moef\"",
+      "python3 scripts/inspector-template.py encode --inner build/ui-analysis/PGInspectorState-default-inner.bplist --text-output build/ui-analysis/panel-value.txt"
+    ],
+    "ownRoundtrip": "pass",
+    "malformedOrVendorArchiveRejectionCases": 5,
+    "foundationOuterSecureDecode": "pass",
+    "innerClassDecode": "model generates own archive; structure decoded and exact generated bytes preserved; native host instantiation pending user"
+  },
+  "automatedInspectorValidation": {
+    "scope": "offscreen AppKit inspector, real production controller and mocked host callbacks; no Motion/FCP UI",
+    "fullChecks": 1551,
+    "counts": {
+      "beauty": 49,
+      "face": 116,
+      "thinChinJawShort": 796,
+      "hostAdapterASan": 335,
+      "oscASan": 98,
+      "inspectorASan": 157
+    },
+    "nativeVisualQA": "See currentHostValidation and docs/verification/v1.1.2/native-qa.json",
+    "manualAnalysisUI": "removed; legacy IDs hidden and buttons disabled",
+    "renderMode": "realtime automatic follow; stored manual geometry never used",
+    "templatePublishedEntries": 3,
+    "offscreenWidths": [
+      280,
+      320,
+      380,
+      520
+    ],
+    "independentViewChecks": 27,
+    "fixedRegressions": [
+      "shape group bypass clears face-box overlay",
+      "disabled legacy detail effects stay disabled on first edit",
+      "legacy global smoothing remains enabled when its old local group was off",
+      "new gesture reads current host after immediate undo",
+      "pending synchronization is bound to CMTime",
+      "same-time host change refreshes without waiting",
+      "explicit numeric input is never skipped due to stale UI cache"
+    ],
+    "archives": "Own PGInspectorState secure payload; Foundation outer and inner decode and Motion alphabet roundtrip tested"
+  },
+  "installation": {
+    "version": "1.1.2",
+    "build": "13",
+    "status": "Release signed, notarized, stapled, installed; generated copies cleaned",
+    "previousInstalledVersion": "1.1.1 (interim)",
+    "sourceCommit": "a2e33e8e00a99b95dc29d67a819cb0897eda5756",
+    "notarization": "Accepted 5f5ce378-8430-467b-ae97-048e6bc81573",
+    "uniqueAppInScannedScope": true,
+    "scopeReport": "../../docs/verification/v1.1.2/installed-verification.json"
+  },
+  "shortJawValidation": {
+    "version": "1.1.2",
+    "build": "13",
+    "total": 1551,
+    "counts": {
+      "beauty": 49,
+      "face": 116,
+      "thinChinJawShort": 796,
+      "hostAdapterASan": 335,
+      "oscASan": 98,
+      "inspectorASan": 157
+    },
+    "allPassed": true,
+    "extraRealFramesASan": {
+      "checks": 886,
+      "includedRepeatedBaseChecks": true,
+      "addedToTotal": false
+    },
+    "originCombinations": 28,
+    "originTagsExactlyByteIdentical": true,
+    "maxByteDifferenceVsIndependentUprightReference": 2,
+    "meanByteDifferenceLimit": 0.005,
+    "nativeCombinedBuildQA": "pending"
   }
 }

Templates/大鱼人像美化/大鱼人像美化.moef

@@ -46,7 +46,7 @@
 		<flags>1</flags>
 	</template>
 	<build />
-	<description>大鱼人像美化 1.0.5：人像磨皮、肤色、脸型、五官保护和三目标人脸跟踪。模板中频磨皮默认为50%。</description>
+	<description>大鱼人像美化 1.1.2：磨皮、美白、瘦脸三卡片自定义面板，自动选择主体并实时跟随。模板局部磨皮默认为50%。</description>
 	<scene>
 		<sceneSettings>
 			<width>1920</width>
@@ -82,52 +82,7 @@
 			<version>2</version>
 			<target object="510000011" channel="./2/100" name="FCP 版本作者→" />
 			<target object="510000012" channel="./2/100" name="更多模板浏览器访问→" />
-			<target object="510000005" channel="./100/70" name="启用磨皮" />
+			<target object="510000005" channel="./210" name="" />
-			<target object="510000005" channel="./100/1" name="磨皮强度" />
-			<target object="510000005" channel="./100/12" name="中频磨皮" />
-			<target object="510000005" channel="./100/3" name="磨皮半径" />
-			<target object="510000005" channel="./100/30" name="保护五官" />
-			<target object="510000005" channel="./101/71" name="启用肤色" />
-			<target object="510000005" channel="./101/42" name="肤色风格" />
-			<target object="510000005" channel="./101/2" name="肤色提亮" />
-			<target object="510000005" channel="./101/14" name="肤色色相" />
-			<target object="510000005" channel="./101/15" name="肤色饱和度" />
-			<target object="510000005" channel="./101/41" name="均匀肤色" />
-			<target object="510000005" channel="./101/31" name="牙齿美白" />
-			<target object="510000005" channel="./101/32" name="眼睛提亮" />
-			<target object="510000005" channel="./102/73" name="启用细节" />
-			<target object="510000005" channel="./102/17" name="高频细节平滑" />
-			<target object="510000005" channel="./102/4" name="锐化" />
-			<target object="510000005" channel="./103/72" name="启用脸型" />
-			<target object="510000005" channel="./103/18" name="瘦脸" />
-			<target object="510000005" channel="./103/33" name="大眼" />
-			<target object="510000005" channel="./103/22" name="短脸" />
-			<target object="510000005" channel="./103/23" name="窄脸" />
-			<target object="510000005" channel="./103/24" name="下巴" />
-			<target object="510000005" channel="./103/25" name="V 脸" />
-			<target object="510000005" channel="./103/26" name="下颌" />
-			<target object="510000005" channel="./103/27" name="颧骨" />
-			<target object="510000005" channel="./103/28" name="小头" />
-			<target object="510000005" channel="./103/29" name="小头范围" />
-			<target object="510000005" channel="./104/20" name="只处理选中人脸" />
-			<target object="510000005" channel="./104/21" name="选脸位置" />
-			<target object="510000005" channel="./104/39" name="多人高速模式" />
-			<target object="510000005" channel="./104/40" name="防跳脸范围" />
-			<target object="510000005" channel="./104/45" name="使用跟踪数据" />
-			<target object="510000005" channel="./104/46" name="跟踪目标" />
-			<target object="510000005" channel="./104/50" name="向前分析" />
-			<target object="510000005" channel="./104/51" name="向后分析" />
-			<target object="510000005" channel="./104/52" name="清除当前目标" />
-			<target object="510000005" channel="./104/53" name="跟踪状态" />
-			<target object="510000005" channel="./104/19" name="显示人脸框" />
-			<target object="510000005" channel="./104/35" name="显示跟踪框" />
-			<target object="510000005" channel="./105/7" name="蒙版阈值" />
-			<target object="510000005" channel="./105/8" name="蒙版柔度" />
-			<target object="510000005" channel="./105/9" name="边缘保护" />
-			<target object="510000005" channel="./105/10" name="预览蒙版" />
-			<target object="510000005" channel="./105/43" name="反转蒙版" />
-			<target object="510000005" channel="./105/44" name="蒙版通道" />
-			<target object="510000005" channel="./105/5" name="整体混合" />
 		</publishSettings>
 		<currentFrame>0 1 1 0</currentFrame>
 		<currentObject>510000001</currentObject>
@@ -298,72 +253,81 @@
 					<parameter name="Width" id="313" flags="8589934610" default="1" value="1920" />
 					<parameter name="Height" id="314" flags="8589934610" default="1" value="1080" />
 				</parameter>
-				<filter name="大鱼人像美化" id="510000005" factoryID="6" pluginUUID="FB14B0E6-59B2-4836-916F-CD0C559E9241" pluginVersion="1.0.5" pluginName="大鱼人像美化" pluginDynamicParams="0">
+				<filter name="大鱼人像美化" id="510000005" factoryID="6" pluginUUID="FB14B0E6-59B2-4836-916F-CD0C559E9241" pluginVersion="1.1.2" pluginName="大鱼人像美化" pluginDynamicParams="0">
 					<timing in="0 1 1 0" out="299 30 1 0" offset="0 1 1 0" />
 					<baseFlags>8589934608</baseFlags>
+					<parameter name="" id="210" flags="12901679104">
+						<numberOfKeypoints>1</numberOfKeypoints>
+						<keypoint>
+							<time>0 0 0 0</time>
+							<value />
+						</keypoint>
+						<defaultVal>********-4QeMb-gOLBoA11I*E61-*I4-klM75NZQbBdPqtN743mMqVdRaJmJ0FoPr-M74xWOaJXR5AG**44c3wE1otHGqJtNKF-QaBcOLNZQh660Ec9L2FVR437QolZNq3XSJwE1o7gOKtYF43oMIxWOaJXR6*0U*4X1EsDJGFiRKlgHl21dq7kP4ZnR1*kp*20*kE3-UQ8K0FqNL7nOKxiKGFVQaBcOLNZQZEYR4xkK0FjMadZMrFn2U*-Ve-T2*xCIohZSKJYEL7XO4ZqNL9F0*ZPErJnR4xh62FVR44**OwE8EgA3pZOKplRLZxUMK7XN4JaNqVdOahgPKtjQ53mQrFpRbRsSLdvUMG5JGFiRKlgpEoC1l*F2VAI3FNKRa3gRKJnJWFXP43nQpNZN4ZoNKFKQqBcNKpVK4FdQq3WP4JYU*8*8*UE*M*aolUN1VctK3RCImtfNLZnKYtH9axWOaJXR5Cj2-sP5-oS5m*V6WAY7GMb80Ye8mkh9WwkAH6nB1IqBnW**s*2U*K*-c*5U*W*0M*8U*i*16*BU*u*1s*EU-4*2c*HU-G*3M*KU-S*46*NU-e*4s*QU-q*5c*TU00j2-suCnguCncuCXd1CncuCXcuCXcuCncvCXcuCXdJCXe*6M*WU08*6M*WU04*6M*VU04*6s*WU04*6M*VU04*6M*VU04*6M*WU04*6c*VU04*6M*VU04*76*VU04*7F*d2-sEFl*P2*IE6l*M2*6E6-*c22ME2V*R2-cE1l*22-QE1-*e22UE5l*-20QE5-*F2-YE1V*1202E3WA**********0Azw********0AzzAnAk****0B*6********B7wTLtzKWFXP43nQqtVPKJM74BgMLBnNLBQHZB2OKBoOKxiML7tcbu*K2tHHq7eNKBooVYCUcCUU0TGT5q3VZJCIpBZR883UB7wTMW7Ll*EI2R7PbBkNKBoPr7HR43oNO88U3wE23-5GKtnQ4JXR4xmIrFVR4I*0**F*-c*7**d*16*Bk-7*2k*K*-O*6M*X*0L*7s*dE0g*9A*j*0y*A**kE11*AI*n*1I*Bw-**20*EE--U26*Ec-1*2C*F*-2U2I*FM-4*2O*Fk-5U2U*G6-7*2a*GU-8U2g*Gs-A*2m*HE-BU2s*Hc-D*3R*Jw-ME3X*KI-Nk3d*Kg-PE3j*L2-Qk3p*LQ-SE3v*Lo-Tk4-*MA-VE45*MY-Wk4B*Mw-YE4H*NI-Zk4N*Ng-bE4T*O2-ck4Z*OQ-eE4f*Oo-fk4l*PA-hE4r*PY-ik4x*Pw-kE51*QI-lk57*Qg-nE5D*R2-ok5J*RQ-s*5d*T6-yk6**Ug03*6V*WE09E6m*XA0BE6u*Y*0Ek76*Zg0LU********6-*********6g*******************7l0**6*-2*4U*Y*0Y*AU*r*2Y*HU-P*4o*Pk-l*5I*SkEa*********U2*********2*******************-0Q*</defaultVal>
+						<dataValue>********-4QeMb-gOLBoA11I*E61-*I4-klM75NZQbBdPqtN743mMqVdRaJmJ0FoPr-M74xWOaJXR5AG**44c3wE1otHGqJtNKF-QaBcOLNZQh660Ec9L2FVR437QolZNq3XSJwE1o7gOKtYF43oMIxWOaJXR6*0U*4X1EsDJGFiRKlgHl21dq7kP4ZnR1*kp*20*kE3-UQ8K0FqNL7nOKxiKGFVQaBcOLNZQZEYR4xkK0FjMadZMrFn2U*-Ve-T2*xCIohZSKJYEL7XO4ZqNL9F0*ZPErJnR4xh62FVR44**OwE8EgA3pZOKplRLZxUMK7XN4JaNqVdOahgPKtjQ53mQrFpRbRsSLdvUMG5JGFiRKlgpEoC1l*F2VAI3FNKRa3gRKJnJWFXP43nQpNZN4ZoNKFKQqBcNKpVK4FdQq3WP4JYU*8*8*UE*M*aolUN1VctK3RCImtfNLZnKYtH9axWOaJXR5Cj2-sP5-oS5m*V6WAY7GMb80Ye8mkh9WwkAH6nB1IqBnW**s*2U*K*-c*5U*W*0M*8U*i*16*BU*u*1s*EU-4*2c*HU-G*3M*KU-S*46*NU-e*4s*QU-q*5c*TU00j2-suCnguCncuCXd1CncuCXcuCXcuCncvCXcuCXdJCXe*6M*WU08*6M*WU04*6M*VU04*6s*WU04*6M*VU04*6M*VU04*6M*WU04*6c*VU04*6M*VU04*76*VU04*7F*d2-sEFl*P2*IE6l*M2*6E6-*c22ME2V*R2-cE1l*22-QE1-*e22UE5l*-20QE5-*F2-YE1V*1202E3WA**********0Azw********0AzzAnAk****0B*6********B7wTLtzKWFXP43nQqtVPKJM74BgMLBnNLBQHZB2OKBoOKxiML7tcbu*K2tHHq7eNKBooVYCUcCUU0TGT5q3VZJCIpBZR883UB7wTMW7Ll*EI2R7PbBkNKBoPr7HR43oNO88U3wE23-5GKtnQ4JXR4xmIrFVR4I*0**F*-c*7**d*16*Bk-7*2k*K*-O*6M*X*0L*7s*dE0g*9A*j*0y*A**kE11*AI*n*1I*Bw-**20*EE--U26*Ec-1*2C*F*-2U2I*FM-4*2O*Fk-5U2U*G6-7*2a*GU-8U2g*Gs-A*2m*HE-BU2s*Hc-D*3R*Jw-ME3X*KI-Nk3d*Kg-PE3j*L2-Qk3p*LQ-SE3v*Lo-Tk4-*MA-VE45*MY-Wk4B*Mw-YE4H*NI-Zk4N*Ng-bE4T*O2-ck4Z*OQ-eE4f*Oo-fk4l*PA-hE4r*PY-ik4x*Pw-kE51*QI-lk57*Qg-nE5D*R2-ok5J*RQ-s*5d*T6-yk6**Ug03*6V*WE09E6m*XA0BE6u*Y*0Ek76*Zg0LU********6-*********6g*******************7l0**6*-2*4U*Y*0Y*AU*r*2Y*HU-P*4o*Pk-l*5I*SkEa*********U2*********2*******************-0Q*</dataValue>
+					</parameter>
 					<parameter name="磨皮" id="100" flags="8589938704">
-						<parameter name="启用磨皮" id="70" flags="12901679120" default="1" value="1" />
+						<parameter name="启用磨皮" id="70" flags="12905938976" default="1" value="1" />
-						<parameter name="磨皮强度" id="1" flags="12901679120" default="1" value="1" />
+						<parameter name="磨皮强度" id="1" flags="12905938976" default="1" value="1" />
-						<parameter name="中频磨皮" id="12" flags="12901679120" default="0" value="0.5" />
+						<parameter name="中频磨皮" id="12" flags="12905938976" default="0" value="0.5" />
-						<parameter name="磨皮半径" id="3" flags="12901679120" default="8" value="8" />
+						<parameter name="磨皮半径" id="3" flags="12905938976" default="8" value="8" />
-						<parameter name="保护五官" id="30" flags="12901679120" default="1" value="1" />
+						<parameter name="保护五官" id="30" flags="12905938976" default="1" value="1" />
 					</parameter>
 					<parameter name="肤色" id="101" flags="8589938704">
-						<parameter name="启用肤色" id="71" flags="12901679120" default="1" value="1" />
+						<parameter name="启用肤色" id="71" flags="12905938976" default="1" value="1" />
 						<parameter name="肤色风格" id="42" flags="12901744656" default="0" value="0" />
-						<parameter name="肤色提亮" id="2" flags="12901679120" default="0" value="0" />
+						<parameter name="肤色提亮" id="2" flags="12905938976" default="0" value="0" />
-						<parameter name="肤色色相" id="14" flags="12901679120" default="0" value="0" />
+						<parameter name="肤色色相" id="14" flags="12905938976" default="0" value="0" />
-						<parameter name="肤色饱和度" id="15" flags="12901679120" default="0" value="0" />
+						<parameter name="肤色饱和度" id="15" flags="12905938976" default="0" value="0" />
-						<parameter name="均匀肤色" id="41" flags="12901679120" default="0" value="0" />
+						<parameter name="均匀肤色" id="41" flags="12905938976" default="0" value="0" />
-						<parameter name="牙齿美白" id="31" flags="12901679120" default="0" value="0" />
+						<parameter name="牙齿美白" id="31" flags="12905938976" default="0" value="0" />
-						<parameter name="眼睛提亮" id="32" flags="12901679120" default="0" value="0" />
+						<parameter name="眼睛提亮" id="32" flags="12905938976" default="0" value="0" />
 					</parameter>
 					<parameter name="细节" id="102" flags="8589938704">
-						<parameter name="启用细节" id="73" flags="12901679120" default="1" value="1" />
+						<parameter name="启用细节" id="73" flags="12905938976" default="1" value="1" />
-						<parameter name="高频细节平滑" id="17" flags="12901679120" default="0" value="0" />
+						<parameter name="高频细节平滑" id="17" flags="12905938976" default="0" value="0" />
-						<parameter name="锐化" id="4" flags="12901679120" default="0" value="0" />
+						<parameter name="锐化" id="4" flags="12905938976" default="0" value="0" />
 					</parameter>
 					<parameter name="脸型" id="103" flags="8589938704">
-						<parameter name="启用脸型" id="72" flags="12901679120" default="1" value="1" />
+						<parameter name="启用脸型" id="72" flags="12905938976" default="1" value="1" />
-						<parameter name="瘦脸" id="18" flags="12901679120" default="0" value="0" />
+						<parameter name="瘦脸" id="18" flags="12905938976" default="0" value="0" />
-						<parameter name="大眼" id="33" flags="12901679120" default="0" value="0" />
+						<parameter name="大眼" id="33" flags="12905938976" default="0" value="0" />
-						<parameter name="短脸" id="22" flags="12901679120" default="0" value="0" />
+						<parameter name="短脸" id="22" flags="12905938976" default="0" value="0" />
-						<parameter name="窄脸" id="23" flags="12901679120" default="0" value="0" />
+						<parameter name="窄脸" id="23" flags="12905938976" default="0" value="0" />
-						<parameter name="下巴" id="24" flags="12901679120" default="0" value="0" />
+						<parameter name="下巴" id="24" flags="12905938976" default="0" value="0" />
-						<parameter name="V 脸" id="25" flags="12901679120" default="0" value="0" />
+						<parameter name="V 脸" id="25" flags="12905938976" default="0" value="0" />
-						<parameter name="下颌" id="26" flags="12901679120" default="0" value="0" />
+						<parameter name="下颌" id="26" flags="12905938976" default="0" value="0" />
-						<parameter name="颧骨" id="27" flags="12901679120" default="0" value="0" />
+						<parameter name="颧骨" id="27" flags="12905938976" default="0" value="0" />
-						<parameter name="小头" id="28" flags="12901679120" default="0" value="0" />
+						<parameter name="小头" id="28" flags="12905938976" default="0" value="0" />
-						<parameter name="小头范围" id="29" flags="12901679120" default="0" value="0" />
+						<parameter name="小头范围" id="29" flags="12905938976" default="0" value="0" />
 					</parameter>
 					<parameter name="人脸选择与跟踪" id="104" flags="8589938704">
-						<parameter name="只处理选中人脸" id="20" flags="12901679120" default="0" value="0" />
+						<parameter name="只处理选中人脸" id="20" flags="12905938976" default="0" value="0" />
-						<parameter name="选脸位置" id="21" flags="12901683200">
+						<parameter name="选脸位置" id="21" flags="12905943072">
 							<foldFlags>15</foldFlags>
-							<parameter name="X" id="1" flags="12901679120" default="0.5" value="0.5" />
+							<parameter name="X" id="1" flags="12905938976" default="0.5" value="0.5" />
-							<parameter name="Y" id="2" flags="12901679120" default="0.5" value="0.5" />
+							<parameter name="Y" id="2" flags="12905938976" default="0.5" value="0.5" />
 						</parameter>
-						<parameter name="多人高速模式" id="39" flags="12901679120" default="0" value="0" />
+						<parameter name="多人高速模式" id="39" flags="12905938976" default="0" value="0" />
-						<parameter name="防跳脸范围" id="40" flags="12901679120" default="1.8" value="1.8" />
+						<parameter name="防跳脸范围" id="40" flags="12905938976" default="1.8" value="1.8" />
-						<parameter name="使用跟踪数据" id="45" flags="12901679120" default="0" value="0" />
+						<parameter name="使用跟踪数据" id="45" flags="12905938976" default="0" value="0" />
 						<parameter name="跟踪目标" id="46" flags="12901744656" default="0" value="0" />
 						<parameter name="向前分析" id="50" />
 						<parameter name="向后分析" id="51" />
 						<parameter name="清除当前目标" id="52" />
-						<parameter name="跟踪状态" id="53" flags="12889161760">
+						<parameter name="跟踪状态" id="53" flags="12905938976">
 							<text>选择画面中的人脸后开始分析</text>
 						</parameter>
-						<parameter name="显示人脸框" id="19" flags="12901679120" default="0" value="0" />
+						<parameter name="显示人脸框" id="19" flags="12905938976" default="0" value="0" />
-						<parameter name="显示跟踪框" id="35" flags="12901679120" default="0" value="0" />
+						<parameter name="显示跟踪框" id="35" flags="12905938976" default="0" value="0" />
 					</parameter>
 					<parameter name="蒙版与输出" id="105" flags="8589938704">
-						<parameter name="蒙版阈值" id="7" flags="12901679120" default="148" value="148" />
+						<parameter name="蒙版阈值" id="7" flags="12905938976" default="148" value="148" />
-						<parameter name="蒙版柔度" id="8" flags="12901679120" default="0.6" value="0.6" />
+						<parameter name="蒙版柔度" id="8" flags="12905938976" default="0.6" value="0.6" />
-						<parameter name="边缘保护" id="9" flags="12901679120" default="0.4" value="0.4" />
+						<parameter name="边缘保护" id="9" flags="12905938976" default="0.4" value="0.4" />
-						<parameter name="预览蒙版" id="10" flags="12901679120" default="0" value="0" />
+						<parameter name="预览蒙版" id="10" flags="12905938976" default="0" value="0" />
-						<parameter name="反转蒙版" id="43" flags="12901679120" default="0" value="0" />
+						<parameter name="反转蒙版" id="43" flags="12905938976" default="0" value="0" />
 						<parameter name="蒙版通道" id="44" flags="12901744656" default="0" value="0" />
-						<parameter name="整体混合" id="5" flags="12901679120" default="1" value="1" />
+						<parameter name="整体混合" id="5" flags="12905938976" default="1" value="1" />
 					</parameter>
 					<parameter name="分析数据" id="60" flags="12905938976">
 						<text />
@@ -377,7 +341,7 @@
 					<parameter name="混合" id="10001" flags="12884901888" default="1" value="1" />
 					<parameter name="Flip" id="10002" flags="12889161760" default="0" value="0" />
 					<parameter name="Input Points" id="10003" flags="12889161760" default="1" value="1" />
-					<parameter name="发布 OSC" id="10005" flags="12901679104" default="0" value="1" />
+					<parameter name="发布 OSC" id="10005" flags="12901679104" default="0" value="0" />
 				</filter>
 			</scenenode>
 			<aspectRatio>1</aspectRatio>

beatygril/beatygril.xcodeproj/project.pbxproj

@@ -63,11 +63,13 @@
 				"/Localized: Plugin/InfoPlist.strings",
 				"/Localized: Plugin/Localizable.strings",
 				Plugin/beatygrilPlugIn.m,
+				Plugin/Info.plist,
+				Plugin/main.m,
 				Plugin/PGBeautyRenderer.m,
 				Plugin/PGFaceProcessor.m,
 				Plugin/PGFaceSelectOSC.m,
-				Plugin/Info.plist,
+				Plugin/PGInspectorState.m,
-				Plugin/main.m,
+				Plugin/PGInspectorView.m,
 				"Wrapper Application/Info.plist",
 			);
 			target = 6945FC8A3088B7220013E108 /* Wrapper Application */;
@@ -306,11 +308,11 @@
 		6945FCCD3088B7220013E108 /* Debug configuration for PBXNativeTarget "XPC Service" */ = {
 			isa = XCBuildConfiguration;
 			buildSettings = {
-				CODE_SIGN_STYLE = Manual;
-				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
 				CODE_SIGN_IDENTITY = "Developer ID Application";
-				ENABLE_HARDENED_RUNTIME = YES;
+				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
+				CODE_SIGN_STYLE = Manual;
 				DEVELOPMENT_TEAM = B3W25FX5H5;
+				ENABLE_HARDENED_RUNTIME = YES;
 				ENABLE_USER_SCRIPT_SANDBOXING = NO;
 				GCC_PRECOMPILE_PREFIX_HEADER = YES;
 				INFOPLIST_FILE = beatygril/Plugin/Info.plist;
@@ -329,11 +331,11 @@
 		6945FCCE3088B7220013E108 /* Release configuration for PBXNativeTarget "XPC Service" */ = {
 			isa = XCBuildConfiguration;
 			buildSettings = {
-				CODE_SIGN_STYLE = Manual;
-				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
 				CODE_SIGN_IDENTITY = "Developer ID Application";
-				ENABLE_HARDENED_RUNTIME = YES;
+				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
+				CODE_SIGN_STYLE = Manual;
 				DEVELOPMENT_TEAM = B3W25FX5H5;
+				ENABLE_HARDENED_RUNTIME = YES;
 				ENABLE_USER_SCRIPT_SANDBOXING = NO;
 				GCC_PRECOMPILE_PREFIX_HEADER = YES;
 				INFOPLIST_FILE = beatygril/Plugin/Info.plist;
@@ -353,11 +355,11 @@
 			isa = XCBuildConfiguration;
 			buildSettings = {
 				CODE_SIGN_ENTITLEMENTS = "beatygril/Wrapper Application/SandboxEntitlements.entitlements";
-				CODE_SIGN_STYLE = Manual;
-				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
 				CODE_SIGN_IDENTITY = "Developer ID Application";
-				ENABLE_HARDENED_RUNTIME = YES;
+				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
+				CODE_SIGN_STYLE = Manual;
 				DEVELOPMENT_TEAM = B3W25FX5H5;
+				ENABLE_HARDENED_RUNTIME = YES;
 				GCC_PRECOMPILE_PREFIX_HEADER = YES;
 				INFOPLIST_FILE = "beatygril/Wrapper Application/Info.plist";
 				PRODUCT_BUNDLE_IDENTIFIER = com.dayu.beatygril;
@@ -370,11 +372,11 @@
 			isa = XCBuildConfiguration;
 			buildSettings = {
 				CODE_SIGN_ENTITLEMENTS = "beatygril/Wrapper Application/SandboxEntitlements.entitlements";
-				CODE_SIGN_STYLE = Manual;
-				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
 				CODE_SIGN_IDENTITY = "Developer ID Application";
-				ENABLE_HARDENED_RUNTIME = YES;
+				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
+				CODE_SIGN_STYLE = Manual;
 				DEVELOPMENT_TEAM = B3W25FX5H5;
+				ENABLE_HARDENED_RUNTIME = YES;
 				GCC_PRECOMPILE_PREFIX_HEADER = YES;
 				INFOPLIST_FILE = "beatygril/Wrapper Application/Info.plist";
 				PRODUCT_BUNDLE_IDENTIFIER = com.dayu.beatygril;
@@ -387,9 +389,11 @@
 			isa = XCBuildConfiguration;
 			buildSettings = {
 				ADDITIONAL_SDKS = /Library/Developer/SDKs/FxPlug.sdk;
-				ARCHS = "arm64 x86_64";
-				ONLY_ACTIVE_ARCH = NO;
 				ALWAYS_SEARCH_USER_PATHS = NO;
+				ARCHS = (
+					arm64,
+					x86_64,
+				);
 				ASSETCATALOG_COMPILER_GENERATE_SWIFT_ASSET_SYMBOL_EXTENSIONS = YES;
 				CLANG_ANALYZER_NONNULL = YES;
 				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
@@ -448,6 +452,7 @@
 				MACOSX_DEPLOYMENT_TARGET = 13.0;
 				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
 				MTL_FAST_MATH = YES;
+				ONLY_ACTIVE_ARCH = NO;
 				SDKROOT = macosx;
 				SWIFT_VERSION = 5;
 			};
@@ -457,9 +462,11 @@
 			isa = XCBuildConfiguration;
 			buildSettings = {
 				ADDITIONAL_SDKS = /Library/Developer/SDKs/FxPlug.sdk;
-				ARCHS = "arm64 x86_64";
-				ONLY_ACTIVE_ARCH = NO;
 				ALWAYS_SEARCH_USER_PATHS = NO;
+				ARCHS = (
+					arm64,
+					x86_64,
+				);
 				ASSETCATALOG_COMPILER_GENERATE_SWIFT_ASSET_SYMBOL_EXTENSIONS = YES;
 				CLANG_ANALYZER_NONNULL = YES;
 				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
@@ -512,6 +519,7 @@
 				MACOSX_DEPLOYMENT_TARGET = 13.0;
 				MTL_ENABLE_DEBUG_INFO = NO;
 				MTL_FAST_MATH = YES;
+				ONLY_ACTIVE_ARCH = NO;
 				SDKROOT = macosx;
 				SWIFT_VERSION = 5;
 			};

beatygril/beatygril/Plugin/Info.plist

@@ -17,9 +17,9 @@
 	<key>CFBundlePackageType</key>
 	<string>XPC!</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.0.5</string>
+	<string>1.1.2</string>
 	<key>CFBundleVersion</key>
-	<string>7</string>
+	<string>13</string>
 	<key>NSHumanReadableCopyright</key>
 	<string></string>
 	<key>PlugInKit</key>
@@ -72,7 +72,7 @@
 			<key>uuid</key>
 			<string>FB14B0E6-59B2-4836-916F-CD0C559E9241</string>
 			<key>version</key>
-			<string>1.0.5</string>
+			<string>1.1.2</string>
 		</dict>
 		<dict>
 			<key>className</key>
@@ -84,7 +84,7 @@
 			<key>uuid</key>
 			<string>E0E432C8-3D71-4ABA-B006-E7F519E06C87</string>
 			<key>version</key>
-			<string>1.0.5</string>
+			<string>1.1.2</string>
 			<key>protocolNames</key>
 			<array>
 				<string>FxOnScreenControl</string>

beatygril/beatygril/Plugin/PGFaceProcessor.m

@@ -13,6 +13,9 @@ static const uint8_t PGThinPins[17][2] = {
     {72,48},{62,48},{71,48},{63,48},{70,49},{64,49},
     {69,49},{65,49},{68,52},{66,52},{67,47}
 };
+static const uint8_t PGChinPins[3][2] = {{68,38},{67,37},{66,36}};
+// Origin and radius neighbour; all six directions point toward landmark 29.
+static const uint8_t PGJawPins[6][2] = {{72,71},{62,63},{71,70},{63,64},{70,71},{64,63}};
 
 @interface PGFaceFrame ()
 @property (nonatomic, copy, readwrite) NSArray<VNFaceObservation *> *faces;
@@ -124,7 +127,8 @@ static NSDictionary *PGSanitizedGeometry(id value) {
         result[name] = points;
     }
     // Old archives and partially detected faces remain usable by the other
-    // controls. Missing or malformed full topology only disables local thinning.
+    // controls. Missing or malformed full topology disables the recovered local
+    // thin/chin/jaw/short fields without discarding otherwise usable old records.
     NSArray *points76 = PGSanitizedPoints76(value[@"points76"]);
     if (points76) result[@"points76"] = points76;
     return [result copy];
@@ -343,8 +347,11 @@ static NSDictionary *PGStableGeometry(NSDictionary *current, NSDictionary *previ
         _lock = [[NSLock alloc] init];
         _realtime = [PGRealtimeFaceTracker new];
         _targets = [NSMutableArray arrayWithObjects:[NSMutableDictionary dictionary], [NSMutableDictionary dictionary], [NSMutableDictionary dictionary], nil];
-        // Local thinning reconstructs the recovered 17-pin coordinate math.
+        // Thin/chin/jaw/short reconstruct the recovered local coordinate math.
-        // The other eight controls retain this project's analytic approximation.
+        // The other five controls retain this project's analytic approximation.
+        // Recovered jaw -> chin -> short order follows the reference. The other
+        // analytic body controls still precede jaw, so the full combined chain
+        // (narrow/V/cheek/small-head/eyes) is not claimed reference-equivalent.
         // Each pin changes the sampling coordinate, with only one image resample.
         NSMutableString *source = [NSMutableString stringWithString:
         @"vec2 pgThinPin(vec2 q, vec4 control, float ratio) {"
@@ -352,8 +359,24 @@ static NSDictionary *PGStableGeometry(NSDictionary *current, NSDictionary *previ
         " if(radius<=0.0001) return q;"
         " float weight=clamp(1.0-length(q-control.xy)/radius,0.0,1.0);"
         " return clamp(q-direction*ratio*weight,vec2(0.0),vec2(1.0)); }"
-        " kernel vec2 pgFaceWarp(vec2 c, vec2 size, vec2 le, vec2 re, vec2 er, float thinRatio, float bigEye, float shortFace, float narrow, float chin, float vFace, float jaw, float cheek, float smallHead, float headRange, vec2 imageOrigin, vec2 imageSize"];
+        " vec2 pgJawPin(vec2 q, vec4 edge, vec2 anchor, float ratio) {"
+        " float radius=length(edge.xy-edge.zw); if(radius<=0.0001) return q;"
+        " float weight=clamp(1.0-length(q-edge.xy)/radius,0.0,1.0);"
+        " return clamp(q-(anchor-edge.xy)*ratio*weight,vec2(0.0),vec2(1.0)); }"
+        " vec2 pgShortEdge(vec2 q, vec2 a, vec2 b) {"
+        " vec2 d=b-a; float squared=dot(d,d);"
+        " float t=0.0; if(squared>0.000001) t=clamp(dot(q-a,d)/squared,0.0,1.0);"
+        " float distance=length(q-(a+t*d)); float crossing=0.0;"
+        " if((a.y>q.y && b.y<=q.y) || (b.y>q.y && a.y<=q.y)) {"
+        " float dy=b.y-a.y; if(abs(dy)<=0.000001) dy=dy<0.0?-0.000001:0.000001;"
+        " if(q.x<a.x+(b.x-a.x)*(q.y-a.y)/dy) crossing=1.0; }"
+        " return vec2(distance,crossing); }"
+        " kernel vec2 pgFaceWarp(vec2 c, vec2 size, vec2 le, vec2 re, vec2 er, float thinRatio, float bigEye, float shortRatio, float narrow, float chinRatio, float vFace, float jawRatio, float cheek, float smallHead, float headRange, vec2 imageOrigin, vec2 imageSize"];
         for (NSUInteger i=0; i<17; i++) [source appendFormat:@", vec4 pin%lu",(unsigned long)i];
+        for (NSUInteger i=0; i<3; i++) [source appendFormat:@", vec4 chinPin%lu",(unsigned long)i];
+        [source appendString:@", vec2 jawAnchor, vec2 shortAxis"];
+        for (NSUInteger i=0; i<6; i++) [source appendFormat:@", vec4 jawPin%lu",(unsigned long)i];
+        for (NSUInteger i=0; i<11; i++) [source appendFormat:@", vec2 shortPoint%lu",(unsigned long)i];
         [source appendString:@") { vec2 p=destCoord();"
         " if(thinRatio>0.000001) { vec2 q=(p-imageOrigin)/imageSize; q.y=1.0-q.y;"];
         for (NSUInteger i=0; i<17; i++) [source appendFormat:@" q=pgThinPin(q,pin%lu,thinRatio);",(unsigned long)i];
@@ -366,8 +389,21 @@ static NSDictionary *PGStableGeometry(NSDictionary *current, NSDictionary *previ
         " float ch=(n.y-0.02)/0.19; float cheekBand = exp(-ch*ch)*body;"
         " float head = 1.0-smoothstep(0.38,0.75+0.32*headRange,length(n*vec2(0.9,0.65)));"
         " p += (p-c)*smallHead*0.18*head;"
-        " p.x += size.x*n.x*(narrow*0.30*body + vFace*0.24*jawBand + jaw*0.20*jawBand + cheek*0.18*cheekBand)*sides;"
+        " p.x += size.x*n.x*(narrow*0.30*body + vFace*0.24*jawBand + cheek*0.18*cheekBand)*sides;"
-        " float cn=n.x/0.30; p.y += size.y*(-shortFace*0.16*lower + chin*0.13*exp(-cn*cn)*jawBand - vFace*0.025*lower);"
+        " p.y += size.y*(-vFace*0.025*lower);"
+        " if(abs(jawRatio)>0.000001) { vec2 q=(p-imageOrigin)/imageSize; q.y=1.0-q.y;"];
+        for (NSUInteger i=0; i<6; i++) [source appendFormat:@" q=pgJawPin(q,jawPin%lu,jawAnchor,jawRatio);",(unsigned long)i];
+        [source appendString:@" q.y=1.0-q.y; p=imageOrigin+q*imageSize; }"
+        " if(abs(chinRatio)>0.000001) { vec2 q=(p-imageOrigin)/imageSize; q.y=1.0-q.y;"];
+        for (NSUInteger i=0; i<3; i++) [source appendFormat:@" q=pgThinPin(q,chinPin%lu,chinRatio);",(unsigned long)i];
+        [source appendString:@" q.y=1.0-q.y; p=imageOrigin+q*imageSize; }"
+        " if(abs(shortRatio)>0.000001 && length(shortAxis)>0.0001) {"
+        " vec2 q=(p-imageOrigin)/imageSize; q.y=1.0-q.y;"
+        " float nearest=10.0; float crossings=0.0;"];
+        for (NSUInteger i=0; i<11; i++) [source appendFormat:@" { vec2 edge=pgShortEdge(q,shortPoint%lu,shortPoint%lu); nearest=min(nearest,edge.x); crossings+=edge.y; }",(unsigned long)i,(unsigned long)((i+1)%11)];
+        [source appendString:@" float weight=mod(crossings,2.0)>0.5?1.0:clamp(1.0-nearest/length(shortAxis),0.0,1.0);"
+        " q=clamp(q-shortAxis*shortRatio*weight,vec2(0.0),vec2(1.0));"
+        " q.y=1.0-q.y; p=imageOrigin+q*imageSize; }"
         " vec2 dl = (p-le)/er; float wl = 1.0-smoothstep(0.0,1.0,length(dl));"
         " p -= (p-le)*bigEye*0.33*wl*wl;"
         " vec2 dr = (p-re)/er; float wr = 1.0-smoothstep(0.0,1.0,length(dr));"
@@ -491,7 +527,7 @@ static NSDictionary *PGStableGeometry(NSDictionary *current, NSDictionary *previ
     for (NSDictionary *face in geometry) {
         CGRect box = PGArrayRect(face[@"box"]), pixels = PGToPixels(box, extent);
         NSArray *points76 = PGSanitizedPoints76(face[@"points76"]);
-        float thinRatio = 0;
+        float thinRatio = 0, chinRatio = 0, jawRatio = 0, shortRatio = 0;
         if (points76) {
             double width = hypot(([points76[75][0] doubleValue]-[points76[59][0] doubleValue])*extent.size.width,
                                  ([points76[75][1] doubleValue]-[points76[59][1] doubleValue])*extent.size.height);
@@ -501,19 +537,23 @@ static NSDictionary *PGStableGeometry(NSDictionary *current, NSDictionary *previ
                                     ([points76[67][1] doubleValue]-midY)*extent.size.height);
             double gain = fmin(2.25,fmax(1,280/fmax(1,fmax(width,height))));
             thinRatio = PGClamp(s.faceThin,0,1)*.025*gain;
+            float chin = PGClamp(s.faceChin,-1,1);
+            chinRatio = chin*(chin>0 ? .04 : .02)*gain;
+            jawRatio = PGClamp(s.faceJaw,0,1)*.05*gain;
+            shortRatio = PGClamp(s.faceShort,-1,1)*.25*gain;
         }
-        BOOL otherControls = s.faceBigEye || s.faceShort || s.faceNarrow || s.faceChin || s.faceV || s.faceJaw || s.faceCheekbone || s.faceSmallHead;
+        BOOL otherControls = s.faceBigEye || s.faceNarrow || s.faceV || s.faceCheekbone || s.faceSmallHead;
-        // No full topology means no guessed bbox thinning. In particular, legacy
+        // No full topology means no guessed bbox thin/chin/jaw/short deformation. Legacy
-        // archives with thinning alone remain an exact image/mask pass-through.
+        // archives using only those controls remain exact image/mask pass-through.
-        if (thinRatio <= .000001 && !otherControls) continue;
+        if (thinRatio <= .000001 && fabsf(chinRatio) <= .000001 && fabsf(jawRatio) <= .000001 && fabsf(shortRatio) <= .000001 && !otherControls) continue;
         CGRect le = PGRegionBounds(face, @"leftEye", PGInFace(box, 0.16, 0.53, 0.25, 0.15));
         CGRect re = PGRegionBounds(face, @"rightEye", PGInFace(box, 0.59, 0.53, 0.25, 0.15));
         CGPoint left = PGCenter(PGToPixels(le, extent)), right = PGCenter(PGToPixels(re, extent));
         NSMutableArray *arguments = [@[PGVector(PGCenter(pixels)), [CIVector vectorWithX:pixels.size.width Y:pixels.size.height],
             PGVector(left), PGVector(right), [CIVector vectorWithX:MAX(2, pixels.size.width * 0.24) Y:MAX(2, pixels.size.height * 0.17)],
-            @(thinRatio), @(PGClamp(s.faceBigEye, 0, 1)), @(PGClamp(s.faceShort, -1, 1)),
+            @(thinRatio), @(PGClamp(s.faceBigEye, 0, 1)), @(shortRatio),
-            @(PGClamp(s.faceNarrow, -1, 1)), @(PGClamp(s.faceChin, -1, 1)), @(PGClamp(s.faceV, 0, 1)),
+            @(PGClamp(s.faceNarrow, -1, 1)), @(chinRatio), @(PGClamp(s.faceV, 0, 1)),
-            @(PGClamp(s.faceJaw, 0, 1)), @(PGClamp(s.faceCheekbone, 0, 1)), @(PGClamp(s.faceSmallHead, 0, 1)), @(PGClamp(s.faceSmallHeadRange, 0, 1)),
+            @(jawRatio), @(PGClamp(s.faceCheekbone, 0, 1)), @(PGClamp(s.faceSmallHead, 0, 1)), @(PGClamp(s.faceSmallHeadRange, 0, 1)),
             [CIVector vectorWithX:extent.origin.x Y:extent.origin.y], [CIVector vectorWithX:extent.size.width Y:extent.size.height]] mutableCopy];
         for (NSUInteger i=0; i<17; i++) {
             double ox=0,oy=0,ax=0,ay=0;
@@ -524,6 +564,32 @@ static NSDictionary *PGStableGeometry(NSDictionary *current, NSDictionary *previ
             }
             [arguments addObject:[CIVector vectorWithX:ox Y:oy Z:ax W:ay]];
         }
+        for (NSUInteger i=0; i<3; i++) {
+            double ox=0,oy=0,ax=0,ay=0;
+            if (points76) {
+                NSArray *origin=points76[PGChinPins[i][0]],*anchor=points76[PGChinPins[i][1]];
+                ox=[origin[0] doubleValue];oy=1-[origin[1] doubleValue];
+                ax=[anchor[0] doubleValue];ay=1-[anchor[1] doubleValue];
+            }
+            [arguments addObject:[CIVector vectorWithX:ox Y:oy Z:ax W:ay]];
+        }
+        CGPoint anchor=CGPointZero,axis=CGPointZero;
+        if(points76){
+            anchor=CGPointMake([points76[29][0]doubleValue],1-[points76[29][1]doubleValue]);
+            axis=CGPointMake([points76[46][0]doubleValue]-[points76[48][0]doubleValue],
+                             [points76[48][1]doubleValue]-[points76[46][1]doubleValue]);
+        }
+        [arguments addObject:PGVector(anchor)];[arguments addObject:PGVector(axis)];
+        for(NSUInteger i=0;i<6;i++){
+            double ox=0,oy=0,nx=0,ny=0;
+            if(points76){NSArray *origin=points76[PGJawPins[i][0]],*neighbour=points76[PGJawPins[i][1]];
+                ox=[origin[0]doubleValue];oy=1-[origin[1]doubleValue];nx=[neighbour[0]doubleValue];ny=1-[neighbour[1]doubleValue];}
+            [arguments addObject:[CIVector vectorWithX:ox Y:oy Z:nx W:ny]];
+        }
+        for(NSUInteger i=62;i<=72;i++){
+            CGPoint point=CGPointZero;if(points76)point=CGPointMake([points76[i][0]doubleValue],1-[points76[i][1]doubleValue]);
+            [arguments addObject:PGVector(point)];
+        }
         CIImage *input = [result imageByClampingToExtent];
         result = [_warp applyWithExtent:extent roiCallback:^CGRect(int index, CGRect rect) { (void)index; (void)rect; return extent; } inputImage:input arguments:arguments];
         if (!result) return nil;

beatygril/beatygril/Plugin/PGInspectorState.h

@@ -0,0 +1,45 @@
+#import <Foundation/Foundation.h>
+#import <FxPlug/FxPlugSDK.h>
+#import "PGBeautyTypes.h"
+#import "PGParameterIDs.h"
+
+NS_ASSUME_NONNULL_BEGIN
+
+/// The descriptor list is shared by UI, persistence and render settings.
+/// Keys: id, name, section (smooth/color/shape/more), kind
+/// (slider/toggle/preset/master), min, max, default, format, bypass.
+FOUNDATION_EXPORT NSArray<NSDictionary *> *PGInspectorControls(void);
+FOUNDATION_EXPORT NSDictionary * _Nullable PGInspectorDescriptor(UInt32 identifier);
+
+@interface PGInspectorState : NSObject <NSSecureCoding, NSCopying, FxCustomParameterInterpolation_v2>
+@property (nonatomic, copy, readonly) NSDictionary<NSNumber *, NSNumber *> *values;
+@property (nonatomic, copy, readonly) NSSet<NSNumber *> *disabledParameters;
+/// An untouched panel must not replace parameters from an existing document.
+@property (nonatomic, readonly) BOOL hasEdits;
++ (instancetype)stateWithValues:(NSDictionary *)values disabledParameters:(NSSet *)disabled hasEdits:(BOOL)edited;
+- (double)valueForParameter:(UInt32)identifier;
+- (BOOL)isParameterEnabled:(UInt32)identifier;
+@end
+
+FOUNDATION_EXPORT PGBeautySettings PGSettingsWithInspectorState(PGBeautySettings settings, PGInspectorState * _Nullable state);
+
+/// All arbitrary-time FxPlug parameter access is bracketed by host actions.
+/// The published custom object owns the full UI state, so FCP save/undo does
+/// not depend on unpublished parameters being mirrored by the template.
+@interface PGInspectorController : NSObject
+@property (nonatomic, strong, readonly) PGInspectorState *state;
+@property (nonatomic, readonly) BOOL available;
+@property (nonatomic, copy, readonly) NSString *statusMessage;
+/// The actual custom inspector view identifies the action to the native host.
+@property (nonatomic, weak, nullable) NSView *actionSender;
+- (instancetype)initWithAPIManager:(id<PROAPIAccessing>)manager;
+- (void)refresh;
+- (void)documentDidChange;
+- (void)beginInteraction;
+- (void)endInteraction;
+- (BOOL)setValue:(double)value forParameter:(UInt32)identifier;
+- (BOOL)toggleEnabledForParameter:(UInt32)identifier;
+- (BOOL)resetParameter:(UInt32)identifier;
+@end
+
+NS_ASSUME_NONNULL_END

