FramePort 1.1.0

Gamepads that appear after the start reach a running 2D app; D-pad buttons in the pad layout (#162 )
Agent 85: the game's container gets the host's /dev/input at /dev/fp-input (Lepton's /dev/input holds its own Wayland input pipes) and the launcher's _gamepad_links worker keeps /dev/input/eventN links to Steam Input's virtual pads in step while the game runs: controllers switched off and on again (Steam makes a new pad) work without a restart. Android's EventHub adds and removes the links through inotify (dev Frame, uinput stand-in pad created after boot: New device, Device removed, added again). Older launchers get the new gamepad line through upgrade_launchers. The key layout also maps BTN_DPAD_* (a Steam Input layout that sends the D-pad as buttons, e.g. a stick set to D-pad; the Frame's controllers have no D-pad of their own).
2026-10-13 16:01:35 +02:00 · 2026-10-12 23:44:06 -04:00 · 2026-10-12 23:20:29 -04:00 · 2026-10-12 23:15:07 -04:00 · 2026-10-12 23:04:01 -04:00 · 2026-10-12 22:57:54 -04:00
272 changed files with 16159 additions and 1232 deletions
@@ -38,6 +38,6 @@ body:
    id: logs
    attributes:
      label: Diagnostics
-      description: Drag the FramePort-diag-*.zip here (max 25 MB)
+      description: "Drag the FramePort-diag-*.zip here (max 25 MB). If the box won't take it, submit the report and attach the zip in a comment."
    validations:
      required: true
@@ -1 +1,8 @@
 blank_issues_enabled: true
+contact_links:
+  - name: Questions and ideas
+    url: https://github.com/spoopyghosty0/frameport/discussions
+    about: Setup help, how-to questions and feature ideas go to Discussions.
+  - name: Docs and FAQ
+    url: https://frameport.app/docs/
+    about: Install steps, game folder layouts and common questions.
@@ -40,7 +40,8 @@ jobs:
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
          git checkout -b "$branch"
-          git add "catalog/games/$PKG.yaml"
+          uv run python scripts/patch_docs.py  # docs/PATCHES.md lists the catalog games per patch
+          git add "catalog/games/$PKG.yaml" docs/PATCHES.md site/src/data/patches.json
          git commit -m "catalog: $PKG (from #$ISSUE)"
          git push --force origin "$branch"
          if ! gh pr view "$branch" >/dev/null 2>&1; then
@@ -30,3 +30,8 @@ site/src/assets/media/
 site/media-hq/
 site/public/s
 site/public/setup.sh
+
+# Impeccable design-tool files (kept local, not in the repo)
+/PRODUCT.md
+/DESIGN.md
+/.impeccable/
@@ -69,6 +69,10 @@ Read `docs/PLAYBOOK.md` (symptom → fix) before debugging a game, and `docs/FRA
    Live Frame data comes from one app-owned `app.monitor_hub` (`frame/monitor_hub.py`): subscribers name modules +
    interval, the hub runs one agent `_monitor` stream (union of modules, fastest interval; per-module collection
    needs agent v73), reconnects after a lost stream and stops it when nobody subscribes; `_poll` retries an "error".
+    Games in a sample (agent v81): FramePort's own (launch.sh / container / Proton folder), any other game Steam's
+    reaper runs (`steam:<appid>`, title from the appmanifest, e.g. Job Simulator from Steam's store; not SteamVR, not
+    devkit entries; End game = Steam's Exit game), overlay apps flagged `overlay` and listed last; newest first. The
+    UI takes `frame/monitor.main_game(sample)` (never an overlay app alone). The agent's own workers never count.
    Subscribers: "monitor" (the Monitor tab, everything, only while shown) and "card" = the sidebar's live Frame card
    (`ui/frame_card.py` helpers: battery ring, "now playing" row with fps + 2-min sparkline → click opens Monitor;
    games + battery every 5 s, paused while a job's stage is "Upload…", only while connected and setting
@@ -211,7 +215,14 @@ Rick and Morty runs on the Frame via its catalog recipe (OpenVR, no Revive),
    `FRAMEPORT_DESKTOP=1` skips the Steam-parent watchdog and Steam's display; ensure_host_fixes refreshes entries
    (older installs, stale ones removed), uninstall/purge remove them. Per app: library entry field `desktop_entry`
    (default on; patches don't apply to Linux apps) → game page switch → agent `desktop_entry`. Untested on device.
+  - Scanning: SideQuest backups (`<package>/<time>/apk|obb|data`) and AXRB downloads (`AXRB/<app id>/<binary id>/base.apk`
+    + OBBs/assets; its `patched/`/`*-axrb.apk` PC builds are skipped) are recognised (`sources/quest_dump.py`, FAQ).
  - Quest/Rift twins stay separate entries, shown and named in Steam "Title (Quest)"/"(Rift)" (`core/titles.py`).
+  - Rename… (game menu "Name and artwork", Library right-click; CLI `frameport rename <pkg> "<name>"|--reset`):
+    `pipeline.rename_game` sets `title` + `title_locked` (+ `auto_title` = the automatic name for reset; rescans, Rift
+    store matches and links then only update `auto_title`; a locked name gets no twin suffix); `sync_title` → Frame
+    agent v77 `rename` (deployment.json title, same shortcut appid: upsert matches by Exe) + art + one Steam restart, PC
+    `PcReviveTarget.rename`; an unreachable Frame → `steam_name_stale` (game page "Update name on Frame", next install).
  - `Recipe.as_is` = install unchanged (pre-patched libraries): `pipeline.prepare_as_is`; auto for APKs that already
    contain FrameBridge (`frame_patched`). For Rift it changes nothing (the dump is never modified; the Frame copy
    still gets launch fixes like the crash-reporter rename — `-nocrashreports` alone doesn't stop UE 4.23) — it does
@@ -316,8 +327,17 @@ Games tests: `pytest -m games` (FRAMEPORT_GAMES=<downloads dir>); on-device chec
 native layer test: `FRAMEPORT_NATIVE_TESTS=1 pytest -m native` (compiles with the NDK, ~2 min on NTFS).
 Repo is on an NTFS drive (`core.fileMode=false`); line endings are LF (`.gitattributes`).
 - `FRAMEPORT_HOME=<dir>` isolates all app data (tests use it); `FRAMEPORT_JAVA/_OVERPORT_JAR/_APKSIGNER_JAR` override
-  managed tools. Real app data (WSL): `~/.local/share/frameport` (tools, overport workspace + game keystores, library,
-  artwork, frames.json, the app's SSH key which the dev Frame authorizes).
+  managed tools. **The owner's real app data is the Windows copy's: `%LOCALAPPDATA%\FramePort`** (= `/mnt/c/Users/
+  <user>/AppData/Local/FramePort`; tools, overport workspace + game keystores, library, artwork, frames.json, the app's
+  SSH key which the dev Frame authorizes; moved from WSL's `~/.local/share/frameport` on 2026-10-11, which is now only
+  a stale backup). The desktop shortcut "FramePort (dev)" runs the source checkout natively on Windows
+  (`%LOCALAPPDATA%\FramePort-dev\launch-frameport-dev.vbs`: venv `FramePort-dev\venv` via `UV_PROJECT_ENVIRONMENT`,
+  `uv sync --frozen`, log `FramePort\logs\dev-gui.log`). **WSL runs on that data need `FRAMEPORT_WINDOWS_DATA=1`**
+  (set in `.claude/settings.local.json`; `paths.shares_windows_data`): the data folder becomes the Windows one, saved
+  paths from the other side are translated on load (`paths.localize`: /mnt/d/X <-> D:\X in library.json, tools.json,
+  PC deployment records), Java/Cpp2IL keep one copy per OS (tools.json `java-<os>-<arch>`), and the link handler isn't
+  registered (it would point the Windows copy's links at WSL). Don't run a WSL GUI and the Windows GUI at once
+  (the gui.lock flock/msvcrt locks don't see each other; only the gui.alive heartbeat does).
 - Device checks: `frameport test <pkg>` / `frameport parity-device --results <parity.json> --baseline <launch.txt>
  [--test-only]`; the pre-FramePort baseline is `PATCHED/_known-good-2026-09-28/_frame-state/baseline-launch.txt`.
 - Docs screenshots + videos (docs/SHOWCASE.md): never by hand. `uv run python scripts/showcase/render_docs.py`
@@ -345,6 +365,11 @@ Repo is on an NTFS drive (`core.fileMode=false`); line endings are LF (`.gitattr
  `T.px(n)`, Material defaults through the theme's text_theme; never hardcode a bare pixel number in ui/.
  `scripts/ui_smoke.py --scale 1.5 --viewport 2560x1440` renders it. Flet draws a grey box for invalid layouts (e.g.
  an `expand` child in a `wrap=True` Row).
+- One GUI per data folder (`core/instance.py`, 2026-10-11): `<data>/gui.lock` (flock/msvcrt, pid inside); a second
+  start asks the open window to come to the front (`gui.focus`, read by `_watch_links`) and exits; a lock held with no
+  window (no `gui.alive`) and older than 30 s is a leftover FramePort process and is ended. `main()` ends the process
+  (`os._exit`) once `ft.run` returns: background threads (re-analysis, session triage) used to keep a windowless
+  process running. Session triage shows one pop-up for all games of a burst (`_announce_sessions`).
 - Stopping the GUI: `pkill -f` patterns match your own shell — use `pgrep -f "[b]in/frameport-gui|[f]let-desktop-light"`.

 ## Round-2 polish (2026-10-02)
@@ -622,7 +647,10 @@ shortcuts.vdf and writes once more if Steam put its old copy back (`shortcuts_lo
 auto-repair (`_add_then_play`) crashed (its job got a Job, not a reporter). Uploads resume on a transient OSError.
 Lepton's Android 11 has no clipboard service (134 services; checked with `podman exec … service check clipboard`):
 SDL/LÖVE apps crashed at start → `frame.sdl_clipboard` (`apk/dex.py`: in-place dex edit, nops one invoke, fixes
-the header checksum/signature; verified with LÖVE for Android 11.5, GitHub #24 Dramatic Shape). 2D apps (vr_kind none)
+the header checksum/signature; verified with LÖVE for Android 11.5, GitHub #24 Dramatic Shape). Godot 4.2-4.4 (Kotlin `as ClipboardManager`,
+GitHub #134 EndoparasiticVR) → `frame.godot_clipboard` (nops the `Intrinsics.checkNotNull` before that check-cast; Godot's
+clipboard methods return at once; analysis `godot_clipboard`, ANALYSIS_VERSION 10; checked on real godot-lib/templates
+4.2.2-4.4.1, not on the device; 4.1 and 4.5+ don't throw). 2D apps (vr_kind none)
 keep every suggested patch that isn't about VR (`needs_vr = False`), not a fixed list. FramePort on the Frame:
 `frame/local.py` (127.0.0.1, own key authorized; "This Frame (experimental)"; app data in
 ~/.local/share/frameport-app because ~/.local/share/frameport is the agent's) and Steam library changes wait while
@@ -712,7 +740,7 @@ FrameBridge `snapshot=N` (`snapshot_gl.c`, GLES): every N s the left-eye image t
 own context and saved as `files/fb_snap_0-7.ppm` (quarter size) — headless launches show a black headset view, this
 shows what the game draws. Vader: Lucasfilm logo (an OBB mp4: video works), then its loading card (portrait + segmented
 bar) that never advances; the async loader thread sleeps and OBB reads stop (~168 MB of a 2.7 GB pak).
-**SteamVR overlay apps (agent v75, 2026-10-10):** host OpenVR overlays (VRApplication_Overlay) are composited over Lepton (Quest) games on the Frame (probe checker seen over 4XVR in the headset view, `native/vroverlay_probe`); Windows ones register through Proton's vrclient too (Temporal Reality's Windows build created its overlays; fpsVR never reaches OpenVR under Proton). Detection `analysis/vroverlay.py` (bundled `.vrmanifest` with `is_dashboard_overlay`, else OpenVR + IVROverlay + self-registration markers, engine Other; Rift fingerprint `RIFT_ANALYSIS`), patch `pcvr.vr_overlay` (param autostart), Linux entry fields `vr_overlay`/`vr_overlay_autostart` (game page switch); agent `register_vr_overlay`/`unregister_vr_overlay`/`launch_vr_overlay` (IVRApplications via ctypes, live; manifest `<anchor>/frameport-overlay.vrmanifest`, the app's own key, binary = launch.sh). **SteamVR on the Frame reads only `binary_path_linux_arm`** (binary_path_linux alone is skipped). Overlay apps: no launch test, no Linux Steam-parent watchdog (`FRAMEPORT_OVERLAY`), not a "running game". A Steam overlay-app shortcut and a game shortcut run together. Autostart at the next SteamVR start: not verified yet. Details: docs/FRAME_RUNTIME.md "Overlay apps".
+**SteamVR overlay apps (agent v75, 2026-10-10):** host OpenVR overlays (VRApplication_Overlay) are composited over Lepton (Quest) games on the Frame (probe checker seen over 4XVR in the headset view, `native/vroverlay_probe`); Windows ones register through Proton's vrclient too (Temporal Reality's Windows build created its overlays; fpsVR never reaches OpenVR under Proton). Detection `analysis/vroverlay.py` (bundled `.vrmanifest` with `is_dashboard_overlay`, else OpenVR + IVROverlay + self-registration markers, engine Other; Rift fingerprint `RIFT_ANALYSIS`), patch `pcvr.vr_overlay` (param autostart), Linux entry fields `vr_overlay`/`vr_overlay_autostart` (game page switch); agent `register_vr_overlay`/`unregister_vr_overlay`/`launch_vr_overlay` (IVRApplications via ctypes, live; manifest `<anchor>/frameport-overlay.vrmanifest`, the app's own key, binary = launch.sh). **SteamVR on the Frame reads only `binary_path_linux_arm`** (binary_path_linux alone is skipped). Overlay apps: no launch test, no Linux Steam-parent watchdog (`FRAMEPORT_OVERLAY`), not a "running game". A Steam overlay-app shortcut and a game shortcut run together. SteamVR's SetApplicationAutoLaunch didn't persist on the dev Frame (the watch never started by itself) → **agent v76: FramePort's own autostart**: the deployment's `overlay.autostart` is the source of truth; `ensure_host_fixes` (`ensure_overlay_service`) keeps the user service `frameport-vr-overlays.service` (`_vr_overlay_watch`, 5 s polls of the known vrserver's /proc stat) only while an overlay app has autostart on (register/unregister, uninstall, purge and the kill switch `~/.local/share/frameport/vr-overlays.disabled` / `FRAMEPORT_NO_OVERLAY_AUTOSTART` update it); a new vrserver (pid + start time, kept in `~/.cache/frameport-vr-overlays.json` across agent updates) → child `_vr_overlay_round`: wait for IVRApplications, 15 s grace, `launch_vr_overlay` for apps not running (folder process or GetApplicationProcessId); log `~/.local/share/frameport/vr-overlays.log`. Dev Frame: adopted the running vrserver, skipped the already running watch; a start after a real SteamVR start/boot is not yet seen. Details: docs/FRAME_RUNTIME.md "Overlay apps".
 **Lepton's logcat mirror dies (agent v67, 2026-10-09):** occasionally launch.log ends with `logcat: Unexpected EOF!` right after the game starts (about 1 launch in 50, Lepton 2.8.14 and 3.0.5): no dashboard auto-hide, no launch-test result. launch.sh's `_logcat_keeper` then reads `podman exec lepton-steamlaunch-<appid> logcat` itself into launch.log (up to 5 restarts while the game runs).
 **Double launch (agent v57, 2026-10-06):** a second Play while Lepton still boots (~10 s with nothing to see) made
 the second Lepton stop the first one's container ("Waiting for steamlaunch-<appid> (PID …) to exit", exit 137
@@ -779,6 +807,32 @@ with an index naming modules, `shader_dumps` sends every module of the index's *
 index lines; no index (fp_spirv) = the old newest-by-mtime 4 MB. One JSON line (~40 MB base64) over the SSH channel
 is read whole by `Frame.agent` (fine at that size); `_Writer.fit` drops the least recently used modules last, after
 cutting logs, to stay under the 24 MB zip limit.
+**Unreal OBB check (GitHub #159, 2026-10-10):** Epic's DownloaderActivity checks OBB name+size (OBBData), then with `bVerifyOBBOnStartUp=true` CRCs the whole OBB; its screens are invisible in Lepton (stuck at `Displayed …/.DownloaderActivity`, triage `unreal-obb-check-stuck`) → `frame.unreal_skip_obb_check` (analysis `unreal_verify_obb`, ANALYSIS_VERSION 11) flips the manifest boolean (`axml.set_meta_data_bool`); skips only the CRC pass. Host-tested only.
+**Issue round 2026-10-12 (agent v83):** Lepton pastes STEAM_COMPAT_DATA_PATH unquoted into `sh -c "ln -s …/internal/<pkg>
+/data/data/<pkg>"` (mounting.sh): a game on a card named "Steam Frame 512g" got no internal storage (no saves/prefs;
+Beyond Sandbox's EOS then looped `createKeychain→resetKeychain` forever, 1.85 GB log). Quest launchers with an unsafe
+path now `ln -sfn <base> ~/.local/share/frameport/lepton-paths/<pkg>` at every start and give Lepton that path
+(`app_dir_lines`/`set_app_dir`/`launcher_base`; upgrade_launchers converts; deployment.json keeps the real base).
+Verified on the device with a spaced copy of Stremio (old: the `ln` error; new: /data/data link, shared_prefs
+writable). `frame.eos_keychain_loop` (opt-in, triage `eos-keychain-loop`) returns from EOSSDK.resetKeychain. Wander
+0.3570 (Unity 6.5, Firebase, Gecko) ran out of bionic's 128 pthread keys → `frame.unity_tls_key_pool` (Klownicle's
+approach, #198: libunity's 4 key imports renamed `fp_tkey_*` via `elf.rename_imports`, `libfp_tkeys.so` pools
+destructor-less keys behind one real key); device: past Firestore, 72 fps. Cpp2IL releases can't read metadata v107
+(Unity 6.5) → `tools/cpp2il.py` falls back to the development CI build (nightly.link) on that error. Vermillion's canvas
+is an OVROverlay quad (drawn above the hand) → `frame.vermillion_scene_canvas` (PaintableMesh getters → false;
+installed build checked, 72 fps headless; headset not yet). Linux apps: `desktop_icon` switch, a deleted desktop copy
+stays deleted (#212). Findings: OLAR (#201) RHIThread null deref in libUnreal (`ldr x8,[x19,#792]`, x19=0) not fixed by
+hide_space_warp / vk_hide_fdm / no Valve layers; FNAF HW (#135) "freeze" = first-start GL program-binary-cache compile
+on Zink (threads busy in zink/disk cache), not a hang; VR4 (#199) reporter's patch.203 OBB truncated. Upload benchmark
+(`scripts/upload_bench.py`, #242): home Wi-Fi caps every method at ~11 MB/s; paramiko uses ~3x OpenSSH's CPU; Windows
+OpenSSH refuses FramePort's key file (ACL "bad permissions") until its permissions are tightened.
+**Meta user id (GitHub #182, 2026-10-11):** OVRPort's platform loader (runtimes 3.4.3-23204ea and -aa54c3f) answers
+`ovr_GetLoggedInUserID` (and two other callers) without a Meta account with a made-up id from a helper (`stp; mov x29,
+sp; bl random; …; mov/movk x9 = 0x53444835ec580000 (6e18); add x0, x8, x9; ldp; ret`), kept only in memory → a new id
+every start; Walkabout Mini Golf files saves under `Profiles/Oculus/<id>/` and lost all progress. `frame.ovr_stable_user`
+(default_on, detect = the game has libovrplatformloader.so) rewrites the helper to `mov x0, <6e18 + 32 bits of
+sha256(package, keystore)>; ret`: stable per game and per user (keystores are personal), so online games never see two
+FramePort users as one. Found in every PATCHED build checked. Host-tested only; upstream candidate.
 **Vivox API 31 (GitHub #101, 2026-10-09):** newer Vivox builds (Green Hell VR) call Android 12 AudioManager
 communication-device methods from `com.vivox.sdk.AudioChangeListener` with no SDK check → NoSuchMethodError on Lepton's
 Android 11. `frame.vivox_audio_route` (analysis `vivox_api31`, ANALYSIS_VERSION 4) makes every such method return at
@@ -795,6 +849,22 @@ table comes from dlsym on that handle; also first DT_NEEDED for its direct gl*/e
 built single-view twin (view 0, uniforms copied per draw); eglMakeCurrent resets the per-thread cache. Host-tested only
 (rewriter on all 19 Doom3Quest shaders + glmv.c against a stand-in GL, `tests/test_gl_multiview_fbo.py`); the host's
 Mesa 23.2 llvmpipe has no OVR_multiview. Headset-verified by Xandrix1987 (2026-10-09: HUD/PDA shown, no fps drop) -> in the Doom3Quest catalog recipe.
+**BlazeRush (GitHub #57, Klownicle's verified guide, 2026-10-10; FramePort's version headless-tested only):**
+`frame.blazerush` (1.0.349 only: exec-segment SHA + every word checked, offsets from PT_LOAD) NOPs the avatar-readiness
+wait (0x4b2dbc), RETs the avatar renderer (0x4b2adc), renames `cache/shader_cache` → `cache/br_shader_v1`. GL shim
+(now also exports glShaderSource/glLinkProgram/glProgramBinary/glDeleteProgram/glDraw*: pass-through unless a setting
+is on) `gl_int_attribs` (integer inputs fed via glVertexAttribPointer re-set with glVertexAttribIPointer per draw,
+reflection cached per EGL context + program, dropped on link/binary/delete) and `gl_highp_markers` (vertex shaders with
+every '|' marker: mediump→highp except on in/out/uniform lines); host test `tests/test_blazerush.py` with a stand-in
+GL. FOV: the game reads VrApi props 7/8 right after vrapi_Initialize (no session; the Frame has no
+XR_EPIC_view_configuration_fov) → the bridge saves the live FOV (also located before tracking, headless: 118.87×120.04
+on the dev Frame) in `files/framebridge-vrapi-fov.txt` and answers with it at the next start (log `FOV properties: …
+(saved by an earlier session)`). `device.config_sync` (catalog field `config_sync`, agent v78): user_config.xml
+r_3dwidth/height, r_width/height from the runtime eye size (FrameBridge logs `runtime recommended eye size`) × scale,
+written at finalize, set_settings and by launch.sh before Lepton starts (`_config_sync`). Headless runs at scale 1.7
+end in `zink: DEVICE LOST` right after the bridge's 30 s no-tracking deadline tears the session down (gpu fault at the
+teardown; not at scale 1.0): a headless-only artifact, the headset never hits that deadline. Launch tests count an exit/crash after
+such a line as a pass (triage.yaml `headless_end`, finding `headless-end`; GitHub #57 "Failed to launch" on install).
 **Session triage (agent v70, 2026-10-09):** launch tests never reach FOCUSED, so real play sessions are triaged
 too. list_installed gives each game `last_play` {start, end, test} from `<anchor>/plays.log` (launch tests write a
 `test <unix>` line first → test sessions are only marked); `session_log` returns the newest session's launch.log
@@ -847,6 +917,10 @@ up to 4 s for the link file to be taken before trusting the heartbeat, the windo
 `gui.alive`, and the Windows command runs under `conhost.exe --headless` (plain `-WindowStyle Hidden` flashed a
 console). Screens: `scripts/ui_smoke.py --links --fake-frame --game <pkg>` (tall pages: `--viewport
 1280x7000`; Flutter's popup menu ignores Escape).
+Demo link: the homepage's example button = `deeplink.DEMO_MANIFEST` (https://frameport.app/demo/cool-game.json, published
+from site/public/demo/); every form (https button page, frameport://, framedrop://, pasted) → `InstallRequest.demo`,
+no network (fetch_manifest returns `demo_manifest()`, download refuses), `link_dialog.show_demo` (Install =
+`easter.demo_install`: Cool Game's cover out of the portal; eggs off → "Nice, it works!"), CLI just says so.

 ## Releases, CI, GitHub
 Maintainer-only notes (accounts, credentials, key locations) live in the git-ignored `CLAUDE.local.md`.
@@ -937,5 +1011,7 @@ the unresolved eye distortion, and testing the release bundles on real Windows/m
  fallback (`core/cache.py`). Don't hardcode what can be discovered (e.g. Lepton path via appmanifests).
 - Keep APK edits minimal and byte-stable (parity depends on it). Every new fix: a patch module + a triage signature +
  a PLAYBOOK row + a unit test.
+- New or changed patch, game setting, catalog recipe or triage signature → run `python scripts/patch_docs.py`
+  (regenerates docs/PATCHES.md + site/src/data/patches.json, the site's id → anchor map; a test runs `--check`).
 - Known-good backups of every working APK and the signing keys: `PATCHED/_known-good-2026-09-28/` (don't delete).
 - Your development Frame: `frameport frame info` (remembered in `<user data>/frames.json`); SSH as `steamos@<frame>`.
@@ -28,7 +28,7 @@ Frame, patches each game so it runs there, uploads it and adds it to your Steam

 - **Easy setup:** one line in the Frame's terminal. No root, no password. [What it changes](docs/FRAME_SETUP.md).
 - **One click per game:** patch, upload, add to Steam with artwork and test that it starts.
- **Recipes:** tested patches and settings for 90+ games; other games get suggested patches, each explained in
+- **Recipes:** tested patches and settings for 120+ games; other games get suggested patches, each explained in
  plain words.
 - **Game settings:** sharpness, refresh rate, controllers, 360° video and mixed reality as simple switches.
 - **More than Quest games:** Android apps in a window, Linux apps, PC VR games and Windows programs.
@@ -76,7 +76,7 @@ suggests patches. See the [list of tested games](docs/GAMES.md). Got a game work
 FrameDrop and Valve's own tools install an app as it is. FramePort differs in four ways:

 - **Free and open source** (GPL-3.0). FrameDrop is free (donationware) without published source.
- **Quest games that don't run on the Frame as they are** get converted and patched, with a tested recipe for 90+
+- **Quest games that don't run on the Frame as they are** get converted and patched, with a tested recipe for 120+
  games. The others install the game unchanged.
 - **Windows, macOS and Linux.** FrameDrop is for Windows.
 - **Wi-Fi or a USB cable**, and no **Pair new host** step.
@@ -91,7 +91,7 @@ FrameDrop and Valve's own tools install an app as it is. FramePort differs in fo
 | First connection | One line in the Frame's terminal; it turns on Developer Mode itself. No password | Turn on Developer Mode, then **Pair new host** | Turn on Developer Mode and pair, or use Android's debug tool (adb) |
 | Wireless or cable | Wi-Fi, the Frame's hotspot or a USB cable | Same Wi-Fi network | Wi-Fi, or adb |
 | Quest games that don't run as they are | Converted and patched for the Frame | Installed as they are | Installed as they are |
-| Knows which patches a game needs | Tested recipes for 90+ games, updated without an app update | Not stated | No |
+| Knows which patches a game needs | Tested recipes for 120+ games, updated without an app update | Not stated | No |
 | In the Steam library | Yes, with artwork and tags | As a "Devkit Game" shortcut | As "Devkit Game: &lt;title&gt;"; not with adb |
 | Android apps, Linux apps, Windows programs | All three; Proton (runs Windows programs) is installed for you | All three; install Proton first | Yes; 2D Android apps need an extra file |
 | PC VR games | On your PC; some also on the Frame | Not supported | Not supported |
@@ -1,16 +1,19 @@
+1a4dce5c4a6d0dfc5f20e55ac29e70c73cc2cc124c21ca6a7e1b316e6afb1c79  ./arm64-v8a/libVkLayer_fdm_darken.so
 5becb96ee86fbda0ce98c0e0fd064f8ba092314aceaa400e3dcc785705dc3c23  ./arm64-v8a/libVkLayer_fp_shaderfix.so
 e7554c6343ee2989b0a273ee6230e65c25bfe6499eefd00de19f5f0fee58754f  ./arm64-v8a/libfp_langpack.so
 321da502e0f8f46f0880aad39fe6b84bdef88f925164568814cf704a1b31a577  ./arm64-v8a/libfp_ovrp.so
 40defdaddcda53bd2649eb48076fae1622bfc2bfc88e9e03c94fc8b45af2a4f2  ./arm64-v8a/libfp_ovrtrace.so
+0167c2fde5dfde62897f9d85afc4fc8e97784e988b5b8df6cea8c407240b3424  ./arm64-v8a/libfp_tkeys.so
 e8c0965c188665a4e565e4a3af983ef1866d1cf9225665cc90d8df286bc96ef3  ./arm64-v8a/libfp_vk.so
 383054f8b3b41dde76d062c71856cd3163655e50009c08454bc1793f393ead65  ./arm64-v8a/libfpg.so
 5432674a59d02f411cd853a5dc57e3fa547d1ac518f25bf433fc54c43677177a  ./arm64-v8a/libfpglmv.so
 8a8f6b1da8952cb3933a5b53558424a5fc56043b2527a16bb6dd62a00d2de01a  ./arm64-v8a/libframe_xrshim.so
-fc559dbe0b87eecc3641256837293260cefb7c2ce7b21d808d10edd2a2dba9fc  ./arm64-v8a/libglshim.so
-1655921f4c91f2f336edf0aac66d8df1b2b649a272aafe365c1f2fa7867129de  ./arm64-v8a/libopenxr_loader_generic.so
+19ba5ed3c4b780f5ae46251f6958f552acfc5f13c8bb39f995579593fa8990c6  ./arm64-v8a/libglshim.so
+e44ded778758de33ad87bb31398281d7ec94c1ecd43dcf55b1dc99311f011859  ./arm64-v8a/libopenxr_loader_generic.so
 1feaeafad467c4cafdf2b018a4d84b0bee200c3f711697b4ce97e66a3ba256ca  ./arm64-v8a/libovrplatformcompat.so
-aa4dc0020c77e12d41ef6ce80b23ad90c9cb7e882338eddf2261efe8645cf38d  ./arm64-v8a/libvrapi.so
-7943c6825e1c2841e54627f96acbd0754a3c06bb608c47f7aa15007aec2191a5  ./armeabi-v7a/libopenxr_loader_generic.so
+7f30861c770361a4e311e3f486dcd2e48cd99a7f907961829ce68e24af17d775  ./arm64-v8a/libvrapi.so
+7f30861c770361a4e311e3f486dcd2e48cd99a7f907961829ce68e24af17d775  ./arm64-v8a/libvrapi_foveation.so
+d2361ee8b6ff62d2ff6b3f59f7b15730b95bdbe0e9dcee469ffa1117411e7288  ./armeabi-v7a/libopenxr_loader_generic.so
 1871eae093432d277da4bc751bf5f3269dfcf11f9168260b0c3caadb0dedb19d  ./dex/oculusos-stubs.dex
 b634ab5640e258563c536e658cad87080553df6f34f62269a21d554844e58bfe  ./hevc/COPYING.FFmpeg
 141de01f0d40b97d4f9a720db5ab8ea442f6aa35db5272048899292884994a1c  ./hevc/libstagefrighthw.so
@@ -10,12 +10,14 @@ frame:
 - frame.unity_text_input
 device:
 - device.text_input_window
+adapter:
+  haptic_fix: 1
 verified:
-  date: '2026-10-05'
-  known_good_sha256: 522cfebf954e1cab6054798479b0b32c5ba9e38cca83dd98db2ac0f7e3c0802a
-  app: 0.9.1
+  date: '2026-10-11'
+  known_good_sha256: 0e55a80ed420395b7eaf8075230fad1fae288f6c25d2ce8cc6aa49899e9b7596
+  app: 1.0.4
  overport_cli: 1.2.5
-  frame_build: '20260922.6101926'
-  agent: 48
-  issue: 44
-source_hint: WotW
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 211
+source_hint: Waltz
@@ -1,9 +1,9 @@
 package: com.Armature.VR4
 title: VR4
 status: works
-notes: Installs the no-ForceQuit build and fixes a campaign shader that hung the GPU after the opening cutscene.
-details: Entering the campaign gave a black screen, slowing audio and a crash (Mercenaries loaded). One fragment shader
-  reads a loop counter before setting it, which hangs the GPU; the Vulkan shim zeroes it (vk_shader_fix). The
+notes: Installs the no-ForceQuit build and fixes two campaign shaders that hung the GPU at cutscenes.
+details: Entering the campaign gave a black screen, slowing audio and a crash (Mercenaries loaded). Two permutations of one fragment shader
+  read a loop counter before setting it, which hangs the GPU; the Vulkan shim zeroes it (vk_shader_fix). The
  no-ForceQuit build is kept. Diagnosed and confirmed on a Frame by the reporter of GitHub issue 10.
 tested_version: '2.3'
 engine: Unreal
@@ -14,8 +14,8 @@ use_alt: true
 adapter:
  # one campaign shader reads an uninitialized loop counter and hangs the GPU (black screen, slowing audio, crash);
  # the Vulkan shim inserts two OpStores that zero it and its accumulator (from the reporter's capture, GitHub
-  # issue 10)
-  vk_shader_fix: 6488:5dcd842db8d21e3fdd13ec916d2e34dd0cfdf12a92fffaf8a27115072ef55c59:2624:0x0003003e,138,18,0x0003003e,150,42
+  # issue 10); a second permutation of the same shader (6604 bytes) hung the GPU at a later cutscene (GitHub #140)
+  vk_shader_fix: 6488:5dcd842db8d21e3fdd13ec916d2e34dd0cfdf12a92fffaf8a27115072ef55c59:2624:0x0003003e,138,18,0x0003003e,150,42;6604:a0e6edd8a8e969acbefe1a193f0bc535d8c0c18d004def4c361840a9f2601f13:2956:0x0003003e,122,18,0x0003003e,135,42
 verified:
  date: '2026-10-02'
  known_good_sha256: 40ff74e37264b28ae8826923b69d0731d9620094c76462be34159643d6ae91b3
@@ -24,5 +24,5 @@ verified:
  frame_build: '20260930.6234839'
  agent: 26
  issue: 1
-updated: '2026-10-04'
+updated: '2026-10-11'
 source_hint: Resident Evil 4
@@ -0,0 +1,21 @@
+package: com.GenderGames.Ladder
+title: Ladder
+status: works
+tested_version: Release
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+- frame.unity_runtime_msaa_off
+- frame.unity_gl_shim
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-12'
+  known_good_sha256: 7d23692149d40fe469dbf2e13446ceeb94a8a32807e09ddad7731158de9be0a2
+  app: 1.0.4
+  overport_cli: 1.2.5
+  issue: 243
+source_hint: Ladder
@@ -0,0 +1,23 @@
+package: com.HarmonixMusic.DCVRQuest
+title: Dance Central
+status: works
+tested_version: 1.2.2
+engine: Unreal
+xr: VrApi
+alt_overport:
+- patch_remove_unreal_force_quit
+frame:
+- frame.unreal_skip_obb_check
+- frame.hw_video_decode
+adapter:
+  haptic_fix: 1
+  pose_time_fix: 1
+verified:
+  date: '2026-10-12'
+  known_good_sha256: cbaf2eb594cb25d6a345b50612f9e7ca3e2b2f05abaa072632e8fc0d91277c61
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 228
+source_hint: com.HarmonixMusic.DCVRQuest
@@ -0,0 +1,20 @@
+package: com.InnoverseLtd.FrenzyVR
+title: FrenzyVR
+status: works
+notes: Works, runs good
+tested_version: '107'
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+device:
+- device.text_input_window
+verified:
+  date: '2026-10-11'
+  known_good_sha256: 0d87e78dcbe1c705af0d01cda8eabbea514849f7403e5904f0ef49b5cf0653fb
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 216
+source_hint: Frenzy VR
@@ -0,0 +1,22 @@
+package: com.LocoMotionDevs.Superfly
+title: Superfly
+status: works
+notes: Works, take a bit to launch but works
+tested_version: 1.3.3
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: e180b6c58b80c1c2d0cc49e75d645a41d3d4bc63ed7ffe1e6f91eac51e486a17
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 217
+source_hint: Superfly
@@ -0,0 +1,20 @@
+package: com.PubTest.PubTest
+title: Drunkn Bar Fight 2 - Early Access
+status: works
+notes: Game launches and plays fine
+tested_version: '0.515'
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+device:
+- device.text_input_window
+verified:
+  date: '2026-10-11'
+  known_good_sha256: f340b5ba70ee9368ead6bfe2c287eda6c5686280ddb8e12b8c9a8d720326de36
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 218
+source_hint: Drunkn Bar Fight 2 - Early Access
@@ -0,0 +1,19 @@
+package: com.SchellGames.DieScreaming
+title: SilentSlayer
+status: works
+tested_version: 1.1.2+323863s
+engine: Unreal
+xr: OpenXR
+alt_overport:
+- patch_remove_unreal_force_quit
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: 5cb085909f9a54488543102242f19c5b2f176a1439659a29a9cca04362601f68
+  app: 0.12.0
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 59
+  issue: 176
+source_hint: Silent Slayer - Vault of the Vampire
@@ -0,0 +1,21 @@
+package: com.StatusPro.NFLProEra2
+title: NFL PRO ERA II
+status: works
+tested_version: 2.4.0
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+- frame.unity_runtime_msaa_off
+- frame.unity_gl_shim
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: caf2e8f148ca4929ba5e73112fa7e0958c00d7ee0c5f28926c3f39714db6c923
+  app: 1.0.4
+  overport_cli: 1.2.3
+  issue: 226
+source_hint: com.StatusPro.NFLProEra2
@@ -0,0 +1,23 @@
+package: com.TinyBuild.killitwithfirevr
+title: Kill It With Fire VR
+status: works
+notes: Works
+tested_version: 1.0.5.4208
+engine: Unreal
+xr: OpenXR
+alt_overport:
+- patch_remove_unreal_force_quit
+frame:
+- frame.unreal_skip_obb_check
+- frame.hw_video_decode
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: fcadbdaf3255e2909edf763d0c61fb55808ba448d4f277e91ba37b0a0ff9f497
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 219
+source_hint: Kill It With Fire VR
@@ -0,0 +1,21 @@
+package: com.WfelisCorp.MunkrFunkrTheLegacyDays
+title: Munkr Funkr (The Legacy Days)
+status: works
+tested_version: '2'
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-12'
+  known_good_sha256: 94079c1a2a802322f907058964c4ebbb22edba1dc0f3ec26e3c121ed9d8b0379
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 241
+source_hint: Munkrfunkr
@@ -0,0 +1,25 @@
+package: com.WhiteDoorGames.Cosmodread
+title: Cosmodread
+status: works
+notes: First run wouldn't allow you to interact with the "New Game" button. Restarting it fixed it.
+tested_version: 1.0.0.28
+engine: Unity
+xr: VrApi
+frame:
+- frame.unity_oculus_check
+- frame.unity_text_input
+- frame.unity_runtime_msaa_off
+- frame.unity_gl_shim
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: 44911a4607d0de2770705eefb6339a4c7353cb5dfb49f389d6731edbb9cbea92
+  app: 0.12.0
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 59
+  issue: 174
+source_hint: Cosmodread
@@ -5,6 +5,8 @@ notes: Needed the LAUNCHER category fix.
 details: Source APK is a community 'patch+savefix+90Hz' build. Shares Vader Immortal's Unreal 4 Oculus input (GitHub
  49) - thumbs follow the touches (frame.unreal_thumb_touch) and controller poses are located at the right time
  (pose_time_fix); added 2026-10-09 from Vader's headset results, not yet checked in this game.
+  sync_guard added 2026-10-11 for a vrclient xrSyncActions crash on the loading splash after the intro (GitHub
+  #188; the same runtime race as Myst).
 tested_version: '1.0'
 engine: Unreal
 xr: VrApi
@@ -14,10 +16,11 @@ frame:
 - frame.unreal_thumb_touch
 adapter:
  pose_time_fix: 1
+  sync_guard: 1
 verified:
  date: '2026-09-28'
  overport_cli: 1.2.3
  overport_runtime: 3.4.3-23204ea
  known_good_sha256: 4ce6e3563da131e288645f4b62a634ac98043e55bc42b7c0ad5f461207d5f53c
-updated: '2026-10-09'
+updated: '2026-10-11'
 source_hint: Robo Recall- Unplugged
@@ -2,19 +2,22 @@ package: com.beatgames.beatsaber
 title: Beat Saber
 status: works
 notes: Purchased DLC isn't detected (ownership comes from Meta's servers).
-tested_version: 1.40.8_7379
+tested_version: 1.45.2_28848
 engine: Unity
 xr: OpenXR
 frame:
 - frame.unity_text_input
 device:
 - device.text_input_window
+adapter:
+  haptic_fix: 1
+  pose_time_fix: 1
 verified:
-  date: '2026-10-03'
-  known_good_sha256: ee720e040931f2547f7611e58ec5ad72d86e800dd4cf3135f576019683f2f359
-  app: 0.6.1
+  date: '2026-10-11'
+  known_good_sha256: b7976f36d39b22eb0fd9c8eb6cce204125430cd2a3e2bfab8ba5d1f7c86f0ac6
+  app: 1.0.4
  overport_cli: 1.2.5
-  frame_build: '20260930.6234839'
-  agent: 33
-  issue: 6
-source_hint: Beat Saber
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 210
+source_hint: beat-saber
@@ -0,0 +1,24 @@
+package: com.drawandcode.TaskmasterVR
+title: Taskmaster
+status: works
+notes: Launched and played a few tasks. Seems to work pretty much flawlessly other than some occasionally finicky
+  grip detection - very possible that this is just the game itself though
+tested_version: 1.0.17557.29562
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+- frame.oculusos
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: e3b3c49d77284afb76e9f960828cbfaa4250d66c11b7fd9e4053d489aca662ae
+  app: 1.0.0
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 78
+  issue: 183
+source_hint: Taskmaster VR
@@ -0,0 +1,23 @@
+package: com.greensky.swarm2
+title: Swarm 2
+status: issues
+notes: MSAA creates visible seams around edge geometry and also the skybox edge
+tested_version: '8472'
+engine: Unity
+xr: VrApi
+frame:
+- frame.unity_text_input
+- frame.unity_runtime_msaa_off
+- frame.unity_gl_shim
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-12'
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20260922.6101926'
+  agent: 79
+  issue: 224
+source_hint: SWARM 2
@@ -0,0 +1,25 @@
+package: com.halfbrick.fruitninjavr
+title: Fruit Ninja
+status: works
+notes: Works, launches and plays
+tested_version: 1.7.3.696775
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+- frame.unity_runtime_msaa_off
+- frame.hw_video_decode
+- frame.unity_gl_shim
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: 5afd1383c6f4aab50425bea955202c74e1706a8a8ba4219689ef5b6e0c984318
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 220
+source_hint: Fruit Ninja
@@ -1,15 +1,22 @@
 package: com.ilmxlab.tales
 title: 'Star Wars: Tales from the Galaxy''s Edge'
-status: unknown
-notes: Not working yet - after the intro logos and a loading animation the picture goes black (GitHub issue 61).
-  Gets the controller fixes found for Vader Immortal (same studio) to test.
+status: works
+notes: >-
+  Headset tested for GitHub issue 61: full view, loading into gameplay, both eyes, controller input and sound
+  work with the splash bypass and multiview depth-size fix. Keep the main OBB and all three content/sound-bank PAKs.
 details: Unreal Engine 4 (GLES) by ILMxLAB, like Vader Immortal, but a different engine build - it has none of Vader's
  Quest-only branches (no GetQuestShaderPrecompilePercent or RPOC key map; it precompiles shaders through Unreal's
  own pipeline cache), so frame.unreal_quest_precompile/_keymap don't apply. Its seasons and Wwise banks are Meta
  platform asset files (frame.asset_files). Vader's OVRPlugin findings apply to it as well - poses asked for at
  OVRPlugin's own clock (pose_time_fix) and thumbs from near-touch, which the Frame never reports (frame.unreal_thumb_touch).
-  Ruled out for the black picture so far (see the diagnostics in issue 61) - asset-file paks, Valve's foveation,
-  GL errors; the game's own eye image reads back black.
+  Map travel stalls with the game thread waiting in FlushRenderingCommands and the render thread waiting in
+  FSplash::RenderFrame_RenderThread / ovrp_WaitToBeginFrame. frame.unreal_splash_bypass lets loading finish.
+  SideQuest backups with sibling apk/ and obb/ folders must include all three PAKs; old scans omitted them and
+  lost sound. The scanner and library refresh recover that layout. Eye clipping came from cached Android window
+  dimensions for the depth attachment (1920x1016 versus the 1728x1728 eye color texture).
+  frame.unreal_multiview_depth refreshes both cached dimensions from the current eye render size; multiview and
+  multisampling remain enabled. The two engine fixes check exported symbols, function sizes and instruction bytes
+  before changing one instruction each; unrecognized engine builds are left unchanged.
 tested_version: 1.1.9+734762.cl.439699
 engine: Unreal
 xr: VrApi
@@ -18,10 +25,12 @@ alt_overport:
 frame:
 - frame.asset_files
 - frame.unreal_thumb_touch
+- frame.unreal_splash_bypass
+- frame.unreal_multiview_depth
 adapter:
  pose_time_fix: 1
 verified:
  issue: 61
-updated: '2026-10-09'
-min_app: 0.12.1
+updated: '2026-10-12'
+min_app: 1.0.4
 source_hint: Star Wars- Tales from the Galaxys Edge
@@ -0,0 +1,20 @@
+package: com.innerspacevr.afishermanstale
+title: Fisherman
+status: issues
+notes: Loading screens have corruption, but everything works otherwise.
+tested_version: '1.087'
+engine: Unreal
+xr: VrApi
+alt_overport:
+- patch_remove_unreal_force_quit
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: c645ca6321845bd460b4ff1b8ac871e941adb26d280cccba0285e79e4a96a231
+  app: 0.12.0
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 59
+  issue: 175
+source_hint: A Fisherman's Tale
@@ -0,0 +1,24 @@
+package: com.othergate.doe
+title: Dungeons of Eternity
+status: issues
+notes: It can not connect to servers
+tested_version: '1.3'
+engine: Unity
+xr: OpenXR
+frame:
+- frame.vivox_audio_route
+- frame.unity_text_input
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+  pose_time_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: 006a53b81988f1bb088ccb0847c9e4085ee89743ed6b4d5acf161abf99e30365
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 206
+source_hint: com.othergate.doe
@@ -1,13 +1,12 @@
 package: com.owlchemylabs.jobsimulator
 title: Job Simulator
 status: works
+notes: 'Without Lepton''s Android window: with it, the hands froze after a few seconds (GitHub #193).'
 tested_version: 1.4.0.6515
 engine: Unity
 xr: OpenXR
-frame:
+frame_remove:
 - frame.unity_text_input
-device:
- device.text_input_window
 verified:
  date: '2026-10-03'
  known_good_sha256: 64638d7f93bb93cc61f422a43a08bb0d35b9bb4b463e90a42da7002147f03d1b
@@ -16,4 +15,5 @@ verified:
  frame_build: '20260930.6234839'
  agent: 33
  issue: 11
+updated: '2026-10-11'
 source_hint: Job Simulator
@@ -1,14 +1,13 @@
 package: com.owlchemylabs.vacationsimulator
 title: Vacation Simulator
-status: issues
-notes: Controllers aren't tracked (reported; not yet diagnosed).
+status: works
+notes: 'Without Lepton''s Android window: with it (or after clicking it), the hands stayed on the floor (GitHub
+  #163).'
 tested_version: 1.3.0.40142
 engine: Unity
 xr: OpenXR
-frame:
+frame_remove:
 - frame.unity_text_input
-device:
- device.text_input_window
 adapter:
  haptic_fix: 1
  refresh_rate: 90.0
@@ -20,4 +19,5 @@ verified:
  frame_build: '20261007.6125817'
  agent: 59
  issue: 163
+updated: '2026-10-11'
 source_hint: com.owlchemylabs.vacationsimulator
@@ -1,12 +1,15 @@
 package: com.parkline.wander
 title: Wander
 status: works
-tested_version: '0.3569'
+notes: 0.3570 (Unity 6.5) runs out of thread keys at start without the thread-key pool (fix found by Klownicle,
+  GitHub #198).
+tested_version: '0.3570'
 engine: Unity
 xr: OpenXR
 frame:
 - frame.unity_text_input
 - frame.unity_runtime_msaa_off
+- frame.unity_tls_key_pool
 device:
 - device.text_input_window
 verified:
@@ -17,4 +20,5 @@ verified:
  frame_build: '20260930.6234839'
  agent: 35
  issue: 17
+updated: '2026-10-12'
 source_hint: Wander
@@ -0,0 +1,21 @@
+package: com.poncle.vampiresurvivorsvr
+title: Vampire Survivors
+status: works
+tested_version: 1.0.717
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-12'
+  known_good_sha256: 42c3c18fd6b69a79d9e337d359aa9940428b9193a9ffc3ef987571be6aa6901a
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 234
+source_hint: Vampire Survivors
@@ -0,0 +1,24 @@
+package: com.schellgames.ieytd3
+title: IEYTD3
+status: works
+tested_version: 1.0.1.211419 (ReleaseCandidate_1.0.0_QuestStore)
+engine: Unity
+xr: VrApi
+frame:
+- frame.unity_no_msaa
+- frame.unity_text_input
+- frame.unity_runtime_msaa_off
+- frame.unity_gl_shim
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: 06f901ae22f7c07a79e11fc1af6b3941a51bbc99624336d6a0939f9593f3bfa0
+  app: 0.12.1.dev263
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 78
+  issue: 181
+source_hint: 2026-10-08T23-57-41.310Z_211419
@@ -0,0 +1,18 @@
+package: com.square_enix.android_meta.trianglexr
+title: TRIANGLE STRATEGY
+status: works
+notes: Works in XR, with and without Arcturus Vision color (switched while playing).
+tested_version: '1.0'
+engine: Unreal
+xr: OpenXR
+alt_overport:
+- patch_remove_unreal_force_quit
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-10'
+  known_good_sha256: 86e8297adeb4056eecfbc175438ef25387df67dd0a15ae79afbe6f2e67319a0c
+  app: 0.12.0
+  overport_cli: 1.2.5
+  issue: 171
+source_hint: com.square_enix.android_meta.trianglexr
@@ -0,0 +1,24 @@
+package: com.themunky.drunknbarfightQuest
+title: Drunkn Bar Fight
+status: works
+notes: Works
+tested_version: '11.00'
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+- frame.unity_runtime_msaa_off
+- frame.unity_gl_shim
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: a66895bf0fde60a7ccd9bea6b8b1e922650cf1692fe26c1d08bee5b5c866b8b6
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 222
+source_hint: Drunkn Bar Fight
@@ -0,0 +1,23 @@
+package: com.viewerready.totallybaseball
+title: Totally Baseball
+status: works
+notes: Game Launches and works
+tested_version: '2.5886'
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+- frame.oculusos
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-11'
+  known_good_sha256: 80d53ee2c59cd1846e42a1c309bd8b0c365841d0aaea4092854fa01d2902a839
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 223
+source_hint: TOTALLY BASEBALL
@@ -0,0 +1,23 @@
+package: com.vrmonkey.skyclimb
+title: MacacoVR
+status: issues
+notes: 2d loading screens are glitchy, otherwise main gameplay is fine
+tested_version: '1.1325'
+engine: Unreal
+xr: OpenXR
+alt_overport:
+- patch_remove_unreal_force_quit
+frame:
+- frame.unreal_skip_obb_check
+- frame.hw_video_decode
+adapter:
+  haptic_fix: 1
+verified:
+  date: '2026-10-12'
+  known_good_sha256: 78de47cf0200a6e8e06feeef4a02da0737393b5007e71ba8f62f01dfa93cec0a
+  app: 1.0.4
+  overport_cli: 1.2.5
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 236
+source_hint: MacacoVR
@@ -0,0 +1,17 @@
+package: org.timecrisis2.arcadevr
+title: Time Crisis II VR (Test)
+status: works
+tested_version: 0.2.0
+engine: Other
+xr: OpenXR
+frame:
+- frame.sdl_clipboard
+verified:
+  date: '2026-10-10'
+  known_good_sha256: 7829a4cb84298a03ebe539b893916a962aecc4119f189f9fa9ceeab24c747bc5
+  app: 0.12.0
+  overport_cli: 1.2.3
+  frame_build: '20261007.6125817'
+  agent: 59
+  issue: 173
+source_hint: TimeCrisis2VR-v0.2.0-quest3
@@ -1,18 +1,41 @@
 package: ru.targem.blazerush
 title: BlazeRush
-status: unsupported
-notes: Starts and reaches the menu room, but the room shows no controllers and ignores all input (it all reaches
-  the game); no fix yet.
+status: works
+notes: From Klownicle's guide (GitHub issue 57); FramePort's version verified in a Steam Frame headset (2026-10-11).
+  Menus and racing controls, car bodies and controllers, particle effects, the full field of view and a sharp,
+  correctly placed picture.
+details: 'Seven fixes from the guide. frame.blazerush (this exact build only) skips the menus'' wait for a Meta avatar,
+  which never comes on the Frame, so the game creates its own controllers, and gives its shader cache a new folder
+  (cache/br_shader_v1) so programs compiled before the shader fixes aren''t reused. The GL shim feeds integer vertex
+  inputs (bone indices) as integers (gl_int_attribs: car bodies and controllers were invisible) and computes the
+  particle vertex shaders in highp (gl_highp_markers: streaks and flashes). The game reads the field of view once at
+  start, before tracking: the VrApi bridge answers with the FOV of the previous session (FramePort''s launch test
+  after the install is one), not 90x90 degrees. scale 1.7 keeps the wider view sharp (about 2.9x the pixels).
+  device.config_sync keeps the resolution saved in user_config.xml at the eye-buffer size, else the picture is
+  displaced with black borders after a scale change.'
 tested_version: 1.0.349
 engine: Other
 xr: VrApi
 frame:
 - frame.vrapi_bridge
 - frame.avatar_stub
+- frame.gl_shim
+- frame.blazerush
+adapter:
+  scale: 1.7
+  gl_int_attribs: 1
+  gl_highp_markers: in uvec2 inBoneIndices;|uniform InstanceData|void main()
+  gl_hide_multiview: 0
+  gl_hide_msrtt: 0
+config_sync:
+  user_config.xml:
+    r_3dwidth: w
+    r_3dheight: h
+    r_width: h*16/9
+    r_height: h
 verified:
-  date: '2026-10-06'
-  known_good_sha256: 7cbd5d4252788ccd3c95b5c1841dcc798ea029d687938c024e33bd698ba17671
-  app: 0.12.0
-updated: '2026-10-06'
-min_app: 0.12.0
+  date: '2026-10-11'
+  issue: 57
+updated: '2026-10-11'
+min_app: 1.0.0
 source_hint: BlazeRush
@@ -0,0 +1,25 @@
+package: xyz.TheAviary.Vermillion
+title: Vermillion
+status: issues
+notes: Runs. The canvas used to hide the hand and brush while painting (the Frame draws the game's canvas layer in
+  front of everything); the recipe makes the game draw canvases in the scene instead (fix found by Klownicle, GitHub
+  #200). Not yet confirmed in the headset with this patch.
+tested_version: 1.7.2
+engine: Unity
+xr: OpenXR
+frame:
+- frame.unity_text_input
+- frame.vermillion_scene_canvas
+device:
+- device.text_input_window
+adapter:
+  haptic_fix: 1
+  scene_emul: 1
+verified:
+  date: '2026-10-11'
+  app: 1.0.1
+  frame_build: '20261007.6125817'
+  agent: 79
+  issue: 200
+updated: '2026-10-12'
+source_hint: Vermillion - VR Painting
@@ -6,6 +6,19 @@
 # with diagnostics. Launch tests and real play sessions (agent session_log, `frameport session`) are both matched.
 # Sources: every failure we hit porting 34 games to the Steam Frame (see docs/PLAYBOOK.md).
 signatures:
+  - id: vrapi-frame-rejected
+    pattern: 'OVRPortVrApi:\s+Unsupported frame flags or swap interval'
+    severity: fatal
+    diagnosis: The VrApi bridge rejected the game's frame options, so no picture reaches the headset even though frame pacing can appear in the log. Rebuild and reinstall with the updated bridge; it accepts the old texture-density debug flag used by The Climb (GitHub #238). Other unsupported options are logged with their flags and swap interval.
+    suggest: [frame.vrapi_bridge]
+  - id: foveation-instance-skipped
+    pattern: 'fdm_injection_CreateInstance: skipped'
+    severity: info
+    diagnosis: Valve's foveation layer skipped a Vulkan instance. This may be a helper instance; it does not prove
+      that every game render pass lacks foveation. Compare with instance-created and render-pass diagnostics.
+      For a compatible renderer, Customize > Eye-tracked foveation > Eye-tracked explicitly enables injection.
+      Verify image quality and GPU time before retaining it; a loaded layer alone is not proof of active foveation.
+    suggest: []
  - id: no-launcher
    pattern: 'APP_ACTIVITY is empty'
    severity: fatal
@@ -41,6 +54,17 @@ signatures:
    severity: fatal
    diagnosis: The game's graphics crashed a few seconds after start. Its render thread jumped to address 0x10000 in the Frame's GL driver (Mesa/Zink), which reads past a render-pass cache when a game uses multisampled render-to-texture (Unreal's mobile MSAA, for example Star Wars Pinball VR); the GL shim hides that extension.
    suggest: [frame.unreal_gl_shim, frame.unity_gl_shim]
+  - id: unreal-splash-frame-stall
+    pattern: '(?s)\A(?=.*CSxrSession::WaitFrame)(?=.*FSplash::RenderFrame_RenderThread)(?=.*FlushRenderingCommands)'
+    severity: error
+    diagnosis: Unreal's map loading waits for rendering while its separate Oculus splash waits for an unbegun VR frame (Tales from the Galaxy's Edge, issue 61). Bypass the splash renderer to let loading finish; the last image stays visible during loading.
+    suggest: [frame.unreal_splash_bypass]
+  # Attachment sizes captured by the issue 61 GL diagnostic probe, not ordinary launch logs.
+  - id: unreal-multiview-depth-size
+    pattern: '(?s)\A(?=.*ViewLog[^\n]*attachment 8ce0[^\n]*renderbuffer=1728x1728)(?=.*ViewLog[^\n]*attachment 8d00[^\n]*renderbuffer=1920x10(?:16|20))'
+    severity: warning
+    diagnosis: The measured multiview depth attachment keeps the initial Android window dimensions and clips the taller eye color target (Tales from the Galaxy's Edge, issue 61). Refresh Unreal's cached depth dimensions from its eye render size; menu panels use separate layers and remain intact.
+    suggest: [frame.unreal_multiview_depth]
  - id: pac-unpaired
    pattern: 'ILL_ILLOPN\), fault addr 0x[0-9a-f]+ \(\*pc=0xd50323bf\)'
    severity: fatal
@@ -74,7 +98,8 @@ signatures:
    diagnosis: Android's debug checks stopped the game. CheckJNI is on because the converted app is debuggable, and it aborts on sloppy JNI use.
    suggest: [frame.nodebug]
  - id: force-quit
-    pattern: 'System\.exit|ForceQuit|FAndroidMisc::RequestExit'
+    # not Android's own WebView helper, which calls System.exit at every container boot (GitHub #179)
+    pattern: '(?m)^(?!.*WebViewLoader).*System\.exit|ForceQuit|FAndroidMisc::RequestExit'
    severity: error
    diagnosis: The game quit itself right after starting. Usually Unreal's ForceQuit after a failed Quest platform check; the alternate build leaves it out.
    suggest: [patch_remove_unreal_force_quit]
@@ -154,6 +179,11 @@ signatures:
    severity: fatal
    diagnosis: The app crashed at start because the Frame's Android has no clipboard. SDL apps (SDL2 / LÖVE) need Android's clipboard service, which Lepton lacks.
    suggest: [frame.sdl_clipboard]
+  - id: godot-no-clipboard
+    pattern: 'non-null type android\.content\.ClipboardManager(?:.*\n){1,4}?.*at org\.godotengine\.godot\.Godot\b'
+    severity: fatal
+    diagnosis: The app crashed at start because the Frame's Android has no clipboard. Godot 4 apps (Godot 4.2 to 4.4) expect Android's clipboard service, which Lepton lacks.
+    suggest: [frame.godot_clipboard]
  - id: controller-profile-rejected
    pattern: 'PATH_UNSUPPORTED.*xrSuggestInteractionProfileBindings|xrSuggestInteractionProfileBindings.*(-48|PATH_UNSUPPORTED)'
    severity: info
@@ -193,6 +223,20 @@ signatures:
    diagnosis: Meta's avatar library stopped the game because it needs Meta's Horizon app. A do-nothing stand-in lets the game run without Meta avatars (for example BlazeRush).
    suggest: [frame.avatar_stub]
    supersedes: [native-crash, java-crash]
+  - id: vrapi-fov-before-tracking
+    pattern: 'OVRPortVrApi: FOV properties: [0-9.]+ x [0-9.]+ degrees \(default, nothing known before tracking\)'
+    severity: info
+    diagnosis: The game read the field of view right after starting VrApi, before the Frame's runtime could tell it, and
+      got 90x90 degrees (a narrow, square view if it keeps that value, for example BlazeRush). The VrApi bridge saves the
+      headset's real FOV for the next start (framebridge-vrapi-fov.txt in the game's files); start the game once more.
+    suggest: []
+  - id: gl-integer-attribs
+    pattern: 'GLShim: int attribs: program \d+ location \d+: floats -> glVertexAttribIPointer'
+    severity: info
+    diagnosis: The game feeds integer shader inputs (for example bone indices) through glVertexAttribPointer; the GL shim
+      sets them up as integers (gl_int_attribs), else the Frame's GL driver converts them to floats and skinned models
+      vanish (for example BlazeRush's cars and controllers).
+    suggest: []
  - id: vrapi-symbol-missing
    pattern: 'cannot locate symbol "vrapi_\w+"'
    severity: fatal
@@ -288,6 +332,41 @@ signatures:
    diagnosis: The game's Vivox voice-chat SDK calls Android 12 audio-routing methods (AudioManager communication devices) without checking the Android version; Lepton runs Android 11, so the app crashes (for example Green Hell VR). The patch makes Vivox's audio-route check return early (voice chat keeps the default route).
    suggest: [frame.vivox_audio_route]
    supersedes: [java-crash]
+  - id: lepton-data-link-failed
+    pattern: "ln: cannot create symbolic link from '[^']*' to '/data/data/|Couldn't create directory for SharedPreferences file /data/user/0/"
+    severity: fatal
+    diagnosis: The game has no internal storage (saves, settings) inside Lepton. Usually its folder's path has a space (a microSD card named for example "Steam Frame 512g"), which Lepton's own scripts can't handle; FramePort's launcher (agent 83 and newer) gives Lepton a path without spaces. Connect FramePort once so the launcher is updated, then start the game again.
+    report: true
+    supersedes: [java-crash, native-crash]
+  - id: bhaptics-permission-prompt
+    pattern: 'GrantPermissionsActivity: Permission grant result .*permission=android\.permission\.BLUETOOTH_CONNECT'
+    severity: error
+    diagnosis: The game asked for Android 12's Bluetooth permission (bHaptics' vest SDK, for example Yupitergrad). Lepton runs Android 11, so Android's permission screen opens for a moment, the game is paused, and Meta's OVRPlugin may stop drawing (a frozen loading screen). The patch makes that request return at once.
+    suggest: [frame.bhaptics_permission]
+  - id: eos-keychain-loop
+    pattern: 'LogEos: Resetting EOS SDK keychain: Failed to create'
+    severity: error
+    diagnosis: Epic Online Services can't save its login keychain and retries without end (a start that never finishes, 100 % CPU). The usual cause is missing internal storage (see lepton-data-link-failed); the patch stops the loop, and EOS then reports the failure to the game once.
+    suggest: [frame.eos_keychain_loop]
+  - id: pthread-keys-exhausted
+    pattern: 'cannot create thread specific key'
+    severity: fatal
+    diagnosis: The game ran out of thread keys (Android allows 128 per process; Unity 6 plus large native libraries such as Firebase or Gecko, and the Frame's own graphics/OpenXR libraries, use them up), so a library aborted at start (for example Wander in Firebase's Firestore). The patch lets Unity's keys without a clean-up function share one real key.
+    suggest: [frame.unity_tls_key_pool]
+    supersedes: [native-crash]
+  - id: unreal-obb-check-stuck
+    pattern: 'Displayed \S+/\S*DownloaderActivity\b'
+    # the downloader returned (the engine's main init resumed, OpenXR started) or the game crashed (its own finding)
+    unless: 'xrCreateInstance|xrCreateSession|FrameBridge: pacing:|Resuming main init|Fatal signal \d+|FATAL EXCEPTION'
+    severity: fatal
+    diagnosis: >-
+      The game stays on Unreal's OBB check screen (DownloaderActivity), which the Frame doesn't show, and never
+      starts VR (for example Contractors, GitHub #159). Unreal checks that the data file (.obb) has the name and size
+      this APK expects, and with bVerifyOBBOnStartUp it also reads the whole file to check it; a failed check waits
+      on an error screen. "Unreal - start without the OBB check" skips the content check. If the game still stops
+      here, the OBB doesn't match this APK version - copy the APK and the OBB from the same install, add the game
+      again and reinstall.
+    suggest: [frame.unreal_skip_obb_check]
  - id: native-crash
    pattern: 'Fatal signal (\d+) \(SIG[A-Z]+\)'
    severity: fatal
@@ -308,6 +387,12 @@ signatures:
    severity: fatal
    diagnosis: 'Games can''t start until the Frame restarts: it ran out of kernel keys. Rootless podman leaks one session keyring per container start; the FramePort agent sets keyring=false in ~/.config/containers/containers.conf, and a reboot frees the leaked keys.'
    suggest: []
+  - id: app-not-started
+    pattern: 'Target app \(.*\) did not start'
+    severity: error
+    diagnosis: Lepton didn't start the game this time, which happens now and then on the first start after an install. Start it again; if it never starts, attach diagnostics.
+    suggest: []
+    supersedes: [force-quit]
  - id: container-not-started
    pattern: "is not a running context|OCI runtime error"
    unless: 'Boot complete!'  # Lepton 3.x prints the error while its container is still starting, then boots fine
@@ -319,6 +404,11 @@ signatures:
    severity: fatal
    diagnosis: The game can't read its own data files (OBB/data folder) - they are incomplete or from another version of the game than the APK. Copy the whole data folder again from the same install as the APK, add the game again and reinstall.
    suggest: []
+  - id: fmod-bank-missing
+    pattern: 'Error loading FMOD bank "/(sdcard|storage/emulated/\d+)/Android/obb/[^"\r\n]+\.bank": (ERROR|ERR_[A-Z_]+)\b'
+    severity: fatal
+    diagnosis: The game can't load its external sound banks, so it may show a file-loading error even while rendering frames. Copy the whole obb folder from the same backup as the APK, including the .bank files (not just .obb files). Keep apk/ and obb/ beside each other, add the backup folder again and reinstall.
+    suggest: []
  - id: permission-denied-save
    pattern: 'Permission denied.*(Android/data|/sdcard)|EACCES.*Android/data'
    severity: warning
@@ -424,6 +514,12 @@ signatures:
    severity: error
    diagnosis: The game can't write to a folder it created, so it may quit at start (for example SUPERHOT's cloud/data, mode 1700). FramePort's launcher (agent 41 or newer) gives such folders owner and group write permission before and during every launch; reinstall the game to get the new launcher. A folder the game creates and checks in the same moment on its very first start can't be repaired in time, so start the game again.
    suggest: []
+  - id: startup-save-permission
+    pattern: '(?s)UnauthorizedAccessException: Access to the path "/(?:sdcard|storage/emulated/0)/Android/data/[^"\r\n]+/files/cloud/data" is denied\.[^\n]*(?:\n[^\n]*){0,25}?StartupLoading\+<Start>'
+    severity: fatal
+    diagnosis: The startup routine stopped because it couldn't create the cloud-save directory, so the game stays on its loading screen even while rendering frames (Jurassic World Aftermath). The launcher's permission repair happens after this first-start error; close the game and start it again without uninstalling. Agent 84 prepares the cloud-save directory before startup to avoid this race on fresh installs.
+    suggest: []
+    supersedes: [save-folder-permission]
  - id: surface-swapchain-emulated
    pattern: 'surface_emul: emulated Android surface swapchain'
    severity: info
@@ -442,6 +538,13 @@ signatures:
      the video was decoded in software instead, which is slow for 4K/8K. Turn off hardware video decoding in Steam's
      settings, restart Steam, then start the game again.
    suggest: []
+# Launch tests run without a worn headset. Some parts give up on tracking after a while and end the VR session; what
+# the game does after that (often a crash in the GPU driver while its renderer tears down) never happens in the
+# headset. In a launch test that already had paced frames before such a line, a later exit or crash still passes,
+# with a note (finding `headless-end`). Play sessions ignore this list.
+headless_end:
+  - label: the VrApi bridge's 30 s tracking deadline
+    pattern: 'EnterVrMode: no tracked head pose before deadline'
 milestones:  # progress markers, in order; the furthest one reached is reported
  - {id: pcvr-launch, kind: pcvr, pattern: 'FramePort: launching|Launched injector with', label: Launcher started}
  - {id: pcvr-oculus-hmd, kind: pcvr, pattern: 'FramePort oculushmd: OculusHMDConnected event ready', label: Oculus headset event provided}
@@ -450,7 +553,7 @@ milestones:  # progress markers, in order; the furthest one reached is reported
  - {id: pcvr-openxr, kind: pcvr, pattern: 'wineopenxr: .*[Ss]ession|LibReviveXR|Revive.*OpenXR|xrCreateSession', label: OpenXR reached}
  - {id: pcvr-session, kind: pcvr, pattern: 'xrCreateSession|XR_SESSION_STATE_(READY|SYNCHRONIZED)', label: OpenXR session created}
  - {id: container, pattern: 'Boot complete!', label: Lepton container started}
-  - {id: process, pattern: 'Start proc \d+:', label: App process started}
+  - {id: process, pattern: 'Start proc \d+:(?!WebViewLoader|com\.android\.|android\.)', label: App process started}
  - {id: adapter, pattern: 'FrameBridge: scale=', label: FrameBridge adapter loaded}
  - {id: instance, pattern: 'xrCreateInstance result=0', label: OpenXR instance created}
  - {id: session, pattern: 'xrCreateSession|session state=1|Created OpenXR session', label: OpenXR session created}
@@ -40,6 +40,9 @@ games/<pkg>/target/          from the Frame (or the PC): launch.sh, settings.con
                             ReviveInjector.txt / steam-<appid>.log / game-log-N.txt (PC VR), files.json (+ missing)
                             (game-log-N.txt: Unreal Saved/Logs + crash summaries, Unity Player.log / Player-prev.log /
                             output_log.txt + crash error.log from the Proton prefix, agent v67)
+                             threads.txt (agent v79): saved while a Quest game runs (e.g. hangs), each thread's
+                             state, CPU ms over 2 s, kernel wait and syscall, plus its TCP sockets (remote = loopback /
+                             local / internet + port, no addresses); read once from /proc, the game isn't paused
 games/<pkg>/target/shaders/  shader dumps (agent v72), when the game wrote any:
    fp_vk_shaders/           adapter vk_shader_dump=1 (Vulkan shim): <size>_<sha256>.spv + index.txt
    fp_spirv/                adapter zink_shader_dump=1 (OpenGL ES, shader-fix layer under Zink): <size>_<sha256>.spv
@@ -25,3 +25,180 @@ Games/                                  ← scan this folder (Add games → Scan

 Not sure of the package name? It's in the OBB file names (`main.<version>.<package name>.obb`), and the game's page
 shows it under **Details**.
+
+## Can I scan SideQuest backups or AXRB downloads directly?
+
+Yes. Scan the folder as it is; FramePort finds the APK and its OBB files in both layouts:
+
+```tree
+SideQuest Backups/                      ← scan this folder
+└── com.Armature.VR4/                   ← one folder per game (the package name)
+    └── 2026-10-07T02-10-19-171Z/       ← one folder per backup
+        ├── apk/com.Armature.VR4.apk    ← the game
+        ├── obb/                        ← its OBB files, sent to the Frame
+        │   ├── main.203.com.Armature.VR4.obb
+        │   ├── patch.203.com.Armature.VR4.obb
+        │   └── VR4-Android-Shipping-arm64.apk   ← ignored (not a second game)
+        ├── data/                       ← the app's own files on the Quest: not needed
+        ├── icon.png
+        └── manifest.json
+
+AXRB/                                   ← AXRB's download folder (Downloads/AXRB): scan this folder
+├── 1234567890/                         ← AXRB's numbers for the game and the build
+│   └── 987654321/
+│       ├── base.apk                    ← the game
+│       ├── main.203.com.Armature.VR4.obb   ← sent to the Frame, with any other files here (DLC)
+│       └── patch.203.com.Armature.VR4.obb
+└── patched/                            ← AXRB's own PC builds: ignored
+```
+
+- **Several backups of one game:** FramePort uses the newest one. To use another, scan just that backup's folder.
+- **AXRB's patched builds** (`patched/`, `*-axrb.apk`) are converted for AXRB's PC runtime and lack the game's data, so
+  FramePort skips them and, on the next scan, replaces a game that was added from one with the original download.
+- **AXRB export ZIPs:** unpack them first. A game's ZIP holds `base.apk` and `Android/obb/<package>/`, which FramePort
+  finds as is.
+- **"Game data (.obb) is missing" on the game's page** although you have the file: the backup didn't include it (copy
+  the game's `Android/obb/<package>` folder from the Quest with SideQuest), or it sits in a folder FramePort doesn't
+  look in. Then use the layout in the previous answer.
+- **The game starts and stops at once (Steam shows Resume):** add the game again from its original download or
+  backup, click **Update on Frame**, then report it (last answer on this page) if it still stops.
+
+## Where are a game's settings in FramePort?
+
+Every game has three places; the answers below refer to them.
+
+- **Game settings:** right-click the game in the **Library** → **Game settings…**. Sharpness, refresh rate,
+  controllers, menus and more, in plain words. Changes apply the next time the game starts.
+- **Patches:** click the game in the **Library** to open its page, then **Customize** (in the **Patches** section).
+  Turn a patch on or off, then click **Update on Frame** at the top of the page.
+- **The game's menu:** the **…** button at the top of its page (or right-click in the Library → **More actions…**).
+  It has **Reset to suggested recipe…** and **Report a problem…**, among others.
+
+The sidebar has two tabs for troubleshooting: **Monitor** (the running game's frame rate, CPU and graphics) and
+**Files** (each installed game's storage on the Frame, under **Game storage**).
+
+## A game doesn't work right. Where do I start?
+
+1. **Update FramePort** (it offers updates itself; Settings → Updates), then open the game's page: if it shows
+   **Update on Frame**, click it. Recipes and patches improve often.
+2. **Read the game's page.** The last launch test and your last play session (**Last session**) leave their result
+   there, often with a suggested patch or setting and a button that applies it. Try that first.
+3. **Changed patches yourself?** The game's menu → **Reset to suggested recipe…** brings back the tested ones.
+4. **Find your symptom below.** Each answer says how to tell what's wrong and what to do.
+5. **Still stuck?** Report it (last answer on this page).
+
+## The game doesn't start, or stops right away
+
+How to tell: the game's page shows the last launch test's result (**Last launch test:** …) with an explanation, and
+Steam returns to **Play** or **Resume** within seconds.
+
+- **"Game data (.obb) is missing"** on the game's page: FramePort didn't find the game's data files, so they never
+  reached the Frame.
+  1. Find the game's `.obb` files (named like `main.<version>.<package>.obb`).
+  2. Put them in a folder named exactly the package name (shown in the file names) next to the game's APK, as in the
+     first answer on this page.
+  3. Library → **Add games** → **Scan a folder…** and pick the game's folder.
+  4. Open the game's page and click **Update on Frame**.
+- **"Lepton didn't start the game this time"**, or it failed only on the first start after an install: click **Play**
+  again.
+- **"This game is 32-bit only"**: the Frame can't run 32-bit apps, and no patch changes that. Look for a PC VR version
+  of the game.
+- **"The game quit itself right after starting"**: open the game's page and click **Update on Frame** so the suggested
+  patches apply (many games check for a Quest at start, and a patch removes that).
+- **Nothing like that, or it still fails:** report it.
+
+## It hangs on a logo, a black screen or a loading screen
+
+How to tell what it's doing: leave it running and open **Monitor** in FramePort's sidebar.
+
+- **CPU or graphics busy:** it's still working, often preparing its shaders on the first start. Wait up to 10 minutes
+  once; the next start is quicker.
+- **CPU and graphics near zero:** it's stuck waiting for something. While it still hangs, open the game's menu →
+  **Report a problem…** and save the diagnostics: that zip shows what each of the game's threads waits for (FramePort
+  1.0.1 and newer), which a zip saved after quitting can't. Attach it to the report.
+- **The game starts with a video** and hangs at its logo: game page → **Customize** → turn off **Hardware video
+  decoding** → **Update on Frame**, and try again.
+
+## The picture is wrong
+
+Most picture problems have a setting or a patch. Change one thing at a time, then start the game again (patches also
+need **Update on Frame**).
+
+| You see | Try |
+|---|---|
+| Something shows in one eye only, or one eye is gray (Unity games) | Game page → **Customize** → [Unity: render each eye separately](PATCHES.md#frame-unity_multipass) |
+| Left and right look swapped (depth feels wrong) | **Game settings…** → **Swap eyes** |
+| Textures flicker, objects pop in and out | **Game settings…** → **Turn off space warp** |
+| One eye shimmers while menus look steady | Game page → **Customize** → **Eye-tracked foveation (Valve)**: **Fixed**, else **Off** |
+| Menus or screens upside down | **Game settings…** → **Fix upside-down menus** |
+| Curved menus or video screens missing | **Game settings…** → **Show curved menus and screens** |
+| Blurry | **Game settings…** → raise **Sharpness** (costs frame rate) |
+
+The [patch reference](PATCHES.md) lists every patch with what it does. If nothing helps, report it with a short
+description of what you see.
+
+## It stutters or runs slowly
+
+How to tell: open **Monitor** in the sidebar while you play. Smooth play needs the game's frame rate at the refresh
+rate (for example 72 or 90 fps).
+
+- **Below the refresh rate:** right-click the game → **Game settings…** → lower **Sharpness** (for example to 0.8×) or
+  pick a lower **Refresh rate**. After a session, the game's page may suggest a value.
+- **At the refresh rate but it still judders:** report it; that points to timing, not speed.
+
+## The game pauses or recenters by itself
+
+The Frame briefly tells games they lost focus, for example when the headset's sensor thinks you took it off.
+Right-click the game → **Game settings…**: keep **Don't pause on short interruptions** on and raise **Ignore focus
+dips up to** (for example to 2.5 s).
+
+## Controllers don't work in a game
+
+Right-click the game → **Game settings…**:
+
+- **No controllers, or only hands:** turn on **Use controllers**.
+- **Buttons work but you can't aim at menus:** adjust **Pointer angle**.
+- **Vibration too strong:** lower **Vibration strength**.
+
+## The Frame turns off or gets hot during a game
+
+How to tell: if it only happens on battery and never while plugged in, it's power, not FramePort. Heavy games can
+draw more than the battery delivers, especially at lower charge, and the Frame then turns off without an error.
+
+- Play plugged in, or right-click the game → **Game settings…** → lower **Sharpness** to reduce the load.
+- It also turns off while plugged in: report it. The diagnostics include the log of the boot that ended.
+
+## My progress isn't saved
+
+1. Quit through the game's own menu, not Steam's **Exit game**. Exit game closes the game at once, and some games only
+   save when they exit normally.
+2. Check whether it saves at all: **Files** in the sidebar → under **Game storage**, the game → look at the files'
+   dates. Play, save in the game, quit from its menu and look again.
+3. Nothing changes: report it.
+
+Saves stay on the Frame when you update or reinstall a game.
+
+## A game with mods crashes
+
+How to tell: play once without mods and custom content. If it then works, a mod is the cause; the diagnostics zip
+usually names the mod's library in the crash. Report it to the mod's author, and check for a mod version that matches
+your game version.
+
+## The game needs files I supply (ports, emulators, mods)
+
+How to tell where they go: the game says it on screen or in its instructions, and its log names the path (in the
+diagnostics zip, `launch.log`). It's usually `Android/data/<package>/files`.
+
+1. Unpack or extract the files on your PC first: these apps read folders, not disc images (`.iso`) or archives.
+2. **Files** in the sidebar → under **Game storage**, the game → open that folder → **Upload folder…** (or
+   **Upload files…**). The game's menu → **Add videos and files** opens the same place.
+
+In-game "choose a file" buttons don't work on the Frame, which has no file picker.
+
+## How do I report a problem well?
+
+1. Reproduce it once, then right away open the game's menu (**…** on its page) → **Report a problem…**. For a hang,
+   do it while the game still hangs.
+2. Say what you saw in the headset and what you already tried.
+3. **Collect and open GitHub** saves a diagnostics zip and opens a prefilled game report; attach the zip to it. The
+   zip holds logs, not your game files, and personal details are removed.
@@ -85,6 +85,23 @@
  the session stays below FOCUSED.

 ## Graphics stack
+- Explicit foveation injection probe (SteamOS 0.4.5, 20261007.6125817, Lepton 3.0.5, 2026-10-11):
+  Batman's normal Steam environment requested the FDM Vulkan layer but supplied no `FDM_DEBUG` flag.
+  Appending `debug` while preserving inherited flags showed `fdm_injection_CreateInstance: skipped`.
+  A temporary `FDM_DEBUG=enable,debug` launch created the Unity/Manta Vulkan instance and device,
+  detected a 54x54 two-layer density map for 1728x1728 eye buffers, and logged render passes with
+  `fdm 1`, `already_has_fdm=1`, and changing offsets for both eyes. This verifies the injection path,
+  not visual quality, gaze calibration, sustained gameplay stability, or an FPS/power improvement.
+  `device.foveation` mode `tracked` now explicitly loads the layer and sets `FDM_DEBUG=enable` without
+  debug spam. It is opt-in; do not enable it globally or assume all GLES/Zink and Vulkan renderers work.
+  Follow-up wearer test on 2026-10-11 FAILED in Batman: large rainbow glitches outside the gaze region
+  and jitter even in clear regions. Restoring the original launcher and restarting removed BOTH symptoms,
+  confirmed by the wearer. Do not recommend forced injection for this Batman build. Reaching foveated
+  render passes was only a technical probe, not a working visual implementation. Eye-tracking logs also
+  showed left-eye filter resets, but they do not establish the rendering bug's root cause.
+  Keep `adapter.foveation_fix` separate: hiding the game's Quest extensions does not prevent the
+  independent Valve injection path. A swapchain sample count of 1 also does not prove the absence of
+  internal MSAA: the enabled Batman render-pass trace reported `samples 2`.
 - Vulkan: freedreno (Mesa Turnip); Valve injects `VK_LAYER_VALVE_rpo` and `VALVE_fdm_injection` via
  VK_INSTANCE_LAYERS (set `VK_INSTANCE_LAYERS=""` through `device.lepton_env` to test without them).
  The FDM layer follows each eye's gaze; one-eye jitter in some games (GitHub #69) is fixed per game with
@@ -206,8 +223,9 @@ over Quest games.
 - **Registration** (what SteamVR honours on the Frame): `IVRApplications::AddApplicationManifest(path, false)` from
  a utility client, live; the path is kept in `~/.config/openvr/config/appconfig.json` `manifest_paths`.
  `SetApplicationAutoLaunch` is accepted (GetApplicationAutoLaunch → true; vrserver has
-  `CAppInfoManager::StartAutolaunchOverlays`) but wasn't written to `steamvr.vrsettings` right away; whether it
-  starts the app at the next SteamVR start is **not yet verified**. The linuxarm64 vrserver only reads
+  `CAppInfoManager::StartAutolaunchOverlays`) but on the dev Frame it never reached `steamvr.vrsettings` (no
+  autolaunch entry for `temporalreality.overlay` there, appconfig.json holds only manifest_paths) and the owner's
+  watch didn't start by itself, so FramePort doesn't rely on it (see "Autostart" below). The linuxarm64 vrserver only reads
  **`binary_path_linux_arm`**: a manifest with `binary_path_linux` alone is skipped ("must specify binary_path for
  launch_type binary. Skipping"; Steam's own steamapps.vrmanifest entries are skipped the same way), so an app's
  own Linux manifest/`--install` that only writes binary_path_linux can't be launched by SteamVR on the Frame.
@@ -219,6 +237,22 @@ over Quest games.
  absolute paths) and registers it; `unregister_vr_overlay`, uninstall and purge remove it; `ensure_host_fixes`
  registers ones SteamVR missed (it wasn't running). Overlay apps skip launch tests, the Linux launcher's
  Steam-parent watchdog (`FRAMEPORT_OVERLAY=1`) and don't count as a running game.
+- **Autostart (agent v76)**: the deployment's `overlay.autostart` is the source of truth (SetApplicationAutoLaunch
+  is still set for SteamVR builds that honour it). While at least one installed overlay app has it on,
+  `ensure_host_fixes` keeps the user service `frameport-vr-overlays.service` (`~/.config/systemd/user`, enabled for
+  default.target, Restart=always) = `frameport_agent.py _vr_overlay_watch`: every 5 s it checks the vrserver it knows
+  (`/proc/<pid>/stat`: name + start time; a full /proc scan only when that one is gone); a new vrserver (boot,
+  SteamVR restart, or the first look after the service starts) gets one round in a child process
+  (`_vr_overlay_round`, timeout): wait ≤180 s until IVRApplications answers, 15 s for SteamVR's own auto-launch,
+  then `launch_vr_overlay` for each autostart app that isn't running (a process with its install folder/anchor in
+  the command line, or GetApplicationProcessId ≠ 0: never a second copy). The handled vrserver is kept in
+  `~/.cache/frameport-vr-overlays.json`, so an agent update (the watcher exits when its file changes, systemd starts
+  the new one) doesn't restart an app the user closed. Log: `~/.local/share/frameport/vr-overlays.log` (128 KB, one
+  `.1`). Removed when no overlay app has autostart (game page switch, uninstall), by purge, and by the kill switch
+  `~/.local/share/frameport/vr-overlays.disabled` (or `FRAMEPORT_NO_OVERLAY_AUTOSTART=1` in the agent's environment).
+  Cost: one idle python3 (~30-40 MB RSS, no CPU between polls). Dev Frame 2026-10-10 (vrserver up since boot,
+  Temporal Reality already started from its Steam shortcut): `new SteamVR (vrserver 2297)` →
+  `linux.temporalreality: running` (not started again). Start after a real SteamVR start/boot: not yet seen.

 ## Video of the headset view (surveyed 2026-10-05; used by the Live view tab)
 - `steamvr-v4l2cam.service` (user unit, part of gamescope-session.target, `Restart=always`) runs SteamVR's
@@ -307,6 +341,45 @@ over Quest games.
 - Unity text fields close without a system keyboard; see `frame.unity_text_input` in PLAYBOOK.md.