beatygril/beatygril/Plugin/PGInspectorState.m

@@ -0,0 +1,270 @@
+#import "PGInspectorState.h"
+#import <math.h>
+#import <stddef.h>
+#import <os/log.h>
+
+NSArray<NSDictionary *> *PGInspectorControls(void) {
+    static NSArray *controls; static dispatch_once_t once;
+    dispatch_once(&once, ^{
+        PGBeautySettings defaults=PGBeautyDefaults();
+        NSMutableArray *items=[NSMutableArray new];
+#define ITEM(ID,NAME,FIELD,SECTION,KIND,FORMAT,MIN,MAX,BYPASS,STORAGE) \
+        [items addObject:@{@"id":@(ID),@"name":@NAME,@"section":@SECTION,@"kind":@KIND,@"format":@FORMAT,@"min":@(MIN),@"max":@(MAX),@"default":@(defaults.FIELD),@"bypass":@(BYPASS),@"offset":@(offsetof(PGBeautySettings,FIELD)),@"storage":@STORAGE}]
+        ITEM(PGSmoothingEnabled,"磨皮",featureProtection,"smooth","master","integer",0,1,NO,"master");
+        ITEM(PGMidtone,"局部磨皮",midtoneDetail,"smooth","slider","percent",0,1,YES,"float");
+        ITEM(PGHighPass,"全局磨皮",highPassDetail,"smooth","slider","percent",0,1,YES,"float");
+        ITEM(PGFeatureProtect,"五官保护",featureProtection,"smooth","toggle","integer",0,1,NO,"uint");
+        ITEM(PGColorEnabled,"美白",featureProtection,"color","master","integer",0,1,NO,"master");
+        ITEM(PGTonePreset,"肤色",skinTonePreset,"color","preset","integer",0,6,NO,"uint");
+        NSMutableDictionary *preset=[items.lastObject mutableCopy];
+        preset[@"options"]=@[@"原色",@"自然白",@"冷白",@"暖白",@"红润白",@"小麦",@"古铜"];items[items.count-1]=preset;
+        ITEM(PGBrightness,"肤色亮度",skinBrightness,"color","slider","percent",0,1,YES,"float");
+        ITEM(PGTeeth,"白牙",teethWhitening,"color","slider","percent",0,1,YES,"float");
+        ITEM(PGHue,"皮肤色相",skinHue,"color","slider","degrees",-30,30,YES,"float");
+        ITEM(PGShapeEnabled,"瘦脸",featureProtection,"shape","master","integer",0,1,NO,"master");
+        ITEM(PGTrackBoxes,"人脸框预览",showTrackBox,"shape","toggle","integer",0,1,NO,"uint");
+        ITEM(PGFastMulti,"多人模式",fastMultiFace,"shape","toggle","integer",0,1,NO,"uint");
+        ITEM(PGJumpGuard,"防跳脸范围",faceJumpGuardRange,"shape","slider","percent",1,4,NO,"float");
+        ITEM(PGThin,"瘦脸",faceThin,"shape","slider","signed",0,1,YES,"float");
+        ITEM(PGBigEye,"大眼",faceBigEye,"shape","slider","signed",0,1,YES,"float");
+        ITEM(PGShort,"短脸",faceShort,"shape","slider","signed",-1,1,YES,"float");
+        ITEM(PGNarrow,"窄脸",faceNarrow,"shape","slider","signed",-1,1,YES,"float");
+        ITEM(PGChin,"下巴",faceChin,"shape","slider","signed",-1,1,YES,"float");
+        ITEM(PGVFace,"V脸",faceV,"shape","slider","signed",0,1,YES,"float");
+        ITEM(PGJaw,"下颌骨",faceJaw,"shape","slider","signed",0,1,YES,"float");
+        ITEM(PGCheekbone,"颧骨",faceCheekbone,"shape","slider","signed",0,1,YES,"float");
+        ITEM(PGSmallHead,"小头",faceSmallHead,"shape","slider","signed",0,1,YES,"float");
+        ITEM(PGSmallHeadRange,"小头范围",faceSmallHeadRange,"shape","slider","percent",0,1,NO,"float");
+        ITEM(PGAmount,"磨皮强度",amount,"more","slider","percent",0,1,YES,"float");
+        ITEM(PGRadius,"磨皮半径",radius,"more","slider","radius",1,30,NO,"float");
+        ITEM(PGSaturation,"肤色饱和度",skinSaturation,"more","slider","percent",-100,100,YES,"float");
+        ITEM(PGEvenTone,"均匀肤色",skinEvenTone,"more","slider","percent",0,1,YES,"float");
+        ITEM(PGEyeBright,"眼睛提亮",eyeBrightening,"more","slider","percent",0,1,YES,"float");
+        ITEM(PGSharpness,"锐化",sharpness,"more","slider","percent",0,1,YES,"float");
+        ITEM(PGMix,"整体混合",mix,"more","slider","percent",0,1,NO,"float");
+#undef ITEM
+        controls=[items copy];
+    }); return controls;
+}
+NSDictionary *PGInspectorDescriptor(UInt32 identifier) {
+    for(NSDictionary *d in PGInspectorControls()) if([d[@"id"] unsignedIntValue]==identifier) return d;
+    return nil;
+}
+static double PGControlValue(id raw,NSDictionary *d) {
+    double value=[raw isKindOfClass:NSNumber.class]?[raw doubleValue]:[d[@"default"] doubleValue];
+    if(!isfinite(value)) value=[d[@"default"] doubleValue];
+    value=fmin([d[@"max"] doubleValue],fmax([d[@"min"] doubleValue],value));
+    if(![d[@"storage"] isEqual:@"float"]) value=round(value);
+    return value;
+}
+@implementation PGInspectorState
++ (BOOL)supportsSecureCoding {return YES;}
++ (instancetype)stateWithValues:(NSDictionary *)values disabledParameters:(NSSet *)disabled hasEdits:(BOOL)edited {
+    PGInspectorState *state=[self new]; NSMutableDictionary *safe=[NSMutableDictionary new];NSMutableSet *bypassed=[NSMutableSet new];
+    for(NSDictionary *d in PGInspectorControls()) {
+        NSNumber *key=d[@"id"];safe[key]=@(PGControlValue(values[key],d));
+        if([d[@"bypass"] boolValue] && [disabled containsObject:key]) [bypassed addObject:key];
+    }
+    state->_values=[safe copy];state->_disabledParameters=[bypassed copy];state->_hasEdits=edited;return state;
+}
+- (instancetype)init {if((self=[super init])) {_values=@{};_disabledParameters=[NSSet set];}return self;}
+- (instancetype)initWithCoder:(NSCoder *)coder {
+    NSInteger version=[coder decodeIntegerForKey:@"schema"];
+    if(version!=1) return nil;
+    NSSet *classes=[NSSet setWithObjects:NSDictionary.class,NSNumber.class,nil];
+    NSDictionary *values=[coder decodeObjectOfClasses:classes forKey:@"values"];
+    NSSet *disabled=[coder decodeObjectOfClasses:[NSSet setWithObjects:NSSet.class,NSNumber.class,nil] forKey:@"disabled"];
+    return [PGInspectorState stateWithValues:values?:@{} disabledParameters:disabled?:[NSSet set] hasEdits:[coder decodeBoolForKey:@"edited"]];
+}
+- (void)encodeWithCoder:(NSCoder *)coder {
+    [coder encodeInteger:1 forKey:@"schema"];[coder encodeObject:_values forKey:@"values"];
+    [coder encodeObject:_disabledParameters forKey:@"disabled"];[coder encodeBool:_hasEdits forKey:@"edited"];
+}
+- (id)copyWithZone:(NSZone *)zone {return [PGInspectorState stateWithValues:_values disabledParameters:_disabledParameters hasEdits:_hasEdits];}
+- (double)valueForParameter:(UInt32)identifier {NSDictionary *d=PGInspectorDescriptor(identifier);return d?PGControlValue(_values[@(identifier)],d):0;}
+- (BOOL)isParameterEnabled:(UInt32)identifier {return ![_disabledParameters containsObject:@(identifier)];}
+- (BOOL)isEqual:(id)object {
+    if(object==self)return YES;
+    if(![object isKindOfClass:PGInspectorState.class])return NO;
+    PGInspectorState *other=object;return _hasEdits==other.hasEdits && [_values isEqual:other.values] && [_disabledParameters isEqual:other.disabledParameters];
+}
+- (NSUInteger)hash {return _values.hash ^ _disabledParameters.hash ^ _hasEdits;}
+- (NSObject<NSSecureCoding,NSCopying> *)interpolateBetween:(NSObject<NSSecureCoding,NSCopying> *)rightValue withWeight:(float)weight {
+    if(![rightValue isKindOfClass:PGInspectorState.class])return [self copy];
+    PGInspectorState *right=(PGInspectorState *)rightValue;double t=isfinite(weight)?fmin(1,fmax(0,weight)):0;
+    if(t==0)return [self copy];if(t==1)return [right copy];
+    if(!_hasEdits || !right.hasEdits)return [self copy];
+    NSMutableDictionary *values=[NSMutableDictionary new];
+    for(NSDictionary *d in PGInspectorControls()) {
+        UInt32 key=[d[@"id"] unsignedIntValue];double a=[self valueForParameter:key],b=[right valueForParameter:key];
+        // Menus, switches and enable masks hold the preceding key until the
+        // next key. Numeric slider values interpolate within their valid range.
+        values[@(key)]=[d[@"storage"] isEqual:@"float"]?@(a+(b-a)*t):@(a);
+    }
+    return [PGInspectorState stateWithValues:values disabledParameters:_disabledParameters hasEdits:_hasEdits||right.hasEdits];
+}
+@end
+
+PGBeautySettings PGSettingsWithInspectorState(PGBeautySettings s,PGInspectorState *state) {
+    if(!state.hasEdits)return s;
+    for(NSDictionary *d in PGInspectorControls()) {
+        NSString *storage=d[@"storage"];if([storage isEqual:@"master"])continue;
+        UInt32 key=[d[@"id"] unsignedIntValue];double value=[state valueForParameter:key];
+        if(![state isParameterEnabled:key]) value=0;
+        size_t offset=[d[@"offset"] unsignedIntegerValue];
+        if([storage isEqual:@"float"]) *(float *)((uint8_t *)&s+offset)=value;
+        else *(uint32_t *)((uint8_t *)&s+offset)=(uint32_t)value;
+    }
+    if(![state valueForParameter:PGSmoothingEnabled])s.amount=s.midtoneDetail=s.highPassDetail=0;
+    if(![state valueForParameter:PGColorEnabled]) {s.skinBrightness=s.skinHue=s.skinSaturation=s.skinEvenTone=s.teethWhitening=s.eyeBrightening=0;s.skinTonePreset=0;}
+    if(![state valueForParameter:PGShapeEnabled]) {s.faceThin=s.faceBigEye=s.faceShort=s.faceNarrow=s.faceChin=s.faceV=s.faceJaw=s.faceCheekbone=s.faceSmallHead=0;s.showTrackBox=0;}
+    return s;
+}
+
+@interface PGInspectorController ()
+@property (nonatomic,strong,readwrite) PGInspectorState *state;
+@property (nonatomic,readwrite) BOOL available;
+@property (nonatomic,copy,readwrite) NSString *statusMessage;
+@property (nonatomic,strong) id<PROAPIAccessing> manager;
+@property (nonatomic,strong) id<FxCustomParameterActionAPI_v4> action;
+@property (nonatomic) BOOL interacting;
+@property (nonatomic) NSTimeInterval pendingUntil;
+@property (nonatomic) CMTime pendingTime;
+@property (nonatomic, strong) id activeSender;
+@property (nonatomic) BOOL reportedConnection;
+@property (nonatomic) BOOL reportedMissingAction;
+@end
+@implementation PGInspectorController
+- (instancetype)initWithAPIManager:(id<PROAPIAccessing>)manager {
+    if((self=[super init])){_manager=manager;_state=[PGInspectorState stateWithValues:@{} disabledParameters:[NSSet set] hasEdits:NO];_statusMessage=@"";}
+    return self;
+}
+- (BOOL)start {
+    if(_interacting)return YES;
+    _action=[_manager apiForProtocol:@protocol(FxCustomParameterActionAPI_v4)];
+    if(!_action){
+        _available=NO;_statusMessage=@"等待宿主连接";
+        if(!_reportedMissingAction){os_log(OS_LOG_DEFAULT,"PGInspector action API unavailable manager=%{public}d viewSender=%{public}d onMain=%{public}d",_manager!=nil,_actionSender!=nil,NSThread.isMainThread);_reportedMissingAction=YES;}
+        return NO;
+    }
+    // A native host can expose parameter APIs only after the custom view's
+    // action has established its document context. Never gate startAction on
+    // those APIs being available before entering the action.
+    BOOL readBefore=NO,writeBefore=NO;
+    if(!_reportedConnection){
+        readBefore=[_manager apiForProtocol:@protocol(FxParameterRetrievalAPI_v6)]!=nil;
+        writeBefore=[_manager apiForProtocol:@protocol(FxParameterSettingAPI_v5)]!=nil;
+    }
+    _activeSender=_actionSender ?: self;
+    [_action startAction:_activeSender];_interacting=YES;
+    @try {
+        id retrieval=[_manager apiForProtocol:@protocol(FxParameterRetrievalAPI_v6)];
+        id setting=[_manager apiForProtocol:@protocol(FxParameterSettingAPI_v5)];
+        _available=retrieval && setting;
+        if(!_reportedConnection){
+            os_log(OS_LOG_DEFAULT,"PGInspector connection readBefore=%{public}d writeBefore=%{public}d readInAction=%{public}d writeInAction=%{public}d viewSender=%{public}d onMain=%{public}d",readBefore,writeBefore,retrieval!=nil,setting!=nil,[_activeSender isKindOfClass:NSView.class],NSThread.isMainThread);
+            _reportedConnection=YES;
+        }
+        if(!_available){_statusMessage=@"等待宿主连接";[self finish];return NO;}
+    } @catch(NSException *exception) {[self finish];@throw exception;}
+    return YES;
+}
+- (void)finish {if(_interacting){_interacting=NO;[_action endAction:_activeSender];_action=nil;_activeSender=nil;}}
+- (void)readAtTime:(CMTime)time {
+    if(_pendingUntil && CMTimeCompare(time,_pendingTime)!=0)_pendingUntil=0;
+    id<FxParameterRetrievalAPI_v6> api=[_manager apiForProtocol:@protocol(FxParameterRetrievalAPI_v6)];
+    NSObject *object=nil;[api getCustomParameterValue:&object fromParameter:PGInspectorPanel atTime:time];
+    if([object isKindOfClass:PGInspectorState.class] && [(PGInspectorState *)object hasEdits]) {
+        PGInspectorState *host=(PGInspectorState *)object;
+        if([host isEqual:_state])_pendingUntil=0;
+        if(!_pendingUntil || NSDate.timeIntervalSinceReferenceDate>=_pendingUntil)_state=[host copy];
+        return;
+    }
+    if(_pendingUntil && NSDate.timeIntervalSinceReferenceDate<_pendingUntil)return;
+    NSMutableDictionary *values=[NSMutableDictionary new];
+    for(NSDictionary *d in PGInspectorControls()) {
+        UInt32 key=[d[@"id"] unsignedIntValue];double value=[d[@"default"] doubleValue];
+        if([d[@"kind"] isEqual:@"preset"]) {int menu=(int)value;if([api getIntValue:&menu fromParameter:key atTime:time])value=menu;}
+        else if([d[@"kind"] isEqual:@"toggle"] || [d[@"kind"] isEqual:@"master"]) {BOOL on=value!=0;if([api getBoolValue:&on fromParameter:key atTime:time])value=on;}
+        else [api getFloatValue:&value fromParameter:key atTime:time];
+        values[@(key)]=@(value);
+    }
+    BOOL legacyDetail=YES;[api getBoolValue:&legacyDetail fromParameter:PGDetailEnabled atTime:time];
+    NSMutableSet *disabled=legacyDetail?[NSMutableSet set]:[NSMutableSet setWithObjects:@(PGHighPass),@(PGSharpness),nil];
+    // Earlier versions put high-pass smoothing under a different group. Keep
+    // its effective state when importing a document whose local-skin group was
+    // off, rather than turning a still-active global effect off on first edit.
+    if(![values[@(PGSmoothingEnabled)] boolValue] && legacyDetail && [values[@(PGHighPass)] doubleValue]>0) {
+        values[@(PGSmoothingEnabled)]=@YES;
+        [disabled addObject:@(PGMidtone)];[disabled addObject:@(PGAmount)];
+    }
+    _state=[PGInspectorState stateWithValues:values disabledParameters:disabled hasEdits:NO];
+}
+- (void)refresh {
+    if(_interacting)return;
+    if(![self start])return;
+    @try {[self readAtTime:[_action currentTime]];_statusMessage=@"";} @finally {[self finish];}
+}
+- (void)documentDidChange {if(_interacting)return;_pendingUntil=0;[self refresh];}
+- (void)beginInteraction {
+    if(_interacting)return;
+    if([self start]) {
+        // A new gesture starts from the authoritative document, including an
+        // immediate undo. The short pending hold only prevents display flicker;
+        // it must never resurrect an undone value in a subsequent edit.
+        _pendingUntil=0;[self readAtTime:[_action currentTime]];
+    }
+}
+- (void)endInteraction {[self finish];}
+- (BOOL)commit:(PGInspectorState *)next {
+    if([next isEqual:_state] && _state.hasEdits)return YES;
+    id<FxParameterSettingAPI_v5> api=[_manager apiForProtocol:@protocol(FxParameterSettingAPI_v5)];
+    CMTime time=[_action currentTime];
+    // The published object is authoritative. Only mirror after its write was
+    // accepted; a rejected write must never leave half-applied hidden values.
+    if(![api setCustomParameterValue:next toParameter:PGInspectorPanel atTime:time]){_statusMessage=@"参数未能保存，请重试";return NO;}
+    for(NSDictionary *d in PGInspectorControls()) {
+        UInt32 key=[d[@"id"] unsignedIntValue];double value=[next valueForParameter:key];
+        if(![next isParameterEnabled:key])value=0;
+        double previous=[_state isParameterEnabled:key]?[_state valueForParameter:key]:0;
+        if(previous==value)continue;
+        if([d[@"kind"] isEqual:@"preset"]) [api setIntValue:(int)value toParameter:key atTime:time];
+        else if([d[@"kind"] isEqual:@"toggle"] || [d[@"kind"] isEqual:@"master"]) [api setBoolValue:value!=0 toParameter:key atTime:time];
+        else [api setFloatValue:value toParameter:key atTime:time];
+    }
+    _state=next;_pendingUntil=NSDate.timeIntervalSinceReferenceDate+.35;_pendingTime=time;_statusMessage=@"";return YES;
+}
+- (BOOL)setValue:(double)value forParameter:(UInt32)identifier {
+    NSDictionary *d=PGInspectorDescriptor(identifier);if(!d || !isfinite(value))return NO;
+    BOOL owned=!_interacting;if(owned)[self beginInteraction];if(!_interacting)return NO;
+    BOOL ok=NO;@try {
+        NSMutableDictionary *values=[_state.values mutableCopy];values[@(identifier)]=@(PGControlValue(@(value),d));
+        ok=[self commit:[PGInspectorState stateWithValues:values disabledParameters:_state.disabledParameters hasEdits:YES]];
+    } @finally {if(owned)[self finish];}return ok;
+}
+- (BOOL)toggleEnabledForParameter:(UInt32)identifier {
+    NSDictionary *d=PGInspectorDescriptor(identifier);if(!d)return NO;
+    if([d[@"kind"] isEqual:@"master"] || [d[@"kind"] isEqual:@"toggle"]) {
+        BOOL owned=!_interacting;if(owned)[self beginInteraction];if(!_interacting)return NO;
+        BOOL ok=NO;@try {ok=[self setValue:![_state valueForParameter:identifier] forParameter:identifier];}
+        @finally {if(owned)[self finish];}return ok;
+    }
+    if(![d[@"bypass"] boolValue])return NO;
+    BOOL owned=!_interacting;if(owned)[self beginInteraction];if(!_interacting)return NO;
+    BOOL ok=NO;@try {
+        NSMutableSet *disabled=[_state.disabledParameters mutableCopy];NSNumber *key=@(identifier);
+        if([disabled containsObject:key])[disabled removeObject:key];else [disabled addObject:key];
+        ok=[self commit:[PGInspectorState stateWithValues:_state.values disabledParameters:disabled hasEdits:YES]];
+    } @finally {if(owned)[self finish];}return ok;
+}
+- (BOOL)resetParameter:(UInt32)identifier {
+    NSDictionary *d=PGInspectorDescriptor(identifier);if(!d)return NO;
+    BOOL owned=!_interacting;if(owned)[self beginInteraction];if(!_interacting)return NO;
+    BOOL ok=NO;@try {
+        NSMutableDictionary *values=[_state.values mutableCopy];values[@(identifier)]=d[@"default"];
+        NSMutableSet *disabled=[_state.disabledParameters mutableCopy];[disabled removeObject:@(identifier)];
+        ok=[self commit:[PGInspectorState stateWithValues:values disabledParameters:disabled hasEdits:YES]];
+    } @finally {if(owned)[self finish];}return ok;
+}
+- (void)dealloc {if(_interacting)[_action endAction:_activeSender];}
+@end

beatygril/beatygril/Plugin/PGInspectorView.h

@@ -0,0 +1,16 @@
+#import <AppKit/AppKit.h>
+#import "PGInspectorState.h"
+
+NS_ASSUME_NONNULL_BEGIN
+
+/// Native inspector controls. Host access belongs exclusively to the controller.
+@interface PGInspectorView : NSView
+@property (nonatomic, strong, readonly) PGInspectorController *controller;
+- (instancetype)initWithAPIManager:(id<PROAPIAccessing>)manager;
+/// Also permits a deterministic controller in an offscreen preview or test.
+- (instancetype)initWithController:(PGInspectorController *)controller;
+- (void)refreshFromHost;
+- (void)hostParameterChanged;
+@end
+
+NS_ASSUME_NONNULL_END

beatygril/beatygril/Plugin/PGInspectorView.m

@@ -0,0 +1,367 @@
+#import "PGInspectorView.h"
+#include <math.h>
+
+static NSColor *PGUIColor(CGFloat r, CGFloat g, CGFloat b, CGFloat a) {
+    return [NSColor colorWithSRGBRed:r green:g blue:b alpha:a];
+}
+static NSColor *PGUIText(void) { return PGUIColor(.88,.91,.95,1); }
+static NSColor *PGUIMuted(void) { return PGUIColor(.60,.65,.73,1); }
+static NSTextField *PGUILabel(NSString *text, CGFloat size, NSFontWeight weight) {
+    NSTextField *label=[NSTextField labelWithString:text ?: @""];
+    label.font=[NSFont systemFontOfSize:size weight:weight]; label.textColor=PGUIText();
+    label.lineBreakMode=NSLineBreakByTruncatingTail; return label;
+}
+static CGFloat PGValueScale(NSDictionary *descriptor) {
+    return [descriptor[@"format"] isEqual:@"percent"] && [descriptor[@"max"] doubleValue]<=10 ? 100 : 1;
+}
+static NSString *PGFormattedValue(NSDictionary *descriptor, double value) {
+    NSString *format=descriptor[@"format"];
+    if ([format isEqual:@"percent"]) return [NSString stringWithFormat:@"%.0f%%",value*PGValueScale(descriptor)];
+    if ([format isEqual:@"degrees"]) return [NSString stringWithFormat:@"%+.0f°",value];
+    if ([format isEqual:@"signed"]) return [NSString stringWithFormat:@"%.2f",value];
+    if ([format isEqual:@"integer"]) return [NSString stringWithFormat:@"%.0f",value];
+    return [NSString stringWithFormat:@"%.1f",value];
+}
+
+@interface PGInspectorGlyphButton : NSButton
+@property (nonatomic, copy) NSString *glyph;
+@property (nonatomic, strong) NSColor *accent;
+@property (nonatomic, strong) NSColor *swatch;
+@end
+@implementation PGInspectorGlyphButton
+- (BOOL)isFlipped { return YES; }
+- (void)drawRect:(NSRect)dirtyRect {
+    (void)dirtyRect; NSRect b=NSInsetRect(self.bounds,1,1);
+    CGFloat opacity=self.enabled?1:.35;
+    NSColor *accent=[self.accent colorWithAlphaComponent:opacity];
+    BOOL on=self.state==NSControlStateValueOn;
+    if ([self.glyph isEqual:@"swatch"]) {
+        NSRect circle=NSInsetRect(b,3,3);
+        [[(self.swatch ?: PGUIColor(.12,.19,.23,1)) colorWithAlphaComponent:opacity] setFill]; [[NSBezierPath bezierPathWithOvalInRect:circle] fill];
+        [[PGUIText() colorWithAlphaComponent:.25*opacity] setStroke];
+        NSBezierPath *ring=[NSBezierPath bezierPathWithOvalInRect:circle];ring.lineWidth=1;[ring stroke];
+        if (!self.swatch) {
+            [PGUIMuted() setStroke];NSBezierPath *slash=[NSBezierPath bezierPath];
+            [slash moveToPoint:NSMakePoint(NSMinX(circle)+4,NSMinY(circle)+4)];[slash lineToPoint:NSMakePoint(NSMaxX(circle)-4,NSMaxY(circle)-4)];slash.lineWidth=1.5;[slash stroke];
+        }
+        if(on) { [accent setStroke];NSBezierPath *selection=[NSBezierPath bezierPathWithOvalInRect:NSInsetRect(b,.5,.5)];selection.lineWidth=1.5;[selection stroke]; }
+    } else if ([self.glyph isEqual:@"switch"]) {
+        NSRect pill=NSInsetRect(b,1,3);
+        [(on?accent:PGUIColor(.20,.25,.34,opacity)) setFill];[[NSBezierPath bezierPathWithRoundedRect:pill xRadius:NSHeight(pill)/2 yRadius:NSHeight(pill)/2]fill];
+        CGFloat diameter=NSHeight(pill)-4;CGFloat x=on?NSMaxX(pill)-diameter-2:NSMinX(pill)+2;
+        [[NSColor colorWithWhite:.98 alpha:opacity]setFill];[[NSBezierPath bezierPathWithOvalInRect:NSMakeRect(x,NSMinY(pill)+2,diameter,diameter)]fill];
+    } else {
+        NSBezierPath *back=[NSBezierPath bezierPathWithRoundedRect:b xRadius:7 yRadius:7];
+        [[self.accent colorWithAlphaComponent:([self.glyph isEqual:@"eye"]?.055:.13)*opacity]setFill];[back fill];
+        if ([self.glyph isEqual:@"eye"]) {
+            [[self.accent colorWithAlphaComponent:.35*opacity]setStroke];back.lineWidth=.7;[back stroke];
+            NSPoint c=NSMakePoint(NSMidX(b),NSMidY(b));
+            NSBezierPath *eye=[NSBezierPath bezierPath];[eye moveToPoint:NSMakePoint(c.x-6,c.y)];
+            [eye curveToPoint:NSMakePoint(c.x+6,c.y) controlPoint1:NSMakePoint(c.x-3,c.y-5.5) controlPoint2:NSMakePoint(c.x+3,c.y-5.5)];
+            [eye curveToPoint:NSMakePoint(c.x-6,c.y) controlPoint1:NSMakePoint(c.x+3,c.y+5.5) controlPoint2:NSMakePoint(c.x-3,c.y+5.5)];eye.lineWidth=1.3;[accent setStroke];[eye stroke];
+            if(on){[accent setFill];[[NSBezierPath bezierPathWithOvalInRect:NSMakeRect(c.x-1.8,c.y-1.8,3.6,3.6)]fill];}
+            else{NSBezierPath *slash=[NSBezierPath bezierPath];[slash moveToPoint:NSMakePoint(c.x-6,c.y+6)];[slash lineToPoint:NSMakePoint(c.x+6,c.y-6)];slash.lineWidth=1.2;[slash stroke];}
+        } else {
+            NSString *symbol=[self.glyph isEqual:@"disclosure"]?(on?@"⌄":@"›"):@"↻";
+            NSFont *font=[NSFont systemFontOfSize:[self.glyph isEqual:@"disclosure"]?19:18 weight:NSFontWeightSemibold];
+            NSDictionary *attributes=@{NSFontAttributeName:font,NSForegroundColorAttributeName:[self.accent colorWithAlphaComponent:(on?1:.58)*opacity]};
+            NSSize size=[symbol sizeWithAttributes:attributes];[symbol drawAtPoint:NSMakePoint(NSMidX(b)-size.width/2,NSMidY(b)-size.height/2)withAttributes:attributes];
+        }
+    }
+    if(self.window.firstResponder==self){[[self.accent colorWithAlphaComponent:.8]setStroke];NSBezierPath *focus=[NSBezierPath bezierPathWithRoundedRect:NSInsetRect(self.bounds,.5,.5) xRadius:7 yRadius:7];focus.lineWidth=1;[focus stroke];}
+}
+- (void)setState:(NSControlStateValue)state { [super setState:state];self.needsDisplay=YES; }
+- (void)setEnabled:(BOOL)enabled { [super setEnabled:enabled];self.needsDisplay=YES; }
+@end
+static PGInspectorGlyphButton *PGUIButton(NSString *glyph, NSColor *accent, id target, SEL action) {
+    PGInspectorGlyphButton *button=[[PGInspectorGlyphButton alloc]initWithFrame:NSZeroRect];
+    button.glyph=glyph;button.accent=accent;button.bordered=NO;button.title=@"";
+    [button setButtonType:([glyph isEqual:@"eye"]||[glyph isEqual:@"switch"]||[glyph isEqual:@"disclosure"]||[glyph isEqual:@"swatch"])?NSButtonTypePushOnPushOff:NSButtonTypeMomentaryPushIn];
+    button.target=target;button.action=action;button.focusRingType=NSFocusRingTypeExterior;
+    return button;
+}
+
+@interface PGInspectorSliderCell : NSSliderCell
+@property (nonatomic, strong) NSColor *accent;
+@end
+@implementation PGInspectorSliderCell
+- (void)drawBarInside:(NSRect)rect flipped:(BOOL)flipped {
+    (void)flipped;NSRect bar=NSMakeRect(NSMinX(rect),NSMidY(rect)-2,NSWidth(rect),4);
+    [PGUIColor(.08,.13,.20,self.enabled?1:.5)setFill];NSBezierPath *track=[NSBezierPath bezierPathWithRoundedRect:bar xRadius:2 yRadius:2];[track fill];
+    [[self.accent colorWithAlphaComponent:.18]setStroke];track.lineWidth=.7;[track stroke];
+    double range=self.maxValue-self.minValue;if(range<=0)return;
+    CGFloat from=self.minValue<0?(CGFloat)((0-self.minValue)/range):0;
+    CGFloat to=(CGFloat)((self.doubleValue-self.minValue)/range);
+    NSRect fill=NSMakeRect(NSMinX(bar)+MIN(from,to)*NSWidth(bar),NSMinY(bar),fabs(to-from)*NSWidth(bar),NSHeight(bar));
+    [[self.accent colorWithAlphaComponent:self.enabled?.85:.23]setFill];[[NSBezierPath bezierPathWithRoundedRect:fill xRadius:2 yRadius:2]fill];
+}
+- (void)drawKnob:(NSRect)knobRect {
+    CGFloat d=12;NSRect r=NSMakeRect(NSMidX(knobRect)-d/2,NSMidY(knobRect)-d/2,d,d);
+    [[self.accent colorWithAlphaComponent:self.enabled?.22:.08]setFill];[[NSBezierPath bezierPathWithOvalInRect:NSInsetRect(r,-2,-2)]fill];
+    [[NSColor colorWithWhite:.97 alpha:self.enabled?1:.5]setFill];NSBezierPath *knob=[NSBezierPath bezierPathWithOvalInRect:r];[knob fill];
+    [[self.accent colorWithAlphaComponent:self.enabled?.85:.25]setStroke];knob.lineWidth=1;[knob stroke];
+}
+- (CGFloat)knobThickness { return 14; }
+@end
+@interface PGInspectorSlider : NSSlider
+@property (nonatomic, copy) void (^interactionBegan)(void);
+@property (nonatomic, copy) void (^interactionEnded)(void);
+@end
+@implementation PGInspectorSlider
+- (void)mouseDown:(NSEvent *)event {
+    if(!self.enabled)return;if(self.interactionBegan)self.interactionBegan();
+    @try{[super mouseDown:event];}@finally{if(self.interactionEnded)self.interactionEnded();}
+}
+- (void)keyDown:(NSEvent *)event {
+    if(self.interactionBegan)self.interactionBegan();
+    @try{[super keyDown:event];}@finally{if(self.interactionEnded)self.interactionEnded();}
+}
+@end
+
+@interface PGInspectorNumberCell : NSTextFieldCell
+@end
+@implementation PGInspectorNumberCell
+- (NSRect)drawingRectForBounds:(NSRect)bounds {
+    NSRect rect=[super drawingRectForBounds:bounds];CGFloat height=[self cellSizeForBounds:bounds].height;
+    if(NSHeight(rect)>height){rect.origin.y+=(NSHeight(rect)-height)*.5;rect.size.height=height;}return rect;
+}
+@end
+@interface PGInspectorNumberField : NSTextField
+@end
+@implementation PGInspectorNumberField
++ (Class)cellClass { return PGInspectorNumberCell.class; }
+@end
+
+@class PGInspectorRow;
+@interface PGInspectorCard : NSView
+@property (nonatomic, strong) NSColor *accent;
+@property (nonatomic, copy) NSString *heading;
+@property (nonatomic, strong) NSTextField *titleLabel;
+@property (nonatomic, strong) PGInspectorGlyphButton *master;
+@property (nonatomic, copy) NSArray<PGInspectorRow *> *rows;
+@property (nonatomic) BOOL expanded;
+- (CGFloat)heightForWidth:(CGFloat)width;
+@end
+@interface PGInspectorView ()
+@property (nonatomic, strong, readwrite) PGInspectorController *controller;
+- (void)reloadControls;
+- (void)beginControlInteraction;
+- (void)endControlInteraction;
+- (void)writeValue:(double)value parameter:(UInt32)identifier;
+@end
+@interface PGInspectorRow : NSView <NSTextFieldDelegate>
+@property (nonatomic, weak) PGInspectorView *inspector;
+@property (nonatomic, copy) NSDictionary *descriptor;
+@property (nonatomic, strong) NSColor *accent;
+@property (nonatomic, strong) NSTextField *label;
+@property (nonatomic, strong) NSTextField *valueField;
+@property (nonatomic) BOOL numberHasUnsubmittedEdit;
+@property (nonatomic, strong) NSTextField *hint;
+@property (nonatomic, strong) PGInspectorSlider *slider;
+@property (nonatomic, strong) PGInspectorGlyphButton *eye;
+@property (nonatomic, strong) PGInspectorGlyphButton *reset;
+@property (nonatomic, strong) PGInspectorGlyphButton *toggle;
+@property (nonatomic, copy) NSArray<PGInspectorGlyphButton *> *swatches;
+- (instancetype)initWithDescriptor:(NSDictionary *)descriptor accent:(NSColor *)accent inspector:(PGInspectorView *)inspector;
+- (CGFloat)heightForWidth:(CGFloat)width;
+- (void)reloadState:(PGInspectorState *)state master:(BOOL)master available:(BOOL)available;
+@end
+@implementation PGInspectorRow
+- (BOOL)isFlipped { return YES; }
+- (instancetype)initWithDescriptor:(NSDictionary *)descriptor accent:(NSColor *)accent inspector:(PGInspectorView *)inspector {
+    if((self=[super initWithFrame:NSZeroRect])) {
+        _descriptor=[descriptor copy];_accent=accent;_inspector=inspector;
+        self.identifier=[NSString stringWithFormat:@"pg.parameter.%@",descriptor[@"id"]];
+        NSString *name=descriptor[@"name"];_label=PGUILabel(name,12,NSFontWeightSemibold);[self addSubview:_label];
+        NSString *kind=descriptor[@"kind"];
+        if([descriptor[@"bypass"]boolValue]){
+            _eye=PGUIButton(@"eye",accent,self,@selector(toggleEnabled:));_eye.toolTip=[@"启用 / 停用 · " stringByAppendingString:name];_eye.accessibilityLabel=_eye.toolTip;[self addSubview:_eye];
+        }
+        if([kind isEqual:@"preset"]){
+            NSArray *colors=@[NSNull.null,PGUIColor(.95,.87,.80,1),PGUIColor(.88,.88,.95,1),PGUIColor(1,.86,.72,1),PGUIColor(.99,.78,.75,1),PGUIColor(.76,.57,.39,1),PGUIColor(.48,.32,.22,1)];
+            NSArray *options=descriptor[@"options"] ?: @[];NSMutableArray *buttons=[NSMutableArray new];
+            for(NSUInteger i=0;i<7;i++){
+                PGInspectorGlyphButton *button=PGUIButton(@"swatch",accent,self,@selector(selectPreset:));button.tag=i;button.swatch=i?colors[i]:nil;
+                button.toolTip=i<options.count?options[i]:[NSString stringWithFormat:@"%@ %lu",name,(unsigned long)i];button.accessibilityLabel=button.toolTip;
+                [self addSubview:button];[buttons addObject:button];
+            }_swatches=[buttons copy];
+        }else{
+            _reset=PGUIButton(@"reset",accent,self,@selector(resetValue:));_reset.toolTip=[@"重置 · "stringByAppendingString:name];_reset.accessibilityLabel=_reset.toolTip;[self addSubview:_reset];
+            if([kind isEqual:@"toggle"]){
+                _toggle=PGUIButton(@"switch",accent,self,@selector(toggleValue:));_toggle.accessibilityLabel=name;[self addSubview:_toggle];
+                _hint=PGUILabel(@"",10,NSFontWeightMedium);_hint.textColor=PGUIMuted();_hint.alignment=NSTextAlignmentRight;[self addSubview:_hint];
+                _label.lineBreakMode=NSLineBreakByWordWrapping;_label.maximumNumberOfLines=2;
+            }else{
+                _slider=[[PGInspectorSlider alloc]initWithFrame:NSZeroRect];PGInspectorSliderCell *cell=[PGInspectorSliderCell new];cell.accent=accent;_slider.cell=cell;
+                _slider.minValue=[descriptor[@"min"]doubleValue];_slider.maxValue=[descriptor[@"max"]doubleValue];_slider.continuous=YES;_slider.target=self;_slider.action=@selector(sliderChanged:);_slider.accessibilityLabel=name;
+                __weak PGInspectorView *weakInspector=inspector;
+                _slider.interactionBegan=^{[weakInspector beginControlInteraction];};_slider.interactionEnded=^{[weakInspector endControlInteraction];};[self addSubview:_slider];
+                _valueField=[[PGInspectorNumberField alloc]initWithFrame:NSZeroRect];_valueField.font=[NSFont monospacedDigitSystemFontOfSize:11 weight:NSFontWeightSemibold];_valueField.textColor=PGUIText();_valueField.alignment=NSTextAlignmentCenter;
+                _valueField.bordered=NO;_valueField.bezeled=NO;_valueField.drawsBackground=NO;_valueField.backgroundColor=PGUIColor(.14,.19,.26,1);_valueField.wantsLayer=YES;_valueField.layer.backgroundColor=_valueField.backgroundColor.CGColor;_valueField.layer.cornerRadius=7;_valueField.layer.borderWidth=.7;_valueField.layer.borderColor=[accent colorWithAlphaComponent:.24].CGColor;
+                _valueField.target=self;_valueField.action=@selector(numberCommitted:);_valueField.delegate=self;_valueField.accessibilityLabel=[name stringByAppendingString:@"数值"];[self addSubview:_valueField];
+            }
+        }
+        NSString *key=[descriptor[@"id"]stringValue];
+        _slider.identifier=[@"pg.value."stringByAppendingString:key];_valueField.identifier=[@"pg.number."stringByAppendingString:key];
+        _toggle.identifier=[@"pg.toggle."stringByAppendingString:key];_eye.identifier=[@"pg.enable."stringByAppendingString:key];_reset.identifier=[@"pg.reset."stringByAppendingString:key];
+    }return self;
+}
+- (CGFloat)heightForWidth:(CGFloat)width {
+    if(_swatches)return 46;
+    if(_toggle)return width<310 && [_descriptor[@"name"]length]>12 ? 48 : 36;
+    return width<310?52:36;
+}
+- (void)layout {
+    [super layout];CGFloat w=NSWidth(self.bounds),h=NSHeight(self.bounds);BOOL narrow=w<310;
+    CGFloat labelX=_eye?25:0;
+    _eye.frame=NSMakeRect(0,6,20,22);
+    if(_swatches){
+        _label.frame=NSMakeRect(labelX,14,33,20);CGFloat x=labelX+37;CGFloat d=MIN(28,MAX(12,(w-x-24)/7));CGFloat gap=MIN(8,MAX(0,(w-x-7*d)/6));
+        for(NSUInteger i=0;i<_swatches.count;i++)_swatches[i].frame=NSMakeRect(x+i*(d+gap),7,d,d);return;
+    }
+    _reset.frame=NSMakeRect(w-23,6,23,23);
+    if(_toggle){
+        CGFloat switchX=w-76;_toggle.frame=NSMakeRect(switchX,4+(h-36)/2,46,28);_hint.frame=NSMakeRect(switchX-39,10+(h-36)/2,34,18);
+        _label.frame=NSMakeRect(labelX,h>36?3:9,MAX(20,switchX-labelX-42),h>36?42:22);return;
+    }
+    CGFloat fieldW=49,fieldX=w-23-7-fieldW;_valueField.frame=NSMakeRect(fieldX,5,fieldW,25);
+    if(narrow){_label.frame=NSMakeRect(labelX,8,MAX(20,fieldX-labelX-6),22);_slider.frame=NSMakeRect(labelX,29,MAX(20,w-labelX-30),18);}
+    else{CGFloat labelW=MIN(116,MAX(71,w*.29));_label.frame=NSMakeRect(labelX,9,labelW,21);CGFloat start=labelX+labelW+5;_slider.frame=NSMakeRect(start,7,MAX(20,fieldX-start-8),22);}
+}
+- (void)reloadState:(PGInspectorState *)state master:(BOOL)master available:(BOOL)available {
+    UInt32 identifier=[_descriptor[@"id"]unsignedIntValue];double value=[state valueForParameter:identifier];BOOL enabled=[state isParameterEnabled:identifier];
+    _label.alphaValue=master&&enabled?1:.5;_eye.state=enabled?NSControlStateValueOn:NSControlStateValueOff;_eye.enabled=available&&master;
+    _reset.enabled=available;_reset.state=fabs(value-[_descriptor[@"default"]doubleValue])>.000001?NSControlStateValueOn:NSControlStateValueOff;
+    _slider.enabled=available&&master&&enabled;_slider.doubleValue=value;
+    _valueField.enabled=available&&master&&enabled;if(!_valueField.currentEditor || !_numberHasUnsubmittedEdit)_valueField.stringValue=PGFormattedValue(_descriptor,value);
+    _toggle.enabled=available&&master&&enabled;_toggle.state=value>.5?NSControlStateValueOn:NSControlStateValueOff;
+    UInt32 identifierForHint=[_descriptor[@"id"]unsignedIntValue];
+    _hint.stringValue=identifierForHint==PGFastMulti?(value>.5?@"多人":@"单人"):identifierForHint==PGTrackBoxes?(value>.5?@"预览中":@"隐藏"):(value>.5?@"开启":@"关闭");
+    for(NSUInteger i=0;i<_swatches.count;i++){_swatches[i].enabled=available&&master&&enabled;_swatches[i].state=i==(NSUInteger)llround(value)?NSControlStateValueOn:NSControlStateValueOff;}
+}
+- (void)sliderChanged:(NSSlider *)sender { [_inspector writeValue:sender.doubleValue parameter:[_descriptor[@"id"]unsignedIntValue]]; }
+- (void)toggleValue:(NSButton *)sender { [_inspector writeValue:sender.state==NSControlStateValueOn?1:0 parameter:[_descriptor[@"id"]unsignedIntValue]]; }
+- (void)selectPreset:(NSButton *)sender { [_inspector writeValue:sender.tag parameter:[_descriptor[@"id"]unsignedIntValue]]; }
+- (void)toggleEnabled:(id)sender { (void)sender;[_inspector.controller toggleEnabledForParameter:[_descriptor[@"id"]unsignedIntValue]];[_inspector reloadControls]; }
+- (void)resetValue:(id)sender { (void)sender;[_inspector.controller resetParameter:[_descriptor[@"id"]unsignedIntValue]];[_inspector reloadControls]; }
+- (void)numberCommitted:(id)sender {
+    // The explicit Return action and the subsequent end-editing notification
+    // describe the same submission. Clear the dirty flag before host callbacks
+    // so focus loss cannot write stale text over a reset or a host undo.
+    _numberHasUnsubmittedEdit=NO;
+    NSString *text=[_valueField.stringValue stringByTrimmingCharactersInSet:NSCharacterSet.whitespaceAndNewlineCharacterSet];
+    if([text hasSuffix:@"%"]||[text hasSuffix:@"°"])text=[text substringToIndex:text.length-1];
+    NSNumber *number=nil;
+    for(NSLocale *locale in @[NSLocale.currentLocale,[NSLocale localeWithLocaleIdentifier:@"en_US_POSIX"]]){
+        NSScanner *scanner=[NSScanner scannerWithString:text];scanner.locale=locale;double parsed;
+        if([scanner scanDouble:&parsed]&&scanner.isAtEnd){number=@(parsed);break;}
+    }
+    if(number&&isfinite(number.doubleValue)){
+        double value=number.doubleValue/PGValueScale(_descriptor);value=fmin([_descriptor[@"max"]doubleValue],fmax([_descriptor[@"min"]doubleValue],value));
+        // Commit explicit input even when it equals our last displayed value:
+        // the document may have changed while the field editor held focus.
+        // The controller rereads the host and deduplicates the actual value.
+        [_inspector writeValue:value parameter:[_descriptor[@"id"]unsignedIntValue]];
+    }else NSBeep();
+    _valueField.stringValue=PGFormattedValue(_descriptor,[_inspector.controller.state valueForParameter:[_descriptor[@"id"]unsignedIntValue]]);
+    if(sender==_valueField) {
+        [_valueField.window makeFirstResponder:nil];
+        // A remote inspector can retain its field editor after the host has
+        // consumed Return. End the already-submitted edit at the control too.
+        [_valueField abortEditing];
+    }
+}
+- (void)controlTextDidChange:(NSNotification *)notification { (void)notification;_numberHasUnsubmittedEdit=YES; }
+- (void)controlTextDidEndEditing:(NSNotification *)notification {
+    (void)notification;
+    if(_numberHasUnsubmittedEdit)[self numberCommitted:nil];
+    [_inspector refreshFromHost];
+}
+@end
+
+@implementation PGInspectorCard
+- (BOOL)isFlipped { return YES; }
+- (CGFloat)heightForWidth:(CGFloat)width {
+    if(!_expanded)return 44;CGFloat height=49;for(PGInspectorRow *row in _rows){height+=[row heightForWidth:MAX(0,width-24)];if([row.descriptor[@"id"]unsignedIntValue]==PGJumpGuard)height+=8;}return height+7;
+}
+- (void)layout {
+    [super layout];CGFloat w=NSWidth(self.bounds);_titleLabel.frame=NSMakeRect(25,13,MAX(70,w-80),22);_master.frame=NSMakeRect(w-39,10,25,25);
+    CGFloat y=49;for(PGInspectorRow *row in _rows){row.hidden=!_expanded;if(!_expanded)continue;CGFloat h=[row heightForWidth:w-24];row.frame=NSMakeRect(12,y,w-24,h);y+=h;if([row.descriptor[@"id"]unsignedIntValue]==PGJumpGuard)y+=8;}
+}
+- (void)drawRect:(NSRect)dirtyRect {
+    (void)dirtyRect;NSBezierPath *shape=[NSBezierPath bezierPathWithRoundedRect:NSInsetRect(self.bounds,.5,.5) xRadius:13 yRadius:13];
+    [NSGraphicsContext saveGraphicsState];[shape addClip];NSGradient *gradient=[[NSGradient alloc]initWithStartingColor:[_accent blendedColorWithFraction:.87 ofColor:PGUIColor(.09,.14,.21,1)] endingColor:PGUIColor(.055,.085,.14,1)];[gradient drawInRect:self.bounds angle:90];[NSGraphicsContext restoreGraphicsState];
+    [[_accent colorWithAlphaComponent:.22]setStroke];shape.lineWidth=.8;[shape stroke];
+    NSRect pill=NSMakeRect(12,10,MAX(53,[_heading length]*13+20),25);[[_accent colorWithAlphaComponent:.10]setFill];NSBezierPath *p=[NSBezierPath bezierPathWithRoundedRect:pill xRadius:8 yRadius:8];[p fill];[[_accent colorWithAlphaComponent:.32]setStroke];p.lineWidth=.7;[p stroke];
+    if(_expanded){[[PGUIMuted() colorWithAlphaComponent:.20]setStroke];NSBezierPath *line=[NSBezierPath bezierPath];[line moveToPoint:NSMakePoint(12,43)];[line lineToPoint:NSMakePoint(NSWidth(self.bounds)-12,43)];line.lineWidth=.5;[line stroke];
+        for(PGInspectorRow *row in _rows)if([row.descriptor[@"id"]unsignedIntValue]==PGJumpGuard){CGFloat y=NSMaxY(row.frame)+4;[line removeAllPoints];[line moveToPoint:NSMakePoint(12,y)];[line lineToPoint:NSMakePoint(NSWidth(self.bounds)-12,y)];[line stroke];}
+    }
+}
+@end
+
+@implementation PGInspectorView {
+    NSArray<PGInspectorCard *> *_cards;
+    PGInspectorCard *_more;
+    NSTextField *_brand,*_website,*_status;
+    NSTimer *_refreshTimer;
+    NSUInteger _interactionDepth;
+}
+- (instancetype)initWithAPIManager:(id<PROAPIAccessing>)manager { return [self initWithController:[[PGInspectorController alloc]initWithAPIManager:manager]]; }
+- (instancetype)initWithController:(PGInspectorController *)controller {
+    if((self=[super initWithFrame:NSMakeRect(0,0,320,100)])){
+        _controller=controller;_controller.actionSender=self;self.appearance=[NSAppearance appearanceNamed:NSAppearanceNameDarkAqua];
+        NSArray *sections=@[@"smooth",@"color",@"shape",@"more"],*headings=@[@"磨皮",@"美白",@"瘦脸",@"更多设置"];
+        NSArray *colors=@[PGUIColor(.28,.83,.96,1),PGUIColor(.34,.89,.84,1),PGUIColor(.59,.69,.98,1),PGUIColor(.54,.64,.76,1)];
+        NSMutableArray *cards=[NSMutableArray new];
+        for(NSUInteger index=0;index<sections.count;index++){
+            NSString *section=sections[index];PGInspectorCard *card=[[PGInspectorCard alloc]initWithFrame:NSZeroRect];card.accent=colors[index];card.heading=headings[index];card.expanded=index<3;
+            card.titleLabel=PGUILabel(headings[index],12,NSFontWeightSemibold);card.titleLabel.textColor=colors[index];[card addSubview:card.titleLabel];NSMutableArray *rows=[NSMutableArray new];
+            for(NSDictionary *descriptor in PGInspectorControls()){
+                if(![descriptor[@"section"]isEqual:section])continue;
+                if([descriptor[@"kind"]isEqual:@"master"]){card.master=PGUIButton(@"eye",colors[index],self,@selector(masterChanged:));card.master.tag=[descriptor[@"id"]integerValue];card.master.identifier=[NSString stringWithFormat:@"pg.master.%@",descriptor[@"id"]];card.master.accessibilityLabel=descriptor[@"name"];card.master.toolTip=descriptor[@"name"];[card addSubview:card.master];continue;}
+                PGInspectorRow *row=[[PGInspectorRow alloc]initWithDescriptor:descriptor accent:colors[index] inspector:self];[rows addObject:row];[card addSubview:row];
+            }
+            card.rows=rows;if(index==3){_more=card;card.master=PGUIButton(@"disclosure",colors[index],self,@selector(moreChanged:));card.master.identifier=@"pg.more";card.master.accessibilityLabel=@"展开更多设置";[card addSubview:card.master];}
+            [self addSubview:card];[cards addObject:card];
+        }_cards=[cards copy];
+        _brand=PGUILabel(@"大鱼 · 人像美化",15,NSFontWeightSemibold);_brand.alignment=NSTextAlignmentCenter;[self addSubview:_brand];
+        _website=PGUILabel(@"dayu.media",10,NSFontWeightMedium);_website.alignment=NSTextAlignmentCenter;_website.textColor=PGUIMuted();[self addSubview:_website];
+        _status=PGUILabel(@"",10,NSFontWeightRegular);_status.textColor=PGUIMuted();_status.alignment=NSTextAlignmentCenter;[self addSubview:_status];
+        [self reloadControls];[self setFrameSize:NSMakeSize(320,[self heightForWidth:320])];
+    }return self;
+}
+- (BOOL)isFlipped { return YES; }
+- (CGFloat)heightForWidth:(CGFloat)width { CGFloat h=12;for(PGInspectorCard *card in _cards)h+=[card heightForWidth:MAX(0,width-20)]+10;return h+83; }
+- (NSSize)intrinsicContentSize { return NSMakeSize(NSViewNoIntrinsicMetric,[self heightForWidth:NSWidth(self.bounds)>0?NSWidth(self.bounds):320]); }
+- (NSSize)fittingSize { CGFloat w=NSWidth(self.bounds)>0?NSWidth(self.bounds):320;return NSMakeSize(w,[self heightForWidth:w]); }
+- (void)setFrameSize:(NSSize)newSize { if(_cards)newSize.height=[self heightForWidth:newSize.width];[super setFrameSize:newSize];[self invalidateIntrinsicContentSize];self.needsLayout=YES; }
+- (void)layout {
+    [super layout];CGFloat w=NSWidth(self.bounds),y=12;for(PGInspectorCard *card in _cards){CGFloat h=[card heightForWidth:w-20];card.frame=NSMakeRect(10,y,MAX(0,w-20),h);y+=h+10;}
+    _brand.frame=NSMakeRect(12,y+12,MAX(0,w-24),23);_website.frame=NSMakeRect(12,y+38,MAX(0,w-24),17);_status.frame=NSMakeRect(12,y+61,MAX(0,w-24),16);
+}
+- (void)drawRect:(NSRect)dirtyRect { [PGUIColor(.035,.060,.105,1)setFill];NSRectFill(dirtyRect); }
+- (void)reloadControls {
+    PGInspectorState *state=_controller.state;BOOL available=_controller.available;
+    for(PGInspectorCard *card in _cards){BOOL master=card==_more || [state valueForParameter:(UInt32)card.master.tag]>.5;
+        if(card!=_more){card.master.state=master?NSControlStateValueOn:NSControlStateValueOff;card.master.enabled=available;}
+        for(PGInspectorRow *row in card.rows)[row reloadState:state master:master available:available];
+    }
+    _status.stringValue=_controller.statusMessage.length?_controller.statusMessage:@"自动跟随 · 无需手动分析";_status.toolTip=_status.stringValue;
+}
+- (BOOL)hasActiveTextEditor { for(PGInspectorCard *card in _cards)for(PGInspectorRow *row in card.rows)if(row.valueField.currentEditor && row.numberHasUnsubmittedEdit)return YES;return NO; }
+- (void)refreshFromHost { if(_interactionDepth || [self hasActiveTextEditor])return;[_controller refresh];[self reloadControls]; }
+- (void)hostParameterChanged { if(_interactionDepth || [self hasActiveTextEditor])return;[_controller documentDidChange];[self reloadControls]; }
+- (void)writeValue:(double)value parameter:(UInt32)identifier { [_controller setValue:value forParameter:identifier];[self reloadControls]; }
+// Keep refreshes out of the tracking loop, but let writeValue own a complete
+// FxPlug action for each continuous step. Holding the action until mouse-up
+// prevents hosts that publish at endAction from previewing intermediate values.
+- (void)beginControlInteraction { _interactionDepth++; }
+- (void)endControlInteraction { if(!_interactionDepth)return;if(--_interactionDepth==0)[self refreshFromHost]; }
+- (void)masterChanged:(NSButton *)sender { [_controller setValue:sender.state==NSControlStateValueOn?1:0 forParameter:(UInt32)sender.tag];[self reloadControls]; }
+- (void)moreChanged:(NSButton *)sender { _more.expanded=sender.state==NSControlStateValueOn;sender.accessibilityLabel=_more.expanded?@"收起更多设置":@"展开更多设置";[_more setNeedsDisplay:YES];[self setFrameSize:self.frame.size]; }
+- (void)viewDidMoveToWindow {
+    [super viewDidMoveToWindow];[_refreshTimer invalidate];_refreshTimer=nil;
+    if(self.window){[self refreshFromHost];__weak PGInspectorView *weakSelf=self;_refreshTimer=[NSTimer timerWithTimeInterval:.65 repeats:YES block:^(NSTimer *timer){PGInspectorView *view=weakSelf;if(!view||!view.window){[timer invalidate];return;}[view refreshFromHost];}];[[NSRunLoop mainRunLoop]addTimer:_refreshTimer forMode:NSRunLoopCommonModes];}
+}
+- (void)dealloc { [_refreshTimer invalidate]; }
+@end

beatygril/beatygril/Plugin/PGParameterIDs.h

@@ -13,5 +13,6 @@ enum {
     PGAnalyzeForward=50, PGAnalyzeBackward=51, PGClearTrack=52, PGStatus=53,
     PGTrackData1=60, PGTrackData2=61, PGTrackData3=62,
     PGSmoothingEnabled=70, PGColorEnabled=71, PGShapeEnabled=72,
-    PGDetailEnabled=73, PGHelp=74
+    PGDetailEnabled=73, PGHelp=74,
+    PGInspectorPanel=210
 };

beatygril/beatygril/Plugin/beatygrilPlugIn.h

@@ -2,7 +2,7 @@
 #import <FxPlug/FxPlugSDK.h>
 #import "PGBeautyTypes.h"
 