+## Shared foveation controls (tested 2026-10-12)
+
+Under a Quest game's Advanced patches, choose **Foveated rendering → Eye-tracked**, then **Update on Frame**.
+The full-resolution area selector defaults to **Default (30% radius)**: no radius override, preserving the
+runtime profile used in the headset experiments. Larger radii retain more detail and save less shading work.
+Custom radii set `FOVE_INNER`; `FOVE_OUTER` is twice that value, matching the runtime's profile proportions.
+The inspected runtime's built-in inner/outer pairs are 0.30/0.60, 0.25/0.50 and 0.20/0.40.
+The shared-texture injection path selects profile 1: 0.30 inner radius and 0.60 outer radius.
+
+`device.foveation` enables Valve's shared Vulkan injection and suppresses competing native foveation through
+`foveation_fix=1`. Recipes and shared catalog entries preserve mode, radius and test selection. This remains
+experimental: complete images were confirmed in RE4, Batman, Deadpool, The Climb 2 and Asgard's Wrath 2,
+not all Quest games or renderers. RE4 and Batman checks include title/calibration scenes; these are not
+equivalent to extended gameplay coverage. Asgard gameplay was visually confirmed, without an on/off benchmark.
+Batman additionally receives the verified ordinary shared-allocation patch, guarded by the full original
+OVRPlugin hash; unknown Batman versions fail explicitly rather than receiving unchecked binary offsets.
+
+The Climb 2 uses a private `libvrapi_foveation.so` bridge, installed only into that game's APK after the
+standard bridge patch. It retains images during held-focus visibility dips, separates mono overlay output
+storage from stereo density-map storage, and rate-limits its view-cache writes. Its process-local Valve layer
+correction supplies both eye offsets and avoids the invalid subpass mask-table reads seen during Alps loading;
+`yflip` corrects vertical gaze direction. The renderer SHA-256 and 1.0 resolution scale are checked before
+installation. The runtime correction additionally checks the exact Valve library SHA-256 and all four original
+instructions before touching executable memory; unsupported libraries request injection be disabled and log
+the reason. No system library is changed. A SteamOS update requires revalidation of this compatibility path.
+Both-eye gaze following was confirmed in Climb's darkening diagnostic, but long-session stability remains
+experimental. Off rebuilds from the source APK and removes this private support, including its visibility fix.
+
+**Darken lower-resolution regions (test)** adds an optional Vulkan shader diagnostic. It dims RGB where the
+actual `FragSizeEXT` footprint exceeds one pixel; alpha is unchanged. Deadpool's shaded regions were confirmed
+to follow gaze in the headset. Unsupported shader output interfaces are skipped, and multiple passes may
+compound darkening, so this is a diagnostic rather than a precise composited mask. Do not benchmark with it on.
+Uncheck it and update from the original source APK to remove the diagnostic library, except in Climb where
+the same library also carries the compatibility correction. Darkening stays dormant without its launcher opt-in.
+
+High-resolution Deadpool samples crossed from about 45 to 90 FPS with injection enabled, but temperatures and
+power rose as it rendered twice as many frames. Foveation does not guarantee lower temperature at uncapped FPS.
+The new configurable radii have configuration/build coverage; each radius has not been separately play-tested.
+
 ## Monitoring sources (probed 2026-10-07, SteamOS 0.4.3, kernel 6.18; used by the Monitor tab, agent `_monitor`)

 All readable by the steamos user without root; the agent reads them directly (no programs started per sample).
@@ -22,32 +22,43 @@ Generated from [catalog/games](../catalog/games) by `scripts/compat_list.py`.
 | Beat Saber | PC VR | ✅ Works |  |
 | Beat Saber (co-existence build) | Quest | ✅ Works |  |
 | Blade & Sorcery: Nomad | Quest | ✅ Works |  |
+| BlazeRush | Quest | ✅ Works |  |
 | BodyCombat | Quest | ✅ Works |  |
 | BONELAB | Quest | ✅ Works |  |
 | Carve Snowboarding | Quest | ✅ Works |  |
 | Caves | Quest | ✅ Works |  |
 | Clockwork | Quest | ✅ Works |  |
 | Cook-Out | Quest | ✅ Works |  |
+| Cosmodread | Quest | ✅ Works |  |
 | Creed | Quest | ✅ Works |  |
 | cubism | Quest | ✅ Works |  |
+| Dance Central | Quest | ✅ Works |  |
 | Deep Cuts | Quest | ✅ Works |  |
 | Demeter | Quest | ✅ Works |  |
 | Dinosaur Island | Quest | ✅ Works |  |
 | Doom3Quest | Quest | ✅ Works |  |
 | Down the Rabbit Hole | Quest | ✅ Works |  |
+| Drunkn Bar Fight | Quest | ✅ Works |  |
+| Drunkn Bar Fight 2 - Early Access | Quest | ✅ Works |  |
 | Eleven: Table Tennis VR | PC VR | ✅ Works |  |
 | Espire 2 | Quest | ✅ Works |  |
+| FrenzyVR | Quest | ✅ Works |  |
+| Fruit Ninja | Quest | ✅ Works |  |
+| Fruit Salon | Quest | ✅ Works |  |
 | Genotype | Quest | ✅ Works |  |
 | GORN2 | Quest | ✅ Works |  |
 | Gravity Lab | Quest | ✅ Works |  |
 | H.U.N.T | Quest | ✅ Works |  |
 | I Am Cat | Quest | ✅ Works |  |
 | I Am Monkey | Quest | ✅ Works |  |
+| IEYTD3 | Quest | ✅ Works |  |
 | In Death: Unchained | Quest | ✅ Works |  |
 | Into The Radius 2 | Quest | ✅ Works |  |
 | Job Simulator | Quest | ✅ Works |  |
 | Jurassic World Aftermath Collection | Quest | ✅ Works |  |
 | Keep Talking and Nobody Explodes | Quest | ✅ Works |  |
+| Kill It With Fire VR | Quest | ✅ Works |  |
+| Ladder | Quest | ✅ Works |  |
 | Lambda1VR | Quest | ✅ Works |  |
 | LEGO® Bricktales | Quest | ✅ Works |  |
 | Lucky's Tale | Quest | ✅ Works |  |
@@ -57,8 +68,10 @@ Generated from [catalog/games](../catalog/games) by `scripts/compat_list.py`.
 | Medieval Dynasty New Settlement | Quest | ✅ Works |  |
 | Metro Awakening | Quest | ✅ Works |  |
 | Mobile Suit Gundam: Silver Phantom | Quest | ✅ Works |  |
+| Munkr Funkr (The Legacy Days) | Quest | ✅ Works |  |
 | Nano | Quest | ✅ Works |  |
 | NEX Player | Quest | ✅ Works |  |
+| NFL PRO ERA II | Quest | ✅ Works |  |
 | NOPE CHALLENGE | Quest | ✅ Works |  |
 | palazzo_santacruz | Quest | ✅ Works |  |
 | Path of the Warrior | Quest | ✅ Works |  |
@@ -77,25 +90,34 @@ Generated from [catalog/games](../catalog/games) by `scripts/compat_list.py`.
 | Robo Recall | Quest | ✅ Works |  |
 | RUINSMAGUS | Quest | ✅ Works |  |
 | Shores of Loci | Quest | ✅ Works |  |
+| SilentSlayer | Quest | ✅ Works |  |
 | Sniper Elite VR | Quest | ✅ Works |  |
 | Sniper Elite VR: Winter Warrior | Quest | ✅ Works |  |
 | Space Pirate Trainer Quest | Quest | ✅ Works |  |
 | Star Wars Pinball VR | Quest | ✅ Works |  |
+| Star Wars: Tales from the Galaxy's Edge | Quest | ✅ Works |  |
 | Stremio | Quest | ✅ Works |  |
+| Superfly | Quest | ✅ Works |  |
 | SUPERHOT VR | PC VR | ✅ Works |  |
 | SUPERHOT VR | Quest | ✅ Works |  |
 | SynthRiders | Quest | ✅ Works |  |
+| Taskmaster | Quest | ✅ Works |  |
 | TetrisEffect | Quest | ✅ Works |  |
 | The Boys VR | Quest | ✅ Works |  |
 | The Climb 2 | Quest | ✅ Works |  |
 | The Room VR | Quest | ✅ Works |  |
 | The Tale of Onogoro | Quest | ✅ Works |  |
+| Time Crisis II VR (Test) | Quest | ✅ Works |  |
 | Time Crisis VR (Experimental) | Quest | ✅ Works |  |
+| Totally Baseball | Quest | ✅ Works |  |
 | Toy Master | Quest | ✅ Works |  |
+| TRIANGLE STRATEGY | Quest | ✅ Works |  |
 | Under Cover | Quest | ✅ Works |  |
+| Vacation Simulator | Quest | ✅ Works |  |
 | Vader Immortal: Episode I | Quest | ✅ Works |  |
 | Vader Immortal: Episode II | Quest | ✅ Works |  |
 | Vader Immortal: Episode III | Quest | ✅ Works |  |
+| Vampire Survivors | Quest | ✅ Works |  |
 | VR HOT Quest | Quest | ✅ Works |  |
 | VR4 | Quest | ✅ Works |  |
 | Walkabout Mini Golf | Quest | ✅ Works |  |
@@ -107,17 +129,22 @@ Generated from [catalog/games](../catalog/games) by `scripts/compat_list.py`.
 | Arcsmith | Quest | ⚠️ Works with issues | Right eye distorts during movement (unresolved; swap, tracking, Valve layers, depth and pacing ruled out). |
 | Assassin's Creed Nexus | Quest | ⚠️ Works with issues | Some launch warning text is still upside down; the rest of the UI is fixed by flip emulation. |
 | Does it Stack? | Quest | ⚠️ Works with issues | Mixed reality mode does not work (works on Demeo), everything else seems to be OK |
+| Dungeons of Eternity | Quest | ⚠️ Works with issues | It can not connect to servers |
 | End Space | Quest | ⚠️ Works with issues | Controls stop responding after the first mission loads. |
 | ExploreVR | Quest | ⚠️ Works with issues | The 3D world warps and shifts with head movement (wrong perspective). |
+| Fisherman | Quest | ⚠️ Works with issues | Loading screens have corruption, but everything works otherwise. |
 | Freedom | Quest | ⚠️ Works with issues | Volume can't be changed in the game. |
+| MacacoVR | Quest | ⚠️ Works with issues | 2d loading screens are glitchy, otherwise main gameplay is fine |
 | Myst | Quest | ⚠️ Works with issues | Minor graphical glitches on some objects. |
 | Phantom: Covert Ops | Quest | ⚠️ Works with issues | DLC/store button crashes (no Meta store). |
 | Pinball FX VR | Quest | ⚠️ Works with issues | Plays; mixed reality mode not working yet. |
 | Silhouette | Quest | ⚠️ Works with issues | Hand-tracking game; the Frame synthesizes hands from controllers, so it is janky. |
+| Swarm 2 | Quest | ⚠️ Works with issues | MSAA creates visible seams around edge geometry and also the skybox edge |
 | The Light Brigade | Quest | ⚠️ Works with issues | Judder in weapons |
+| The Thrill Of The Fight | Quest | ⚠️ Works with issues | Right eye doesn't draw the opponent or the referee. |
 | Time Stall | Quest | ⚠️ Works with issues | Both eyes distort during movement (unresolved). |
+| Vermillion | Quest | ⚠️ Works with issues | Runs. |
 | WiiCompiled VR | Quest | ⚠️ Works with issues | To add a game: in FramePort's Files tab, upload your .wcgame file to this game's storage, folder Android/data/org.wiicompiled.quest/files/WiiCompiledOpenXRVR… |
-| BlazeRush | Quest | ❌ Doesn't run | Starts and reaches the menu room, but the room shows no controllers and ignores all input (it all reaches the game); no fix yet. |
 | Eleven Table Tennis | Quest | ❌ Doesn't run | Stops at the splash screen. |
 | Espire 1: VR Operative (Quest Edition) | Quest | ❌ Doesn't run | Mesa GL driver crash during texture upload. |
 | GOLF+ | Quest | ❌ Doesn't run | Black screen. |
@@ -104,6 +104,9 @@ refresh rate, controllers, menus, 360° video and mixed reality. Changes are use

 ![Game settings](images/game-settings.png)

+**Rename…** (in the game's menu) changes the name in the Library and in Steam; FramePort keeps it from then on. An
+installed game keeps its Steam entry, artwork and saves (Steam restarts once).
+
 ### microSD cards and other drives

 - The **Steam Frame** page's **Storage** section sets where new games go (**Install new games to**).
@@ -192,9 +195,10 @@ the Steam library.
  page (**Desktop Mode**).
 - **SteamVR overlay apps** (a wrist watch, a performance display: programs that draw over games instead of being
  one) are registered with the Frame's SteamVR, which shows them over whatever you play, Quest and PC VR games
-  alike. FramePort recognises them by the `.vrmanifest` file they ship. By default SteamVR starts them by itself
-  (**SteamVR overlay → Start with SteamVR** on the game page); otherwise start the app from your library before the
-  game. Windows overlay apps get the patch **SteamVR overlay app (Frame)**.
+  alike. FramePort recognises them by the `.vrmanifest` file they ship. By default they start by themselves whenever
+  SteamVR starts (**SteamVR overlay → Start with SteamVR** on the game page; a small FramePort service on the Frame
+  does this, `frameport-vr-overlays`); otherwise start the app from your library before the game. Windows overlay
+  apps get the patch **SteamVR overlay app (Frame)**.

 ## Files on the Frame

@@ -90,6 +90,18 @@ not clickable. Use the `https://frameport.app/install?…` link:

 Use the animated or still SVG: GitHub shows SVGs as images, so the hover version doesn't react there.

+## Testing your setup
+
+The example button on [frameport.app](https://frameport.app/#button) uses a demo link:
+
+```
+https://frameport.app/install/?manifest=https%3A%2F%2Fframeport.app%2Fdemo%2Fcool-game.json
+```
+
+Click it to check that FramePort receives install links on your PC. FramePort recognises this one address and shows
+a demo install question for a placeholder game, "Cool Game"; nothing is downloaded, added to the library or
+installed (`frameport open-link` says it's the demo link and stops). Real buttons install real games.
+
 ## If a visitor doesn't have FramePort

 The `https://frameport.app/install?…` link handles this: its page offers the download and a second try. A bare
@@ -14,26 +14,35 @@ version is `catalog/triage.yaml` (used by `frameport test` / the Job screen); ke
 | Symptom | Cause | Fix |
 |---|---|---|
 | A launch test suggests a patch (for example triage `sdl-no-clipboard` → `frame.sdl_clipboard`) but the game page doesn't show it / lists it as not applicable; or a game added long ago lacks warnings newer ones get (Android version, web wrapper, missing OBB) (GitHub #104, Dramatic Shape) | the library entry was analyzed by an older FramePort: the analysis field the patch reads (`sdl_java`, `min_sdk`, `web_wrapper`, `expects_obb`, …) is missing, so `applies()` is false | entries whose `analysis.extra.analysis_version` is below `detect.ANALYSIS_VERSION` are analyzed again at the GUI's start (background) and before a build (`pipeline.refresh_analyses`); by hand: game menu → "Analyze again", then Update on Frame. An unreadable APK is marked `analysis_failed` (retried after the next version bump). Adding an analysis field: bump `ANALYSIS_VERSION` |
-| One eye (usually the right) shimmers or jitters in the 3D view while menus and panels look steady; pacing is clean (GitHub #69, for example RTCWQuest, Moss) | Valve's eye-tracked foveation layer (`VALVE_fdm_injection`) moves its low-density regions with each eye's gaze, and the right eye's gaze filter restarts often (`CEyePoseUKF R: Large dt … Bootstrapped` in `~/.local/share/Steam/logs/eyetracking.txt`) | Customize → "Eye-tracked foveation (Valve)" (`device.foveation`): **Fixed** (`FDM_DEBUG=disable_offsets`, keeps the GPU saving) or **Off** (`VK_INSTANCE_LAYERS=""`); catalog field `foveation:` |
+| FDM layer loads but diagnostic logging reports `fdm_injection_CreateInstance: skipped` | Layer loading alone does not enable injection on the tested SteamOS 0.4.5 build; a skipped helper instance alone also does not establish game-wide inactivity | Opt-in `device.foveation` mode `tracked`: loads Valve's layer and sets `FDM_DEBUG=enable`. Batman probe reached foveated render passes with changing per-eye offsets. Validate graphics and matched gameplay GPU time; do not enable globally. Use `debug` only for brief diagnostics, preserving existing flags; never benchmark with debug spam. See FRAME_RUNTIME.md. |
+| One eye (usually the right) shimmers or jitters in the 3D view while menus and panels look steady; pacing is clean (GitHub #69, e.g. RTCWQuest, Moss) | Valve's eye-tracked foveation layer (`VALVE_fdm_injection`) moves its low-density regions with each eye's gaze, and the right eye's gaze filter restarts often (`CEyePoseUKF R: Large dt … Bootstrapped` in `~/.local/share/Steam/logs/eyetracking.txt`) | Customize → "Eye-tracked foveation (Valve)" (`device.foveation`): **Fixed** (`FDM_DEBUG=disable_offsets`; verify injection remains active on the installed runtime) or **Off** (`VK_INSTANCE_LAYERS=""`); catalog field `foveation:` |
 | A Unity OpenXR game closes right after the OpenXR instance is created: `F VrApiLoader: vrapi_SetPropertyInt was called before vrapi_Initialize()!`, SIGABRT on UnityMain (GitHub #62, Jurassic World Aftermath) | the APK still ships Meta's VrApi loader; OVRPlugin (1.89, on OpenXR) calls it without starting VrApi and Meta's loader aborts. The VrApi bridge can't replace it (39 of the loader's 114 functions: OVRPlugin wouldn't link) | `frame.vrapi_stub` (same exports, each returns 0); triage `vrapi-before-init` |
 | A VrApi game exits at once: `UnsatisfiedLinkError … dlopen failed: cannot locate symbol "vrapi_PollEvent"` (GitHub #57, BlazeRush) | the engine imports a VrApi function the VrApi bridge didn't implement | the bridge has `vrapi_PollEvent`, `RecenterPose`, `SetDisplayRefreshRate`, `GetSystemPropertyFloatArray` (rebuild the game); the static check "VrApi functions resolvable" names any other missing one; triage `vrapi-symbol-missing` |
 | A Team Beef port (Lambda1VR, RTCWQuest, …) exits at once: `UnsatisfiedLinkError: dlopen failed: library "libopenxr_loader_valve.so" not found` (GitHub #59) | TBXR loads `openxr_loader_<Build.MANUFACTURER>` (Lepton: valve) and takes the Meta path only when `strstr(OPENXR_HMD, "meta")` matches, else Pico's | `frame.tbxr_vendor` (empty `libopenxr_loader_valve.so` + the "meta" literal → "alve"). Game data (`xash/`, …) goes to /sdcard: upload it with the Files tab to the game's storage. Black eyes with `TBXR: Incomplete frame buffer object: GL_FRAMEBUFFER_INCOMPLETE_MULTISAMPLE`: TBXR always uses multisampled render-to-texture (even `--msaa 1`); `frame.tbxr_vendor` links the GL shim, which hands it single-sampled versions (log `GL shim: multisampled render-to-texture … drawn single-sampled`) |
-| Logos and a loading animation, then black (no crash, frames keep coming) in a game whose OBB folder has extra `*.pak` files (GitHub #61, Star Wars: Tales from the Galaxy's Edge: seasons + Wwise banks) | the game asks Meta's platform for these asset files (`ovr_AssetFile_GetList` / `DownloadById`); OVRPort's loader doesn't know them, so the content never "arrives" | `frame.asset_files` (native/langpack lists the data's `*.pak` as installed `default` assets, IAP `free`, and answers DownloadById at once with the path; off: env FRAMEPORT_ASSET_FILES=0) |
+| Missing sound or extra content in a game whose OBB folder has separate `*.pak` files (GitHub #61, Star Wars: Tales from the Galaxy's Edge: seasons + Wwise banks) | the game asks Meta's platform for these asset files (`ovr_AssetFile_GetList` / `DownloadById`); OVRPort's loader doesn't list them | copy every content/sound-bank PAK and use `frame.asset_files` (native/langpack lists the data's `*.pak` as installed `default` assets, IAP `free`, and answers DownloadById at once with the path; off: env FRAMEPORT_ASSET_FILES=0). Tales also needs the splash and depth-size fixes below |
+| A SideQuest backup has `apk/` and a sibling `obb/` with content/sound-bank PAKs, but the Frame only has the main OBB (GitHub #61, Tales from the Galaxy's Edge) | older scans treated that layout as loose expansion files and selected only the named OBBs; the asset-file patch then found no PAKs | the scanner chooses the OBB folder by version first, then keeps the whole sibling data folder when all its expansion files are selected for this APK; app updates repair affected library entries and refresh asset/language-pack detection. Reinstall to copy the missing files, or scan the backup again first. Folders with other packages or unselected OBB versions still send only the selected OBBs |
+| Tales from the Galaxy's Edge stops during map loading (GitHub #61): game thread in `FlushRenderingCommands` / `UEngine::LoadMap`, render thread in `FSplash::RenderFrame_RenderThread` / `ovrp_WaitToBeginFrame` / SteamVR `WaitFrame` | the separate Oculus loading splash waits for an unbegun frame while map travel waits for rendering | `frame.unreal_splash_bypass`: returns from the splash renderer, with a checked symbol, size and prologue. The last image stays visible during loading; the normal renderer and menu layers continue. Headset test with the depth-size fix: gameplay, both eyes, controller input and sound work |
+| Upper part of the intro/environment is black or clipped, but a separate menu panel is intact (GitHub #61, Tales from the Galaxy's Edge) | `FSceneRenderTargets::AllocMobileMultiViewDepth` caches the initial Android window dimensions (1920x1016/1020), leaving the depth attachment shorter than the eye color texture (1728x1728); drawing is limited by the smaller attachment | `frame.unreal_multiview_depth`: refreshes both cached depth dimensions from the current scene `BufferSize` before allocation. Checks the exported symbol, function size and surrounding instructions, then replaces only the branch that skips refresh. Keeps multiview and multisampling. Headset test: full view and gameplay work |
 | `cannot locate symbol "ovrPeerConnectionState_ToString"` (or another `ovr<Enum>_ToString`) at start (BlazeRush, GitHub #57) | OVRPort's platform loader lacks several Platform SDK enum helpers | `frame.ovrstubs` now stubs them too; `*_ToString` stubs return "" (not NULL) |
 | Exits right after the OpenXR instance is created: `Failed to create XR session: -50` (`XR_ERROR_GRAPHICS_REQUIREMENTS_CALL_MISSING`, Lambda1VR) | the game skips `xrGet*GraphicsRequirementsKHR`; Meta's runtime tolerates it, SteamVR's doesn't. Lambda1VR's TBXR doesn't even enable `XR_KHR_opengl_es_enable` (only `XR_EXT_local_floor`) | FrameBridge adds `XR_KHR_opengl_es_enable` when an app enables no graphics API extension, asks for the requirements on the game's behalf and retries xrCreateSession once (logs `added XR_KHR_opengl_es_enable …`, `the app skipped …; asked for it`; every launch logs the final extension list `xrCreateInstance with N extension(s)`); triage `graphics-requirements-missing`. Verified headless: Lambda1VR runs at 72 fps |
 | Exits at start: `OVRAvatar-Loader: DisplayErrorAndExit: Failed to launch SystemActivities` after `ovrAvatar_Initialize: Failed to load AvatarSDK driver` (BlazeRush, GitHub #57) | Meta's avatar loader needs Horizon; it then tries Meta's error screen and aborts | `frame.avatar_stub` (same exports, do nothing); triage `avatar-driver-missing`. Games that ship the library but don't start avatars at launch (Lucky's Tale, BattleSisters, Arcsmith) don't need it |
+| BlazeRush (GitHub #57, Klownicle's guide): the first menu takes A, the next ignores all input; car bodies and controllers invisible; coloured streaks/flashes from particles; narrow square view; blurry, or displaced with black borders after a scale change | the menus wait for a Meta avatar the stub never delivers; bone indices fed with glVertexAttribPointer (Mesa converts them to floats); mediump particle maths; FOV read once before any session (bridge said 90x90); old program binaries in its shader cache; user_config.xml keeps the old resolution | catalog recipe: `frame.blazerush` (avatar wait NOP + avatar renderer RET + cache folder `cache/br_shader_v1`, exact build only), GL shim `gl_int_attribs=1` + `gl_highp_markers=in uvec2 inBoneIndices;\|uniform InstanceData\|void main()` (`gl_hide_multiview=0`, `gl_hide_msrtt=0` keep its GL as tested), the VrApi bridge's saved FOV (`framebridge-vrapi-fov.txt`; triage `vrapi-fov-before-tracking`), `scale=1.7`, `device.config_sync` (agent writes r_3dwidth/r_3dheight/r_width/r_height from the runtime's eye size × scale before each start); triage `gl-integer-attribs` |
 | Frame freezes or the game is killed (OOM) on the first controller vibration (for example Lucky's Tale's save slots, BattleSisters, Sniper Elite VR's tutorial grab: memory grows ~1 GB/s until the kill) | OVRPort runtimes up to 3.4.3-23204ea read the haptic envelope's duration (ns) as seconds and allocate gigabytes of samples (GitHub #9, ovrport/app#73); also reached from Unity's legacy `ovrp_SetControllerHaptics`; perf page faults all in `libopenxr_loader.so` `xrApplyHapticFeedback` | `adapter.haptic_fix` (envelope → one plain vibration in `native/xrshim`; PCM vibrations (`XrHapticPcmVibrationFB`) are converted the same way). Fixed in runtime 3.4.3-aa54c3f: builds made with it leave the workaround out by themselves (log "not needed: adapter.haptic_fix", `frameport show` "last build left out"); rebuild an older build to switch |
 | Controller vibrations much stronger than on a Quest (The Boys VR, Jurassic World, BONELAB, …) | OVRPlugin games send amplitude envelopes; `haptic_fix` turned each into one vibration at the envelope's *peak* for its whole duration (a short fading pulse became a long full-strength buzz) | `haptic_fix` now uses the envelope's RMS; Game settings → "Vibration strength" (`haptic_scale`, 0-1) scales every vibration in FrameBridge; launch.log shows the first requests (`haptic: …`). OVRPlugin stops a vibration with amplitude 0 (2 s duration): FrameBridge turns that into xrStopHapticFeedback (without it the last buzz ran its full 2 s) |
 | Play or a launch test fails at once: `Game files missing at <path> (storage not mounted?)` in launch.log, or "… files are on a drive that isn't inserted" (GitHub #90) | the game was installed or moved to a microSD card (`<mount>/FramePort/<pkg>`) that isn't inserted or mounted now | insert the card; or move the game back (game menu → Move to…, `frameport frame move <pkg> --to internal`) once the card is back. `frameport frame drives` shows what the agent sees (exFAT/NTFS cards are refused: format in SteamOS) |
 | A Linux app started from Desktop Mode's menu closes after ~2 s, or opens on the wrong display (GitHub #84) | its launcher predates agent v63: the "Steam parent gone" watchdog ended it when Plasma's launcher exited, and it took gamescope's DISPLAY from Steam | connect FramePort once (agent v63's `upgrade_launchers` adds the `FRAMEPORT_DESKTOP` checks; the menu entry runs `env FRAMEPORT_DESKTOP=1 <anchor>/launch.sh`). Game Mode controller problems in such apps are Steam Input's (a separate issue) |
 | A Linux app (AppImage) shows no/FramePort's placeholder icon in Desktop Mode or Steam (GitHub #99) | before agent v64 only FramePort's art set's icon was used, and a lone AppImage has no store art | connect FramePort once (agent v64 copies the app's `.DirIcon` / `.desktop` `Icon=` to `<anchor>/artwork/app-icon.*` and refreshes the menu entry); reinstall to also get it into the library + Steam shortcut. Still the placeholder: check `<base>/app/squashfs-root/.DirIcon` and the `.desktop` file's `Icon=` (an icon outside the app folder or only an XPM isn't used); a chosen icon (`artwork/.icon-source` = `custom`) always wins |
 | An overlay app (fpsVR, a wrist watch) installed on the Frame never appears, or SteamVR doesn't start it | not registered with the Frame's SteamVR, or registered with a manifest SteamVR skips: on the Frame vrserver reads only `binary_path_linux_arm` (vrserver.txt: "must specify binary_path for launch_type binary. Skipping") | `pcvr.vr_overlay` (Windows) / a Linux app with a bundled `.vrmanifest` (`is_dashboard_overlay`): agent v75 `register_vr_overlay` (check `vrcmd --overlays`, `~/.config/openvr/config/appconfig.json` manifest_paths); the app's own `--install` writes binary_path_linux only. fpsVR under Proton never loads OpenVR (quits after 60 s): unsupported for now |
+| An overlay app with **Start with SteamVR** on doesn't start by itself after the Frame or SteamVR starts (it works when started by hand) | SteamVR's own auto-launch flag (SetApplicationAutoLaunch) didn't persist on the Frame (no autolaunch entry in `~/.config/openvr/config/steamvr.vrsettings`) | agent v76: FramePort's service `frameport-vr-overlays.service` starts it at every new vrserver. Check `systemctl --user status frameport-vr-overlays`, `~/.local/share/frameport/vr-overlays.log` (`new SteamVR (vrserver N)` → `<pkg>: started` / `running` / `couldn't start it: …`), the deployment's `overlay.autostart`, and that `~/.local/share/frameport/vr-overlays.disabled` doesn't exist; `frameport frame info` (ensure_host_fixes) installs a missing service |
 | Every game suddenly fails to start: `crun: create keyring …: Disk quota exceeded`, `is not a running context` | rootless podman leaked a kernel keyring per launch; 200-key quota exhausted | `keyring = false` in `~/.config/containers/containers.conf` (FramePort agent does it), then reboot the Frame once |
+| Launch test "failed" although the game runs in the headset: frames paced, then `OVRPortVrApi: EnterVrMode: no tracked head pose before deadline`, then a crash (e.g. `zink: DEVICE LOST` + SIGSEGV in a `gdrv` thread) (GitHub #57, BlazeRush) | the VrApi bridge ends the VR session after 30 s without head tracking, which only happens without a worn headset; the game's renderer then crashes while tearing down | none needed: launch tests (`triage(..., headless=True)`) treat an exit or crash after a `headless_end` line (catalog/triage.yaml) as a pass when frames were paced before it (info finding `headless-end`); play sessions ignore it. Add new such markers to `headless_end` |
+| Launch test EXITED, launch.log has `Target app (<pkg>) did not start` and no `Start proc …:<pkg>` (GitHub #179) | Lepton occasionally doesn't start the app on the first start after an APK change; Android's `WebViewLoader-: System.exit` at boot is not the game (triage `app-not-started`) | start it again |
+| A game keeps no progress between starts although it saves (its storage gets a new `Profiles/Oculus/<id>/`-style folder per start; Walkabout Mini Golf, GitHub #182) | OVRPort's platform loader answers `ovr_GetLoggedInUserID` with a made-up id (6e18 + `random()`), new at every start; games file saves under the user id | `frame.ovr_stable_user` (default for games with the platform library): a fixed id per game and keystore. Old progress: copy the newest old profile into the new id's folder |
 | A Unity app's text field shows a caret for a moment and loses focus; no keyboard appears (for example Stremio VR login) | Unity's TMP_InputField/InputField wait for Android's on-screen keyboard and close themselves without one (Lepton has none); headless VR apps also have no focused Android window, so no key press reaches them | `frame.unity_text_input` (Cpp2IL finds `TouchScreenKeyboardShouldBeUsed`/`isKeyboardUsingEvents`, rewritten to false/true) + `device.text_input_window` (lepton-show-flatscreen: Steam's keyboard and Type on Frame work) |
 | Play gives Steam's "Game configuration unavailable"; Steam's console_log: `GameAction [AppID <id>] … RequestingLicense → UpdatingAppInfo → LaunchApp failed with AppError_9` | this Frame's Steam never loaded FramePort's shortcuts.vdf entry (it treats the id as a store app); cause unknown (GitHub #21/#30) | automatic since agent v43: Play registers the game through Steam's devkit interface ("Devkit Game: …", `devkit_register`) and starts that; uninstall removes it. Agent v58: a devkit entry Steam forgot after a restart is added again live on Play (no NOT_IN_LIBRARY → no Steam restart), and installs/art updates of devkit games only copy art (no Steam restart, GitHub #41) |
 | Steam's Exit game leaves the game running (container `lepton-steamlaunch-<appid>` still up) | Steam stopped only its `reaper`; launch.sh and Lepton (setsid) never got a signal (GitHub #36) | agent v44: launch.sh's 2 s loop ends the game when its parent is gone (`upgrade_launchers` adds it to existing launchers); by hand: `podman kill lepton-steamlaunch-<appid>` |
 | Black screen at start while audio/ExoPlayer runs; log `xrEndFrame: dropped N unusable layer(s)`, a quad layer with swapchain 0x0 (for example I Am Monkey's intro video) | The game plays video into an Android-surface swapchain (XR_KHR_android_surface_swapchain); the Frame's runtime lists the extension but returns FUNCTION_UNSUPPORTED | adapter `surface_emul` (default on): FrameBridge gives the player a SurfaceTexture-backed Surface and copies each frame into an ordinary swapchain (log `surface_emul: …`) |
-| The game quits right after start: `Something failed to initialize. Quitting!` / `We don't have write permission to …/files/cloud/data` (for example SUPERHOT) | The game created a save folder with mode 1700; inside Lepton the app writes through the folder's group | launch.sh `fix_perms` adds owner + group write to every folder in the game's storage (agent 41); reinstall to get the new launcher |
+| The game quits right after start: `Something failed to initialize. Quitting!` / `We don't have write permission to …/files/cloud/data` (for example SUPERHOT); or stays at loading with `UnauthorizedAccessException` in `StartupLoading.Start` (GitHub #239, Jurassic World Aftermath) | The game created a cloud-save folder with mode 1700; inside Lepton the app writes through the folder's group. Its startup routine can fail before the permission watchdog repairs the newly created folder | launch.sh `fix_perms` adds owner + group write to every folder in the game's storage (agent 41). Close and start the game again without uninstalling: the folders are now repaired (Aftermath confirmed in the headset). Agent 84 creates `files/cloud/data` before `fix_perms` and startup, including in upgraded launchers, to prevent the first-start race. Triage `startup-save-permission` fails the launch test despite rendering frames |
 | The whole Frame slows to a halt, then the game is killed (`Out of memory: Killed process … anon-rss:10+ GB`), for example Lucky's Tale | The game's own memory grows ~1 GB/s on Unity's `Loading.PreloadManager` thread (perf page-fault profile); not the flat window, not the text-input patches | none yet: mark unsupported; profile with `perf record -p <pid> -e page-faults --call-graph fp` (works as steamos, `perf_event_paranoid` 2) |
 | A Linux app exits at once: `cannot execute binary file: Exec format error` in launch.log | an x86_64 program started directly (installed before FramePort ran x86 builds through FEX, or by hand) | reinstall it: x86_64 Linux apps install FEX on the Frame and start through it (agent v61, `kind: linux_x86`; FEX also needs `STEAM_COMPAT_DATA_PATH`: "No compat data path?" in launch.log = an agent v60 launcher, reinstall); triage `linux-x86-no-fex`. Prefer an arm64 build when the app offers one |
 | `APP_ACTIVITY is empty`, nothing starts | Manifest has category INFO only; Lepton needs LAUNCHER | `frame.launcher` (automatic) |
@@ -50,8 +59,13 @@ version is `catalog/triage.yaml` (used by `frameport test` / the Job screen); ke
 | Unity PC VR game (Oculus + SteamVR build: `OVRPlugin.dll` and `openvr_api.dll` in `<Name>_Data/Plugins`) opens a window and quits after ~20 s; no VR Vulkan instance after the game's DXVK device in launch.log; Unity log (`unity log … Player.log`, agent v67): `OpenVR failed initialization` / `Initialization of device … failed` | Unity's built-in VR tries its SDKs in list order (Oculus first) unless `-vrmode` picks one; a catalog recipe verified with another build of the game (for example SUPERHOT VR's OpenXR build, GitHub #105) used to drop the build's own arguments | `pcvr.launch_args` = `-vrmode OpenVR` (detected for such builds; kept when the catalog's `xr` differs from the build's). A game's Electron launcher next to it (SHVR.exe) is ranked below the game |
 | Unreal PC VR game opens the crash reporter instead of closing | UE starts CrashReportClient.exe on a crash | `pcvr.no_crash_reporter` (default for Unreal Rift games): `-nocrashreports` + CrashReportClient.exe renamed `.disabled` in the Frame copy |
 | A backup's game was added without its data (library `data_dir` null, `data_bytes` 0) although the folder has .obb files | The OBBs sit in a layout the scan didn't know: `<game>/obb/<package>/`, `Android/obb/<package>/`, or SideQuest-style `<game>/apk/x.apk` + `<game>/obb/<package>/` | `sources/quest_dump.find_data_dir` finds a `<package>` folder with .obb files ≤3 levels below the APK's folder or ≤2 below its parent (skipping neighboring folders with APKs: other games); an `apk`/`apks` folder counts as part of its game folder. Add the folder again (Analyze again doesn't look for data) |
+| "Failed to correctly load the game files" at the menu; `Error loading FMOD bank "…/Android/obb/<package>/Master.bank": ERROR` (GitHub #239, Jurassic World Aftermath Collection); launch test previously passed at 72 fps | SideQuest's `<package>/<backup time>/apk/x.apk` + `obb/Master.bank` + `obb/Master.strings.bank` backup was scanned without data: these are raw sound banks, not .obb expansion files, so the sibling-folder search missed them | `quest_dump.find_data_dir` checks the parent game folder's `obb/` (or `obbs/`) when the APK is in `apk/` or `apks/`, including raw assets with or without a package subfolder. Add the backup folder again and reinstall; triage `fmod-bank-missing` fails the launch test even when the error screen renders frames. Copy the whole data folder from the same backup as the APK |
+| A game from an AXRB download starts and stops at once (Steam shows Resume), no OBB on the Frame; or a SideQuest backup adds a second game named after an APK in its `obb/` folder (reddit 2026-10-11) | AXRB keeps its own PC builds in `AXRB/patched/<package>/*-axrb.apk` (OVRPort-converted for its runtime, no OBBs); the scan added them over the original `AXRB/<app id>/<binary id>/base.apk`. SideQuest's VR4 backup has Unreal's `VR4-Android-Shipping-arm64.apk` next to the OBBs | `quest_dump._axrb_patched` skips AXRB's patched copies; a rescan replaces entries made from them; AXRB downloads send every non-APK file next to `base.apk` (DLC, assets) and are named after the package; APKs inside another game's data folder are ignored; SideQuest backups are named after the package folder, not the backup time. docs/FAQ.md has both layouts |
 | Game hangs at start / never loads although its .obb files are right there: next to the APK, in an `obb` folder beside an `apk` folder inside a `<package>` folder, or a SideQuest backup (`<timestamp>_<versionCode>.apk`) (GitHub #85, #91) | No folder named after the package, so the folder-layout checks found nothing and no OBB was uploaded | `quest_dump.find_data` then looks for the files by name, `(main\|patch).<versionCode>.<package>.obb` (any case), in the APK's folder, its parent and up to 3 levels below each (folders with their own APKs are other games); prefers the folder and files of the APK's own versionCode, else the newest older, else any version. When that folder also holds other things (the APK itself, other games' OBBs), the library entry gets `data_files` and only those files are uploaded, counted and deleted with the game. Add the folder again |
+| CryEngine game: `Powered by CRYENGINE`, then SIGTRAP in `libAndroidLauncher.so` during `CreateSystemInterface`, before any OpenXR instance (GitHub #238, The Climb 666.0) | Installed without its OBB: the SideQuest backup has `apk/com.crytek.climb.apk` + `obb/main.com.crytek.climb.obb`, but the scan required a versionCode in the OBB name and skipped it. The reported backtrace's fatal-error call formats `Engine initialization failed: Open Engine Paks: Unable to find "engine" pak files (%s)` | `quest_dump.find_data` accepts `(main\|patch).<package>.obb` as well as numbered names, keeping the original filename. Update on Frame finds the previously skipped data; a rescan finds it too. Analysis version 12 recognizes monolithic CryEngine through `assets/game.cryproject`, Vulkan through `assets/system.cfg` (`r_Driver = vk`), and an expected OBB through the launcher's expansion-path format strings; a missing OBB now gets the existing `missing-obb` warning/finding. This fixes the original missing-content startup failure; the rendering failures below were found once the data was installed |
+| The Climb 666.0: audio with no headset picture, `OVRPortVrApi: Unsupported frame flags or swap interval`; then SIGSEGV in `vulkan.freedreno.so` during `vkCmdEndRenderPass` once frames are accepted (GitHub #238) | The game submits the obsolete Quest texture-density debug flag (`0x100`), which the bridge rejected. It also binds the bridge's full-rate texture as a fragment-density attachment even though foveation support is reported off; Turnip reads density maps on the CPU, but an ordinary sampled image has no mapped backing memory | Updated `frame.vrapi_bridge` accepts the compositor debug/volume flags and creates the compatibility texture with `VK_IMAGE_USAGE_FRAGMENT_DENSITY_MAP_BIT_EXT`. Do not gate that usage on the advertised format features (the Frame reports R8G8_UNORM without the density bit). `device.files` selects `r_vr_foveated = 0` when the engine contains that cvar; The Climb 2 keeps `r_variable_rate_shading = 0`. Triage `vrapi-frame-rejected` marks rejected frames as fatal despite pacing logs. Picture confirmed on the headset. With the corrected config, an uncapped launch stayed running for over four minutes at a median 72 fps with no native crash or GPU fault. The user confirmed working menus and gameplay on 2026-10-12 |
 | Unreal game: `JNI_OnLoad` (OVRPlugin), then silence: no OpenXR instance, no crash, no frames (GitHub #85 TRIANGLE STRATEGY; launch-test finding `missing-obb`) | Installed without its OBB: the manifest says `com.epicgames.ue4.GameActivity.bHasOBBFiles` = true (UE5: `com.epicgames.unreal.…`) but the library has no data folder (`data_dir` null, `data_bytes` 0) | Put the .obb files in a `<package>` (or `obb/`) folder next to the APK, add the folder again, reinstall. Analysis `extra.expects_obb`; the game page, the install question and `frameport scan`/`install` warn; launch tests that sent no frames get the `missing-obb` finding from the library (the game logs nothing). Unity split-binary builds count too (`extra.unity_split`, `analysis/unity_split.py`): an XR-plugin build (Oculus XR Plugin / Unity OpenXR library) without `assets/bin/Data/UnitySubsystems/` in the APK, or BuildSettings listing more scenes than the APK has `levelN` files (globalgamemanagers loose or read from the head of data.unity3d); exact on the 48 Unity APKs of the dumps (13 split, 17 full games; OBBs of full builds are asset bundles or sound banks) |
+| Unreal game: launch.log ends with `ActivityTaskManager: START u0 {… cmp=<pkg>/.DownloaderActivity}` and `Displayed <pkg>/.DownloaderActivity`, then nothing: no OpenXR instance, no crash (GitHub #159 Contractors; triage `unreal-obb-check-stuck`, also when the OBB is on the Frame) | Epic's DownloaderActivity (started by GameActivity.onResume before the engine's main init) checks every OBB's name + size compiled into the APK (OBBData); with manifest meta-data `com.epicgames.ue4.GameActivity.bVerifyOBBOnStartUp=true` it then reads the whole OBB and compares each entry's CRC32 (cached in `files/cacheFile.txt` by the OBB's mtime). Its progress and error screens are invisible in Lepton (headless VR); a CRC mismatch waits for a button forever. A missing / wrong-size OBB starts Google Play's downloader (or a "No Google Play Store Key" dialog) and also waits | `frame.unreal_skip_obb_check` (suggested by analysis `unreal_verify_obb`): sets that meta-data to false (one boolean in the manifest, `axml.set_meta_data_bool`), which skips only the CRC pass. Still stuck: the OBB doesn't match the APK version (name `main.<versionCode>.<pkg>.obb` and its size) - copy APK + OBB from the same install |
 | `INSTALL_FAILED_NO_MATCHING_ABIS` | 32-bit-only APK; Frame has no AArch32 | None. PC/Rift version via Revive |
 | Crash at start: `NoClassDefFoundError: … Landroid/window/OnBackInvokedCallback;` or `NoSuchMethodError: No static method storeStoreFence()V in class Ljava/lang/invoke/VarHandle;` (GitHub #71/#72, triage `android-too-new`) | The APK needs Android 13+ (minSdk 33 or more; those were 34) and calls its classes at start; Lepton's Android is 11 (API 30). OVRPort lowers minSdk to 29, so it installs anyway. minSdk ≤ 32 (Quest's Android 12L) is fine: 16 working catalog games declare 32 | None (analysis `extra.min_sdk` > 32 → a warning on the game page/CLI and in the recipe notes; never unsupported from the manifest alone, the launch test's triage decides). Waits for Valve to update Lepton's Android |
 | Nothing opens; `TWALauncherActivity: Using URL from Manifest (https://…)`, `Creating TwaLauncher for com.oculus.browser`, `NameNotFoundException: com.oculus.browser` (GitHub #86 Mahjong Table VR, triage `web-wrapper`) | The APK is a Trusted Web Activity (Bubblewrap / Meta's PWA packaging): a website that opens in Meta's browser, which Lepton doesn't have | None: open the URL in a browser. Analysis `extra.web_wrapper` (manifest meta-data `android.support.customtabs.trusted.DEFAULT_URL`, resolved through resources.arsc, or androidbrowserhelper's LauncherActivity) → a warning with the URL (not unsupported: the manifest alone never decides) |
@@ -69,6 +83,8 @@ version is `catalog/triage.yaml` (used by `frameport test` / the Job screen); ke
 | SIGABRT right after start, backtrace `libopenxr_loader.so (xrCreateSwapchain+…)` | overport's dispatcher aborts on swapchains > 4096 px ("Wrong createInfo size"); video players use 7680×3840 theater textures | `frame.swapchain_limit` (default on; guard → 16384 px; triage `swapchain-size-abort`), for example 4XVR |
 | Video/menu panel missing, log `dropped N unusable layer(s)` with cylinder (1000017000) or equirect2 (1000091000) layers | the Frame runtime lacks XR_KHR_composition_layer_cylinder/equirect(2)/cube (its SteamVR runtime only composites quad + projection layers) | adapter shows cylinders as flat strips (setting `cylinder_strips`, default on); 360° equirect layers (theaters, 360° videos): `adapter.equirect_emul` (GLES only, per game) |
 | 360° theater / 360° video black or missing (for example 4XVR) | equirect layers dropped | `adapter.equirect_emul=1`: a worker thread with a shared GLES context converts each 360° image to a cube map when it changes and draws one adapter projection layer from it for every frame with exactly that frame's views; it replaces the 360° layers in place, so the game's own projection layer (balcony, controllers, 360° videos it draws itself) stays on top. Quads can't be used: the Frame draws quad layers above every projection layer whatever the order. Log: `first 360 view ready`, `in 5 s: N 360 image update(s) … M view redraw(s)`. Upside down / mirrored / behind you: `equirect_flip` 1/2/4 (`frameport settings <pkg> equirect_flip=1`, no rebuild). Never Vulkan (a Vulkan renderer hung the Frame's GPU in AC Nexus) |
+| Fades to black don't show: you see the level loading behind a loading screen (Batman: Arkham Shadow, GitHub #197); with `layer_debug=1` launch.log shows `color scale 0.00 0.00 0.00 …` on the projection layer | the game fades by dimming its eye image with XR_KHR_composition_layer_color_scale_bias; whether the Frame's runtime applies it isn't confirmed in the headset yet | `adapter.fade_quad=1` (opt-in, `native/adapter/fade_quad.c`): FrameBridge adds a black, alpha-blended quad right after the dimmed projection layer (VIEW space, 1 m ahead, 6×6 m; opacity = 1 − scale in 16 steps from one 8×8 swapchain refilled only when the step changes: Vulkan clear / GLES clear; one swapchain per step hit XR_ERROR_LIMIT_REACHED in Batman), log `fade_quad: drawing fades over the picture`; `fade_quad=2` also removes the layer's own scale (if both show, the fade is doubled) |
+| Vermillion: the hand and brush disappear over the canvas while painting, but still paint (GitHub #200) | the game shows a canvas being painted as its own compositor (quad) layer and turns the canvas's scene renderer off; the Frame draws quad layers above every projection layer whatever the order, so the canvas covers the hand (Vulkan game: no GL layer emulation) | `frame.vermillion_scene_canvas` (catalog): `PaintableMesh.HasCompositorLayerAvailable` / `ShouldUseCompositorOverlay` -> false in libil2cpp.so (Cpp2IL), so the game's own fallback draws the canvas in the scene (Klownicle's finding) |
 | Unity game hangs right after its first frames, no `pacing:` lines; SIGQUIT dump shows UnityMain in a game library's `JNI_OnLoad` → `usleep` (for example SKYBOX: `libskybox.so`, `SignatureChecker`) | the game checks its APK signing certificate; every port is re-signed | can't be fixed without defeating anti-tamper (FramePort doesn't): mark "Can't run". Diagnose hangs: `podman exec <container> kill -3 <pid>` writes all thread stacks to launch.log |
 | Video player doesn't list sent videos (for example 4XVR "Internal Storage" only shows some) | the player lists its own /sdcard folder (4XVR: /sdcard/4XPlayer), not /sdcard/Movies; Android's media index doesn't work in Lepton | game page "Add videos" / game menu "Add videos and files" (Videos + the app's own folder, hard links) or `frameport frame send <files> --app <pkg>` |
 | One eye gray in a stereo video, log `xrCreateSwapchain … result=-10` | the runtime refused a swapchain (XR_ERROR_LIMIT_REACHED) | fewer/smaller swapchains: lower `equirect_res`; unresolved |
@@ -98,7 +114,12 @@ version is `catalog/triage.yaml` (used by `frameport test` / the Job screen); ke
 | Crash right after the game gets focus, in `vrclient.so … UpdateActionStateInternal` / `sxr_xrSyncActions` (for example Myst) | a race in the Frame runtime's input code on the first sync after focus (not every launch) | adapter `sync_guard` (input syncs one at a time with event polling, paused 250 ms after FOCUSED) |
 | View jumps sideways / game pauses or freezes for a moment every few seconds (for example Blade & Sorcery, BattleGlide) | the Frame drops focus for ~0.5 s (FOCUSED→VISIBLE→SYNCHRONIZED); games pause or re-align the player (`OnVRPresence … Teleport`) | adapter `focus_hold` |
 | SDL / LÖVE app crashes at start: `NullPointerException … ClipboardManager.addPrimaryClipChangedListener` in `SDLClipboardHandler.<init>` (for example Dramatic Shape) | Lepton's Android has no clipboard service (`service check clipboard`: not found) | `frame.sdl_clipboard` (that call → nops in classes.dex, in place, `apk/dex.py`); reproduced and verified with LÖVE for Android 11.5 |
+| Godot 4 app crashes at start: `java.lang.NullPointerException: null cannot be cast to non-null type android.content.ClipboardManager` at `org.godotengine.godot.Godot.<init>` (Godot 4.3/4.4; 4.2 when the clipboard is first used, in `Godot$mClipboard$2.invoke`) (for example EndoparasiticVR, GitHub #134); triage `godot-no-clipboard` | Lepton's Android has no clipboard service and Godot's Kotlin code casts it with a non-null `as ClipboardManager` (`Intrinsics.checkNotNull` before the check-cast). Godot 4.1 (Java) and 4.5+ (`as?`) don't throw | `frame.godot_clipboard` (suggested by analysis `godot_clipboard`): that checkNotNull call → nops in classes.dex (check-cast accepts null), and Godot's getClipboard/hasClipboard/setClipboard return at once ("" / false / nothing; `Dex.return_early`), in place; matched exactly, other dex files untouched. Checked against the Maven godot-lib 4.2.2/4.3.0/4.4.1 and the 4.3/4.4.1 release export templates (D8 re-reads the result); not yet run on the device |
 | Game crashes at start: `java.lang.NoSuchMethodError: No virtual method getAvailableCommunicationDevices()… in class Landroid/media/AudioManager` at `com.vivox.sdk.AudioChangeListener.checkAudioRouteAndApplyChanges` (for example Green Hell VR, GitHub #101); triage `vivox-api31` | Newer Vivox (voice chat) builds call Android 12 audio-routing methods without a version check; Lepton is Android 11. Older Vivox builds (Eleven Table Tennis, BattleSisters) don't have that code | `frame.vivox_audio_route` (suggested by analysis `vivox_api31`): every AudioChangeListener method that calls one of them returns at once (`Dex.return_early`: return-void / `const/4 v0, 0; return v0`, in place); voice chat keeps the default audio route |
+| A game on a microSD card or another drive doesn't start, loses its saves or loops at start; launch.log has `ln: cannot create symbolic link from 'Frame' to '/data/data/<pkg>'` or `Couldn't create directory for SharedPreferences file /data/user/0/<pkg>/…` (GitHub #213/#214/#215/#221: a card named "Steam Frame 512g"); triage `lepton-data-link-failed` | Valve's Lepton pastes `STEAM_COMPAT_DATA_PATH` unquoted into `sh -c "ln -s …/internal/<pkg> /data/data/<pkg>"` (liblepton mounting.sh) and APK paths into unquoted substitutions, so a path with a space never gets the app's internal storage | agent v83: the Quest launcher links the game folder to `~/.local/share/frameport/lepton-paths/<pkg>` at every start and gives Lepton that path (`app_dir_lines`); `upgrade_launchers` converts existing launchers at the next connection; deployment.json keeps the real path |
+| Start never finishes, 100 % CPU, launch.log of gigabytes repeating `EOSSDK.createKeychain` / `resetKeychain` (Beyond Sandbox, GitHub #214); triage `eos-keychain-loop` | Epic Online Services' Java keychain can't write its SharedPreferences and resets/creates without end (seen when the app had no internal storage, row above) | fix the storage first; `frame.eos_keychain_loop` (opt-in, offered by triage; analysis `eos_keychain`) makes `EOSSDK.resetKeychain` return at once (`Dex.return_early`) |
+| Unity game freezes on its loading screen ~10-15 s in (Yupitergrad, GitHub #235); launch.log has `GrantPermissionsActivity: Permission grant result … permission=android.permission.BLUETOOTH_CONNECT`, then OVRPlugin `SetupDisplayObjects(): Unable to find EGLConfig for configId 0` and no more frames; triage `bhaptics-permission-prompt` | bHaptics' vest SDK (`com.bhaptics.commons.PermissionUtils.requestBluetoothPermission`) asks for Android 12's BLUETOOTH_CONNECT; on Lepton's Android 11 it can't be granted at install, so Android's permission screen takes the foreground for a moment, the game pauses/resumes and OVRPlugin's GLES compositor stops drawing | `frame.bhaptics_permission` (suggested by analysis `bhaptics_permission`): the request returns at once (`Dex.return_early`) |
+| Unity game aborts at start: `Abort message: 'cannot create thread specific key for __cxa_get_globals()'` (SIGABRT in a library such as `libFirebaseCppApp-*.so`, for example Wander 0.3570, GitHub #198); triage `pthread-keys-exhausted` | Bionic allows 128 pthread keys per process; Unity 6 takes ~40 (most without a destructor), large native libraries (Gecko `libxul.so`, Firebase, avatar SDKs) and the Frame's own libraries (Mesa/Zink, FrameBridge, OVRPort, Valve's Vulkan layers) take the rest | `frame.unity_tls_key_pool` (opt-in; suggested for Unity 6 with Firebase C++ or Gecko): libunity.so's `pthread_key_*`/`pthread_get/setspecific` imports are renamed to `fp_tkey_*` (`elf.rename_imports`, versions set global) and `libfp_tkeys.so` (`native/tlskeys`) is added to its DT_NEEDED; destructor-less keys become slots behind one real key (logs `fp_tkeys: pooling Unity's thread keys`). Approach by Klownicle (#198) |
 | Controllers do nothing (for example stuck on a setup screen); log: `xrSuggestInteractionProfileBindings … XR_ERROR_PATH_UNSUPPORTED` | the game only suggests bindings for Meta's newer profiles (Touch Plus / Touch Pro); the Frame's Android runtime knows `oculus/touch_controller`, not those | adapter `profile_remap` (default on): the bindings are suggested again for Touch (log: `controller profile … -> oculus/touch_controller`) |
 | Some buttons do nothing or the wrong thing (for example a Quest game's X/Y on the Frame's left controller) | the game binds only Quest Touch and SteamVR maps Touch onto the Frame controllers with its own remap (Touch left X/Y land on the d-pad, right X and Y repeat B), or the runtime rejected a profile or an input call | turn on adapter `input_diag` (diagnostics, off by default; `frameport settings <pkg> input_diag=1`) and look for `input_diag:` lines: `bindings: <profile> accepted` or `unsupported: interaction profile <profile> -> <result>` with the rejected paths, `bindings: /user/hand/<hand> uses <profile>`, `unsupported: function <name>`, `unsupported: xrCreateAction -> <result> (<action>)` |
 | Unity game hangs or the whole Frame restarts (for example in a menu); log: `The current MSAA level is 0, but the recommended MSAA level is 4. Switching to the recommended level.` (for example Lucky's Tale) | Meta's OVRManager (`useRecommendedMSAALevel`) turns 4x MSAA on at runtime, past QualitySettings; multisampled render-to-texture on GLES/Zink hangs the GPU | `frame.unity_runtime_msaa_off` (Cpp2IL: `OVRDisplay.get_recommendedMSAALevel` → 0) |
@@ -123,7 +144,7 @@ version is `catalog/triage.yaml` (used by `frameport test` / the Job screen); ke
 | 2D Android app: Steam says it's running but nothing shows | Lepton runs apps headless unless the app folder has `lepton-show-flatscreen` | FramePort adds it for apps without VR (agent v28+); reinstall apps installed before |
 | A phone/tablet app shows nothing in the headset, or a VR app opens as a flat window | FramePort's VR/2D guess (`vr_kind`) is wrong for this app | patch `device.display_mode` → **Flat window** or **VR** (Customize → "Show as VR or as a flat window"), then Update on Frame |
 | An install button opens another program (or nothing) instead of FramePort | another program owns the link type, or the switch is off, or macOS (Flet can't receive links there) | Settings → Install links → **Use FramePort for these links**; else Add games → Install from a link… (paste the button's address) |
-| 2D Android game ignores the controllers: they only move a pointer, an SDL game keeps its touch controls ("no controller attached"); Android's log lists only `wayland_touch`/`wayland_keyboard`/`wayland_pointer` (GitHub #162, Skate 3) | Lepton's Android gets keyboard, pointer and touch from the Wayland seat only: no gamepad device | patch `device.steam_gamepad` (2D apps; suggested when the manifest declares `android.hardware.gamepad` or `LEANBACK_LAUNCHER`; no APK change, reinstall): the launcher puts FramePort's Podman wrapper (`~/.local/share/frameport/agent/bin/podman`) first on PATH, which bind-mounts Steam Input's virtual pads (uinput, 28de, "Microsoft X-Box 360 pad N") at `/dev/input/eventN` plus an Xbox 360 key layout, and exports `LEPTON_ENV_SDL_GAMECONTROLLER_ALLOW_STEAM_VIRTUAL_GAMEPAD=1`. Check: launch.log `FramePort gamepad: Steam Input virtual gamepads for this container: event5 (…)` ("none" = Steam had no pad when the game started: Steam only makes it while the controllers are on), `podman exec lepton-steamlaunch-<appid> dumpsys input` lists the pad. Steam Input must be on for the shortcut. A pad Steam makes after the start (controllers woke later, reconnect) isn't seen until the next start. Off for one start: `FRAMEPORT_NO_GAMEPAD=1 %command%` |
+| 2D Android game ignores the controllers: they only move a pointer, an SDL game keeps its touch controls ("no controller attached"); Android's log lists only `wayland_touch`/`wayland_keyboard`/`wayland_pointer` (GitHub #162, Skate 3) | Lepton's Android gets keyboard, pointer and touch from the Wayland seat only: no gamepad device | patch `device.steam_gamepad` (2D apps; suggested when the manifest declares `android.hardware.gamepad` or `LEANBACK_LAUNCHER`; no APK change, reinstall): the launcher puts FramePort's Podman wrapper (`~/.local/share/frameport/agent/bin/podman`) first on PATH, which binds the host's `/dev/input` at `/dev/fp-input` plus an Xbox 360 key layout (Vendor_28de_Product_11ff.kl, incl. D-pad buttons), and exports `LEPTON_ENV_SDL_GAMECONTROLLER_ALLOW_STEAM_VIRTUAL_GAMEPAD=1`; the launcher's `_gamepad_links` worker (agent v85) keeps `/dev/input/eventN` links to Steam Input's virtual pads (uinput, 28de, "Microsoft X-Box 360 pad N") in step while the game runs, so a pad Steam makes later (controllers woke up, reconnected) is added and a gone one removed (Android's EventHub follows through inotify). Check: `<base>/gamepad.log` (`pads: event5` / `pads: none`), launch.log `EventHub: New device … pad`, `podman exec lepton-steamlaunch-<appid> dumpsys input` lists the pad. Steam Input must be on for the shortcut; Steam activates the shortcut's own layout while the game has focus (controller.txt `Queueing activation for controller: 0 app: <shortcut appid as signed int>`), and Steam's UI layout (app 769) while the dashboard is open. Off for one start: `FRAMEPORT_NO_GAMEPAD=1 %command%` |
 | 2D Android app: back/home/recents buttons cover the app's own buttons | Android's navigation bar | patch `device.hide_navbar` (on by default for apps without VR) sets `qemu.hw.mainkeys=1`; reinstall to apply |
 | Black screen, audio works, GLES engine with direct VrApi | Mesa rejects Quest-style GLSL | `frame.gl_shim` (logs `GLShim: SHADER COMPILE FAILED` + source lines) |
 | Black screen, audio works, log `Unsupported VrApi layer type N` | bridge drops frames containing that layer | extend the bridge (cylinder=3 is converted to a quad already) |
@@ -137,6 +158,7 @@ version is `catalog/triage.yaml` (used by `frameport test` / the Job screen); ke
 | MR game stuck waiting for room data (Demeter) | no Meta scene API | adapter `scene_emul=1` (+ `frame.meta_permissions`) |
 | Hand-tracking game janky (Silhouette) | Frame synthesizes hands from controllers | `controller_fix=0` passes hands through; not really fixable |
 | Eye distortion while moving (Arcsmith, Time Stall) | unknown (not eye swap, tracking, Valve layers, depth or pacing) | unresolved |
+| The Climb 666.0: hand outlines ripple in both eyes while menus and gameplay work (GitHub #238) | Unknown. Sessions paced around 72 fps, controller tracking reported valid, and SteamVR motion smoothing was already off; these checks do not establish the cause | Unresolved after wearer comparisons on 2026-10-12: disabling Valve's Vulkan layers, setting `r_AntialiasingMode = 1`, and setting `r_AntialiasingMode = 0` with `r_MotionBlur = 0` each gave the same or worse result. These were config comparisons; runtime cvar values were not verified. Restored the playable configuration (`r_vr_foveated = 0` with the default Vulkan layers), retaining the startup/rendering crash fixes above. Do not keep the unsuccessful experimental settings as a fix |
 | One eye gray / only effects (I Am Cat, Unity Oculus XR Plugin on GLES) | the game's multiview pass draws array slice 1 wrong on Zink | `frame.unity_multipass` (also rewrites the getter's inlined read in `OculusLoader.Initialize`; check for two `array=1` eye swapchains) |
 | View vibrates even when holding still after `frame.unity_multipass` (I Am Cat) | poses/times are consistent, but two passes on Zink make every frame one period late, and the game clamps its physics step to 10 ms | not fixed (scale 0.8 didn't help); next ideas: fix multiview instead, or the game's fixed timestep |
 | Game freezes / pauses for 0.5-2 s now and then, no flicker (for example Blade & Sorcery, Lucky's Tale) | the headset's wear sensor flickers off while worn (`logs/eyetracking.txt` `HMD off, stopping eye tracking` … `HMD on`), the Frame turns it into a focus loss and Quest games that pause on focus loss pause | adapter `focus_hold` (on by default since 2026-10-05, dips up to `focus_hold_ms` = 5000 ms are hidden; longer ones still pause) |
@@ -177,7 +199,9 @@ version is `catalog/triage.yaml` (used by `frameport test` / the Job screen); ke
  touching new memory (`perf script -F comm,tid,ip,dso`); `-t <tid> -F 499` samples one thread. Map IL2CPP
  addresses with a full Cpp2IL diffable-cs dump (method `Offset` = address − the r-xp mapping of libil2cpp.so).
  Sample memory per mapping name from `/proc/<pid>/smaps` (`[anon:libc_malloc]` = native heap).
- Hangs (every thread asleep): backtraces of all threads with gdb. Root inside the Lepton container may ptrace the
+- Hangs (every thread asleep): first ask for a diagnostics zip saved *while the game hangs*: `target/threads.txt`
+  (agent v79) shows each thread's wait and syscall (futex = a lock, ppoll/recvfrom + an internet socket = network). Then
+  backtraces of all threads with gdb. Root inside the Lepton container may ptrace the
  game (the host's `ptrace_scope` 1 doesn't apply there) and the guest has `gdbserver64`; `debuggerd -b` fails (no
  tombstoned). Copy every mapped library to a local sysroot (`podman exec <container> cat /proc/<pid>/maps`, then
  `tar -chf - -T <list>` through `podman exec -i`; the app's own libs from the installed `lepton-app/game.apk` at their
@@ -73,6 +73,42 @@ panoramas retain their layer rotation and have no translational parallax.