-@interface beatygrilPlugIn : NSObject <FxTileableEffect, FxAnalyzer>
+@interface beatygrilPlugIn : NSObject <FxTileableEffect, FxAnalyzer, FxCustomParameterViewHost_v2>
 @property (nonatomic, assign) id<PROAPIAccessing> apiManager;
 - (PGBeautySettings)settingsAtTime:(CMTime)time;
 - (void)analyzeForward;

beatygril/beatygril/Plugin/beatygrilPlugIn.m

@@ -2,6 +2,8 @@
 #import "PGParameterIDs.h"
 #import "PGBeautyRenderer.h"
 #import "PGFaceProcessor.h"
+#import "PGInspectorState.h"
+#import "PGInspectorView.h"
 #import <Metal/Metal.h>
 #import <IOSurface/IOSurface.h>
 #import <stddef.h>
@@ -52,15 +54,29 @@ static BOOL PGFail(NSError **error, NSString *message) {
                                       userInfo:@{NSLocalizedDescriptionKey:message}];
     return NO;
 }
+static NSString * const PGHostCoordinateSpace = @"iosurface-ci-y-up-v1";
+static BOOL PGCompatibleHostTrack(NSData *data) {
+    if (!data.length || data.length > 128*1024*1024) return NO;
+    NSDictionary *archive = [NSPropertyListSerialization propertyListWithData:data options:NSPropertyListImmutable format:nil error:nil];
+    return [archive isKindOfClass:NSDictionary.class] && [archive[@"hostCoordinateSpace"] isEqual:PGHostCoordinateSpace];
+}
+static NSData *PGMarkHostTrack(NSData *data) {
+    if (!data) return nil;
+    NSMutableDictionary *archive = [NSPropertyListSerialization propertyListWithData:data options:NSPropertyListMutableContainers format:nil error:nil];
+    if (![archive isKindOfClass:NSMutableDictionary.class]) return nil;
+    archive[@"hostCoordinateSpace"] = PGHostCoordinateSpace;
+    return [NSPropertyListSerialization dataWithPropertyList:archive format:NSPropertyListBinaryFormat_v1_0 options:0 error:nil];
+}
 static CIImage *PGImageFromTile(FxImageTile *tile) {
     if (!tile.ioSurface) return nil;
     // The host already supplies video-gamma RGB. Keep those numeric values in
     // every stage; implicit Core Image linearization changes mask thresholds.
     NSDictionary *options = @{kCIImageColorSpace:NSNull.null};
     CIImage *image = [CIImage imageWithIOSurface:(__bridge IOSurfaceRef)tile.ioSurface options:options];
-    if (tile.imageOrigin == kFxImageOrigin_TOP_LEFT) {
+    // Match the reference's CI/IOSurface path. imageOrigin describes the host's
-        image = [image imageByApplyingTransform:CGAffineTransformMake(1,0,0,-1,0,image.extent.size.height)];
+    // coordinate axes; it is not an instruction to reverse IOSurface scanlines.
-    }
+    // An extra input/output flip can hide in passthrough while inverting faces
+    // inside Vision and the analytic shape/mask stages.
     FxRect b = tile.tilePixelBounds;
     return [image imageByApplyingTransform:CGAffineTransformMakeTranslation(b.left,b.bottom)];
 }
@@ -77,6 +93,7 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
 @property BOOL analysisForward;
 @property (strong) NSArray<NSString *> *loadedTracks;
 @property BOOL reportedRender;
+@property (strong) NSHashTable<PGInspectorView *> *inspectorViews;
 @end
 
 @implementation beatygrilPlugIn
@@ -87,6 +104,7 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
         _analysisFaceProcessor=[PGFaceProcessor new];
         _contexts=[NSMutableDictionary new]; _analysisSettings=PGBeautyDefaults();
         _analysisTime=kCMTimeZero;
+        _inspectorViews=[NSHashTable weakObjectsHashTable];
     }
     return self;
 }
@@ -105,8 +123,8 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
         PGSlider spec=PGSliders[i]; if (spec.identifier!=identifier) continue;
         NSString *name=[NSString stringWithUTF8String:spec.name];
         float value=*(float *)((uint8_t *)&defaults+spec.offset);
-        if (spec.percent) return [api addPercentSliderWithName:name parameterID:identifier defaultValue:value parameterMin:spec.min parameterMax:spec.max sliderMin:spec.min sliderMax:spec.max delta:spec.step parameterFlags:kFxParameterFlag_DEFAULT];
+        if (spec.percent) return [api addPercentSliderWithName:name parameterID:identifier defaultValue:value parameterMin:spec.min parameterMax:spec.max sliderMin:spec.min sliderMax:spec.max delta:spec.step parameterFlags:kFxParameterFlag_HIDDEN];
-        return [api addFloatSliderWithName:name parameterID:identifier defaultValue:value parameterMin:spec.min parameterMax:spec.max sliderMin:spec.min sliderMax:spec.max delta:spec.step parameterFlags:kFxParameterFlag_DEFAULT];
+        return [api addFloatSliderWithName:name parameterID:identifier defaultValue:value parameterMin:spec.min parameterMax:spec.max sliderMin:spec.min sliderMax:spec.max delta:spec.step parameterFlags:kFxParameterFlag_HIDDEN];
     }
     return NO;
 }
@@ -114,37 +132,56 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
     id<FxParameterCreationAPI_v5> api=[_apiManager apiForProtocol:@protocol(FxParameterCreationAPI_v5)];
     if (!api) return PGFail(error,@"无法取得 FxPlug 参数创建接口。");
     __block BOOL ok=YES;
+    ok=[api addCustomParameterWithName:@"" parameterID:PGInspectorPanel
+                         defaultValue:[PGInspectorState stateWithValues:@{} disabledParameters:[NSSet set] hasEdits:NO]
+                       parameterFlags:kFxParameterFlag_CUSTOM_UI|kFxParameterFlag_USE_FULL_VIEW_WIDTH]&&ok;
     void (^slider)(UInt32)=^(UInt32 identifier){ok=[self addSlider:identifier api:api]&&ok;};
-    void (^toggle)(NSString *,UInt32,BOOL)=^(NSString *name,UInt32 identifier,BOOL value){ok=[api addToggleButtonWithName:name parameterID:identifier defaultValue:value parameterFlags:kFxParameterFlag_DEFAULT]&&ok;};
+    void (^toggle)(NSString *,UInt32,BOOL)=^(NSString *name,UInt32 identifier,BOOL value){ok=[api addToggleButtonWithName:name parameterID:identifier defaultValue:value parameterFlags:kFxParameterFlag_HIDDEN]&&ok;};
-    void (^group)(NSString *,UInt32)=^(NSString *name,UInt32 identifier){ok=[api startParameterSubGroup:name parameterID:identifier parameterFlags:kFxParameterFlag_DEFAULT]&&ok;};
+    void (^group)(NSString *,UInt32)=^(NSString *name,UInt32 identifier){ok=[api startParameterSubGroup:name parameterID:identifier parameterFlags:kFxParameterFlag_HIDDEN]&&ok;};
     void (^end)(void)=^{ok=[api endParameterSubGroup]&&ok;};
     group(@"磨皮",100); toggle(@"启用磨皮",PGSmoothingEnabled,YES);
     slider(PGAmount); slider(PGMidtone); slider(PGRadius); toggle(@"保护五官",PGFeatureProtect,YES); end();
     group(@"肤色",101); toggle(@"启用肤色",PGColorEnabled,YES);
-    ok=[api addPopupMenuWithName:@"肤色风格" parameterID:PGTonePreset defaultValue:0 menuEntries:@[@"原色",@"自然白",@"冷白",@"暖白",@"红润白",@"小麦",@"古铜"] parameterFlags:0]&&ok;
+    ok=[api addPopupMenuWithName:@"肤色风格" parameterID:PGTonePreset defaultValue:0 menuEntries:@[@"原色",@"自然白",@"冷白",@"暖白",@"红润白",@"小麦",@"古铜"] parameterFlags:kFxParameterFlag_HIDDEN]&&ok;
     slider(PGBrightness); slider(PGHue); slider(PGSaturation); slider(PGEvenTone); slider(PGTeeth); slider(PGEyeBright); end();
     group(@"细节",102); toggle(@"启用细节",PGDetailEnabled,YES); slider(PGHighPass); slider(PGSharpness); end();
     group(@"脸型",103); toggle(@"启用脸型",PGShapeEnabled,YES);
     UInt32 shape[]={PGThin,PGBigEye,PGShort,PGNarrow,PGChin,PGVFace,PGJaw,PGCheekbone,PGSmallHead,PGSmallHeadRange};
     for(NSUInteger i=0;i<sizeof(shape)/sizeof(UInt32);i++) slider(shape[i]); end();
     group(@"人脸选择与跟踪",104); toggle(@"只处理选中人脸",PGSingleFace,NO);
-    ok=[api addPointParameterWithName:@"选脸位置" parameterID:PGSelection defaultX:.5 defaultY:.5 parameterFlags:0]&&ok;
+    ok=[api addPointParameterWithName:@"选脸位置" parameterID:PGSelection defaultX:.5 defaultY:.5 parameterFlags:kFxParameterFlag_HIDDEN]&&ok;
     toggle(@"多人高速模式",PGFastMulti,NO); slider(PGJumpGuard);
     toggle(@"使用跟踪数据",PGTrackEnabled,NO);
-    ok=[api addPopupMenuWithName:@"跟踪目标" parameterID:PGTarget defaultValue:0 menuEntries:@[@"目标 1",@"目标 2",@"目标 3"] parameterFlags:kFxParameterFlag_NOT_ANIMATABLE]&&ok;
+    ok=[api addPopupMenuWithName:@"跟踪目标" parameterID:PGTarget defaultValue:0 menuEntries:@[@"目标 1",@"目标 2",@"目标 3"] parameterFlags:kFxParameterFlag_NOT_ANIMATABLE|kFxParameterFlag_HIDDEN]&&ok;
-    ok=[api addPushButtonWithName:@"向前分析" parameterID:PGAnalyzeForward selector:@selector(analyzeForward) parameterFlags:0]&&ok;
+    ok=[api addPushButtonWithName:@"向前分析" parameterID:PGAnalyzeForward selector:@selector(analyzeForward) parameterFlags:kFxParameterFlag_HIDDEN|kFxParameterFlag_DISABLED]&&ok;
-    ok=[api addPushButtonWithName:@"向后分析" parameterID:PGAnalyzeBackward selector:@selector(analyzeBackward) parameterFlags:0]&&ok;
+    ok=[api addPushButtonWithName:@"向后分析" parameterID:PGAnalyzeBackward selector:@selector(analyzeBackward) parameterFlags:kFxParameterFlag_HIDDEN|kFxParameterFlag_DISABLED]&&ok;
-    ok=[api addPushButtonWithName:@"清除当前目标" parameterID:PGClearTrack selector:@selector(clearTracking) parameterFlags:0]&&ok;
+    ok=[api addPushButtonWithName:@"清除当前目标" parameterID:PGClearTrack selector:@selector(clearTracking) parameterFlags:kFxParameterFlag_HIDDEN|kFxParameterFlag_DISABLED]&&ok;
-    ok=[api addStringParameterWithName:@"跟踪状态" parameterID:PGStatus defaultValue:@"选择画面中的人脸后开始分析" parameterFlags:kFxParameterFlag_NOT_ANIMATABLE|kFxParameterFlag_DISABLED]&&ok;
+    ok=[api addStringParameterWithName:@"跟踪状态" parameterID:PGStatus defaultValue:@"自动人脸跟随" parameterFlags:kFxParameterFlag_NOT_ANIMATABLE|kFxParameterFlag_DISABLED|kFxParameterFlag_HIDDEN]&&ok;
     toggle(@"显示人脸框",PGFaceBoxes,NO); toggle(@"显示跟踪框",PGTrackBoxes,NO); end();
     group(@"蒙版与输出",105); slider(PGThreshold); slider(PGSoftness); slider(PGEdgeProtect);
     toggle(@"预览蒙版",PGShowMask,NO); toggle(@"反转蒙版",PGInvertMask,NO);
-    ok=[api addPopupMenuWithName:@"蒙版通道" parameterID:PGDebugChannel defaultValue:0 menuEntries:@[@"皮肤",@"牙齿",@"眼睛"] parameterFlags:0]&&ok;
+    ok=[api addPopupMenuWithName:@"蒙版通道" parameterID:PGDebugChannel defaultValue:0 menuEntries:@[@"皮肤",@"牙齿",@"眼睛"] parameterFlags:kFxParameterFlag_HIDDEN]&&ok;
     slider(PGMix); end();
     for(UInt32 identifier=PGTrackData1;identifier<=PGTrackData3;identifier++)
         ok=[api addStringParameterWithName:@"分析数据" parameterID:identifier defaultValue:@"" parameterFlags:kFxParameterFlag_HIDDEN|kFxParameterFlag_NOT_ANIMATABLE]&&ok;
     return ok ? YES : PGFail(error,@"宿主未能创建完整的人像美化参数。");
 }
+- (NSView *)createViewForParameterID:(UInt32)identifier {
+    if(identifier!=PGInspectorPanel)return nil;
+    PGInspectorView *view=[[PGInspectorView alloc] initWithAPIManager:_apiManager];
+    @synchronized(_inspectorViews){[_inspectorViews addObject:view];}return view;
+}
+- (BOOL)parameterChanged:(UInt32)identifier atTime:(CMTime)time error:(NSError **)error {
+    // The host callback covers undo and playhead-driven parameter changes. Hop
+    // to AppKit's thread and avoid retaining remote inspector views in render.
+    NSArray *views;@synchronized(_inspectorViews){views=_inspectorViews.allObjects;}
+    for(PGInspectorView *view in views)dispatch_async(dispatch_get_main_queue(), ^{[view hostParameterChanged];});
+    return YES;
+}
+- (Class)classForCustomParameterID:(UInt32)identifier {return identifier==PGInspectorPanel?PGInspectorState.class:Nil;}
+- (NSSet<Class> *)classesForCustomParameterID:(UInt32)identifier {
+    return identifier==PGInspectorPanel?[NSSet setWithObjects:PGInspectorState.class,NSDictionary.class,NSNumber.class,NSSet.class,nil]:[NSSet set];
+}
 - (PGBeautySettings)settingsAtTime:(CMTime)time {
     PGBeautySettings s=PGBeautyDefaults();
     id<FxParameterRetrievalAPI_v6> api=[_apiManager apiForProtocol:@protocol(FxParameterRetrievalAPI_v6)];
@@ -177,6 +214,13 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
     enabled=YES; [api getBoolValue:&enabled fromParameter:PGShapeEnabled atTime:time];
     if(!enabled) s.faceThin=s.faceBigEye=s.faceShort=s.faceNarrow=s.faceChin=s.faceV=s.faceJaw=s.faceCheekbone=s.faceSmallHead=0;
     if(s.fastMultiFace) s.singleFace=0;
+    NSObject *panel=nil;
+    [api getCustomParameterValue:&panel fromParameter:PGInspectorPanel atTime:time];
+    if([panel isKindOfClass:PGInspectorState.class])s=PGSettingsWithInspectorState(s,(PGInspectorState *)panel);
+    // The current product follows faces automatically. Old manual-analysis and
+    // debug values remain saved for document compatibility, but cannot silently
+    // override live geometry or leave an invisible mask/selection mode active.
+    s.trackingEnabled=0;s.singleFace=0;s.showMask=0;s.invertMask=0;s.debugChannel=0;s.showFaceBoxes=0;
     return s;
 }
 - (NSArray<NSString *> *)trackStrings {
@@ -192,7 +236,7 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
     if(!state) return PGFail(error,@"缺少渲染状态输出位置。");
     if(![_apiManager apiForProtocol:@protocol(FxParameterRetrievalAPI_v6)]) return PGFail(error,@"无法读取宿主参数。");
     PGBeautySettings s=[self settingsAtTime:time];
-    *state=[NSPropertyListSerialization dataWithPropertyList:@{@"settings":[NSData dataWithBytes:&s length:sizeof(s)],@"tracks":[self trackStrings]} format:NSPropertyListBinaryFormat_v1_0 options:0 error:error];
+    *state=[NSPropertyListSerialization dataWithPropertyList:@{@"settings":[NSData dataWithBytes:&s length:sizeof(s)],@"tracks":@[@"",@"",@""]} format:NSPropertyListBinaryFormat_v1_0 options:0 error:error];
     return *state!=nil;
 }
 - (BOOL)destinationImageRect:(FxRect *)rect sourceImages:(NSArray<FxImageTile *> *)sources destinationImage:(FxImageTile *)destination pluginState:(NSData *)state atTime:(CMTime)time error:(NSError **)error {
@@ -222,6 +266,7 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
         if(![plist isKindOfClass:NSDictionary.class]||![plist[@"settings"] isKindOfClass:NSData.class]||[plist[@"settings"] length]!=sizeof(PGBeautySettings)) return PGFail(error,@"渲染状态版本无效。");
         PGBeautySettings s;[plist[@"settings"] getBytes:&s length:sizeof(s)];
         if(s.version!=1) return PGFail(error,@"此版本不支持保存的渲染状态。");
+        s.trackingEnabled=0;s.singleFace=0;
         CIImage *input=PGImageFromTile(sources.firstObject); if(!input) return PGFail(error,@"无法读取 IOSurface。");
         @synchronized(self) {
             if(!_reportedRender) {
@@ -239,13 +284,7 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
         @synchronized(_faceProcessor) {
             NSArray *tracks=plist[@"tracks"];
             if(![tracks isKindOfClass:NSArray.class]||tracks.count!=3) return PGFail(error,@"跟踪状态无效。");
-            if(![_loadedTracks isEqualToArray:tracks]) {
+            for(id track in tracks) if(![track isKindOfClass:NSString.class]) return PGFail(error,@"跟踪记录无效。");
-                for(NSUInteger i=0;i<3;i++) {
-                    if(![tracks[i] isKindOfClass:NSString.class]) return PGFail(error,@"跟踪记录无效。");
-                    [_faceProcessor setTrackingData:[[NSData alloc] initWithBase64EncodedString:tracks[i] options:0] forTarget:i];
-                }
-                _loadedTracks=[tracks copy];
-            }
             NSError *stageError=nil;
             PGFaceFrame *frame=[_faceProcessor processImage:input settings:s time:time error:&stageError];
             if(!frame) { os_log_error(PGRenderLog(), "face processing failed: %{public}@",stageError); if(error)*error=stageError; return NO; }
@@ -263,7 +302,6 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
         FxRect b=destination.tilePixelBounds;
         output=[output imageByApplyingTransform:CGAffineTransformMakeTranslation(-b.left,-b.bottom)];
         size_t width=IOSurfaceGetWidth((__bridge IOSurfaceRef)destination.ioSurface),height=IOSurfaceGetHeight((__bridge IOSurfaceRef)destination.ioSurface);
-        if(destination.imageOrigin==kFxImageOrigin_TOP_LEFT) output=[output imageByApplyingTransform:CGAffineTransformMake(1,0,0,-1,0,height)];
         @try {[context render:output toIOSurface:(__bridge IOSurfaceRef)destination.ioSurface bounds:CGRectMake(0,0,width,height) colorSpace:nil];}
         @catch(NSException *exception) {return PGFail(error,exception.reason?:@"图像处理失败。");}
         return YES;
@@ -287,7 +325,8 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
     // A separate processor owns the mutable analysis session. Render snapshots
     // cannot overwrite records being accumulated by the analyzer.
     _analysisFaceProcessor=[PGFaceProcessor new];
-    [_analysisFaceProcessor setTrackingData:[[NSData alloc] initWithBase64EncodedString:tracks[s.targetIndex] options:0] forTarget:s.targetIndex];
+    NSData *previous=[[NSData alloc] initWithBase64EncodedString:tracks[s.targetIndex] options:0];
+    [_analysisFaceProcessor setTrackingData:PGCompatibleHostTrack(previous)?previous:nil forTarget:s.targetIndex];
     _analysisSettings=s;_analysisSettings.trackingEnabled=1;_analysisSettings.singleFace=1;
     _analysisForward=forward;_analyzing=YES;
     BOOL ok=forward?[api startForwardAnalysis:kFxAnalysisLocation_CPU error:&error]:[api startBackwardAnalysis:kFxAnalysisLocation_CPU error:&error];
@@ -332,6 +371,7 @@ static CIImage *PGImageFromTile(FxImageTile *tile) {
     id<FxParameterSettingAPI_v5> api=[_apiManager apiForProtocol:@protocol(FxParameterSettingAPI_v5)];
     NSData *data=nil;
     @synchronized(_analysisFaceProcessor) {data=[_analysisFaceProcessor trackingDataForTarget:_analysisSettings.targetIndex];}
+    data=PGMarkHostTrack(data);
     @synchronized(_faceProcessor) {_loadedTracks=nil;}
     if(data.length>64*1024*1024) {
         _analyzing=NO;

beatygril/beatygril/Wrapper Application/Info.plist

@@ -17,9 +17,9 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.0.5</string>
+	<string>1.1.2</string>
 	<key>CFBundleVersion</key>
-	<string>7</string>
+	<string>13</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>$(MACOSX_DEPLOYMENT_TARGET)</string>
 	<key>NSHumanReadableCopyright</key>

docs/analysis/chin-report.json

@@ -0,0 +1,75 @@
+{
+  "date": "2026-10-21",
+  "target_sha256": "f01e8c0b7e2676b2961950b0e48efdd2589af218e4b36de7d39f5d1c76852bfb",
+  "claim_type": "static CPU assembly/constants and Metal AIR reconstruction, independently tested; no native-host observation",
+  "chin_pins": [
+    [
+      68,
+      38
+    ],
+    [
+      67,
+      37
+    ],
+    [
+      66,
+      36
+    ]
+  ],
+  "chin_parameter_index": 5,
+  "signed_slider_range": [
+    -1,
+    1
+  ],
+  "positive_scale": 0.04,
+  "negative_scale": 0.02,
+  "cpu_evidence": [
+    "ev_640ccb714c5ce00d3864844af319fc574d223810dde08443d2ef2e8f1e989c47",
+    "ev_8bc31392c07788d2482546121297c3f177d527282275ef21fd3e5edef9921544"
+  ],
+  "air_sha256": "f97705b88f5491057df2117aef457ffca84e11020574cd57742b0670db4484d8",
+  "air_file_local_ignored": "build/pose-analysis/face-thin.air.txt",
+  "coordinate_contract": "Vision normalized y-up; upload pins and sampling coordinate converted once to y-down UV, result returned to CI y-up",
+  "gain": "clamp(280/max(length((P75-P59)*imageSize),2*length((P67-(P74+P60)/2)*imageSize),1),1,2.25)",
+  "pin_formula": "q=clamp(q-(anchor-origin)*ratio*clamp(1-distance(q,origin)/distance(anchor,origin),0,1),0,1)",
+  "positive_visual_direction": "chin toward lower lip (shorter)",
+  "negative_visual_direction": "chin away from lower lip (longer)",
+  "verification": {
+    "beauty": 49,
+    "face": 116,
+    "thin_chin": 394,
+    "failures": 0,
+    "maximum_uv_oracle_error": 1.09828022e-05,
+    "realVideoASanChecks": 494,
+    "realVideoFrames": 11,
+    "independentAnatomicalChecks": 12,
+    "fullChecks": 904,
+    "hostAdapterASanChecks": 247,
+    "oscASanChecks": 98,
+    "allOriginTagsPixelIdentical": true,
+    "maxByteErrorVsIndependentCIReference": 2,
+    "oldFlipNegativeControl": {
+      "checks": 120,
+      "expectedFailures": 30,
+      "topTopDefaultMaxByteError": 0,
+      "topTopBigEyeMaxByteError": 66,
+      "topTopChinPositiveMaxByteError": 52,
+      "topTopChinNegativeMaxByteError": 21,
+      "scope": "temporary current source with only two old flips restored; three-pin chin already fixed; not same as old Gaussian eye-hotspot counterexample"
+    }
+  },
+  "limitations": [
+    "Seven other shape controls remain approximations.",
+    "Combined analytic controls and multi-face resampling order is not fully reference equivalent.",
+    "Motion/FCP final visual validation is reserved for user."
+  ],
+  "adapterCorrection": {
+    "change": "remove imageOrigin-based input/output flips to match reference CI/IOSurface path",
+    "legacyTrackPolicy": "preserve unmarked strings but use realtime follow; reanalysis writes hostCoordinateSpace=iosurface-ci-y-up-v1",
+    "referenceOutputEvidence": [
+      "ev_88a71ec62fade296495f1e3f5428cdb15ad4cda43866e09fb040fa3a4bdb0440",
+      "ev_110d76f7958decb0c56b7daafe292d60a8bc56cd035b40a997f61395cb91ebfe"
+    ],
+    "nativeBufferCaptured": false
+  }
+}

docs/analysis/rea-chin.json

@@ -0,0 +1 @@
+{"artifacts":[{"architecture":"arm64","digest":{"sha256":"f01e8c0b7e2676b2961950b0e48efdd2589af218e4b36de7d39f5d1c76852bfb"},"format":"mach-o"}],"captures":[],"environments":[],"providers":[{"id":"ghidra","name":"Ghidra","version":"12.1.4"}],"records":[{"analysis_profile":{"digest":"20565088524a2d0359b9b96f46ac48e679d774c7b0092c56abc06de8fdbec11c","parameters":{"analyzer_preset":"ghidra-default","annotation_policy":"atomic-function-entry-metadata-v1","architecture":"arm64","available_architectures":["arm64"],"compiler_spec_id":"auto-default","decompiler_jump_loads":true,"function_body_evidence":"complete-inclusive-ranges-v1","function_boundary_observations":"ghidra-terminal-call-limitations-v1","function_references":"complete-body-and-entry-reference-manager-v2","import_mode":"ephemeral-source-immutable","instruction_flow_evidence":"decoded-return-pcode-v1","jump_table_evidence":"typed-case-default-blocks-v1","language_id":"auto-from-header","load_image_observations":"source-mappings-entry-context-v2","loader":"auto-from-header","location_resolution":"explicit-address-exact-entry-symbol-first-v3","no_return_repair":"returning-imports-decoded-return-v2","process_launch":"inspected-jvm-launch-support-v1","string_inventory_evidence":"defined-data-coverage-v1","target_format":"mach-o","target_kind":"executable"},"provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"}},"authority":"shipped-artifact","confidence":"observed","environment":null,"evidence_id":"ev_640ccb714c5ce00d3864844af319fc574d223810dde08443d2ef2e8f1e989c47","evidence_links":[],"limitations":["The session serves operations only after Ghidra reports default auto-analysis complete; incomplete analysis does not expose partial results.","The imported Program and temporary project are ephemeral and deleted on close. Annotation operations edit session database metadata; original executable bytes are never written.","Cancelling an active Ghidra request terminates its ephemeral database and discards session annotations. The selected target remains open; the next provider query imports the original artifact again.","Default-space addresses use lowercase 0x-prefixed hexadecimal; other address spaces use <percent-encoded-space>:0x<hex>.","Bytes reflect Ghidra's initialized memory, including loader fixups. Reads stop at an unmapped or uninitialized byte and report completeness explicitly.","macOS sessions require a matching executable Ghidra native decompiler; REA checks for it but does not build native components or change Gatekeeper quarantine state."],"locations":[],"normalized_result":{"address":"0x10005f9c0","bytes_hex":"7b14ae47e17a943f7b14ae47e17aa43f","complete":true,"requested_bytes":16,"returned_bytes":16},"operation":"read_bytes","parameters":{"address":"0x10005f9c0","length":16},"predicate_type":"rea.analysis","provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"},"raw_result":{"address":"0x10005f9c0","bytes_hex":"7b14ae47e17a943f7b14ae47e17aa43f","complete":true,"requested_bytes":16,"returned_bytes":16},"subject":{"architecture":"arm64","digest":{"sha256":"f01e8c0b7e2676b2961950b0e48efdd2589af218e4b36de7d39f5d1c76852bfb"},"format":"mach-o","local_path":"/private/tmp/paintfcp-rea.b3j9Te/MSE18V2-arm64","name":"MSE18V2-arm64"}},{"analysis_profile":{"digest":"20565088524a2d0359b9b96f46ac48e679d774c7b0092c56abc06de8fdbec11c","parameters":{"analyzer_preset":"ghidra-default","annotation_policy":"atomic-function-entry-metadata-v1","architecture":"arm64","available_architectures":["arm64"],"compiler_spec_id":"auto-default","decompiler_jump_loads":true,"function_body_evidence":"complete-inclusive-ranges-v1","function_boundary_observations":"ghidra-terminal-call-limitations-v1","function_references":"complete-body-and-entry-reference-manager-v2","import_mode":"ephemeral-source-immutable","instruction_flow_evidence":"decoded-return-pcode-v1","jump_table_evidence":"typed-case-default-blocks-v1","language_id":"auto-from-header","load_image_observations":"source-mappings-entry-context-v2","loader":"auto-from-header","location_resolution":"explicit-address-exact-entry-symbol-first-v3","no_return_repair":"returning-imports-decoded-return-v2","process_launch":"inspected-jvm-launch-support-v1","string_inventory_evidence":"defined-data-coverage-v1","target_format":"mach-o","target_kind":"executable"},"provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"}},"authority":"shipped-artifact","confidence":"observed","environment":null,"evidence_id":"ev_8bc31392c07788d2482546121297c3f177d527282275ef21fd3e5edef9921544","evidence_links":[],"limitations":["The session serves operations only after Ghidra reports default auto-analysis complete; incomplete analysis does not expose partial results.","The imported Program and temporary project are ephemeral and deleted on close. Annotation operations edit session database metadata; original executable bytes are never written.","Cancelling an active Ghidra request terminates its ephemeral database and discards Line truncated

docs/analysis/rea-jaw-short.json

@@ -0,0 +1 @@
+{"artifacts":[{"architecture":"arm64","digest":{"sha256":"f01e8c0b7e2676b2961950b0e48efdd2589af218e4b36de7d39f5d1c76852bfb"},"format":"mach-o"}],"captures":[],"environments":[],"providers":[{"id":"ghidra","name":"Ghidra","version":"12.1.4"}],"records":[{"analysis_profile":{"digest":"20565088524a2d0359b9b96f46ac48e679d774c7b0092c56abc06de8fdbec11c","parameters":{"analyzer_preset":"ghidra-default","annotation_policy":"atomic-function-entry-metadata-v1","architecture":"arm64","available_architectures":["arm64"],"compiler_spec_id":"auto-default","decompiler_jump_loads":true,"function_body_evidence":"complete-inclusive-ranges-v1","function_boundary_observations":"ghidra-terminal-call-limitations-v1","function_references":"complete-body-and-entry-reference-manager-v2","import_mode":"ephemeral-source-immutable","instruction_flow_evidence":"decoded-return-pcode-v1","jump_table_evidence":"typed-case-default-blocks-v1","language_id":"auto-from-header","load_image_observations":"source-mappings-entry-context-v2","loader":"auto-from-header","location_resolution":"explicit-address-exact-entry-symbol-first-v3","no_return_repair":"returning-imports-decoded-return-v2","process_launch":"inspected-jvm-launch-support-v1","string_inventory_evidence":"defined-data-coverage-v1","target_format":"mach-o","target_kind":"executable"},"provider":{"id":"ghidra","name":"Ghidra","version":"12.1.4"}},"authority":"shipped-artifact","confidence":"observed","environment":null,"evidence_id":"ev_8bc31392c07788d2482546121297c3f177d527282275ef21fd3e5edef9921544","evidence_links":[],"limitations":["The session serves operations only after Ghidra reports default auto-analysis complete; incomplete analysis does not expose partial results.","The imported Program and temporary project are ephemeral and deleted on close. Annotation operations edit session database metadata; original executable bytes are never written.","Cancelling an active Ghidra request terminates its ephemeral database and discards session annotations. The selected target remains open; the next provider query imports the original artifact again.","Default-space addresses use lowercase 0x-prefixed hexadecimal; other address spaces use <percent-encoded-space>:0x<hex>.","Assembly is Ghidra Listing text and does not claim textual equivalence with Hopper output.","macOS sessions require a matching executable Ghidra native decompiler; REA checks for it but does not build native components or change Gatekeeper quarantine state."],"locations":[],"normalized_result":"0x1000279f4: stp d9, d8, [sp, #-0x30]!\n0x1000279f8: stp x20, x19, [sp, #0x10]\n0x1000279fc: stp x29, x30, [sp, #0x20]\n0x100027a00: add x29, sp, #0x20\n0x100027a04: fmov d8, d0\n0x100027a08: str xzr, [x8, #0x20]\n0x100027a0c: movi v0.2D, #0x0\n0x100027a10: stp q0, q0, [x8]\n0x100027a14: cbz x0, 0x100027bac\n0x100027a18: mov x20, x0\n0x100027a1c: mov x19, x8\n0x100027a20: bl 0x10001a8c0\n0x100027a24: cbz w0, 0x100027bac\n0x100027a28: fmov d1, 0x3ff0000000000000\n0x100027a2c: fcmp d8, d1\n0x100027a30: fcsel d2, d1, d8, gt\n0x100027a34: fcmp d8, #0.0\n0x100027a38: movi d0, #0x0\n0x100027a3c: fcsel d2, d0, d2, mi\n0x100027a40: fcvt s2, d2\n0x100027a44: ldr d3, [x20, #0x80]\n0x100027a48: fcmp d3, d1\n0x100027a4c: fcsel d4, d1, d3, gt\n0x100027a50: fmov d5, -0x4010000000000000\n0x100027a54: fcmp d3, d5\n0x100027a58: fcsel d4, d5, d4, mi\n0x100027a5c: fcmp d4, #0.0\n0x100027a60: cset w8, gt\n0x100027a64: fcvt d3, s2\n0x100027a68: ldp d5, d2, [x20, #0x60]\n0x100027a6c: fcmp d2, d1\n0x100027a70: fcsel d6, d1, d2, gt\n0x100027a74: adrp x9, 0x10005f000\n0x100027a78: ldr d7, [x9, #0xb80]\n0x100027a7c: fmul d6, d6, d7\n0x100027a80: fcmp d2, #0.0\n0x100027a84: fcsel d2, d0, d6, mi\n0x100027a88: fmul d2, d2, d3\n0x100027a8c: fcvt s2, d2\n0x100027a90: add x9, x20, #0x78\n0x100027a94: ldur q6, [x20, #0x88]\n0x100027a98: ld1 v5, x9, \n0x100027a9c: adrp x9, 0x10005f000\n0x100027aa0: ldr q7, [x9, #0x980]\n0x100027aa4: fcmgt v7.2D, v7.2D, v5.2D\n0x100027aa8: fcmlt v16.2D, v6.2D\n0x100027aac: fmov v17.2D, #0x3ff0000000000000\n0x100027ab0: fcmgt v18.2D, v5.2D, v17.2D\n0x100027ab4: bit v5.16B, v17.16B, v18.16B\n0x100027ab8: fcmgt v18.2D, v6.2D, v17.2D\n0x100027abc: bit v6.16B, v17.16B, v18.16B\n0x100027ac0: adrp x9, 0x10005f000\n0x100027ac4: ldr q18, [x9, #0x990]\n0x100027ac8: fmul v5.2D, v5.2D, v18.2D\n0x100027acc: adrp x9, 0x10005f000\n0x100027ad0: ldr q18, [x9, #0x9a0]\n0x100027ad4: fmul v6.2D, v6.2D, v18.2D\n0x100027ad8: adrp x9, 0x10005f000\n0x100027adc: ldr q18, [x9, #0x9b0]\n0x100027ae0: bit v5.16B, v18.16B, v7.16B\n0x100027ae4: bic v6.16B, v6.16B, v16.16B\n0x100027ae8: fmul v6.2D, v6.2D, v3.D[0x0]\n0x100027aec: fmul v5.2D, v5.2D, v3.D[0x0]\n0x100027af0: fcvtn v5.2S, v5.2D\n0x100027af4: fcvtn2 v5.4S, v6.2D\n0x100027af8: ldr d6, [x20, #0x98]\n0x100027afc: fcmp d6, d1\n0x100027b00: fcsel d7, d1, d6, gt\n0x100027b04: adrp x9, 0x10005f000\n0x100027b08: ldr d16, [x9, #0xe68]\n0x100027b0c: fmul d7, d7, d16\n0x100027b10: fcmp d6, #0.0\n0x100027b14:Line truncated