 ## Stable composition

+Adapter-owned video outputs explicitly request a static
+`XR_FOVEATION_LEVEL_NONE_FB` runtime profile before image enumeration. This
+prevents shared Valve foveation from coarsening the side-by-side video output.
+The profile applies only to those outputs; application eye swapchains retain
+foveation and gaze tracking. The runtime result is logged as
+`surface_video: full-rate runtime profile result=...`.
+
+Composition retains the original raster pipeline, linear-light blending and
+sRGB colour attachment. A compute compositor was also tested, but did not alone
+fix pixelation and added a private full-size image copy. The full-rate runtime
+profile fixed pixelation in the headset; the restored raster path was confirmed sharp and improved in-game presentation
+from roughly 40–44 to 65–71 FPS in the sampled cutscene. It still needs further
+performance work. Fully opaque video pixels skip the invisible scene texture
+sample and colour transform; partially transparent pixels retain the full blend. The next live cutscene run reported about 84 FPS across its first five post-startup samples, versus about 69 in the preceding run, with decoding steady at 60 FPS. These separate samples do not control for head motion or temperature; smooth playback is not yet fully established. The video surface patch revision marks affected
+recipes for rebuilding without forcing unrelated game updates.
+
+Once native video composition is active, the compositor can sample an sRGB view
+of the worker's shared hardware buffer directly. The renderer retains the slot
+across repeated frames; replacement queues a foreign-queue ownership handoff
+behind earlier compositor reads, and only its signalled fence makes the old slot
+reusable by the worker. Missing compatible views and initial/fallback presentation
+retain the copy path. The full-rate video profile and output resolution are
+unchanged. Deployment/performance validation is initially limited to Batman.
+The headset playback check confirmed good performance, and the live log confirms
+`direct shared-buffer sampling; cache copy skipped`. During active video,
+recorded application pacing was approximately 105–107 FPS, with decoding around
+60 FPS and visible-view GPU waits around 4.0–4.8 ms, versus roughly 6 ms in the
+preceding copy-path run. These are separate live runs, not a thermally controlled
+benchmark. The 8192x4096 decoded input and 2560x2560-per-eye output are retained;
+other games have not been redeployed or performance-tested with this change.
+
+The native GPU fixture checks stereo pixels, fades, image orientation, colour
+transforms, held frames and teardown, plus single-pixel alternating detail across
+both eyes including edges and corners. This is a compositor regression check;
+in-game playback with injection still needs visual confirmation on the headset.
+
 A separately submitted projected video layer can alternate with the main game
 projection as opaque coverage changes during head movement. That presentation
 path exhibited snap-back/doubled video in headset tests even when rendering
@@ -104,6 +140,19 @@ combined output with the exact camera that produced it; old pixels are never
 relabelled with a newer pose. Teardown retires snapshot writers and compositor
 readers. Depth/motion-vector images from another render are not attached.

+## Loading-screen blackout
+
+The native video adapter also preserves Batman's fully black loading state.
+When the first opaque projection requests zero RGB scale, unit alpha scale and
+zero bias, it omits that scene projection so the opaque runtime background stays
+black. Later loading UI layers retain their order. This avoids displaying assets
+as they stream in, without adding a GPU pass or changing the video resolution.
+Partially faded scenes, alpha-blended projections and composed video retain their
+existing paths. This fallback is limited to the native video adapter setting;
+other games do not gain it automatically. In-headset testing confirmed the black
+loading screen is restored. Revision 4 requests a rebuild of older native-video
+installs while leaving ordinary game recipes unchanged.
+
 ## Building and validation

 Rebuild FrameBridge with Android NDK r27c:
@@ -0,0 +1,10 @@
+# Brand assets
+
+- `frameport-icon-1024.png`: square app icon, 1024 × 1024, background to the edges (for project pages, store listings,
+  profile pictures).
+- `frameport-icon-square.svg`: the same as a vector (FramePort's logo, `src/frameport/ui/icons/logo.svg`, with square
+  corners).
+
+For the "Install with FramePort" button, see [`docs/badges/`](../badges/) and [INSTALL_BUTTON.md](../INSTALL_BUTTON.md).
+- `frameport-social-preview.png`: GitHub's social preview (1280 × 640): repository Settings → General → Social
+  preview. Built from the logo and the docs' Library screenshot (`docs/images/library.png`).
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 64 64"><defs><linearGradient id="fp0" x1="0" y1="0" x2="1" y2="0"><stop offset="0" stop-color="#3AA8FF" stop-opacity=".18"/><stop offset=".5" stop-color="#3AA8FF" stop-opacity="0"/><stop offset=".5" stop-color="#FF8A1F" stop-opacity="0"/><stop offset="1" stop-color="#FF8A1F" stop-opacity=".18"/></linearGradient><linearGradient id="fp1" gradientUnits="userSpaceOnUse" x1="26" y1="0" x2="38" y2="0"><stop offset=".3" stop-color="#3AA8FF"/><stop offset=".7" stop-color="#FF8A1F"/></linearGradient><clipPath id="fp2"><polygon points="-30,-30 49.14502116644019,-30 8.854978833559809,94 -30,94"/></clipPath><clipPath id="fp3"><polygon points="55.14502116644019,-30 94,-30 94,94 14.854978833559809,94"/></clipPath></defs><rect width="64" height="64" rx="0" fill="#101218"/><rect width="64" height="64" rx="0" fill="url(#fp0)"/><g clip-path="url(#fp2)"><g transform="translate(0 0)"><path d="M34 15H9a3 3 0 0 0-3 3v20a3 3 0 0 0 3 3h25z" fill="#101218" stroke="#ECEDF3" stroke-width="3" stroke-linejoin="round"/><rect x="10.5" y="19.5" width="24" height="17" rx="1" fill="#3AA8FF" fill-opacity="0.35"/><path d="M18 41v6M11 47h14" stroke="#ECEDF3" stroke-width="3" stroke-linecap="round"/></g></g><g clip-path="url(#fp3)"><path d="M56.5 31.5H58.5" stroke="#ECEDF3" stroke-width="3.4" stroke-linecap="round"/><path d="M22 21h27a8 8 0 0 1 8 8v5a8 8 0 0 1-8 8H48.65a3 3 0 0 1-2.6-1.5l-1-1.7a.9.9 0 0 0-1.6 0l-1 1.7a3 3 0 0 1-2.6 1.5H22z" fill="#101218" stroke="#ECEDF3" stroke-width="3" stroke-linejoin="round"/><ellipse cx="39.5" cy="30.5" rx="4.2" ry="3.8" fill="#FF8A1F"/><ellipse cx="49" cy="30.5" rx="4.2" ry="3.8" fill="#FF8A1F"/></g><g transform="rotate(18 32 32)"><ellipse cx="32" cy="32" rx="4.5" ry="22" fill="#08090C" stroke="#08090C" stroke-width="5.8"/><ellipse cx="32" cy="32" rx="4.5" ry="22" fill="none" stroke="url(#fp1)" stroke-opacity=".25" stroke-width="6.46"/><ellipse cx="32" cy="32" rx="4.5" ry="22" fill="url(#fp1)" fill-opacity="0.14" stroke="url(#fp1)" stroke-width="3.4"/></g></svg>
@@ -93,7 +93,7 @@ shots:
    docs: [docs/SHOWCASE.md]
    steps:
      - go: live
-      - wait_for: "What the player sees"
+      - wait_for: "Ready when you are"

  - name: install-progress
    docs: [docs/SHOWCASE.md]
@@ -5,7 +5,7 @@
 # docs/SHOWCASE.md ("Videos").

 output: docs/media/frameport-install.mp4
-budget_mb: 12
+budget_mb: 20
 poster_at: 9
 start:
  profile: fresh           # FramePort's first start
@@ -24,7 +24,7 @@ title:
 end:
  heading: You're set
  line: Your game is in the Frame's Steam library. More help at frameport.app/docs/install/
-  footer: github.com/spoopyghosty0/frameport
+  footer: frameport.app
  seconds: 4.0

 scenes:
@@ -34,8 +34,8 @@ scenes:
      eyebrow: "Step 1 · On your PC"
      heading: Download FramePort
      steps:
-        - "Open **github.com/spoopyghosty0/frameport** → **Releases** → the latest one"
-        - "Download the file for your PC: **FramePort-windows-x64.zip**, **FramePort-macos-arm64.zip** or **FramePort-linux-x64.tar.gz**"
+        - "Open **frameport.app/download**"
+        - "Download the file for your PC (the page picks it): **FramePort-windows-x64.zip**, **FramePort-macos-arm64.zip** or **FramePort-linux-x64.tar.gz**"
        - "Unpack it anywhere. No installer or admin rights needed"

  - name: first-start
@@ -62,7 +62,7 @@ scenes:
    caption: ["Connect your Steam Frame", "Once: one line on the Frame"]
    hold: 1.5
    steps:
-      - click: "Set up the Frame"
+      - click: "Set up your Frame"
      - wait: 1.6
      - click: "Start setup"
      - wait_for: "Waiting for your Frame to ask"
@@ -111,7 +111,7 @@ scenes:
      - hook: {name: pairing_done, args: [1.6]}
      - wait_for: "Ready to play"
      - wait: 1.2
-      - hover: "Quest games (Lepton)"
+      - hover: "Quest games"
      - wait: 1.6

  - name: add-games
@@ -3,7 +3,7 @@

 output: docs/media/frameport-tour.mp4
 teaser: docs/images/tour-teaser.webp
-budget_mb: 12
+budget_mb: 20
 start:
  profile: demo           # the library in use: games installed on the pretend Frame, BONELAB running
  frame: connected
@@ -12,11 +12,12 @@ embeds debug paths (`-g`) and the dex depends on the d8 version, so those differ
 | Dir | Artifact | What / why |
 |---|---|---|
 | `adapter/` | `{arm64-v8a,armeabi-v7a}/libopenxr_loader_generic.so` | **FrameBridge**: replaces overport's generic loader (which is renamed `libopenxr_loader_original.so`) and fixes Steam Frame runtime gaps. Hooks xrCreateInstance, swapchains, xrEndFrame, spaces, xrPollEvent, … everything else is forwarded by `gen_forwarders.py`-generated tail calls. `scene_emu.c` = Meta scene/spatial-entity emulation; `flip_vk.c` = Vulkan blit for VERTICAL_FLIP quads. `session_fixes.c` = per-game session fixes, all off by default and hooked only when on (`layer_debug` diagnostics, `stable_local`, `focus_hold`, aim correction `aim_pitch/aim_yaw/aim_forward`, `refresh_rate`, `proximity_emul` = finger proximity (XR_FB_touch_controller_proximity, which the Frame lacks) from the capacitive touch inputs: OVRPlugin's `hand_thumb_proximity`/`hand_trigger_proximity` actions get extra Touch bindings); `input_diag.c` = controller-input diagnostics (setting `input_diag`, off by default and hooked only when on; logs suggested interaction profiles and the runtime's answers, each hand's current profile, functions the runtime lacks and failing input/haptics/perf calls, each line once; tested on the host by `tests/test_input_diag.py`); `layer_emul_gl.c` = `equirect_emul` (GLES sessions only): 360° equirect/equirect2 layers become one adapter projection layer, drawn by a worker thread with its own EGL context shared with the app's: each 360° image is converted to a cube map only when it changes, and the view is redrawn only after a 4° head turn (GL/EGL resolved with dlopen, so Vulkan games never load them); `layer_math.h` = their pose/face math, tested on the host by `tests/test_layer_emul.py`. `render_model.c` = XR_FB_render_model emulation (setting `controller_models`, off by default): serves `files/framebridge/controller_{left,right}.glb`, which the agent converts on the Frame from SteamVR's own Frame controller render models (never shipped by FramePort); tested on the host by `tests/test_render_model.py`. Settings: `libframe_settings.so` in the APK + `settings.conf`/`framebridge.conf` on the Frame. |
-| `vrapi-bridge/` | `arm64-v8a/libvrapi.so` | VrApi → OpenXR bridge from [Android-XR-Bridge/OVRPort](https://github.com/Android-XR-Bridge/OVRPort) `native/vrapi` at 5e7df52 (GPL-3.0, `LICENSE.upstream`; unchanged upstream as of OVRPort v1.2.5, which ships the unpatched code as its opt-in `patch_vrapi_openxr` in experimental CLI builds), with our changes in `upstream-patches/`: GLES sessions + GL texture swapchains, cylinder→quad layers, GL vertical flip, UNORM↔sRGB format twins, 30 s VR-mode deadline, VALID-only recenter, loading-icon layers skipped, `vrapi_PollEvent`/`RecenterPose`/`SetDisplayRefreshRate`/`GetSystemPropertyFloatArray` (BlazeRush imports them, GitHub #57), diagnostics behind `-DOVP_GL_DIAG`. `upstream-patches/` reproduces these sources from the fork's `native/vrapi` (checked 2026-10-06 against its latest commit); upstream PRs Android-XR-Bridge/OVRPort#3-#8, tracked in GitHub #75. |
+| `vrapi-bridge/` | `arm64-v8a/libvrapi.so` | VrApi → OpenXR bridge from [Android-XR-Bridge/OVRPort](https://github.com/Android-XR-Bridge/OVRPort) `native/vrapi` at 5e7df52 (GPL-3.0, `LICENSE.upstream`; unchanged upstream as of OVRPort v1.2.5, which ships the unpatched code as its opt-in `patch_vrapi_openxr` in experimental CLI builds), with our changes in `upstream-patches/`: GLES sessions + GL texture swapchains, cylinder→quad layers, GL vertical flip, UNORM↔sRGB format twins, 30 s VR-mode deadline, VALID-only recenter, loading-icon layers skipped, `vrapi_PollEvent`/`RecenterPose`/`SetDisplayRefreshRate`/`GetSystemPropertyFloatArray` (BlazeRush imports them, GitHub #57), legacy compositor debug/volume frame flags accepted, full-rate Vulkan foveation images allocated as density attachments (The Climb, GitHub #238), diagnostics behind `-DOVP_GL_DIAG`. `upstream-patches/` reproduces these sources from the fork's `native/vrapi` (checked 2026-10-06 against its latest commit); upstream PRs Android-XR-Bridge/OVRPort#3-#8, tracked in GitHub #75. |
 | `platformcompat/` | `arm64-v8a/libovrplatformcompat.so` | Real `ovrMessageType_ToString` (same fork, `native/platform`). |
 | `langpack/` | `arm64-v8a/libfp_langpack.so` | Language packs for the Meta Platform SDK (patch `frame.langpacks`, opt-in). overport's platform loader is a dispatcher in front of Meta's own loader and answers `ovr_LanguagePack_GetCurrent/SetCurrent` with `return 0` (no reply ever). This library becomes the loader's first DT_NEEDED; the loader's own exports of the 31 functions it defines are made STB_LOCAL in `.dynsym` (`elf.hide_exports`, nothing moves), so symbol lookups reach the library first. It serves `<tag>.lang` files found in the game's OBB / app files (`$FRAMEPORT_LANGPACK_DIRS` overrides the search path) through `ovr_LanguagePack_*`, `ovr_AssetFile_GetList` (the loader's list + the packs) and `ovr_AssetFile_StatusById`; its own message queue is merged into `ovr_PopMessage`, and every handle that is not ours (an address-range check) goes to the loader's original function, whose address is read at run time from the loader's in-memory `.dynsym`. With patch `frame.asset_files` (marker byte `@FPASSETS@`, or env `FRAMEPORT_ASSET_FILES=1`) it also lists the data's `*.pak` content files as installed `default` asset files and answers `ovr_AssetFile_DownloadById` for them at once (a completed `DownloadUpdate`, then the result with the path). Host-tested against a stand-in loader (`tests/test_langpack.py`, plain `cc`, no NDK); the bionic/headset side is unverified. |
 | `glshim/` | `arm64-v8a/libglshim.so` | Mesa GLSL compatibility for GLAD engines (hooks eglGetProcAddress): comments out `#pragma` before `#extension`, enables `GL_EXT_shader_implicit_conversions`, hides GL_OVR_multiview (`gl_hide_multiview`, default 1) and logs failed shaders. `-DGLSHIM_TRACE` adds per-FBO draw/error tracing. |
 | `glmv/` | `arm64-v8a/libfpglmv.so` | Single-view draws of OVR_multiview programs (patch `frame.gl_multiview_fbo`, opt-in, GitHub #77). Mesa enforces OVR_multiview's rule that a draw's program declares as many views as the draw framebuffer has; engines that compile every shader with `num_views=2` and also draw into ordinary 2D framebuffers (Doom3Quest's HUD/PDA pool) lose those draws. The engine library gets it as first DT_NEEDED (direct `gl*` imports) and its `dlopen("libGLESv3.so")` string is rewritten to `libfpglmv.so` (same length; its `qgl*` dlsym table); linked `--no-as-needed` to libGLESv3 so dlsym on its handle finds everything it doesn't wrap. It records stage sources at glLinkProgram, caches the draw framebuffer's color-attachment view count per bind, and when a multiview program draws into a 0-view framebuffer it binds a lazily built twin (`glmv_rewrite.h`: num_views layout blanked, `gl_ViewID_OVR` -> `(0u)`; attribute locations + uniform block bindings copied, default-block uniforms copied before every such draw with a shadow to skip unchanged ones), draws, rebinds the original. Logcat tag `GLMV`; `gl_mv_debug=1`. The rewriter is host-tested on Doom3Quest's 19 shaders (`tests/test_gl_multiview_fbo.py`); untested on the device. |
+| `tlskeys/` | `arm64-v8a/libfp_tkeys.so` | Thread-key pool for Unity (patch `frame.unity_tls_key_pool`, opt-in, GitHub #198; approach and the first helper by Klownicle). Bionic allows 128 pthread keys per process; Unity 6 plus large native libraries (Firebase, Gecko) and the Frame's own libraries use them up (Wander: `cannot create thread specific key for __cxa_get_globals()`). libunity.so's four key imports are renamed to `fp_tkey_create/_delete/_get/_set` (`elf.rename_imports`, same `.dynstr` bytes, versions set global) and this library is added to its DT_NEEDED: keys without a destructor become slots (512, generation-tagged, `0x40000000 + slot`) in a per-thread table under one real key; keys with a destructor and all other libraries keep real keys. Lock-free get/set. Logs `fp_tkeys: pooling Unity's thread keys` once (tag FrameBridge). Host-tested (rename); not yet run on the device. |
 | `zinkfix/` | `arm64-v8a/libVkLayer_fp_shaderfix.so` | Shader-fix Vulkan layer `VK_LAYER_FP_shader_fix` for OpenGL ES games (patch `frame.zink_shader_fix`): sits between Zink (Mesa's GL on Vulkan) and the driver and inserts the words of `zink_shader_fix` (same format as the Vulkan shim's `vk_shader_fix`: size + SHA-256 match) into SPIR-V modules; `zink_shader_dump=1` writes every distinct module to `files/fp_spirv/`. The engine library loads it first (DT_NEEDED); its constructor puts the layer in front of Android's GraphicsEnv debug layer list (private Android 11 `getDebugLayers`/`setDebugLayers`, found through libvulkan.so's dependencies) before EGL starts, so the loader picks it up from the app's lib dir. Exports only the enumeration functions and `VK_LAYER_FP_shader_fixGet*ProcAddr` (never plain `vk*` entry points). Vader Immortal's lightspeed shaders (Klownicle, GitHub #49). |
 | `xrlayer/` | `linux-arm64/libxr_frameport_timefix.so` + `XR_APILAYER_FRAMEPORT_timefix.json` | OpenXR API layer for Windows PC VR games under Proton on the Frame (glibc aarch64, built freestanding with the NDK's clang), on by default (patch `pcvr.xr_timefix`). Retries `xrCreateInstance` as an OpenXR 1.0 app when the runtime rejects 1.1 (the Frame's SteamVR runtime does, and Proton 11's VR helper asks for 1.1). Also emulates `xrConvertTimespecTimeToTimeKHR`/`xrConvertTimeToTimespecTimeKHR` if the runtime refuses them (the Frame's Android runtime does; its Linux runtime, used by Proton, supports them as of 2026-09-29 — so this part is only a fallback; Proton's wineopenxr needs them for `XR_KHR_win32_convert_performance_counter_time`, which Revive requires) with the adapter's xrWaitFrame-calibrated offset, and drops the extension from xrCreateInstance if the runtime rejects it. Enabled per game by the Proton launch.sh (`XR_API_LAYER_PATH`, `XR_ENABLE_API_LAYERS`). `tests/test_xrlayer.py` builds it for x86_64 and drives it via ctypes. |
 | `oculushmd/` | `win-x64/fp_oculushmd.exe` | PC VR counterpart of overport's `patch_oculus_unreal` (patch `pcvr.oculus_unreal`, default for Unreal Rift games on the Frame). Unreal's OculusHMD and LibOVR's `ovr_Detect` only start when the Windows named event `OculusHMDConnected` exists and is signalled (the Oculus service creates it). `fp_oculushmd.exe <command line>` creates it (manual reset, signalled), runs the command (Revive's injector) in a job object and keeps the event until every process in the job — the game and its children — has exited (fallback without job support: 3 minutes); returns the command's exit code and logs `FramePort oculushmd: …` to stderr (launch.log). Freestanding Windows x64 console exe (no CRT, no Windows SDK): the NDK's clang + `lld-link /Brepro` with a kernel32 import library generated by `llvm-dlltool`, so it's byte-reproducible. Tested on Windows from WSL with a build whose event name is `-DEVENT_NAME=L"…"` (the Oculus service owns the real event on a PC with the Oculus app). |
@@ -0,0 +1,16 @@
+// SPDX-License-Identifier: GPL-3.0-only
+// fade_quad.c: how dark the fade quad is for a layer's colour scale (host-tested: tests/fixtures/src/fade_level_test.c).
+#pragma once
+
+#define FADE_LEVELS 16
+
+// 0 = no fade (the picture is shown as it is), else 1..FADE_LEVELS = black at level / FADE_LEVELS opacity. The fade's
+// opacity is 1 - the average of the red, green and blue scale (games fade all three alike); 0.99 and above count as
+// "not dimmed", so a rounding scale never leaves a faint veil.
+static inline int fade_level_of(float r, float g, float b) {
+    float scale = (r + g + b) / 3.0f;
+    if (!(scale < 0.99f)) return 0;  // also NaN
+    if (scale < 0.0f) scale = 0.0f;
+    int level = (int)((1.0f - scale) * FADE_LEVELS + 0.5f);
+    return level > FADE_LEVELS ? FADE_LEVELS : level;
+}
@@ -0,0 +1,199 @@
+// SPDX-License-Identifier: GPL-3.0-only
+// Included by frame_adapter.c. fade_quad (per game, off by default; GitHub #197): games that fade to black by dimming
+// their eye image with XR_KHR_composition_layer_color_scale_bias (Batman: Arkham Shadow's loading screens: scale 0 ...
+// 1 on its projection layer) showed the level loading on the Frame instead of black. With the setting, FrameBridge
+// draws the fade itself: a black, alpha-blended quad layer right in front of the eyes (VIEW space, 1 m ahead, far
+// larger than the field of view), whose opacity is 1 - the layer's colour scale. The Frame draws quad layers above all
+// projection layers, which is what a fade needs; it is inserted right after the dimmed projection layer, so the game's
+// own quads (loading icons, subtitles) stay on top of it.
+//  * No drawing per frame: one tiny swapchain, refilled only when the fade level changes (at most FADE_LEVELS small
+//    clears per fade: Vulkan vkCmdClearColorImage on the app's queue through flip_vk.c's command buffer; GLES glClear
+//    through a temporary framebuffer in the app's current context). A swapchain's last released image stays valid
+//    for every later frame. (One swapchain per level hit XR_ERROR_LIMIT_REACHED in Batman: the Frame's runtime
+//    allows only a few swapchains per app.)
+//  * Set up on the first frame that needs it; any failure turns the fade off for the session (logged once).
+//  * fade_quad=2 also removes the layer's own colour scale (as strip_color_bias=1), for runtimes that do apply it
+//    (the fade would then be doubled).
+
+#include "fade_level.h"
+#define FADE_GLES_BINDING ((XrStructureType)1000024001)  // XR_TYPE_GRAPHICS_BINDING_OPENGL_ES_ANDROID_KHR
+#define FADE_GLES_IMAGE ((XrStructureType)1000024002)    // XR_TYPE_SWAPCHAIN_IMAGE_OPENGL_ES_KHR
+
+static struct {
+    XrSession session;
+    int state;  // 0 = not set up, 1 = ready, -1 = failed this session
+    int gles;   // the session's graphics API, from its binding
+    XrSpace view;
+    XrSwapchain swapchain;
+    uint32_t size, image_count;
+    XrSwapchainImageVulkanKHR vk_images[8];
+    emul_gles_image gl_images[8];
+    int shown;  // the level the last released image shows (0 = none yet)
+} fade;
+
+// GLES entry points for the one-time fill (resolved at run time like layer_emul_gl.c's: Vulkan games never load GL)
+#define FADE_GL_FUNCS(X) X(glGenFramebuffers) X(glDeleteFramebuffers) X(glBindFramebuffer) X(glFramebufferTexture2D) \
+    X(glCheckFramebufferStatus) X(glClearColor) X(glClear) X(glGetIntegerv) X(glGetFloatv) X(glGetBooleanv) \
+    X(glIsEnabled) X(glDisable) X(glEnable) X(glColorMask) X(glFinish)
+#define FADE_DECLARE(fn) static __typeof__(&fn) fade_##fn;
+FADE_GL_FUNCS(FADE_DECLARE)
+#undef FADE_DECLARE
+static __typeof__(&eglGetCurrentContext) fade_eglGetCurrentContext;
+
+static int fade_load_gl(void) {
+    void *egl = dlopen("libEGL.so", RTLD_NOW | RTLD_LOCAL), *gles = dlopen("libGLESv3.so", RTLD_NOW | RTLD_LOCAL);
+    if (!egl || !gles) return 0;
+    int ok = (fade_eglGetCurrentContext = (__typeof__(fade_eglGetCurrentContext))dlsym(egl, "eglGetCurrentContext")) != NULL;
+#define FADE_RESOLVE(fn) ok &= (fade_##fn = (__typeof__(fade_##fn))dlsym(gles, #fn)) != NULL;
+    FADE_GL_FUNCS(FADE_RESOLVE)
+#undef FADE_RESOLVE
+    return ok;
+}
+
+static void fade_on_create_session(XrSession session, const XrSessionCreateInfo *info) {
+    memset(&fade, 0, sizeof(fade));  // a new session owns new swapchains (the old ones went with its session)
+    fade.session = session;
+    for (const XrBaseInStructure *p = info ? (const XrBaseInStructure *)info->next : NULL; p; p = p->next)
+        if (p->type == FADE_GLES_BINDING) fade.gles = 1;
+}
+
+// Clear one swapchain image to black at `alpha`.
+static int fade_fill_vulkan(VkImage image, float alpha) {
+    if (!vk_ready() || !vk.CmdClearColorImage) return 0;
+    VkCommandBufferBeginInfo begin = {VK_STRUCTURE_TYPE_COMMAND_BUFFER_BEGIN_INFO, NULL,
+                                      VK_COMMAND_BUFFER_USAGE_ONE_TIME_SUBMIT_BIT, NULL};
+    VkImageSubresourceRange range = {VK_IMAGE_ASPECT_COLOR_BIT, 0, 1, 0, 1};
+    VkClearColorValue black = {.float32 = {0.0f, 0.0f, 0.0f, alpha}};
+    vk.ResetCommandBuffer(vk.cmd, 0);
+    vk.BeginCommandBuffer(vk.cmd, &begin);
+    barrier(image, 0, VK_IMAGE_LAYOUT_UNDEFINED, VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL, 0, VK_ACCESS_TRANSFER_WRITE_BIT);
+    vk.CmdClearColorImage(vk.cmd, image, VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL, &black, 1, &range);
+    barrier(image, 0, VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL, VK_IMAGE_LAYOUT_COLOR_ATTACHMENT_OPTIMAL,
+            VK_ACCESS_TRANSFER_WRITE_BIT, VK_ACCESS_COLOR_ATTACHMENT_WRITE_BIT);
+    vk.EndCommandBuffer(vk.cmd);
+    VkSubmitInfo submit = {VK_STRUCTURE_TYPE_SUBMIT_INFO, NULL, 0, NULL, NULL, 1, &vk.cmd, 0, NULL};
+    int ok = vk.QueueSubmit(vk.queue, 1, &submit, vk.fence) == VK_SUCCESS &&
+             vk.WaitForFences(vk.device, 1, &vk.fence, VK_TRUE, 100000000ull) == VK_SUCCESS;
+    vk.ResetFences(vk.device, 1, &vk.fence);
+    return ok;
+}
+
+static int fade_fill_gles(GLuint texture, float alpha) {
+    if (!fade_load_gl() || !fade_eglGetCurrentContext()) return 0;  // xrEndFrame runs with the app's context current
+    GLint old_fbo = 0;
+    GLfloat old_clear[4];
+    GLboolean old_mask[4], scissor = fade_glIsEnabled(GL_SCISSOR_TEST);
+    fade_glGetIntegerv(GL_DRAW_FRAMEBUFFER_BINDING, &old_fbo);
+    fade_glGetFloatv(GL_COLOR_CLEAR_VALUE, old_clear);
+    fade_glGetBooleanv(GL_COLOR_WRITEMASK, old_mask);
+    GLuint fbo = 0;
+    fade_glGenFramebuffers(1, &fbo);
+    fade_glBindFramebuffer(GL_DRAW_FRAMEBUFFER, fbo);
+    fade_glDisable(GL_SCISSOR_TEST);
+    fade_glColorMask(GL_TRUE, GL_TRUE, GL_TRUE, GL_TRUE);
+    fade_glFramebufferTexture2D(GL_DRAW_FRAMEBUFFER, GL_COLOR_ATTACHMENT0, GL_TEXTURE_2D, texture, 0);
+    int ok = fade_glCheckFramebufferStatus(GL_DRAW_FRAMEBUFFER) == GL_FRAMEBUFFER_COMPLETE;
+    fade_glClearColor(0.0f, 0.0f, 0.0f, alpha);
+    if (ok) fade_glClear(GL_COLOR_BUFFER_BIT);
+    fade_glFinish();  // done before the image is released to the runtime
+    fade_glBindFramebuffer(GL_DRAW_FRAMEBUFFER, (GLuint)old_fbo);
+    fade_glDeleteFramebuffers(1, &fbo);
+    fade_glClearColor(old_clear[0], old_clear[1], old_clear[2], old_clear[3]);
+    fade_glColorMask(old_mask[0], old_mask[1], old_mask[2], old_mask[3]);
+    if (scissor) fade_glEnable(GL_SCISSOR_TEST);
+    return ok;
+}
+
+static int fade_setup(XrSession session) {
+    PFN_xrCreateReferenceSpace space = (PFN_xrCreateReferenceSpace)lookup(active_instance, "xrCreateReferenceSpace");
+    PFN_xrCreateSwapchain create = (PFN_xrCreateSwapchain)lookup(active_instance, "xrCreateSwapchain");
+    PFN_xrEnumerateSwapchainImages enumerate =
+        (PFN_xrEnumerateSwapchainImages)lookup(active_instance, "xrEnumerateSwapchainImages");
+    if (!space || !create || !enumerate) return 0;
+    XrReferenceSpaceCreateInfo sci = {XR_TYPE_REFERENCE_SPACE_CREATE_INFO, NULL, XR_REFERENCE_SPACE_TYPE_VIEW,
+                                      {{0, 0, 0, 1}, {0, 0, 0}}};
+    if (XR_FAILED(space(session, &sci, &fade.view))) return 0;
+    static const uint32_t sizes[] = {8, 64, 256};  // in case the runtime refuses tiny images
+    XrResult r = XR_ERROR_RUNTIME_FAILURE;
+    for (size_t i = 0; i < sizeof(sizes) / sizeof(sizes[0]); ++i) {
+        XrSwapchainCreateInfo ci = {XR_TYPE_SWAPCHAIN_CREATE_INFO, NULL, 0,
+                                    XR_SWAPCHAIN_USAGE_COLOR_ATTACHMENT_BIT | XR_SWAPCHAIN_USAGE_TRANSFER_DST_BIT,
+                                    fade.gles ? 0x8C43 /* GL_SRGB8_ALPHA8 */ : 43 /* VK_FORMAT_R8G8B8A8_SRGB */,
+                                    1, sizes[i], sizes[i], 1, 1, 1};
+        r = create(session, &ci, &fade.swapchain);
+        LOG("fade_quad: xrCreateSwapchain %ux%u format=%lld result=%d", sizes[i], sizes[i], (long long)ci.format, r);
+        if (XR_SUCCEEDED(r)) { fade.size = sizes[i]; break; }
+    }
+    if (XR_FAILED(r)) { fade.swapchain = XR_NULL_HANDLE; return 0; }
+    for (int i = 0; i < 8; ++i) {
+        fade.vk_images[i] = (XrSwapchainImageVulkanKHR){XR_TYPE_SWAPCHAIN_IMAGE_VULKAN_KHR, NULL, VK_NULL_HANDLE};
+        fade.gl_images[i] = (emul_gles_image){FADE_GLES_IMAGE, NULL, 0};
+    }
+    r = enumerate(fade.swapchain, 8, &fade.image_count, fade.gles ? (XrSwapchainImageBaseHeader *)fade.gl_images
+                                                                    : (XrSwapchainImageBaseHeader *)fade.vk_images);
+    if (XR_FAILED(r) || !fade.image_count) { LOG("fade_quad: xrEnumerateSwapchainImages failed %d", r); return 0; }
+    return 1;
+}
+
+// Show `level` in the fade swapchain (a new image only when it changes).
+static int fade_show(int level) {
+    if (level == fade.shown) return 1;
+    PFN_xrAcquireSwapchainImage acquire = (PFN_xrAcquireSwapchainImage)lookup(active_instance, "xrAcquireSwapchainImage");
+    PFN_xrWaitSwapchainImage wait = (PFN_xrWaitSwapchainImage)lookup(active_instance, "xrWaitSwapchainImage");
+    PFN_xrReleaseSwapchainImage release = (PFN_xrReleaseSwapchainImage)lookup(active_instance, "xrReleaseSwapchainImage");
+    XrSwapchainImageAcquireInfo ai = {XR_TYPE_SWAPCHAIN_IMAGE_ACQUIRE_INFO, NULL};
+    XrSwapchainImageWaitInfo wi = {XR_TYPE_SWAPCHAIN_IMAGE_WAIT_INFO, NULL, 100000000};
+    XrSwapchainImageReleaseInfo ri = {XR_TYPE_SWAPCHAIN_IMAGE_RELEASE_INFO, NULL};
+    uint32_t index = 0;
+    if (!acquire || !wait || !release || XR_FAILED(acquire(fade.swapchain, &ai, &index)) || index >= fade.image_count)
+        return 0;
+    if (XR_FAILED(wait(fade.swapchain, &wi))) { release(fade.swapchain, &ri); return 0; }
+    float alpha = (float)level / FADE_LEVELS;
+    int ok = fade.gles ? fade_fill_gles(fade.gl_images[index].image, alpha)
+                       : fade_fill_vulkan(fade.vk_images[index].image, alpha);
+    release(fade.swapchain, &ri);
+    if (ok) fade.shown = level;
+    return ok;
+}
+
+// The fade level of a projection layer: 0 = none, else 1..FADE_LEVELS (black at level / FADE_LEVELS).
+static int fade_level(const XrCompositionLayerBaseHeader *layer) {
+    if (!layer || layer->type != XR_TYPE_COMPOSITION_LAYER_PROJECTION) return 0;
+    for (const XrBaseInStructure *n = (const XrBaseInStructure *)layer->next; n; n = n->next)
+        if (n->type == XR_TYPE_COMPOSITION_LAYER_COLOR_SCALE_BIAS_KHR) {
+            const XrCompositionLayerColorScaleBiasKHR *cb = (const XrCompositionLayerColorScaleBiasKHR *)n;
+            return fade_level_of(cb->colorScale.r, cb->colorScale.g, cb->colorScale.b);
+        }
+    return 0;
+}
+
+// The quad that shows `level` (filled into *out), or NULL when there is nothing to draw or the fade isn't available.
+static const XrCompositionLayerBaseHeader *fade_layer(XrSession session, int level, uint32_t layers_so_far,
+                                                      XrCompositionLayerQuad *out) {
+    if (!fade_quad || level <= 0) return NULL;
+    if (session != fade.session) { fade.session = session; fade.state = 0; }
+    if (!fade.state) {
+        fade.state = fade_setup(session) ? 1 : -1;
+        LOG("fade_quad: %s (%s, %d levels)", fade.state > 0 ? "drawing fades over the picture" : "unavailable",
+            fade.gles ? "GLES" : "Vulkan", FADE_LEVELS);
+    }
+    if (fade.state < 0) return NULL;
+    if (!fade_show(level)) {
+        fade.state = -1;
+        LOG("fade_quad: filling the fade image failed (%s); off for this session", fade.gles ? "GLES" : "Vulkan");
+        return NULL;
+    }
+    if (layers_so_far + 1 > runtime_max_layers) {
+        static int logged;
+        if (!logged++) LOG("fade_quad: no room for the fade layer (%u layers)", layers_so_far);
+        return NULL;
+    }
+    *out = (XrCompositionLayerQuad){XR_TYPE_COMPOSITION_LAYER_QUAD, NULL, XR_COMPOSITION_LAYER_BLEND_TEXTURE_SOURCE_ALPHA_BIT,
+                                    fade.view, XR_EYE_VISIBILITY_BOTH,
+                                    {fade.swapchain, {{0, 0}, {(int32_t)fade.size, (int32_t)fade.size}}, 0},
+                                    {{0, 0, 0, 1}, {0, 0, -1.0f}}, {6.0f, 6.0f}};
+    static int last = -1;
+    if (layer_debug && level != last) LOG("fade_quad: level %d/%d", level, FADE_LEVELS);
+    last = level;
+    return (const XrCompositionLayerBaseHeader *)out;
+}
@@ -35,6 +35,7 @@ static struct {
    PFN_vkResetCommandBuffer ResetCommandBuffer;
    PFN_vkCmdPipelineBarrier CmdPipelineBarrier;
    PFN_vkCmdBlitImage CmdBlitImage;
+    PFN_vkCmdClearColorImage CmdClearColorImage;  // fade_quad.c
    PFN_vkQueueSubmit QueueSubmit;
    PFN_vkCreateFence CreateFence;
    PFN_vkWaitForFences WaitForFences;
@@ -135,7 +136,7 @@ static int vk_ready(void) {
    if (!vk.GetDeviceProcAddr) return 0;
 #define DEV(name) vk.name = (PFN_vk##name)vk.GetDeviceProcAddr(vk.device, "vk" #name); if (!vk.name) return 0;
    DEV(GetDeviceQueue) DEV(CreateCommandPool) DEV(AllocateCommandBuffers) DEV(BeginCommandBuffer)
-    DEV(EndCommandBuffer) DEV(ResetCommandBuffer) DEV(CmdPipelineBarrier) DEV(CmdBlitImage) DEV(QueueSubmit)
+    DEV(EndCommandBuffer) DEV(ResetCommandBuffer) DEV(CmdPipelineBarrier) DEV(CmdBlitImage) DEV(CmdClearColorImage) DEV(QueueSubmit)
    DEV(CreateFence) DEV(WaitForFences) DEV(ResetFences)
 #undef DEV
    vk.GetDeviceQueue(vk.device, vk.family, vk.index, &vk.queue);
@@ -0,0 +1,36 @@
+// SPDX-License-Identifier: GPL-3.0-only
+// Copy the known prefix instead of writing into application-owned const chains.
+// The META node must reach the runtime without SUBSAMPLED before shared allocation.
+typedef struct FbVulkanSwapchainCreateInfo {
+    XrStructureType type;
+    const void *next;
+    uint32_t additionalCreateFlags;
+    uint32_t additionalUsageFlags;
+} FbVulkanSwapchainCreateInfo;
+
+typedef union FbStorageNode {
+    XrBaseInStructure base;
+    FbVulkanSwapchainCreateInfo vk;
+    XrSwapchainCreateInfoFoveationFB foveation;
+} FbStorageNode;
+
+// Returns 1 when changed, 0 when unnecessary, -1 for an unsupported prefix.
+static int fb_foveation_storage(XrSwapchainCreateInfo *info, FbStorageNode nodes[16]) {
+    const XrBaseInStructure *p = info->next;
+    unsigned n = 0;
+    while (p && n < 16) {
+        if (p->type == XR_TYPE_VULKAN_SWAPCHAIN_CREATE_INFO_META) {
+            const FbVulkanSwapchainCreateInfo *vk = (const void *)p;
+            if (!(vk->additionalCreateFlags & 0x4000u)) return 0;
+            nodes[n].vk = *vk;
+            nodes[n].vk.additionalCreateFlags &= ~0x4000u; // VK_IMAGE_CREATE_SUBSAMPLED_BIT_EXT
+            for (unsigned i = 0; i < n; ++i) nodes[i].base.next = &nodes[i + 1].base;
+            info->next = &nodes[0];
+            return 1;
+        }
+        if (p->type != XR_TYPE_SWAPCHAIN_CREATE_INFO_FOVEATION_FB) return -1;
+        nodes[n++].foveation = *(const XrSwapchainCreateInfoFoveationFB *)p;
+        p = p->next;
+    }
+    return p ? -1 : 0;
+}
@@ -91,10 +91,17 @@ static void surf_on_destroy(XrSwapchain handle);