docs/analysis/short-jaw-air.txt

@@ -0,0 +1,371 @@
+Source AIR SHA256: f97705b88f5491057df2117aef457ffca84e11020574cd57742b0670db4484d8
+Line numbers refer to the complete original metal-objdump text. Static IR; original shader not executed.
+
+583: define internal fastcc <2 x float> @_ZL25mssFaceShapePinCoordinateDv2_fPU11MTLconstantK16MSSFaceThinPointi18MSSFaceShapeParamsS_(<2 x float> %0, %struct.MSSFaceThinPoint addrspace(2)* nocapture readonly %1, i32 %2, float %3, float %4, float %5, float %6, float %7, float %8, float %9, float %10, float %11, float %12, <2 x float> %13) unnamed_addr #2 {
+584:   %15 = alloca [17 x <3 x i32>], align 16
+585:   %16 = alloca [16 x <2 x i32>], align 8
+586:   %17 = alloca [4 x <2 x i32>], align 8
+587:   %18 = alloca [6 x <3 x i32>], align 16
+588:   %19 = alloca [6 x <2 x i32>], align 8
+589:   %20 = alloca [3 x <2 x i32>], align 8
+590:   %21 = alloca [11 x i32], align 4
+591:   %22 = alloca [11 x <2 x float>], align 8
+592:   %23 = add nsw i32 %2, 75
+593:   %24 = sext i32 %23 to i64
+594:   %25 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %24, i32 0
+595:   %26 = load <2 x float>, <2 x float> addrspace(2)* %25, align 8, !tbaa !62
+596:   %27 = add nsw i32 %2, 59
+597:   %28 = sext i32 %27 to i64
+598:   %29 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %28, i32 0
+599:   %30 = load <2 x float>, <2 x float> addrspace(2)* %29, align 8, !tbaa !62
+600:   %31 = add nsw i32 %2, 67
+601:   %32 = sext i32 %31 to i64
+602:   %33 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %32, i32 0
+603:   %34 = load <2 x float>, <2 x float> addrspace(2)* %33, align 8, !tbaa !62
+604:   %35 = add nsw i32 %2, 74
+605:   %36 = sext i32 %35 to i64
+606:   %37 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %36, i32 0
+607:   %38 = load <2 x float>, <2 x float> addrspace(2)* %37, align 8, !tbaa !62
+608:   %39 = add nsw i32 %2, 60
+609:   %40 = sext i32 %39 to i64
+610:   %41 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %40, i32 0
+611:   %42 = load <2 x float>, <2 x float> addrspace(2)* %41, align 8, !tbaa !62
+612:   %43 = fadd fast <2 x float> %42, %38
+613:   %44 = fmul fast <2 x float> %43, <float 5.000000e-01, float 5.000000e-01>
+614:   %45 = fsub fast <2 x float> %26, %30
+615:   %46 = fmul fast <2 x float> %45, %13
+616:   %47 = tail call fast float @air.dot.v2f32(<2 x float> %46, <2 x float> %46) #3
+617:   %48 = tail call fast float @air.fast_sqrt.f32(float %47) #3
+618:   %49 = fsub fast <2 x float> %34, %44
+619:   %50 = fmul fast <2 x float> %49, %13
+620:   %51 = tail call fast float @air.dot.v2f32(<2 x float> %50, <2 x float> %50) #3
+621:   %52 = tail call fast float @air.fast_sqrt.f32(float %51) #3
+622:   %53 = fmul fast float %52, 2.000000e+00
+623:   %54 = tail call fast float @air.fast_fmax.f32(float %48, float %53) #3
+624:   %55 = tail call fast float @air.fast_fmax.f32(float %54, float 1.000000e+00) #3
+625:   %56 = fdiv fast float 2.800000e+02, %55
+626:   %57 = tail call fast float @air.fast_clamp.f32(float %56, float 1.000000e+00, float 2.250000e+00) #3
+627:   %58 = fmul fast float %57, %3
+628:   %59 = fmul fast float %57, %4
+629:   %60 = fmul fast float %57, %5
+630:   %61 = fmul fast float %57, %6
+631:   %62 = fmul fast float %57, %7
+632:   %63 = fmul fast float %57, %8
+633:   %64 = fmul fast float %57, %9
+634:   %65 = tail call fast float @air.fast_fabs.f32(float %58) #3
+635:   %66 = fcmp fast ogt float %65, 0x3EB0C6F7A0000000
+
+899: 251:                                              ; preds = %212, %200
+900:   %252 = phi <2 x float> [ %248, %212 ], [ %201, %200 ]
+901:   %253 = tail call fast float @air.fast_fabs.f32(float %61) #3
+902:   %254 = fcmp fast ogt float %253, 0x3EB0C6F7A0000000
+903:   br i1 %254, label %255, label %309
+904:
+905: 255:                                              ; preds = %251
+906:   %256 = bitcast [6 x <3 x i32>]* %18 to i8*
+907:   call void @llvm.lifetime.start.p0i8(i64 96, i8* nonnull %256) #8
+908:   %257 = getelementptr inbounds [6 x <3 x i32>], [6 x <3 x i32>]* %18, i64 0, i64 0
+909:   store <3 x i32> <i32 72, i32 71, i32 29>, <3 x i32>* %257, align 16
+910:   %258 = getelementptr inbounds [6 x <3 x i32>], [6 x <3 x i32>]* %18, i64 0, i64 1
+911:   store <3 x i32> <i32 62, i32 63, i32 29>, <3 x i32>* %258, align 16
+912:   %259 = getelementptr inbounds [6 x <3 x i32>], [6 x <3 x i32>]* %18, i64 0, i64 2
+913:   store <3 x i32> <i32 71, i32 70, i32 29>, <3 x i32>* %259, align 16
+914:   %260 = getelementptr inbounds [6 x <3 x i32>], [6 x <3 x i32>]* %18, i64 0, i64 3
+915:   store <3 x i32> <i32 63, i32 64, i32 29>, <3 x i32>* %260, align 16
+916:   %261 = getelementptr inbounds [6 x <3 x i32>], [6 x <3 x i32>]* %18, i64 0, i64 4
+917:   store <3 x i32> <i32 70, i32 71, i32 29>, <3 x i32>* %261, align 16
+918:   %262 = getelementptr inbounds [6 x <3 x i32>], [6 x <3 x i32>]* %18, i64 0, i64 5
+919:   store <3 x i32> <i32 64, i32 63, i32 29>, <3 x i32>* %262, align 16
+920:   %263 = insertelement <2 x float> undef, float %61, i64 0
+921:   %264 = shufflevector <2 x float> %263, <2 x float> undef, <2 x i32> zeroinitializer
+922:   br label %266
+923:
+924: 265:                                              ; preds = %305
+925:   call void @llvm.lifetime.end.p0i8(i64 96, i8* nonnull %256) #8
+926:   br label %309
+927:
+928: 266:                                              ; preds = %305, %255
+929:   %267 = phi <2 x float> [ %252, %255 ], [ %306, %305 ]
+930:   %268 = phi i32 [ 0, %255 ], [ %307, %305 ]
+931:   %269 = zext i32 %268 to i64
+932:   %270 = getelementptr inbounds [6 x <3 x i32>], [6 x <3 x i32>]* %18, i64 0, i64 %269
+933:   %271 = load <3 x i32>, <3 x i32>* %270, align 16
+934:   %272 = extractelement <3 x i32> %271, i64 0
+935:   %273 = add nsw i32 %272, %2
+936:   %274 = sext i32 %273 to i64
+937:   %275 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %274, i32 0
+938:   %276 = load <2 x float>, <2 x float> addrspace(2)* %275, align 8, !tbaa !62
+939:   %277 = extractelement <3 x i32> %271, i64 1
+940:   %278 = add nsw i32 %277, %2
+941:   %279 = sext i32 %278 to i64
+942:   %280 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %279, i32 0
+943:   %281 = load <2 x float>, <2 x float> addrspace(2)* %280, align 8, !tbaa !62
+944:   %282 = fsub fast <2 x float> %276, %281
+945:   %283 = tail call fast float @air.dot.v2f32(<2 x float> %282, <2 x float> %282) #3
+946:   %284 = tail call fast float @air.fast_sqrt.f32(float %283) #3
+947:   %285 = fcmp fast ugt float %284, 0x3F1A36E2E0000000
+948:   br i1 %285, label %286, label %305
+949:
+950: 286:                                              ; preds = %266
+951:   %287 = extractelement <3 x i32> %271, i64 2
+952:   %288 = add nsw i32 %287, %2
+953:   %289 = sext i32 %288 to i64
+954:   %290 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %289, i32 0
+955:   %291 = load <2 x float>, <2 x float> addrspace(2)* %290, align 8, !tbaa !62
+956:   %292 = fsub fast <2 x float> %291, %276
+957:   %293 = fsub fast <2 x float> %267, %276
+958:   %294 = tail call fast float @air.dot.v2f32(<2 x float> %293, <2 x float> %293) #3
+959:   %295 = tail call fast float @air.fast_sqrt.f32(float %294) #3
+960:   %296 = fdiv fast float %295, %284
+961:   %297 = fsub fast float 1.000000e+00, %296
+962:   %298 = tail call fast float @air.fast_clamp.f32(float %297, float 0.000000e+00, float 1.000000e+00) #3
+963:   %299 = insertelement <2 x float> undef, float %298, i64 0
+964:   %300 = shufflevector <2 x float> %299, <2 x float> undef, <2 x i32> zeroinitializer
+965:   %301 = fmul fast <2 x float> %292, %264
+966:   %302 = fmul fast <2 x float> %301, %300
+967:   %303 = fsub fast <2 x float> %267, %302
+968:   %304 = tail call fast <2 x float> @air.fast_clamp.v2f32(<2 x float> %303, <2 x float> zeroinitializer, <2 x float> <float 1.000000e+00, float 1.000000e+00>) #3
+969:   br label %305
+970:
+971: 305:                                              ; preds = %286, %266
+972:   %306 = phi <2 x float> [ %304, %286 ], [ %267, %266 ]
+973:   %307 = add nuw nsw i32 %268, 1
+974:   %308 = icmp eq i32 %307, 6
+975:   br i1 %308, label %265, label %266, !llvm.loop !67
+976:
+977: 309:                                              ; preds = %265, %251
+978:   %310 = phi <2 x float> [ %306, %265 ], [ %252, %251 ]
+979:   %311 = tail call fast float @air.fast_fabs.f32(float %62) #3
+980:   %312 = fcmp fast ogt float %311, 0x3EB0C6F7A0000000
+981:   br i1 %312, label %313, label %372
+982:
+983: 313:                                              ; preds = %309
+984:   %314 = bitcast [6 x <2 x i32>]* %19 to i8*
+985:   call void @llvm.lifetime.start.p0i8(i64 48, i8* nonnull %314) #8
+986:   %315 = getelementptr inbounds [6 x <2 x i32>], [6 x <2 x i32>]* %19, i64 0, i64 0
+
+1127: 422:                                              ; preds = %383, %372
+1128:   %423 = phi <2 x float> [ %419, %383 ], [ %373, %372 ]
+1129:   %424 = tail call fast float @air.fast_fabs.f32(float %64) #3
+1130:   %425 = fcmp fast ogt float %424, 0x3EB0C6F7A0000000
+1131:   br i1 %425, label %426, label %585
+1132:
+1133: 426:                                              ; preds = %422
+1134:   %427 = bitcast [11 x i32]* %21 to i8*
+1135:   call void @llvm.lifetime.start.p0i8(i64 44, i8* nonnull %427) #8
+1136:   %428 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 0
+1137:   store i32 62, i32* %428, align 4
+1138:   %429 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 1
+1139:   store i32 63, i32* %429, align 4
+1140:   %430 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 2
+1141:   store i32 64, i32* %430, align 4
+1142:   %431 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 3
+1143:   store i32 65, i32* %431, align 4
+1144:   %432 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 4
+1145:   store i32 66, i32* %432, align 4
+1146:   %433 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 5
+1147:   store i32 67, i32* %433, align 4
+1148:   %434 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 6
+1149:   store i32 68, i32* %434, align 4
+1150:   %435 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 7
+1151:   store i32 69, i32* %435, align 4
+1152:   %436 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 8
+1153:   store i32 70, i32* %436, align 4
+1154:   %437 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 9
+1155:   store i32 71, i32* %437, align 4
+1156:   %438 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 10
+1157:   store i32 72, i32* %438, align 4
+1158:   %439 = add nsw i32 %2, 46
+1159:   %440 = sext i32 %439 to i64
+1160:   %441 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %440, i32 0
+1161:   %442 = load <2 x float>, <2 x float> addrspace(2)* %441, align 8, !tbaa !62
+1162:   %443 = add nsw i32 %2, 48
+1163:   %444 = sext i32 %443 to i64
+1164:   %445 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %444, i32 0
+1165:   %446 = load <2 x float>, <2 x float> addrspace(2)* %445, align 8, !tbaa !62
+1166:   %447 = bitcast [11 x <2 x float>]* %22 to i8*
+1167:   call void @llvm.lifetime.start.p0i8(i64 88, i8* nonnull %447) #8
+1168:   br label %492
+1169:
+1170: 448:                                              ; preds = %492
+1171:   %449 = fsub fast <2 x float> %442, %446
+1172:   %450 = extractelement <2 x float> %423, i64 1
+1173:   %451 = extractelement <2 x float> %423, i64 0
+1174:   %452 = getelementptr inbounds [11 x <2 x float>], [11 x <2 x float>]* %22, i64 0, i64 10
+1175:   %453 = load <2 x float>, <2 x float>* %452, align 8, !tbaa !62
+1176:   br label %454
+1177:
+1178: 454:                                              ; preds = %484, %448
+1179:   %455 = phi <2 x float> [ %453, %448 ], [ %460, %484 ]
+1180:   %456 = phi i8 [ 0, %448 ], [ %485, %484 ]
+1181:   %457 = phi i32 [ 0, %448 ], [ %486, %484 ]
+1182:   %458 = zext i32 %457 to i64
+1183:   %459 = getelementptr inbounds [11 x <2 x float>], [11 x <2 x float>]* %22, i64 0, i64 %458
+1184:   %460 = load <2 x float>, <2 x float>* %459, align 8, !tbaa !62
+1185:   %461 = extractelement <2 x float> %455, i64 1
+1186:   %462 = extractelement <2 x float> %460, i64 1
+1187:   %463 = fcmp fast ule float %462, %450
+1188:   %464 = fcmp fast ogt float %461, %450
+1189:   %465 = xor i1 %463, %464
+1190:   br i1 %465, label %484, label %466
+1191:
+1192: 466:                                              ; preds = %454
+1193:   %467 = fsub fast float %461, %462
+1194:   %468 = tail call fast float @air.fast_fabs.f32(float %467) #3
+1195:   %469 = fcmp fast ugt float %468, 0x3EB0C6F7A0000000
+1196:   %470 = fcmp fast olt float %467, 0.000000e+00
+1197:   %471 = select fast i1 %470, float 0xBEB0C6F7A0000000, float 0x3EB0C6F7A0000000
+1198:   %472 = select i1 %469, float %467, float %471
+1199:   %473 = extractelement <2 x float> %455, i64 0
+1200:   %474 = extractelement <2 x float> %460, i64 0
+1201:   %475 = fsub fast float %473, %474
+1202:   %476 = fsub fast float %450, %462
+1203:   %477 = fmul fast float %475, %476
+1204:   %478 = fdiv fast float %477, %472
+1205:   %479 = fadd fast float %478, %474
+1206:   %480 = fcmp fast olt float %451, %479
+1207:   br i1 %480, label %481, label %484
+1208:
+1209: 481:                                              ; preds = %466
+1210:   %482 = and i8 %456, 1
+1211:   %483 = xor i8 %482, 1
+1212:   br label %484
+1213:
+1214: 484:                                              ; preds = %481, %466, %454
+1215:   %485 = phi i8 [ %483, %481 ], [ %456, %466 ], [ %456, %454 ]
+1216:   %486 = add nuw nsw i32 %457, 1
+1217:   %487 = icmp eq i32 %486, 11
+1218:   br i1 %487, label %488, label %454, !llvm.loop !70
+1219:
+1220: 488:                                              ; preds = %484
+1221:   %489 = getelementptr inbounds [11 x <2 x float>], [11 x <2 x float>]* %22, i64 0, i64 0
+1222:   %490 = and i8 %485, 1
+1223:   %491 = load <2 x float>, <2 x float>* %489, align 8, !tbaa !62
+1224:   br label %506
+1225:
+1226: 492:                                              ; preds = %492, %426
+1227:   %493 = phi i32 [ 0, %426 ], [ %502, %492 ]
+1228:   %494 = zext i32 %493 to i64
+1229:   %495 = getelementptr inbounds [11 x i32], [11 x i32]* %21, i64 0, i64 %494
+1230:   %496 = load i32, i32* %495, align 4, !tbaa !53
+1231:   %497 = add nsw i32 %496, %2
+1232:   %498 = sext i32 %497 to i64
+1233:   %499 = getelementptr inbounds %struct.MSSFaceThinPoint, %struct.MSSFaceThinPoint addrspace(2)* %1, i64 %498, i32 0
+1234:   %500 = load <2 x float>, <2 x float> addrspace(2)* %499, align 8, !tbaa !62
+1235:   %501 = getelementptr inbounds [11 x <2 x float>], [11 x <2 x float>]* %22, i64 0, i64 %494
+1236:   store <2 x float> %500, <2 x float>* %501, align 8, !tbaa !62
+1237:   %502 = add nuw nsw i32 %493, 1
+1238:   %503 = icmp eq i32 %502, 11
+1239:   br i1 %503, label %448, label %492, !llvm.loop !71
+1240:
+1241: 504:                                              ; preds = %531
+1242:   %505 = icmp eq i8 %490, 0
+1243:   br i1 %505, label %559, label %540
+1244:
+1245: 506:                                              ; preds = %531, %488
+1246:   %507 = phi i32 [ 0, %488 ], [ %513, %531 ]
+1247:   %508 = phi <2 x float> [ %491, %488 ], [ %538, %531 ]
+1248:   %509 = phi float [ 1.000000e+01, %488 ], [ %537, %531 ]
+1249:   %510 = zext i32 %507 to i64
+1250:   %511 = getelementptr inbounds [11 x <2 x float>], [11 x <2 x float>]* %22, i64 0, i64 %510
+1251:   %512 = load <2 x float>, <2 x float>* %511, align 8, !tbaa !62
+1252:   %513 = add nuw nsw i32 %507, 1
+1253:   %514 = trunc i32 %513 to i8
+1254:   %515 = urem i8 %514, 11
+1255:   %516 = zext i8 %515 to i64
+1256:   %517 = getelementptr inbounds [11 x <2 x float>], [11 x <2 x float>]* %22, i64 0, i64 %516
+1257:   %518 = load <2 x float>, <2 x float>* %517, align 8, !tbaa !62
+1258:   %519 = fsub fast <2 x float> %518, %512
+1259:   %520 = tail call fast float @air.dot.v2f32(<2 x float> %519, <2 x float> %519) #3
+1260:   %521 = fcmp fast ugt float %520, 0x3EB0C6F7A0000000
+1261:   br i1 %521, label %522, label %531
+1262:
+1263: 522:                                              ; preds = %506
+1264:   %523 = fsub fast <2 x float> %423, %512
+1265:   %524 = tail call fast float @air.dot.v2f32(<2 x float> %523, <2 x float> %519) #3
+1266:   %525 = fdiv fast float %524, %520
+1267:   %526 = tail call fast float @air.fast_clamp.f32(float %525, float 0.000000e+00, float 1.000000e+00) #3
+1268:   %527 = insertelement <2 x float> undef, float %526, i64 0
+1269:   %528 = shufflevector <2 x float> %527, <2 x float> undef, <2 x i32> zeroinitializer
+1270:   %529 = fmul fast <2 x float> %528, %519
+1271:   %530 = fadd fast <2 x float> %529, %512
+1272:   br label %531
+1273:
+1274: 531:                                              ; preds = %522, %506
+1275:   %532 = phi <2 x float> [ %530, %522 ], [ %512, %506 ]
+1276:   %533 = fsub fast <2 x float> %423, %532
+1277:   %534 = tail call fast float @air.dot.v2f32(<2 x float> %533, <2 x float> %533) #3
+1278:   %535 = tail call fast float @air.fast_sqrt.f32(float %534) #3
+1279:   %536 = fcmp fast olt float %535, %509
+1280:   %537 = select i1 %536, float %535, float %509
+1281:   %538 = select i1 %536, <2 x float> %532, <2 x float> %508
+1282:   %539 = icmp eq i32 %513, 11
+1283:   br i1 %539, label %504, label %506, !llvm.loop !72
+1284:
+1285: 540:                                              ; preds = %504
+1286:   %541 = fsub fast <2 x float> <float -0.000000e+00, float -0.000000e+00>, %449
+1287:   %542 = tail call fast float @air.dot.v2f32(<2 x float> %541, <2 x float> %541) #3
+1288:   %543 = tail call fast float @air.fast_sqrt.f32(float %542) #3
+1289:   %544 = fcmp fast ugt float %543, 0x3F1A36E2E0000000
+1290:   br i1 %544, label %545, label %583
+1291:
+1292: 545:                                              ; preds = %540
+1293:   %546 = tail call fast float @air.dot.v2f32(<2 x float> zeroinitializer, <2 x float> zeroinitializer) #3
+1294:   %547 = tail call fast float @air.fast_sqrt.f32(float %546) #3
+1295:   %548 = fdiv fast float %547, %543
+1296:   %549 = fsub fast float 1.000000e+00, %548
+1297:   %550 = tail call fast float @air.fast_clamp.f32(float %549, float 0.000000e+00, float 1.000000e+00) #3
+1298:   %551 = insertelement <2 x float> undef, float %550, i64 0
+1299:   %552 = shufflevector <2 x float> %551, <2 x float> undef, <2 x i32> zeroinitializer
+1300:   %553 = insertelement <2 x float> undef, float %64, i64 0
+1301:   %554 = shufflevector <2 x float> %553, <2 x float> undef, <2 x i32> zeroinitializer
+1302:   %555 = fmul fast <2 x float> %449, %554
+1303:   %556 = fmul fast <2 x float> %555, %552
+1304:   %557 = fsub fast <2 x float> %423, %556
+1305:   %558 = tail call fast <2 x float> @air.fast_clamp.v2f32(<2 x float> %557, <2 x float> zeroinitializer, <2 x float> <float 1.000000e+00, float 1.000000e+00>) #3
+1306:   br label %583
+1307:
+1308: 559:                                              ; preds = %504
+1309:   %560 = tail call fast float @air.dot.v2f32(<2 x float> %449, <2 x float> %449) #3
+1310:   %561 = tail call fast float @air.fast_sqrt.f32(float %560) #3
+1311:   %562 = fcmp fast olt float %537, %561
+1312:   br i1 %562, label %563, label %583
+1313:
+1314: 563:                                              ; preds = %559
+1315:   %564 = fsub fast <2 x float> <float -0.000000e+00, float -0.000000e+00>, %449
+1316:   %565 = tail call fast float @air.dot.v2f32(<2 x float> %564, <2 x float> %564) #3
+1317:   %566 = tail call fast float @air.fast_sqrt.f32(float %565) #3
+1318:   %567 = fcmp fast ugt float %566, 0x3F1A36E2E0000000
+1319:   br i1 %567, label %568, label %583
+1320:
+1321: 568:                                              ; preds = %563
+1322:   %569 = fsub fast <2 x float> %423, %538
+1323:   %570 = tail call fast float @air.dot.v2f32(<2 x float> %569, <2 x float> %569) #3
+1324:   %571 = tail call fast float @air.fast_sqrt.f32(float %570) #3
+1325:   %572 = fdiv fast float %571, %566
+1326:   %573 = fsub fast float 1.000000e+00, %572
+1327:   %574 = tail call fast float @air.fast_clamp.f32(float %573, float 0.000000e+00, float 1.000000e+00) #3
+1328:   %575 = insertelement <2 x float> undef, float %574, i64 0
+1329:   %576 = shufflevector <2 x float> %575, <2 x float> undef, <2 x i32> zeroinitializer
+1330:   %577 = insertelement <2 x float> undef, float %64, i64 0
+1331:   %578 = shufflevector <2 x float> %577, <2 x float> undef, <2 x i32> zeroinitializer
+1332:   %579 = fmul fast <2 x float> %449, %578
+1333:   %580 = fmul fast <2 x float> %579, %576
+1334:   %581 = fsub fast <2 x float> %423, %580
+1335:   %582 = tail call fast <2 x float> @air.fast_clamp.v2f32(<2 x float> %581, <2 x float> zeroinitializer, <2 x float> <float 1.000000e+00, float 1.000000e+00>) #3
+1336:   br label %583
+1337:
+1338: 583:                                              ; preds = %568, %563, %559, %545, %540
+1339:   %584 = phi <2 x float> [ %423, %559 ], [ %558, %545 ], [ %423, %540 ], [ %582, %568 ], [ %423, %563 ]
+1340:   call void @llvm.lifetime.end.p0i8(i64 88, i8* nonnull %447) #8
+1341:   call void @llvm.lifetime.end.p0i8(i64 44, i8* nonnull %427) #8
+1342:   br label %585
+1343:
+1344: 585:                                              ; preds = %583, %422
+1345:   %586 = phi <2 x float> [ %584, %583 ], [ %423, %422 ]
+1346:   %587 = tail call fast float @air.fast_fabs.f32(float %10) #3
+1347:   %588 = fcmp fast ogt float %587, 0x3EB0C6F7A0000000
+1348:   br i1 %588, label %589, label %613
+
+4634: !27 = !{i32 8, !"air.buffer", !"air.location_index", i32 7, i32 1, !"air.read", !"air.struct_type_info", !28, !"air.arg_type_size", i32 40, !"air.arg_type_align_size", i32 4, !"air.arg_type_name", !"MSSFaceShapeParams", !"air.arg_name", !"faceShapeParams"}
+4635: !28 = !{i32 0, i32 4, i32 0, !"float", !"shoulian", i32 4, i32 4, i32 0, !"float", !"zhailian", i32 8, i32 4, i32 0, !"float", !"vlian", i32 12, i32 4, i32 0, !"float", !"xiaegu", i32 16, i32 4, i32 0, !"float", !"quangu", i32 20, i32 4, i32 0, !"float", !"xiaba", i32 24, i32 4, i32 0, !"float", !"duanlian", i32 28, i32 4, i32 0, !"float", !"xiaotou", i32 32, i32 4, i32 0, !"float", !"xiaotoufanwei", i32 36, i32 4, i32 0, !"float", !"dayan"}

docs/analysis/short-jaw-report.json

@@ -0,0 +1,178 @@
+{
+  "authority": "Static shipped-artifact analysis; original shader not executed. Public Vision76 region mapping reused from slim-pose-report.json.",
+  "target_arm64_sha256": "f01e8c0b7e2676b2961950b0e48efdd2589af218e4b36de7d39f5d1c76852bfb",
+  "air_sha256": "f97705b88f5491057df2117aef457ffca84e11020574cd57742b0670db4484d8",
+  "evidence_ids": {
+    "cpu_constants": "ev_d1b8a49fc62e384710bac234967c3e8cbf7c5127081c9b2c6f6a0bbd80b80967",
+    "cpu_assembly": "ev_8bc31392c07788d2482546121297c3f177d527282275ef21fd3e5edef9921544"
+  },
+  "common": {
+    "uv": "full-image normalized, y down; production stores y up and must convert points and q together",
+    "gain": "clamp(280/max(length((P75-P59)*pixelSize),2*length((P67-(P74+P60)/2)*pixelSize),1),1,2.25)",
+    "original_order": [
+      "thin17",
+      "narrow16",
+      "vFace4",
+      "jaw6",
+      "cheek6",
+      "chin3",
+      "shortPolygon",
+      "smallHead",
+      "bigEye"
+    ],
+    "enable_threshold": "abs(effectiveRatio)>1e-6",
+    "per_pin_or_field_result": "clamp(q-newOffset,0,1)"
+  },
+  "jaw": {
+    "struct_field": "xiaegu offset12 / helper parameter6",
+    "ui_range": [
+      0,
+      1
+    ],
+    "cpu_scale": 0.05,
+    "constant_address": "0x10005f9a8",
+    "pins_origin_radiusNeighbour_directionAnchor": [
+      [
+        72,
+        71,
+        29
+      ],
+      [
+        62,
+        63,
+        29
+      ],
+      [
+        71,
+        70,
+        29
+      ],
+      [
+        63,
+        64,
+        29
+      ],
+      [
+        70,
+        71,
+        29
+      ],
+      [
+        64,
+        63,
+        29
+      ]
+    ],
+    "radius": "length(Porigin-Pneighbour) in UV; skip radius<=.0001",
+    "direction": "P29-Porigin",
+    "weight": "clamp(1-length(q-Porigin)/radius,0,1)",
+    "step": "q=clamp(q-direction*clamp(jaw,0,1)*.05*gain*weight,0,1)",
+    "execution": "6 sequential q updates; each radius uses the second triplet index, unlike thin/chin which use the direction anchor distance",
+    "air_lines": [
+      899,
+      986
+    ]
+  },
+  "short": {
+    "struct_field": "duanlian offset24 / helper parameter9",
+    "ui_range": [
+      -1,
+      1
+    ],
+    "cpu_scale": 0.25,
+    "constant_address": "0x10005f9e0",
+    "cpu_clamp_min_address": "0x10005f9d0 = -1",
+    "cpu_scaled_min_address": "0x10005f9f0 = -.25",
+    "polygon_indices": [
+      62,
+      63,
+      64,
+      65,
+      66,
+      67,
+      68,
+      69,
+      70,
+      71,
+      72
+    ],
+    "polygon_closure": "P72->P62",
+    "axis": "P46-P48 (nose crest region)",
+    "radius": "length(axis) in UV; skip radius<=.0001",
+    "inside": "even-odd point-in-polygon; weight1",
+    "outside": "d=minimum distance to11 closed segments; weight=clamp(1-d/radius,0,1), only when d<radius",
+    "step": "q=clamp(q-axis*clamp(short,-1,1)*.25*gain*weight,0,1)",
+    "nearest_segment_threshold": "squared edge length>1e-6 then project t=clamp(dot(q-A,B-A)/dot(B-A,B-A),0,1); else choose A",
+    "ray_crossing_denominator": "dy if abs(dy)>1e-6 else signed1e-6",
+    "air_lines": [
+      1127,
+      1340
+    ]
+  },
+  "implementation": {
+    "source": "beatygril/beatygril/Plugin/PGFaceProcessor.m",
+    "order": [
+      "thin17",
+      "existing analytic narrow/V/cheek/small-head body",
+      "jaw6",
+      "chin3",
+      "shortPolygon",
+      "existing analytic bigEye"
+    ],
+    "control_coefficients": {
+      "jaw": 0.05,
+      "short": 0.25
+    },
+    "strength": "Original CPU clamps a common shape strength. Product fixes that multiplier at1 and maps it to no user parameter: PGAmount/s.amount is smoothing strength only and is not used by thin/chin/jaw/short. All4 share the same pixel-size gain. Each shape uses its own control; PGMix is applied independently to the total output later by the host adapter. No new common shape-strength UI is introduced.",
+    "sampling": "All sequential coordinates are evaluated within one CIWarpKernel per face; image and all4 masks share the same method.",
+    "missing_or_invalid76": "Preserve legacy face/archive and other5 analytic controls; skip thin/chin/jaw/short exactly.",
+    "unchanged": "Existing thin17/chin3 index order, constants and formulas remain unchanged.",
+    "source_sha256": "e4122ca95f7ba41bc925b4cc4bf2bf88a72044ea41880cd66acd9c8278a7daf4"
+  },
+  "limits": [
+    "No original target app/shader executed; these are static CPU/AIR observations.",
+    "The complete vendor chain is not reconstructed: narrow/V/cheek/small-head/eye algorithms and their ordering remain project approximations. Isolated jaw/short plus recovered thin/chin ordering is tested.",
+    "No new explicit yaw, pitch, roll or landmark-quality attenuation is inferred. Profile behavior follows detected 2D landmarks, as in the recovered branches.",
+    "Physical PNG checks bypass the host IOSurface adapter. Original vendor pixel equivalence and Motion/FCP1.1.2 runtime acceptance remain unverified.",
+    "Independent public Vision CGImage and CIImage detections differ slightly. Tests allow .025 normalized location difference; eye/temple displacement tests measure the actual GPU inverse field."
+  ],
+  "verification": {
+    "core": {
+      "exit_code": 0,
+      "beauty_checks": 49,
+      "face_checks": 116,
+      "slim_checks": 796,
+      "total": 961
+    },
+    "real_frames_asan": {
+      "exit_code": 0,
+      "checks": 886,
+      "frames": [
+        "public NASA astronaut",
+        "local user upright/rolled0s",
+        "local user profile4s"
+      ],
+      "diagnostics": []
+    },
+    "max_uv_oracle_error": 1.09828022e-05,
+    "physical_checks": "Public Vision76 lower-contour response, pupil/upper-contour positions beyond support unchanged; separate CGImage Vision point locations cross-check the CIImage production path.",
+    "local_logs": [
+      "build/analysis-jaw-short/core-tests.txt",
+      "build/analysis-jaw-short/real-frames-asan.txt"
+    ],
+    "app_built": false,
+    "host_operated": false
+  },
+  "pre_fix_difference": {
+    "source": "PGFaceProcessor.m; PGBeautyRenderer only does appearance",
+    "jaw": "axis-aligned bbox jawBand, .20 multiplier, no radiusNeighbour or lip anchor",
+    "short": "axis-aligned bbox lower field, .16 multiplier, no lower-contour polygon or nose axis",
+    "bounds": "Difference in algorithm is established. It does not by itself prove why a specific installed screenshot looks like temple movement; coordinate/isolated-control localization must be checked in actual image output.",
+    "processor_sha256": "fe4f2a6fc28799cc9b81832baaa2d6739320bde9def175ecc8a4494d004d6b28"
+  },
+  "air_excerpts": {
+    "path": "docs/analysis/short-jaw-air.txt",
+    "sha256": "f4ade84fdb2303515dab7b4d7eca8a9c2241039b9e6428cd51ceffc32b3f6b9b",
+    "formatNote": "Trailing whitespace removed from numbered excerpt; original AIR source SHA remains unchanged."
+  }
+}

docs/analysis/下巴与坐标分析.md

@@ -0,0 +1,42 @@
+# 下巴控制与图像坐标核对
+
+2026-10-21，接用户反馈“调整下巴却调整眼睛”。本轮不操作、启动或退出Motion/FCP。以已保存的原版AIR和新REA CPU汇编/常量证据继续分析；没有执行原版或复制其二进制到产品。
+
+## 已确认的下巴差异
+
+参数发布、PGChin=24、settings.faceChin与GPU参数位置没有串到大眼。1.0.5的下巴仍用脸框高斯场，存在两项错误：作用范围延伸到嘴部甚至眼睑，下巴正负方向与原版相反。独立真实照片上，旧公式的最大位移出现在嘴附近；侧脸真实下巴位移接近零。这些结论来自离屏照片/坐标场探针，不能代替实际宿主当帧诊断。
+
+原版`0x1000279f4`汇编将下巴滑块约束到[-1,1]，正值乘0.04、负值乘0.02，写入脸型结构第5项（byte offset20）；常量位于`0x10005f9c0`。REA记录：`ev_8bc31392c07788d2482546121297c3f177d527282275ef21fd3e5edef9921544`与`ev_640ccb714c5ce00d3864844af319fc574d223810dde08443d2ef2e8f1e989c47`，完整小型证据包见[rea-chin.json](rea-chin.json)。原件身份与上一轮一致，arm64切片SHA-256为`f01e8c0b7e2676b2961950b0e48efdd2589af218e4b36de7d39f5d1c76852bfb`。
+
+`mssFaceShapePinCoordinate`的AIR分支读取第5项及共同尺寸增益，顺序执行68→38、67→37、66→36三组局部采样位移。独立Vision区域核对：66/67/68在下巴轮廓，36/37/38在下唇。其半径、线性衰减、逐步clamp与17组瘦脸相同；支持负值。视觉正值缩短下巴、负值拉长，方向随下巴→嘴唇向量变化，不固定沿画面Y轴。细节和边界见[机器报告](chin-report.json)。
+
+## 修正与测试
+
+已移除旧下巴高斯项，改用原版三组点、正负系数、尺寸增益。完整76点缺失或不合法时跳过下巴，避免旧档案使用猜测框位置；其他七类脸型控制仍是现有近似实现，组合顺序未宣称全部恢复。
+
+核心回归559项通过：美化49、人脸116、瘦脸/下巴394。新增正负下巴、半强度、左右侧脸投影、歪头、三种宽高比、非零原点、瘦脸叠加、坏点与旧档案保护。独立double采样场最大UV误差1.09828022e-5。真实NASA人像额外检查下巴位移、正负向量符号和两侧瞳孔保持不动；以坐标位移判定，避免只检查“像素有改变”。
+
+## 图像适配层待核对项
+
+纯CI图像中，76点落在真实瞳孔和下巴，没有全局Y轴反置。但FxPlug适配层曾根据imageOrigin在输入、输出各翻转一次。以相同物理top-first照片字节离屏构造TOP_LEFT输入输出时，旧代码默认直通仍精确一致，却能复现下巴作用到眼部的现象；这说明直通测试无法排除中间处理倒置。
+
+imageOrigin描述坐标轴方向，不能单凭枚举推断IOSurface的物理行序。原版render主入口包装CIImage后仅见正尺度和位移，仍需核对其输出helper，不能仅凭主函数的有界检索宣称原版整个链条无翻转。原生FCP本次实际缓冲行序未捕获，最后视觉交由用户自测。临时照片、完整人脸坐标和探针输出均留在被忽略的build目录。
+
+## 原版输出链闭环与适配修复
+
+继续REA分析两个输出helper后，确认主入口所见的无额外翻转不是仅靠字符串缺失作出的猜测：
+
+- `0x10002911c`直接调用`CIContext render:toIOSurface:bounds:colorSpace:`，没有修改图像方向。证据`ev_88a71ec62fade296495f1e3f5428cdb15ad4cda43866e09fb040fa3a4bdb0440`。
+- `0x1000291b4`备用路径先render到BGRA8/RGBAh/RGBAf位图，再按源、目的行步长同时正向递增复制到IOSurface，没有倒行。证据`ev_110d76f7958decb0c56b7daafe292d60a8bc56cd035b40a997f61395cb91ebfe`，另有汇编交叉核对。完整记录见[rea-image-orientation.json](rea-image-orientation.json)。
+
+已移除我们输入/输出两处基于TOP_LEFT的额外翻转，保持与原版同类CI→IOSurface路径一致。独立探针在相同物理top-first字节下验证默认/大眼/下巴正负×四种源/目的标签共16组，全部与upright CI参考逐字节一致；旧代码在相同构造下出现下巴到眼部的热点，且默认直通0误差不能揭示内部倒置。这里验证的是物理缓冲构造与修复链，未捕获本次实际FCP缓冲。
+
+Apple[FxImageOrigin](https://developer.apple.com/documentation/professional_video_applications/fximageorigin)和本机SDK说明其描述坐标轴方向；[FxPlug渲染说明](https://developer.apple.com/documentation/professional-video-applications/rendering-in-fxplug)确认FxPlug4经IOSurface传入图像。文档本身未规定每个宿主的物理行序，本次改动依据为原版链和独立物理测试，不能把文档扩张成原生内存捕获。
+
+旧档案没有记录图像适配坐标契约，无法安全判断是否由旧翻转链产生。adapter现为新分析结果加`hostCoordinateSpace=iosurface-ci-y-up-v1`；未标记记录保留原字符串，渲染和续分析均不载入旧坐标。当前目标暂用实时跟随，新分析后恢复离线记录。不改通用PGFaceProcessor的旧档案读取能力，也不把用户记录直接删除或静默改写成新坐标。
+
+独立生理热点检查：NASA、实际素材0秒、4秒侧脸三张图均在真实下巴1.2–2.9像素内获得最大位移，实际下巴正值上收、负值延伸，双瞳孔采样位移不超过0.00003像素；12项专项检查通过。另同一素材11帧共494项瘦脸/下巴ASan检查通过，含重复基础用例，不与完整回归简单相加。用户照片、帧及完整点位均没有入库。
+
+## 新回归的负控
+
+在临时副本只恢复旧的输入/输出翻转、保留已修正三pin后，120项解剖子测试产生30个预期失败：混合原点标签出现方向错误，TOP/TOP默认仍0误差，但大眼最大差66/255、下巴正值52/255、负值21/255，均被独立参考和跨标签逐字节一致性检出。此时三pin下巴热点仍在下巴，因为点驱动形变可随图像反射；“眼部热点”是此前旧高斯下巴与额外翻转共同构成的反例，二者不能混为同一代码状态。正式当前实现247项宿主适配ASan检查全部通过。

docs/analysis/短脸与下颌骨分析.md

@@ -0,0 +1,39 @@
+# 短脸与下颌骨局部变形
+
+本次将短脸与下颌骨从包围框近似场替换为目标产物中恢复的76点局部场。几何实现在`PGFaceProcessor.m`；`PGBeautyRenderer.m`负责外观，不是这次位置问题的修改点。
+
+证据是目标ARM64二进制的只读CPU汇编、常量字节与已有Apple metal-objdump AIR。未运行原版APP或shader，未操作Motion/FCP。CPU证据见`rea-jaw-short.json`，带原始行号的GPU IR见`short-jaw-air.txt`，推导及来源摘要见`short-jaw-report.json`。
+
+## 确认的规则
+
+两项共用像素尺寸增益：
+
+`gain = clamp(280 / max(|(P75-P59)*imageSize|, 2*|(P67-(P74+P60)/2)*imageSize|, 1), 1, 2.25)`。
+
+距离为UV时，点与采样坐标统一采用全图归一化、Y向下；像素增益另用实际渲染宽高计算。产品内部76点采用Y向上，因此在同一个kernel中统一转换，未改宿主图像方向。
+
+下颌骨按顺序使用六组`(origin, radiusNeighbour, directionAnchor)`：
+
+`(72,71,29), (62,63,29), (71,70,29), (63,64,29), (70,71,29), (64,63,29)`。
+
+半径是前两点的相邻轮廓距离，方向是`P29-origin`。每步令`weight=clamp(1-|q-origin|/radius,0,1)`，再依次更新`q=clamp(q-direction*ratio*weight,0,1)`。`ratio=clamp(jaw,0,1)*0.05*gain`。不能把半径替换为到嘴锚点的距离，也不能将六步合并为在同一原始坐标上求和。
+
+短脸使用`P62...P72`构成的11边闭合下半脸区域。内部权重为1；外部权重按到最近线段的UV距离线性下降，在距离达到`|P46-P48|`时为0。位移轴为`P46-P48`（公开Vision的鼻梁点区域），`ratio=clamp(short,-1,1)*0.25*gain`，采样更新`q=clamp(q-axis*ratio*weight,0,1)`。正值的可见运动沿鼻梁方向收短，负值延长。半径不超过`0.0001`时跳过；线段投影的平方长度门限为`0.000001`。
+
+CPU字节证据ID：`ev_d1b8a49fc62e384710bac234967c3e8cbf7c5127081c9b2c6f6a0bbd80b80967`。`0x10005f9a8`的double值为`0.05`；`0x10005f9e0`为`0.25`，`0x10005f9d0`和`0x10005f9f0`分别是短脸下限`-1`与缩放后下限`-0.25`。汇编ID：`ev_8bc31392c07788d2482546121297c3f177d527282275ef21fd3e5edef9921544`。结构字段`xiaegu`偏移12、`duanlian`偏移24，结合CPU写入与AIR读取顺序确认映射。
+
+## 产品改动及边界
+
+移除旧`jaw*0.20*jawBand`和`-shortFace*0.16*lower`。保留瘦脸17步、下巴3步的点位、系数和数学，新的局部顺序为`jaw6 → chin3 → short polygon`，仍在同一个CIWarpKernel内更新采样坐标，对每张输入图像或蒙版，每张脸仅进行一次重采样。图像、磨皮/肤色/牙齿/眼睛四张蒙版调用同一变形路径。没有完整合法76点时，这四项恢复算法安全直通；旧记录、其他参数和离线归档继续可读。
+
+原版完整顺序为`thin → narrow → V → jaw → cheek → chin → short → small-head → eyes`。产品其余五项仍采用原有近似body/眼睛场：body先于jaw，故组合全链不宣称原版等价。原版CPU另接受共同形变强度；本产品该乘数固定为1，未映射到任何用户参数。`PGAmount`/`s.amount`仅表示磨皮强度，不参与thin/chin/jaw/short比例；四项共用同一像素尺寸gain。用户分别调节各项脸型值，最终`PGMix`由宿主适配器独立混合总输出。没有新增共同形变强度控制，以保持磨皮、美白和脸型卡片各自的含义。这里没有证实或添加3D姿态识别、yaw衰减或五官恢复锁定。
+
+旧算法与原版不同是确定事实；单凭静态代码，不能替某张已安装宿主画面的“太阳穴变化”断言唯一原因。下述位置验证针对真实PNG，宿主适配和原生交互由父任务验收。
+
+## 验证
+
+`scripts/test.sh`：Beauty49、Face116、Slim796，共961项通过。旧394项thin/chin测试保留；新增独立double oracle从上述AIR规则写成，比较实际GPU坐标场，最大UV误差`1.09828022e-05`。覆盖非零extent、横竖画幅、侧脸投影与roll、正负短脸、小脸增益上限、相邻轮廓半径反例、组合顺序、缺失/非法76点和四张蒙版一致性。
+
+ASan专项以NASA公开肖像及本地用户正面/侧脸帧运行：886项通过，无ASan诊断。独立CGImage Vision请求对照了瞳孔、嘴唇、鼻梁和上下轮廓索引，防止与生产CIImage路径共用一次Y翻转假设。实际GPU采样场确认下半脸有响应，处于支持域外的瞳孔和上部轮廓位置不响应。
+
+用户帧、完整坐标和测试构建只留在忽略的`build/`目录，不进入证据文件。上述不代表原版逐像素一致，也未替代新版本Motion/FCP原生验收；本次未构建APP、安装或提交。

docs/analysis/脸型变形与转脸分析.md

@@ -82,3 +82,5 @@ xcrun clang -fobjc-arc -Wall -Wextra \
 ## 后续修复状态
 
 1.0.5已实现并安装76点/17组局部瘦脸，旧的矩形框瘦脸已移除。上文“安装版未修复”为本次分析开始时1.0.4的历史状态。新增独立数值场与真实素材回归，签名公证及安装记录见 `../验证记录.md`。Motion/FCP最终视觉由用户自测，其他8类脸型控制与快速多人重叠的既有近似边界仍保留。
+
+1.0.6继续分析下巴与宿主图像轴，新增原版三pin下巴及CI/IOSurface无额外翻转修复，详见[下巴与坐标分析](下巴与坐标分析.md)。其余七类控制仍为近似实现。

docs/analysis/面板交互连接修复.md

@@ -0,0 +1,25 @@
+# 自定义面板交互连接修复
+
+1.1.0在FCP原生界面复现：卡片能显示，“更多设置”可展开，但全部参数控件禁用，底部显示“等待宿主连接”。这不是整张视图不接收事件。
+
+控制器原先在startAction之前检查FxParameterRetrievalAPI_v6与FxParameterSettingAPI_v5，若宿主仅在action上下文中提供它们，就根本进不了action。1.1.1改为先取得FxCustomParameterActionAPI_v4，以真实PGInspectorView为sender开启操作，再获取读写接口；缺接口时正确结束操作，后续可重试。NSView sender也符合本机官方头文件的sender定义。
+
+实际FCP正式安装版日志确认readBefore=0、writeBefore=0，进入action后readInAction=1、writeInAction=1，viewSender=1、onMain=1。界面控件随即启用，原生重置按钮能把肤色亮度清零；数值输入37并按Return后，滑块与数值显示同步为0.37/37%。因此原先门控条件在实际宿主中确实无法成立。
+
+新增模拟宿主只有在action内才提供参数接口，并要求sender为NSView：修改前141项检查有5项失败，修改后141项全部通过；独立远端恢复的同一测试启用ASan通过。完整1046项回归通过。签名代码节点为53ce88dd15983e9397ab08f5ec9ad608fce5d0b5，正式中间版1.1.1（10）已安装并通过签名、公证和票据。后续用户报告短脸和下颌骨位置错误，继续在合并修复版完成两宿主最终验收，未给中间版建立最终发布标签。
+
+## 原生验收的边界
+
+Mouse/keyboard自动化尝试中有焦点落回时间线及参数在非本次操作时改变的情况，不能据此断言点击坐标一定错位。另一次FCP高CPU与AX超时，调用栈落在大量效果浏览器的辅助功能遍历；插件主线程大多空闲。收起效果浏览器后AX读取从约10秒降到约1秒。这不是已证明的插件死锁。原始截图、用户测试片段和全部窗口树保留本机build/native-111，不上传远程。
+
+原版UI的只读对照显示isFlipped同为YES，原生滑块同样使用super mouseDown；root鼠标以locationInWindow经convertPoint:fromView:nil转换。名字含WidthFix的方法只处理容器高度不足，没有鼠标Y翻转或backing像素重映射。没有证据需要盲改本产品的isFlipped。1.1.2最终Motion/FCP数值、重置、保存重开及画面响应将另行记录。
+
+## 数值失焦与拖动连续预览
+
+原生build11验收发现数值Return后仍保留字段编辑器，失焦通知无条件再次提交旧文本，可能把宿主刚撤销或重置的状态写回。新增独立回归确认旧delegate在失焦时复活旧值；现追踪尚未提交的真实文本改动，Return只提交一次并释放AppKit字段编辑器，失焦仅提交新改动。离屏真实NSWindow/field editor用例已覆盖。
+
+用户另报滑杆只在松手后更新：旧view层在mouseDown之前beginInteraction，整个NSSlider tracking loop结束才endInteraction，虽然continuous为YES，宿主可直到endAction才发布预览。现在gesture depth只阻止定时刷新覆盖拖动显示，每个有效slider action由controller单独开启/结束宿主上下文，仍先在真实NSView sender的action内取得API，完整自定义状态和隐藏镜像一起提交。没有新增手动分析或强制刷新按钮。
+
+在仅于endAction发布预览的模拟宿主中，三个中间步进旧版3项失败，新版155项检查器ASan全部通过，含无变化去重、action配对、每步可读的完整渲染设置。宿主是否合并快速更新以及实际显示帧率由其调度和设备性能决定；不保证每一个鼠标事件均在屏幕独立显示一帧。新版原生复验另记。
+
+远程编辑器补充：Motion build12中数值提交后的重置已经改变实际slider/输出，但仍保留字段编辑器并显示旧文本。最终改为对已提交编辑调用abortEditing，并仅在存在尚未提交的真实输入时阻止宿主刷新/保留文本；单纯残留焦点不再遮蔽撤销或重置。新增两个真实离屏编辑器用例确认无改动焦点可刷新、尚未提交输入仍受保护；检查器ASan现157项通过。

docs/verification/v1.0.6/anatomical-summary.json

@@ -0,0 +1,15 @@
+{
+  "checks": 12,
+  "cases": 3,
+  "includes_profile": true,
+  "processor_sha256": "fe4f2a6fc28799cc9b81832baaa2d6739320bde9def175ecc8a4494d004d6b28",
+  "max_pupil_sampling_displacement_px": 2.8653327774463833e-05,
+  "peak_distance_to_real_chin_px": [
+    1.1827483260479077,
+    2.8140858161593
+  ],
+  "positive_visual_direction": "toward lower lip",
+  "negative_visual_direction": "away from lower lip",
+  "actual_photos_and_full_geometry": "ignored local build only",
+  "scope": "standalone actual PNG anatomy; bypasses FxPlug adapter; no native host operation"
+}

docs/verification/v1.0.6/core-tests.txt

@@ -0,0 +1,5 @@
+Beauty renderer: 49 checks, 0 failures (Metal).
+2026-10-21 20:48:04.999 face-tests[9473:5455578] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+Face processing: 116 checks passed
+2026-10-21 20:48:08.750 slim-tests[9480:5455684] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+PASS: 394 slim alignment checks; maximum UV oracle error 1.09828022e-05

docs/verification/v1.0.6/delivery-receipt.json

@@ -0,0 +1,44 @@
+{
+  "status": "installed_user_qa_pending",
+  "bundleIdentifier": "com.dayu.beatygril",
+  "installationPath": "/Library/Plug-Ins/FxPlug/beatygril.app",
+  "options": {
+    "waitForHosts": true,
+    "userTests": true
+  },
+  "nativeEffectQA": {
+    "status": "pending_user",
+    "performedByScript": false
+  },
+  "source": {
+    "commit": "ad54726b17fabd11f46bc6121e664eac38960a23",
+    "trackedWorktreeChanges": []
+  },
+  "updatedAt": "2026-10-21T13:53:56.294416+00:00",
+  "version": "1.0.6",
+  "build": "8",
+  "stagingSignature": "Executable=/private/tmp/paintfcp-build-20261021/Build/Products/Release/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=66df95f2ce931ca96f52ee5cfa5ad664be49a6c8\nCandidateCDHashFull sha256=66df95f2ce931ca96f52ee5cfa5ad664be49a6c89b8cc1c206d68f0c162b8348\nHash choices=sha256\nCMSDigest=66df95f2ce931ca96f52ee5cfa5ad664be49a6c89b8cc1c206d68f0c162b8348\nCMSDigestType=2\nCDHash=66df95f2ce931ca96f52ee5cfa5ad664be49a6c8\nSignature size=8969\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 20:57:26\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "notarization": {
+    "id": "ab0271c8-0c4b-4b10-9474-cebe9b55385b",
+    "message": "Processing complete",
+    "status": "Accepted"
+  },
+  "signingVerified": true,
+  "stapleValidated": true,
+  "stagingPluginUnregistered": true,
+  "runningHosts": [],
+  "installedSignature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=66df95f2ce931ca96f52ee5cfa5ad664be49a6c8\nCandidateCDHashFull sha256=66df95f2ce931ca96f52ee5cfa5ad664be49a6c89b8cc1c206d68f0c162b8348\nHash choices=sha256\nCMSDigest=66df95f2ce931ca96f52ee5cfa5ad664be49a6c89b8cc1c206d68f0c162b8348\nCMSDigestType=2\nCDHash=66df95f2ce931ca96f52ee5cfa5ad664be49a6c8\nSignature size=8969\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 20:57:26\nNotarization Ticket=stapled\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "installedSignatureVerified": true,
+  "installedStapleValidated": true,
+  "gatekeeperAccepted": true,
+  "pluginDiscovery": {
+    "bundleIdentifier": "com.dayu.beatygril.fxplug",
+    "formalPath": "/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit",
+    "output": "     com.dayu.beatygril.fxplug(1.1)\tA9F36A44-1E5E-4AB3-A2FD-5C66A76DB8BB\t2026-10-21 13:53:56 +0000\t/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit\n (1 plug-in)\n"
+  },
+  "removedGeneratedPaths": [
+    "/Users/dayu/Documents/PaintFCP/build/delivery/previous-beatygril.app",
+    "/tmp/paintfcp-build-20261021",
+    "/Users/dayu/Documents/PaintFCP/build/delivery/notarization.zip"
+  ]
+}

docs/verification/v1.0.6/host-negative-control.txt

@@ -0,0 +1,48 @@
+2026-10-21 20:56:23.542 negative-control[10726:5467718] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+FAIL: default sourceBOTTOM/destinationTOP matches independent upright CI output
+FAIL: default sourceBOTTOM/destinationTOP is byte-identical across coordinate tags
+FAIL: default sourceBOTTOM/destinationTOP preserves the independently decoded photo
+FAIL: default sourceTOP/destinationBOTTOM matches independent upright CI output
+FAIL: default sourceTOP/destinationBOTTOM is byte-identical across coordinate tags
+FAIL: default sourceTOP/destinationBOTTOM preserves the independently decoded photo
+FAIL: big-eye sourceBOTTOM/destinationTOP matches independent upright CI output
+FAIL: big-eye sourceBOTTOM/destinationTOP is byte-identical across coordinate tags
+FAIL: big-eye sourceBOTTOM/destinationTOP changes the two real eye regions
+FAIL: big-eye sourceTOP/destinationBOTTOM matches independent upright CI output
+FAIL: big-eye sourceTOP/destinationBOTTOM is byte-identical across coordinate tags
+FAIL: big-eye sourceTOP/destinationBOTTOM changes the two real eye regions
+FAIL: big-eye sourceTOP/destinationTOP matches independent upright CI output
+FAIL: big-eye sourceTOP/destinationTOP is byte-identical across coordinate tags
+FAIL: chin-positive sourceBOTTOM/destinationTOP matches independent upright CI output
+FAIL: chin-positive sourceBOTTOM/destinationTOP is byte-identical across coordinate tags
+FAIL: chin-positive sourceBOTTOM/destinationTOP changes the real chin rather than eyes or mirrored anatomy
+FAIL: chin-positive sourceTOP/destinationBOTTOM matches independent upright CI output
+FAIL: chin-positive sourceTOP/destinationBOTTOM is byte-identical across coordinate tags
+FAIL: chin-positive sourceTOP/destinationBOTTOM changes the real chin rather than eyes or mirrored anatomy
+FAIL: chin-positive sourceTOP/destinationTOP matches independent upright CI output
+FAIL: chin-positive sourceTOP/destinationTOP is byte-identical across coordinate tags
+FAIL: chin-negative sourceBOTTOM/destinationTOP matches independent upright CI output
+FAIL: chin-negative sourceBOTTOM/destinationTOP is byte-identical across coordinate tags
+FAIL: chin-negative sourceBOTTOM/destinationTOP changes the real chin rather than eyes or mirrored anatomy
+FAIL: chin-negative sourceTOP/destinationBOTTOM matches independent upright CI output
+FAIL: chin-negative sourceTOP/destinationBOTTOM is byte-identical across coordinate tags
+FAIL: chin-negative sourceTOP/destinationBOTTOM changes the real chin rather than eyes or mirrored anatomy
+FAIL: chin-negative sourceTOP/destinationTOP matches independent upright CI output
+FAIL: chin-negative sourceTOP/destinationTOP is byte-identical across coordinate tags
+Anatomy default       0/0 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       0/1 max=255 mean=75.5590439 eye=512210/458308 chin=640530 inverted=2678038
+Anatomy default       1/0 max=255 mean=75.5590439 eye=512210/458308 chin=640530 inverted=2678038
+Anatomy default       1/1 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy big-eye       0/0 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       0/1 max=255 mean=75.5509195 eye=512210/458308 chin=640530 inverted=2673702
+Anatomy big-eye       1/0 max=255 mean=75.5510902 eye=512210/458308 chin=640530 inverted=2673881
+Anatomy big-eye       1/1 max=66 mean=0.0180340 eye=30841/32051 chin=0 inverted=0
+Anatomy chin-positive 0/0 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 0/1 max=255 mean=75.5574808 eye=512210/458308 chin=640530 inverted=2671244
+Anatomy chin-positive 1/0 max=255 mean=75.5593863 eye=512210/458308 chin=640530 inverted=2671753
+Anatomy chin-positive 1/1 max=52 mean=0.0127611 eye=0/0 chin=121860 inverted=0
+Anatomy chin-negative 0/0 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 0/1 max=255 mean=75.5518637 eye=512210/458308 chin=640530 inverted=2681787
+Anatomy chin-negative 1/0 max=255 mean=75.5510559 eye=512210/458308 chin=640530 inverted=2681767
+Anatomy chin-negative 1/1 max=21 mean=0.0061512 eye=0/0 chin=63433 inverted=0
+Restored origin flips negative control: 120 checks, 30 expected failures

docs/verification/v1.0.6/host-tests.txt

@@ -0,0 +1,21 @@
+2026-10-21 20:55:46.681 host-tests[10689:5467036] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+Default IOSurface maximum byte difference: 0
+Alternate destination tag maximum byte difference: 0
+Anatomy default       0/0 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       0/1 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       1/0 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       1/1 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy big-eye       0/0 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       0/1 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       1/0 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       1/1 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy chin-positive 0/0 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 0/1 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 1/0 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 1/1 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-negative 0/0 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 0/1 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 1/0 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 1/1 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Legacy fallback upright comparison: max=2 mean=0.0010357
+Host adapter: 247 checks, 0 failures

docs/verification/v1.0.6/installed-discovery.txt

@@ -0,0 +1,2 @@
+     com.dayu.beatygril.fxplug(1.1)	A9F36A44-1E5E-4AB3-A2FD-5C66A76DB8BB	2026-10-21 13:53:56 +0000	/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit
+ (1 plug-in)

docs/verification/v1.0.6/installed-signature.txt

@@ -0,0 +1,24 @@
+Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril
+Identifier=com.dayu.beatygril
+Format=app bundle with Mach-O universal (x86_64 arm64)
+CodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded
+Hash type=sha256 size=32
+CandidateCDHash sha256=66df95f2ce931ca96f52ee5cfa5ad664be49a6c8
+CandidateCDHashFull sha256=66df95f2ce931ca96f52ee5cfa5ad664be49a6c89b8cc1c206d68f0c162b8348
+Hash choices=sha256
+CMSDigest=66df95f2ce931ca96f52ee5cfa5ad664be49a6c89b8cc1c206d68f0c162b8348
+CMSDigestType=2
+CDHash=66df95f2ce931ca96f52ee5cfa5ad664be49a6c8
+Signature size=8969
+Authority=Developer ID Application: zhong luo (B3W25FX5H5)
+Authority=Developer ID Certification Authority
+Authority=Apple Root CA
+Timestamp=Oct 21, 2026 at 20:57:26
+Notarization Ticket=stapled
+Info.plist entries=22
+TeamIdentifier=B3W25FX5H5
+Runtime Version=27.0.0
+Sealed Resources version=2 rules=13 files=4
+Internal requirements count=1 size=180
+Total signatures=1
+Chosen signature=1

docs/verification/v1.0.6/installed-verification.json

@@ -0,0 +1,81 @@
+{
+  "version": "1.0.6",
+  "build": "8",
+  "uiOperations": false,
+  "nativeVisualQA": "pending user",
+  "installationPath": "/Library/Plug-Ins/FxPlug/beatygril.app",
+  "codesign": {
+    "exitCode": 0,
+    "stdout": "",
+    "stderr": ""
+  },
+  "staple": {
+    "exitCode": 0,
+    "stdout": "Processing: /Library/Plug-Ins/FxPlug/beatygril.app\nThe validate action worked!",
+    "stderr": ""
+  },
+  "gatekeeper": {
+    "exitCode": 0,
+    "stdout": "",
+    "stderr": "/Library/Plug-Ins/FxPlug/beatygril.app: accepted\nsource=Notarized Developer ID"
+  },
+  "identity": [
+    {
+      "path": "/Library/Plug-Ins/FxPlug/beatygril.app",
+      "bundleIdentifier": "com.dayu.beatygril",
+      "version": "1.0.6",
+      "build": "8",
+      "archs": "x86_64 arm64",
+      "signature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=66df95f2ce931ca96f52ee5cfa5ad664be49a6c8\nCandidateCDHashFull sha256=66df95f2ce931ca96f52ee5cfa5ad664be49a6c89b8cc1c206d68f0c162b8348\nHash choices=sha256\nCMSDigest=66df95f2ce931ca96f52ee5cfa5ad664be49a6c89b8cc1c206d68f0c162b8348\nCMSDigestType=2\nCDHash=66df95f2ce931ca96f52ee5cfa5ad664be49a6c8\nSignature size=8969\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 20:57:26\nNotarization Ticket=stapled\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n"
+    },
+    {
+      "path": "/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit",
+      "bundleIdentifier": "com.dayu.beatygril.fxplug",
+      "version": "1.0.6",
+      "build": "8",
+      "archs": "x86_64 arm64",
+      "signature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit/Contents/MacOS/beatygril XPC Service\nIdentifier=com.dayu.beatygril.fxplug\nFormat=bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=645 flags=0x10000(runtime) hashes=13+3 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=ded7ed887bb9c90fbf0c9e9b25a5b279c97e1da6\nCandidateCDHashFull sha256=ded7ed887bb9c90fbf0c9e9b25a5b279c97e1da6809e5a5bf42bd0dd56d42dfd\nHash choices=sha256\nCMSDigest=ded7ed887bb9c90fbf0c9e9b25a5b279c97e1da6809e5a5bf42bd0dd56d42dfd\nCMSDigestType=2\nCDHash=ded7ed887bb9c90fbf0c9e9b25a5b279c97e1da6\nSignature size=8969\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 20:57:25\nInfo.plist entries=26\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=188\nTotal signatures=1\nChosen signature=1\n"
+    }
+  ],
+  "template": {
+    "previousTemplateSHA256": "ba08de6916cd837b3733aa0c6fcb78f2e8224431d25e1310089ae67d18445f2d",
+    "files": [
+      {
+        "path": "/Users/dayu/Movies/Motion Templates.localized/Effects.localized/大鱼/大鱼人像美化/大鱼人像美化.moef",
+        "bytes": 22996,
+        "sha256": "30ca8edf36801264c5de2c753c40b720aba8052633620713a12401098fcd2409"
+      },
+      {
+        "path": "/Users/dayu/Movies/Motion Templates.localized/Effects.localized/大鱼/大鱼人像美化/Drop Zone.tiff",
+        "bytes": 420128,
+        "sha256": "a7f8e3a2a431dbb3ce9e777040bb55e701cfe9ab9632e8cbb10359732bc8692e"
+      }
+    ],
+    "installedWithHostsClosed": true
+  },
+  "discovery": "     com.dayu.beatygril.fxplug(1.1)\tA9F36A44-1E5E-4AB3-A2FD-5C66A76DB8BB\t2026-10-21 13:53:56 +0000\t/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit\n (1 plug-in)\n",
+  "duplicateInventory": {
+    "scopes": [
+      "/Users/dayu/Documents/PaintFCP",
+      "/Users/dayu/.codex/worktrees",
+      "/Users/dayu/Library/Developer/Xcode/DerivedData",
+      "/Users/dayu/Desktop",
+      "/Users/dayu/Downloads",
+      "/Applications",
+      "/Library/Plug-Ins/FxPlug",
+      "/Users/dayu/Library/Plug-Ins/FxPlug",
+      "/private/tmp/paintfcp-format-probe.PsxvYQ",
+      "/private/tmp/paintfcp-y-review.KpPi8T",
+      "/private/tmp/paintfcp-live-review.ItH4EG",
+      "/private/tmp/paintfcp-slim-field.6fDdJj",
+      "/private/tmp/paintfcp-chin-smoke.rfco16hq",
+      "/private/tmp/paintfcp-rea.b3j9Te",
+      "/private/tmp/paintfcp-slim-smoke.3ncdDe"
+    ],
+    "matchingOuterApps": [
+      "/Library/Plug-Ins/FxPlug/beatygril.app"
+    ],
+    "errors": []
+  },
+  "status": "installed, formal identity/ticket/discovery/template verified; user visual QA pending"
+}

docs/verification/v1.0.6/notarization.json

@@ -0,0 +1 @@
+{"id":"ab0271c8-0c4b-4b10-9474-cebe9b55385b","message":"Processing complete","status":"Accepted"}

docs/verification/v1.0.6/osc-tests.txt

@@ -0,0 +1,21 @@
+2026-10-21 20:53:14.697 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.25,0.75) setter=(0.25,0.75) readback=(0.25,0.75) mode=normalized verified=1
+2026-10-21 20:53:14.705 osc-tests[10458:5463835] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(80,180) surface=320x240 origin=0
+2026-10-21 20:53:15.118 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.8,0.3) setter=(1152,-432) readback=(0.8,0.3) mode=centered-pixels verified=1
+2026-10-21 20:53:15.118 osc-tests[10458:5463835] PGFaceOSC coordinates selection=(0.7,0.4) objectBounds=(-1920,-1080,3840,2160) canvas=(152,78) surface=320x240 origin=0
+2026-10-21 20:53:15.168 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.8,0.3) setter=(0.8,0.3) readback=(0.12345,0.87654) mode=normalized verified=0
+2026-10-21 20:53:15.168 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.75,0.25) setter=(0.75,0.25) readback=(0.75,0.25) mode=normalized verified=1
+2026-10-21 20:53:15.168 osc-tests[10458:5463835] PGFaceOSC coordinates selection=(0.75,0.25) objectBounds=(-100,-50,200,100) canvas=(160,60) surface=320x240 origin=0
+2026-10-21 20:53:15.218 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.625,0.375) setter=(0.625,0.375) readback=(0.625,0.375) mode=normalized verified=1
+2026-10-21 20:53:15.218 osc-tests[10458:5463835] PGFaceOSC coordinates selection=(0.625,0.375) objectBounds=(-100,-50,200,100) canvas=(240,60) surface=320x240 origin=0
+2026-10-21 20:53:15.268 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.25,0.75) setter=(0.25,0.75) readback=(0.25,0.75) mode=normalized verified=1
+2026-10-21 20:53:15.268 osc-tests[10458:5463835] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(144,180) surface=320x240 origin=0
+2026-10-21 20:53:15.318 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 20:53:15.318 osc-tests[10458:5463835] PGFaceOSC coordinates selection=(0,1) objectBounds=(-100,-50,200,100) canvas=(100,140) surface=320x240 origin=0
+2026-10-21 20:53:15.369 osc-tests[10458:5463835] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(nan,nan) surface=320x240 origin=0
+2026-10-21 20:53:15.418 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 20:53:15.418 osc-tests[10458:5463835] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(inf,nan) surface=320x240 origin=0
+2026-10-21 20:53:15.467 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 20:53:15.467 osc-tests[10458:5463835] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(80,nan) surface=320x240 origin=0
+2026-10-21 20:53:15.517 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 20:53:15.517 osc-tests[10458:5463835] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+OSC adapter: 98 checks, 0 failures

docs/verification/v1.0.6/recovery-ad54726-core-tests.txt

@@ -0,0 +1,5 @@
+Beauty renderer: 49 checks, 0 failures (Metal).
+2026-10-21 20:58:16.457 face-tests[11385:5472531] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+Face processing: 116 checks passed
+2026-10-21 20:58:19.882 slim-tests[11391:5472584] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+PASS: 394 slim alignment checks; maximum UV oracle error 1.09828022e-05

docs/verification/v1.0.6/recovery-ad54726.txt

@@ -0,0 +1,22 @@
+PASS: independent remote recovery
+Remote: https://dayu.media/git/dayu/paintfcp-fxplug.git
+SHA: ad54726b17fabd11f46bc6121e664eac38960a23
+Temporary clone: /tmp/paintfcp-recovery-ad54726.nARdL7/checkout
+Temporary clone removed: True
+Tracked files: 87
+Git blob / checked-out bytes / modes mismatches: 0
+Git fsck --strict --full exit: 0
+LFS pointers: 0; submodules: 0
+Resource files verified: 14; missing required: 0
+Drop Zone.tiff: Templates/大鱼人像美化/Drop Zone.tiff: TIFF image data, big-endian, direntries=21, height=1200, bps=0, compression=LZW, PhotometricIntepretation=RGB, orientation=upper-left, width=1200
+Core test exit: 0
+Core counts: Beauty49 + Face116 + Slim394 =559; failures0
+Maximum UV oracle error: 1.09828022e-05
+Core test duration: 5.394s
+ASan requested: false; sanitizer diagnostics: 0
+Restored worktree after tests: clean
+APP outputs:0; no xcodebuild build / host operations / root source edits / push
+All modes exactly match Git; scripts/test.sh, test-host.sh, test-osc.sh and deliver.py restore executable.
+External Apple SDK/frameworks are installed on this machine and must be installed separately when recovering.
+Finished UTC: 2026-10-21T12:58:52.192540+00:00
+Detailed JSON: /Users/dayu/Documents/PaintFCP/build/pose-analysis/recovery-v106/recovery-ad54726.json

docs/verification/v1.0.6/slim-chin-real-video-asan.txt

@@ -0,0 +1,2 @@
+2026-10-21 20:50:27.412 slim-chin-asan[10123:5460221] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+PASS: 494 slim alignment checks; maximum UV oracle error 1.09828022e-05

docs/verification/v1.1.0/core-tests.txt

@@ -0,0 +1,5 @@
+Beauty renderer: 49 checks, 0 failures (Metal).
+2026-10-21 22:48:21.085 face-tests[18460:5636636] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+Face processing: 116 checks passed
+2026-10-21 22:48:24.576 slim-tests[18472:5636747] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+PASS: 394 slim alignment checks; maximum UV oracle error 1.09828022e-05

docs/verification/v1.1.0/delivery-receipt.json

@@ -0,0 +1,44 @@
+{
+  "status": "installed_user_qa_pending",
+  "bundleIdentifier": "com.dayu.beatygril",
+  "installationPath": "/Library/Plug-Ins/FxPlug/beatygril.app",
+  "options": {
+    "waitForHosts": true,
+    "userTests": true
+  },
+  "nativeEffectQA": {
+    "status": "pending_user",
+    "performedByScript": false
+  },
+  "source": {
+    "commit": "f79d24eb0185f31feaae58b83b632f92dcb3ca91",
+    "trackedWorktreeChanges": []
+  },
+  "updatedAt": "2026-10-21T15:02:07.218005+00:00",
+  "version": "1.1.0",
+  "build": "9",
+  "stagingSignature": "Executable=/private/tmp/paintfcp-build-20261021/Build/Products/Release/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=3611af053e7fa8c0969e2bb6f600b7e9775b1f00\nCandidateCDHashFull sha256=3611af053e7fa8c0969e2bb6f600b7e9775b1f000a0142f2f50b833a1fc2b494\nHash choices=sha256\nCMSDigest=3611af053e7fa8c0969e2bb6f600b7e9775b1f000a0142f2f50b833a1fc2b494\nCMSDigestType=2\nCDHash=3611af053e7fa8c0969e2bb6f600b7e9775b1f00\nSignature size=8968\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 22:53:52\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "notarization": {
+    "id": "ce26be63-9dcd-436a-bcb5-bd294fcc92a9",
+    "status": "Accepted",
+    "message": "Processing complete"
+  },
+  "signingVerified": true,
+  "stapleValidated": true,
+  "stagingPluginUnregistered": true,
+  "runningHosts": [],
+  "installedSignature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=3611af053e7fa8c0969e2bb6f600b7e9775b1f00\nCandidateCDHashFull sha256=3611af053e7fa8c0969e2bb6f600b7e9775b1f000a0142f2f50b833a1fc2b494\nHash choices=sha256\nCMSDigest=3611af053e7fa8c0969e2bb6f600b7e9775b1f000a0142f2f50b833a1fc2b494\nCMSDigestType=2\nCDHash=3611af053e7fa8c0969e2bb6f600b7e9775b1f00\nSignature size=8968\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 22:53:52\nNotarization Ticket=stapled\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "installedSignatureVerified": true,
+  "installedStapleValidated": true,
+  "gatekeeperAccepted": true,
+  "pluginDiscovery": {
+    "bundleIdentifier": "com.dayu.beatygril.fxplug",
+    "formalPath": "/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit",
+    "output": "     com.dayu.beatygril.fxplug(1.1)\tDA452CD1-7B7F-4F15-9C52-09270028E946\t2026-10-21 15:02:07 +0000\t/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit\n (1 plug-in)\n"
+  },
+  "removedGeneratedPaths": [
+    "/Users/dayu/Documents/PaintFCP/build/delivery/previous-beatygril.app",
+    "/tmp/paintfcp-build-20261021",
+    "/Users/dayu/Documents/PaintFCP/build/delivery/notarization.zip"
+  ]
+}

docs/verification/v1.1.0/host-tests.txt

@@ -0,0 +1,21 @@
+2026-10-21 22:52:28.194 host-tests[18824:5644007] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+Default IOSurface maximum byte difference: 0
+Alternate destination tag maximum byte difference: 0
+Anatomy default       0/0 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       0/1 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       1/0 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       1/1 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy big-eye       0/0 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       0/1 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       1/0 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       1/1 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy chin-positive 0/0 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 0/1 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 1/0 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 1/1 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-negative 0/0 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 0/1 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 1/0 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 1/1 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Legacy fallback upright comparison: max=2 mean=0.0010357
+Host adapter: 248 checks, 0 failures

docs/verification/v1.1.0/inspector-tests.txt

@@ -0,0 +1 @@
+Inspector: 134 checks, 0 failures

docs/verification/v1.1.0/installed-discovery.txt

@@ -0,0 +1,2 @@
+     com.dayu.beatygril.fxplug(1.1)	DA452CD1-7B7F-4F15-9C52-09270028E946	2026-10-21 15:02:07 +0000	/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit
+ (1 plug-in)

docs/verification/v1.1.0/installed-signature.txt

@@ -0,0 +1,24 @@
+Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril
+Identifier=com.dayu.beatygril
+Format=app bundle with Mach-O universal (x86_64 arm64)
+CodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded
+Hash type=sha256 size=32
+CandidateCDHash sha256=3611af053e7fa8c0969e2bb6f600b7e9775b1f00
+CandidateCDHashFull sha256=3611af053e7fa8c0969e2bb6f600b7e9775b1f000a0142f2f50b833a1fc2b494
+Hash choices=sha256
+CMSDigest=3611af053e7fa8c0969e2bb6f600b7e9775b1f000a0142f2f50b833a1fc2b494
+CMSDigestType=2
+CDHash=3611af053e7fa8c0969e2bb6f600b7e9775b1f00
+Signature size=8968
+Authority=Developer ID Application: zhong luo (B3W25FX5H5)
+Authority=Developer ID Certification Authority
+Authority=Apple Root CA
+Timestamp=Oct 21, 2026 at 22:53:52
+Notarization Ticket=stapled
+Info.plist entries=22
+TeamIdentifier=B3W25FX5H5
+Runtime Version=27.0.0
+Sealed Resources version=2 rules=13 files=4
+Internal requirements count=1 size=180
+Total signatures=1
+Chosen signature=1

docs/verification/v1.1.0/installed-verification.json

@@ -0,0 +1,91 @@
+{
+  "version": "1.1.0",
+  "build": "9",
+  "date": "2026-10-21T15:03:33.815750+00:00",
+  "sourceCommit": "f79d24eb0185f31feaae58b83b632f92dcb3ca91",
+  "uiOperations": false,
+  "hostTerminationPerformed": false,
+  "nativeVisualQA": "pending user",
+  "installationPath": "/Library/Plug-Ins/FxPlug/beatygril.app",
+  "codesign": {
+    "exitCode": 0,
+    "stdout": "",
+    "stderr": ""
+  },
+  "staple": {
+    "exitCode": 0,
+    "stdout": "Processing: /Library/Plug-Ins/FxPlug/beatygril.app\nThe validate action worked!",
+    "stderr": ""
+  },
+  "gatekeeper": {
+    "exitCode": 0,
+    "stdout": "",
+    "stderr": "/Library/Plug-Ins/FxPlug/beatygril.app: accepted\nsource=Notarized Developer ID"
+  },
+  "identity": [
+    {
+      "path": "/Library/Plug-Ins/FxPlug/beatygril.app",
+      "bundleIdentifier": "com.dayu.beatygril",
+      "version": "1.1.0",
+      "build": "9",
+      "archs": "x86_64 arm64",
+      "signature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=3611af053e7fa8c0969e2bb6f600b7e9775b1f00\nCandidateCDHashFull sha256=3611af053e7fa8c0969e2bb6f600b7e9775b1f000a0142f2f50b833a1fc2b494\nHash choices=sha256\nCMSDigest=3611af053e7fa8c0969e2bb6f600b7e9775b1f000a0142f2f50b833a1fc2b494\nCMSDigestType=2\nCDHash=3611af053e7fa8c0969e2bb6f600b7e9775b1f00\nSignature size=8968\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 22:53:52\nNotarization Ticket=stapled\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1"
+    },
+    {
+      "path": "/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit",
+      "bundleIdentifier": "com.dayu.beatygril.fxplug",
+      "version": "1.1.0",
+      "build": "9",
+      "archs": "x86_64 arm64",
+      "signature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit/Contents/MacOS/beatygril XPC Service\nIdentifier=com.dayu.beatygril.fxplug\nFormat=bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=837 flags=0x10000(runtime) hashes=19+3 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=c9b6ba40f307b1e1134890cae999a46b7c51750b\nCandidateCDHashFull sha256=c9b6ba40f307b1e1134890cae999a46b7c51750b599514a0e5858a1fc9618926\nHash choices=sha256\nCMSDigest=c9b6ba40f307b1e1134890cae999a46b7c51750b599514a0e5858a1fc9618926\nCMSDigestType=2\nCDHash=c9b6ba40f307b1e1134890cae999a46b7c51750b\nSignature size=8969\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 22:53:51\nInfo.plist entries=26\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=188\nTotal signatures=1\nChosen signature=1"
+    }
+  ],
+  "template": {
+    "installedWithHostsClosed": true,
+    "files": [
+      {
+        "path": "/Users/dayu/Movies/Motion Templates.localized/Effects.localized/大鱼/大鱼人像美化/大鱼人像美化.moef",
+        "bytes": 23073,
+        "sha256": "e1c0cff1dd3541ed97cab2cb39a76ad4f28dc659b3be7991cc7ac92dd8ea090b"
+      },
+      {
+        "path": "/Users/dayu/Movies/Motion Templates.localized/Effects.localized/大鱼/大鱼人像美化/Drop Zone.tiff",
+        "bytes": 420128,
+        "sha256": "a7f8e3a2a431dbb3ce9e777040bb55e701cfe9ab9632e8cbb10359732bc8692e"
+      }
+    ],
+    "publicationCount": 3,
+    "manualAnalysisPublished": false
+  },
+  "discovery": "com.dayu.beatygril.fxplug(1.1)\tDA452CD1-7B7F-4F15-9C52-09270028E946\t2026-10-21 15:02:07 +0000\t/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit\n (1 plug-in)",
+  "duplicateInventory": {
+    "scopes": [
+      "/Users/dayu/Documents/PaintFCP",
+      "/Users/dayu/.codex/worktrees",
+      "/Users/dayu/Library/Developer/Xcode/DerivedData",
+      "/Users/dayu/Desktop",
+      "/Users/dayu/Downloads",
+      "/Applications",
+      "/Library/Plug-Ins/FxPlug",
+      "/Users/dayu/Library/Plug-Ins/FxPlug",
+      "/private/tmp/paintfcp-chin-smoke.rfco16hq",
+      "/private/tmp/paintfcp-format-probe.PsxvYQ",
+      "/private/tmp/paintfcp-live-review.ItH4EG",
+      "/private/tmp/paintfcp-rea.b3j9Te",
+      "/private/tmp/paintfcp-slim-field.6fDdJj",
+      "/private/tmp/paintfcp-slim-smoke.3ncdDe",
+      "/private/tmp/paintfcp-y-review.KpPi8T"
+    ],
+    "matchingOuterApps": [
+      "/Library/Plug-Ins/FxPlug/beatygril.app"
+    ],
+    "errors": [],
+    "scopeNote": "Bounded scan of project, worktrees, known build locations, Applications and FxPlug directories; not all mounted volumes."
+  },
+  "generatedCopyCleanup": {
+    "/Users/dayu/Documents/PaintFCP/build/delivery/previous-beatygril.app": true,
+    "/tmp/paintfcp-build-20261021": true,
+    "/Users/dayu/Documents/PaintFCP/build/delivery/notarization.zip": true
+  },
+  "status": "installed, formal identity/ticket/discovery/template verified; user native QA pending"
+}

docs/verification/v1.1.0/notarization.json

@@ -0,0 +1 @@
+{"id":"ce26be63-9dcd-436a-bcb5-bd294fcc92a9","status":"Accepted","message":"Processing complete"}

docs/verification/v1.1.0/osc-tests.txt

@@ -0,0 +1,21 @@
+2026-10-21 22:48:19.739 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.25,0.75) setter=(0.25,0.75) readback=(0.25,0.75) mode=normalized verified=1
+2026-10-21 22:48:19.745 osc-tests[18452:5636580] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(80,180) surface=320x240 origin=0
+2026-10-21 22:48:20.198 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.8,0.3) setter=(1152,-432) readback=(0.8,0.3) mode=centered-pixels verified=1
+2026-10-21 22:48:20.198 osc-tests[18452:5636580] PGFaceOSC coordinates selection=(0.7,0.4) objectBounds=(-1920,-1080,3840,2160) canvas=(152,78) surface=320x240 origin=0
+2026-10-21 22:48:20.246 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.8,0.3) setter=(0.8,0.3) readback=(0.12345,0.87654) mode=normalized verified=0
+2026-10-21 22:48:20.247 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.75,0.25) setter=(0.75,0.25) readback=(0.75,0.25) mode=normalized verified=1
+2026-10-21 22:48:20.247 osc-tests[18452:5636580] PGFaceOSC coordinates selection=(0.75,0.25) objectBounds=(-100,-50,200,100) canvas=(160,60) surface=320x240 origin=0
+2026-10-21 22:48:20.298 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.625,0.375) setter=(0.625,0.375) readback=(0.625,0.375) mode=normalized verified=1
+2026-10-21 22:48:20.298 osc-tests[18452:5636580] PGFaceOSC coordinates selection=(0.625,0.375) objectBounds=(-100,-50,200,100) canvas=(240,60) surface=320x240 origin=0
+2026-10-21 22:48:20.348 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.25,0.75) setter=(0.25,0.75) readback=(0.25,0.75) mode=normalized verified=1
+2026-10-21 22:48:20.349 osc-tests[18452:5636580] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(144,180) surface=320x240 origin=0
+2026-10-21 22:48:20.398 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 22:48:20.398 osc-tests[18452:5636580] PGFaceOSC coordinates selection=(0,1) objectBounds=(-100,-50,200,100) canvas=(100,140) surface=320x240 origin=0
+2026-10-21 22:48:20.447 osc-tests[18452:5636580] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(nan,nan) surface=320x240 origin=0
+2026-10-21 22:48:20.500 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 22:48:20.500 osc-tests[18452:5636580] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(inf,nan) surface=320x240 origin=0
+2026-10-21 22:48:20.546 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 22:48:20.547 osc-tests[18452:5636580] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(80,nan) surface=320x240 origin=0
+2026-10-21 22:48:20.608 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 22:48:20.608 osc-tests[18452:5636580] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+OSC adapter: 98 checks, 0 failures

docs/verification/v1.1.0/recovered-inspector-tests-asan.txt

@@ -0,0 +1 @@
+Inspector: 134 checks, 0 failures

docs/verification/v1.1.0/recovered-template-audit.txt

@@ -0,0 +1,75 @@
+{
+  "status": "structure_verified_native_loading_pending",
+  "templateSHA256": "e1c0cff1dd3541ed97cab2cb39a76ad4f28dc659b3be7991cc7ac92dd8ea090b",
+  "pluginVersion": "1.1.0",
+  "publications": [
+    {
+      "object": "510000011",
+      "channel": "./2/100",
+      "name": "FCP 版本作者→"
+    },
+    {
+      "object": "510000012",
+      "channel": "./2/100",
+      "name": "更多模板浏览器访问→"
+    },
+    {
+      "object": "510000005",
+      "channel": "./210",
+      "name": ""
+    }
+  ],
+  "parameterPathsResolved": 50,
+  "sourceMediaClosed": true,
+  "mediaSHA256": "a7f8e3a2a431dbb3ce9e777040bb55e701cfe9ab9632e8cbb10359732bc8692e",
+  "customState": {
+    "class": "PGInspectorState",
+    "schema": 1,
+    "hasEdits": false,
+    "values": {
+      "41": 0.0,
+      "30": 1.0,
+      "71": 1.0,
+      "27": 0.0,
+      "5": 1.0,
+      "35": 0.0,
+      "24": 0.0,
+      "2": 0.0,
+      "32": 0.0,
+      "40": 1.7999999523162842,
+      "70": 1.0,
+      "18": 0.0,
+      "29": 0.0,
+      "26": 0.0,
+      "15": 0.0,
+      "4": 0.0,
+      "23": 0.0,
+      "12": 0.0,
+      "42": 0.0,
+      "72": 1.0,
+      "31": 0.0,
+      "1": 1.0,
+      "39": 0.0,
+      "28": 0.0,
+      "17": 0.0,
+      "25": 0.0,
+      "14": 0.0,
+      "3": 8.0,
+      "33": 0.0,
+      "22": 0.0
+    },
+    "disabled": [],
+    "classes": [
+      "NSDictionary",
+      "NSSet",
+      "PGInspectorState"
+    ],
+    "innerBytes": 935,
+    "innerSHA256": "257540ac6079756a76f3d31dff1b9bca2b33393962057927791316965495ab60",
+    "outerBytes": 1127,
+    "outerSHA256": "95d5f1e2c35c40e9f1234b1480894bcc0ee68c0822c9bd3f7c04338062e6a26b",
+    "encodedCharacters": 1516,
+    "exactTextRoundtrip": true
+  },
+  "nativeLoading": "pending user; no host executed"
+}

docs/verification/v1.1.0/recovery-f79d24e.txt

@@ -0,0 +1,11 @@
+Target: f79d24eb0185f31feaae58b83b632f92dcb3ca91
+Remote: https://dayu.media/git/dayu/paintfcp-fxplug.git
+Passed: True
+Tracked files: 111
+All tracked bytes/blob IDs/modes: True
+Git fsck --strict --full: 0
+LFS/submodules: [] / []
+Inspector tests: {'checks': 134, 'failures': 0, 'ASan': True, 'exitCode': 0, 'log': 'inspector-tests-asan.txt'}
+Template audit: structure_verified_native_loading_pending
+Core 559 tests not repeated; no APP build/host/UI/sign/install.
+Temporary clone removed: True

docs/verification/v1.1.0/template-audit.json

@@ -0,0 +1,75 @@
+{
+  "status": "structure_verified_native_loading_pending",
+  "templateSHA256": "e1c0cff1dd3541ed97cab2cb39a76ad4f28dc659b3be7991cc7ac92dd8ea090b",
+  "pluginVersion": "1.1.0",
+  "publications": [
+    {
+      "object": "510000011",
+      "channel": "./2/100",
+      "name": "FCP 版本作者→"
+    },
+    {
+      "object": "510000012",
+      "channel": "./2/100",
+      "name": "更多模板浏览器访问→"
+    },
+    {
+      "object": "510000005",
+      "channel": "./210",
+      "name": ""
+    }
+  ],
+  "parameterPathsResolved": 50,
+  "sourceMediaClosed": true,
+  "mediaSHA256": "a7f8e3a2a431dbb3ce9e777040bb55e701cfe9ab9632e8cbb10359732bc8692e",
+  "customState": {
+    "class": "PGInspectorState",
+    "schema": 1,
+    "hasEdits": false,
+    "values": {
+      "41": 0.0,
+      "30": 1.0,
+      "71": 1.0,
+      "27": 0.0,
+      "5": 1.0,
+      "35": 0.0,
+      "24": 0.0,
+      "2": 0.0,
+      "32": 0.0,
+      "40": 1.7999999523162842,
+      "70": 1.0,
+      "18": 0.0,
+      "29": 0.0,
+      "26": 0.0,
+      "15": 0.0,
+      "4": 0.0,
+      "23": 0.0,
+      "12": 0.0,
+      "42": 0.0,
+      "72": 1.0,
+      "31": 0.0,
+      "1": 1.0,
+      "39": 0.0,
+      "28": 0.0,
+      "17": 0.0,
+      "25": 0.0,
+      "14": 0.0,
+      "3": 8.0,
+      "33": 0.0,
+      "22": 0.0
+    },
+    "disabled": [],
+    "classes": [
+      "NSDictionary",
+      "NSSet",
+      "PGInspectorState"
+    ],
+    "innerBytes": 935,
+    "innerSHA256": "257540ac6079756a76f3d31dff1b9bca2b33393962057927791316965495ab60",
+    "outerBytes": 1127,
+    "outerSHA256": "95d5f1e2c35c40e9f1234b1480894bcc0ee68c0822c9bd3f7c04338062e6a26b",
+    "encodedCharacters": 1516,
+    "exactTextRoundtrip": true
+  },
+  "nativeLoading": "pending user; no host executed"
+}

docs/verification/v1.1.0/ui-validation.json

@@ -0,0 +1,33 @@
+{
+  "scope": "offscreen AppKit inspector, real production controller and mocked host callbacks; no Motion/FCP UI",
+  "fullChecks": 1039,
+  "counts": {
+    "beauty": 49,
+    "face": 116,
+    "thinChin": 394,
+    "hostAdapterASan": 248,
+    "oscASan": 98,
+    "inspectorASan": 134
+  },
+  "nativeVisualQA": "pending user",
+  "manualAnalysisUI": "removed; legacy IDs hidden and buttons disabled",
+  "renderMode": "realtime automatic follow; stored manual geometry never used",
+  "templatePublishedEntries": 3,
+  "offscreenWidths": [
+    280,
+    320,
+    380,
+    520
+  ],
+  "independentViewChecks": 27,
+  "fixedRegressions": [
+    "shape group bypass clears face-box overlay",
+    "disabled legacy detail effects stay disabled on first edit",
+    "legacy global smoothing remains enabled when its old local group was off",
+    "new gesture reads current host after immediate undo",
+    "pending synchronization is bound to CMTime",
+    "same-time host change refreshes without waiting",
+    "explicit numeric input is never skipped due to stale UI cache"
+  ],
+  "archives": "Own PGInspectorState secure payload; Foundation outer and inner decode and Motion alphabet roundtrip tested"
+}

docs/verification/v1.1.1/core-tests.txt

@@ -0,0 +1,5 @@
+Beauty renderer: 49 checks, 0 failures (Metal).
+2026-10-21 23:20:16.950 face-tests[22007:5696503] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+Face processing: 116 checks passed
+2026-10-21 23:20:21.817 slim-tests[22045:5696731] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+PASS: 394 slim alignment checks; maximum UV oracle error 1.09828022e-05

docs/verification/v1.1.1/host-tests.txt

@@ -0,0 +1,21 @@
+2026-10-21 23:20:18.015 host-tests[22024:5696629] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+Default IOSurface maximum byte difference: 0
+Alternate destination tag maximum byte difference: 0
+Anatomy default       0/0 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       0/1 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       1/0 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       1/1 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy big-eye       0/0 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       0/1 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       1/0 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       1/1 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy chin-positive 0/0 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 0/1 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 1/0 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 1/1 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-negative 0/0 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 0/1 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 1/0 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 1/1 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Legacy fallback upright comparison: max=2 mean=0.0010357
+Host adapter: 248 checks, 0 failures

docs/verification/v1.1.1/inspector-before-fix.txt

@@ -0,0 +1,6 @@
+FAIL: an action-scoped host connects and reads the actual template values
+FAIL: custom parameter actions identify their actual inspector NSView
+FAIL: action-scoped parameter APIs do not leave the whole native panel disabled
+FAIL: a connected native control writes through the action-scoped setting API
+FAIL: a later host connection restores controls after a transient API failure
+Inspector: 141 checks, 5 failures

docs/verification/v1.1.1/inspector-tests-asan.txt

@@ -0,0 +1 @@
+Inspector: 141 checks, 0 failures

docs/verification/v1.1.1/inspector-tests.txt

@@ -0,0 +1 @@
+Inspector: 141 checks, 0 failures

docs/verification/v1.1.1/interim-delivery-receipt.json

@@ -0,0 +1,43 @@
+{
+  "status": "failed",
+  "bundleIdentifier": "com.dayu.beatygril",
+  "installationPath": "/Library/Plug-Ins/FxPlug/beatygril.app",
+  "options": {
+    "waitForHosts": true,
+    "userTests": false
+  },
+  "nativeEffectQA": {
+    "status": "pending_operator",
+    "performedByScript": false
+  },
+  "source": {
+    "commit": "53ce88dd15983e9397ab08f5ec9ad608fce5d0b5",
+    "trackedWorktreeChanges": []
+  },
+  "updatedAt": "2026-10-21T15:40:33.591925+00:00",
+  "version": "1.1.1",
+  "build": "10",
+  "stagingSignature": "Executable=/private/tmp/paintfcp-build-20261021/Build/Products/Release/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a\nCandidateCDHashFull sha256=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a3b65e0bd8d653434f77cad3a\nHash choices=sha256\nCMSDigest=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a3b65e0bd8d653434f77cad3a\nCMSDigestType=2\nCDHash=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a\nSignature size=8968\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 23:22:09\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "notarization": {
+    "message": "Processing complete",
+    "status": "Accepted",
+    "id": "a6218c05-b08f-417f-9617-c8e39b458a28"
+  },
+  "signingVerified": true,
+  "stapleValidated": true,
+  "stagingPluginUnregistered": true,
+  "runningHosts": [],
+  "installedSignature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a\nCandidateCDHashFull sha256=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a3b65e0bd8d653434f77cad3a\nHash choices=sha256\nCMSDigest=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a3b65e0bd8d653434f77cad3a\nCMSDigestType=2\nCDHash=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a\nSignature size=8968\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 23:22:09\nNotarization Ticket=stapled\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "installedSignatureVerified": true,
+  "installedStapleValidated": true,
+  "gatekeeperAccepted": true,
+  "pluginDiscovery": {
+    "bundleIdentifier": "com.dayu.beatygril.fxplug",
+    "formalPath": "/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit",
+    "output": "     com.dayu.beatygril.fxplug(1.1)\tDDFB35E6-8D3D-4436-B8FA-A8D5372F38E8\t2026-10-21 15:22:36 +0000\t/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit\n (1 plug-in)\n"
+  },
+  "failure": {
+    "type": "KeyboardInterrupt",
+    "message": ""
+  }
+}

docs/verification/v1.1.1/interim-installed-discovery.txt

@@ -0,0 +1,2 @@
+     com.dayu.beatygril.fxplug(1.1)	DDFB35E6-8D3D-4436-B8FA-A8D5372F38E8	2026-10-21 15:22:36 +0000	/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit
+ (1 plug-in)

docs/verification/v1.1.1/interim-installed-signature.txt

@@ -0,0 +1,24 @@
+Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril
+Identifier=com.dayu.beatygril
+Format=app bundle with Mach-O universal (x86_64 arm64)
+CodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded
+Hash type=sha256 size=32
+CandidateCDHash sha256=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a
+CandidateCDHashFull sha256=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a3b65e0bd8d653434f77cad3a
+Hash choices=sha256
+CMSDigest=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a3b65e0bd8d653434f77cad3a
+CMSDigestType=2
+CDHash=3b65dadb35fe03201c99ce39fb1a41bb3ed6b00a
+Signature size=8968
+Authority=Developer ID Application: zhong luo (B3W25FX5H5)
+Authority=Developer ID Certification Authority
+Authority=Apple Root CA
+Timestamp=Oct 21, 2026 at 23:22:09
+Notarization Ticket=stapled
+Info.plist entries=22
+TeamIdentifier=B3W25FX5H5
+Runtime Version=27.0.0
+Sealed Resources version=2 rules=13 files=4
+Internal requirements count=1 size=180
+Total signatures=1
+Chosen signature=1

docs/verification/v1.1.1/interim-notarization.json

@@ -0,0 +1 @@
+{"message":"Processing complete","status":"Accepted","id":"a6218c05-b08f-417f-9617-c8e39b458a28"}

docs/verification/v1.1.1/interim-stage-cleanup.json

@@ -0,0 +1,11 @@
+{
+  "installedVersionRetained": "1.1.1 (10)",
+  "reason": "API handshake confirmed native; broader UI and new short/jaw fixes continue in next build; not tagged as final release",
+  "removedKnownGeneratedPaths": [
+    "/Users/dayu/Documents/PaintFCP/build/delivery/previous-beatygril.app",
+    "/tmp/paintfcp-build-20261021/Build/Products/Release/beatygril.app",
+    "/tmp/paintfcp-build-20261021",
+    "/Users/dayu/Documents/PaintFCP/build/delivery/notarization.zip"
+  ],
+  "UIOperatedByCleanup": false
+}

docs/verification/v1.1.1/native-interface-log.txt

@@ -0,0 +1,8 @@
+Timestamp               Ty Process[PID:TID]
+2026-10-21 23:24:07.867 Df beatygril XPC Service[22755:570e44] PGInspector connection readBefore=0 writeBefore=0 readInAction=1 writeInAction=1 viewSender=1 onMain=1
+2026-10-21 23:26:03.703 Df beatygril XPC Service[22755:570e44] PGInspector connection readBefore=0 writeBefore=0 readInAction=1 writeInAction=1 viewSender=1 onMain=1
+2026-10-21 23:29:21.518 Df beatygril XPC Service[22755:570e44] PGInspector connection readBefore=0 writeBefore=0 readInAction=1 writeInAction=1 viewSender=1 onMain=1
+2026-10-21 23:29:43.237 Df beatygril XPC Service[22755:570e44] PGInspector connection readBefore=0 writeBefore=0 readInAction=1 writeInAction=1 viewSender=1 onMain=1
+2026-10-21 23:33:38.371 Df beatygril XPC Service[22755:570e44] PGInspector connection readBefore=0 writeBefore=0 readInAction=1 writeInAction=1 viewSender=1 onMain=1
+2026-10-21 23:37:47.022 Df beatygril XPC Service[22755:570e44] PGInspector connection readBefore=0 writeBefore=0 readInAction=1 writeInAction=1 viewSender=1 onMain=1
+2026-10-21 23:38:06.329 Df beatygril XPC Service[22755:570e44] PGInspector connection readBefore=0 writeBefore=0 readInAction=1 writeInAction=1 viewSender=1 onMain=1

docs/verification/v1.1.1/osc-tests.txt

@@ -0,0 +1,21 @@
+2026-10-21 23:20:17.783 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.25,0.75) setter=(0.25,0.75) readback=(0.25,0.75) mode=normalized verified=1
+2026-10-21 23:20:17.791 osc-tests[22026:5696635] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(80,180) surface=320x240 origin=0
+2026-10-21 23:20:18.509 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.8,0.3) setter=(1152,-432) readback=(0.8,0.3) mode=centered-pixels verified=1
+2026-10-21 23:20:18.509 osc-tests[22026:5696635] PGFaceOSC coordinates selection=(0.7,0.4) objectBounds=(-1920,-1080,3840,2160) canvas=(152,78) surface=320x240 origin=0
+2026-10-21 23:20:18.607 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.8,0.3) setter=(0.8,0.3) readback=(0.12345,0.87654) mode=normalized verified=0
+2026-10-21 23:20:18.607 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.75,0.25) setter=(0.75,0.25) readback=(0.75,0.25) mode=normalized verified=1
+2026-10-21 23:20:18.607 osc-tests[22026:5696635] PGFaceOSC coordinates selection=(0.75,0.25) objectBounds=(-100,-50,200,100) canvas=(160,60) surface=320x240 origin=0
+2026-10-21 23:20:18.684 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.625,0.375) setter=(0.625,0.375) readback=(0.625,0.375) mode=normalized verified=1
+2026-10-21 23:20:18.684 osc-tests[22026:5696635] PGFaceOSC coordinates selection=(0.625,0.375) objectBounds=(-100,-50,200,100) canvas=(240,60) surface=320x240 origin=0
+2026-10-21 23:20:18.765 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.25,0.75) setter=(0.25,0.75) readback=(0.25,0.75) mode=normalized verified=1
+2026-10-21 23:20:18.765 osc-tests[22026:5696635] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(144,180) surface=320x240 origin=0
+2026-10-21 23:20:18.864 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 23:20:18.864 osc-tests[22026:5696635] PGFaceOSC coordinates selection=(0,1) objectBounds=(-100,-50,200,100) canvas=(100,140) surface=320x240 origin=0
+2026-10-21 23:20:18.947 osc-tests[22026:5696635] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(nan,nan) surface=320x240 origin=0
+2026-10-21 23:20:19.044 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 23:20:19.044 osc-tests[22026:5696635] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(inf,nan) surface=320x240 origin=0
+2026-10-21 23:20:19.123 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 23:20:19.123 osc-tests[22026:5696635] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(80,nan) surface=320x240 origin=0
+2026-10-21 23:20:19.203 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 23:20:19.203 osc-tests[22026:5696635] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+OSC adapter: 98 checks, 0 failures

docs/verification/v1.1.1/recovery-53ce88d.txt

@@ -0,0 +1,13 @@
+Target: 53ce88dd15983e9397ab08f5ec9ad608fce5d0b5
+Remote: https://dayu.media/git/dayu/paintfcp-fxplug.git
+Passed: True
+Tracked files: 125
+All tracked bytes/blob IDs/modes: True
+Git fsck --strict --full: 0
+LFS/submodules: [] / []
+Inspector tests: {'checks': 141, 'failures': 0, 'ASan': True, 'exitCode': 0, 'log': 'inspector-tests-asan.txt'}
+Template audit: structure_verified_native_loading_pending
+Core 559 tests not repeated; no APP build/host/UI/sign/install.
+Temporary clone removed: True
+Focused handshake review: PASS. startAction line159 precedes actual availability gate line163; pre-action API queries are diagnostics only. View init assigns its own NSView as actionSender; same sender balances endAction.
+Offscreen AppKit controls and action-gated/requires-view host mock covered; native Motion/FCP acceptance remains outside this task.