 static float scale = 1.0f;
 static int foveation_fix = 1;
+static int foveation_storage_fix; // opt-in ordinary shared storage for native Vulkan foveation
+static int foveation_eye; // experimental profile upgrade; does not inject Vulkan gaze offsets
+static int foveation_eye_enabled, foveation_eye_supported;
+#include "foveation_storage.h"
 // hide XR_FB_space_warp: games then render every frame themselves (UE5 Application SpaceWarp flickered on the Frame,
 // e.g. Into The Radius 2; OVRPort's patch_disable_space_warp doesn't reach UE5's OpenXR plugin)
 static int hide_space_warp = 0;
 static int strip_color_bias = 0;
+// fade_quad.c: draw colour-scale fades (fade to black) as a black quad over the picture; 2 = also remove the scale
+static int fade_quad = 0;
+static uint32_t runtime_max_layers = 16;  // XrSystemGraphicsProperties::maxLayerCount (the Frame: 16)
 static int snapshot = 0;  // seconds between eye-image snapshots (snapshot_gl.c; 0 = off)
 static char snap_dir[256];
 static void snap_on_create(XrSwapchain handle, const XrSwapchainCreateInfo *info);
@@ -162,8 +169,11 @@ static void read_settings(const char *path) {
    while (fgets(line, sizeof(line), f)) {
        if (sscanf(line, "scale=%f", &value) == 1 && value >= 0.5f && value <= 2.0f) scale = value;
        if (sscanf(line, "foveation_fix=%f", &value) == 1) foveation_fix = value != 0;
+        if (sscanf(line, "foveation_storage_fix=%f", &value) == 1) foveation_storage_fix = value != 0;
+        if (sscanf(line, "foveation_eye=%f", &value) == 1) foveation_eye = value != 0;
        if (sscanf(line, "hide_space_warp=%f", &value) == 1) hide_space_warp = value != 0;
        if (sscanf(line, "strip_color_bias=%f", &value) == 1) strip_color_bias = (int)value;
+        if (sscanf(line, "fade_quad=%f", &value) == 1) fade_quad = value > 0 ? (int)value : 0;
        if (sscanf(line, "frame_balance=%f", &value) == 1) frame_balance = value != 0;
        if (sscanf(line, "snapshot=%f", &value) == 1) snapshot = value > 0 ? (int)value : 0;
        if (sscanf(line, "controller_fix=%f", &value) == 1) controller_fix = value != 0;
@@ -259,6 +269,8 @@ static void initialize(void) {
                            proximity_emul > 1 ? "thumb + index" : "thumb");
    if (hide_space_warp) LOG("per-game: hide_space_warp=1 (XR_FB_space_warp hidden, space warp info removed)");
    if (strip_color_bias) LOG("per-game: strip_color_bias=%d (layer color scale/bias removed)", strip_color_bias);
+    if (fade_quad) LOG("per-game: fade_quad=%d (colour-scale fades drawn as a black quad%s)", fade_quad,
+                       fade_quad > 1 ? "; the layer's own scale removed" : "");
    if (frame_balance) LOG("per-game: frame_balance=1 (an open frame is ended before the next one begins)");
    if (eye_debug || release_wait) LOG("per-game: eye_debug=%d release_wait=%d log_file=%s", eye_debug, release_wait,
                                       log_file ? path : "none");
@@ -317,7 +329,7 @@ XRAPI_ATTR XrResult XRAPI_CALL xrCreateInstance(const XrInstanceCreateInfo *info
    }

    XrInstanceCreateInfo fixed = *info;
-    const char **names = calloc(info->enabledExtensionCount + 3, sizeof(*names));
+    const char **names = calloc(info->enabledExtensionCount + 7, sizeof(*names));
    if (!names) { free(available); return XR_ERROR_OUT_OF_MEMORY; }
    uint32_t kept = 0;
    for (uint32_t i = 0; i < info->enabledExtensionCount; ++i) {
@@ -364,6 +376,34 @@ XRAPI_ATTR XrResult XRAPI_CALL xrCreateInstance(const XrInstanceCreateInfo *info
        for (uint32_t j = 0; available && j < available_count; ++j) offered |= !strcmp(available[j].extensionName, "XR_FB_display_refresh_rate");
        if (!requested && offered) { names[kept++] = "XR_FB_display_refresh_rate"; LOG("added XR_FB_display_refresh_rate (refresh_rate)"); }
    }
+    foveation_eye_enabled = 0;
+    if (foveation_eye && !foveation_fix) {
+        int fb = 0, config = 0, offered = 0;
+        for (uint32_t i = 0; i < kept; ++i) {
+            fb |= !strcmp(names[i], "XR_FB_foveation");
+            config |= !strcmp(names[i], "XR_FB_foveation_configuration");
+            foveation_eye_enabled |= !strcmp(names[i], "XR_META_foveation_eye_tracked");
+        }
+        for (uint32_t i = 0; available && i < available_count; ++i)
+            offered |= !strcmp(available[i].extensionName, "XR_META_foveation_eye_tracked");
+        if (!foveation_eye_enabled && fb && config && offered) {
+            names[kept++] = "XR_META_foveation_eye_tracked";
+            foveation_eye_enabled = 1;
+        }
+    }
+    // Adapter-owned video outputs need an explicit full-rate profile even when
+    // the shared injection layer enables foveation for application swapchains.
+    if (surface_emul) {
+        const char *video_extensions[] = {"XR_FB_foveation", "XR_FB_foveation_configuration",
+            "XR_FB_swapchain_update_state"};
+        for (unsigned e = 0; e < 3; ++e) {
+            int requested = 0, offered = 0;
+            for (uint32_t i = 0; i < kept; ++i) requested |= !strcmp(names[i], video_extensions[e]);
+            for (uint32_t i = 0; available && i < available_count; ++i)
+                offered |= !strcmp(available[i].extensionName, video_extensions[e]);
+            if (offered && !requested) names[kept++] = video_extensions[e];
+        }
+    }
    fixed.enabledExtensionNames = names;
    fixed.enabledExtensionCount = kept;
    {   // what the runtime gets (diagnostics: e.g. a graphics extension the app forgot)
@@ -401,6 +441,11 @@ XRAPI_ATTR XrResult XRAPI_CALL xrEnumerateViewConfigurationViews(XrInstance inst
        (PFN_xrEnumerateViewConfigurationViews)lookup(instance, "xrEnumerateViewConfigurationViews");
    if (!fn) return XR_ERROR_FUNCTION_UNSUPPORTED;
    XrResult result = fn(instance, system, type, capacity, count, views);
+    static int runtime_logged;
+    if (XR_SUCCEEDED(result) && views && count && *count && capacity && !runtime_logged++)
+        // the runtime's own size, before scale (FramePort's agent reads it to keep games' saved resolutions in step)
+        LOG("runtime recommended eye size %ux%u (max %ux%u, scale %.2f)", views[0].recommendedImageRectWidth,
+            views[0].recommendedImageRectHeight, views[0].maxImageRectWidth, views[0].maxImageRectHeight, scale);
    if (XR_SUCCEEDED(result) && views && count && scale != 1.0f) {
        for (uint32_t i = 0; i < *count && i < capacity; ++i) {
            uint32_t w = (uint32_t)(views[i].recommendedImageRectWidth * scale + 0.5f);
@@ -530,12 +575,55 @@ static int known_swapchain(XrSwapchain handle) {
    return found;
 }

+XRAPI_ATTR XrResult XRAPI_CALL xrCreateFoveationProfileFB(XrSession session,
+        const XrFoveationProfileCreateInfoFB *info, XrFoveationProfileFB *profile) {
+    PFN_xrCreateFoveationProfileFB fn = (PFN_xrCreateFoveationProfileFB)lookup(active_instance, "xrCreateFoveationProfileFB");
+    if (!fn) return XR_ERROR_FUNCTION_UNSUPPORTED;
+    if (!info) return XR_ERROR_VALIDATION_FAILURE;
+    const XrBaseInStructure *p = info->next;
+    if (foveation_storage_fix || foveation_eye) LOG("foveation profile create: next_type=%d", p ? p->type : 0);
+    if (!p || p->type == XR_TYPE_FOVEATION_LEVEL_PROFILE_CREATE_INFO_FB) {
+        XrFoveationLevelProfileCreateInfoFB level = {XR_TYPE_FOVEATION_LEVEL_PROFILE_CREATE_INFO_FB};
+        if (p) level = *(const XrFoveationLevelProfileCreateInfoFB *)p;
+        if (foveation_storage_fix || foveation_eye)
+            LOG("foveation profile: level=%d dynamic=%d eye_requested=%d supported=%d", level.level, level.dynamic,
+                foveation_eye, foveation_eye_supported);
+        if (foveation_eye && !foveation_fix && foveation_eye_supported && !level.next && level.level != XR_FOVEATION_LEVEL_NONE_FB) {
+            XrFoveationEyeTrackedProfileCreateInfoMETA eye = {XR_TYPE_FOVEATION_EYE_TRACKED_PROFILE_CREATE_INFO_META};
+            XrFoveationProfileCreateInfoFB fixed = *info;
+            level.next = &eye;
+            fixed.next = &level;
+            XrResult result = fn(session, &fixed, profile);
+            LOG("foveation profile: eye-tracked upgrade result=%d", result);
+            if (XR_SUCCEEDED(result)) return result;
+        }
+    }
+    return fn(session, info, profile);
+}
+
+XRAPI_ATTR XrResult XRAPI_CALL xrGetFoveationEyeTrackedStateMETA(XrSession session, XrFoveationEyeTrackedStateMETA *state) {
+    PFN_xrGetFoveationEyeTrackedStateMETA fn = (PFN_xrGetFoveationEyeTrackedStateMETA)lookup(active_instance, "xrGetFoveationEyeTrackedStateMETA");
+    if (!fn) return XR_ERROR_FUNCTION_UNSUPPORTED;
+    XrResult result = fn(session, state);
+    static unsigned queries;
+    if (foveation_eye && state && XR_SUCCEEDED(result) && (++queries % 240 == 1))
+        LOG("foveation gaze consumed by app: valid=%llu left=%.3f,%.3f right=%.3f,%.3f", (unsigned long long)state->flags,
+            state->foveationCenter[0].x, state->foveationCenter[0].y, state->foveationCenter[1].x, state->foveationCenter[1].y);
+    return result;
+}
+
 XRAPI_ATTR XrResult XRAPI_CALL xrCreateSwapchain(XrSession session, const XrSwapchainCreateInfo *info,
        XrSwapchain *swapchain) {
    PFN_xrCreateSwapchain fn = (PFN_xrCreateSwapchain)lookup(active_instance, "xrCreateSwapchain");
    if (!fn) return XR_ERROR_FUNCTION_UNSUPPORTED;
    if (!info) return XR_ERROR_VALIDATION_FAILURE;
    XrSwapchainCreateInfo fixed = *info;
+    FbStorageNode storage_nodes[16];
+    if (!foveation_fix && foveation_storage_fix) {
+        int changed = fb_foveation_storage(&fixed, storage_nodes);
+        LOG("foveation_storage_fix: shared allocation %s", changed > 0 ? "SUBSAMPLED cleared" :
+            changed < 0 ? "unchanged (unsupported chain prefix)" : "already ordinary or no META node");
+    }
    if (foveation_fix) {
        // Drop leading foveation structs; the chain is const so only a prefix can be skipped.
        const XrBaseInStructure *p = (const XrBaseInStructure *)fixed.next;
@@ -763,6 +851,8 @@ XRAPI_ATTR XrResult XRAPI_CALL xrGetSystemProperties(XrInstance instance, XrSyst
    PFN_xrGetSystemProperties fn = (PFN_xrGetSystemProperties)lookup(instance, "xrGetSystemProperties");
    if (!fn) return XR_ERROR_FUNCTION_UNSUPPORTED;
    XrResult result = fn(instance, system, properties);
+    if (XR_SUCCEEDED(result) && properties && properties->graphicsProperties.maxLayerCount)
+        runtime_max_layers = properties->graphicsProperties.maxLayerCount;
    if (XR_SUCCEEDED(result) && properties && layer_debug)
        LOG("layer_debug: system '%s' maxLayerCount=%u max swapchain %ux%u", properties->systemName,
            properties->graphicsProperties.maxLayerCount, properties->graphicsProperties.maxSwapchainImageWidth,
@@ -876,6 +966,7 @@ XRAPI_ATTR XrResult XRAPI_CALL xrDestroySpace(XrSpace space) {
 #include "cube_standin.c"
 #include "snapshot_gl.c"
 #include "surface_swapchain.c"
+#include "fade_quad.c"

 // GPU video buffers need explicit external-memory support on the app's device.
 // Preserve the runtime's extension list and both Vulkan-enable entry points.
@@ -1012,11 +1103,21 @@ XRAPI_ATTR XrResult XRAPI_CALL xrCreateSession(XrInstance instance, const XrSess
    if (result == XR_ERROR_GRAPHICS_REQUIREMENTS_CALL_MISSING && ask_graphics_requirements(instance, info))
        result = fn(instance, info, session);
    if (XR_SUCCEEDED(result)) {
+        foveation_eye_supported = 0;
+        if (foveation_eye_enabled) {
+            PFN_xrGetSystemProperties properties = (PFN_xrGetSystemProperties)lookup(instance, "xrGetSystemProperties");
+            XrSystemFoveationEyeTrackedPropertiesMETA eye = {XR_TYPE_SYSTEM_FOVEATION_EYE_TRACKED_PROPERTIES_META};
+            XrSystemProperties sys = {XR_TYPE_SYSTEM_PROPERTIES, &eye};
+            if (properties && XR_SUCCEEDED(properties(instance, info->systemId, &sys)))
+                foveation_eye_supported = eye.supportsFoveationEyeTracked;
+            LOG("foveation eye capability: %d", foveation_eye_supported);
+        }
        flip_emul = flip_emul_setting;
        flip_on_create_session(info);
        scene_on_create_session(*session);
        session_fixes_on_create_session(*session);
        emul_on_create_session(*session, info);
+        fade_on_create_session(*session, info);
    }
    return result;
 }
@@ -1460,7 +1561,7 @@ XRAPI_ATTR XrResult XRAPI_CALL xrEndFrame(XrSession session, const XrFrameEndInf
            frames = 0; drift_sum = drift_max = 0;
        }
    }
-    if ((!layer_fix && !swap_eyes && !emulate_passthrough && !flip_quads && !flip_emul && !strip_depth) || !info || !info->layerCount ||
+    if ((!layer_fix && !swap_eyes && !emulate_passthrough && !flip_quads && !flip_emul && !strip_depth && !fade_quad) || !info || !info->layerCount ||
        info->layerCount > 64)
        return fn(session, info);
    if (layer_debug) {  // the submitted layer list (order, flags, eyes, chained structs) whenever its shape changes
@@ -1499,6 +1600,8 @@ XRAPI_ATTR XrResult XRAPI_CALL xrEndFrame(XrSession session, const XrFrameEndInf
    XrCompositionLayerProjection projections[64];
    XrCompositionLayerProjectionView views[64][2];
    XrCompositionLayerQuad quads[64];
+    XrCompositionLayerQuad fade_out;  // fade_quad: at most one fade layer per frame
+    int faded = 0;
    uint32_t count = 0, dropped = 0, swapped = 0, passthrough = 0;
    const XrCompositionLayerBaseHeader *surface_projections[SURF_MAX];
    int surface_projection_count = 0;
@@ -1638,8 +1741,9 @@ XRAPI_ATTR XrResult XRAPI_CALL xrEndFrame(XrSession session, const XrFrameEndInf
                    memcpy(last, now, sizeof(now));
                }
            }
-            if (cb && strip_color_bias && (layer->type == XR_TYPE_COMPOSITION_LAYER_PROJECTION ||
-                                           layer->type == XR_TYPE_COMPOSITION_LAYER_QUAD)) {
+            if (cb && ((strip_color_bias && (layer->type == XR_TYPE_COMPOSITION_LAYER_PROJECTION ||
+                                             layer->type == XR_TYPE_COMPOSITION_LAYER_QUAD)) ||
+                       (fade_quad > 1 && layer->type == XR_TYPE_COMPOSITION_LAYER_PROJECTION))) {
                const XrBaseInStructure *rest = head;  // skip leading color structs; one further down drops the chain
                while (rest && rest->type == XR_TYPE_COMPOSITION_LAYER_COLOR_SCALE_BIAS_KHR) rest = rest->next;
                for (const XrBaseInStructure *n = rest; n; n = n->next)
@@ -1748,7 +1852,31 @@ XRAPI_ATTR XrResult XRAPI_CALL xrEndFrame(XrSession session, const XrFrameEndInf
                }
            }
        }
+        // SteamVR ignores Batman's projection colour-scale blackout. An opaque
+        // frame has a black background, so omit a fully black primary scene;
+        // later loading UI layers keep their order. Never do this for passthrough,
+        // alpha-blended projections, partial fades, or an already composed video.
+        if(surface_native && i==0 && count==0 &&
+           info->environmentBlendMode==XR_ENVIRONMENT_BLEND_MODE_OPAQUE &&
+           layer->type==XR_TYPE_COMPOSITION_LAYER_PROJECTION &&
+           !(layer->layerFlags&XR_COMPOSITION_LAYER_BLEND_TEXTURE_SOURCE_ALPHA_BIT)) {
+            const XrCompositionLayerColorScaleBiasKHR *black=NULL;
+            for(const XrBaseInStructure *n=layer->next;n;n=n->next)
+                if(n->type==XR_TYPE_COMPOSITION_LAYER_COLOR_SCALE_BIAS_KHR)black=(const void*)n;
+            if(black && black->colorScale.r==0 && black->colorScale.g==0 && black->colorScale.b==0 &&
+               black->colorScale.a==1 && black->colorBias.r==0 && black->colorBias.g==0 &&
+               black->colorBias.b==0 && black->colorBias.a==0) {
+                static int black_logged;
+                if(!black_logged++)LOG("loading blackout: omitted fully black primary projection; later UI retained");
+                ++dropped;continue;
+            }
+        }
        kept[count++] = layer;
+        // fade_quad: a dimmed projection layer gets the black quad right after it (the colour scale is read from
+        // the app's own layer: fade_quad=2 removed it from the copy submitted)
+        int level = fade_quad && !faded && count < 64 ? fade_level(info->layers[i]) : 0;
+        const XrCompositionLayerBaseHeader *fade_l = level ? fade_layer(session, level, count, &fade_out) : NULL;
+        if (fade_l) { kept[count++] = fade_l; faded = 1; ++swapped; }
    }
    XrFrameEndInfo fixed = *info;
    fixed.layers = kept;
@@ -1913,6 +2041,12 @@ XRAPI_ATTR XrResult XRAPI_CALL xrEnumerateApiLayerProperties(uint32_t capacity,
 // For native/xrshim: emulated functions that overport's dispatcher doesn't know (it never asks us for them).
 __attribute__((visibility("default"))) PFN_xrVoidFunction framebridge_extension_proc(const char *name) {
    pthread_once(&init_once, initialize);
+    if (name && !foveation_fix && (foveation_storage_fix || foveation_eye)) {
+        if (!strcmp(name, "xrCreateFoveationProfileFB")) return (PFN_xrVoidFunction)xrCreateFoveationProfileFB;
+        if (!strcmp(name, "xrGetFoveationEyeTrackedStateMETA")) return (PFN_xrVoidFunction)xrGetFoveationEyeTrackedStateMETA;
+        if (!strcmp(name, "xrDestroyFoveationProfileFB") || !strcmp(name, "xrUpdateSwapchainFB") ||
+            !strcmp(name, "xrGetSwapchainStateFB")) return lookup(active_instance, name);
+    }
    if(surface_native && name){
 #define NATIVE_PROC(fn) if(!strcmp(name,#fn))return (PFN_xrVoidFunction)fn;
        NATIVE_PROC(xrGetVulkanGraphicsDeviceKHR)
@@ -1962,6 +2096,8 @@ XRAPI_ATTR XrResult XRAPI_CALL xrGetInstanceProcAddr(XrInstance instance, const
    HOOK(xrCreateInstance)
    HOOK(xrEnumerateViewConfigurationViews)
    HOOK(xrCreateSwapchain)
+    HOOK(xrCreateFoveationProfileFB)
+    HOOK(xrGetFoveationEyeTrackedStateMETA)
    HOOK(xrDestroySwapchain)
    HOOK(xrEndFrame)
    HOOK(xrBeginFrame)
@@ -189,6 +189,7 @@ static int sc_setup(XrSession session,surf_projection *p,surf_composite *c) {
        XR_SWAPCHAIN_USAGE_TRANSFER_DST_BIT|XR_SWAPCHAIN_USAGE_COLOR_ATTACHMENT_BIT,
        VK_FORMAT_R8G8B8A8_SRGB,1,2*p->size,p->size,1,1,1};
    if(!create || !enumerate || XR_FAILED(create(session,&ci,&c->output)))goto fail;
+    surf_video_full_rate(session,c->output);
    XrSwapchainImageVulkanKHR images[MAX_IMAGES];
    for(int i=0;i<MAX_IMAGES;i++)images[i]=(XrSwapchainImageVulkanKHR){XR_TYPE_SWAPCHAIN_IMAGE_VULKAN_KHR};
    if(XR_FAILED(enumerate(c->output,MAX_IMAGES,&c->count,(void*)images)) || !c->count || c->count>MAX_IMAGES) {
@@ -258,7 +259,7 @@ static int sc_setup(XrSession session,surf_projection *p,surf_composite *c) {
    VkResult result=spvk.CreateGraphicsPipelines(vk.device,VK_NULL_HANDLE,1,&pci,NULL,&c->pipeline);
    for(int k=0;k<2;k++)spvk.DestroyShaderModule(vk.device,modules[k],NULL);
    if(result!=VK_SUCCESS)goto fail;
-    LOG("surface_composite: one primary stereo scene, %ux%u per eye",p->size,p->size);return 1;
+    LOG("surface_composite: one primary full-rate raster stereo scene, %ux%u per eye",p->size,p->size);return 1;
 fail:
    surf_composite_destroy(p);c->failed=1;
    LOG("surface_composite: setup failed; retaining ordinary composition");return 0;
@@ -305,8 +306,9 @@ static const XrCompositionLayerBaseHeader *surf_composite_frame(XrSession sessio
        {{0,0},{2*p->size,p->size}},0,NULL};
    spvk.CmdBeginRenderPass(cmd,&rbi,VK_SUBPASS_CONTENTS_INLINE);
    spvk.CmdBindPipeline(cmd,VK_PIPELINE_BIND_POINT_GRAPHICS,c->pipeline);
+    VkImageView video_view=s->native_current>=0?s->native_slots[s->native_current].srgb_view:p->video_cache_view;
    for(int e=0;e<2;e++) {
-        VkDescriptorImageInfo di[2]={{c->sampler,p->video_cache_view,VK_IMAGE_LAYOUT_SHADER_READ_ONLY_OPTIMAL},
+        VkDescriptorImageInfo di[2]={{c->sampler,video_view,VK_IMAGE_LAYOUT_SHADER_READ_ONLY_OPTIMAL},
            {c->sampler,sources[e]->view,VK_IMAGE_LAYOUT_SHADER_READ_ONLY_OPTIMAL}};
        VkWriteDescriptorSet writes[2];
        for(int k=0;k<2;k++)writes[k]=(VkWriteDescriptorSet){VK_STRUCTURE_TYPE_WRITE_DESCRIPTOR_SET,NULL,c->sets[index][e],k,0,1,
@@ -11,10 +11,6 @@ layout(push_constant) uniform Params {
 } p;
 vec3 rotate(vec4 q,vec3 v){return v+2.0*cross(q.xyz,cross(q.xyz,v)+q.w*v);}
 void main(){
- vec2 scenePixel=0.5/vec2(textureSize(sceneImage,0).xy);
- vec2 sceneCoord=vec2(uv.x,p.sceneOptions.z>0 ? 1-uv.y : uv.y);
- vec2 sceneUV=clamp(p.sceneRect.xy+sceneCoord*p.sceneRect.zw,p.sceneRect.xy+scenePixel,p.sceneRect.xy+p.sceneRect.zw-scenePixel);
- vec4 scene=textureLod(sceneImage,vec3(sceneUV,p.options.y),0);
 // Projection rows follow Vulkan/OpenXR's top-to-bottom convention.
 vec3 ray=rotate(p.rotation,vec3(mix(p.outputTans.x,p.outputTans.y,uv.x),mix(p.outputTans.w,p.outputTans.z,uv.y),-1));
 vec2 vuv=(ray.xy/-ray.z-p.videoTans.xz)/(p.videoTans.yw-p.videoTans.xz); vuv.y=1-vuv.y;
@@ -28,6 +24,12 @@ void main(){
 }
 float alpha=p.options.z>0 ? video.a : 1;
 vec3 rgb=p.options.w>0 ? video.rgb*alpha : video.rgb;
+ // Opaque video completely covers the scene: avoid its texture fetch and colour transform.
+ if(alpha==1.0){outputColor=vec4(rgb,1);return;}
+ vec2 scenePixel=0.5/vec2(textureSize(sceneImage,0).xy);
+ vec2 sceneCoord=vec2(uv.x,p.sceneOptions.z>0 ? 1-uv.y : uv.y);
+ vec2 sceneUV=clamp(p.sceneRect.xy+sceneCoord*p.sceneRect.zw,p.sceneRect.xy+scenePixel,p.sceneRect.xy+p.sceneRect.zw-scenePixel);
+ vec4 scene=textureLod(sceneImage,vec3(sceneUV,p.options.y),0);
 float sceneAlpha=p.sceneOptions.x>0 ? scene.a : 1;
 vec3 sceneRGB=p.sceneOptions.y>0 ? scene.rgb*sceneAlpha : scene.rgb;
 // OpenXR colour transforms act on straight colour, then restore premultiplication.
@@ -1,300 +1,198 @@
-// SPDX-License-Identifier: GPL-3.0-only
-// Generated by glslc; Vulkan 1.0.
-static const uint32_t surface_composite_vert_spv[]={
-    0x07230203,0x00010000,0x000d000a,0x0000002e,0x00000000,0x00020011,0x00000001,0x0006000b,
+// Generated from surface_composite.vert and surface_composite.frag.
+static const uint32_t surface_composite_vert_spv[] = {
+    0x07230203,0x00010000,0x000d000a,0x0000002f,0x00000000,0x00020011,0x00000001,0x0006000b,
    0x00000001,0x4c534c47,0x6474732e,0x3035342e,0x00000000,0x0003000e,0x00000000,0x00000001,
    0x0008000f,0x00000000,0x00000004,0x6e69616d,0x00000000,0x0000000c,0x00000018,0x00000020,
-    0x00030003,0x00000002,0x000001c2,0x000a0004,0x475f4c47,0x4c474f4f,0x70635f45,0x74735f70,
-    0x5f656c79,0x656e696c,0x7269645f,0x69746365,0x00006576,0x00080004,0x475f4c47,0x4c474f4f,
-    0x6e695f45,0x64756c63,0x69645f65,0x74636572,0x00657669,0x00040005,0x00000004,0x6e69616d,
-    0x00000000,0x00030005,0x00000009,0x00000070,0x00060005,0x0000000c,0x565f6c67,0x65747265,
-    0x646e4978,0x00007865,0x00030005,0x00000018,0x00007675,0x00060005,0x0000001e,0x505f6c67,
-    0x65567265,0x78657472,0x00000000,0x00060006,0x0000001e,0x00000000,0x505f6c67,0x7469736f,
-    0x006e6f69,0x00070006,0x0000001e,0x00000001,0x505f6c67,0x746e696f,0x657a6953,0x00000000,
-    0x00070006,0x0000001e,0x00000002,0x435f6c67,0x4470696c,0x61747369,0x0065636e,0x00070006,
-    0x0000001e,0x00000003,0x435f6c67,0x446c6c75,0x61747369,0x0065636e,0x00030005,0x00000020,
-    0x00000000,0x00040047,0x0000000c,0x0000000b,0x0000002a,0x00040047,0x00000018,0x0000001e,
-    0x00000000,0x00050048,0x0000001e,0x00000000,0x0000000b,0x00000000,0x00050048,0x0000001e,
-    0x00000001,0x0000000b,0x00000001,0x00050048,0x0000001e,0x00000002,0x0000000b,0x00000003,
-    0x00050048,0x0000001e,0x00000003,0x0000000b,0x00000004,0x00030047,0x0000001e,0x00000002,
-    0x00020013,0x00000002,0x00030021,0x00000003,0x00000002,0x00030016,0x00000006,0x00000020,
-    0x00040017,0x00000007,0x00000006,0x00000002,0x00040020,0x00000008,0x00000007,0x00000007,
-    0x00040015,0x0000000a,0x00000020,0x00000001,0x00040020,0x0000000b,0x00000001,0x0000000a,
-    0x0004003b,0x0000000b,0x0000000c,0x00000001,0x0004002b,0x0000000a,0x0000000e,0x00000001,
-    0x0004002b,0x0000000a,0x00000010,0x00000002,0x00040020,0x00000017,0x00000003,0x00000007,
-    0x0004003b,0x00000017,0x00000018,0x00000003,0x00040017,0x0000001a,0x00000006,0x00000004,
-    0x00040015,0x0000001b,0x00000020,0x00000000,0x0004002b,0x0000001b,0x0000001c,0x00000001,
-    0x0004001c,0x0000001d,0x00000006,0x0000001c,0x0006001e,0x0000001e,0x0000001a,0x00000006,
-    0x0000001d,0x0000001d,0x00040020,0x0000001f,0x00000003,0x0000001e,0x0004003b,0x0000001f,
-    0x00000020,0x00000003,0x0004002b,0x0000000a,0x00000021,0x00000000,0x0004002b,0x00000006,
-    0x00000023,0x40000000,0x0004002b,0x00000006,0x00000025,0x3f800000,0x0004002b,0x00000006,
-    0x00000028,0x00000000,0x00040020,0x0000002c,0x00000003,0x0000001a,0x00050036,0x00000002,
-    0x00000004,0x00000000,0x00000003,0x000200f8,0x00000005,0x0004003b,0x00000008,0x00000009,
-    0x00000007,0x0004003d,0x0000000a,0x0000000d,0x0000000c,0x000500c4,0x0000000a,0x0000000f,
-    0x0000000d,0x0000000e,0x000500c7,0x0000000a,0x00000011,0x0000000f,0x00000010,0x0004006f,
-    0x00000006,0x00000012,0x00000011,0x0004003d,0x0000000a,0x00000013,0x0000000c,0x000500c7,
-    0x0000000a,0x00000014,0x00000013,0x00000010,0x0004006f,0x00000006,0x00000015,0x00000014,
-    0x00050050,0x00000007,0x00000016,0x00000012,0x00000015,0x0003003e,0x00000009,0x00000016,
-    0x0004003d,0x00000007,0x00000019,0x00000009,0x0003003e,0x00000018,0x00000019,0x0004003d,
-    0x00000007,0x00000022,0x00000009,0x0005008e,0x00000007,0x00000024,0x00000022,0x00000023,
-    0x00050050,0x00000007,0x00000026,0x00000025,0x00000025,0x00050083,0x00000007,0x00000027,
-    0x00000024,0x00000026,0x00050051,0x00000006,0x00000029,0x00000027,0x00000000,0x00050051,
+    0x00040047,0x0000000c,0x0000000b,0x0000002a,0x00040047,0x00000018,0x0000001e,0x00000000,
+    0x00050048,0x0000001e,0x00000000,0x0000000b,0x00000000,0x00050048,0x0000001e,0x00000001,
+    0x0000000b,0x00000001,0x00050048,0x0000001e,0x00000002,0x0000000b,0x00000003,0x00050048,
+    0x0000001e,0x00000003,0x0000000b,0x00000004,0x00030047,0x0000001e,0x00000002,0x00020013,
+    0x00000002,0x00030021,0x00000003,0x00000002,0x00030016,0x00000006,0x00000020,0x00040017,
+    0x00000007,0x00000006,0x00000002,0x00040015,0x0000000a,0x00000020,0x00000001,0x00040020,
+    0x0000000b,0x00000001,0x0000000a,0x0004003b,0x0000000b,0x0000000c,0x00000001,0x0004002b,
+    0x0000000a,0x0000000e,0x00000001,0x0004002b,0x0000000a,0x00000010,0x00000002,0x00040020,
+    0x00000017,0x00000003,0x00000007,0x0004003b,0x00000017,0x00000018,0x00000003,0x00040017,
+    0x0000001a,0x00000006,0x00000004,0x00040015,0x0000001b,0x00000020,0x00000000,0x0004002b,
+    0x0000001b,0x0000001c,0x00000001,0x0004001c,0x0000001d,0x00000006,0x0000001c,0x0006001e,
+    0x0000001e,0x0000001a,0x00000006,0x0000001d,0x0000001d,0x00040020,0x0000001f,0x00000003,
+    0x0000001e,0x0004003b,0x0000001f,0x00000020,0x00000003,0x0004002b,0x0000000a,0x00000021,
+    0x00000000,0x0004002b,0x00000006,0x00000023,0x40000000,0x0004002b,0x00000006,0x00000025,
+    0x3f800000,0x0004002b,0x00000006,0x00000028,0x00000000,0x00040020,0x0000002c,0x00000003,
+    0x0000001a,0x0005002c,0x00000007,0x0000002e,0x00000025,0x00000025,0x00050036,0x00000002,
+    0x00000004,0x00000000,0x00000003,0x000200f8,0x00000005,0x0004003d,0x0000000a,0x0000000d,
+    0x0000000c,0x000500c4,0x0000000a,0x0000000f,0x0000000d,0x0000000e,0x000500c7,0x0000000a,
+    0x00000011,0x0000000f,0x00000010,0x0004006f,0x00000006,0x00000012,0x00000011,0x000500c7,
+    0x0000000a,0x00000014,0x0000000d,0x00000010,0x0004006f,0x00000006,0x00000015,0x00000014,
+    0x00050050,0x00000007,0x00000016,0x00000012,0x00000015,0x0003003e,0x00000018,0x00000016,
+    0x0005008e,0x00000007,0x00000024,0x00000016,0x00000023,0x00050083,0x00000007,0x00000027,
+    0x00000024,0x0000002e,0x00050051,0x00000006,0x00000029,0x00000027,0x00000000,0x00050051,
    0x00000006,0x0000002a,0x00000027,0x00000001,0x00070050,0x0000001a,0x0000002b,0x00000029,
    0x0000002a,0x00000028,0x00000025,0x00050041,0x0000002c,0x0000002d,0x00000020,0x00000021,
    0x0003003e,0x0000002d,0x0000002b,0x000100fd,0x00010038,
 };
-static const uint32_t surface_composite_frag_spv[]={
-    0x07230203,0x00010000,0x000d000a,0x00000153,0x00000000,0x00020011,0x00000001,0x00020011,
+static const uint32_t surface_composite_frag_spv[] = {
+    0x07230203,0x00010000,0x000d000a,0x0000018a,0x00000000,0x00020011,0x00000001,0x00020011,
    0x00000032,0x0006000b,0x00000001,0x4c534c47,0x6474732e,0x3035342e,0x00000000,0x0003000e,
-    0x00000000,0x00000001,0x0007000f,0x00000004,0x00000004,0x6e69616d,0x00000000,0x0000003a,
-    0x00000151,0x00030010,0x00000004,0x00000007,0x00030003,0x00000002,0x000001c2,0x000a0004,
-    0x475f4c47,0x4c474f4f,0x70635f45,0x74735f70,0x5f656c79,0x656e696c,0x7269645f,0x69746365,
-    0x00006576,0x00080004,0x475f4c47,0x4c474f4f,0x6e695f45,0x64756c63,0x69645f65,0x74636572,
-    0x00657669,0x00040005,0x00000004,0x6e69616d,0x00000000,0x00060005,0x0000000e,0x61746f72,
-    0x76286574,0x763b3466,0x003b3366,0x00030005,0x0000000c,0x00000071,0x00030005,0x0000000d,
-    0x00000076,0x00050005,0x00000027,0x6e656373,0x78695065,0x00006c65,0x00050005,0x0000002c,
-    0x6e656373,0x616d4965,0x00006567,0x00050005,0x00000038,0x6e656373,0x6f6f4365,0x00006472,
-    0x00030005,0x0000003a,0x00007675,0x00040005,0x0000003f,0x61726150,0x0000736d,0x00060006,
-    0x0000003f,0x00000000,0x61746f72,0x6e6f6974,0x00000000,0x00060006,0x0000003f,0x00000001,
-    0x7074756f,0x61547475,0x0000736e,0x00060006,0x0000003f,0x00000002,0x65646976,0x6e61546f,
-    0x00000073,0x00060006,0x0000003f,0x00000003,0x6e656373,0x63655265,0x00000074,0x00050006,
-    0x0000003f,0x00000004,0x6974706f,0x00736e6f,0x00070006,0x0000003f,0x00000005,0x6e656373,
-    0x74704f65,0x736e6f69,0x00000000,0x00060006,0x0000003f,0x00000006,0x6e656373,0x61635365,
-    0x0000656c,0x00060006,0x0000003f,0x00000007,0x6e656373,0x61694265,0x00000073,0x00030005,
-    0x00000041,0x00000070,0x00040005,0x00000057,0x6e656373,0x00565565,0x00040005,0x00000072,
-    0x6e656373,0x00000065,0x00030005,0x0000007c,0x00796172,0x00040005,0x0000008e,0x61726170,
-    0x0000006d,0x00040005,0x00000091,0x61726170,0x0000006d,0x00030005,0x00000093,0x00767576,
-    0x00040005,0x000000ac,0x65646976,0x0000006f,0x00050005,0x000000c2,0x65646976,0x7869506f,
-    0x00006c65,0x00050005,0x000000c6,0x65646976,0x616d496f,0x00006567,0x00050005,0x000000cd,
-    0x65646976,0x6365526f,0x00000074,0x00040005,0x000000d2,0x65646976,0x0056556f,0x00040005,
-    0x000000e9,0x68706c61,0x00000061,0x00030005,0x000000f4,0x00626772,0x00050005,0x00000103,
-    0x6e656373,0x706c4165,0x00006168,0x00050005,0x0000010e,0x6e656373,0x42475265,0x00000000,
-    0x00060005,0x0000011d,0x6e656373,0x72745365,0x68676961,0x00000074,0x00040005,0x0000013f,
-    0x75736572,0x0000746c,0x00050005,0x00000151,0x7074756f,0x6f437475,0x00726f6c,0x00040047,
-    0x0000002c,0x00000022,0x00000000,0x00040047,0x0000002c,0x00000021,0x00000001,0x00040047,
-    0x0000003a,0x0000001e,0x00000000,0x00050048,0x0000003f,0x00000000,0x00000023,0x00000000,
-    0x00050048,0x0000003f,0x00000001,0x00000023,0x00000010,0x00050048,0x0000003f,0x00000002,
-    0x00000023,0x00000020,0x00050048,0x0000003f,0x00000003,0x00000023,0x00000030,0x00050048,
-    0x0000003f,0x00000004,0x00000023,0x00000040,0x00050048,0x0000003f,0x00000005,0x00000023,
-    0x00000050,0x00050048,0x0000003f,0x00000006,0x00000023,0x00000060,0x00050048,0x0000003f,
-    0x00000007,0x00000023,0x00000070,0x00030047,0x0000003f,0x00000002,0x00040047,0x000000c6,
-    0x00000022,0x00000000,0x00040047,0x000000c6,0x00000021,0x00000000,0x00040047,0x00000151,
-    0x0000001e,0x00000000,0x00020013,0x00000002,0x00030021,0x00000003,0x00000002,0x00030016,
-    0x00000006,0x00000020,0x00040017,0x00000007,0x00000006,0x00000004,0x00040020,0x00000008,
-    0x00000007,0x00000007,0x00040017,0x00000009,0x00000006,0x00000003,0x00040020,0x0000000a,
-    0x00000007,0x00000009,0x00050021,0x0000000b,0x00000009,0x00000008,0x0000000a,0x0004002b,
+    0x00000000,0x00000001,0x0007000f,0x00000004,0x00000004,0x6e69616d,0x00000000,0x00000035,
+    0x000000c6,0x00030010,0x00000004,0x00000007,0x00050048,0x00000026,0x00000000,0x00000023,
+    0x00000000,0x00050048,0x00000026,0x00000001,0x00000023,0x00000010,0x00050048,0x00000026,
+    0x00000002,0x00000023,0x00000020,0x00050048,0x00000026,0x00000003,0x00000023,0x00000030,
+    0x00050048,0x00000026,0x00000004,0x00000023,0x00000040,0x00050048,0x00000026,0x00000005,
+    0x00000023,0x00000050,0x00050048,0x00000026,0x00000006,0x00000023,0x00000060,0x00050048,
+    0x00000026,0x00000007,0x00000023,0x00000070,0x00030047,0x00000026,0x00000002,0x00040047,
+    0x00000035,0x0000001e,0x00000000,0x00040047,0x00000082,0x00000022,0x00000000,0x00040047,
+    0x00000082,0x00000021,0x00000000,0x00040047,0x000000c6,0x0000001e,0x00000000,0x00040047,
+    0x000000d1,0x00000022,0x00000000,0x00040047,0x000000d1,0x00000021,0x00000001,0x00020013,
+    0x00000002,0x00030021,0x00000003,0x00000002,0x00030016,0x00000006,0x00000020,0x00040017,
+    0x00000007,0x00000006,0x00000004,0x00040017,0x00000009,0x00000006,0x00000003,0x0004002b,
    0x00000006,0x00000011,0x40000000,0x00040015,0x00000018,0x00000020,0x00000000,0x0004002b,
-    0x00000018,0x00000019,0x00000003,0x00040020,0x0000001a,0x00000007,0x00000006,0x00040017,
-    0x00000025,0x00000006,0x00000002,0x00040020,0x00000026,0x00000007,0x00000025,0x0004002b,
-    0x00000006,0x00000028,0x3f000000,0x00090019,0x00000029,0x00000006,0x00000001,0x00000000,
-    0x00000001,0x00000000,0x00000001,0x00000000,0x0003001b,0x0000002a,0x00000029,0x00040020,
-    0x0000002b,0x00000000,0x0000002a,0x0004003b,0x0000002b,0x0000002c,0x00000000,0x00040015,
-    0x0000002e,0x00000020,0x00000001,0x0004002b,0x0000002e,0x0000002f,0x00000000,0x00040017,
-    0x00000031,0x0000002e,0x00000003,0x00040017,0x00000033,0x0000002e,0x00000002,0x00040020,
-    0x00000039,0x00000001,0x00000025,0x0004003b,0x00000039,0x0000003a,0x00000001,0x0004002b,
-    0x00000018,0x0000003b,0x00000000,0x00040020,0x0000003c,0x00000001,0x00000006,0x000a001e,
-    0x0000003f,0x00000007,0x00000007,0x00000007,0x00000007,0x00000007,0x00000007,0x00000007,
-    0x00000007,0x00040020,0x00000040,0x00000009,0x0000003f,0x0004003b,0x00000040,0x00000041,
-    0x00000009,0x0004002b,0x0000002e,0x00000042,0x00000005,0x0004002b,0x00000018,0x00000043,
-    0x00000002,0x00040020,0x00000044,0x00000009,0x00000006,0x0004002b,0x00000006,0x00000047,
-    0x00000000,0x00020014,0x00000048,0x0004002b,0x00000006,0x0000004d,0x3f800000,0x0004002b,
-    0x00000018,0x0000004e,0x00000001,0x0004002b,0x0000002e,0x00000058,0x00000003,0x00040020,
-    0x00000059,0x00000009,0x00000007,0x0004002b,0x0000002e,0x00000075,0x00000004,0x0004002b,
-    0x0000002e,0x0000007d,0x00000001,0x0004002b,0x00000006,0x0000008c,0xbf800000,0x0004002b,
-    0x0000002e,0x0000009b,0x00000002,0x0007002c,0x00000007,0x000000ad,0x00000047,0x00000047,
-    0x00000047,0x00000047,0x0005002c,0x00000025,0x000000b4,0x00000047,0x00000047,0x00040017,
-    0x000000b5,0x00000048,0x00000002,0x0005002c,0x00000025,0x000000bc,0x0000004d,0x0000004d,
-    0x00090019,0x000000c3,0x00000006,0x00000001,0x00000000,0x00000000,0x00000000,0x00000001,
-    0x00000000,0x0003001b,0x000000c4,0x000000c3,0x00040020,0x000000c5,0x00000000,0x000000c4,
-    0x0004003b,0x000000c5,0x000000c6,0x00000000,0x0006002c,0x00000009,0x00000128,0x00000047,
-    0x00000047,0x00000047,0x0004002b,0x0000002e,0x00000130,0x00000006,0x0004002b,0x0000002e,
-    0x00000135,0x00000007,0x00040020,0x00000150,0x00000003,0x00000007,0x0004003b,0x00000150,
-    0x00000151,0x00000003,0x00050036,0x00000002,0x00000004,0x00000000,0x00000003,0x000200f8,
-    0x00000005,0x0004003b,0x00000026,0x00000027,0x00000007,0x0004003b,0x00000026,0x00000038,
-    0x00000007,0x0004003b,0x0000001a,0x0000004a,0x00000007,0x0004003b,0x00000026,0x00000057,
-    0x00000007,0x0004003b,0x00000008,0x00000072,0x00000007,0x0004003b,0x0000000a,0x0000007c,
-    0x00000007,0x0004003b,0x00000008,0x0000008e,0x00000007,0x0004003b,0x0000000a,0x00000091,
-    0x00000007,0x0004003b,0x00000026,0x00000093,0x00000007,0x0004003b,0x00000008,0x000000ac,
-    0x00000007,0x0004003b,0x00000026,0x000000c2,0x00000007,0x0004003b,0x00000008,0x000000cd,
-    0x00000007,0x0004003b,0x00000026,0x000000d2,0x00000007,0x0004003b,0x0000001a,0x000000e9,
-    0x00000007,0x0004003b,0x0000001a,0x000000ed,0x00000007,0x0004003b,0x0000000a,0x000000f4,
-    0x00000007,0x0004003b,0x0000000a,0x000000f8,0x00000007,0x0004003b,0x0000001a,0x00000103,
-    0x00000007,0x0004003b,0x0000001a,0x00000107,0x00000007,0x0004003b,0x0000000a,0x0000010e,
-    0x00000007,0x0004003b,0x0000000a,0x00000112,0x00000007,0x0004003b,0x00000008,0x0000011d,
-    0x00000007,0x0004003b,0x0000000a,0x00000120,0x00000007,0x0004003b,0x00000008,0x0000013f,
-    0x00000007,0x0004003d,0x0000002a,0x0000002d,0x0000002c,0x00040064,0x00000029,0x00000030,
-    0x0000002d,0x00050067,0x00000031,0x00000032,0x00000030,0x0000002f,0x0007004f,0x00000033,
-    0x00000034,0x00000032,0x00000032,0x00000000,0x00000001,0x0004006f,0x00000025,0x00000035,
-    0x00000034,0x00050050,0x00000025,0x00000036,0x00000028,0x00000028,0x00050088,0x00000025,
-    0x00000037,0x00000036,0x00000035,0x0003003e,0x00000027,0x00000037,0x00050041,0x0000003c,
-    0x0000003d,0x0000003a,0x0000003b,0x0004003d,0x00000006,0x0000003e,0x0000003d,0x00060041,
-    0x00000044,0x00000045,0x00000041,0x00000042,0x00000043,0x0004003d,0x00000006,0x00000046,
-    0x00000045,0x000500ba,0x00000048,0x00000049,0x00000046,0x00000047,0x000300f7,0x0000004c,
-    0x00000000,0x000400fa,0x00000049,0x0000004b,0x00000052,0x000200f8,0x0000004b,0x00050041,
-    0x0000003c,0x0000004f,0x0000003a,0x0000004e,0x0004003d,0x00000006,0x00000050,0x0000004f,
-    0x00050083,0x00000006,0x00000051,0x0000004d,0x00000050,0x0003003e,0x0000004a,0x00000051,
-    0x000200f9,0x0000004c,0x000200f8,0x00000052,0x00050041,0x0000003c,0x00000053,0x0000003a,
-    0x0000004e,0x0004003d,0x00000006,0x00000054,0x00000053,0x0003003e,0x0000004a,0x00000054,
-    0x000200f9,0x0000004c,0x000200f8,0x0000004c,0x0004003d,0x00000006,0x00000055,0x0000004a,
-    0x00050050,0x00000025,0x00000056,0x0000003e,0x00000055,0x0003003e,0x00000038,0x00000056,
-    0x00050041,0x00000059,0x0000005a,0x00000041,0x00000058,0x0004003d,0x00000007,0x0000005b,
-    0x0000005a,0x0007004f,0x00000025,0x0000005c,0x0000005b,0x0000005b,0x00000000,0x00000001,
-    0x0004003d,0x00000025,0x0000005d,0x00000038,0x00050041,0x00000059,0x0000005e,0x00000041,
-    0x00000058,0x0004003d,0x00000007,0x0000005f,0x0000005e,0x0007004f,0x00000025,0x00000060,
-    0x0000005f,0x0000005f,0x00000002,0x00000003,0x00050085,0x00000025,0x00000061,0x0000005d,
-    0x00000060,0x00050081,0x00000025,0x00000062,0x0000005c,0x00000061,0x00050041,0x00000059,
-    0x00000063,0x00000041,0x00000058,0x0004003d,0x00000007,0x00000064,0x00000063,0x0007004f,
-    0x00000025,0x00000065,0x00000064,0x00000064,0x00000000,0x00000001,0x0004003d,0x00000025,
-    0x00000066,0x00000027,0x00050081,0x00000025,0x00000067,0x00000065,0x00000066,0x00050041,
-    0x00000059,0x00000068,0x00000041,0x00000058,0x0004003d,0x00000007,0x00000069,0x00000068,
-    0x0007004f,0x00000025,0x0000006a,0x00000069,0x00000069,0x00000000,0x00000001,0x00050041,
-    0x00000059,0x0000006b,0x00000041,0x00000058,0x0004003d,0x00000007,0x0000006c,0x0000006b,
-    0x0007004f,0x00000025,0x0000006d,0x0000006c,0x0000006c,0x00000002,0x00000003,0x00050081,
-    0x00000025,0x0000006e,0x0000006a,0x0000006d,0x0004003d,0x00000025,0x0000006f,0x00000027,
-    0x00050083,0x00000025,0x00000070,0x0000006e,0x0000006f,0x0008000c,0x00000025,0x00000071,
-    0x00000001,0x0000002b,0x00000062,0x00000067,0x00000070,0x0003003e,0x00000057,0x00000071,
-    0x0004003d,0x0000002a,0x00000073,0x0000002c,0x0004003d,0x00000025,0x00000074,0x00000057,
-    0x00060041,0x00000044,0x00000076,0x00000041,0x00000075,0x0000004e,0x0004003d,0x00000006,
-    0x00000077,0x00000076,0x00050051,0x00000006,0x00000078,0x00000074,0x00000000,0x00050051,
-    0x00000006,0x00000079,0x00000074,0x00000001,0x00060050,0x00000009,0x0000007a,0x00000078,
-    0x00000079,0x00000077,0x00070058,0x00000007,0x0000007b,0x00000073,0x0000007a,0x00000002,
-    0x00000047,0x0003003e,0x00000072,0x0000007b,0x00060041,0x00000044,0x0000007e,0x00000041,
-    0x0000007d,0x0000003b,0x0004003d,0x00000006,0x0000007f,0x0000007e,0x00060041,0x00000044,
-    0x00000080,0x00000041,0x0000007d,0x0000004e,0x0004003d,0x00000006,0x00000081,0x00000080,
-    0x00050041,0x0000003c,0x00000082,0x0000003a,0x0000003b,0x0004003d,0x00000006,0x00000083,
-    0x00000082,0x0008000c,0x00000006,0x00000084,0x00000001,0x0000002e,0x0000007f,0x00000081,
-    0x00000083,0x00060041,0x00000044,0x00000085,0x00000041,0x0000007d,0x00000019,0x0004003d,
-    0x00000006,0x00000086,0x00000085,0x00060041,0x00000044,0x00000087,0x00000041,0x0000007d,
-    0x00000043,0x0004003d,0x00000006,0x00000088,0x00000087,0x00050041,0x0000003c,0x00000089,
-    0x0000003a,0x0000004e,0x0004003d,0x00000006,0x0000008a,0x00000089,0x0008000c,0x00000006,
-    0x0000008b,0x00000001,0x0000002e,0x00000086,0x00000088,0x0000008a,0x00060050,0x00000009,
-    0x0000008d,0x00000084,0x0000008b,0x0000008c,0x00050041,0x00000059,0x0000008f,0x00000041,
-    0x0000002f,0x0004003d,0x00000007,0x00000090,0x0000008f,0x0003003e,0x0000008e,0x00000090,
-    0x0003003e,0x00000091,0x0000008d,0x00060039,0x00000009,0x00000092,0x0000000e,0x0000008e,
-    0x00000091,0x0003003e,0x0000007c,0x00000092,0x0004003d,0x00000009,0x00000094,0x0000007c,
-    0x0007004f,0x00000025,0x00000095,0x00000094,0x00000094,0x00000000,0x00000001,0x00050041,
-    0x0000001a,0x00000096,0x0000007c,0x00000043,0x0004003d,0x00000006,0x00000097,0x00000096,
-    0x0004007f,0x00000006,0x00000098,0x00000097,0x00050050,0x00000025,0x00000099,0x00000098,
-    0x00000098,0x00050088,0x00000025,0x0000009a,0x00000095,0x00000099,0x00050041,0x00000059,
-    0x0000009c,0x00000041,0x0000009b,0x0004003d,0x00000007,0x0000009d,0x0000009c,0x0007004f,
-    0x00000025,0x0000009e,0x0000009d,0x0000009d,0x00000000,0x00000002,0x00050083,0x00000025,
-    0x0000009f,0x0000009a,0x0000009e,0x00050041,0x00000059,0x000000a0,0x00000041,0x0000009b,
-    0x0004003d,0x00000007,0x000000a1,0x000000a0,0x0007004f,0x00000025,0x000000a2,0x000000a1,
-    0x000000a1,0x00000001,0x00000003,0x00050041,0x00000059,0x000000a3,0x00000041,0x0000009b,
-    0x0004003d,0x00000007,0x000000a4,0x000000a3,0x0007004f,0x00000025,0x000000a5,0x000000a4,
-    0x000000a4,0x00000000,0x00000002,0x00050083,0x00000025,0x000000a6,0x000000a2,0x000000a5,
-    0x00050088,0x00000025,0x000000a7,0x0000009f,0x000000a6,0x0003003e,0x00000093,0x000000a7,
-    0x00050041,0x0000001a,0x000000a8,0x00000093,0x0000004e,0x0004003d,0x00000006,0x000000a9,
-    0x000000a8,0x00050083,0x00000006,0x000000aa,0x0000004d,0x000000a9,0x00050041,0x0000001a,
-    0x000000ab,0x00000093,0x0000004e,0x0003003e,0x000000ab,0x000000aa,0x0003003e,0x000000ac,
-    0x000000ad,0x00050041,0x0000001a,0x000000ae,0x0000007c,0x00000043,0x0004003d,0x00000006,
-    0x000000af,0x000000ae,0x000500b8,0x00000048,0x000000b0,0x000000af,0x00000047,0x000300f7,
-    0x000000b2,0x00000000,0x000400fa,0x000000b0,0x000000b1,0x000000b2,0x000200f8,0x000000b1,
-    0x0004003d,0x00000025,0x000000b3,0x00000093,0x000500be,0x000000b5,0x000000b6,0x000000b3,
-    0x000000b4,0x0004009b,0x00000048,0x000000b7,0x000000b6,0x000200f9,0x000000b2,0x000200f8,
-    0x000000b2,0x000700f5,0x00000048,0x000000b8,0x000000b0,0x0000004c,0x000000b7,0x000000b1,
-    0x000300f7,0x000000ba,0x00000000,0x000400fa,0x000000b8,0x000000b9,0x000000ba,0x000200f8,
-    0x000000b9,0x0004003d,0x00000025,0x000000bb,0x00000093,0x000500bc,0x000000b5,0x000000bd,
-    0x000000bb,0x000000bc,0x0004009b,0x00000048,0x000000be,0x000000bd,0x000200f9,0x000000ba,
-    0x000200f8,0x000000ba,0x000700f5,0x00000048,0x000000bf,0x000000b8,0x000000b2,0x000000be,
-    0x000000b9,0x000300f7,0x000000c1,0x00000000,0x000400fa,0x000000bf,0x000000c0,0x000000c1,
-    0x000200f8,0x000000c0,0x0004003d,0x000000c4,0x000000c7,0x000000c6,0x00040064,0x000000c3,
-    0x000000c8,0x000000c7,0x00050067,0x00000033,0x000000c9,0x000000c8,0x0000002f,0x0004006f,
-    0x00000025,0x000000ca,0x000000c9,0x00050050,0x00000025,0x000000cb,0x00000028,0x00000028,
-    0x00050088,0x00000025,0x000000cc,0x000000cb,0x000000ca,0x0003003e,0x000000c2,0x000000cc,
-    0x00060041,0x00000044,0x000000ce,0x00000041,0x00000075,0x0000003b,0x0004003d,0x00000006,
-    0x000000cf,0x000000ce,0x00050085,0x00000006,0x000000d0,0x000000cf,0x00000028,0x00070050,
-    0x00000007,0x000000d1,0x000000d0,0x00000047,0x00000028,0x0000004d,0x0003003e,0x000000cd,
-    0x000000d1,0x0004003d,0x00000007,0x000000d3,0x000000cd,0x0007004f,0x00000025,0x000000d4,
-    0x000000d3,0x000000d3,0x00000000,0x00000001,0x0004003d,0x00000025,0x000000d5,0x00000093,
-    0x0004003d,0x00000007,0x000000d6,0x000000cd,0x0007004f,0x00000025,0x000000d7,0x000000d6,
-    0x000000d6,0x00000002,0x00000003,0x00050085,0x00000025,0x000000d8,0x000000d5,0x000000d7,
-    0x00050081,0x00000025,0x000000d9,0x000000d4,0x000000d8,0x0004003d,0x00000007,0x000000da,
-    0x000000cd,0x0007004f,0x00000025,0x000000db,0x000000da,0x000000da,0x00000000,0x00000001,
-    0x0004003d,0x00000025,0x000000dc,0x000000c2,0x00050081,0x00000025,0x000000dd,0x000000db,
-    0x000000dc,0x0004003d,0x00000007,0x000000de,0x000000cd,0x0007004f,0x00000025,0x000000df,
-    0x000000de,0x000000de,0x00000000,0x00000001,0x0004003d,0x00000007,0x000000e0,0x000000cd,
-    0x0007004f,0x00000025,0x000000e1,0x000000e0,0x000000e0,0x00000002,0x00000003,0x00050081,
-    0x00000025,0x000000e2,0x000000df,0x000000e1,0x0004003d,0x00000025,0x000000e3,0x000000c2,
-    0x00050083,0x00000025,0x000000e4,0x000000e2,0x000000e3,0x0008000c,0x00000025,0x000000e5,
-    0x00000001,0x0000002b,0x000000d9,0x000000dd,0x000000e4,0x0003003e,0x000000d2,0x000000e5,
-    0x0004003d,0x000000c4,0x000000e6,0x000000c6,0x0004003d,0x00000025,0x000000e7,0x000000d2,
-    0x00070058,0x00000007,0x000000e8,0x000000e6,0x000000e7,0x00000002,0x00000047,0x0003003e,
-    0x000000ac,0x000000e8,0x000200f9,0x000000c1,0x000200f8,0x000000c1,0x00060041,0x00000044,
-    0x000000ea,0x00000041,0x00000075,0x00000043,0x0004003d,0x00000006,0x000000eb,0x000000ea,
-    0x000500ba,0x00000048,0x000000ec,0x000000eb,0x00000047,0x000300f7,0x000000ef,0x00000000,
-    0x000400fa,0x000000ec,0x000000ee,0x000000f2,0x000200f8,0x000000ee,0x00050041,0x0000001a,
-    0x000000f0,0x000000ac,0x00000019,0x0004003d,0x00000006,0x000000f1,0x000000f0,0x0003003e,
-    0x000000ed,0x000000f1,0x000200f9,0x000000ef,0x000200f8,0x000000f2,0x0003003e,0x000000ed,
-    0x0000004d,0x000200f9,0x000000ef,0x000200f8,0x000000ef,0x0004003d,0x00000006,0x000000f3,
-    0x000000ed,0x0003003e,0x000000e9,0x000000f3,0x00060041,0x00000044,0x000000f5,0x00000041,
-    0x00000075,0x00000019,0x0004003d,0x00000006,0x000000f6,0x000000f5,0x000500ba,0x00000048,
-    0x000000f7,0x000000f6,0x00000047,0x000300f7,0x000000fa,0x00000000,0x000400fa,0x000000f7,
-    0x000000f9,0x000000ff,0x000200f8,0x000000f9,0x0004003d,0x00000007,0x000000fb,0x000000ac,
-    0x0008004f,0x00000009,0x000000fc,0x000000fb,0x000000fb,0x00000000,0x00000001,0x00000002,
-    0x0004003d,0x00000006,0x000000fd,0x000000e9,0x0005008e,0x00000009,0x000000fe,0x000000fc,
-    0x000000fd,0x0003003e,0x000000f8,0x000000fe,0x000200f9,0x000000fa,0x000200f8,0x000000ff,
-    0x0004003d,0x00000007,0x00000100,0x000000ac,0x0008004f,0x00000009,0x00000101,0x00000100,
-    0x00000100,0x00000000,0x00000001,0x00000002,0x0003003e,0x000000f8,0x00000101,0x000200f9,
-    0x000000fa,0x000200f8,0x000000fa,0x0004003d,0x00000009,0x00000102,0x000000f8,0x0003003e,
-    0x000000f4,0x00000102,0x00060041,0x00000044,0x00000104,0x00000041,0x00000042,0x0000003b,
-    0x0004003d,0x00000006,0x00000105,0x00000104,0x000500ba,0x00000048,0x00000106,0x00000105,
-    0x00000047,0x000300f7,0x00000109,0x00000000,0x000400fa,0x00000106,0x00000108,0x0000010c,
-    0x000200f8,0x00000108,0x00050041,0x0000001a,0x0000010a,0x00000072,0x00000019,0x0004003d,
-    0x00000006,0x0000010b,0x0000010a,0x0003003e,0x00000107,0x0000010b,0x000200f9,0x00000109,
-    0x000200f8,0x0000010c,0x0003003e,0x00000107,0x0000004d,0x000200f9,0x00000109,0x000200f8,
-    0x00000109,0x0004003d,0x00000006,0x0000010d,0x00000107,0x0003003e,0x00000103,0x0000010d,
-    0x00060041,0x00000044,0x0000010f,0x00000041,0x00000042,0x0000004e,0x0004003d,0x00000006,
-    0x00000110,0x0000010f,0x000500ba,0x00000048,0x00000111,0x00000110,0x00000047,0x000300f7,
-    0x00000114,0x00000000,0x000400fa,0x00000111,0x00000113,0x00000119,0x000200f8,0x00000113,
-    0x0004003d,0x00000007,0x00000115,0x00000072,0x0008004f,0x00000009,0x00000116,0x00000115,
-    0x00000115,0x00000000,0x00000001,0x00000002,0x0004003d,0x00000006,0x00000117,0x00000103,
-    0x0005008e,0x00000009,0x00000118,0x00000116,0x00000117,0x0003003e,0x00000112,0x00000118,
-    0x000200f9,0x00000114,0x000200f8,0x00000119,0x0004003d,0x00000007,0x0000011a,0x00000072,
-    0x0008004f,0x00000009,0x0000011b,0x0000011a,0x0000011a,0x00000000,0x00000001,0x00000002,
-    0x0003003e,0x00000112,0x0000011b,0x000200f9,0x00000114,0x000200f8,0x00000114,0x0004003d,
-    0x00000009,0x0000011c,0x00000112,0x0003003e,0x0000010e,0x0000011c,0x0004003d,0x00000006,
-    0x0000011e,0x00000103,0x000500ba,0x00000048,0x0000011f,0x0000011e,0x00000047,0x000300f7,
-    0x00000122,0x00000000,0x000400fa,0x0000011f,0x00000121,0x00000127,0x000200f8,0x00000121,
-    0x0004003d,0x00000009,0x00000123,0x0000010e,0x0004003d,0x00000006,0x00000124,0x00000103,
-    0x00060050,0x00000009,0x00000125,0x00000124,0x00000124,0x00000124,0x00050088,0x00000009,
-    0x00000126,0x00000123,0x00000125,0x0003003e,0x00000120,0x00000126,0x000200f9,0x00000122,
-    0x000200f8,0x00000127,0x0003003e,0x00000120,0x00000128,0x000200f9,0x00000122,0x000200f8,
-    0x00000122,0x0004003d,0x00000009,0x00000129,0x00000120,0x0004003d,0x00000006,0x0000012a,
-    0x00000103,0x00050051,0x00000006,0x0000012b,0x00000129,0x00000000,0x00050051,0x00000006,
-    0x0000012c,0x00000129,0x00000001,0x00050051,0x00000006,0x0000012d,0x00000129,0x00000002,
-    0x00070050,0x00000007,0x0000012e,0x0000012b,0x0000012c,0x0000012d,0x0000012a,0x0003003e,
-    0x0000011d,0x0000012e,0x0004003d,0x00000007,0x0000012f,0x0000011d,0x00050041,0x00000059,
-    0x00000131,0x00000041,0x00000130,0x0004003d,0x00000007,0x00000132,0x00000131,0x0007000c,
-    0x00000007,0x00000133,0x00000001,0x00000028,0x00000132,0x000000ad,0x00050085,0x00000007,
-    0x00000134,0x0000012f,0x00000133,0x00050041,0x00000059,0x00000136,0x00000041,0x00000135,
-    0x0004003d,0x00000007,0x00000137,0x00000136,0x00050081,0x00000007,0x00000138,0x00000134,
-    0x00000137,0x0003003e,0x0000011d,0x00000138,0x00050041,0x0000001a,0x00000139,0x0000011d,
-    0x00000019,0x0004003d,0x00000006,0x0000013a,0x00000139,0x0003003e,0x00000103,0x0000013a,
-    0x0004003d,0x00000007,0x0000013b,0x0000011d,0x0008004f,0x00000009,0x0000013c,0x0000013b,
-    0x0000013b,0x00000000,0x00000001,0x00000002,0x0004003d,0x00000006,0x0000013d,0x00000103,
-    0x0005008e,0x00000009,0x0000013e,0x0000013c,0x0000013d,0x0003003e,0x0000010e,0x0000013e,
-    0x0004003d,0x00000009,0x00000140,0x000000f4,0x0004003d,0x00000009,0x00000141,0x0000010e,
-    0x0004003d,0x00000006,0x00000142,0x000000e9,0x00050083,0x00000006,0x00000143,0x0000004d,
-    0x00000142,0x0005008e,0x00000009,0x00000144,0x00000141,0x00000143,0x00050081,0x00000009,
-    0x00000145,0x00000140,0x00000144,0x0004003d,0x00000006,0x00000146,0x000000e9,0x0004003d,
-    0x00000006,0x00000147,0x00000103,0x0004003d,0x00000006,0x00000148,0x000000e9,0x00050083,
-    0x00000006,0x00000149,0x0000004d,0x00000148,0x00050085,0x00000006,0x0000014a,0x00000147,
-    0x00000149,0x00050081,0x00000006,0x0000014b,0x00000146,0x0000014a,0x00050051,0x00000006,
-    0x0000014c,0x00000145,0x00000000,0x00050051,0x00000006,0x0000014d,0x00000145,0x00000001,
-    0x00050051,0x00000006,0x0000014e,0x00000145,0x00000002,0x00070050,0x00000007,0x0000014f,
-    0x0000014c,0x0000014d,0x0000014e,0x0000014b,0x0003003e,0x0000013f,0x0000014f,0x0004003d,
-    0x00000007,0x00000152,0x0000013f,0x0003003e,0x00000151,0x00000152,0x000100fd,0x00010038,
-    0x00050036,0x00000009,0x0000000e,0x00000000,0x0000000b,0x00030037,0x00000008,0x0000000c,
-    0x00030037,0x0000000a,0x0000000d,0x000200f8,0x0000000f,0x0004003d,0x00000009,0x00000010,
-    0x0000000d,0x0004003d,0x00000007,0x00000012,0x0000000c,0x0008004f,0x00000009,0x00000013,
-    0x00000012,0x00000012,0x00000000,0x00000001,0x00000002,0x0004003d,0x00000007,0x00000014,
-    0x0000000c,0x0008004f,0x00000009,0x00000015,0x00000014,0x00000014,0x00000000,0x00000001,
-    0x00000002,0x0004003d,0x00000009,0x00000016,0x0000000d,0x0007000c,0x00000009,0x00000017,
-    0x00000001,0x00000044,0x00000015,0x00000016,0x00050041,0x0000001a,0x0000001b,0x0000000c,
-    0x00000019,0x0004003d,0x00000006,0x0000001c,0x0000001b,0x0004003d,0x00000009,0x0000001d,
-    0x0000000d,0x0005008e,0x00000009,0x0000001e,0x0000001d,0x0000001c,0x00050081,0x00000009,
-    0x0000001f,0x00000017,0x0000001e,0x0007000c,0x00000009,0x00000020,0x00000001,0x00000044,
-    0x00000013,0x0000001f,0x0005008e,0x00000009,0x00000021,0x00000020,0x00000011,0x00050081,
-    0x00000009,0x00000022,0x00000010,0x00000021,0x000200fe,0x00000022,0x00010038,
+    0x00000018,0x00000019,0x00000003,0x000a001e,0x00000026,0x00000007,0x00000007,0x00000007,
+    0x00000007,0x00000007,0x00000007,0x00000007,0x00000007,0x00040020,0x00000027,0x00000009,
+    0x00000026,0x0004003b,0x00000027,0x00000028,0x00000009,0x00040015,0x00000029,0x00000020,
+    0x00000001,0x0004002b,0x00000029,0x0000002a,0x00000000,0x0004002b,0x00000029,0x0000002b,
+    0x00000001,0x0004002b,0x00000018,0x0000002c,0x00000000,0x00040020,0x0000002d,0x00000009,
+    0x00000006,0x0004002b,0x00000018,0x00000030,0x00000001,0x00040017,0x00000033,0x00000006,
+    0x00000002,0x00040020,0x00000034,0x00000001,0x00000033,0x0004003b,0x00000034,0x00000035,
+    0x00000001,0x00040020,0x00000036,0x00000001,0x00000006,0x0004002b,0x00000018,0x0000003c,
+    0x00000002,0x0004002b,0x00000006,0x00000042,0xbf800000,0x00040020,0x00000045,0x00000009,
+    0x00000007,0x0004002b,0x00000029,0x00000053,0x00000002,0x0004002b,0x00000006,0x00000060,
+    0x3f800000,0x0004002b,0x00000006,0x00000066,0x00000000,0x0007002c,0x00000007,0x00000067,
+    0x00000066,0x00000066,0x00000066,0x00000066,0x00020014,0x00000068,0x0005002c,0x00000033,
+    0x0000006f,0x00000066,0x00000066,0x00040017,0x00000070,0x00000068,0x00000002,0x0005002c,
+    0x00000033,0x00000077,0x00000060,0x00000060,0x0004002b,0x00000006,0x0000007e,0x3f000000,
+    0x00090019,0x0000007f,0x00000006,0x00000001,0x00000000,0x00000000,0x00000000,0x00000001,
+    0x00000000,0x0003001b,0x00000080,0x0000007f,0x00040020,0x00000081,0x00000000,0x00000080,
+    0x0004003b,0x00000081,0x00000082,0x00000000,0x00040017,0x00000085,0x00000029,0x00000002,
+    0x0004002b,0x00000029,0x0000008b,0x00000004,0x00040020,0x000000c5,0x00000003,0x00000007,
+    0x0004003b,0x000000c5,0x000000c6,0x00000003,0x00090019,0x000000ce,0x00000006,0x00000001,
+    0x00000000,0x00000001,0x00000000,0x00000001,0x00000000,0x0003001b,0x000000cf,0x000000ce,
+    0x00040020,0x000000d0,0x00000000,0x000000cf,0x0004003b,0x000000d0,0x000000d1,0x00000000,
+    0x00040017,0x000000d4,0x00000029,0x00000003,0x0004002b,0x00000029,0x000000dd,0x00000005,
+    0x0004002b,0x00000029,0x000000ed,0x00000003,0x0006002c,0x00000009,0x00000134,0x00000066,
+    0x00000066,0x00000066,0x0004002b,0x00000029,0x0000013c,0x00000006,0x0004002b,0x00000029,
+    0x00000141,0x00000007,0x0005002c,0x00000033,0x00000189,0x0000007e,0x0000007e,0x00050036,
+    0x00000002,0x00000004,0x00000000,0x00000003,0x000200f8,0x00000005,0x000300f7,0x0000015d,
+    0x00000000,0x000300fb,0x0000002c,0x0000015e,0x000200f8,0x0000015e,0x00060041,0x0000002d,
+    0x0000002e,0x00000028,0x0000002b,0x0000002c,0x0004003d,0x00000006,0x0000002f,0x0000002e,
+    0x00060041,0x0000002d,0x00000031,0x00000028,0x0000002b,0x00000030,0x0004003d,0x00000006,
+    0x00000032,0x00000031,0x00050041,0x00000036,0x00000037,0x00000035,0x0000002c,0x0004003d,
+    0x00000006,0x00000038,0x00000037,0x0008000c,0x00000006,0x00000039,0x00000001,0x0000002e,
+    0x0000002f,0x00000032,0x00000038,0x00060041,0x0000002d,0x0000003a,0x00000028,0x0000002b,
+    0x00000019,0x0004003d,0x00000006,0x0000003b,0x0000003a,0x00060041,0x0000002d,0x0000003d,
+    0x00000028,0x0000002b,0x0000003c,0x0004003d,0x00000006,0x0000003e,0x0000003d,0x00050041,
+    0x00000036,0x0000003f,0x00000035,0x00000030,0x0004003d,0x00000006,0x00000040,0x0000003f,
+    0x0008000c,0x00000006,0x00000041,0x00000001,0x0000002e,0x0000003b,0x0000003e,0x00000040,
+    0x00060050,0x00000009,0x00000043,0x00000039,0x00000041,0x00000042,0x00050041,0x00000045,
+    0x00000046,0x00000028,0x0000002a,0x0004003d,0x00000007,0x00000047,0x00000046,0x0008004f,
+    0x00000009,0x00000167,0x00000047,0x00000047,0x00000000,0x00000001,0x00000002,0x0007000c,
+    0x00000009,0x0000016b,0x00000001,0x00000044,0x00000167,0x00000043,0x00050051,0x00000006,
+    0x0000016d,0x00000047,0x00000003,0x0005008e,0x00000009,0x0000016f,0x00000043,0x0000016d,
+    0x00050081,0x00000009,0x00000170,0x0000016b,0x0000016f,0x0007000c,0x00000009,0x00000171,
+    0x00000001,0x00000044,0x00000167,0x00000170,0x0005008e,0x00000009,0x00000172,0x00000171,
+    0x00000011,0x00050081,0x00000009,0x00000173,0x00000043,0x00000172,0x0007004f,0x00000033,
+    0x0000004d,0x00000173,0x00000173,0x00000000,0x00000001,0x00050051,0x00000006,0x0000004f,
+    0x00000173,0x00000002,0x0004007f,0x00000006,0x00000050,0x0000004f,0x00050050,0x00000033,
+    0x00000051,0x00000050,0x00000050,0x00050088,0x00000033,0x00000052,0x0000004d,0x00000051,
+    0x00050041,0x00000045,0x00000054,0x00000028,0x00000053,0x0004003d,0x00000007,0x00000055,
+    0x00000054,0x0007004f,0x00000033,0x00000056,0x00000055,0x00000055,0x00000000,0x00000002,
+    0x00050083,0x00000033,0x00000057,0x00000052,0x00000056,0x0007004f,0x00000033,0x0000005a,
+    0x00000055,0x00000055,0x00000001,0x00000003,0x00050083,0x00000033,0x0000005e,0x0000005a,
+    0x00000056,0x00050088,0x00000033,0x0000005f,0x00000057,0x0000005e,0x00050051,0x00000006,
+    0x00000062,0x0000005f,0x00000001,0x00050083,0x00000006,0x00000063,0x00000060,0x00000062,
+    0x00060052,0x00000033,0x00000178,0x00000063,0x0000005f,0x00000001,0x000500b8,0x00000068,
+    0x0000006b,0x0000004f,0x00000066,0x000300f7,0x0000006d,0x00000000,0x000400fa,0x0000006b,
+    0x0000006c,0x0000006d,0x000200f8,0x0000006c,0x000500be,0x00000070,0x00000071,0x00000178,
+    0x0000006f,0x0004009b,0x00000068,0x00000072,0x00000071,0x000200f9,0x0000006d,0x000200f8,
+    0x0000006d,0x000700f5,0x00000068,0x00000073,0x0000006b,0x0000015e,0x00000072,0x0000006c,
+    0x000300f7,0x00000075,0x00000000,0x000400fa,0x00000073,0x00000074,0x00000075,0x000200f8,
+    0x00000074,0x000500bc,0x00000070,0x00000078,0x00000178,0x00000077,0x0004009b,0x00000068,
+    0x00000079,0x00000078,0x000200f9,0x00000075,0x000200f8,0x00000075,0x000700f5,0x00000068,
+    0x0000007a,0x00000073,0x0000006d,0x00000079,0x00000074,0x000300f7,0x0000007c,0x00000000,
+    0x000400fa,0x0000007a,0x0000007b,0x0000007c,0x000200f8,0x0000007b,0x0004003d,0x00000080,
+    0x00000083,0x00000082,0x00040064,0x0000007f,0x00000084,0x00000083,0x00050067,0x00000085,
+    0x00000086,0x00000084,0x0000002a,0x0004006f,0x00000033,0x00000087,0x00000086,0x00050088,
+    0x00000033,0x00000089,0x00000189,0x00000087,0x00060041,0x0000002d,0x0000008c,0x00000028,
+    0x0000008b,0x0000002c,0x0004003d,0x00000006,0x0000008d,0x0000008c,0x00050085,0x00000006,
+    0x0000008e,0x0000008d,0x0000007e,0x00070050,0x00000007,0x0000008f,0x0000008e,0x00000066,
+    0x0000007e,0x00000060,0x0007004f,0x00000033,0x00000092,0x0000008f,0x0000008f,0x00000000,
+    0x00000001,0x0007004f,0x00000033,0x00000095,0x0000008f,0x0000008f,0x00000002,0x00000003,
+    0x0008000c,0x00000033,0x00000097,0x00000001,0x00000032,0x00000178,0x00000095,0x00000092,
+    0x00050081,0x00000033,0x0000009b,0x00000092,0x00000089,0x00050081,0x00000033,0x000000a0,
+    0x00000092,0x00000095,0x00050083,0x00000033,0x000000a2,0x000000a0,0x00000089,0x0008000c,
+    0x00000033,0x000000a3,0x00000001,0x0000002b,0x00000097,0x0000009b,0x000000a2,0x00070058,
+    0x00000007,0x000000a6,0x00000083,0x000000a3,0x00000002,0x00000066,0x000200f9,0x0000007c,
+    0x000200f8,0x0000007c,0x000700f5,0x00000007,0x0000017d,0x00000067,0x00000075,0x000000a6,
+    0x0000007b,0x00060041,0x0000002d,0x000000a8,0x00000028,0x0000008b,0x0000003c,0x0004003d,
+    0x00000006,0x000000a9,0x000000a8,0x000500ba,0x00000068,0x000000aa,0x000000a9,0x00000066,
+    0x000300f7,0x000000ad,0x00000000,0x000400fa,0x000000aa,0x000000ac,0x000000b0,0x000200f8,
+    0x000000ac,0x00050051,0x00000006,0x000000af,0x0000017d,0x00000003,0x000200f9,0x000000ad,
+    0x000200f8,0x000000b0,0x000200f9,0x000000ad,0x000200f8,0x000000ad,0x000700f5,0x00000006,
+    0x00000180,0x000000af,0x000000ac,0x00000060,0x000000b0,0x00060041,0x0000002d,0x000000b3,
+    0x00000028,0x0000008b,0x00000019,0x0004003d,0x00000006,0x000000b4,0x000000b3,0x000500ba,
+    0x00000068,0x000000b5,0x000000b4,0x00000066,0x000300f7,0x000000b8,0x00000000,0x000400fa,
+    0x000000b5,0x000000b7,0x000000bd,0x000200f8,0x000000b7,0x0008004f,0x00000009,0x000000ba,
+    0x0000017d,0x0000017d,0x00000000,0x00000001,0x00000002,0x0005008e,0x00000009,0x000000bc,
+    0x000000ba,0x00000180,0x000200f9,0x000000b8,0x000200f8,0x000000bd,0x0008004f,0x00000009,
+    0x000000bf,0x0000017d,0x0000017d,0x00000000,0x00000001,0x00000002,0x000200f9,0x000000b8,
+    0x000200f8,0x000000b8,0x000700f5,0x00000009,0x00000182,0x000000bc,0x000000b7,0x000000bf,
+    0x000000bd,0x000500b4,0x00000068,0x000000c2,0x00000180,0x00000060,0x000300f7,0x000000c4,
+    0x00000000,0x000400fa,0x000000c2,0x000000c3,0x000000c4,0x000200f8,0x000000c3,0x00050051,
+    0x00000006,0x000000c8,0x00000182,0x00000000,0x00050051,0x00000006,0x000000c9,0x00000182,
+    0x00000001,0x00050051,0x00000006,0x000000ca,0x00000182,0x00000002,0x00070050,0x00000007,
+    0x000000cb,0x000000c8,0x000000c9,0x000000ca,0x00000060,0x0003003e,0x000000c6,0x000000cb,
+    0x000200f9,0x0000015d,0x000200f8,0x000000c4,0x0004003d,0x000000cf,0x000000d2,0x000000d1,
+    0x00040064,0x000000ce,0x000000d3,0x000000d2,0x00050067,0x000000d4,0x000000d5,0x000000d3,
+    0x0000002a,0x0007004f,0x00000085,0x000000d6,0x000000d5,0x000000d5,0x00000000,0x00000001,
+    0x0004006f,0x00000033,0x000000d7,0x000000d6,0x00050088,0x00000033,0x000000d9,0x00000189,
+    0x000000d7,0x00060041,0x0000002d,0x000000de,0x00000028,0x000000dd,0x0000003c,0x0004003d,
+    0x00000006,0x000000df,0x000000de,0x000500ba,0x00000068,0x000000e0,0x000000df,0x00000066,
+    0x000300f7,0x000000e3,0x00000000,0x000400fa,0x000000e0,0x000000e2,0x000000e7,0x000200f8,
+    0x000000e2,0x00050083,0x00000006,0x000000e6,0x00000060,0x00000040,0x000200f9,0x000000e3,
+    0x000200f8,0x000000e7,0x000200f9,0x000000e3,0x000200f8,0x000000e3,0x000700f5,0x00000006,
+    0x00000183,0x000000e6,0x000000e2,0x00000040,0x000000e7,0x00050050,0x00000033,0x000000eb,
+    0x00000038,0x00000183,0x00050041,0x00000045,0x000000ee,0x00000028,0x000000ed,0x0004003d,
+    0x00000007,0x000000ef,0x000000ee,0x0007004f,0x00000033,0x000000f0,0x000000ef,0x000000ef,
+    0x00000000,0x00000001,0x0007004f,0x00000033,0x000000f4,0x000000ef,0x000000ef,0x00000002,
+    0x00000003,0x0008000c,0x00000033,0x000000f6,0x00000001,0x00000032,0x000000eb,0x000000f4,
+    0x000000f0,0x00050081,0x00000033,0x000000fb,0x000000f0,0x000000d9,0x00050081,0x00000033,
+    0x00000102,0x000000f0,0x000000f4,0x00050083,0x00000033,0x00000104,0x00000102,0x000000d9,
+    0x0008000c,0x00000033,0x00000105,0x00000001,0x0000002b,0x000000f6,0x000000fb,0x00000104,
+    0x00060041,0x0000002d,0x00000109,0x00000028,0x0000008b,0x00000030,0x0004003d,0x00000006,
+    0x0000010a,0x00000109,0x00050051,0x00000006,0x0000010b,0x00000105,0x00000000,0x00050051,
+    0x00000006,0x0000010c,0x00000105,0x00000001,0x00060050,0x00000009,0x0000010d,0x0000010b,
+    0x0000010c,0x0000010a,0x00070058,0x00000007,0x0000010e,0x000000d2,0x0000010d,0x00000002,
+    0x00000066,0x00060041,0x0000002d,0x00000110,0x00000028,0x000000dd,0x0000002c,0x0004003d,
+    0x00000006,0x00000111,0x00000110,0x000500ba,0x00000068,0x00000112,0x00000111,0x00000066,
+    0x000300f7,0x00000115,0x00000000,0x000400fa,0x00000112,0x00000114,0x00000118,0x000200f8,
+    0x00000114,0x00050051,0x00000006,0x00000117,0x0000010e,0x00000003,0x000200f9,0x00000115,
+    0x000200f8,0x00000118,0x000200f9,0x00000115,0x000200f8,0x00000115,0x000700f5,0x00000006,
+    0x00000184,0x00000117,0x00000114,0x00000060,0x00000118,0x00060041,0x0000002d,0x0000011b,
+    0x00000028,0x000000dd,0x00000030,0x0004003d,0x00000006,0x0000011c,0x0000011b,0x000500ba,
+    0x00000068,0x0000011d,0x0000011c,0x00000066,0x000300f7,0x00000120,0x00000000,0x000400fa,
+    0x0000011d,0x0000011f,0x00000125,0x000200f8,0x0000011f,0x0008004f,0x00000009,0x00000122,
+    0x0000010e,0x0000010e,0x00000000,0x00000001,0x00000002,0x0005008e,0x00000009,0x00000124,
+    0x00000122,0x00000184,0x000200f9,0x00000120,0x000200f8,0x00000125,0x0008004f,0x00000009,
+    0x00000127,0x0000010e,0x0000010e,0x00000000,0x00000001,0x00000002,0x000200f9,0x00000120,
+    0x000200f8,0x00000120,0x000700f5,0x00000009,0x00000185,0x00000124,0x0000011f,0x00000127,
+    0x00000125,0x000500ba,0x00000068,0x0000012b,0x00000184,0x00000066,0x000300f7,0x0000012e,
+    0x00000000,0x000400fa,0x0000012b,0x0000012d,0x00000133,0x000200f8,0x0000012d,0x00060050,
+    0x00000009,0x00000131,0x00000184,0x00000184,0x00000184,0x00050088,0x00000009,0x00000132,
+    0x00000185,0x00000131,0x000200f9,0x0000012e,0x000200f8,0x00000133,0x000200f9,0x0000012e,
+    0x000200f8,0x0000012e,0x000700f5,0x00000009,0x00000187,0x00000132,0x0000012d,0x00000134,
+    0x00000133,0x00050051,0x00000006,0x00000137,0x00000187,0x00000000,0x00050051,0x00000006,
+    0x00000138,0x00000187,0x00000001,0x00050051,0x00000006,0x00000139,0x00000187,0x00000002,
+    0x00070050,0x00000007,0x0000013a,0x00000137,0x00000138,0x00000139,0x00000184,0x00050041,
+    0x00000045,0x0000013d,0x00000028,0x0000013c,0x0004003d,0x00000007,0x0000013e,0x0000013d,
+    0x0007000c,0x00000007,0x0000013f,0x00000001,0x00000028,0x0000013e,0x00000067,0x00050041,
+    0x00000045,0x00000142,0x00000028,0x00000141,0x0004003d,0x00000007,0x00000143,0x00000142,
+    0x0008000c,0x00000007,0x00000144,0x00000001,0x00000032,0x0000013a,0x0000013f,0x00000143,
+    0x00050051,0x00000006,0x00000146,0x00000144,0x00000003,0x0008004f,0x00000009,0x00000148,
+    0x00000144,0x00000144,0x00000000,0x00000001,0x00000002,0x0005008e,0x00000009,0x0000014a,
+    0x00000148,0x00000146,0x00050083,0x00000006,0x0000014f,0x00000060,0x00000180,0x0005008e,
+    0x00000009,0x00000150,0x0000014a,0x0000014f,0x00050081,0x00000009,0x00000151,0x00000182,
+    0x00000150,0x0008000c,0x00000006,0x00000157,0x00000001,0x00000032,0x00000146,0x0000014f,
+    0x00000180,0x00050051,0x00000006,0x00000158,0x00000151,0x00000000,0x00050051,0x00000006,
+    0x00000159,0x00000151,0x00000001,0x00050051,0x00000006,0x0000015a,0x00000151,0x00000002,
+    0x00070050,0x00000007,0x0000015b,0x00000158,0x00000159,0x0000015a,0x00000157,0x0003003e,
+    0x000000c6,0x0000015b,0x000200f9,0x0000015d,0x000200f8,0x0000015d,0x000100fd,0x00010038,
 };
@@ -75,13 +75,15 @@ static int surf_native_load(void) {
    return sn.client && sn.create && sn.destroy && sn.bind;
 }
 static void surf_native_slot_destroy(surf_native_slot *slot) {
+    if(slot->srgb_view)sn.destroy_view(vk.device,slot->srgb_view,NULL);
+    slot->srgb_view=VK_NULL_HANDLE;
    if(slot->view)sn.destroy_view(vk.device,slot->view,NULL);
    if(slot->image)sn.destroy_image(vk.device,slot->image,NULL);
    if(slot->memory)sn.free_memory(vk.device,slot->memory,NULL);
    if(slot->buffer)sn.release(slot->buffer);
    slot->view=VK_NULL_HANDLE;slot->image=VK_NULL_HANDLE;slot->memory=VK_NULL_HANDLE;slot->buffer=NULL;
 }
-static int surf_native_allocate(surf_native_slot *slot,EGLDisplay display,uint32_t width,uint32_t height) {
+static int surf_native_allocate(surf_native_slot *slot,EGLDisplay display,uint32_t width,uint32_t height,int projected) {
    AHardwareBuffer_Desc desc={.width=width,.height=height,.layers=1,
        .format=AHARDWAREBUFFER_FORMAT_R8G8B8A8_UNORM,
        .usage=AHARDWAREBUFFER_USAGE_GPU_SAMPLED_IMAGE|AHARDWAREBUFFER_USAGE_GPU_COLOR_OUTPUT};
@@ -91,11 +93,14 @@ static int surf_native_allocate(surf_native_slot *slot,EGLDisplay display,uint32
    if(sn.properties(vk.device,slot->buffer,&props)!=VK_SUCCESS || format.format!=VK_FORMAT_R8G8B8A8_UNORM)goto fail;
    VkExternalMemoryImageCreateInfo external={VK_STRUCTURE_TYPE_EXTERNAL_MEMORY_IMAGE_CREATE_INFO,NULL,
        VK_EXTERNAL_MEMORY_HANDLE_TYPE_ANDROID_HARDWARE_BUFFER_BIT_ANDROID};
-    VkImageCreateInfo image={VK_STRUCTURE_TYPE_IMAGE_CREATE_INFO,&external,0,VK_IMAGE_TYPE_2D,format.format,
+    VkImageCreateInfo image={VK_STRUCTURE_TYPE_IMAGE_CREATE_INFO,&external,projected?VK_IMAGE_CREATE_MUTABLE_FORMAT_BIT:0,VK_IMAGE_TYPE_2D,format.format,
        {width,height,1},1,1,VK_SAMPLE_COUNT_1_BIT,VK_IMAGE_TILING_OPTIMAL,
        VK_IMAGE_USAGE_SAMPLED_BIT|VK_IMAGE_USAGE_COLOR_ATTACHMENT_BIT|VK_IMAGE_USAGE_TRANSFER_SRC_BIT,
        VK_SHARING_MODE_EXCLUSIVE,0,NULL,VK_IMAGE_LAYOUT_UNDEFINED};
-    if(sn.create_image(vk.device,&image,NULL,&slot->image)!=VK_SUCCESS)goto fail;
+    if(sn.create_image(vk.device,&image,NULL,&slot->image)!=VK_SUCCESS) {
+        image.flags=0;projected=0;
+        if(sn.create_image(vk.device,&image,NULL,&slot->image)!=VK_SUCCESS)goto fail;
+    }
    uint32_t type=0;while(type<32 && !(props.memoryTypeBits&(1u<<type)))type++;
    if(type==32)goto fail;
    VkImportAndroidHardwareBufferInfoANDROID imported={VK_STRUCTURE_TYPE_IMPORT_ANDROID_HARDWARE_BUFFER_INFO_ANDROID,NULL,slot->buffer};
@@ -106,6 +111,10 @@ static int surf_native_allocate(surf_native_slot *slot,EGLDisplay display,uint32
    VkImageViewCreateInfo view={VK_STRUCTURE_TYPE_IMAGE_VIEW_CREATE_INFO,NULL,0,slot->image,VK_IMAGE_VIEW_TYPE_2D,
        format.format,{0,0,0,0},{VK_IMAGE_ASPECT_COLOR_BIT,0,1,0,1}};
    if(sn.create_view(vk.device,&view,NULL,&slot->view)!=VK_SUCCESS)goto fail;
+    if(projected) {
+        view.format=VK_FORMAT_R8G8B8A8_SRGB;
+        if(sn.create_view(vk.device,&view,NULL,&slot->srgb_view)!=VK_SUCCESS)slot->srgb_view=VK_NULL_HANDLE;
+    }
    slot->egl_image=sn.create(display,EGL_NO_CONTEXT,EGL_NATIVE_BUFFER_ANDROID,sn.client(slot->buffer),NULL);
    if(slot->egl_image==EGL_NO_IMAGE_KHR)goto fail;
    p_glGenTextures(1,&slot->texture);p_glBindTexture(GL_TEXTURE_2D,slot->texture);
@@ -239,7 +248,7 @@ static void surf_native_worker(surf_swapchain *s,JNIEnv *env,EGLDisplay display)
            if(slot->texture)p_glDeleteTextures(1,&slot->texture);
            if(slot->egl_image)sn.destroy(display,slot->egl_image);
            slot->texture=0;slot->egl_image=EGL_NO_IMAGE_KHR;surf_native_slot_destroy(slot);
-            if(!surf_native_allocate(slot,display,width,height))goto fail;
+            if(!surf_native_allocate(slot,display,width,height,s->native_project))goto fail;
            LOG("surface_native: %ux%u decoded input -> %ux%u shared view",desc.width,desc.height,width,height);
        }
        p_glBindFramebuffer(GL_FRAMEBUFFER,fbo);
@@ -295,11 +304,12 @@ done:
 static void surf_native_complete(surf_swapchain *s) {
    pthread_mutex_lock(&surf_lock);
    if(s->native_pending>=0)s->native_slots[s->native_pending].state=0;
+    for(int i=0;i<SURF_NATIVE_SLOTS;i++)if(s->native_slots[i].state==4)s->native_slots[i].state=0;
    s->native_pending=-1;pthread_mutex_unlock(&surf_lock);
 }
 static void surf_native_ownership(VkCommandBuffer command,surf_native_slot *slot,int acquire) {
-    VkAccessFlags access=slot->projected?VK_ACCESS_TRANSFER_READ_BIT:VK_ACCESS_SHADER_READ_BIT;
-    VkImageLayout layout=slot->projected?VK_IMAGE_LAYOUT_TRANSFER_SRC_OPTIMAL:VK_IMAGE_LAYOUT_SHADER_READ_ONLY_OPTIMAL;
+    VkAccessFlags access=slot->projected && !slot->sampled?VK_ACCESS_TRANSFER_READ_BIT:VK_ACCESS_SHADER_READ_BIT;
+    VkImageLayout layout=slot->projected && !slot->sampled?VK_IMAGE_LAYOUT_TRANSFER_SRC_OPTIMAL:VK_IMAGE_LAYOUT_SHADER_READ_ONLY_OPTIMAL;
    VkImageMemoryBarrier barrier={VK_STRUCTURE_TYPE_IMAGE_MEMORY_BARRIER,NULL,
        acquire?0:access,acquire?access:0,
        acquire?VK_IMAGE_LAYOUT_GENERAL:layout,
@@ -112,6 +112,25 @@ static void surf_projection_destroy(surf_swapchain *s) {
    }
    memset(p,0,sizeof(*p));
 }
+// Only adapter-owned video swapchains receive this profile. Application eye
+// buffers retain their selected foveation and gaze tracking.
+static void surf_video_full_rate(XrSession session, XrSwapchain output) {
+    PFN_xrCreateFoveationProfileFB create = (PFN_xrCreateFoveationProfileFB)lookup(active_instance,"xrCreateFoveationProfileFB");
+    PFN_xrDestroyFoveationProfileFB destroy = (PFN_xrDestroyFoveationProfileFB)lookup(active_instance,"xrDestroyFoveationProfileFB");
+    PFN_xrUpdateSwapchainFB update = (PFN_xrUpdateSwapchainFB)lookup(active_instance,"xrUpdateSwapchainFB");
+    if (!create || !destroy || !update) return;
+    XrFoveationLevelProfileCreateInfoFB level = {XR_TYPE_FOVEATION_LEVEL_PROFILE_CREATE_INFO_FB,
+        NULL,XR_FOVEATION_LEVEL_NONE_FB,0,XR_FOVEATION_DYNAMIC_DISABLED_FB};
+    XrFoveationProfileCreateInfoFB ci = {XR_TYPE_FOVEATION_PROFILE_CREATE_INFO_FB,&level};
+    XrFoveationProfileFB profile = XR_NULL_HANDLE;
+    XrResult result = create(session,&ci,&profile);
+    if (XR_SUCCEEDED(result)) {
+        XrSwapchainStateFoveationFB state = {XR_TYPE_SWAPCHAIN_STATE_FOVEATION_FB,NULL,0,profile};
+        result = update(output,(const XrSwapchainStateBaseHeaderFB *)&state);
+        destroy(profile);
+    }
+    LOG("surface_video: full-rate runtime profile result=%d",result);
+}
 static int surf_projection_setup(XrSession session,surf_swapchain *s,surf_projection *p,uint32_t width,uint32_t height) {
    if(p->pipeline || (s->native_project && p->output))return 1;
    if(!surf_vk_ready() || !surf_staging(s) || !surf_projection_functions())return 0;
@@ -131,6 +150,7 @@ static int surf_projection_setup(XrSession session,surf_swapchain *s,surf_projec
        if(create_failures++<5)LOG("surface_projection: swapchain creation result=%d",xr_result);
        goto fail;
    }
+    surf_video_full_rate(session,p->output);
    stage="runtime image enumeration";
    XrSwapchainImageVulkanKHR images[MAX_IMAGES];
    for(int i=0;i<MAX_IMAGES;i++)images[i]=(XrSwapchainImageVulkanKHR){XR_TYPE_SWAPCHAIN_IMAGE_VULKAN_KHR,NULL,VK_NULL_HANDLE};
@@ -322,6 +342,8 @@ static const XrCompositionLayerBaseHeader *surf_video_present(XrSession session,
    PFN_xrReleaseSwapchainImage release=(PFN_xrReleaseSwapchainImage)lookup(active_instance,"xrReleaseSwapchainImage");
    int compose=surf_composite_candidate(info,layer);
    int cached_only=compose && surf_composite_cached_only(info,p,&native->video,&current);
+    int direct=cached_only && native->srgb_view;
+    int previous=s->native_current;
    XrSwapchainImageAcquireInfo ai={XR_TYPE_SWAPCHAIN_IMAGE_ACQUIRE_INFO};
    XrSwapchainImageWaitInfo wi={XR_TYPE_SWAPCHAIN_IMAGE_WAIT_INFO,NULL,0};
    XrSwapchainImageReleaseInfo ri={XR_TYPE_SWAPCHAIN_IMAGE_RELEASE_INFO};uint32_t index;
@@ -338,25 +360,32 @@ static const XrCompositionLayerBaseHeader *surf_video_present(XrSession session,
    if(!cached_only && index>=p->count){release(p->output,&ri);p->acquired=0;goto unused;}
    VkCommandBufferBeginInfo begin={VK_STRUCTURE_TYPE_COMMAND_BUFFER_BEGIN_INFO,NULL,VK_COMMAND_BUFFER_USAGE_ONE_TIME_SUBMIT_BIT};
    vk.ResetCommandBuffer(s->cmd,0);vk.BeginCommandBuffer(s->cmd,&begin);
+    native->sampled=direct;
    surf_native_ownership(s->cmd,native,1);
    if(!cached_only)surf_barrier(s->cmd,p->images[index],VK_IMAGE_LAYOUT_UNDEFINED,VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL,0,VK_ACCESS_TRANSFER_WRITE_BIT);
    VkImageCopy copy={{VK_IMAGE_ASPECT_COLOR_BIT,0,0,1},{0,0,0},{VK_IMAGE_ASPECT_COLOR_BIT,0,0,1},{0,0,0},{2*p->size,p->size,1}};
    if(!cached_only)spvk.CmdCopyImage(s->cmd,native->image,VK_IMAGE_LAYOUT_TRANSFER_SRC_OPTIMAL,p->images[index],VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL,1,&copy);
-    if(compose){
+    if(compose && !direct){
        surf_barrier(s->cmd,p->video_cache,p->cache_ready?VK_IMAGE_LAYOUT_SHADER_READ_ONLY_OPTIMAL:VK_IMAGE_LAYOUT_UNDEFINED,
        VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL,p->cache_ready?VK_ACCESS_SHADER_READ_BIT:0,VK_ACCESS_TRANSFER_WRITE_BIT);
    spvk.CmdCopyImage(s->cmd,native->image,VK_IMAGE_LAYOUT_TRANSFER_SRC_OPTIMAL,p->video_cache,VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL,1,&copy);
    surf_barrier(s->cmd,p->video_cache,VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL,VK_IMAGE_LAYOUT_SHADER_READ_ONLY_OPTIMAL,
        VK_ACCESS_TRANSFER_WRITE_BIT,VK_ACCESS_SHADER_READ_BIT);
    }
-    surf_native_ownership(s->cmd,native,0);
+    if(!direct)surf_native_ownership(s->cmd,native,0);
+    if(previous>=0)surf_native_ownership(s->cmd,&s->native_slots[previous],0);
    if(!cached_only)surf_barrier(s->cmd,p->images[index],VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL,VK_IMAGE_LAYOUT_COLOR_ATTACHMENT_OPTIMAL,
        VK_ACCESS_TRANSFER_WRITE_BIT,VK_ACCESS_COLOR_ATTACHMENT_READ_BIT|VK_ACCESS_COLOR_ATTACHMENT_WRITE_BIT);
    vk.EndCommandBuffer(s->cmd);
    VkSubmitInfo submit={VK_STRUCTURE_TYPE_SUBMIT_INFO,NULL,0,NULL,NULL,1,&s->cmd};
    int ok=vk.QueueSubmit(vk.queue,1,&submit,s->fence)==VK_SUCCESS;
    if(!cached_only){release(p->output,&ri);p->acquired=0;}if(!ok)goto unused;
-    s->native_pending=slot;s->in_flight=1;s->uploads++;if(compose){p->cache_ready=1;p->cached_job=native->video;}
+    pthread_mutex_lock(&surf_lock);
+    if(previous>=0)s->native_slots[previous].state=4; // reusable only after the handoff fence
+    s->native_current=direct?slot:-1;
+    pthread_mutex_unlock(&surf_lock);
+    s->native_pending=direct?-1:slot;s->in_flight=1;s->uploads++;
+    if(direct && s->uploads%300==2)LOG("surface_video: direct shared-buffer sampling; cache copy skipped");if(compose){p->cache_ready=1;p->cached_job=native->video;}
    p->width=native->source_width;p->height=native->source_height;p->source_seq=native->seq;p->source_ready=1;
    for(int eye=0;eye<2;eye++)p->eyes[eye]=(XrCompositionLayerProjectionView){XR_TYPE_COMPOSITION_LAYER_PROJECTION_VIEW,NULL,
        native->video.views[eye].pose,native->video.views[eye].fov,
@@ -24,17 +24,17 @@
 typedef struct {
    AHardwareBuffer *buffer;
    VkImage image;
-    VkImageView view;
+    VkImageView view, srgb_view;
    VkDeviceMemory memory;
    EGLImageKHR egl_image;
    GLuint texture;
    uint32_t width,height;
-    int state; // 0 reusable, 1 worker writing, 2 published, 3 current/pending Vulkan sampler
+    int state; // 0 reusable, 1 worker writing, 2 published, 3 current/pending Vulkan sampler, 4 awaiting release fence
    uint64_t seq;
    uint32_t source_width,source_height;
    int64_t source_time;
    surf_video_job video;
-    int projected;
+    int projected, sampled;
 } surf_native_slot;