docs/verification/v1.1.2/automated-tests.json

@@ -0,0 +1,25 @@
+{
+  "version": "1.1.2",
+  "build": "13",
+  "total": 1551,
+  "counts": {
+    "beauty": 49,
+    "face": 116,
+    "thinChinJawShort": 796,
+    "hostAdapterASan": 335,
+    "oscASan": 98,
+    "inspectorASan": 157
+  },
+  "allPassed": true,
+  "extraRealFramesASan": {
+    "checks": 886,
+    "includedRepeatedBaseChecks": true,
+    "addedToTotal": false
+  },
+  "originCombinations": 28,
+  "originTagsExactlyByteIdentical": true,
+  "maxByteDifferenceVsIndependentUprightReference": 2,
+  "meanByteDifferenceLimit": 0.005,
+  "nativeCombinedBuildQA": "pending",
+  "continuousPreview": "each changed step completes its own host action before mouse-up; mock publishes at endAction"
+}

docs/verification/v1.1.2/continuous-preview-before.txt

@@ -0,0 +1,4 @@
+FAIL: every drag step publishes a completed host snapshot before mouse-up
+FAIL: every drag step publishes a completed host snapshot before mouse-up
+FAIL: every drag step publishes a completed host snapshot before mouse-up
+Inspector: 155 checks, 3 failures

docs/verification/v1.1.2/core-tests.txt

@@ -0,0 +1,5 @@
+Beauty renderer: 49 checks, 0 failures (Metal).
+2026-10-21 23:46:40.676 face-tests[24719:5743987] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+Face processing: 116 checks passed
+2026-10-21 23:46:52.402 slim-tests[24738:5744142] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+PASS: 796 slim alignment checks; maximum UV oracle error 1.09828022e-05

docs/verification/v1.1.2/delivery-receipt.json

@@ -0,0 +1,46 @@
+{
+  "status": "complete",
+  "bundleIdentifier": "com.dayu.beatygril",
+  "installationPath": "/Library/Plug-Ins/FxPlug/beatygril.app",
+  "options": {
+    "waitForHosts": true,
+    "userTests": false
+  },
+  "nativeEffectQA": {
+    "status": "operator_confirmed",
+    "performedByScript": false,
+    "scopeDocument": "native-qa.json",
+    "heldMouseCanvasTiming": "pending user observation"
+  },
+  "source": {
+    "commit": "a2e33e8e00a99b95dc29d67a819cb0897eda5756",
+    "trackedWorktreeChanges": []
+  },
+  "updatedAt": "2026-10-21T16:31:12.570976+00:00",
+  "version": "1.1.2",
+  "build": "13",
+  "stagingSignature": "Executable=/private/tmp/paintfcp-build-20261021/Build/Products/Release/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=78b01963732b743659b501c5beedc96a725f1156\nCandidateCDHashFull sha256=78b01963732b743659b501c5beedc96a725f11560ebafe992a93195b3bae4dc2\nHash choices=sha256\nCMSDigest=78b01963732b743659b501c5beedc96a725f11560ebafe992a93195b3bae4dc2\nCMSDigestType=2\nCDHash=78b01963732b743659b501c5beedc96a725f1156\nSignature size=8968\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 22, 2026 at 00:20:39\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "notarization": {
+    "message": "Processing complete",
+    "id": "5f5ce378-8430-467b-ae97-048e6bc81573",
+    "status": "Accepted"
+  },
+  "signingVerified": true,
+  "stapleValidated": true,
+  "stagingPluginUnregistered": true,
+  "runningHosts": [],
+  "installedSignature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=78b01963732b743659b501c5beedc96a725f1156\nCandidateCDHashFull sha256=78b01963732b743659b501c5beedc96a725f11560ebafe992a93195b3bae4dc2\nHash choices=sha256\nCMSDigest=78b01963732b743659b501c5beedc96a725f11560ebafe992a93195b3bae4dc2\nCMSDigestType=2\nCDHash=78b01963732b743659b501c5beedc96a725f1156\nSignature size=8968\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 22, 2026 at 00:20:39\nNotarization Ticket=stapled\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "installedSignatureVerified": true,
+  "installedStapleValidated": true,
+  "gatekeeperAccepted": true,
+  "pluginDiscovery": {
+    "bundleIdentifier": "com.dayu.beatygril.fxplug",
+    "formalPath": "/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit",
+    "output": "     com.dayu.beatygril.fxplug(1.1)\t2293B0A5-4D98-4AE9-88F7-7022E3485E14\t2026-10-21 16:21:03 +0000\t/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit\n (1 plug-in)\n"
+  },
+  "removedGeneratedPaths": [
+    "/Users/dayu/Documents/PaintFCP/build/delivery/previous-beatygril.app",
+    "/tmp/paintfcp-build-20261021",
+    "/Users/dayu/Documents/PaintFCP/build/delivery/notarization.zip"
+  ]
+}

docs/verification/v1.1.2/host-adapter-asan.txt

@@ -0,0 +1,33 @@
+2026-10-21 23:54:44.774 host-tests[25302:5759794] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+Default IOSurface maximum byte difference: 0
+Alternate destination tag maximum byte difference: 0
+Anatomy default       0/0 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       0/1 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       1/0 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy default       1/1 max=0 mean=0.0000000 eye=0/0 chin=0 inverted=0
+Anatomy big-eye       0/0 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       0/1 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       1/0 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy big-eye       1/1 max=2 mean=0.0008917 eye=33510/33880 chin=0 inverted=0
+Anatomy chin-positive 0/0 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 0/1 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 1/0 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-positive 1/1 max=1 mean=0.0001459 eye=0/0 chin=116812 inverted=0
+Anatomy chin-negative 0/0 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 0/1 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 1/0 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy chin-negative 1/1 max=1 mean=0.0000849 eye=0/0 chin=60426 inverted=0
+Anatomy short-positive 0/0 max=2 mean=0.0011072 eye=0/0 chin=285953 inverted=0
+Anatomy short-positive 0/1 max=2 mean=0.0011072 eye=0/0 chin=285953 inverted=0
+Anatomy short-positive 1/0 max=2 mean=0.0011072 eye=0/0 chin=285953 inverted=0
+Anatomy short-positive 1/1 max=2 mean=0.0011072 eye=0/0 chin=285953 inverted=0
+Anatomy short-negative 0/0 max=2 mean=0.0008583 eye=0/0 chin=225648 inverted=0
+Anatomy short-negative 0/1 max=2 mean=0.0008583 eye=0/0 chin=225648 inverted=0
+Anatomy short-negative 1/0 max=2 mean=0.0008583 eye=0/0 chin=225648 inverted=0
+Anatomy short-negative 1/1 max=2 mean=0.0008583 eye=0/0 chin=225648 inverted=0
+Anatomy jaw           0/0 max=1 mean=0.0001974 eye=0/0 chin=12951 inverted=0
+Anatomy jaw           0/1 max=1 mean=0.0001974 eye=0/0 chin=12951 inverted=0
+Anatomy jaw           1/0 max=1 mean=0.0001974 eye=0/0 chin=12951 inverted=0
+Anatomy jaw           1/1 max=1 mean=0.0001974 eye=0/0 chin=12951 inverted=0
+Legacy fallback upright comparison: max=2 mean=0.0010357
+Host adapter: 335 checks, 0 failures

docs/verification/v1.1.2/independent-review.json

@@ -0,0 +1,10 @@
+{
+  "status": "passed",
+  "productionSourceSHA256": "e4122ca95f7ba41bc925b4cc4bf2bf88a72044ea41880cd66acd9c8278a7daf4",
+  "review": "Independent read-only review against recovered CPU constants and AIR: jaw six triples/radius/sequence, short polygon/axis/sign/thresholds, one landmark Y conversion, 56 argument layout, missing-topology pass-through. No blocking defect found.",
+  "extraChecks": {
+    "AIRProductCrossingCases": 30000,
+    "axisYConversionIdentities": 1000
+  },
+  "scope": "Five remaining approximate shape controls and full combined-chain equivalence remain outside this repair. Sampled anatomical upper-contour/pupil points do not prove every temple pixel under all poses is unchanged. Native combined-build QA pending."
+}

docs/verification/v1.1.2/inspector-asan.txt

@@ -0,0 +1 @@
+Inspector: 157 checks, 0 failures

docs/verification/v1.1.2/installed-discovery.txt

@@ -0,0 +1,2 @@
+     com.dayu.beatygril.fxplug(1.1)	2293B0A5-4D98-4AE9-88F7-7022E3485E14	2026-10-21 16:21:03 +0000	/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit
+ (1 plug-in)

docs/verification/v1.1.2/installed-signature.txt

@@ -0,0 +1,24 @@
+Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril
+Identifier=com.dayu.beatygril
+Format=app bundle with Mach-O universal (x86_64 arm64)
+CodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded
+Hash type=sha256 size=32
+CandidateCDHash sha256=78b01963732b743659b501c5beedc96a725f1156
+CandidateCDHashFull sha256=78b01963732b743659b501c5beedc96a725f11560ebafe992a93195b3bae4dc2
+Hash choices=sha256
+CMSDigest=78b01963732b743659b501c5beedc96a725f11560ebafe992a93195b3bae4dc2
+CMSDigestType=2
+CDHash=78b01963732b743659b501c5beedc96a725f1156
+Signature size=8968
+Authority=Developer ID Application: zhong luo (B3W25FX5H5)
+Authority=Developer ID Certification Authority
+Authority=Apple Root CA
+Timestamp=Oct 22, 2026 at 00:20:39
+Notarization Ticket=stapled
+Info.plist entries=22
+TeamIdentifier=B3W25FX5H5
+Runtime Version=27.0.0
+Sealed Resources version=2 rules=13 files=4
+Internal requirements count=1 size=180
+Total signatures=1
+Chosen signature=1

docs/verification/v1.1.2/installed-verification.json

@@ -0,0 +1,93 @@
+{
+  "version": "1.1.2",
+  "build": "13",
+  "date": "2026-10-21T16:31:12.717850+00:00",
+  "sourceCommit": "a2e33e8e00a99b95dc29d67a819cb0897eda5756",
+  "installationPath": "/Library/Plug-Ins/FxPlug/beatygril.app",
+  "codesign": {
+    "exitCode": 0,
+    "stdout": "",
+    "stderr": ""
+  },
+  "staple": {
+    "exitCode": 0,
+    "stdout": "Processing: /Library/Plug-Ins/FxPlug/beatygril.app\nThe validate action worked!",
+    "stderr": ""
+  },
+  "gatekeeper": {
+    "exitCode": 0,
+    "stdout": "",
+    "stderr": "/Library/Plug-Ins/FxPlug/beatygril.app: accepted\nsource=Notarized Developer ID"
+  },
+  "identity": [
+    {
+      "path": "/Library/Plug-Ins/FxPlug/beatygril.app",
+      "bundleIdentifier": "com.dayu.beatygril",
+      "version": "1.1.2",
+      "build": "13",
+      "archs": "x86_64 arm64",
+      "signature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=78b01963732b743659b501c5beedc96a725f1156\nCandidateCDHashFull sha256=78b01963732b743659b501c5beedc96a725f11560ebafe992a93195b3bae4dc2\nHash choices=sha256\nCMSDigest=78b01963732b743659b501c5beedc96a725f11560ebafe992a93195b3bae4dc2\nCMSDigestType=2\nCDHash=78b01963732b743659b501c5beedc96a725f1156\nSignature size=8968\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 22, 2026 at 00:20:39\nNotarization Ticket=stapled\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1"
+    },
+    {
+      "path": "/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit",
+      "bundleIdentifier": "com.dayu.beatygril.fxplug",
+      "version": "1.1.2",
+      "build": "13",
+      "archs": "x86_64 arm64",
+      "signature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit/Contents/MacOS/beatygril XPC Service\nIdentifier=com.dayu.beatygril.fxplug\nFormat=bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=869 flags=0x10000(runtime) hashes=20+3 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=79f2d1c3d638b27b2e5edeccf5d9255f6dd484b3\nCandidateCDHashFull sha256=79f2d1c3d638b27b2e5edeccf5d9255f6dd484b39910fe88ebdb2d09bd42bea4\nHash choices=sha256\nCMSDigest=79f2d1c3d638b27b2e5edeccf5d9255f6dd484b39910fe88ebdb2d09bd42bea4\nCMSDigestType=2\nCDHash=79f2d1c3d638b27b2e5edeccf5d9255f6dd484b3\nSignature size=8968\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 22, 2026 at 00:20:38\nInfo.plist entries=26\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=188\nTotal signatures=1\nChosen signature=1"
+    }
+  ],
+  "template": [
+    {
+      "path": "/Users/dayu/Movies/Motion Templates.localized/Effects.localized/大鱼/大鱼人像美化/大鱼人像美化.moef",
+      "bytes": 23073,
+      "sha256": "e9fa97dc14323d0daa7d3d61b06a78ba4000a70ab9f5e67ebffd750d49df1e15"
+    },
+    {
+      "path": "/Users/dayu/Movies/Motion Templates.localized/Effects.localized/大鱼/大鱼人像美化/Drop Zone.tiff",
+      "bytes": 420128,
+      "sha256": "a7f8e3a2a431dbb3ce9e777040bb55e701cfe9ab9632e8cbb10359732bc8692e"
+    }
+  ],
+  "discovery": {
+    "exitCode": 0,
+    "stdout": "com.dayu.beatygril.fxplug(1.1)\t2293B0A5-4D98-4AE9-88F7-7022E3485E14\t2026-10-21 16:21:03 +0000\t/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit\n (1 plug-in)",
+    "stderr": ""
+  },
+  "duplicateInventory": {
+    "scopes": [
+      "/Users/dayu/Documents/PaintFCP",
+      "/Users/dayu/.codex/worktrees",
+      "/Users/dayu/Library/Developer/Xcode/DerivedData",
+      "/Users/dayu/Desktop",
+      "/Users/dayu/Downloads",
+      "/Applications",
+      "/Library/Plug-Ins/FxPlug",
+      "/Users/dayu/Library/Plug-Ins/FxPlug",
+      "/private/tmp/paintfcp-format-probe.PsxvYQ",
+      "/private/tmp/paintfcp-y-review.KpPi8T",
+      "/private/tmp/paintfcp-live-review.ItH4EG",
+      "/private/tmp/paintfcp-slim-field.6fDdJj",
+      "/private/tmp/paintfcp-chin-smoke.rfco16hq",
+      "/private/tmp/paintfcp-rea.b3j9Te",
+      "/private/tmp/paintfcp-slim-smoke.3ncdDe"
+    ],
+    "matchingOuterApps": [
+      {
+        "path": "/Library/Plug-Ins/FxPlug/beatygril.app",
+        "bundleIdentifier": "com.dayu.beatygril",
+        "version": "1.1.2",
+        "build": "13"
+      }
+    ],
+    "errors": [],
+    "spotlight": {
+      "exitCode": 0,
+      "existingProductPaths": [
+        "/Library/Plug-Ins/FxPlug/beatygril.app"
+      ]
+    },
+    "scopeLimit": "Bounded directories and existing indexed product paths; no full-volume completeness claim."
+  },
+  "nativeQAScope": "native-qa.json"
+}

docs/verification/v1.1.2/interim-build11.json

@@ -0,0 +1,44 @@
+{
+  "status": "failed",
+  "bundleIdentifier": "com.dayu.beatygril",
+  "installationPath": "/Library/Plug-Ins/FxPlug/beatygril.app",
+  "options": {
+    "waitForHosts": true,
+    "userTests": false
+  },
+  "nativeEffectQA": {
+    "status": "pending_operator",
+    "performedByScript": false
+  },
+  "source": {
+    "commit": "183bf0e4b2227477c4d38cb201ce2c0279eeb740",
+    "trackedWorktreeChanges": []
+  },
+  "updatedAt": "2026-10-21T16:06:51.497292+00:00",
+  "version": "1.1.2",
+  "build": "11",
+  "stagingSignature": "Executable=/private/tmp/paintfcp-build-20261021/Build/Products/Release/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=8e50a6a2b99f93880d8a5a8b5978d120a227a6b7\nCandidateCDHashFull sha256=8e50a6a2b99f93880d8a5a8b5978d120a227a6b72d1b6480bef338f2c8f1fbd4\nHash choices=sha256\nCMSDigest=8e50a6a2b99f93880d8a5a8b5978d120a227a6b72d1b6480bef338f2c8f1fbd4\nCMSDigestType=2\nCDHash=8e50a6a2b99f93880d8a5a8b5978d120a227a6b7\nSignature size=8969\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 23:57:21\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "notarization": {
+    "message": "Processing complete",
+    "id": "a9b454c3-5d30-47bd-b266-f19447f3db7e",
+    "status": "Accepted"
+  },
+  "signingVerified": true,
+  "stapleValidated": true,
+  "stagingPluginUnregistered": true,
+  "runningHosts": [],
+  "installedSignature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=8e50a6a2b99f93880d8a5a8b5978d120a227a6b7\nCandidateCDHashFull sha256=8e50a6a2b99f93880d8a5a8b5978d120a227a6b72d1b6480bef338f2c8f1fbd4\nHash choices=sha256\nCMSDigest=8e50a6a2b99f93880d8a5a8b5978d120a227a6b72d1b6480bef338f2c8f1fbd4\nCMSDigestType=2\nCDHash=8e50a6a2b99f93880d8a5a8b5978d120a227a6b7\nSignature size=8969\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 21, 2026 at 23:57:21\nNotarization Ticket=stapled\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "installedSignatureVerified": true,
+  "installedStapleValidated": true,
+  "gatekeeperAccepted": true,
+  "pluginDiscovery": {
+    "bundleIdentifier": "com.dayu.beatygril.fxplug",
+    "formalPath": "/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit",
+    "output": "     com.dayu.beatygril.fxplug(1.1)\tEFA7AB61-D5AA-44BB-B096-FF6BF12E7D02\t2026-10-21 15:57:43 +0000\t/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit\n (1 plug-in)\n"
+  },
+  "failure": {
+    "type": "KeyboardInterrupt",
+    "message": ""
+  },
+  "interimReason": "Native testing found number field focus-loss resubmission; combined build11 not accepted as final."
+}

docs/verification/v1.1.2/interim-build12.json

@@ -0,0 +1,44 @@
+{
+  "status": "failed",
+  "bundleIdentifier": "com.dayu.beatygril",
+  "installationPath": "/Library/Plug-Ins/FxPlug/beatygril.app",
+  "options": {
+    "waitForHosts": true,
+    "userTests": false
+  },
+  "nativeEffectQA": {
+    "status": "pending_operator",
+    "performedByScript": false
+  },
+  "source": {
+    "commit": "3f075922cbdd7b80b9609cb0640bc2591ad3240b",
+    "trackedWorktreeChanges": []
+  },
+  "updatedAt": "2026-10-21T16:18:39.997054+00:00",
+  "version": "1.1.2",
+  "build": "12",
+  "stagingSignature": "Executable=/private/tmp/paintfcp-build-20261021/Build/Products/Release/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=c50126c3762c66d9fcdc3890d3393ede57f75958\nCandidateCDHashFull sha256=c50126c3762c66d9fcdc3890d3393ede57f75958be276e1a4a83e1c11ed239b3\nHash choices=sha256\nCMSDigest=c50126c3762c66d9fcdc3890d3393ede57f75958be276e1a4a83e1c11ed239b3\nCMSDigestType=2\nCDHash=c50126c3762c66d9fcdc3890d3393ede57f75958\nSignature size=8969\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 22, 2026 at 00:14:13\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "notarization": {
+    "message": "Processing complete",
+    "status": "Accepted",
+    "id": "dbe3476f-c9d3-419d-9041-5180a37568dd"
+  },
+  "signingVerified": true,
+  "stapleValidated": true,
+  "stagingPluginUnregistered": true,
+  "runningHosts": [],
+  "installedSignature": "Executable=/Library/Plug-Ins/FxPlug/beatygril.app/Contents/MacOS/beatygril\nIdentifier=com.dayu.beatygril\nFormat=app bundle with Mach-O universal (x86_64 arm64)\nCodeDirectory v=20500 size=478 flags=0x10000(runtime) hashes=4+7 location=embedded\nHash type=sha256 size=32\nCandidateCDHash sha256=c50126c3762c66d9fcdc3890d3393ede57f75958\nCandidateCDHashFull sha256=c50126c3762c66d9fcdc3890d3393ede57f75958be276e1a4a83e1c11ed239b3\nHash choices=sha256\nCMSDigest=c50126c3762c66d9fcdc3890d3393ede57f75958be276e1a4a83e1c11ed239b3\nCMSDigestType=2\nCDHash=c50126c3762c66d9fcdc3890d3393ede57f75958\nSignature size=8969\nAuthority=Developer ID Application: zhong luo (B3W25FX5H5)\nAuthority=Developer ID Certification Authority\nAuthority=Apple Root CA\nTimestamp=Oct 22, 2026 at 00:14:13\nNotarization Ticket=stapled\nInfo.plist entries=22\nTeamIdentifier=B3W25FX5H5\nRuntime Version=27.0.0\nSealed Resources version=2 rules=13 files=4\nInternal requirements count=1 size=180\nTotal signatures=1\nChosen signature=1\n",
+  "installedSignatureVerified": true,
+  "installedStapleValidated": true,
+  "gatekeeperAccepted": true,
+  "pluginDiscovery": {
+    "bundleIdentifier": "com.dayu.beatygril.fxplug",
+    "formalPath": "/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit",
+    "output": "     com.dayu.beatygril.fxplug(1.1)\t51B2D2BF-2C90-41AA-BC26-50CFC1F824A9\t2026-10-21 16:14:42 +0000\t/Library/Plug-Ins/FxPlug/beatygril.app/Contents/PlugIns/beatygril XPC Service.pluginkit\n (1 plug-in)\n"
+  },
+  "failure": {
+    "type": "KeyboardInterrupt",
+    "message": ""
+  },
+  "interimReason": "Geometry loads and reset changes slider; remote text editor remains focused and shows stale submitted text. Final dirty-aware refresh/abortEditing refinement pending build13."
+}

docs/verification/v1.1.2/native-qa.json

@@ -0,0 +1,39 @@
+{
+  "version": "1.1.2",
+  "build": "13",
+  "sourceCommit": "a2e33e8e00a99b95dc29d67a819cb0897eda5756",
+  "date": "2026-10-21T16:31:02.046442+00:00",
+  "Motion": {
+    "formalInstalledPluginLoaded": true,
+    "numberInput": true,
+    "singleResetUpdatesSliderAndText": true,
+    "hostUndoUpdatesSliderAndText": true,
+    "switchingEditedControlPreservesUndoneState": true,
+    "saveCloseReopen": {
+      "shortFace": 0.5,
+      "jaw": 0
+    },
+    "earlierSameGeometryBuild11": "Isolated short +1/-1 and jaw +1; same-frame bypass is byte-identical to neutral viewer; profile and tilted-face images inspected. PGFaceProcessor bytes unchanged in final build13."
+  },
+  "FCP": {
+    "formalInstalledPluginLoaded": true,
+    "nativePanelEnabled": true,
+    "numberInput": true,
+    "singleResetUpdatesSliderAndText": true,
+    "shapeIsolation": "Smoothing/color cards bypassed; other eight shape values cleared; short +1 and jaw +1 separately rendered on the same frame.",
+    "viewerRespondedToEachIsolatedControl": true,
+    "qaTimelineOnly": true
+  },
+  "continuousPreview": {
+    "production": "Each changed continuous step finishes its FxPlug host action before mouse-up; repeated equal steps are deduplicated.",
+    "automated": "Three intermediate snapshots published before gesture end; production view/controller exercised under action-scoped mock.",
+    "nativePointerObservation": "Pending user answer: CUA coordinate drag did not reliably exercise the displayed slider; no native mid-drag frame timing claim."
+  },
+  "limits": [
+    "No claim that every mouse event is presented as a separate host frame. Host scheduling and render speed can coalesce rapid updates.",
+    "Remaining five approximate shape algorithms and full combined-chain pixel equivalence remain outside this repair.",
+    "Some legacy Motion QA documents retain serialized standard parameter sections; new registration and current FCP template hide them.",
+    "Native VoiceOver, old independent keyframe-curve migration, and exhaustive multi-face/all-pose testing not performed."
+  ],
+  "privateEvidence": "User video, native screenshots, full AX and pixel-coordinate comparisons remain in ignored build/native-112; not uploaded."
+}

docs/verification/v1.1.2/notarization.json

@@ -0,0 +1 @@
+{"message":"Processing complete","id":"5f5ce378-8430-467b-ae97-048e6bc81573","status":"Accepted"}

docs/verification/v1.1.2/osc-asan.txt

@@ -0,0 +1,21 @@
+2026-10-21 23:54:43.574 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.25,0.75) setter=(0.25,0.75) readback=(0.25,0.75) mode=normalized verified=1
+2026-10-21 23:54:43.583 osc-tests[25289:5759689] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(80,180) surface=320x240 origin=0
+2026-10-21 23:54:44.244 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.8,0.3) setter=(1152,-432) readback=(0.8,0.3) mode=centered-pixels verified=1
+2026-10-21 23:54:44.244 osc-tests[25289:5759689] PGFaceOSC coordinates selection=(0.7,0.4) objectBounds=(-1920,-1080,3840,2160) canvas=(152,78) surface=320x240 origin=0
+2026-10-21 23:54:44.321 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.8,0.3) setter=(0.8,0.3) readback=(0.12345,0.87654) mode=normalized verified=0
+2026-10-21 23:54:44.321 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.75,0.25) setter=(0.75,0.25) readback=(0.75,0.25) mode=normalized verified=1
+2026-10-21 23:54:44.321 osc-tests[25289:5759689] PGFaceOSC coordinates selection=(0.75,0.25) objectBounds=(-100,-50,200,100) canvas=(160,60) surface=320x240 origin=0
+2026-10-21 23:54:44.402 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.625,0.375) setter=(0.625,0.375) readback=(0.625,0.375) mode=normalized verified=1
+2026-10-21 23:54:44.402 osc-tests[25289:5759689] PGFaceOSC coordinates selection=(0.625,0.375) objectBounds=(-100,-50,200,100) canvas=(240,60) surface=320x240 origin=0
+2026-10-21 23:54:44.483 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.25,0.75) setter=(0.25,0.75) readback=(0.25,0.75) mode=normalized verified=1
+2026-10-21 23:54:44.483 osc-tests[25289:5759689] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(144,180) surface=320x240 origin=0
+2026-10-21 23:54:44.561 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 23:54:44.561 osc-tests[25289:5759689] PGFaceOSC coordinates selection=(0,1) objectBounds=(-100,-50,200,100) canvas=(100,140) surface=320x240 origin=0
+2026-10-21 23:54:44.646 osc-tests[25289:5759689] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(nan,nan) surface=320x240 origin=0
+2026-10-21 23:54:44.721 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 23:54:44.721 osc-tests[25289:5759689] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(inf,nan) surface=320x240 origin=0
+2026-10-21 23:54:44.806 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 23:54:44.807 osc-tests[25289:5759689] PGFaceOSC coordinates selection=(0.25,0.75) objectBounds=(-100,-50,200,100) canvas=(80,nan) surface=320x240 origin=0
+2026-10-21 23:54:44.889 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+2026-10-21 23:54:44.889 osc-tests[25289:5759689] PGFaceOSC point-write desired=(0.5,0.5) setter=(0.5,0.5) readback=(0.5,0.5) mode=normalized verified=1
+OSC adapter: 98 checks, 0 failures

docs/verification/v1.1.2/real-frames-asan.txt

@@ -0,0 +1,2 @@
+2026-10-21 23:46:52.888 slim-tests-asan[24731:5744056] FBBA: creating VNFaceBBoxAligner from VNFaceDetectorRevision2: VNFaceDetectorRevision2
+PASS: 886 slim alignment checks; maximum UV oracle error 1.09828022e-05

docs/verification/v1.1.2/recovery-a2e33e8.txt

@@ -0,0 +1,11 @@
+Target: a2e33e8e00a99b95dc29d67a819cb0897eda5756
+Remote: https://dayu.media/git/dayu/paintfcp-fxplug.git
+Passed: True
+Tracked files: 149
+All tracked bytes/blob IDs/modes: True
+Git fsck --strict --full: 0
+LFS/submodules: [] / []
+Inspector tests: {'checks': 157, 'failures': 0, 'ASan': True, 'exitCode': 0, 'log': 'inspector-tests-asan.txt'}
+Template audit: structure_verified_native_loading_pending
+Core 961 tests not repeated; no APP build/host/UI/sign/install.
+Temporary clone removed: True

docs/verification/v1.1.2/recovery-inspector-asan.txt

@@ -0,0 +1 @@
+Inspector: 157 checks, 0 failures

docs/验证记录.md

@@ -61,3 +61,69 @@ Motion：独立普通视频项目，源PTS0、1920×1080/25fps/10秒，媒体通
 额外用用户视频11帧（含4秒及18秒明显侧脸）运行264项瘦脸ASan检查，通过且未发现内存错误；此数包含重复的220项基础数值/数据检查，不与604简单相加。独立恢复从远程abe97ed0cbd5a2b5ffda6ebdb486d3bff9170964克隆，69文件/9资源和模式一致、strict fsck通过，clone内389项Metal/人脸/瘦脸测试通过。签名构建源码就是该节点；后续交付脚本补充了已公证产物校验恢复与重复注销兼容，产品源码未再变化。
 
 正式安装APP仅位于 `/Library/Plug-Ins/FxPlug/beatygril.app`；配套1.0.5模板及占位资源已同步并逐字节核验。临时构建、旧版APP备份、公证ZIP已清理；项目、DerivedData、桌面、下载、Applications及系统/用户FxPlug目录扫描只发现该正式APP，无扫描错误。原生效果验收状态为用户自测待完成。票据、发现、恢复与检测报告见 `docs/verification/v1.0.5/`。
+
+## 1.0.6 下巴与图像轴修复（构建前）
+
+用户反馈“下巴调整作用到眼睛”。纯CI76点物理位置并未全局反置，但FxPlug适配器曾将TOP_LEFT当作物理行序，在输入和输出各多翻转一次；默认直通会抵消，无法验证中间Vision和变形的解剖方向。独立top-first照片构造复现下巴跑向眼部；原版REA输入及两条CI→IOSurface输出路径均没有同样额外翻转，现删除这两处。未捕获本次实际FCP缓冲，原生视觉由用户自测。
+
+下巴另有旧框高斯算法和正负符号错误，现按原版68→38、67→37、66→36三pin、正0.04/负0.02和共同尺寸增益对齐。数学场、真实图物理下巴/瞳孔、正负符号与侧脸热点均已检查；其余七类控制及全部组合顺序未宣称完整恢复。新分析记录写入显式坐标标记；旧未标记记录保留但不再重放，自动回退实时跟随，重新分析可恢复离线记录。
+
+本轮不操作、启动或退出Motion/FCP。完整分析证据见[下巴与坐标分析](analysis/下巴与坐标分析.md)。完整904项通过（美化49、人脸116、瘦脸/下巴394、宿主适配247、OSC98），宿主适配和OSC启用ASan。宿主适配16种默认/大眼/下巴正负×源/目的原点组合彼此逐字节一致，与独立upright文件参考最大差2/255；独立文件解码和IOSurface检测路径存在微小数值差，阈值另限制均差<0.005/255，并检查实际解剖热点。额外用户视频11帧494项ASan通过，含重复基础用例，不与904简单相加。用户帧和完整点位未上传远程。当前正式APP仍为1.0.5，不能将构建前验证描述为1.0.6已安装。
+
+1.0.6（8）通用Release的签名构建源码为`ad54726b17fabd11f46bc6121e664eac38960a23`，构建开始时工作区干净。Developer ID逐层签名/严格验证、Apple公证Accepted（ab0271c8-0c4b-4b10-9474-cebe9b55385b）、票据粘附/验证均已通过。检测到Motion仍运行，当前在产品交付锁内只读等待用户保存退出，尚未替换正式1.0.5。
+
+签名源码已从大鱼远程独立克隆恢复：87个受跟踪文件的字节、blob和模式全部一致，14项资源完整，strict/full fsck通过，无LFS/子模块；clone内559项核心测试通过，未构建APP或操作宿主，临时克隆已清理。报告在`verification/v1.0.6/recovery-ad54726.json`。
+
+## 1.0.6 正式安装完成
+
+用户确认保存并退出Motion/FCP后，安装流程完成1.0.6（8）替换，正式APP为`/Library/Plug-Ins/FxPlug/beatygril.app`。安装版APP与嵌套插件均为x86_64/arm64，Developer ID团队B3W25FX5H5、可信时间戳和Hardened Runtime正确；codesign严格验证、票据验证、Gatekeeper与PluginKit正式路径发现通过。全过程没有操作、启动或退出宿主界面，原生视觉仍由用户自测。
+
+配套1.0.6效果模板及Drop Zone.tiff已在宿主退出时同步并逐字节核验；moef SHA-256为`30ca8edf36801264c5de2c753c40b720aba8052633620713a12401098fcd2409`。模板仍保留固定UUID及原有参数发布。旧未标记的跟踪数据会回退实时跟随；需要离线重放时请重新分析目标。
+
+临时Release APP、旧APP备份和公证ZIP已清理。项目、Codex工作树、DerivedData、桌面、下载、Applications、系统/用户FxPlug目录及本次paintfcp临时目录扫描仅发现正式路径外层APP，扫描错误0；没有将这项有界扫描表述为所有卷的完整搜索。完整回执、签名、发现、模板摘要和扫描范围在`verification/v1.0.6/`。最终发布标签为`v1.0.6`，产品源码与签名构建节点ad54726一致；其后的提交仅更新交付文档、模板说明和验证回执。
+
+## 1.1.0 原生卡片面板（构建前）
+
+按参考界面的深色圆角卡片、青/绿/蓝紫分组、自绘滑块与开关、肤色圆点和单项重置实现独立AppKit面板，使用大鱼自己的品牌文字。新增自定义参数210及NSSecureCoding状态对象；FCP发布由48入口缩为面板+版权两项共3入口，旧49项参数和组路径保留隐藏兼容，手动分析命令隐藏且禁用。实时渲染不再载入任何保存的手动分析点阵，也不带旧分析大数据进入render snapshot。
+
+完整1039项通过（美化49、人脸116、瘦脸/下巴394、宿主适配248、OSC98、检查器134），后三类适配/检查器使用ASan。检查器覆盖单项路由、完整安全归档、Motion自定义包内实际inner/outer的Foundation解码、初始不覆盖旧文档、数值插值、启停保值、重置、失效写入、事务配对、快速撤销/切时间后新编辑、显式数值输入与窄宽度布局。独立审查另用mock验证27项视图交互；280/320/380/520点宽度及更多展开不越界。测试修复了分组关闭后框仍显示、旧细节禁用状态丢失、快速撤销/换帧旧值回灌和旧显示缓存拦截明确输入等问题。
+
+参考原版仅用于静态结构和外观分析，自有归档不含原版类/私有数据/品牌图。面板PNG为离屏演示参数预览，不是FCP原生截图。尚未操作Motion/FCP界面，真实宿主嵌入滚动、键盘/VoiceOver及工程重开由用户自测。源码与回执会按正式交付节点保存。
+
+1.1.0（9）的签名构建源码为`f79d24eb0185f31feaae58b83b632f92dcb3ca91`，干净工作区构建。通用Release的Developer ID签名、严格验证、Apple公证Accepted（ce26be63-9dcd-436a-bcb5-bd294fcc92a9）和票据验证已通过。安装前曾检测到Motion/FCP仍运行，交付流程持锁等待用户自行保存退出；退出后完成下述替换。没有操作宿主界面。
+
+独立远程克隆恢复已核对111个文件的字节、blob和模式、16项必要资源、strict/full fsck，无LFS/子模块；clone内134项Inspector ASan及模板审计通过，临时克隆已清理，详见`verification/v1.1.0/recovery-f79d24e.json`。
+
+## 1.1.0 正式安装完成
+
+检测时Motion/FCP已退出，交付流程完成1.1.0（9）替换。实际安装版及嵌套插件均为arm64/x86_64，签名团队B3W25FX5H5、可信时间戳、Hardened Runtime和固定Bundle ID正确；严格签名、Apple公证Accepted、粘附票据、Gatekeeper及PluginKit唯一正式路径通过。没有发送强退信号或操作宿主界面。
+
+配套卡片版模板和Drop Zone.tiff已在宿主关闭时同步并逐字节核对，moef SHA256为`e1c0cff1dd3541ed97cab2cb39a76ad4f28dc659b3be7991cc7ac92dd8ea090b`。FCP发布入口为面板210及两项版权信息；旧参数定义隐藏保留，手动分析不再显示，输出保持实时自动跟随。自定义面板的真实嵌入、滚动、键盘/VoiceOver、保存重开及视觉均待用户自测。
+
+临时APP、旧APP备份、公证ZIP已清理。项目、Codex工作树、DerivedData、桌面、下载、Applications、系统/用户FxPlug及paintfcp临时目录的有界扫描仅发现正式外层APP，扫描错误0；不将该范围扩张为全部挂载卷搜索。完整回执和扫描范围见`verification/v1.1.0/installed-verification.json`。最终恢复标签`v1.1.0`包含交付文档，签名产品源码保持f79d24eb0185f31feaae58b83b632f92dcb3ca91。
+
+## 1.1.1 面板交互修复（原生验收进行中）
+
+用户报告1.1.0界面无法交互并授权接手Motion/FCP测试。FCP中“大鱼人像美化验收-20261021”独立测试时间线复现：所有PG参数控件被禁用，页脚“等待宿主连接”；“更多设置”可展开，说明视图事件仍正常，故不是整张面板无法命中。失败AX与截图保留本机build/native-111，不上传用户测试画面或资源库内容。
+
+连接代码原先在开启自定义参数action之前就要求读写API存在，且action sender传NSObject控制器；现先用真实NSView sender开启action，再在其上下文里取得API，缺API时配对结束。新增action-scoped模拟宿主及sender校验用例：修改前141项中5项失败，修改后全通过，包含临时接口失败后重新连接。接口前后布尔日志保留为原生诊断，根因的实际宿主确认仍待新版加载。
+
+1.1.1（10）完整1046项回归通过（49美化、116人脸、394瘦脸/下巴、248宿主、98 OSC、141检查器），后三套启用ASan。正式编译、公证与原生Motion/FCP交互验收进行中，尚未把自动检查等同于原生通过。
+
+1.1.1中间正式安装版在FCP原生确认API门控修复：read/writeBefore均0，action内均1，控件启用，重置和37%数值提交有效。原生日志与结论见`analysis/面板交互连接修复.md`。当前继续处理用户新报的短脸/下颌骨位置偏差，不将中间版标记为最终原生验收通过；临时APP、旧APP备份和公证ZIP已清理，保留唯一正式1.1.1等待合并修复。
+
+## 1.1.2 短脸与下颌骨修复（构建前）
+
+替换短脸和下颌骨的旧脸框近似，恢复目标76点的11边下半脸区域与六组局部采样，沿用单次图像重采样和图像/四张蒙版共用坐标场。四项已恢复控制缺完整76点时安全直通，其余五项和全链组合仍有近似边界。分析报告、CPU证据和AIR摘要见analysis/短脸与下颌骨分析.md。
+
+1551项全部通过：49美化、116人脸、796瘦脸/下巴/短脸/下颌骨、335宿主适配ASan、98 OSC ASan、157检查器ASan。宿主独立物理行序用例扩展到短脸正负与下颌骨，28种控制/原点组合响应在预期下半脸，瞳孔区差异为0，坐标标签切换逐字节一致；独立upright参考最大差2/255，均差<0.005/255。额外真实正面/侧脸ASan专项886项通过，含重复基础用例，不相加。已核对生产源码与冻结摘要一致。合并版尚待正式构建和原生验收。
+
+## 1.1.2（13）正式安装与原生验收
+
+最终签名源码`a2e33e8e00a99b95dc29d67a819cb0897eda5756`。通用Release编译、Developer ID逐层签名、Apple公证Accepted（5f5ce378-8430-467b-ae97-048e6bc81573）、票据粘附/验证、安装身份、Gatekeeper及PluginKit正式路径通过。唯一正式APP、模板/TIFF和本次临时副本清理的范围与结果见verification/v1.1.2/installed-verification.json；扫描错误0，未扩张为全部挂载卷搜索。
+
+构建前模块回归1551项通过：49美化、116人脸、796几何、335宿主适配ASan、98 OSC ASan、157 Inspector ASan。几何/宿主适配在对应未变化源码上验证，最后两轮只重复与界面修复有关的Inspector；额外真实帧886项包含重复基础用例，不相加。独立从远程恢复最终产品源码149文件和16资源，fsck及157项Inspector ASan通过，克隆已清理。
+
+实际操作均在独立测试文档/时间线内：Motion最终版数值输入、重置同时更新slider/text、宿主撤销、切换输入不复活旧值、保存关闭重开（短脸0.5/下颌骨0）通过。相同几何源码在build11中已做单独短脸正负、下颌骨、停用同帧对照及侧脸/歪头图像检查；final build13继续沿用相同几何字节。FCP最终版原生面板启用、数值输入、单击重置同步显示、清零其他脸型后分别短脸1/下颌骨1的同帧画面响应通过。截图、完整AX和物理坐标差只留本机，不上传用户影像。
+
+连续预览：生产NSSlider continuous保持开启，view不再把整个拖动包在同一次controller action里；每个有效步进独立结束宿主参数上下文。模拟宿主中三个中间状态在mouse-up前完成发布（旧实现3失败，修复后通过）。CUA坐标拖动未能可靠操纵显示中的滑杆，未记录到可信的原生按住期间排帧证据，已请求用户直接观察；此项保留待反馈，不写作原生连续预览通过。快速更新可能被宿主合并，各项其余五类近似算法和全部组合不宣称原版逐像素一致。详细范围在verification/v1.1.2/native-qa.json。

scripts/inspector-template.py

@@ -0,0 +1,219 @@
+#!/usr/bin/env python3
+"""Encode/audit our own FxPlug custom value in observed Motion XML structure.
+
+No host is started. A successful audit verifies structure and archive contents;
+it does not establish Motion/FCP custom-view loading or native interaction.
+"""
+from __future__ import annotations
+
+import argparse
+import base64
+import hashlib
+import json
+import math
+from pathlib import Path
+import plistlib
+import re
+import string
+import struct
+import sys
+import xml.etree.ElementTree as ET
+
+ALPHABET = "*-0123456789" + string.ascii_uppercase + string.ascii_lowercase
+STANDARD = string.ascii_uppercase + string.ascii_lowercase + string.digits + "+/"
+PLUGIN_UUID = "FB14B0E6-59B2-4836-916F-CD0C559E9241"
+PLACEHOLDER_SHA256 = "a7f8e3a2a431dbb3ce9e777040bb55e701cfe9ab9632e8cbb10359732bc8692e"
+
+
+def require(condition: bool, message: str) -> None:
+    if not condition:
+        raise ValueError(message)
+
+
+def digest(data: bytes) -> str:
+    return hashlib.sha256(data).hexdigest()
+
+
+def resolve(objects: list, value, seen: frozenset[int] = frozenset()):
+    """Read Foundation collection values without instantiating archived classes."""
+    if isinstance(value, plistlib.UID):
+        index = value.data
+        require(0 <= index < len(objects) and index not in seen, "Invalid/cyclic archive UID")
+        return resolve(objects, objects[index], seen | {index})
+    if isinstance(value, list):
+        return [resolve(objects, item, seen) for item in value]
+    if isinstance(value, dict):
+        if "NS.keys" in value:
+            keys, items = value["NS.keys"], value["NS.objects"]
+            require(len(keys) == len(items), "Mismatched dictionary keys/objects")
+            return {resolve(objects, k, seen): resolve(objects, v, seen) for k, v in zip(keys, items)}
+        if "NS.objects" in value:
+            return resolve(objects, value["NS.objects"], seen)
+        return {k: resolve(objects, v, seen) for k, v in value.items() if k != "$class"}
+    return value
+
+
+def inspect_inner(inner: bytes) -> dict:
+    archive = plistlib.loads(inner)
+    require(archive.get("$archiver") == "NSKeyedArchiver", "Inner value is not a keyed archive")
+    require(set(archive.get("$top", {})) == {"Custom Data"}, "Inner archive requires the Custom Data key")
+    objects = archive["$objects"]
+    state = objects[archive["$top"]["Custom Data"].data]
+    require(objects[state["$class"].data]["$classname"] == "PGInspectorState", "Unexpected custom class")
+    classes = sorted({x["$classname"] for x in objects if isinstance(x, dict) and "$classname" in x})
+    require(set(classes) <= {"PGInspectorState", "NSObject", "NSDictionary", "NSMutableDictionary", "NSSet", "NSMutableSet", "NSNumber"}, "Unexpected archived class")
+    decoded = resolve(objects, state)
+    require(decoded.get("schema") == 1 and isinstance(decoded.get("edited"), bool), "Unexpected state schema")
+    values = decoded.get("values")
+    require(isinstance(values, dict) and values, "Missing numeric control values")
+    require(all(isinstance(k, int) and not isinstance(k, bool) and isinstance(v, (int, float)) and math.isfinite(v) for k, v in values.items()), "Non-numeric control values")
+    disabled = decoded.get("disabled")
+    require(isinstance(disabled, list) and all(isinstance(v, int) for v in disabled), "Invalid disabled controls")
+    return {"class": "PGInspectorState", "schema": decoded["schema"], "hasEdits": decoded["edited"],
+            "values": values, "disabled": disabled, "classes": classes,
+            "innerBytes": len(inner), "innerSHA256": digest(inner)}
+
+
+def wrap_inner(inner: bytes) -> bytes:
+    inspect_inner(inner)
+    # This is the observed NSKeyedArchiver wrapper, containing NSData and
+    # NSNumber(false), rather than a vendor custom object or copied blob.
+    return plistlib.dumps({"$version": 100000, "$archiver": "NSKeyedArchiver",
+                           "$top": {"DataIsLegacy": plistlib.UID(2), "BlindDataObject": plistlib.UID(1)},
+                           "$objects": ["$null", inner, False]}, fmt=plistlib.FMT_BINARY, sort_keys=False)
+
+
+def encode_outer(outer: bytes) -> str:
+    data = struct.pack(">Q", len(outer)) + b"*" + outer
+    data += b"\0" * (-len(data) % 3)
+    return base64.b64encode(data).decode("ascii").translate(str.maketrans(STANDARD, ALPHABET))
+
+
+def decode_text(text: str) -> tuple[bytes, bytes, dict]:
+    require(text and len(text) % 4 == 0 and set(text) <= set(ALPHABET), "Invalid Motion text encoding")
+    data = base64.b64decode(text.translate(str.maketrans(ALPHABET, STANDARD)), validate=True)
+    require(len(data) >= 9 and data[8] == 0x2A, "Unexpected Motion envelope")
+    length = int.from_bytes(data[:8], "big")
+    require(0 < length <= 16 * 1024 * 1024 and 0 <= len(data) - 9 - length <= 2, "Invalid payload length")
+    require(not any(data[9+length:]), "Nonzero envelope padding")
+    outer = data[9:9+length]
+    archive = plistlib.loads(outer)
+    require(archive.get("$archiver") == "NSKeyedArchiver", "Unexpected outer archive")
+    require(set(archive.get("$top", {})) == {"DataIsLegacy", "BlindDataObject"}, "Unexpected outer keys")
+    objects = archive["$objects"]
+    legacy = resolve(objects, archive["$top"]["DataIsLegacy"])
+    inner = resolve(objects, archive["$top"]["BlindDataObject"])
+    require(legacy is False and isinstance(inner, bytes), "Expected a nonlegacy NSData custom value")
+    require(encode_outer(outer) == text, "Text roundtrip mismatch")
+    state = inspect_inner(inner)
+    state.update({"outerBytes": len(outer), "outerSHA256": digest(outer), "encodedCharacters": len(text), "exactTextRoundtrip": True})
+    return outer, inner, state
+
+
+def find_plugin(root: ET.Element) -> ET.Element:
+    matches = [x for x in root.iter("filter") if x.get("pluginUUID") == PLUGIN_UUID]
+    require(len(matches) == 1, "Expected exactly one product filter")
+    return matches[0]
+
+
+def parameter(node: ET.Element, channel: str) -> ET.Element:
+    require(channel.startswith("./"), "Expected a relative parameter path")
+    for identifier in channel[2:].split("/"):
+        node = node.find(f"parameter[@id='{identifier}']")
+        require(node is not None, f"Unresolved parameter path {channel}")
+    return node
+
+
+def audit(path: Path, parameters_path: Path | None = None) -> tuple[dict, bytes, bytes]:
+    root = ET.parse(path).getroot()
+    plugin = find_plugin(root)
+    custom = parameter(plugin, "./210")
+    require(custom.get("name") == "" and custom.get("flags") == "12901679104", "Custom entry differs from observed native structure")
+    require(custom.findtext("numberOfKeypoints") == "1" and custom.findtext("keypoint/time") == "0 0 0 0" and custom.find("keypoint/value") is not None, "Missing native custom keypoint skeleton")
+    text = custom.findtext("dataValue")
+    require(text == custom.findtext("defaultVal"), "Initial current/default custom values differ")
+    outer, inner, state = decode_text(text)
+    require(state["hasEdits"] is False, "Initial custom value must preserve legacy native settings")
+    entities = [x for x in root.iter() if x.tag in {"scenenode", "layer", "group", "filter", "clip", "footage"}]
+    ids = [x.get("id") for x in entities]
+    require(None not in ids and len(ids) == len(set(ids)), "Duplicate/missing entity identity")
+    by_id = dict(zip(ids, entities))
+    targets = root.findall("./scene/publishSettings/target")
+    require(len(targets) == 3, "Expected exactly three publications")
+    require([x.get("name") for x in targets] == ["FCP 版本作者→", "更多模板浏览器访问→", ""], "Unexpected publication order/names")
+    require(targets[2].get("object") == plugin.get("id") and targets[2].get("channel") == "./210", "Custom publication does not target this filter")
+    for item in targets:
+        require(item.get("object") in by_id, "Unresolved publication object")
+        parameter(by_id[item.get("object")], item.get("channel"))
+    for target, title in zip(targets[:2], ["大鱼先森Media", "dayu.media"]):
+        entry = parameter(by_id[target.get("object")], "./2/100")
+        require(len(entry.findall("entry")) == 1 and title in ET.tostring(entry, encoding="unicode"), "Copyright menu differs")
+    require(parameter(plugin, "./100/12").get("value") == "0.5", "Template midtone default was lost")
+    require(parameter(plugin, "./10005").get("value") == "0", "New template OSC must be off")
+    for group in range(100, 106):
+        parameter(plugin, f"./{group}")
+    for identifier in (45, 46, 50, 51, 52, 53):
+        parameter(plugin, f"./104/{identifier}")
+    for identifier in (60, 61, 62):
+        parameter(plugin, f"./{identifier}")
+    metadata = parameters_path or path.with_name("PARAMETERS.json")
+    listed = json.loads(metadata.read_text())
+    for item in listed["parameters"]:
+        parameter(plugin, item["channel"])
+        require(bool(item["published"]) == (item["id"] == 210), "Legacy flat entry is still published")
+    clips = root.findall(".//footage/clip")
+    require(len(clips) == 1 and clips[0].findtext("pathURL") == "Drop Zone.tiff", "Unexpected effect source media")
+    require(clips[0].get("id") == "510000006" and by_id["510000007"].find("clip") is clips[0], "Broken source clip/footage hierarchy")
+    source = by_id["510000004"]
+    require(parameter(source, "./1/324/300").get("value") == "510000006", "Broken Source Media reference")
+    require(parameter(source, "./2/321").get("value") == "3", "Effect Source type changed")
+    require(parameter(source, "./2/311").get("value") == "1", "Effect Source Drop Zone changed")
+    media = path.parent / "Drop Zone.tiff"
+    require(media.is_file() and digest(media.read_bytes()) == PLACEHOLDER_SHA256, "Placeholder missing/changed")
+    result = {"status": "structure_verified_native_loading_pending", "templateSHA256": digest(path.read_bytes()),
+              "pluginVersion": plugin.get("pluginVersion"), "publications": [dict(x.attrib) for x in targets],
+              "parameterPathsResolved": len(listed["parameters"]), "sourceMediaClosed": True,
+              "mediaSHA256": PLACEHOLDER_SHA256, "customState": state,
+              "nativeLoading": "pending user; no host executed"}
+    return result, outer, inner
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description=__doc__)
+    sub = parser.add_subparsers(dest="command", required=True)
+    enc = sub.add_parser("encode", help="Wrap our own secure Custom Data archive and encode Motion text")
+    enc.add_argument("--inner", type=Path, required=True)
+    enc.add_argument("--text-output", type=Path, required=True)
+    enc.add_argument("--outer-output", type=Path)
+    chk = sub.add_parser("audit", help="Read-only template/archive/reference checks; native loading stays pending")
+    chk.add_argument("template", type=Path)
+    chk.add_argument("--parameters", type=Path)
+    chk.add_argument("--json-output", type=Path)
+    chk.add_argument("--inner-output", type=Path)
+    chk.add_argument("--outer-output", type=Path)
+    args = parser.parse_args()
+    if args.command == "encode":
+        inner = args.inner.read_bytes(); outer = wrap_inner(inner); text = encode_outer(outer)
+        decoded_outer, decoded_inner, result = decode_text(text)
+        require(decoded_inner == inner and decoded_outer == outer, "Own archive roundtrip failed")
+        args.text_output.write_text(text + "\n")
+        if args.outer_output:
+            args.outer_output.write_bytes(outer)
+    else:
+        result, outer, inner = audit(args.template, args.parameters)
+        if args.json_output:
+            args.json_output.write_text(json.dumps(result, ensure_ascii=False, indent=2) + "\n")
+        if args.inner_output:
+            args.inner_output.write_bytes(inner)
+        if args.outer_output:
+            args.outer_output.write_bytes(outer)
+    print(json.dumps(result, ensure_ascii=False, indent=2))
+    return 0
+
+
+if __name__ == "__main__":
+    try:
+        sys.exit(main())
+    except (ValueError, KeyError, IndexError, TypeError, OSError, ET.ParseError, plistlib.InvalidFileException) as error:
+        print(f"FAIL: {error}", file=sys.stderr)
+        sys.exit(1)