 #define SURF_MAX 8
@@ -10,7 +10,7 @@ timefix OpenXR layer for Proton games (linux-arm64, glibc; the NDK's clang build
 OculusHMDConnected helper for Rift games under Proton (win-x64 PE; the NDK's clang + lld-link, no Windows SDK), the
 live view's hardware H.264 encoder fp_venc (linux-arm64-bin, static freestanding executable), and rewrites artifacts/SHA256SUMS. Run `frameport parity` afterwards to see which games change.

-    python native/build.py [--only adapter,bridge,compat,langpack,glshim,eglfmt,glmv,ovrtrace,dex,xrlayer,oculushmd,xrshim,vkshim,zinkfix,ovrpshim,vrsettings,venc,vroverlay_probe] [--ndk PATH]
+    python native/build.py [--only adapter,bridge,compat,langpack,glshim,eglfmt,glmv,ovrtrace,dex,xrlayer,oculushmd,xrshim,vkshim,zinkfix,foveation,ovrpshim,tlskeys,vrsettings,venc,vroverlay_probe] [--ndk PATH]
 """
 from __future__ import annotations

@@ -21,6 +21,7 @@ import platform
 import re
 import shutil
 import subprocess
+import struct
 import sys
 import urllib.request
 import zipfile
@@ -133,6 +134,20 @@ def exe(tc: Path, name: str) -> Path:

 def build_adapter(tc: Path):
    src = HERE / "adapter"
+    shader_tools = tc.parents[3] / "shader-tools" / tc.name
+    suffix = ".exe" if os.name == "nt" else ""
+    sections = ["// Generated from surface_composite.vert and surface_composite.frag.\n"]
+    for stage in ("vert", "frag"):
+        binary = CACHE / f"surface_composite_{stage}.spv"
+        run([shader_tools / ("glslc" + suffix), "--target-env=vulkan1.0", "-O",
+             src / f"surface_composite.{stage}", "-o", binary])
+        run([shader_tools / ("spirv-val" + suffix), "--target-env", "vulkan1.0", binary])
+        data = binary.read_bytes()
+        words = struct.unpack(f"<{len(data)//4}I", data)
+        sections.append(f"static const uint32_t surface_composite_{stage}_spv[] = {{\n" +
+                        "\n".join("    " + ",".join(f"0x{v:08x}" for v in words[i:i+8]) + ","
+                                  for i in range(0, len(words), 8)) + "\n};\n")
+    (src / "surface_composite_spv.h").write_text("".join(sections), encoding="utf-8")
    run([sys.executable, src / "gen_forwarders.py"])
    inc = openxr_include("adapter")
    common = ["-shared", "-fPIC", "-O2", "-Wall", "-Wextra", "-Werror", "-Wno-gnu-conditional-omitted-operand",
@@ -246,17 +261,18 @@ def build_vroverlay_probe(tc: Path):
         f"/out:{work / 'fp_vroverlay_probe.exe'}"])


-def build_bridge(tc: Path):
+def build_bridge(tc: Path, output="libvrapi.so"):
    src = HERE / "vrapi-bridge"
    inc = openxr_include("bridge")
    run([tc / "bin/clang++", "--target=aarch64-linux-android29", f"--sysroot={tc / 'sysroot'}", "-std=c++17", "-O2", "-g",
         "-fPIC", f"-ffile-prefix-map={src}=native/vrapi-bridge", f"-ffile-prefix-map={CACHE}=native/.cache",
+         f"-ffile-prefix-map={CACHE.resolve()}=native/.cache",  # a symlinked cache (worktrees)
         "-fvisibility=hidden", "-fvisibility-inlines-hidden", "-Wall", "-Wextra",
         "-Wno-missing-field-initializers", "-Werror=return-type", "-DXR_NO_PROTOTYPES", "-DXR_USE_PLATFORM_ANDROID",
         "-DXR_USE_GRAPHICS_API_VULKAN", "-DXR_USE_GRAPHICS_API_OPENGL_ES", "-DXR_USE_TIMESPEC", f"-I{inc}", "-shared",
         "-static-libstdc++", "runtime.cpp", "graphics.cpp", "input.cpp", "-Wl,--no-undefined",
         "-Wl,-z,max-page-size=16384", "-Wl,--version-script=exports.map", "-llog", "-landroid", "-lvulkan", "-lEGL",
-         "-lGLESv3", "-ldl", "-o", ART / "arm64-v8a/libvrapi.so"], cwd=src)
+         "-lGLESv3", "-ldl", "-o", ART / f"arm64-v8a/{output}"], cwd=src)


 def build_compat(tc: Path):
@@ -338,6 +354,16 @@ def build_zinkfix(tc: Path):
         "-ldl", "-llog", "-o", ART / "arm64-v8a/libVkLayer_fp_shaderfix.so"], cwd=src)


+def build_foveation(tc: Path):
+    """Optional coarse-fragment visualization, injected into a game's renderer."""
+    build_bridge(tc, "libvrapi_foveation.so")
+    src = HERE / "foveation"
+    run([exe(tc, "aarch64-linux-android29-clang"), "-shared", "-fPIC", "-O2", "-Wall", "-Wextra", "-Werror",
+         "-fvisibility=hidden", f"-ffile-prefix-map={src}=native/foveation",
+         "-Wl,-soname,libVkLayer_fdm_darken.so", "-Wl,-z,max-page-size=16384", "darken.c",
+         "-ldl", "-llog", "-o", ART / "arm64-v8a/libVkLayer_fdm_darken.so"], cwd=src)
+
+
 def build_ovrpshim(tc: Path):
    """OVRPlugin frame-loop shim (see ovrpshim/ovrpshim.c) for Unity 2017-2018 built-in Oculus support."""
    src = HERE / "ovrpshim"
@@ -346,6 +372,14 @@ def build_ovrpshim(tc: Path):
         "-llog", "-o", ART / "arm64-v8a/libfp_ovrp.so"], cwd=src)


+def build_tlskeys(tc: Path):
+    """Thread-key pool for Unity (see tlskeys/tlskeys.c, patch frame.unity_tls_key_pool)."""
+    src = HERE / "tlskeys"
+    run([exe(tc, "aarch64-linux-android29-clang"), "-shared", "-fPIC", "-O2", "-Wall", "-Wextra", "-Werror",
+         "-fvisibility=hidden", f"-ffile-prefix-map={HERE}=native", "-Wl,-soname,libfp_tkeys.so",
+         "-Wl,-z,max-page-size=16384", "tlskeys.c", "-llog", "-o", ART / "arm64-v8a/libfp_tkeys.so"], cwd=src)
+
+
 def build_dex():
    javac = shutil.which("javac")
    if not javac:
@@ -390,7 +424,7 @@ def write_sums():