scripts/test-host.sh

@@ -15,8 +15,9 @@ xcrun clang "${compiler_extra[@]}" -fobjc-arc -fmodules -Wall -Wextra -Wno-unuse
   -I "$plugin_dir" -F "$sdk_frameworks" -F "$runtime_frameworks" \
   -Wl,-rpath,"$runtime_frameworks" \
   "$plugin_dir/PGBeautyRenderer.m" "$plugin_dir/PGFaceProcessor.m" \
+  "$plugin_dir/PGInspectorState.m" "$plugin_dir/PGInspectorView.m" \
   "$plugin_dir/beatygrilPlugIn.m" tests/host_adapter_tests.m \
-  -framework Foundation -framework CoreImage -framework CoreGraphics \
+  -framework Foundation -framework AppKit -framework CoreImage -framework CoreGraphics \
   -framework CoreMedia -framework CoreVideo -framework IOSurface -framework Metal \
   -framework Vision -framework ImageIO -framework FxPlug -framework PluginManager \
   -o "$output_dir/host-tests"

scripts/test-inspector.sh

@@ -0,0 +1,24 @@
+#!/bin/zsh
+set -euo pipefail
+cd "${0:A:h:h}"
+output_dir=$(mktemp -d /tmp/paintfcp-inspector-tests.XXXXXX)
+trap 'rm -rf "$output_dir"' EXIT
+plugin_dir="$PWD/beatygril/beatygril/Plugin"
+compiler_extra=()
+if [[ "${PAINTFCP_INSPECTOR_ASAN:-0}" == 1 ]]; then
+  compiler_extra=(-fsanitize=address -g)
+fi
+python3 scripts/inspector-template.py audit 'Templates/大鱼人像美化/大鱼人像美化.moef' \
+  --inner-output "$output_dir/template-inner.bplist" --outer-output "$output_dir/template-outer.bplist" > /dev/null
+xcrun clang "${compiler_extra[@]}" -fobjc-arc -fmodules -Wall -Wextra -Wno-unused-parameter \
+  -DCI_SILENCE_GL_DEPRECATION -mmacosx-version-min=13.0 -I "$plugin_dir" \
+  -F /Library/Developer/SDKs/FxPlug.sdk/Library/Frameworks -F /Library/Developer/Frameworks \
+  -Wl,-rpath,/Library/Developer/Frameworks \
+  "$plugin_dir/PGBeautyRenderer.m" "$plugin_dir/PGFaceProcessor.m" \
+  "$plugin_dir/PGInspectorState.m" "$plugin_dir/PGInspectorView.m" \
+  "$plugin_dir/beatygrilPlugIn.m" tests/inspector_tests.m \
+  -framework Foundation -framework AppKit -framework CoreImage -framework CoreGraphics \
+  -framework CoreMedia -framework CoreVideo -framework IOSurface -framework Metal \
+  -framework Vision -framework ImageIO -framework FxPlug -framework PluginManager \
+  -o "$output_dir/inspector-tests"
+"$output_dir/inspector-tests" "$output_dir/template-inner.bplist" "$output_dir/template-outer.bplist"

tests/face_tests.m

@@ -323,13 +323,14 @@ int main(int argc, const char *argv[]) {
             *controls[i] = 1;
             PGFaceFrame *warped = [processor processImage:image settings:changed time:kCMTimeZero error:&error];
             BOOL changedPixels=![Pixels(context, warped.image) isEqualToData:base];
-            Check(warped != nil && (i==0 ? !changedPixels : changedPixels), i==0 ? @"thin safely skips a face with no indexed landmarks" : [@"geometry control changes pixels: " stringByAppendingString:names[i]]);
+            BOOL requiresPoints=(i==0 || i==2 || i==4 || i==6);
+            Check(warped != nil && (requiresPoints ? !changedPixels : changedPixels), requiresPoints ? @"recovered thin/chin/short/jaw skip a face with no indexed landmarks" : [@"geometry control changes pixels: " stringByAppendingString:names[i]]);
             Check(CGRectEqualToRect(warped.image.extent, image.extent), @"warp preserves image extent");
         }
         settings.faceShort = 0.8;
         NSData *positive = Pixels(context, [processor processImage:image settings:settings time:kCMTimeZero error:&error].image);
         settings.faceShort = -0.8;
-        Check(![positive isEqualToData:Pixels(context, [processor processImage:image settings:settings time:kCMTimeZero error:&error].image)], @"signed short-face control has distinct directions");
+        Check([positive isEqualToData:base] && [positive isEqualToData:Pixels(context, [processor processImage:image settings:settings time:kCMTimeZero error:&error].image)], @"both signed short-face values safely skip missing76; direction is tested with full geometry");
         settings = PGBeautyDefaults(); settings.showFaceBoxes = 1;
         frame = [processor processImage:image settings:settings time:kCMTimeZero error:&error];
         Check(Channel(context, frame.overlayImage, 26, 64, 3) > 0, @"face outlines provide separate final-composite overlay");

tests/host_adapter_tests.m

@@ -7,6 +7,10 @@
 #import <ImageIO/ImageIO.h>
 #import "beatygrilPlugIn.h"
 #import "PGParameterIDs.h"
+#import "PGFaceProcessor.h"
+#import "PGBeautyRenderer.h"
+#import "PGInspectorState.h"
+#include <math.h>
 
 // This adapter simulates host callbacks, but uses real IOSurface buffers and the
 // production FxPlug entry points. It does not simulate FCP plugin discovery/UI.
@@ -25,6 +29,9 @@
 @property BOOL rejectAnalysis;
 @property BOOL targetAtCurrentTime;
 @property UInt32 rejectedWriteParameter;
+@property NSUInteger actionDepth;
+@property NSUInteger actionStarts;
+@property NSUInteger actionEnds;
 @end
 
 @implementation PGHostAPI
@@ -70,6 +77,9 @@
 - (BOOL)addStringParameterWithName:(NSString *)name parameterID:(UInt32)identifier defaultValue:(NSString *)value parameterFlags:(FxParameterFlags)flags {
     return [self define:identifier kind:@"string" value:value flags:flags extra:@{@"name":name}];
 }
+- (BOOL)addCustomParameterWithName:(NSString *)name parameterID:(UInt32)identifier defaultValue:(NSObject<NSSecureCoding,NSCopying> *)value parameterFlags:(FxParameterFlags)flags {
+    return [self define:identifier kind:@"custom" value:[value copy] flags:flags extra:@{@"name":name}];
+}
 - (BOOL)startParameterSubGroup:(NSString *)name parameterID:(UInt32)identifier parameterFlags:(FxParameterFlags)flags {
     _depth++;
     return [self define:identifier kind:@"group" value:nil flags:flags extra:@{@"name":name}];
@@ -101,6 +111,17 @@
     _values[@(identifier)] = value; return YES;
 }
 - (BOOL)setBoolValue:(BOOL)value toParameter:(UInt32)identifier atTime:(CMTime)time { _lastSetBoolTime = time; _values[@(identifier)] = @(value); return YES; }
+- (BOOL)getCustomParameterValue:(NSObject **)value fromParameter:(UInt32)identifier atTime:(CMTime)time {
+    NSObject *object=_values[@(identifier)];if(![object isKindOfClass:PGInspectorState.class])return NO;
+    *value=[(PGInspectorState *)object copy];return YES;
+}
+- (BOOL)setCustomParameterValue:(NSObject<NSSecureCoding,NSCopying> *)value toParameter:(UInt32)identifier atTime:(CMTime)time {
+    if(identifier==_rejectedWriteParameter)return NO;_values[@(identifier)]=[value copy];return YES;
+}
+- (BOOL)setFloatValue:(double)value toParameter:(UInt32)identifier atTime:(CMTime)time {_values[@(identifier)]=@(value);return YES;}
+- (BOOL)setIntValue:(int)value toParameter:(UInt32)identifier atTime:(CMTime)time {_values[@(identifier)]=@(value);return YES;}
+- (void)startAction:(id)sender {_actionStarts++;_actionDepth++;}
+- (void)endAction:(id)sender {_actionEnds++;if(_actionDepth)_actionDepth--;}
 - (CMTime)currentTime { return _hostTime; }
 - (BOOL)startForwardAnalysis:(FxAnalysisLocation)location error:(NSError **)error {
     _forwardRequests++; return !_rejectAnalysis;
@@ -173,6 +194,12 @@ static NSUInteger MaximumDifference(NSData *a, NSData *b) {
     for (NSUInteger i = 0; i < a.length; i++) maximum = MAX(maximum, (NSUInteger)abs(x[i] - y[i]));
     return maximum;
 }
+static double MeanDifference(NSData *a, NSData *b) {
+    if (!a.length || a.length != b.length) return INFINITY;
+    const uint8_t *x = a.bytes, *y = b.bytes; double total = 0;
+    for (NSUInteger i = 0; i < a.length; i++) total += abs(x[i]-y[i]);
+    return total/a.length;
+}
 static NSData *ExpectedCrop(PGHostTile *source, NSUInteger x, NSUInteger y, NSUInteger width, NSUInteger height, BOOL flip) {
     NSData *sourceBytes = SurfaceBytes(source); size_t sourceWidth = IOSurfaceGetWidth((__bridge IOSurfaceRef)source.storage);
     NSMutableData *result = [NSMutableData dataWithLength:width * height * 4];
@@ -200,6 +227,216 @@ static void RejectState(beatygrilPlugIn *plugin, PGHostTile *destination, PGHost
     Check(!rendered && !escaped && error != nil, description);
 }
 static NSData *PlistState(id value) { return [NSPropertyListSerialization dataWithPropertyList:value format:NSPropertyListBinaryFormat_v1_0 options:0 error:nil]; }
+// Decode independently of CI/IOSurface, so a pair of adapter flips cannot
+// silently cancel in our test input and expected output. ImageIO + Quartz gives
+// the NASA fixture top-first BGRA bytes, also cross-checked against Pillow.
+static NSData *DecodedPortrait(NSString *path, size_t *width, size_t *height) {
+    CGImageSourceRef source = CGImageSourceCreateWithURL((__bridge CFURLRef)[NSURL fileURLWithPath:path], NULL);
+    CGImageRef image = source ? CGImageSourceCreateImageAtIndex(source, 0, NULL) : NULL;
+    if (source) CFRelease(source);
+    if (!image) return nil;
+    *width = CGImageGetWidth(image); *height = CGImageGetHeight(image);
+    NSMutableData *bytes = [NSMutableData dataWithLength:*width * *height * 4];
+    CGColorSpaceRef space = CGColorSpaceCreateWithName(kCGColorSpaceSRGB);
+    CGContextRef context = CGBitmapContextCreate(bytes.mutableBytes, *width, *height, 8, *width * 4, space,
+        kCGBitmapByteOrder32Little | kCGImageAlphaPremultipliedFirst);
+    if (context) {
+        CGContextSetBlendMode(context, kCGBlendModeCopy);
+        CGContextSetInterpolationQuality(context, kCGInterpolationNone);
+        CGContextDrawImage(context, CGRectMake(0, 0, *width, *height), image);
+        CGContextRelease(context);
+    }
+    CGColorSpaceRelease(space); CGImageRelease(image);
+    return context ? bytes : nil;
+}
+static BOOL StoreSurfaceBytes(PGHostTile *tile, NSData *bytes) {
+    IOSurfaceRef surface = (__bridge IOSurfaceRef)tile.storage;
+    size_t width = IOSurfaceGetWidth(surface), height = IOSurfaceGetHeight(surface);
+    if (bytes.length != width * height * 4) return NO;
+    IOSurfaceLock(surface, 0, NULL);
+    for (size_t row = 0; row < height; row++)
+        memcpy((uint8_t *)IOSurfaceGetBaseAddress(surface) + row * IOSurfaceGetBytesPerRow(surface),
+               (const uint8_t *)bytes.bytes + row * width * 4, width * 4);
+    IOSurfaceUnlock(surface, 0, NULL);
+    return YES;
+}
+static CIContext *NumericContext(void) {
+    return [CIContext contextWithMTLDevice:MTLCreateSystemDefaultDevice() options:@{
+        kCIContextWorkingColorSpace:NSNull.null, kCIContextOutputColorSpace:NSNull.null}];
+}
+static NSData *ImageBytes(CIContext *context, CIImage *image) {
+    if (!image) return nil;
+    size_t width = (size_t)image.extent.size.width, height = (size_t)image.extent.size.height;
+    NSMutableData *bytes = [NSMutableData dataWithLength:width * height * 4];
+    [context render:image toBitmap:bytes.mutableBytes rowBytes:width * 4 bounds:image.extent format:kCIFormatBGRA8 colorSpace:nil];
+    return bytes;
+}
+static CIImage *ProcessedReference(CIImage *image, PGBeautySettings settings, CMTime time, NSData *track) {
+    PGFaceProcessor *faces = [PGFaceProcessor new];
+    if (track) [faces setTrackingData:track forTarget:settings.targetIndex];
+    NSError *error = nil;
+    PGFaceFrame *frame = [faces processImage:image settings:settings time:time error:&error];
+    if (!frame) return nil;
+    return [[PGBeautyRenderer new] processImage:frame.image settings:settings skinMask:frame.skinMask
+        colorMask:frame.colorMask teethMask:frame.teethMask eyeMask:frame.eyeMask error:&error];
+}
+static CGPoint LandmarkCenter(VNFaceLandmarkRegion2D *region, CGRect box, CGSize size) {
+    CGPoint center = CGPointZero;
+    if (!region.pointCount || !region.normalizedPoints) return center;
+    for (NSUInteger i = 0; i < region.pointCount; i++) {
+        center.x += region.normalizedPoints[i].x; center.y += region.normalizedPoints[i].y;
+    }
+    center.x /= region.pointCount; center.y /= region.pointCount;
+    return CGPointMake((box.origin.x + center.x * box.size.width) * size.width,
+                       (1 - box.origin.y - center.y * box.size.height) * size.height);
+}
+static double ChangeMass(NSData *baseline, NSData *changed, size_t width, CGRect region) {
+    if (baseline.length != changed.length || !width) return INFINITY;
+    const uint8_t *a = baseline.bytes, *b = changed.bytes;
+    size_t height = baseline.length / (width * 4); double total = 0;
+    for (size_t row = 0; row < height; row++) for (size_t x = 0; x < width; x++)
+        if (CGRectContainsPoint(region, CGPointMake(x + .5, row + .5))) {
+            size_t i = (row * width + x) * 4;
+            for (size_t c = 0; c < 3; c++) total += abs(a[i+c] - b[i+c]);
+        }
+    return total;
+}
+static void PortraitAnatomyTests(NSString *fixture, CIImage *portrait) {
+    size_t width = 0, height = 0;
+    NSData *canonical = DecodedPortrait(fixture, &width, &height);
+    Check(canonical != nil && width == 512 && height == 512, @"independent ImageIO/Quartz decodes the 512px NASA fixture");
+    if (!canonical || width != 512 || height != 512 || !portrait) return;
+    // Asymmetric samples pin the decoder's physical row/column order. These
+    // values match Pillow's RGB decode exactly, independently of Core Image.
+    const size_t positions[][2] = {{16,16},{100,250},{205,100},{222,178},{480,450}};
+    const uint8_t samples[][4] = {{35,6,14,255},{93,132,234,255},{11,35,58,255},{42,73,102,255},{2,1,3,255}};
+    BOOL samplesMatch = YES;
+    for (size_t i = 0; i < 5; i++)
+        samplesMatch &= memcmp((const uint8_t *)canonical.bytes + (positions[i][1]*width + positions[i][0])*4, samples[i], 4) == 0;
+    Check(samplesMatch, @"independent asymmetric pixels establish top-first BGRA and the horizontal direction");
+    CIContext *context = NumericContext();
+    Check(MaximumDifference(canonical, ImageBytes(context, portrait)) <= 1, @"upright CI file decode agrees with independent physical source bytes");
+    PGFaceFrame *detected = [[PGFaceProcessor new] processImage:portrait settings:PGBeautyDefaults() time:kCMTimeZero error:nil];
+    VNFaceObservation *face = detected.faces.firstObject;
+    Check(face.landmarks.allPoints.pointCount == 76, @"real portrait provides the 76-point anatomy used by chin pins");
+    if (face.landmarks.allPoints.pointCount != 76) return;
+    CGSize size = CGSizeMake(width, height); CGRect box = face.boundingBox;
+    CGPoint left = LandmarkCenter(face.landmarks.leftEye, box, size), right = LandmarkCenter(face.landmarks.rightEye, box, size);
+    CGPoint chin = face.landmarks.allPoints.normalizedPoints[67];
+    chin = CGPointMake((box.origin.x + chin.x * box.size.width)*width, (1-box.origin.y-chin.y*box.size.height)*height);
+    CGFloat fw = box.size.width*width, fh = box.size.height*height;
+    CGRect leftEye = CGRectMake(left.x-fw*.24, left.y-fh*.17, fw*.48, fh*.34);
+    CGRect rightEye = CGRectMake(right.x-fw*.24, right.y-fh*.17, fw*.48, fh*.34);
+    CGRect chinArea = CGRectMake(chin.x-fw*.30, chin.y-fh*.22, fw*.60, fh*.44);
+    CGRect lowerFace = CGRectNull;
+    for (NSUInteger point = 62; point <= 72; point++) {
+        CGPoint p = face.landmarks.allPoints.normalizedPoints[point];
+        CGFloat x = (box.origin.x+p.x*box.size.width)*width;
+        CGFloat y = (1-box.origin.y-p.y*box.size.height)*height;
+        lowerFace = CGRectUnion(lowerFace, CGRectMake(x, y, 1, 1));
+    }
+    lowerFace = CGRectInset(lowerFace, -fw*.15, -fh*.15);
+    CGRect upsideDownFace = CGRectMake(box.origin.x*width, box.origin.y*height, fw, fh);
+    const UInt32 controls[] = {0, PGBigEye, PGChin, PGChin, PGShort, PGShort, PGJaw};
+    const double values[] = {0, 1, 1, -1, 1, -1, 1};
+    NSArray<NSString *> *names = @[@"default", @"big-eye", @"chin-positive", @"chin-negative", @"short-positive", @"short-negative", @"jaw"];
+    for (NSUInteger effect = 0; effect < names.count; effect++) {
+        PGBeautySettings settings = PGBeautyDefaults();
+        if (effect == 1) settings.faceBigEye = 1;
+        else if (effect == 2 || effect == 3) settings.faceChin = values[effect];
+        else if (effect == 4 || effect == 5) settings.faceShort = values[effect];
+        else if (effect == 6) settings.faceJaw = values[effect];
+        NSData *expected = ImageBytes(context, ProcessedReference(portrait, settings, kCMTimeZero, nil));
+        Check(expected.length == canonical.length, [names[effect] stringByAppendingString:@" independent upright face/beauty chain renders"]);
+        if (expected.length != canonical.length) continue;
+        NSData *originBaseline = nil;
+        for (NSUInteger sourceTop = 0; sourceTop < 2; sourceTop++) for (NSUInteger destinationTop = 0; destinationTop < 2; destinationTop++) {
+            @autoreleasepool {
+                PGHostAPI *api = [PGHostAPI new]; beatygrilPlugIn *plugin = [[beatygrilPlugIn alloc] initWithAPIManager:api];
+                Check([plugin addParametersWithError:nil], @"anatomy case creates the real plugin parameters");
+                if (effect) api.values[@(controls[effect])] = @(values[effect]);
+                PGHostTile *input = Tile(width, height, 37, -21, sourceTop ? kFxImageOrigin_TOP_LEFT : kFxImageOrigin_BOTTOM_LEFT);
+                PGHostTile *output = Tile(width, height, 37, -21, destinationTop ? kFxImageOrigin_TOP_LEFT : kFxImageOrigin_BOTTOM_LEFT);
+                // imageOrigin changes coordinate semantics, never these bytes.
+                Check(StoreSurfaceBytes(input, canonical), @"all origin combinations receive identical independently decoded physical rows");
+                Check(Render(plugin, output, @[input], Snapshot(plugin, kCMTimeZero), kCMTimeZero, nil, NULL), @"active anatomy case renders with nonzero tile origin");
+                NSData *actual = SurfaceBytes(output); NSUInteger difference = MaximumDifference(actual, expected);
+                NSString *label = [NSString stringWithFormat:@"%@ source%@/destination%@", names[effect], sourceTop?@"TOP":@"BOTTOM", destinationTop?@"TOP":@"BOTTOM"];
+                // Vision's file-image vs IOSurface path and translated float
+                // coordinates can round by a few byte levels at high contrast.
+                // Bound that error tightly; changing only origin tags must be
+                // exactly invariant, independently of this reference tolerance.
+                Check(difference <= 4 && MeanDifference(actual,expected) < .005, [label stringByAppendingString:@" matches independent upright CI output"]);
+                if (!originBaseline) originBaseline = actual;
+                Check(MaximumDifference(actual,originBaseline) == 0, [label stringByAppendingString:@" is byte-identical across coordinate tags"]);
+                double lm = ChangeMass(canonical, actual, width, leftEye), rm = ChangeMass(canonical, actual, width, rightEye);
+                double cm = ChangeMass(canonical, actual, width, chinArea), um = ChangeMass(canonical, actual, width, upsideDownFace);
+                double lowerMass = ChangeMass(canonical, actual, width, lowerFace);
+                BOOL located = effect == 0 ? MaximumDifference(canonical, actual) <= 1 :
+                    (effect == 1 ? lm > 100 && rm > 100 && cm < (lm+rm)*.01 && um == 0 :
+                     (effect < 4 ? cm > 100 && cm > 4*(lm+rm) && um == 0 :
+                                   lowerMass > 100 && lowerMass > 4*(lm+rm) && um == 0));
+                Check(located, [label stringByAppendingString:effect == 1 ? @" changes the two real eye regions" : (effect ? @" changes the real chin rather than eyes or mirrored anatomy" : @" preserves the independently decoded photo")]);
+                printf("Anatomy %-13s %lu/%lu max=%lu mean=%.7f eye=%.0f/%.0f chin=%.0f inverted=%.0f\n", names[effect].UTF8String,
+                    (unsigned long)sourceTop, (unsigned long)destinationTop, (unsigned long)difference, MeanDifference(actual,expected), lm, rm, cm, um);
+            }
+        }
+    }
+}
+static void TrackingCoordinateTests(NSDictionary *archive, NSDictionary *hostValues, PGHostTile *source, CIImage *portrait, CMTime time) {
+    Check([archive[@"hostCoordinateSpace"] isEqual:@"iosurface-ci-y-up-v1"], @"new host analysis stamps its explicit IOSurface/CI coordinate contract");
+    NSMutableDictionary *forged = [NSPropertyListSerialization propertyListWithData:PlistState(archive)
+        options:NSPropertyListMutableContainers format:nil error:nil];
+    if (![forged[@"frames"] isKindOfClass:NSDictionary.class]) { Check(NO, @"analysis archive supplies frames for compatibility regression"); return; }
+    // Retain fully valid topology but move the saved face away from the actual
+    // portrait. A falsely replayed legacy archive must produce a visible error.
+    for (NSMutableDictionary *frame in [forged[@"frames"] allValues]) for (NSMutableDictionary *face in frame[@"faces"]) {
+        NSMutableArray *box = [face[@"box"] mutableCopy]; box[0] = @([box[0] doubleValue]+.2); box[1] = @([box[1] doubleValue]-.25); face[@"box"] = box;
+        for (NSString *name in @[@"leftEye",@"rightEye",@"leftBrow",@"rightBrow",@"nose",@"lips",@"mouth",@"contour",@"points76"]) {
+            if (!face[name]) continue;
+            NSMutableArray *points = [NSMutableArray new];
+            for (NSArray *point in face[name]) [points addObject:@[@([point[0] doubleValue]+.2),@([point[1] doubleValue]-.25)]];
+            face[name] = points;
+        }
+    }
+    [forged removeObjectForKey:@"hostCoordinateSpace"];
+    NSString *legacyString = [PlistState(forged) base64EncodedStringWithOptions:0];
+    NSMutableDictionary *values = [hostValues mutableCopy];
+    values[@(PGTarget)] = @2; values[@(PGTrackEnabled)] = @YES; values[@(PGBigEye)] = @1; values[@(PGChin)] = @1;
+    values[@(PGTrackData3)] = legacyString;
+    PGHostAPI *legacyAPI = [PGHostAPI new]; legacyAPI.hostTime = time;
+    beatygrilPlugIn *legacy = [[beatygrilPlugIn alloc] initWithAPIManager:legacyAPI]; [legacy addParametersWithError:nil]; legacyAPI.values = [values mutableCopy];
+    PGHostTile *output = Tile(512,512,0,0,kFxImageOrigin_TOP_LEFT);
+    Check(Render(legacy, output, @[source], Snapshot(legacy,time), time, nil, NULL), @"unmarked old coordinate archive renders through the real adapter");
+    NSData *legacyBytes = SurfaceBytes(output);
+    PGBeautySettings realtime = [legacy settingsAtTime:time]; realtime.trackingEnabled = 0;
+    CIContext *context = NumericContext();
+    NSData *expectedLive = ImageBytes(context, ProcessedReference(portrait,realtime,time,nil));
+    printf("Legacy fallback upright comparison: max=%lu mean=%.7f\n",(unsigned long)MaximumDifference(legacyBytes,expectedLive),MeanDifference(legacyBytes,expectedLive));
+    Check(expectedLive.length && MaximumDifference(legacyBytes,expectedLive) <= 4 && MeanDifference(legacyBytes,expectedLive) < .005, @"unmarked forged face geometry falls back to realtime upright detection");
+    Check([legacyAPI.values[@(PGTrackData3)] isEqualToString:legacyString] && [legacyAPI.values[@(PGTrackEnabled)] boolValue], @"legacy fallback preserves the user's original archive string and enabled parameter");
+
+    forged[@"hostCoordinateSpace"] = @"iosurface-ci-y-up-v1";
+    NSData *trustedTrack = PlistState(forged);
+    PGHostAPI *trustedAPI = [PGHostAPI new]; trustedAPI.hostTime = time;
+    beatygrilPlugIn *trusted = [[beatygrilPlugIn alloc] initWithAPIManager:trustedAPI]; [trusted addParametersWithError:nil];
+    trustedAPI.values = [values mutableCopy]; trustedAPI.values[@(PGTrackData3)] = [trustedTrack base64EncodedStringWithOptions:0];
+    Check(Render(trusted, output, @[source], Snapshot(trusted,time), time, nil, NULL), @"fresh plugin accepts a snapshot with marked legacy analysis data");
+    NSData *trustedBytes = SurfaceBytes(output);
+    PGBeautySettings tracked = [trusted settingsAtTime:time]; tracked.trackingEnabled=1;
+    NSData *expectedSaved = ImageBytes(context, ProcessedReference(portrait,tracked,time,trustedTrack));
+    Check(expectedSaved.length && MaximumDifference(trustedBytes,expectedLive) <= 4 && MeanDifference(trustedBytes,expectedLive) < .005, @"automatic adapter ignores even marked saved geometry and uses the current face");
+    Check(MaximumDifference(expectedSaved,expectedLive) > 5, @"direct archive replay would visibly differ, making the automatic non-replay assertion meaningful");
+
+    // Reanalysis of an unmarked target starts a fresh compatible archive.
+    [legacy analyzeForward];
+    CMTime next = CMTimeAdd(time,CMTimeMake(10,24));
+    [legacy setupAnalysisForTimeRange:CMTimeRangeMake(time,CMTimeMake(240,24)) frameDuration:CMTimeMake(1,24) error:nil];
+    BOOL analyzed = [legacy analyzeFrame:source atTime:next error:nil] && [legacy cleanupAnalysis:nil];
+    NSData *resaved = [[NSData alloc] initWithBase64EncodedString:legacyAPI.values[@(PGTrackData3)] options:0];
+    NSDictionary *fresh = resaved ? [NSPropertyListSerialization propertyListWithData:resaved options:0 format:nil error:nil] : nil;
+    Check(analyzed && [fresh[@"frames"] count] == 1 && [fresh[@"hostCoordinateSpace"] isEqual:@"iosurface-ci-y-up-v1"], @"reanalysis replaces incompatible geometry with one newly marked frame");
+}
 static void WritePortrait(PGHostTile *tile, CIImage *image) {
     CIContext *context = [CIContext contextWithOptions:@{kCIContextWorkingColorSpace:NSNull.null, kCIContextOutputColorSpace:NSNull.null}];
     [context render:image toIOSurface:(__bridge IOSurfaceRef)tile.storage bounds:image.extent colorSpace:nil];
@@ -230,7 +467,7 @@ int main(int argc, const char *argv[]) {
         PGHostAPI *api = [PGHostAPI new]; beatygrilPlugIn *plugin = [[beatygrilPlugIn alloc] initWithAPIManager:api];
         NSError *error = nil;
         Check([plugin addParametersWithError:&error] && !error, @"host creates complete parameter set");
-        UInt32 identifiers[] = {PGAmount,PGBrightness,PGRadius,PGSharpness,PGMix,PGThreshold,PGSoftness,PGEdgeProtect,PGShowMask,PGMidtone,PGHue,PGSaturation,PGHighPass,PGThin,PGFaceBoxes,PGSingleFace,PGSelection,PGShort,PGNarrow,PGChin,PGVFace,PGJaw,PGCheekbone,PGSmallHead,PGSmallHeadRange,PGFeatureProtect,PGTeeth,PGEyeBright,PGBigEye,PGTrackBoxes,PGFastMulti,PGJumpGuard,PGEvenTone,PGTonePreset,PGInvertMask,PGDebugChannel,PGTrackEnabled,PGTarget,PGAnalyzeForward,PGAnalyzeBackward,PGClearTrack,PGStatus,PGTrackData1,PGTrackData2,PGTrackData3,PGSmoothingEnabled,PGColorEnabled,PGShapeEnabled,PGDetailEnabled};
+        UInt32 identifiers[] = {PGAmount,PGBrightness,PGRadius,PGSharpness,PGMix,PGThreshold,PGSoftness,PGEdgeProtect,PGShowMask,PGMidtone,PGHue,PGSaturation,PGHighPass,PGThin,PGFaceBoxes,PGSingleFace,PGSelection,PGShort,PGNarrow,PGChin,PGVFace,PGJaw,PGCheekbone,PGSmallHead,PGSmallHeadRange,PGFeatureProtect,PGTeeth,PGEyeBright,PGBigEye,PGTrackBoxes,PGFastMulti,PGJumpGuard,PGEvenTone,PGTonePreset,PGInvertMask,PGDebugChannel,PGTrackEnabled,PGTarget,PGAnalyzeForward,PGAnalyzeBackward,PGClearTrack,PGStatus,PGTrackData1,PGTrackData2,PGTrackData3,PGSmoothingEnabled,PGColorEnabled,PGShapeEnabled,PGDetailEnabled,PGInspectorPanel};
         for (NSUInteger i = 0; i < sizeof(identifiers) / sizeof(UInt32); i++) Check(api.definitions[@(identifiers[i])] != nil, [NSString stringWithFormat:@"required parameter %u exists", identifiers[i]]);
         Check(api.depth == 0 && !api.duplicate && api.definitions.count == sizeof(identifiers) / sizeof(UInt32) + 6, @"parameter groups close and IDs are unique");
         Check([api.values[@(PGMidtone)] doubleValue] == 0 && [api.values[@(PGMix)] doubleValue] == 1, @"default detail and mix form identity filter");
@@ -283,7 +520,7 @@ int main(int argc, const char *argv[]) {
             Check(MaximumDifference(SurfaceBytes(input), SurfaceBytes(output)) <= 1, top ? @"top-left tile preserves sample rows at nonzero origin" : @"bottom-left tile preserves sample rows at nonzero origin");
             output.origin = top ? kFxImageOrigin_BOTTOM_LEFT : kFxImageOrigin_TOP_LEFT;
             Check(Render(plugin, output, @[input], state, kCMTimeZero, &error, NULL), @"opposite-origin tile renders");
-            Check(MaximumDifference(ExpectedCrop(input, 0, 0, 48, 32, YES), SurfaceBytes(output)) <= 1, @"opposite image origins flip rows exactly once");
+            Check(MaximumDifference(SurfaceBytes(input), SurfaceBytes(output)) <= 1, @"opposite coordinate tags preserve the same physical IOSurface rows");
         }
         PGHostTile *full = Tile(48, 32, 37, -21, kFxImageOrigin_BOTTOM_LEFT), *crop = Tile(16, 12, 43, -17, kFxImageOrigin_BOTTOM_LEFT); Fill(full);
         Check(Render(plugin, crop, @[full], state, kCMTimeZero, &error, NULL), @"destination sub-tile renders from full input buffer");
@@ -298,11 +535,12 @@ int main(int argc, const char *argv[]) {
         Check(cropDifference <= 1, @"destination sub-tile translates global pixel bounds correctly");
         full.origin = kFxImageOrigin_TOP_LEFT; crop.origin = kFxImageOrigin_TOP_LEFT;
         Check(Render(plugin, crop, @[full], state, kCMTimeZero, &error, NULL), @"top-left destination sub-tile renders");
-        Check(MaximumDifference(ExpectedCrop(full, 6, 4, 16, 12, NO), SurfaceBytes(crop)) <= 1, @"top-left sub-tile selects correct physical source rows");
+        Check(MaximumDifference(ExpectedCrop(full, 6, 16, 16, 12, NO), SurfaceBytes(crop)) <= 1, @"top-left coordinate tag does not reverse the sub-tile's physical source rows");
 
         NSString *fixture = argc > 1 ? @(argv[1]) : @"tests/fixtures/astronaut.png";
         CIImage *portrait = [CIImage imageWithContentsOfURL:[NSURL fileURLWithPath:fixture] options:@{kCIImageColorSpace:NSNull.null}];
         Check(portrait != nil, @"NASA portrait opens for full adapter test");
+        PortraitAnatomyTests(fixture, portrait);
         PGHostTile *portraitSource = Tile(512, 512, 0, 0, kFxImageOrigin_BOTTOM_LEFT), *portraitOutput = Tile(512, 512, 0, 0, kFxImageOrigin_BOTTOM_LEFT);
         WritePortrait(portraitSource, portrait);
         api.values[@(PGThin)] = @0.8; api.values[@(PGBigEye)] = @0.6; api.values[@(PGMidtone)] = @0.8; api.values[@(PGBrightness)] = @0.25; api.values[@(PGMix)] = @0;
@@ -319,7 +557,7 @@ int main(int argc, const char *argv[]) {
         api.values[@(PGSelection)] = @[@0.43, @0.76];
         NSData *oldRenderState = Snapshot(plugin, api.hostTime);
         [plugin analyzeForward];
-        Check(api.forwardRequests == 1, @"forward analyze button calls host analysis API");
+        Check(api.forwardRequests == 1, @"hidden legacy forward-analysis method still accepts old document callbacks");
         CMTimeRange desired, clip = CMTimeRangeMake(kCMTimeZero, CMTimeMake(240, 24));
         [plugin desiredAnalysisTimeRange:&desired forInputWithTimeRange:clip error:&error];
         Check(CMTimeCompare(desired.start, api.hostTime) == 0 && CMTimeCompare(CMTimeRangeGetEnd(desired), CMTimeRangeGetEnd(clip)) == 0, @"analysis seed comes from current host playhead time");
@@ -339,10 +577,11 @@ int main(int argc, const char *argv[]) {
         NSData *tracking = [[NSData alloc] initWithBase64EncodedString:target options:0];
         NSDictionary *trackingArchive = tracking ? [NSPropertyListSerialization propertyListWithData:tracking options:0 format:nil error:nil] : nil;
         Check([trackingArchive[@"frames"] count] == 2, @"old render snapshot does not erase either newly analyzed frame");
+        TrackingCoordinateTests(trackingArchive,api.values,portraitSource,portrait,api.hostTime);
         Check([api.values[@(PGTrackEnabled)] boolValue] && CMTimeCompare(api.lastSetBoolTime, api.hostTime) == 0, @"analysis enables saved target at host seed time");
         NSData *trackedState = Snapshot(plugin, api.hostTime);
         beatygrilPlugIn *restoredPlugin = [[beatygrilPlugIn alloc] initWithAPIManager:api];
-        Check(Render(restoredPlugin, portraitOutput, @[portraitSource], trackedState, api.hostTime, &error, NULL), @"fresh plugin instance restores target data from serialized host snapshot");
+        Check(Render(restoredPlugin, portraitOutput, @[portraitSource], trackedState, api.hostTime, &error, NULL), @"fresh plugin instance uses automatic follow despite serialized legacy analysis settings");
         [plugin analyzeBackward];
         Check(api.backwardRequests == 1, @"backward analyze button calls host API");
         [plugin desiredAnalysisTimeRange:&desired forInputWithTimeRange:clip error:&error];

tests/inspector_tests.m

@@ -0,0 +1,252 @@
+#define main PGExistingHostAdapterMain
+#include "host_adapter_tests.m"
+#undef main
+#import "PGInspectorView.h"
+
+@interface PGInspectorTestAPI : PGHostAPI
+@property NSUInteger accessViolations;
+@property NSUInteger customWrites;
+@property NSUInteger scalarWrites;
+@property (strong) NSDictionary *actionBefore;
+@property (strong) NSDictionary *undoValues;
+@property BOOL parameterAPIsRequireAction;
+@property BOOL actionRequiresView;
+@property NSUInteger invalidActionSenders;
+@property (weak) id lastActionSender;
+@property NSUInteger previewPublications;
+@property (strong) NSDictionary *previewValues;
+@end
+@implementation PGInspectorTestAPI
+- (id)apiForProtocol:(Protocol *)protocol {
+    NSString *name=NSStringFromProtocol(protocol);
+    if(_parameterAPIsRequireAction && !self.actionDepth &&
+       ([name isEqual:@"FxParameterRetrievalAPI_v6"] || [name isEqual:@"FxParameterSettingAPI_v5"]))return nil;
+    return [super apiForProtocol:protocol];
+}
+- (void)guard {if(!self.actionDepth)_accessViolations++;}
+- (void)startAction:(id)sender {
+    _lastActionSender=sender;
+    if(_actionRequiresView && ![sender isKindOfClass:NSView.class]){_invalidActionSenders++;return;}
+    if(!self.actionDepth)_actionBefore=[self.values copy];[super startAction:sender];
+}
+- (void)endAction:(id)sender {
+    if(self.actionDepth==1 && ![self.values isEqual:_actionBefore]) {
+        _undoValues=_actionBefore;_previewValues=[self.values copy];_previewPublications++;
+    }
+    [super endAction:sender];
+}
+- (CMTime)currentTime {[self guard];return [super currentTime];}
+- (BOOL)getCustomParameterValue:(NSObject **)v fromParameter:(UInt32)i atTime:(CMTime)t {[self guard];return [super getCustomParameterValue:v fromParameter:i atTime:t];}
+- (BOOL)getFloatValue:(double *)v fromParameter:(UInt32)i atTime:(CMTime)t {[self guard];return [super getFloatValue:v fromParameter:i atTime:t];}
+- (BOOL)getBoolValue:(BOOL *)v fromParameter:(UInt32)i atTime:(CMTime)t {[self guard];return [super getBoolValue:v fromParameter:i atTime:t];}
+- (BOOL)getIntValue:(int *)v fromParameter:(UInt32)i atTime:(CMTime)t {[self guard];return [super getIntValue:v fromParameter:i atTime:t];}
+- (BOOL)setCustomParameterValue:(NSObject<NSSecureCoding,NSCopying> *)v toParameter:(UInt32)i atTime:(CMTime)t {[self guard];_customWrites++;return [super setCustomParameterValue:v toParameter:i atTime:t];}
+- (BOOL)setFloatValue:(double)v toParameter:(UInt32)i atTime:(CMTime)t {[self guard];_scalarWrites++;return [super setFloatValue:v toParameter:i atTime:t];}
+- (BOOL)setBoolValue:(BOOL)v toParameter:(UInt32)i atTime:(CMTime)t {[self guard];_scalarWrites++;return [super setBoolValue:v toParameter:i atTime:t];}
+- (BOOL)setIntValue:(int)v toParameter:(UInt32)i atTime:(CMTime)t {[self guard];_scalarWrites++;return [super setIntValue:v toParameter:i atTime:t];}
+@end
+
+static NSControl *FindControl(NSView *view,Class type,NSString *label) {
+    if([view isKindOfClass:type] && [view.accessibilityLabel isEqual:label])return (NSControl *)view;
+    for(NSView *child in view.subviews){NSControl *found=FindControl(child,type,label);if(found)return found;}return nil;
+}
+static void Fire(NSControl *control) {[control sendAction:control.action to:control.target];}
+static BOOL Near(double a,double b) {return fabs(a-b)<.00001;}
+static void RegistrationTests(void) {
+    PGHostAPI *api=[PGHostAPI new];beatygrilPlugIn *plugin=[[beatygrilPlugIn alloc]initWithAPIManager:api];[plugin addParametersWithError:nil];
+    NSUInteger visible=0;for(NSNumber *key in api.definitions){NSDictionary *d=api.definitions[key];if(!([d[@"flags"]unsignedIntValue]&kFxParameterFlag_HIDDEN)){visible++;Check(key.unsignedIntValue==PGInspectorPanel,@"only the custom panel is visible in the native parameter list");}}
+    Check(visible==1,@"all duplicate standard controls and manual-analysis groups are hidden");
+    FxParameterFlags flags=[api.definitions[@(PGInspectorPanel)][@"flags"]unsignedIntValue];
+    Check((flags&kFxParameterFlag_CUSTOM_UI) && (flags&kFxParameterFlag_USE_FULL_VIEW_WIDTH),@"panel requests full-width custom UI");
+    Check([plugin classForCustomParameterID:PGInspectorPanel]==PGInspectorState.class && [[plugin classesForCustomParameterID:PGInspectorPanel]containsObject:NSDictionary.class],@"host can securely decode the published state and its nested classes");
+    for(NSNumber *key in @[@(PGAnalyzeForward),@(PGAnalyzeBackward),@(PGClearTrack)])Check(([api.definitions[key][@"flags"]unsignedIntValue]&(kFxParameterFlag_HIDDEN|kFxParameterFlag_DISABLED))==(kFxParameterFlag_HIDDEN|kFxParameterFlag_DISABLED),@"legacy analysis commands are hidden and disabled");
+    Check([plugin createViewForParameterID:999]==nil,@"unknown parameter IDs do not create a second inspector");
+    for(NSDictionary *d in PGInspectorControls()) {
+        NSNumber *key=d[@"id"];Check(api.definitions[key]!=nil,@"every inspector control maps to an existing stable parameter ID");
+        if([d[@"kind"]isEqual:@"slider"])Check(Near([d[@"min"]doubleValue],[api.definitions[key][@"min"]doubleValue]) && Near([d[@"max"]doubleValue],[api.definitions[key][@"max"]doubleValue]),@"UI and renderer enforce the same slider range");
+    }
+    api.values[@(PGTrackEnabled)]=@YES;api.values[@(PGSingleFace)]=@YES;api.values[@(PGShowMask)]=@YES;
+    PGBeautySettings s=[plugin settingsAtTime:kCMTimeZero];Check(!s.trackingEnabled && !s.singleFace && !s.showMask,@"old manual analysis, selection and debug flags cannot override automatic output");
+    NSData *snapshot=Snapshot(plugin,kCMTimeZero);NSDictionary *plist=[NSPropertyListSerialization propertyListWithData:snapshot options:0 format:nil error:nil];
+    Check([plist[@"tracks"]isEqual:@[@"",@"",@""]],@"automatic render snapshots do not transfer persisted manual-analysis payloads");
+}
+static void ModelTests(void) {
+    PGInspectorState *plain=[PGInspectorState stateWithValues:@{} disabledParameters:[NSSet set] hasEdits:NO];
+    PGBeautySettings original=PGBeautyDefaults();original.midtoneDetail=.5;original.faceChin=-.3;
+    PGBeautySettings untouched=PGSettingsWithInspectorState(original,plain);
+    Check(memcmp(&original,&untouched,sizeof(original))==0,@"untouched panel preserves a legacy document's exact settings");
+    NSMutableDictionary *values=[plain.values mutableCopy];values[@(PGChin)]=@(-.6);values[@(PGBigEye)]=@.2;values[@(PGBrightness)]=@.37;values[@(PGTonePreset)]=@4;values[@(PGMidtone)]=@.7;
+    PGInspectorState *a=[PGInspectorState stateWithValues:values disabledParameters:[NSSet setWithObject:@(PGBrightness)] hasEdits:YES];
+    NSData *encoded=[NSKeyedArchiver archivedDataWithRootObject:a requiringSecureCoding:YES error:nil];
+    PGInspectorState *decoded=[NSKeyedUnarchiver unarchivedObjectOfClass:PGInspectorState.class fromData:encoded error:nil];
+    Check([decoded isEqual:a] && decoded!=a && decoded.hasEdits,@"secure host archive restores values, per-control bypass and edit state");
+    Check([[a copy]isEqual:a] && a.hash==[[a copy]hash],@"copy and equality are stable for host undo snapshots");
+    PGBeautySettings s=PGSettingsWithInspectorState(PGBeautyDefaults(),decoded);
+    Check(Near(s.faceChin,-.6) && Near(s.faceBigEye,.2) && s.skinBrightness==0 && s.skinTonePreset==4,@"chin, eyes and bypass route to the correct independent render fields");
+    NSMutableDictionary *bValues=[values mutableCopy];bValues[@(PGChin)]=@.6;bValues[@(PGTonePreset)]=@6;
+    PGInspectorState *b=[PGInspectorState stateWithValues:bValues disabledParameters:[NSSet set] hasEdits:YES];
+    PGInspectorState *mid=(PGInspectorState *)[a interpolateBetween:b withWeight:.5];
+    Check(Near([mid valueForParameter:PGChin],0) && [mid valueForParameter:PGTonePreset]==4 && ![mid isParameterEnabled:PGBrightness],@"numeric keyframes interpolate while menu and enable states hold the preceding key");
+    Check([[a interpolateBetween:b withWeight:0]isEqual:a] && [[a interpolateBetween:b withWeight:1]isEqual:b],@"keyframe endpoints restore exact independent states");
+    Check([[plain interpolateBetween:b withWeight:.5]isEqual:plain],@"uncommitted legacy state does not invent a numeric transition before the first panel edit");
+    NSDictionary *bad=@{@(PGChin):@9,@(PGTonePreset):@(-2),@(PGBrightness):@(NAN),@999:@.5};
+    PGInspectorState *safe=[PGInspectorState stateWithValues:bad disabledParameters:[NSSet setWithObjects:@(PGRadius),@999,nil] hasEdits:YES];
+    Check([safe valueForParameter:PGChin]==1 && [safe valueForParameter:PGTonePreset]==0 && [safe valueForParameter:PGBrightness]==0 && safe.values[@999]==nil && safe.disabledParameters.count==0,@"malformed controls are clamped, finite and limited to the supported schema");
+    NSMutableDictionary *off=[a.values mutableCopy];off[@(PGShapeEnabled)]=@0;off[@(PGColorEnabled)]=@0;off[@(PGSmoothingEnabled)]=@0;off[@(PGTrackBoxes)]=@1;
+    s=PGSettingsWithInspectorState(PGBeautyDefaults(),[PGInspectorState stateWithValues:off disabledParameters:[NSSet set] hasEdits:YES]);
+    Check(s.faceChin==0 && s.faceBigEye==0 && s.skinBrightness==0 && s.skinTonePreset==0 && s.midtoneDetail==0 && s.highPassDetail==0 && s.showTrackBox==0,@"card eye switches bypass the complete associated effect group");
+}
+static void ControllerTests(void) {
+    PGInspectorTestAPI *api=[PGInspectorTestAPI new];beatygrilPlugIn *plugin=[[beatygrilPlugIn alloc]initWithAPIManager:api];[plugin addParametersWithError:nil];
+    api.values[@(PGMidtone)]=@.5;
+    PGInspectorController *c=[[PGInspectorController alloc]initWithAPIManager:api];[c refresh];
+    Check(c.available && Near([c.state valueForParameter:PGMidtone],.5) && !c.state.hasEdits,@"initial UI reads the current legacy/template values instead of replacing them");
+    NSUInteger starts=api.actionStarts,writes=api.customWrites;
+    [c beginInteraction];[c setValue:.1 forParameter:PGChin];[c setValue:.3 forParameter:PGChin];[c setValue:.5 forParameter:PGChin];[c endInteraction];
+    Check(api.actionStarts==starts+1 && api.actionDepth==0 && api.customWrites==writes+3,@"an explicitly grouped controller transaction uses one balanced host action");
+    Check(api.scalarWrites==3,@"continuous drags mirror only changed values rather than rewriting every hidden parameter");
+    PGInspectorState *saved=api.values[@(PGInspectorPanel)];Check(saved.hasEdits && Near([saved valueForParameter:PGChin],.5) && Near([saved valueForParameter:PGMidtone],.5),@"published state contains the edited control and all untouched document values");
+    NSUInteger before=api.customWrites;[c setValue:.5 forParameter:PGChin];Check(api.customWrites==before,@"an unchanged value does not create duplicate undo writes");
+    PGInspectorController *restored=[[PGInspectorController alloc]initWithAPIManager:api];[restored refresh];Check([restored.state isEqual:saved],@"fresh inspector restores the full custom parameter state");
+    [c setValue:.37 forParameter:PGBrightness];[c toggleEnabledForParameter:PGBrightness];
+    Check(Near([c.state valueForParameter:PGBrightness],.37) && ![c.state isParameterEnabled:PGBrightness],@"eye bypass preserves the prior slider value");
+    [c toggleEnabledForParameter:PGBrightness];Check([c.state isParameterEnabled:PGBrightness] && Near([c.state valueForParameter:PGBrightness],.37),@"reenabling restores the exact amount");
+    [c toggleEnabledForParameter:PGBrightness];[c resetParameter:PGBrightness];Check([c.state isParameterEnabled:PGBrightness] && [c.state valueForParameter:PGBrightness]==0,@"reset restores default and clears that item's bypass");
+    NSDictionary *unchanged=[api.values copy];PGInspectorState *old=[c.state copy];api.rejectedWriteParameter=PGInspectorPanel;
+    Check(![c setValue:.9 forParameter:PGChin] && [api.values isEqual:unchanged] && [c.state isEqual:old] && c.statusMessage.length>0,@"rejected custom writes leave the UI and all render parameters unchanged");api.rejectedWriteParameter=0;
+    Check(![c setValue:NAN forParameter:PGChin] && ![c setValue:.3 forParameter:999] && ![c toggleEnabledForParameter:PGRadius],@"invalid edits and unsupported bypass are safely rejected");
+    [c setValue:-.4 forParameter:PGChin];NSDictionary *undo=api.undoValues;
+    api.values=[undo mutableCopy];[[NSRunLoop currentRunLoop]runUntilDate:[NSDate dateWithTimeIntervalSinceNow:.36]];[c refresh];
+    Check(Near([c.state valueForParameter:PGChin],[old valueForParameter:PGChin]),@"host undo refresh restores the prior committed state after pending synchronization expires");
+    Check(api.accessViolations==0 && api.actionDepth==0 && api.actionStarts==api.actionEnds,@"all arbitrary-time reads and writes are inside balanced FxPlug action pairs");
+    [c setValue:.7 forParameter:PGBrightness];NSDictionary *beforeUndo=api.undoValues;
+    api.values=[beforeUndo mutableCopy];[c setValue:.2 forParameter:PGThin];
+    PGInspectorState *afterImmediateUndo=api.values[@(PGInspectorPanel)];
+    PGInspectorState *undoneState=beforeUndo[@(PGInspectorPanel)];
+    Check(Near([afterImmediateUndo valueForParameter:PGBrightness],[undoneState valueForParameter:PGBrightness]) && Near([afterImmediateUndo valueForParameter:PGThin],.2),@"a new gesture immediately after host undo cannot resurrect the undone value");
+    NSMutableDictionary *seekValues=[c.state.values mutableCopy];seekValues[@(PGChin)]=@(-.8);seekValues[@(PGMidtone)]=@.6;
+    api.values[@(PGInspectorPanel)]=[PGInspectorState stateWithValues:seekValues disabledParameters:[NSSet set] hasEdits:YES];api.hostTime=CMTimeAdd(api.hostTime,CMTimeMake(1,24));[c refresh];
+    Check(Near([c.state valueForParameter:PGChin],-.8) && Near([c.state valueForParameter:PGMidtone],.6),@"seeking invalidates pending display state immediately at the new CMTime");
+    [c setValue:.1 forParameter:PGBrightness];Check(Near([c.state valueForParameter:PGChin],-.8),@"new-time edits preserve the other controls from that time instead of a stale prior frame");
+    api.values=[api.undoValues mutableCopy];[c documentDidChange];
+    Check(Near([c.state valueForParameter:PGBrightness],[seekValues[@(PGBrightness)]doubleValue]),@"a host undo notification refreshes same-time state immediately without a timed wait");
+    PGHostAPI *legacy=[PGHostAPI new];beatygrilPlugIn *legacyPlugin=[[beatygrilPlugIn alloc]initWithAPIManager:legacy];[legacyPlugin addParametersWithError:nil];
+    legacy.values[@(PGDetailEnabled)]=@NO;legacy.values[@(PGHighPass)]=@.6;legacy.values[@(PGSharpness)]=@.4;
+    PGInspectorController *imported=[[PGInspectorController alloc]initWithAPIManager:legacy];[imported refresh];[imported setValue:.3 forParameter:PGBrightness];
+    PGBeautySettings migrated=PGSettingsWithInspectorState(PGBeautyDefaults(),imported.state);
+    Check(migrated.highPassDetail==0 && migrated.sharpness==0 && Near([imported.state valueForParameter:PGHighPass],.6),@"first panel edit preserves disabled legacy detail controls and their stored amounts");
+    legacy.values[@(PGInspectorPanel)]=[PGInspectorState stateWithValues:@{} disabledParameters:[NSSet set] hasEdits:NO];
+    legacy.values[@(PGDetailEnabled)]=@YES;legacy.values[@(PGSmoothingEnabled)]=@NO;
+    PGInspectorController *split=[[PGInspectorController alloc]initWithAPIManager:legacy];[split refresh];[split setValue:.2 forParameter:PGBrightness];
+    PGBeautySettings splitSettings=PGSettingsWithInspectorState(PGBeautyDefaults(),split.state);
+    Check(Near(splitSettings.highPassDetail,.6) && splitSettings.amount==0 && splitSettings.midtoneDetail==0,@"legacy global smoothing remains active when its old local-skin group was disabled");
+    Check(api.forwardRequests==0 && api.backwardRequests==0,@"normal inspector edits never request manual analysis");
+    [api.disabledAPIs addObject:@"FxCustomParameterActionAPI_v4"];
+    PGInspectorController *offline=[[PGInspectorController alloc]initWithAPIManager:api];[offline refresh];
+    Check(!offline.available && ![offline setValue:.2 forParameter:PGChin],@"missing host actions disable editing instead of unsafe parameter access");
+}
+static void ViewInteractionTests(void) {
+    PGHostAPI *api=[PGHostAPI new];beatygrilPlugIn *plugin=[[beatygrilPlugIn alloc]initWithAPIManager:api];[plugin addParametersWithError:nil];
+    PGInspectorView *view=(PGInspectorView *)[plugin createViewForParameterID:PGInspectorPanel];[view refreshFromHost];
+    NSSlider *chin=(NSSlider *)FindControl(view,NSSlider.class,@"下巴");Check(chin!=nil && chin.enabled,@"custom view exposes an accessible native chin slider");
+    chin.doubleValue=-.75;Fire(chin);PGInspectorState *s=api.values[@(PGInspectorPanel)];
+    Check(Near([s valueForParameter:PGChin],-.75) && [s valueForParameter:PGBigEye]==0,@"actual chin slider events do not write the eye parameter");
+    NSTextField *number=(NSTextField *)FindControl(view,NSTextField.class,@"下巴数值");number.stringValue=@"0.40";Fire(number);s=api.values[@(PGInspectorPanel)];Check(Near([s valueForParameter:PGChin],.4),@"editable numeric field writes its signed control");
+    number.stringValue=@"invalid";Fire(number);s=api.values[@(PGInspectorPanel)];Check(Near([s valueForParameter:PGChin],.4),@"invalid number entry preserves the last valid value");
+    NSMutableDictionary *changed=[s.values mutableCopy];changed[@(PGChin)]=@.8;
+    api.values[@(PGInspectorPanel)]=[PGInspectorState stateWithValues:changed disabledParameters:s.disabledParameters hasEdits:YES];
+    number.stringValue=@"0.40";Fire(number);s=api.values[@(PGInspectorPanel)];
+    Check(Near([s valueForParameter:PGChin],.4),@"explicit input matching old UI cache still overrides a newer host value");
+    // Return has already submitted .40. Losing focus after an external undo
+    // must not send that old field text again and resurrect the undone value.
+    changed=[s.values mutableCopy];changed[@(PGChin)]=@.8;
+    api.values[@(PGInspectorPanel)]=[PGInspectorState stateWithValues:changed disabledParameters:s.disabledParameters hasEdits:YES];
+    [number.delegate controlTextDidEndEditing:[NSNotification notificationWithName:NSControlTextDidEndEditingNotification object:number]];
+    s=api.values[@(PGInspectorPanel)];
+    Check(Near([s valueForParameter:PGChin],.8),@"focus loss after a submitted number does not resurrect an externally undone value");
+    number.stringValue=@"0.65";
+    [number.delegate controlTextDidChange:[NSNotification notificationWithName:NSControlTextDidChangeNotification object:number]];
+    [number.delegate controlTextDidEndEditing:[NSNotification notificationWithName:NSControlTextDidEndEditingNotification object:number]];
+    s=api.values[@(PGInspectorPanel)];
+    Check(Near([s valueForParameter:PGChin],.65),@"genuinely edited number still commits when focus leaves without Return");
+    changed=[s.values mutableCopy];changed[@(PGChin)]=@.2;
+    api.values[@(PGInspectorPanel)]=[PGInspectorState stateWithValues:changed disabledParameters:s.disabledParameters hasEdits:YES];
+    [number.delegate controlTextDidEndEditing:[NSNotification notificationWithName:NSControlTextDidEndEditingNotification object:number]];
+    s=api.values[@(PGInspectorPanel)];
+    Check(Near([s valueForParameter:PGChin],.2),@"duplicate end-editing notifications do not create another parameter transaction");
+    NSWindow *window=[[NSWindow alloc]initWithContentRect:NSMakeRect(0,0,380,900) styleMask:NSWindowStyleMaskBorderless backing:NSBackingStoreBuffered defer:NO];
+    window.releasedWhenClosed=NO;window.contentView=view;
+    [number selectText:nil];
+    Check(number.currentEditor!=nil,@"offscreen AppKit window supplies a real field editor for Return handling");
+    changed=[s.values mutableCopy];changed[@(PGChin)]=@.7;
+    api.values[@(PGInspectorPanel)]=[PGInspectorState stateWithValues:changed disabledParameters:s.disabledParameters hasEdits:YES];
+    [view hostParameterChanged];
+    Check(Near([view.controller.state valueForParameter:PGChin],.7) && Near(number.doubleValue,.7),@"a focused but unmodified editor cannot hide a host undo or reset");
+    number.stringValue=@"0.25";
+    [number.delegate controlTextDidChange:[NSNotification notificationWithName:NSControlTextDidChangeNotification object:number]];
+    changed[@(PGChin)]=@.8;
+    api.values[@(PGInspectorPanel)]=[PGInspectorState stateWithValues:changed disabledParameters:s.disabledParameters hasEdits:YES];
+    [view hostParameterChanged];
+    Check(Near(number.doubleValue,.25),@"host refresh preserves genuinely unsubmitted typing");
+    Fire(number);
+    Check(number.currentEditor==nil && Near([(PGInspectorState *)api.values[@(PGInspectorPanel)] valueForParameter:PGChin],.25),@"Return commits once and releases the actual AppKit editor before host commands");
+    [window close];
+    NSButton *preview=(NSButton *)FindControl(view,NSButton.class,@"人脸框预览");preview.state=NSControlStateValueOn;Fire(preview);s=api.values[@(PGInspectorPanel)];Check([s valueForParameter:PGTrackBoxes]==1,@"preview switch events change the automatic face box setting");
+    for(NSNumber *width in @[@280,@320,@380,@520]) {
+        [view setFrameSize:NSMakeSize(width.doubleValue,20)];[view layoutSubtreeIfNeeded];
+        Check(view.frame.size.height>500 && Near(view.frame.size.height,view.fittingSize.height) && Near(view.frame.size.height,view.intrinsicContentSize.height),@"width changes produce a complete consistent intrinsic/fitting height");
+        for(NSView *card in view.subviews)if(!card.hidden)Check(NSMaxY(card.frame)<=NSHeight(view.bounds)+1 && NSMaxX(card.frame)<=NSWidth(view.bounds)+1,@"every visible card and footer remains inside the panel at all inspector widths");
+    }
+}
+static void HostHandshakeTests(void) {
+    PGInspectorTestAPI *api=[PGInspectorTestAPI new];beatygrilPlugIn *plugin=[[beatygrilPlugIn alloc]initWithAPIManager:api];[plugin addParametersWithError:nil];
+    api.values[@(PGMidtone)]=@.5;
+    api.parameterAPIsRequireAction=YES;api.actionRequiresView=YES;
+    PGInspectorView *view=(PGInspectorView *)[plugin createViewForParameterID:PGInspectorPanel];[view refreshFromHost];
+    Check(view.controller.available && Near([view.controller.state valueForParameter:PGMidtone],.5),@"an action-scoped host connects and reads the actual template values");
+    Check(api.lastActionSender==view && api.invalidActionSenders==0,@"custom parameter actions identify their actual inspector NSView");
+    NSSlider *brightness=(NSSlider *)FindControl(view,NSSlider.class,@"肤色亮度");
+    Check(brightness.enabled,@"action-scoped parameter APIs do not leave the whole native panel disabled");
+    brightness.doubleValue=.42;Fire(brightness);PGInspectorState *saved=api.values[@(PGInspectorPanel)];
+    Check(saved.hasEdits && Near([saved valueForParameter:PGBrightness],.42),@"a connected native control writes through the action-scoped setting API");
+    [api.disabledAPIs addObject:@"FxParameterSettingAPI_v5"];[view refreshFromHost];
+    Check(!view.controller.available && api.actionDepth==0 && api.actionStarts==api.actionEnds,@"a genuinely missing setting API closes the already-started host action");
+    [api.disabledAPIs removeObject:@"FxParameterSettingAPI_v5"];[view refreshFromHost];
+    Check(view.controller.available && brightness.enabled,@"a later host connection restores controls after a transient API failure");
+    Check(api.accessViolations==0 && api.actionDepth==0 && api.actionStarts==api.actionEnds,@"action-scoped connection, edits, failure and reconnection remain balanced");
+}
+static void ContinuousPreviewTests(void) {
+    PGInspectorTestAPI *api=[PGInspectorTestAPI new];beatygrilPlugIn *plugin=[[beatygrilPlugIn alloc]initWithAPIManager:api];[plugin addParametersWithError:nil];
+    api.parameterAPIsRequireAction=YES;api.actionRequiresView=YES;
+    PGInspectorView *view=(PGInspectorView *)[plugin createViewForParameterID:PGInspectorPanel];[view refreshFromHost];
+    NSSlider *slider=(NSSlider *)FindControl(view,NSSlider.class,@"短脸");
+    void (^began)(void)=[slider valueForKey:@"interactionBegan"], (^ended)(void)=[slider valueForKey:@"interactionEnded"];
+    Check(slider.continuous && began && ended,@"native slider emits continuous events and exposes balanced gesture callbacks");
+    began();
+    for(NSNumber *value in @[@.2,@.5,@1]) {
+        NSUInteger publications=api.previewPublications;slider.doubleValue=value.doubleValue;Fire(slider);
+        PGInspectorState *visible=api.previewValues[@(PGInspectorPanel)];
+        Check(api.actionDepth==0 && api.previewPublications==publications+1 && Near([visible valueForParameter:PGShort],value.doubleValue),@"every drag step publishes a completed host snapshot before mouse-up");
+        Check(visible && Near(PGSettingsWithInspectorState(PGBeautyDefaults(),visible).faceShort,value.doubleValue),@"published frame settings contain each intermediate short-face value while gesture is still open");
+    }
+    NSUInteger publications=api.previewPublications;Fire(slider);
+    Check(api.previewPublications==publications,@"unchanged drag events do not enqueue redundant previews");
+    ended();
+    Check(api.actionDepth==0 && api.actionStarts==api.actionEnds && api.accessViolations==0 && api.invalidActionSenders==0,@"step-wise publication preserves action-scoped APIs and the actual view sender");
+}
+int main(int argc,const char **argv) {@autoreleasepool {
+    [NSApplication sharedApplication];[NSApp setActivationPolicy:NSApplicationActivationPolicyProhibited];
+    RegistrationTests();ModelTests();ControllerTests();ViewInteractionTests();HostHandshakeTests();ContinuousPreviewTests();
+    if(argc>2) {
+        NSData *inner=[NSData dataWithContentsOfFile:@(argv[1])],*outer=[NSData dataWithContentsOfFile:@(argv[2])];NSError *error=nil;
+        NSKeyedUnarchiver *reader=[[NSKeyedUnarchiver alloc]initForReadingFromData:inner error:&error];reader.requiresSecureCoding=YES;
+        PGInspectorState *state=[reader decodeObjectOfClass:PGInspectorState.class forKey:@"Custom Data"];[reader finishDecoding];
+        PGInspectorState *expected=[PGInspectorState stateWithValues:@{} disabledParameters:[NSSet set] hasEdits:NO];
+        Check(!error && !reader.error && [state isEqual:expected],@"the template's actual Custom Data bytes securely decode to our untouched state class");
+        NSKeyedUnarchiver *envelope=[[NSKeyedUnarchiver alloc]initForReadingFromData:outer error:&error];envelope.requiresSecureCoding=YES;
+        NSData *payload=[envelope decodeObjectOfClass:NSData.class forKey:@"BlindDataObject"];
+        NSNumber *legacy=[envelope decodeObjectOfClass:NSNumber.class forKey:@"DataIsLegacy"];[envelope finishDecoding];
+        Check(!error && !envelope.error && legacy && !legacy.boolValue && [payload isEqual:inner],@"Foundation reads the Motion envelope as the exact secure custom payload");
+    }
+    printf("Inspector: %lu checks, %lu failures\n",(unsigned long)Checks,(unsigned long)Failures);return Failures?1:0;
+}}

tests/slim_tests.m

@@ -1,6 +1,7 @@
 #import <Foundation/Foundation.h>
 #import <CoreImage/CoreImage.h>
 #import <Metal/Metal.h>
+#import <ImageIO/ImageIO.h>
 #import "PGFaceProcessor.h"
 #include <math.h>
 
@@ -24,14 +25,16 @@ static NSDictionary *Geometry(double yaw,double roll) {
     NSMutableArray *p=[NSMutableArray new];
     for(NSUInteger i=0;i<76;i++)[p addObject:@[@.5,@.5]];
     p[6]=@[@.34,@.65];p[13]=@[@.66,@.65];
-    p[47]=@[@.5,@.60];p[48]=@[@.5,@.52];p[49]=@[@.5,@.45];p[52]=@[@.5,@.42];
+    p[46]=@[@.5,@.68];p[47]=@[@.5,@.60];p[48]=@[@.5,@.52];p[49]=@[@.5,@.45];p[52]=@[@.5,@.42];
+    p[29]=@[@.5,@.39];
+    p[36]=@[@.54,@.36];p[37]=@[@.5,@.35];p[38]=@[@.46,@.36];
     for(NSUInteger i=0;i<17;i++) {
         double t=M_PI+M_PI*i/16;
         p[59+i]=@[@(.5+.29*cos(t)),@(.65+.43*sin(t))];
     }
     for(NSUInteger i=0;i<76;i++) {
         CGPoint a=ReadPoint(p[i]);
-        double depth=(i==47 || i==48 || i==49 || i==52)?.18:.03;
+        double depth=(i==46 || i==47 || i==48 || i==49 || i==52)?.18:.03;
         double x=(a.x-.5)*cos(yaw)+depth*sin(yaw),y=a.y-.5;
         p[i]=WritePoint(CGPointMake(.5+x*cos(roll)-y*sin(roll),.5+x*sin(roll)+y*cos(roll)));
     }
@@ -60,6 +63,73 @@ static CGPoint Oracle(CGPoint pixel,NSDictionary *g,CGRect extent,double thin) {
     }
     return CGPointMake(q.x,1-q.y);
 }
+static CGPoint ChinOracle(CGPoint pixel,NSDictionary *g,CGRect e,double thin,double chin) {
+    CGPoint q=Oracle(pixel,g,e,thin);q.y=1-q.y;
+    NSArray *raw=g[@"points76"];CGPoint points[76];
+    for(NSUInteger i=0;i<76;i++){points[i]=ReadPoint(raw[i]);points[i].y=1-points[i].y;}
+    double width=hypot((points[75].x-points[59].x)*e.size.width,(points[75].y-points[59].y)*e.size.height);
+    double height=2*hypot((points[67].x-(points[74].x+points[60].x)/2)*e.size.width,(points[67].y-(points[74].y+points[60].y)/2)*e.size.height);
+    double ratio=Clamp(chin,-1,1)*(chin>0?.04:.02)*Clamp(280/fmax(1,fmax(width,height)),1,2.25);
+    for(NSUInteger i=0;i<3;i++) {
+        CGPoint a=points[68-i],b=points[38-i];double r=hypot(a.x-b.x,a.y-b.y);
+        if(r<=.0001)continue;
+        double w=Clamp(1-hypot(q.x-a.x,q.y-a.y)/r,0,1);
+        q.x=Clamp(q.x-(b.x-a.x)*ratio*w,0,1);q.y=Clamp(q.y-(b.y-a.y)*ratio*w,0,1);
+    }
+    return CGPointMake(q.x,1-q.y);
+}
+
+// Independent double-precision reconstruction of AIR's jaw and short-face
+// branches. This does not call or inspect the production kernel/parameter table.
+// Jaw's support uses the adjacent contour edge, not the much longer lip vector.
+// Short-face uses a filled lower-contour polygon and its distance envelope.
+static double ReferenceSizeGain(CGPoint p[76],CGRect e) {
+    double span=hypot((p[75].x-p[59].x)*e.size.width,(p[75].y-p[59].y)*e.size.height);
+    double vertical=2*hypot((p[67].x-(p[74].x+p[60].x)/2)*e.size.width,(p[67].y-(p[74].y+p[60].y)/2)*e.size.height);
+    return Clamp(280/fmax(1,fmax(span,vertical)),1,2.25);
+}
+static CGPoint ReferencePoint(CGPoint p[76],NSUInteger index) {return CGPointMake(p[index].x,1-p[index].y);}
+static double ReferencePolygonWeight(CGPoint q,CGPoint p[76]) {
+    double radius=hypot(p[46].x-p[48].x,p[46].y-p[48].y);
+    if(radius<=.0001)return 0;
+    BOOL inside=NO;double minimum=10;
+    for(NSUInteger i=0;i<11;i++){
+        CGPoint a=ReferencePoint(p,62+i),b=ReferencePoint(p,62+(i+1)%11);
+        if((a.y>q.y)!=(b.y>q.y)){
+            double divisor=b.y-a.y;if(fabs(divisor)<=1e-6)divisor=divisor<0?-1e-6:1e-6;
+            if(q.x<a.x+(q.y-a.y)*(b.x-a.x)/divisor)inside=!inside;
+        }
+        double dx=b.x-a.x,dy=b.y-a.y,squared=dx*dx+dy*dy;
+        double t=squared>1e-6?Clamp(((q.x-a.x)*dx+(q.y-a.y)*dy)/squared,0,1):0;
+        minimum=fmin(minimum,hypot(q.x-a.x-t*dx,q.y-a.y-t*dy));
+    }
+    return inside?1:Clamp(1-minimum/radius,0,1);
+}
+static CGPoint JawShortOracle(CGPoint pixel,NSDictionary *g,CGRect e,PGBeautySettings s) {
+    CGPoint p[76];for(NSUInteger i=0;i<76;i++)p[i]=ReadPoint(g[@"points76"][i]);
+    double gain=ReferenceSizeGain(p,e);CGPoint q=Oracle(pixel,g,e,s.faceThin);q.y=1-q.y;
+    const unsigned int origin[]={72,62,71,63,70,64},neighbour[]={71,63,70,64,71,63};
+    double jaw=Clamp(s.faceJaw,0,1)*.05*gain;
+    if(fabs(jaw)>1e-6)for(NSUInteger i=0;i<6;i++){
+        CGPoint a=ReferencePoint(p,origin[i]),b=ReferencePoint(p,neighbour[i]),target=ReferencePoint(p,29);
+        double radius=hypot(b.x-a.x,b.y-a.y);if(radius<=.0001)continue;
+        double influence=Clamp(1-hypot(q.x-a.x,q.y-a.y)/radius,0,1);
+        q.x=Clamp(q.x-(target.x-a.x)*jaw*influence,0,1);q.y=Clamp(q.y-(target.y-a.y)*jaw*influence,0,1);
+    }
+    double chin=Clamp(s.faceChin,-1,1)*(s.faceChin>0?.04:.02)*gain;
+    if(fabs(chin)>1e-6)for(NSUInteger i=0;i<3;i++){
+        CGPoint a=ReferencePoint(p,68-i),target=ReferencePoint(p,38-i);double radius=hypot(target.x-a.x,target.y-a.y);
+        if(radius<=.0001)continue;double influence=Clamp(1-hypot(q.x-a.x,q.y-a.y)/radius,0,1);
+        q.x=Clamp(q.x-(target.x-a.x)*chin*influence,0,1);q.y=Clamp(q.y-(target.y-a.y)*chin*influence,0,1);
+    }
+    double shortRatio=Clamp(s.faceShort,-1,1)*.25*gain;
+    if(fabs(shortRatio)>1e-6){
+        double influence=ReferencePolygonWeight(q,p);
+        q.x=Clamp(q.x-(p[46].x-p[48].x)*shortRatio*influence,0,1);
+        q.y=Clamp(q.y-(p[48].y-p[46].y)*shortRatio*influence,0,1);
+    }
+    return CGPointMake(q.x,1-q.y);
+}
 static CIImage *CoordinateImage(CGRect extent) {
     NSUInteger w=extent.size.width,h=extent.size.height;
     NSMutableData *d=[NSMutableData dataWithLength:w*h*4*sizeof(float)];float *p=d.mutableBytes;
@@ -77,8 +147,8 @@ static NSData *Pixels(CIContext *c,CIImage *image) {
 static NSData *Archive(NSDictionary *geometry) {
     return [NSPropertyListSerialization dataWithPropertyList:@{@"version":@1,@"frames":@{@"0/1/0":@{@"value":@0,@"scale":@1,@"epoch":@0,@"faces":@[geometry]}}} format:NSPropertyListBinaryFormat_v1_0 options:0 error:nil];
 }
-static void NumericCase(CIContext *c,PGFaceProcessor *p,CGRect e,NSDictionary *g,double amount,NSString *name) {
+static void NumericSettingsCase(CIContext *c,PGFaceProcessor *p,CGRect e,NSDictionary *g,double amount,double chin,NSString *name) {
-    PGBeautySettings s=PGBeautyDefaults();s.faceThin=amount;
+    PGBeautySettings s=PGBeautyDefaults();s.faceThin=amount;s.faceChin=chin;
     CIImage *input=CoordinateImage(e),*output=[p warpImage:input geometry:@[g] settings:s extent:e];
     Check(output!=nil && CGRectEqualToRect(output.extent,e),[name stringByAppendingString:@" preserves extent"]);
     NSData *data=Pixels(c,output);const float *pixels=data.bytes;double worst=0,maxMove=0;
@@ -86,7 +156,7 @@ static void NumericCase(CIContext *c,PGFaceProcessor *p,CGRect e,NSDictionary *g
     NSUInteger w=e.size.width,h=e.size.height;
     for(NSUInteger y=3;y<h-3;y+=7)for(NSUInteger x=3;x<w-3;x+=7) {
         // Bitmap rows are top first, while destCoord / geometry are y up.
-        CGPoint q=Oracle(CGPointMake(e.origin.x+x+.5,e.origin.y+h-y-.5),g,e,amount);
+        CGPoint q=ChinOracle(CGPointMake(e.origin.x+x+.5,e.origin.y+h-y-.5),g,e,amount,chin);
         double ex=Clamp(q.x,.5/w,1-.5/w),ey=Clamp(1-q.y,.5/h,1-.5/h);
         NSUInteger k=(y*w+x)*4;
         double difference=fmax(fabs(pixels[k]-ex),fabs(pixels[k+1]-ey));
@@ -95,11 +165,138 @@ static void NumericCase(CIContext *c,PGFaceProcessor *p,CGRect e,NSDictionary *g
     }
     if(worst>0.00006)fprintf(stderr,"%s oracle max error=%g at %lu,%lu expected=(%g,%g) actual=(%g,%g)\n",name.UTF8String,worst,(unsigned long)worstX,(unsigned long)worstY,worstExpected.x,worstExpected.y,worstActual.x,worstActual.y);
     maxOracleError=fmax(maxOracleError,worst);
-    Check(worst<0.00006,[name stringByAppendingString:@" GPU inverse field matches independent 17-pin oracle"]);
+    Check(worst<0.00006,[name stringByAppendingString:@" GPU field matches the independent thin/chin oracle"]);
-    Check(amount==0 || maxMove>.0001,[name stringByAppendingString:@" exercises a nonzero displacement"]);
+    Check((amount==0 && chin==0) || maxMove>.0001,[name stringByAppendingString:@" exercises a nonzero displacement"]);
     NSUInteger corner=4*((h-3)*w+(w-3));
     Check(fabs(pixels[corner]-(w-2.5)/w)<1e-6 && fabs(pixels[corner+1]-(h-2.5)/h)<1e-6,[name stringByAppendingString:@" preserves distant background"]);
 }
+static void NumericCase(CIContext *c,PGFaceProcessor *p,CGRect e,NSDictionary *g,double amount,NSString *name) {
+    NumericSettingsCase(c,p,e,g,amount,0,name);
+}
+static void NumericLocalCase(CIContext *c,PGFaceProcessor *processor,CGRect extent,NSDictionary *geometry,PGBeautySettings settings,NSString *name) {
+    CIImage *input=CoordinateImage(extent),*output=[processor warpImage:input geometry:@[geometry] settings:settings extent:extent];
+    Check(output!=nil && CGRectEqualToRect(output.extent,extent),[name stringByAppendingString:@" extent"]);
+    NSData *data=Pixels(c,output);const float *field=data.bytes;NSUInteger width=extent.size.width,height=extent.size.height;
+    double maximum=0,movement=0;
+    for(NSUInteger row=3;row<height-3;row+=5)for(NSUInteger column=3;column<width-3;column+=5){
+        CGPoint source=JawShortOracle(CGPointMake(extent.origin.x+column+.5,extent.origin.y+height-row-.5),geometry,extent,settings);
+        double x=Clamp(source.x,.5/width,1-.5/width),y=Clamp(1-source.y,.5/height,1-.5/height);NSUInteger k=4*(row*width+column);
+        maximum=fmax(maximum,fmax(fabs(field[k]-x),fabs(field[k+1]-y)));
+        movement=fmax(movement,hypot(x-(column+.5)/width,y-(row+.5)/height));
+    }
+    maxOracleError=fmax(maxOracleError,maximum);
+    if(maximum>=.00006)fprintf(stderr,"%s jaw/short oracle error %.9g\n",name.UTF8String,maximum);
+    Check(maximum<.00006,[name stringByAppendingString:@" actual GPU field vs independently decoded AIR double oracle"]);
+    Check(movement>.0001,[name stringByAppendingString:@" has nonzero covered samples"]);
+}
+static CGPoint Displacement(CIContext *c,CIImage *ramp,CIImage *warped,CGPoint uv) {
+    CGRect e=ramp.extent;CGRect point=CGRectMake(floor(e.origin.x+uv.x*e.size.width),floor(e.origin.y+uv.y*e.size.height),1,1);
+    float a[4],b[4];
+    [c render:ramp toBitmap:a rowBytes:sizeof(a) bounds:point format:kCIFormatRGBAf colorSpace:nil];
+    [c render:warped toBitmap:b rowBytes:sizeof(b) bounds:point format:kCIFormatRGBAf colorSpace:nil];
+    return CGPointMake((b[0]-a[0])*e.size.width,-(b[1]-a[1])*e.size.height);
+}
+static void AnatomicalChecks(CIContext *c,PGFaceProcessor *p,NSDictionary *g,CGRect e) {
+    CIImage *ramp=CoordinateImage(e);NSArray *points=g[@"points76"];
+    CGPoint chin=ReadPoint(points[67]),lip=ReadPoint(points[37]);
+    double ax=(lip.x-chin.x)*e.size.width,ay=(lip.y-chin.y)*e.size.height;
+    for(int sign=-1;sign<=1;sign+=2) {
+        PGBeautySettings s=PGBeautyDefaults();s.faceChin=sign;
+        CIImage *out=[p warpImage:ramp geometry:@[g] settings:s extent:e];
+        CGPoint d=Displacement(c,ramp,out,chin);
+        Check(hypot(d.x,d.y)>.05,@"chin control moves the detected physical chin landmark");
+        Check(sign*(d.x*ax+d.y*ay)<0,@"signed chin direction follows chin-to-lip anchor instead of a fixed image Y axis");
+        BOOL outside=YES,eyesUnchanged=YES;
+        for(NSNumber *index in @[@6,@13]) {
+            CGPoint eye=ReadPoint(points[index.unsignedIntegerValue]);
+            for(NSUInteger i=0;i<3;i++) {
+                CGPoint a=ReadPoint(points[68-i]),b=ReadPoint(points[38-i]);
+                if(hypot(eye.x-a.x,eye.y-a.y)<=hypot(a.x-b.x,a.y-b.y)+.003)outside=NO;
+            }
+            CGPoint shift=Displacement(c,ramp,out,eye);eyesUnchanged &= hypot(shift.x,shift.y)<.002;
+        }
+        Check(outside && eyesUnchanged,@"both physical pupils outside chin supports remain unchanged");
+    }
+}
+static void JawShortAnatomicalChecks(CIContext *context,PGFaceProcessor *processor,NSDictionary *geometry,CGRect extent) {
+    CGPoint points[76];for(NSUInteger i=0;i<76;i++)points[i]=ReadPoint(geometry[@"points76"][i]);
+    CIImage *ramp=CoordinateImage(extent);PGBeautySettings settings=PGBeautyDefaults();settings.faceJaw=1;
+    CIImage *jaw=[processor warpImage:ramp geometry:@[geometry] settings:settings extent:extent];
+    double jawMove=0;NSUInteger origin[]={72,62,71,63,70,64},neighbour[]={71,63,70,64,71,63};
+    for(NSUInteger i=0;i<6;i++){
+        CGPoint movement=Displacement(context,ramp,jaw,points[origin[i]]);jawMove=fmax(jawMove,hypot(movement.x,movement.y));
+        double x=(points[29].x-points[origin[i]].x)*extent.size.width,y=(points[29].y-points[origin[i]].y)*extent.size.height;
+        Check(movement.x*x+movement.y*y<.001,@"jaw inverse sampling moves opposite the physical contour-to-lip direction");
+    }
+    Check(jawMove>.1,@"jaw control acts on a detected lower-jaw contour, not a guessed temple band");
+    // These are anatomical regions reported by public Vision, not positions
+    // picked by the production support formula: pupils and upper contour ends.
+    for(NSNumber *index in @[@6,@13,@59,@75]){
+        CGPoint point=points[index.unsignedIntegerValue];BOOL clear=YES;
+        for(NSUInteger i=0;i<6;i++)if(hypot(point.x-points[origin[i]].x,point.y-points[origin[i]].y)<hypot(points[origin[i]].x-points[neighbour[i]].x,points[origin[i]].y-points[neighbour[i]].y)+.004)clear=NO;
+        CGPoint movement=Displacement(context,ramp,jaw,point);
+        Check(clear&&hypot(movement.x,movement.y)<.002,@"physical pupils/upper-contour temple positions outside jaw supports stay unchanged");
+    }
+    CGPoint lower=CGPointZero;for(NSUInteger i=62;i<=72;i++){lower.x+=points[i].x/11;lower.y+=points[i].y/11;}
+    Check(ReferencePolygonWeight(CGPointMake(lower.x,1-lower.y),points)>.99,@"public lower-contour centroid lies inside the short-face region");
+    double axisX=(points[46].x-points[48].x)*extent.size.width,axisY=(points[46].y-points[48].y)*extent.size.height;
+    for(int sign=-1;sign<=1;sign+=2){
+        settings=PGBeautyDefaults();settings.faceShort=sign;CIImage *shortFace=[processor warpImage:ramp geometry:@[geometry] settings:settings extent:extent];
+        CGPoint displacement=Displacement(context,ramp,shortFace,lower);
+        Check(hypot(displacement.x,displacement.y)>.1,@"short-face changes the physical lower face");
+        Check(sign*(displacement.x*axisX+displacement.y*axisY)<0,@"short-face signed source sampling follows the nose-crest axis; positive visible motion shortens upward");
+        for(NSNumber *index in @[@6,@13,@59,@75]){
+            CGPoint point=points[index.unsignedIntegerValue],motion=Displacement(context,ramp,shortFace,point);
+            Check(ReferencePolygonWeight(CGPointMake(point.x,1-point.y),points)==0 && hypot(motion.x,motion.y)<.002,@"physical pupil/temple beyond short-face distance envelope is unaffected");
+        }
+    }
+}
+static void JawShortSupportChecks(CIContext *context,PGFaceProcessor *processor) {
+    NSDictionary *g=Geometry(0,0);CGPoint points[76];for(NSUInteger i=0;i<76;i++)points[i]=ReadPoint(g[@"points76"][i]);
+    CGPoint probe=CGPointMake((points[72].x+points[29].x)/2,(points[72].y+points[29].y)/2);
+    const unsigned int origins[]={72,62,71,63,70,64},neighbours[]={71,63,70,64,71,63};BOOL outside=YES;
+    for(NSUInteger i=0;i<6;i++)if(hypot(probe.x-points[origins[i]].x,probe.y-points[origins[i]].y)<=hypot(points[origins[i]].x-points[neighbours[i]].x,points[origins[i]].y-points[neighbours[i]].y)+.005)outside=NO;
+    Check(outside,@"radius discriminator lies beyond all adjacent-contour jaw radii");
+    Check(hypot(probe.x-points[72].x,probe.y-points[72].y)<.8*hypot(points[29].x-points[72].x,points[29].y-points[72].y),@"same point would be inside the incorrect lip-distance jaw radius");
+    CGRect e=CGRectMake(-19,23,640,360);CIImage *ramp=CoordinateImage(e);PGBeautySettings settings=PGBeautyDefaults();settings.faceJaw=1;
+    CIImage *out=[processor warpImage:ramp geometry:@[g] settings:settings extent:e];CGPoint d=Displacement(context,ramp,out,probe);
+    Check(hypot(d.x,d.y)<.002,@"jaw uses neighbouring-contour support rather than the lip-anchor distance");
+    NSMutableDictionary *small=[g mutableCopy];NSMutableArray *scaled=[NSMutableArray new];
+    for(NSArray *point in g[@"points76"])[scaled addObject:@[@(.5+([point[0]doubleValue]-.5)*.18),@(.5+([point[1]doubleValue]-.5)*.18)]];small[@"points76"]=scaled;
+    for(NSUInteger i=0;i<76;i++)points[i]=ReadPoint(scaled[i]);
+    Check(ReferenceSizeGain(points,e)==2.25,@"small-face numerical case reaches the recovered gain cap");
+    NumericLocalCase(context,processor,e,small,settings,@"small face jaw max gain");settings.faceJaw=0;settings.faceShort=1;
+    NumericLocalCase(context,processor,e,small,settings,@"small face short max gain");
+    for(NSUInteger i=0;i<76;i++)points[i]=ReadPoint(g[@"points76"][i]);Check(ReferenceSizeGain(points,CGRectMake(0,0,1600,1600))==1,@"large-face numerical case reaches gain floor");
+    // Four full process masks must use exactly the same new warp as the image.
+    [processor setTrackingData:Archive(g) forTarget:0];settings=PGBeautyDefaults();settings.trackingEnabled=1;
+    PGFaceFrame *neutral=[processor processImage:ramp settings:settings time:kCMTimeZero error:nil];
+    for(NSUInteger mode=0;mode<3;mode++){
+        PGBeautySettings shape=settings;shape.faceJaw=mode!=1?1:0;shape.faceShort=mode!=0?-.65:0;
+        PGFaceFrame *frame=[processor processImage:ramp settings:shape time:kCMTimeZero error:nil];
+        Check([Pixels(context,frame.image)isEqualToData:Pixels(context,[processor warpImage:ramp geometry:@[g] settings:shape extent:e])],@"process image uses the new common jaw/short field");
+        NSArray *before=@[neutral.skinMask,neutral.colorMask,neutral.teethMask,neutral.eyeMask],*after=@[frame.skinMask,frame.colorMask,frame.teethMask,frame.eyeMask];
+        for(NSUInteger i=0;i<4;i++)Check([Pixels(context,after[i])isEqualToData:Pixels(context,[processor warpImage:before[i] geometry:@[g] settings:shape extent:e])],@"every image support mask shares the jaw/short coordinate field");
+    }
+}
+static void IndependentImageLandmarkCheck(NSString *path,NSDictionary *geometry) {
+    CGImageSourceRef source=CGImageSourceCreateWithURL((__bridge CFURLRef)[NSURL fileURLWithPath:path],NULL);
+    CGImageRef image=source?CGImageSourceCreateImageAtIndex(source,0,NULL):NULL;if(source)CFRelease(source);
+    VNDetectFaceLandmarksRequest *request=[VNDetectFaceLandmarksRequest new];request.revision=VNDetectFaceLandmarksRequestRevision3;request.constellation=VNRequestFaceLandmarksConstellation76Points;
+    NSError *error=nil;VNImageRequestHandler *handler=image?[[VNImageRequestHandler alloc]initWithCGImage:image options:@{}]:nil;
+    BOOL ok=[handler performRequests:@[request] error:&error];if(image)CGImageRelease(image);
+    VNFaceObservation *face=request.results.firstObject;VNFaceLandmarkRegion2D *all=face.landmarks.allPoints;
+    Check(ok && !error && all.pointCount==76,@"independent public CGImage detection provides76 for physical PNG orientation check");
+    for(NSNumber *index in @[@6,@13,@29,@46,@48,@59,@62,@67,@72,@75]){
+        CGPoint local=all.normalizedPoints[index.unsignedIntegerValue];
+        CGPoint full=CGPointMake(face.boundingBox.origin.x+local.x*face.boundingBox.size.width,face.boundingBox.origin.y+local.y*face.boundingBox.size.height);
+        CGPoint product=ReadPoint(geometry[@"points76"][index.unsignedIntegerValue]);
+        // Separate CGImage and CIImage Vision requests have small conversion
+        // differences. A Y flip, reordered topology or bbox-local point cannot
+        // satisfy this tolerance. Physical PNG top-row is (1-y)*height.
+        Check(hypot(full.x-product.x,full.y-product.y)<.025,@"independent CGImage anatomy agrees on pupils, lips, crest and lower contour in the PNG coordinate system");
+    }
+}
 
 int main(int argc,const char *argv[]) {@autoreleasepool {
     CIContext *c=[CIContext contextWithMTLDevice:MTLCreateSystemDefaultDevice() options:@{kCIContextWorkingColorSpace:NSNull.null,kCIContextOutputColorSpace:NSNull.null}];
@@ -112,6 +309,28 @@ int main(int argc,const char *argv[]) {@autoreleasepool {
         NumericCase(c,p,extents[e],Geometry(yaw[y],roll[r]),1,name);
     }
     NumericCase(c,p,extents[1],Geometry(.6,.2),.5,@"half strength");
+    for(NSUInteger e=0;e<3;e++)for(NSUInteger y=0;y<3;y++)for(NSUInteger r=0;r<2;r++)for(int sign=-1;sign<=1;sign+=2) {
+        double angle=y==0?0:(y==1?1.4:-1.4);
+        NumericSettingsCase(c,p,extents[e],Geometry(angle,r?.45:0),0,sign,
+            [NSString stringWithFormat:@"chin size%lu yaw%lu roll%lu sign%d",(unsigned long)e,(unsigned long)y,(unsigned long)r,sign]);
+    }
+    NumericSettingsCase(c,p,extents[1],Geometry(.4,.2),.8,1,@"thin plus positive chin");
+    NumericSettingsCase(c,p,extents[2],Geometry(-.6,-.2),1,-1,@"thin plus negative chin");
+    NumericSettingsCase(c,p,extents[0],Geometry(0,0),0,.5,@"half positive chin");
+    NumericSettingsCase(c,p,extents[0],Geometry(0,0),0,-.5,@"half negative chin");
+    for(NSUInteger e=0;e<4;e++)for(NSUInteger y=0;y<3;y++)for(NSUInteger r=0;r<3;r++)for(NSUInteger mode=0;mode<3;mode++){
+        PGBeautySettings local=PGBeautyDefaults();if(mode==0)local.faceJaw=1;else local.faceShort=mode==1?1:-1;
+        double angle=y==0?0:(y==1?1.4:-1.4);
+        NumericLocalCase(c,p,extents[e],Geometry(angle,roll[r]),local,
+            [NSString stringWithFormat:@"local size%lu yaw%lu roll%lu mode%lu",(unsigned long)e,(unsigned long)y,(unsigned long)r,(unsigned long)mode]);
+    }
+    PGBeautySettings combined=PGBeautyDefaults();combined.faceThin=.7;combined.faceJaw=.8;combined.faceChin=-.6;combined.faceShort=.75;
+    NumericLocalCase(c,p,extents[2],Geometry(.8,.45),combined,@"ordered thin jaw chin short positive");
+    combined.faceShort=-.75;combined.faceChin=.7;
+    NumericLocalCase(c,p,extents[1],Geometry(-.8,-.45),combined,@"ordered thin jaw chin short negative");
+    combined=PGBeautyDefaults();combined.faceJaw=.5;combined.faceShort=-.5;
+    NumericLocalCase(c,p,extents[1],Geometry(0,0),combined,@"half signed short plus jaw");
+    JawShortSupportChecks(c,p);
     CIImage *image=CoordinateImage(extents[1]);NSData *source=Pixels(c,image);
     PGBeautySettings s=PGBeautyDefaults();s.faceThin=1;s.trackingEnabled=1;NSError *error=nil;
     NSDictionary *g=Geometry(.9,.15);[p setTrackingData:Archive(g) forTarget:0];
@@ -136,6 +355,12 @@ int main(int argc,const char *argv[]) {@autoreleasepool {
         [p setTrackingData:Archive(bad) forTarget:0];frame=[p processImage:image settings:s time:kCMTimeZero error:&error];
         Check(frame!=nil && frame.deformationGeometry.count==1,@"legacy/malformed indexed points retain the valid face record");
         Check([Pixels(c,frame.image) isEqualToData:source],@"legacy/malformed indexed points never trigger a guessed symmetric thin warp");
+        PGBeautySettings chinOnly=s;chinOnly.faceThin=0;chinOnly.faceChin=1;
+        Check([Pixels(c,[p processImage:image settings:chinOnly time:kCMTimeZero error:&error].image) isEqualToData:source],@"legacy/malformed indexed points never trigger guessed bbox chin deformation");
+        PGBeautySettings shortOnly=s;shortOnly.faceThin=0;shortOnly.faceShort=-1;
+        Check([Pixels(c,[p processImage:image settings:shortOnly time:kCMTimeZero error:&error].image) isEqualToData:source],@"legacy/malformed indexed points skip recovered short-face field exactly");
+        PGBeautySettings jawOnly=s;jawOnly.faceThin=0;jawOnly.faceJaw=1;
+        Check([Pixels(c,[p processImage:image settings:jawOnly time:kCMTimeZero error:&error].image) isEqualToData:source],@"legacy/malformed indexed points skip recovered jaw field exactly");
         PGBeautySettings other=s;other.faceNarrow=.5;
         Check(![Pixels(c,[p processImage:image settings:other time:kCMTimeZero error:&error].image) isEqualToData:source],@"other controls remain available in legacy archives");
     }
@@ -158,6 +383,9 @@ int main(int argc,const char *argv[]) {@autoreleasepool {
         Check([real analyzeImage:portrait settings:rs time:kCMTimeZero error:&error],@"real pose analysis saves the complete geometry");
         PGFaceProcessor *copy=[PGFaceProcessor new];[copy setTrackingData:[real trackingDataForTarget:0] forTarget:0];rs.trackingEnabled=1;
         Check([Pixels(c,[copy processImage:portrait settings:rs time:kCMTimeZero error:&error].image) isEqualToData:Pixels(c,f.image)],@"real pose replays from persisted 76 points with identical pixels");
+        AnatomicalChecks(c,real,f.deformationGeometry.firstObject,portrait.extent);
+        JawShortAnatomicalChecks(c,real,f.deformationGeometry.firstObject,portrait.extent);
+        IndependentImageLandmarkCheck(@(argv[index]),f.deformationGeometry.firstObject);
     }}
     printf("PASS: %lu slim alignment checks; maximum UV oracle error %.9g\n",(unsigned long)checks,maxOracleError);return 0;
 }}