 def main():
    ap = argparse.ArgumentParser()
-    ap.add_argument("--only", default="adapter,bridge,compat,langpack,glshim,eglfmt,glmv,ovrtrace,dex,xrlayer,oculushmd,xrshim,vkshim,zinkfix,ovrpshim,vrsettings,venc")
+    ap.add_argument("--only", default="adapter,bridge,compat,langpack,glshim,eglfmt,glmv,ovrtrace,dex,xrlayer,oculushmd,xrshim,vkshim,zinkfix,foveation,ovrpshim,tlskeys,vrsettings,venc")
    ap.add_argument("--ndk")
    args = ap.parse_args()
    parts = set(args.only.split(","))
@@ -402,10 +436,11 @@ def main():
             "glshim": lambda: build_glshim(tc), "eglfmt": lambda: build_eglfmt(tc), "glmv": lambda: build_glmv(tc), "ovrtrace": lambda: build_ovrtrace(tc), "xrshim": lambda: build_xrshim(tc), "dex": build_dex, "xrlayer": lambda: build_xrlayer(tc),
             "oculushmd": lambda: build_oculushmd(tc), "vkshim": lambda: build_vkshim(tc),
             "zinkfix": lambda: build_zinkfix(tc),
-             "ovrpshim": lambda: build_ovrpshim(tc),
+             "foveation": lambda: build_foveation(tc),
+             "ovrpshim": lambda: build_ovrpshim(tc), "tlskeys": lambda: build_tlskeys(tc),
             "vrsettings": lambda: build_vrsettings(tc), "venc": lambda: build_venc(tc),
             "vroverlay_probe": lambda: build_vroverlay_probe(tc)}
-    for name in ("adapter", "bridge", "compat", "langpack", "glshim", "eglfmt", "glmv", "ovrtrace", "xrshim", "vkshim", "zinkfix", "ovrpshim", "dex", "xrlayer", "oculushmd", "vrsettings", "venc",
+    for name in ("adapter", "bridge", "compat", "langpack", "glshim", "eglfmt", "glmv", "ovrtrace", "xrshim", "vkshim", "zinkfix", "foveation", "ovrpshim", "tlskeys", "dex", "xrlayer", "oculushmd", "vrsettings", "venc",
                 "vroverlay_probe"):
        if name in parts:
            log(f"build {name}")
@@ -0,0 +1,58 @@
+// SPDX-License-Identifier: GPL-3.0-only
+// Climb-only workaround for the verified renderer and Valve layer, never a global driver edit.
+#include <sys/mman.h>
+#include <unistd.h>
+#include "sha256.h"
+static void climb_disable_foveation(const char *reason) {
+    unsetenv("ENABLE_VULKAN_FDM_INJECTION_LAYER");
+    setenv("DISABLE_VULKAN_FDM_INJECTION_LAYER", "1", 1);
+    unsetenv("FDM_DEBUG");
+    LOG("CLIMB foveation disabled: %s", reason);
+}
+static void climb_stereo_fix(void) {
+    const char *enabled=getenv("FRAMEPORT_CLIMB_STEREO_OFFSETS");
+    if (!enabled || strcmp(enabled,"1")) return;
+    char process[128] = {0};
+    FILE *cmd = fopen("/proc/self/cmdline", "rb");
+    if (!cmd) return;
+    size_t n = fread(process, 1, sizeof(process)-1, cmd); fclose(cmd);
+    if (!n || strcmp(process, "com.crytek.climb2")) return;
+    void *h=dlopen("libVkLayer_VALVE_fdm_injection.so",RTLD_NOW|RTLD_LOCAL);
+    void *sym=h?dlsym(h,"vkGetInstanceProcAddr"):NULL;
+    Dl_info di;
+    if (!sym || !dladdr(sym,&di)) { climb_disable_foveation("layer not found");return; }
+    // Exact verified Valve binary. Never guess offsets after a SteamOS update.
+    FILE *file = fopen(di.dli_fname, "rb");
+    unsigned char digest[32];
+    int verified = 0;
+    if (file && !fseek(file, 0, SEEK_END)) {
+        long size = ftell(file);
+        if (size > 0 && size <= 16*1024*1024 && !fseek(file, 0, SEEK_SET)) {
+            unsigned char *bytes = malloc((size_t)size);
+            if (bytes && fread(bytes, 1, (size_t)size, file) == (size_t)size) {
+                sha256(bytes, (size_t)size, digest);
+                static const unsigned char expected[32] = {0x55,0x76,0x28,0x8e,0x08,0x20,0x5d,0xea,0xfd,0xe2,0x20,0x3d,0xbe,0xe2,0x5e,0x77,0x16,0x9c,0x5e,0xe4,0x8f,0xb6,0xaf,0xdb,0xe1,0xb5,0x76,0x11,0xbb,0x2a,0x48,0xb4};
+                verified = !memcmp(digest, expected, 32);
+            }
+            free(bytes);
+        }
+    }
+    if (file) fclose(file);
+    if (!verified) { climb_disable_foveation("unsupported Valve library"); return; }
+    unsigned char *base=di.dli_fbase;
+    uint32_t *count=(void*)(base+0x1abdc), *mask=(void*)(base+0x1b6e4);
+    uint32_t *next1=(void*)(base+0x1ada0), *next2=(void*)(base+0x1ae48);
+    if (*count!=0xb9403a89u || *mask!=0xb9403e75u || *next1!=0xb40000cau || *next2!=0xb40000cau) {climb_disable_foveation("instruction mismatch");return;}
+    long page=sysconf(_SC_PAGESIZE);
+    if (page <= 0) { climb_disable_foveation("invalid page size"); return; }
+    uintptr_t lo=(uintptr_t)count&~((uintptr_t)page-1);
+    uintptr_t hi=((uintptr_t)mask+4+page-1)&~((uintptr_t)page-1);
+    if(mprotect((void*)lo,hi-lo,PROT_READ|PROT_WRITE|PROT_EXEC)) {climb_disable_foveation("mprotect failed");return;}
+    *count=0x52800049u; // mov w9, #2: one offset for each FDM array layer
+    *next1=0x14000006u; // skip invalid mask-table read; stereo end mask is explicit
+    *next2=0x14000006u;
+    *mask=0x52800075u;  // mov w21, #3: calculate offsets for both eyes
+    __builtin___clear_cache((char*)lo,(char*)hi);
+    mprotect((void*)lo,hi-lo,PROT_READ|PROT_EXEC);
+    LOG("CLIMB stereo fix: two density-map offsets + safe subpass bookkeeping enabled in this process");
+}
@@ -0,0 +1,258 @@
+// SPDX-License-Identifier: GPL-3.0-only
+// Optional actual-fragment-density visualization. Loaded only by test-mode APKs.
+#define _GNU_SOURCE
+#include <vulkan/vulkan.h>
+#include <vulkan/vk_layer.h>
+extern int __android_log_print(int,const char*,const char*,...);
+#define ANDROID_LOG_INFO 4
+#include <dlfcn.h>
+#include <errno.h>
+#include <pthread.h>
+#include <stdint.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <sys/stat.h>
+
+#define TAG "FoveationDarken"
+#define EXPORT __attribute__((visibility("default")))
+#define LOG(...) __android_log_print(ANDROID_LOG_INFO, TAG, __VA_ARGS__)
+#define LAYER_NAME "VK_LAYER_FRAMEPORT_fdm_darken"
+
+
+#include "fdm_darken.h"
+static int lock,nfixes,dump;
+static void take_lock(int*p){while(__atomic_exchange_n(p,1,__ATOMIC_ACQUIRE)){}}
+static void drop_lock(int*p){__atomic_store_n(p,0,__ATOMIC_RELEASE);}
+#define MAX_HANDLES 16
+static struct { void *key; VkInstance instance; PFN_vkGetInstanceProcAddr gipa; } instances[MAX_HANDLES];
+static struct { void *key; VkDevice device; PFN_vkGetDeviceProcAddr gdpa; PFN_vkCreateShaderModule create_shader; } devices[MAX_HANDLES];
+
+static void *key_of(const void *handle) { return handle ? *(void *const *)handle : NULL; }
+
+static PFN_vkGetInstanceProcAddr instance_gipa(const void *handle, VkInstance *instance) {
+    void *key = key_of(handle);
+    PFN_vkGetInstanceProcAddr found = NULL, last = NULL;
+    take_lock(&lock);
+    for (int i = 0; i < MAX_HANDLES; i++) {
+        if (!instances[i].gipa) continue;
+        last = instances[i].gipa;
+        if (instance) *instance = instances[i].instance;
+        if (instances[i].key == key) { found = instances[i].gipa; break; }
+    }
+    drop_lock(&lock);
+    return found ? found : last;  // a physical device: its instance (or the only one there is)
+}
+
+static VKAPI_ATTR VkResult VKAPI_CALL layer_CreateInstance(const VkInstanceCreateInfo *ci, const VkAllocationCallbacks *a,
+                                                           VkInstance *instance) {
+    VkLayerInstanceCreateInfo *link = (VkLayerInstanceCreateInfo *)ci->pNext;
+    while (link && !(link->sType == VK_STRUCTURE_TYPE_LOADER_INSTANCE_CREATE_INFO && link->function == VK_LAYER_LINK_INFO))
+        link = (VkLayerInstanceCreateInfo *)link->pNext;
+    if (!link || !link->u.pLayerInfo) return VK_ERROR_INITIALIZATION_FAILED;
+    PFN_vkGetInstanceProcAddr next = link->u.pLayerInfo->pfnNextGetInstanceProcAddr;
+    link->u.pLayerInfo = link->u.pLayerInfo->pNext;
+    PFN_vkCreateInstance create = (PFN_vkCreateInstance)next(VK_NULL_HANDLE, "vkCreateInstance");
+    if (!create) return VK_ERROR_INITIALIZATION_FAILED;
+    VkResult r = create(ci, a, instance);
+    if (r != VK_SUCCESS) return r;
+    take_lock(&lock);
+    int slot = 0;
+    for (int i = 0; i < MAX_HANDLES; i++)
+        if (!instances[i].gipa || instances[i].key == key_of(*instance)) { slot = i; break; }
+    instances[slot].key = key_of(*instance);
+    instances[slot].instance = *instance;
+    instances[slot].gipa = next;
+    drop_lock(&lock);
+    static int logged;
+    if (logged++ < 4) LOG("foveation diagnostic: active on instance %p (%d fix(es))", (void *)*instance, nfixes);
+    return r;
+}
+
+static VKAPI_ATTR VkResult VKAPI_CALL layer_CreateDevice(VkPhysicalDevice pd, const VkDeviceCreateInfo *ci,
+                                                         const VkAllocationCallbacks *a, VkDevice *device) {
+    VkLayerDeviceCreateInfo *link = (VkLayerDeviceCreateInfo *)ci->pNext;
+    while (link && !(link->sType == VK_STRUCTURE_TYPE_LOADER_DEVICE_CREATE_INFO && link->function == VK_LAYER_LINK_INFO))
+        link = (VkLayerDeviceCreateInfo *)link->pNext;
+    if (!link || !link->u.pLayerInfo) return VK_ERROR_INITIALIZATION_FAILED;
+    PFN_vkGetInstanceProcAddr next_gipa = link->u.pLayerInfo->pfnNextGetInstanceProcAddr;
+    PFN_vkGetDeviceProcAddr next_gdpa = link->u.pLayerInfo->pfnNextGetDeviceProcAddr;
+    link->u.pLayerInfo = link->u.pLayerInfo->pNext;
+    VkInstance instance = VK_NULL_HANDLE;
+    instance_gipa(pd, &instance);
+    PFN_vkCreateDevice create = (PFN_vkCreateDevice)next_gipa(instance, "vkCreateDevice");
+    if (!create) return VK_ERROR_INITIALIZATION_FAILED;
+    for(const VkBaseInStructure*b=ci->pNext;b;b=b->pNext)if(b->sType==VK_STRUCTURE_TYPE_PHYSICAL_DEVICE_FRAGMENT_DENSITY_MAP_FEATURES_EXT){const VkPhysicalDeviceFragmentDensityMapFeaturesEXT*q=(void*)b;LOG("REQUEST FDM=%u dynamic=%u nonsubsampled=%u",q->fragmentDensityMap,q->fragmentDensityMapDynamic,q->fragmentDensityMapNonSubsampledImages);}
+    PFN_vkGetPhysicalDeviceFeatures2 gf=(void*)next_gipa(instance,"vkGetPhysicalDeviceFeatures2");
+    VkPhysicalDeviceFragmentDensityMapFeaturesEXT fd={.sType=VK_STRUCTURE_TYPE_PHYSICAL_DEVICE_FRAGMENT_DENSITY_MAP_FEATURES_EXT};
+    VkPhysicalDeviceFeatures2 fs={.sType=VK_STRUCTURE_TYPE_PHYSICAL_DEVICE_FEATURES_2,.pNext=&fd};if(gf){gf(pd,&fs);LOG("SUPPORT FDM=%u dynamic=%u nonsubsampled=%u",fd.fragmentDensityMap,fd.fragmentDensityMapDynamic,fd.fragmentDensityMapNonSubsampledImages);}
+    VkResult r = create(pd, ci, a, device);
+    if (r != VK_SUCCESS) return r;
+    take_lock(&lock);
+    int slot = 0;
+    for (int i = 0; i < MAX_HANDLES; i++)
+        if (!devices[i].gdpa || devices[i].key == key_of(*device)) { slot = i; break; }
+    devices[slot].key = key_of(*device);
+    devices[slot].device=*device;
+    devices[slot].gdpa = next_gdpa;
+    devices[slot].create_shader = (PFN_vkCreateShaderModule)next_gdpa(*device, "vkCreateShaderModule");
+    drop_lock(&lock);
+    return r;
+}
+
+static void *device_entry(VkDevice device, int shader) {
+    void *key = key_of(device), *fn = NULL;
+    take_lock(&lock);
+    for (int i = 0; i < MAX_HANDLES && !fn; i++)
+        if (devices[i].gdpa && devices[i].key == key) fn = shader ? (void *)devices[i].create_shader : (void *)devices[i].gdpa;
+    drop_lock(&lock);
+    return fn;
+}
+
+static VKAPI_ATTR VkResult VKAPI_CALL layer_CreateShaderModule(VkDevice device, const VkShaderModuleCreateInfo *ci,
+                                                               const VkAllocationCallbacks *a, VkShaderModule *module) {
+    PFN_vkCreateShaderModule next = (PFN_vkCreateShaderModule)device_entry(device, 1);
+    if (!next) return VK_ERROR_INITIALIZATION_FAILED;
+    size_t words=0;
+    uint32_t *code=fdm_darken(ci->pCode,ci->codeSize/4,&words);
+    VkShaderModuleCreateInfo patched=*ci;
+    if(code){patched.pCode=code;patched.codeSize=words*4;}
+    VkResult r=next(device,&patched,a,module);
+    static int count;
+    if(code && __atomic_fetch_add(&count,1,__ATOMIC_RELAXED)<12)LOG("DARKEN shader %zu -> %zu bytes result=%d",ci->codeSize,words*4,r);
+    free(code);return r;
+}
+
+
+static PFN_vkVoidFunction own(const char *name);
+
+static VKAPI_ATTR PFN_vkVoidFunction VKAPI_CALL layer_GetDeviceProcAddr(VkDevice device, const char *name) {
+    PFN_vkVoidFunction fn = own(name);
+    if (fn) return fn;
+    PFN_vkGetDeviceProcAddr next = (PFN_vkGetDeviceProcAddr)device_entry(device, 0);
+    return next ? next(device, name) : NULL;
+}
+
+static VKAPI_ATTR PFN_vkVoidFunction VKAPI_CALL layer_GetInstanceProcAddr(VkInstance instance, const char *name) {
+    PFN_vkVoidFunction fn = own(name);
+    if (fn) return fn;
+    PFN_vkGetInstanceProcAddr next = instance ? instance_gipa(instance, NULL) : NULL;
+    return next ? next(instance, name) : NULL;
+}
+
+// ---------------------------------------------------------------- layer enumeration (what the loader asks for)
+
+static const VkLayerProperties properties = {LAYER_NAME, VK_MAKE_VERSION(1, 1, 0), 1, "FramePort coarse-fragment darkening"};
+
+EXPORT VKAPI_ATTR VkResult VKAPI_CALL vkEnumerateInstanceLayerProperties(uint32_t *count, VkLayerProperties *props) {
+    if (!props) { *count = 1; return VK_SUCCESS; }
+    if (*count < 1) return VK_INCOMPLETE;
+    props[0] = properties;
+    *count = 1;
+    return VK_SUCCESS;
+}
+
+EXPORT VKAPI_ATTR VkResult VKAPI_CALL vkEnumerateInstanceExtensionProperties(const char *layer, uint32_t *count,
+                                                                             VkExtensionProperties *props) {
+    (void)props;
+    if (!layer || strcmp(layer, LAYER_NAME)) return VK_ERROR_LAYER_NOT_PRESENT;
+    *count = 0;
+    return VK_SUCCESS;
+}
+
+EXPORT VKAPI_ATTR VkResult VKAPI_CALL vkEnumerateDeviceLayerProperties(VkPhysicalDevice pd, uint32_t *count,
+                                                                       VkLayerProperties *props) {
+    (void)pd;
+    return vkEnumerateInstanceLayerProperties(count, props);
+}
+
+EXPORT VKAPI_ATTR VkResult VKAPI_CALL vkEnumerateDeviceExtensionProperties(VkPhysicalDevice pd, const char *layer,
+                                                                           uint32_t *count, VkExtensionProperties *props) {
+    (void)pd;
+    return vkEnumerateInstanceExtensionProperties(layer, count, props);
+}
+
+EXPORT VKAPI_ATTR PFN_vkVoidFunction VKAPI_CALL VK_LAYER_FRAMEPORT_fdm_darkenGetInstanceProcAddr(VkInstance i, const char *n) {
+    return layer_GetInstanceProcAddr(i, n);
+}
+
+EXPORT VKAPI_ATTR PFN_vkVoidFunction VKAPI_CALL VK_LAYER_FRAMEPORT_fdm_darkenGetDeviceProcAddr(VkDevice d, const char *n) {
+    return layer_GetDeviceProcAddr(d, n);
+}
+
+static PFN_vkVoidFunction own(const char *name) {
+    if (!name) return NULL;
+#define OWN(fn, impl) if (!strcmp(name, fn)) return (PFN_vkVoidFunction)impl;
+    OWN("vkGetInstanceProcAddr", layer_GetInstanceProcAddr)
+    OWN("vkGetDeviceProcAddr", layer_GetDeviceProcAddr)
+    OWN("vkCreateInstance", layer_CreateInstance)
+    OWN("vkCreateDevice", layer_CreateDevice)
+    OWN("vkCreateShaderModule", layer_CreateShaderModule)
+    OWN("vkEnumerateInstanceLayerProperties", vkEnumerateInstanceLayerProperties)
+    OWN("vkEnumerateInstanceExtensionProperties", vkEnumerateInstanceExtensionProperties)
+    OWN("vkEnumerateDeviceLayerProperties", vkEnumerateDeviceLayerProperties)
+#undef OWN
+    return NULL;
+}
+
+// ---------------------------------------------------------------- activation (GraphicsEnv debug layers)
+
+// libc++ std::string as Android 11's platform libc++ lays it out (little endian, short-string flag in bit 0)
+struct cxx_string { size_t cap; size_t size; char *data; };
+
+static const char *cxx_chars(const void *s, size_t *len) {
+    const unsigned char *b = s;
+    if (b[0] & 1) {
+        const struct cxx_string *l = s;
+        *len = l->size;
+        return l->data;
+    }
+    *len = b[0] >> 1;
+    return (const char *)b + 1;
+}
+
+#define GET_INSTANCE "_ZN7android11GraphicsEnv11getInstanceEv"
+#define GET_LAYERS "_ZN7android11GraphicsEnv14getDebugLayersEv"
+#define SET_LAYERS "_ZN7android11GraphicsEnv14setDebugLayersENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE"
+
+#include "climb_compat.h"
+
+__attribute__((constructor)) static void activate(void) {
+    climb_stereo_fix();
+    const char *enabled = getenv("FRAMEPORT_FOVEATION_TEST");
+    if (!enabled || strcmp(enabled, "1")) return;
+    /* This library is added only when device.foveation.test is selected. */
+    /* The launcher opt-in also keeps imported test builds dormant during normal play. */
+    void *vk = dlopen("libvulkan.so", RTLD_NOW | RTLD_LOCAL);
+    void *(*get_instance)(void) = vk ? (void *(*)(void))dlsym(vk, GET_INSTANCE) : NULL;
+    const void *(*get_layers)(void *) = vk ? (const void *(*)(void *))dlsym(vk, GET_LAYERS) : NULL;
+    void (*set_layers)(void *, struct cxx_string *) = vk ? (void (*)(void *, struct cxx_string *))dlsym(vk, SET_LAYERS) : NULL;
+    if (!get_instance || !get_layers || !set_layers) {
+        LOG("foveation diagnostic: NOT active, Android's GraphicsEnv functions not found (%s%s%s)", get_instance ? "" : "getInstance ",
+            get_layers ? "" : "getDebugLayers ", set_layers ? "" : "setDebugLayers");
+        return;
+    }
+    void *env = get_instance();
+    size_t len = 0;
+    const char *current = env ? cxx_chars(get_layers(env), &len) : NULL;
+    if (!env || (len && !current) || len > 4096) {
+        LOG("foveation diagnostic: NOT active, unexpected GraphicsEnv state");
+        return;
+    }
+    char old[4097];
+    memcpy(old, current ? current : "", len);
+    old[len] = 0;
+    if (strstr(old, LAYER_NAME)) return;  // loaded twice (the loader's own dlopen): already in the list
+    size_t n = strlen(LAYER_NAME) + (len ? 1 + len : 0);
+    size_t cap = (n + 16) & ~(size_t)15;
+    char *data = malloc(cap);
+    if (!data) return;
+    snprintf(data, cap, "%s%s%s", LAYER_NAME, len ? ":" : "", old);
+    // passed by value: the callee gets a pointer to our temporary and copies it; freed below unless it was moved
+    struct cxx_string tmp = {cap | 1, n, data};
+    set_layers(env, &tmp);
+    if ((tmp.cap & 1) && tmp.data == data) free(data);
+    const char *now = cxx_chars(get_layers(env), &len);
+    LOG("foveation diagnostic: debug layers now \"%.*s\" (%d fix(es)%s)", (int)len, now ? now : "", nfixes,
+        dump ? ", dumping modules" : "");
+}
@@ -0,0 +1,77 @@
+// SPDX-License-Identifier: GPL-3.0-only
+#include <stdint.h>
+#include <stdlib.h>
+#include <string.h>
+/* Diagnostic only: dim location-0 vec4 RGB where FragSizeEXT != (1,1).
+ * Unsupported interfaces pass through; alpha and all other outputs are retained. */
+static uint32_t *fdm_darken(const uint32_t *w,size_t n,size_t *out_n) {
+ if(n<5||n>4000000||w[0]!=0x07230203||!w[3]||w[3]>1000000)return NULL;
+ uint32_t bound=w[3],output=0,ptr=0,vec=0,flt=0; int entries=0,stores=0;
+ size_t cap_at=0,ext_at=0,ann_at=0,fn_at=0;
+ for(size_t i=5;i<n;) {uint32_t len=w[i]>>16,op=w[i]&65535;if(!len||i+len>n)return NULL;
+  if(op==17)cap_at=i+len;
+  if(op==10)ext_at=i+len;
+  if(op==15){if(w[i+1]!=4)return NULL;entries++;}
+  if(op==71||op==72)ann_at=i+len;
+  if(op==71&&len==4&&w[i+2]==30&&w[i+3]==0){
+   /* Location zero can also decorate an input; choose only the output variable. */
+   for(size_t j=5;j<n;){uint32_t l=w[j]>>16;if(!l||j+l>n)return NULL;
+    if((w[j]&65535)==59&&l>=4&&w[j+2]==w[i+1]&&w[j+3]==3)output=w[i+1];
+    j+=l;
+   }
+  }
+  if(op==54&&!fn_at)fn_at=i;
+  i+=len;
+ }
+ if(entries!=1||!output||!cap_at||!ann_at||!fn_at)return NULL;
+ for(size_t i=5;i<n;i+=w[i]>>16)if((w[i]&65535)==59&&w[i+2]==output&&w[i+3]==3)ptr=w[i+1];
+ for(size_t i=5;i<n;i+=w[i]>>16)if((w[i]&65535)==32&&w[i+1]==ptr&&w[i+2]==3)vec=w[i+3];
+ for(size_t i=5;i<n;i+=w[i]>>16)if((w[i]&65535)==23&&w[i+1]==vec&&w[i+3]==4)flt=w[i+2];
+ int is_float=0;
+ for(size_t i=5;i<n;i+=w[i]>>16){if((w[i]&65535)==22&&w[i+1]==flt&&w[i+2]==32)is_float=1;
+  if((w[i]&65535)==62&&w[i+1]==output)stores++;
+  if((w[i]&65535)==71&&(w[i]>>16)>=4&&w[i+2]==11&&w[i+3]==5292)return NULL;
+ }
+ if(!is_float||!stores)return NULL;
+ /* Reuse scalar/vector/pointer types: Vulkan validation prohibits duplicates. */
+ uint32_t ui=0,bv=0,v2=0,ip=0;
+ for(size_t i=5;i<n;i+=w[i]>>16){uint32_t op=w[i]&65535;
+  if(op==21&&w[i+2]==32&&w[i+3]==0)ui=w[i+1];
+  if(op==20)bv=w[i+1];
+ }
+ for(size_t i=5;i<n;i+=w[i]>>16)if((w[i]&65535)==23&&w[i+2]==ui&&w[i+3]==2)v2=w[i+1];
+ for(size_t i=5;i<n;i+=w[i]>>16)if((w[i]&65535)==32&&w[i+2]==1&&w[i+3]==v2)ip=w[i+1];
+ int nui=!ui,nbv=!bv,nv2=!v2,nip=!ip;
+ if(nui)ui=bound++;if(nbv)bv=bound++;if(nv2)v2=bound++;if(nip)ip=bound++;
+ uint32_t frag=bound++,one=bound++,bright=bound++,dark=bound++;
+ uint32_t *out=calloc(n+200+stores*64,sizeof(uint32_t));if(!out)return NULL;size_t k=0;
+#define EMIT(...) do{const uint32_t a[]={__VA_ARGS__};memcpy(out+k,a,sizeof a);k+=sizeof a/4;}while(0)
+ memcpy(out,w,20);k=5;if(!ext_at)ext_at=cap_at;
+ for(size_t i=5;i<=n;) {
+  if(i==cap_at)EMIT((2u<<16)|17,5291);
+  if(i==ext_at){const char s[]="SPV_EXT_fragment_invocation_density";size_t z=(sizeof s+3)/4;out[k++]=((uint32_t)(1+z)<<16)|10;memcpy(out+k,s,sizeof s);k+=z;}
+  if(i==ann_at){EMIT((4u<<16)|71,frag,11,5292);EMIT((3u<<16)|71,frag,14);}
+  if(i==fn_at){
+   if(nui)EMIT((4u<<16)|21,ui,32,0);if(nbv)EMIT((2u<<16)|20,bv);
+   if(nv2)EMIT((4u<<16)|23,v2,ui,2);if(nip)EMIT((4u<<16)|32,ip,1,v2);
+   EMIT((4u<<16)|43,ui,one,1);EMIT((4u<<16)|43,flt,bright,0x3f800000);
+   EMIT((4u<<16)|43,flt,dark,0x3e4ccccd); /* 0.2 RGB, alpha unchanged */
+   EMIT((4u<<16)|59,ip,frag,1);
+  }
+  if(i==n)break;uint32_t len=w[i]>>16,op=w[i]&65535;
+  if(op==15){out[k++]=((len+1)<<16)|15;memcpy(out+k,w+i+1,(len-1)*4);k+=len-1;out[k++]=frag;}
+  else if(op==62&&w[i+1]==output){
+   uint32_t sz=bound++,x=bound++,y=bound++,area=bound++,low=bound++,factor=bound++,factors=bound++,color=bound++;
+   EMIT((4u<<16)|61,v2,sz,frag);EMIT((5u<<16)|81,ui,x,sz,0);EMIT((5u<<16)|81,ui,y,sz,1);
+   EMIT((5u<<16)|132,ui,area,x,y);EMIT((5u<<16)|171,bv,low,area,one);
+   EMIT((6u<<16)|169,flt,factor,low,dark,bright);
+   EMIT((7u<<16)|80,vec,factors,factor,factor,factor,bright);
+   EMIT((5u<<16)|133,vec,color,w[i+2],factors);
+   memcpy(out+k,w+i,len*4);out[k+2]=color;k+=len;
+  }else{memcpy(out+k,w+i,len*4);k+=len;}
+  i+=len;
+ }
+ out[3]=bound;*out_n=k;
+#undef EMIT
+ return out;
+}
@@ -0,0 +1,45 @@
+// SPDX-License-Identifier: GPL-3.0-only
+// SHA-256 shared with native/zinkfix; bounded file verification for compatibility patches.
+static const uint32_t K[64] = {
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, 0xd807aa98, 0x12835b01,
+    0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc,
+    0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147,
+    0x06ca6351, 0x14292967, 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, 0x19a4c116, 0x1e376c08,
+    0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208,
+    0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2};
+#define ROR(x, n) (((x) >> (n)) | ((x) << (32 - (n))))
+
+static void sha256_block(uint32_t h[8], const uint8_t *p) {
+    uint32_t w[64];
+    for (int i = 0; i < 16; i++) w[i] = (uint32_t)p[4 * i] << 24 | (uint32_t)p[4 * i + 1] << 16 | (uint32_t)p[4 * i + 2] << 8 | p[4 * i + 3];
+    for (int i = 16; i < 64; i++) {
+        uint32_t s0 = ROR(w[i - 15], 7) ^ ROR(w[i - 15], 18) ^ (w[i - 15] >> 3);
+        uint32_t s1 = ROR(w[i - 2], 17) ^ ROR(w[i - 2], 19) ^ (w[i - 2] >> 10);
+        w[i] = w[i - 16] + s0 + w[i - 7] + s1;
+    }
+    uint32_t a = h[0], b = h[1], c = h[2], d = h[3], e = h[4], f = h[5], g = h[6], hh = h[7];
+    for (int i = 0; i < 64; i++) {
+        uint32_t t1 = hh + (ROR(e, 6) ^ ROR(e, 11) ^ ROR(e, 25)) + ((e & f) ^ (~e & g)) + K[i] + w[i];
+        uint32_t t2 = (ROR(a, 2) ^ ROR(a, 13) ^ ROR(a, 22)) + ((a & b) ^ (a & c) ^ (b & c));
+        hh = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;
+    }
+    h[0] += a; h[1] += b; h[2] += c; h[3] += d; h[4] += e; h[5] += f; h[6] += g; h[7] += hh;
+}
+
+static void sha256(const uint8_t *data, size_t len, uint8_t out[32]) {
+    uint32_t h[8] = {0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19};
+    size_t i = 0;
+    for (; i + 64 <= len; i += 64) sha256_block(h, data + i);
+    uint8_t tail[128] = {0};
+    size_t rest = len - i;
+    memcpy(tail, data + i, rest);
+    tail[rest] = 0x80;
+    size_t blocks = rest + 9 > 64 ? 2 : 1;
+    uint64_t bits = (uint64_t)len * 8;
+    for (int b = 0; b < 8; b++) tail[blocks * 64 - 1 - b] = (uint8_t)(bits >> (8 * b));
+    for (size_t b = 0; b < blocks; b++) sha256_block(h, tail + 64 * b);
+    for (int b = 0; b < 8; b++) {
+        out[4 * b] = h[b] >> 24; out[4 * b + 1] = h[b] >> 16; out[4 * b + 2] = h[b] >> 8; out[4 * b + 3] = h[b];
+    }
+}
@@ -0,0 +1,132 @@
+// SPDX-License-Identifier: GPL-3.0-only
+// Pure helpers of the GL shim's per-game fixes (no GL calls; tests/test_blazerush.py builds them for the host).
+//
+// gl_highp_markers: vertex shaders whose source contains every '|'-separated marker get their calculation precision
+//   raised: whole-word "mediump" becomes "highp" on every line that has none of the words in / out / uniform, so the
+//   shader's interface (inputs, outputs to the fragment shader, uniforms and their blocks' declarations) keeps its
+//   precision. BlazeRush's particle vertex shaders (markers "in uvec2 inBoneIndices;", "uniform InstanceData",
+//   "void main()") computed with large encoded values at mediump and drew big coloured streaks and flashes on the
+//   Frame's GPU (Klownicle's guide, GitHub #57).
+// gl_int_attribs: the attribute type helpers for the integer vertex-attribute fix in glshim.c.
+#pragma once
+#include <stdlib.h>
+#include <string.h>
+
+static inline int glfix_ident(char c) {
+    return (c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z') || (c >= '0' && c <= '9') || c == '_';
+}
+
+// `word` as a whole word in s[0..n)
+static inline int glfix_has_word(const char *s, size_t n, const char *word) {
+    size_t w = strlen(word);
+    for (size_t i = 0; i + w <= n; ++i)
+        if (!memcmp(s + i, word, w) && (i == 0 || !glfix_ident(s[i - 1])) && (i + w == n || !glfix_ident(s[i + w])))
+            return 1;
+    return 0;
+}
+
+// every non-empty '|'-separated marker occurs in src (and there is at least one)
+static inline int glfix_markers_match(const char *src, const char *markers) {
+    if (!src || !markers || !*markers) return 0;
+    int any = 0;
+    char piece[256];
+    for (const char *p = markers; *p;) {
+        const char *bar = strchr(p, '|');
+        size_t n = bar ? (size_t)(bar - p) : strlen(p);
+        if (n >= sizeof(piece)) return 0;
+        if (n) {
+            memcpy(piece, p, n);
+            piece[n] = 0;
+            if (!strstr(src, piece)) return 0;
+            any = 1;
+        }
+        p += n + (bar ? 1 : 0);
+    }
+    return any;
+}
+
+// A copy of src with the calculation precision raised (see above), or NULL when nothing changed. *count = number of
+// "mediump" replaced.
+static inline char *glfix_promote_highp(const char *src, int *count) {
+    if (count) *count = 0;
+    if (!src) return NULL;
+    size_t len = strlen(src);
+    char *out = malloc(len + 1);
+    if (!out) return NULL;
+    size_t o = 0;
+    int n = 0;
+    for (const char *line = src; *line;) {
+        const char *end = strchr(line, '\n');
+        size_t ll = end ? (size_t)(end - line + 1) : strlen(line);
+        int interface = glfix_has_word(line, ll, "in") || glfix_has_word(line, ll, "out") ||
+                        glfix_has_word(line, ll, "uniform");
+        for (size_t i = 0; i < ll;) {
+            if (!interface && i + 7 <= ll && !memcmp(line + i, "mediump", 7) && (i == 0 || !glfix_ident(line[i - 1])) &&
+                (i + 7 == ll || !glfix_ident(line[i + 7]))) {
+                memcpy(out + o, "highp", 5);
+                o += 5;
+                i += 7;
+                ++n;
+            } else {
+                out[o++] = line[i++];
+            }
+        }
+        line += ll;
+    }
+    out[o] = 0;
+    if (!n) {
+        free(out);
+        return NULL;
+    }
+    if (count) *count = n;
+    return out;
+}
+
+// GL enums (numeric, so this header needs no GL headers)
+#define GLFIX_BYTE 0x1400
+#define GLFIX_UNSIGNED_BYTE 0x1401
+#define GLFIX_SHORT 0x1402
+#define GLFIX_UNSIGNED_SHORT 0x1403
+#define GLFIX_INT 0x1404
+#define GLFIX_UNSIGNED_INT 0x1405
+#define GLFIX_INT_VEC2 0x8B53
+#define GLFIX_INT_VEC3 0x8B54
+#define GLFIX_INT_VEC4 0x8B55
+#define GLFIX_UNSIGNED_INT_VEC2 0x8DC6
+#define GLFIX_UNSIGNED_INT_VEC3 0x8DC7
+#define GLFIX_UNSIGNED_INT_VEC4 0x8DC8
+#define GLFIX_FLOAT_MAT2 0x8B5A
+#define GLFIX_FLOAT_MAT3 0x8B5B
+#define GLFIX_FLOAT_MAT4 0x8B5C
+#define GLFIX_FLOAT_MAT2x3 0x8B65
+#define GLFIX_FLOAT_MAT2x4 0x8B66
+#define GLFIX_FLOAT_MAT3x2 0x8B67
+#define GLFIX_FLOAT_MAT3x4 0x8B68
+#define GLFIX_FLOAT_MAT4x2 0x8B69
+#define GLFIX_FLOAT_MAT4x3 0x8B6A
+
+// an active attribute's GLSL type: 1 signed integer (int, ivecN), 2 unsigned (uint, uvecN), 0 floating point
+static inline int glfix_int_attrib_kind(unsigned type) {
+    switch (type) {
+        case GLFIX_INT: case GLFIX_INT_VEC2: case GLFIX_INT_VEC3: case GLFIX_INT_VEC4: return 1;
+        case GLFIX_UNSIGNED_INT: case GLFIX_UNSIGNED_INT_VEC2: case GLFIX_UNSIGNED_INT_VEC3:
+        case GLFIX_UNSIGNED_INT_VEC4: return 2;
+        default: return 0;
+    }
+}
+
+// attribute locations an active attribute uses per array element (matrices take one per column)
+static inline int glfix_attrib_columns(unsigned type) {
+    switch (type) {
+        case GLFIX_FLOAT_MAT2: case GLFIX_FLOAT_MAT2x3: case GLFIX_FLOAT_MAT2x4: return 2;
+        case GLFIX_FLOAT_MAT3: case GLFIX_FLOAT_MAT3x2: case GLFIX_FLOAT_MAT3x4: return 3;
+        case GLFIX_FLOAT_MAT4: case GLFIX_FLOAT_MAT4x2: case GLFIX_FLOAT_MAT4x3: return 4;
+        default: return 1;
+    }
+}
+
+// vertex data glVertexAttribIPointer accepts (integer component types only)
+static inline int glfix_int_component_type(unsigned type) {
+    return type == GLFIX_BYTE || type == GLFIX_UNSIGNED_BYTE || type == GLFIX_SHORT || type == GLFIX_UNSIGNED_SHORT ||
+           type == GLFIX_INT || type == GLFIX_UNSIGNED_INT;
+}
@@ -12,6 +12,12 @@
 #include <string.h>

 #define LOG(...) __android_log_print(ANDROID_LOG_INFO, "GLShim", __VA_ARGS__)
+#define EXPORT __attribute__((visibility("default")))
+#ifndef GLSHIM_GLES_LIB  // (the host test points these at a stand-in GL library)
+#define GLSHIM_GLES_LIB "libGLESv3.so"
+#define GLSHIM_EGL_LIB "libEGL.so"
+#endif
+#include "glfix.h"

 static const char *const hidden_multiview[] = {
    "GL_OVR_multiview", "GL_OVR_multiview2", "GL_OVR_multiview_multisampled_render_to_texture",
@@ -37,14 +43,25 @@ static int hide_msrtt = 1;
 // with the MSRTT extensions switched Unreal's multiview off, so for Unreal it stays visible and its function draws
 // single-sampled (glFramebufferTextureMultiviewOVR), like the EXT stand-ins below.
 static int unreal;
+// Per-game fixes (off unless a recipe sets them; see glfix.h): integer vertex attributes fed as floats are rebound as
+// integers before each draw (gl_int_attribs), and vertex shaders containing every marker get highp calculations
+// (gl_highp_markers).
+static int int_attribs;
+static char highp_markers[512];
+static void forget_program(GLuint prog);

 static void read_conf_file(const char *path) {
    FILE *f = fopen(path, "r");
    if (!f) return;
-    char line[256];
+    char line[1024];
    while (fgets(line, sizeof(line), f)) {
        if (!strncmp(line, "gl_hide_multiview=", 18)) hide_multiview = atoi(line + 18);
        if (!strncmp(line, "gl_hide_msrtt=", 14)) hide_msrtt = atoi(line + 14);
+        if (!strncmp(line, "gl_int_attribs=", 15)) int_attribs = atoi(line + 15);
+        if (!strncmp(line, "gl_highp_markers=", 17)) {
+            snprintf(highp_markers, sizeof(highp_markers), "%s", line + 17);
+            highp_markers[strcspn(highp_markers, "\r\n")] = 0;
+        }
    }
    fclose(f);
 }
@@ -213,6 +230,7 @@ static void w_compile(GLuint sh) {
 }
 static void w_link(GLuint prog) {
    r_link(prog);
+    forget_program(prog);
    GLint ok = 1;
    r_getProgramiv(prog, GL_LINK_STATUS, &ok);
    if (!ok && shader_logs < 40) {
@@ -263,6 +281,231 @@ static void w_blit(GLint a, GLint b, GLint c, GLint d, GLint e, GLint f, GLint g
    }
 }

+// ---- per-game fixes: the real functions (from libGLESv3 / libEGL, whatever the game imports or looks up)
+static struct {
+    void (*ShaderSource)(GLuint, GLsizei, const GLchar *const *, const GLint *);
+    void (*GetShaderiv)(GLuint, GLenum, GLint *);
+    void (*LinkProgram)(GLuint);
+    void (*ProgramBinary)(GLuint, GLenum, const void *, GLsizei);
+    void (*DeleteProgram)(GLuint);
+    void (*GetProgramiv)(GLuint, GLenum, GLint *);
+    void (*GetActiveAttrib)(GLuint, GLuint, GLsizei, GLsizei *, GLint *, GLenum *, GLchar *);
+    GLint (*GetAttribLocation)(GLuint, const GLchar *);
+    void (*GetVertexAttribiv)(GLuint, GLenum, GLint *);
+    void (*GetVertexAttribPointerv)(GLuint, GLenum, void **);
+    void (*VertexAttribPointer)(GLuint, GLint, GLenum, GLboolean, GLsizei, const void *);
+    void (*VertexAttribIPointer)(GLuint, GLint, GLenum, GLsizei, const void *);
+    void (*VertexAttribI4i)(GLuint, GLint, GLint, GLint, GLint);
+    void (*VertexAttribI4ui)(GLuint, GLuint, GLuint, GLuint, GLuint);
+    void (*BindBuffer)(GLenum, GLuint);
+    void (*DrawArrays)(GLenum, GLint, GLsizei);
+    void (*DrawElements)(GLenum, GLsizei, GLenum, const void *);
+    void (*DrawArraysInstanced)(GLenum, GLint, GLsizei, GLsizei);
+    void (*DrawElementsInstanced)(GLenum, GLsizei, GLenum, const void *, GLsizei);
+    void (*DrawRangeElements)(GLenum, GLuint, GLuint, GLsizei, GLenum, const void *);
+    EGLContext (*GetCurrentContext)(void);
+} d;
+
+// gl_highp_markers: a copy of a matching vertex shader's source with highp calculations, else NULL
+static int highp_logs;
+static char *precision_fix(GLuint sh, const char *src) {
+    if (!highp_markers[0] || !glfix_markers_match(src, highp_markers)) return NULL;
+    GLint type = 0;
+    if (d.GetShaderiv) d.GetShaderiv(sh, GL_SHADER_TYPE, &type);
+    if (type != GL_VERTEX_SHADER) return NULL;
+    int n = 0;
+    char *out = glfix_promote_highp(src, &n);
+    if (out && highp_logs < 16) { ++highp_logs; LOG("highp: vertex shader %u: %d mediump -> highp", sh, n); }
+    return out;
+}
+
+static char *concat_sources(GLsizei count, const GLchar *const *strs, const GLint *lens) {
+    size_t total = 0;
+    for (GLsizei i = 0; i < count; ++i) total += lens && lens[i] >= 0 ? (size_t)lens[i] : strlen(strs[i]);
+    char *src = malloc(total + 1);
+    if (!src) return NULL;
+    size_t off = 0;
+    for (GLsizei i = 0; i < count; ++i) {
+        size_t n = lens && lens[i] >= 0 ? (size_t)lens[i] : strlen(strs[i]);
+        memcpy(src + off, strs[i], n);
+        off += n;
+    }
+    src[off] = 0;
+    return src;
+}
+
+// gl_int_attribs: the shader declares an integer input (int/uint/ivecN/uvecN), the game set its array with
+// glVertexAttribPointer (floats; GL_VERTEX_ATTRIB_ARRAY_INTEGER 0). Qualcomm's Quest driver read the raw integers
+// anyway; Mesa (Zink) converts them to floats, so e.g. BlazeRush's bone indices were garbage and its car bodies and
+// controller models invisible (Klownicle's guide, GitHub #57). Before each draw, such an array is set again with
+// glVertexAttribIPointer (same buffer, size, component type, stride and offset; the game's GL_ARRAY_BUFFER binding is
+// restored), and set back to floats (with the game's normalization) when a program with a float input at that
+// location draws from the same vertex array state. A disabled integer input gets the integer default (0, 0, 0, 1).
+// The active-attribute reflection is cached per EGL context and program, and dropped when a program is linked,
+// loaded from a binary or deleted (program names are reused).
+#define MAXLOC 32
+#define NPROG 1024
+#define PROBE 16
+#define NCONV 256
+#define NCTX 16
+struct proginfo { EGLContext ctx; GLuint prog; uint32_t int_mask, unsigned_mask, float_mask; };
+struct convrec { EGLContext ctx; GLuint vao, buffer; int loc, used; GLint size, stride; GLenum type; const void *ptr;
+                 GLboolean normalized; };
+struct ctxstate { EGLContext ctx; uint32_t converted; };
+static struct proginfo progs[NPROG];
+static struct convrec convs[NCONV];
+static struct ctxstate ctxs[NCTX];
+static unsigned conv_next, ctx_next;
+static pthread_mutex_t attrib_lock = PTHREAD_MUTEX_INITIALIZER;
+static int attrib_logs, reflect_logs, skip_logs;
+
+static unsigned prog_slot(EGLContext ctx, GLuint prog) {
+    uint64_t h = (uint64_t)(uintptr_t)ctx * 0x9E3779B97F4A7C15ull ^ (uint64_t)prog * 0x85EBCA6Bu;
+    return (unsigned)((h ^ (h >> 29)) % NPROG);
+}
+
+static void forget_program(GLuint prog) {  // every context's entry: shared contexts see the same program name
+    if (!prog || !int_attribs) return;
+    pthread_mutex_lock(&attrib_lock);
+    for (unsigned i = 0; i < NPROG; ++i)
+        if (progs[i].prog == prog) progs[i] = (struct proginfo){0};
+    pthread_mutex_unlock(&attrib_lock);
+}
+
+static void reflect(struct proginfo *pi, GLuint prog) {
+    GLint linked = 0, n = 0;
+    d.GetProgramiv(prog, GL_LINK_STATUS, &linked);
+    if (!linked) return;
+    d.GetProgramiv(prog, GL_ACTIVE_ATTRIBUTES, &n);
+    for (GLint i = 0; i < n; ++i) {
+        char name[128] = {0};
+        GLsizei len = 0;
+        GLint size = 0;
+        GLenum type = 0;
+        d.GetActiveAttrib(prog, (GLuint)i, sizeof(name), &len, &size, &type, name);
+        GLint loc = name[0] ? d.GetAttribLocation(prog, name) : -1;
+        if (loc < 0) continue;  // built-ins (gl_VertexID ...)
+        int kind = glfix_int_attrib_kind(type), cols = glfix_attrib_columns(type);
+        for (int k = 0; k < (size > 0 ? size : 1) * cols && loc + k < MAXLOC; ++k) {
+            uint32_t bit = 1u << (loc + k);
+            if (kind) pi->int_mask |= bit; else pi->float_mask |= bit;
+            if (kind == 2) pi->unsigned_mask |= bit;
+        }
+        if (kind && reflect_logs < 16) {
+            ++reflect_logs;
+            LOG("int attribs: program %u has integer input %s (%s) at location %d", prog, name,
+                kind == 2 ? "unsigned" : "signed", loc);
+        }
+    }
+}
+
+static struct proginfo *program_info(EGLContext ctx, GLuint prog) {
+    unsigned h = prog_slot(ctx, prog), free_slot = NPROG;
+    for (unsigned k = 0; k < PROBE; ++k) {
+        struct proginfo *e = &progs[(h + k) % NPROG];
+        if (e->prog == prog && e->ctx == ctx) return e;
+        if (!e->prog && free_slot == NPROG) free_slot = (h + k) % NPROG;
+    }
+    struct proginfo *e = &progs[free_slot < NPROG ? free_slot : h];
+    *e = (struct proginfo){.ctx = ctx, .prog = prog};
+    reflect(e, prog);
+    return e;
+}
+
+static struct ctxstate *ctx_state(EGLContext ctx) {
+    for (unsigned i = 0; i < NCTX; ++i)
+        if (ctxs[i].ctx == ctx) return &ctxs[i];
+    struct ctxstate *c = &ctxs[ctx_next++ % NCTX];
+    *c = (struct ctxstate){.ctx = ctx};
+    return c;
+}
+
+static struct convrec *find_conv(EGLContext ctx, GLuint vao, int loc) {
+    for (unsigned i = 0; i < NCONV; ++i)
+        if (convs[i].used && convs[i].ctx == ctx && convs[i].vao == vao && convs[i].loc == loc) return &convs[i];
+    return NULL;
+}
+
+static void rebind(GLuint loc, GLuint buffer, GLint size, GLenum type, GLboolean normalized, GLsizei stride,
+                   const void *ptr, int integer) {
+    GLint previous = 0;
+    real_glGetIntegerv(GL_ARRAY_BUFFER_BINDING, &previous);
+    d.BindBuffer(GL_ARRAY_BUFFER, buffer);
+    if (integer) d.VertexAttribIPointer(loc, size, type, stride, ptr);
+    else d.VertexAttribPointer(loc, size, type, normalized, stride, ptr);
+    d.BindBuffer(GL_ARRAY_BUFFER, (GLuint)previous);
+}
+
+static void fix_attribs(void) {
+    if (!int_attribs || !real_glGetIntegerv || !d.GetVertexAttribiv || !d.GetVertexAttribPointerv || !d.BindBuffer ||
+        !d.VertexAttribIPointer || !d.VertexAttribPointer || !d.GetProgramiv || !d.GetActiveAttrib ||
+        !d.GetAttribLocation)
+        return;
+    GLint prog = 0;
+    real_glGetIntegerv(GL_CURRENT_PROGRAM, &prog);
+    if (prog <= 0) return;
+    EGLContext ctx = d.GetCurrentContext ? d.GetCurrentContext() : NULL;
+    pthread_mutex_lock(&attrib_lock);
+    struct proginfo *pi = program_info(ctx, (GLuint)prog);
+    struct ctxstate *cs = ctx_state(ctx);
+    uint32_t check = pi->int_mask | (pi->float_mask & cs->converted);
+    if (!check) { pthread_mutex_unlock(&attrib_lock); return; }
+    GLint vao = 0;
+    real_glGetIntegerv(GL_VERTEX_ARRAY_BINDING, &vao);
+    for (int loc = 0; loc < MAXLOC; ++loc) {
+        uint32_t bit = 1u << loc;
+        if (!(check & bit)) continue;
+        int want_int = (pi->int_mask & bit) != 0;
+        GLint enabled = 0, integer = 0;
+        d.GetVertexAttribiv((GLuint)loc, GL_VERTEX_ATTRIB_ARRAY_ENABLED, &enabled);
+        if (!enabled) {
+            if (want_int && (pi->unsigned_mask & bit) && d.VertexAttribI4ui) d.VertexAttribI4ui((GLuint)loc, 0, 0, 0, 1);
+            else if (want_int && d.VertexAttribI4i) d.VertexAttribI4i((GLuint)loc, 0, 0, 0, 1);
+            continue;
+        }
+        d.GetVertexAttribiv((GLuint)loc, GL_VERTEX_ATTRIB_ARRAY_INTEGER, &integer);
+        if (want_int == (integer != 0)) continue;
+        GLint buffer = 0, size = 0, type = 0, stride = 0, normalized = 0;
+        void *ptr = NULL;
+        d.GetVertexAttribiv((GLuint)loc, GL_VERTEX_ATTRIB_ARRAY_BUFFER_BINDING, &buffer);
+        d.GetVertexAttribiv((GLuint)loc, GL_VERTEX_ATTRIB_ARRAY_SIZE, &size);
+        d.GetVertexAttribiv((GLuint)loc, GL_VERTEX_ATTRIB_ARRAY_TYPE, &type);
+        d.GetVertexAttribiv((GLuint)loc, GL_VERTEX_ATTRIB_ARRAY_STRIDE, &stride);
+        d.GetVertexAttribiv((GLuint)loc, GL_VERTEX_ATTRIB_ARRAY_NORMALIZED, &normalized);
+        d.GetVertexAttribPointerv((GLuint)loc, GL_VERTEX_ATTRIB_ARRAY_POINTER, &ptr);
+        if (vao && !buffer) continue;  // client-side arrays only exist on the default vertex array
+        if (want_int) {
+            if (!glfix_int_component_type((unsigned)type)) {
+                if (skip_logs < 8) {
+                    ++skip_logs;
+                    LOG("int attribs: program %d location %d has data of type 0x%x, left as it is", prog, loc, type);
+                }
+                continue;
+            }
+            rebind((GLuint)loc, (GLuint)buffer, size, (GLenum)type, (GLboolean)normalized, stride, ptr, 1);
+            struct convrec *r = find_conv(ctx, (GLuint)vao, loc);
+            if (!r) r = &convs[conv_next++ % NCONV];
+            *r = (struct convrec){ctx, (GLuint)vao, (GLuint)buffer, loc, 1, size, stride, (GLenum)type, ptr,
+                                  (GLboolean)normalized};
+            cs->converted |= bit;
+            if (attrib_logs < 24) {
+                ++attrib_logs;
+                LOG("int attribs: program %d location %d: floats -> glVertexAttribIPointer (vao %d buffer %d size %d "
+                    "type 0x%x stride %d offset %p)", prog, loc, vao, buffer, size, type, stride, ptr);
+            }
+        } else {
+            struct convrec *r = find_conv(ctx, (GLuint)vao, loc);
+            if (!r || r->buffer != (GLuint)buffer || r->size != size || r->type != (GLenum)type || r->stride != stride ||
+                r->ptr != ptr)
+                continue;  // the game set it up as integers itself
+            rebind((GLuint)loc, (GLuint)buffer, size, (GLenum)type, r->normalized, stride, ptr, 0);
+            r->used = 0;
+            if (attrib_logs < 24) { ++attrib_logs; LOG("int attribs: program %d location %d: back to floats", prog, loc); }
+        }
+    }
+    pthread_mutex_unlock(&attrib_lock);
+}
+
 // Mesa's GLSL preprocessor rejects "#extension" after "#pragma" lines ("not allowed in the middle of a shader");
 // Quest drivers accept it. Neutralise #pragma lines (optimize/debug hints only) as sources are uploaded.
 typedef void (*PFN_SS)(GLuint, GLsizei, const GLchar *const *, const GLint *);
@@ -323,6 +566,8 @@ static void w_shaderSource(GLuint sh, GLsizei count, const GLchar *const *strs,
            }
        }
    }
+    char *highp = precision_fix(sh, src);
+    if (highp) { free(src); src = highp; }
    const GLchar *one = src;
    r_shaderSourceSet(sh, 1, &one, NULL);
    free(src);
@@ -334,12 +579,24 @@ __attribute__((constructor)) static void shim_ctor(void) {

 static void init(void) {
    read_conf();
-    gles = dlopen("libGLESv3.so", RTLD_NOW | RTLD_LOCAL);
-    void *egl = dlopen("libEGL.so", RTLD_NOW | RTLD_LOCAL);
+    gles = dlopen(GLSHIM_GLES_LIB, RTLD_NOW | RTLD_LOCAL);
+    void *egl = dlopen(GLSHIM_EGL_LIB, RTLD_NOW | RTLD_LOCAL);
    real_glGetString = gles ? dlsym(gles, "glGetString") : NULL;
    real_glGetStringi = gles ? dlsym(gles, "glGetStringi") : NULL;
    real_glGetIntegerv = gles ? dlsym(gles, "glGetIntegerv") : NULL;
    real_eglGetProcAddress = egl ? dlsym(egl, "eglGetProcAddress") : NULL;
+#define REAL(field, sym) d.field = gles ? dlsym(gles, sym) : NULL;
+    REAL(ShaderSource, "glShaderSource") REAL(GetShaderiv, "glGetShaderiv") REAL(LinkProgram, "glLinkProgram")
+    REAL(ProgramBinary, "glProgramBinary") REAL(DeleteProgram, "glDeleteProgram") REAL(GetProgramiv, "glGetProgramiv")
+    REAL(GetActiveAttrib, "glGetActiveAttrib") REAL(GetAttribLocation, "glGetAttribLocation")
+    REAL(GetVertexAttribiv, "glGetVertexAttribiv") REAL(GetVertexAttribPointerv, "glGetVertexAttribPointerv")
+    REAL(VertexAttribPointer, "glVertexAttribPointer") REAL(VertexAttribIPointer, "glVertexAttribIPointer")
+    REAL(VertexAttribI4i, "glVertexAttribI4i") REAL(VertexAttribI4ui, "glVertexAttribI4ui")
+    REAL(BindBuffer, "glBindBuffer") REAL(DrawArrays, "glDrawArrays") REAL(DrawElements, "glDrawElements")
+    REAL(DrawArraysInstanced, "glDrawArraysInstanced") REAL(DrawElementsInstanced, "glDrawElementsInstanced")
+    REAL(DrawRangeElements, "glDrawRangeElements")
+#undef REAL
+    d.GetCurrentContext = egl ? dlsym(egl, "eglGetCurrentContext") : NULL;
    static const char *const engines[] = {"libunity.so", "libUE4.so", "libUnreal.so"};
    int engine_found = 0;
    for (unsigned i = 0; i < sizeof engines / sizeof *engines && !engine_found; i++) {
@@ -355,6 +612,9 @@ static void init(void) {
    unreal = unreal && hide_msrtt && !hide_multiview;  // only matters while MSRTT is hidden and multiview kept
    LOG("GL shim active: hide_multiview=%d hide_msrtt=%d%s", hide_multiview, hide_msrtt,
        unreal ? " (Unreal: multiview MSRTT kept, drawn single-sampled)" : "");
+    if (int_attribs || highp_markers[0])
+        LOG("GL shim per-game fixes: gl_int_attribs=%d gl_highp_markers=%s", int_attribs,
+            highp_markers[0] ? highp_markers : "(none)");
 }

 static int is_hidden(const char *name) {
@@ -440,6 +700,100 @@ static void plain_ftmsmv(GLenum target, GLenum attachment, GLuint texture, GLint
    if (r_plain_ftmv) r_plain_ftmv(target, attachment, texture, level, base, views);
 }

+// gl_int_attribs: draws looked up through eglGetProcAddress (wrapped only when the setting is on)
+typedef void (*PFN_PB)(GLuint, GLenum, const void *, GLsizei);
+typedef void (*PFN_DEBV)(GLenum, GLsizei, GLenum, const void *, GLint);
+typedef void (*PFN_DREBV)(GLenum, GLuint, GLuint, GLsizei, GLenum, const void *, GLint);
+typedef void (*PFN_DEIBV)(GLenum, GLsizei, GLenum, const void *, GLsizei, GLint);
+static PFN_PB e_pb, e_pboes;
+static PFN_V_U e_dp;
+static PFN_DA e_da;
+static PFN_DE e_de;
+static PFN_DAI e_dai;
+static PFN_DEI e_dei;
+static PFN_DRE e_dre;
+static PFN_DEBV e_debv0, e_debv1, e_debv2;
+static PFN_DREBV e_drebv0, e_drebv1, e_drebv2;
+static PFN_DEIBV e_deibv0, e_deibv1, e_deibv2;
+static void x_pb(GLuint p, GLenum f, const void *b, GLsizei n) { e_pb(p, f, b, n); forget_program(p); }
+static void x_pboes(GLuint p, GLenum f, const void *b, GLsizei n) { e_pboes(p, f, b, n); forget_program(p); }
+static void x_dp(GLuint p) { e_dp(p); forget_program(p); }
+static void x_da(GLenum m, GLint f, GLsizei c) { fix_attribs(); e_da(m, f, c); }
+static void x_de(GLenum m, GLsizei c, GLenum t, const void *i) { fix_attribs(); e_de(m, c, t, i); }
+static void x_dai(GLenum m, GLint f, GLsizei c, GLsizei n) { fix_attribs(); e_dai(m, f, c, n); }
+static void x_dei(GLenum m, GLsizei c, GLenum t, const void *i, GLsizei n) { fix_attribs(); e_dei(m, c, t, i, n); }
+static void x_dre(GLenum m, GLuint s, GLuint e, GLsizei c, GLenum t, const void *i) {
+    fix_attribs();
+    e_dre(m, s, e, c, t, i);
+}
+#define BV(n) \
+    static void x_debv##n(GLenum m, GLsizei c, GLenum t, const void *i, GLint b) { fix_attribs(); e_debv##n(m, c, t, i, b); } \
+    static void x_drebv##n(GLenum m, GLuint s, GLuint e, GLsizei c, GLenum t, const void *i, GLint b) { \
+        fix_attribs(); e_drebv##n(m, s, e, c, t, i, b); } \
+    static void x_deibv##n(GLenum m, GLsizei c, GLenum t, const void *i, GLsizei k, GLint b) { \
+        fix_attribs(); e_deibv##n(m, c, t, i, k, b); }
+BV(0) BV(1) BV(2)
+#undef BV
+
+// Direct imports of a game library that loads the shim first (DT_NEEDED): these come before libGLESv3's. Plain
+// pass-through unless a per-game fix is on.
+EXPORT void glShaderSource(GLuint sh, GLsizei count, const GLchar *const *strs, const GLint *lens) {
+    pthread_once(&once, init);
+    if (!d.ShaderSource) return;
+    if (highp_markers[0] && count > 0 && strs) {
+        char *src = concat_sources(count, strs, lens);
+        char *highp = src ? precision_fix(sh, src) : NULL;
+        free(src);
+        if (highp) {
+            const GLchar *one = highp;
+            d.ShaderSource(sh, 1, &one, NULL);
+            free(highp);
+            return;
+        }
+    }
+    d.ShaderSource(sh, count, strs, lens);
+}
+EXPORT void glLinkProgram(GLuint p) {
+    pthread_once(&once, init);
+    if (d.LinkProgram) d.LinkProgram(p);
+    forget_program(p);
+}
+EXPORT void glProgramBinary(GLuint p, GLenum f, const void *b, GLsizei n) {
+    pthread_once(&once, init);
+    if (d.ProgramBinary) d.ProgramBinary(p, f, b, n);
+    forget_program(p);
+}
+EXPORT void glDeleteProgram(GLuint p) {
+    pthread_once(&once, init);
+    if (d.DeleteProgram) d.DeleteProgram(p);
+    forget_program(p);
+}
+EXPORT void glDrawArrays(GLenum m, GLint f, GLsizei c) {
+    pthread_once(&once, init);
+    fix_attribs();
+    if (d.DrawArrays) d.DrawArrays(m, f, c);
+}
+EXPORT void glDrawElements(GLenum m, GLsizei c, GLenum t, const void *i) {
+    pthread_once(&once, init);
+    fix_attribs();
+    if (d.DrawElements) d.DrawElements(m, c, t, i);
+}
+EXPORT void glDrawArraysInstanced(GLenum m, GLint f, GLsizei c, GLsizei n) {
+    pthread_once(&once, init);
+    fix_attribs();
+    if (d.DrawArraysInstanced) d.DrawArraysInstanced(m, f, c, n);
+}
+EXPORT void glDrawElementsInstanced(GLenum m, GLsizei c, GLenum t, const void *i, GLsizei n) {
+    pthread_once(&once, init);
+    fix_attribs();
+    if (d.DrawElementsInstanced) d.DrawElementsInstanced(m, c, t, i, n);
+}
+EXPORT void glDrawRangeElements(GLenum m, GLuint s, GLuint e, GLsizei c, GLenum t, const void *i) {
+    pthread_once(&once, init);
+    fix_attribs();
+    if (d.DrawRangeElements) d.DrawRangeElements(m, s, e, c, t, i);
+}
+
 __attribute__((visibility("default"))) __eglMustCastToProperFunctionPointerType eglGetProcAddress(const char *name) {
    pthread_once(&once, init);
    if (name && !strcmp(name, "glGetStringi")) return (__eglMustCastToProperFunctionPointerType)glGetStringi;
@@ -477,6 +831,25 @@ __attribute__((visibility("default"))) __eglMustCastToProperFunctionPointerType
    WRAP("glShaderSource", r_shaderSourceSet, w_shaderSource)
    WRAP("glCompileShader", r_compile, w_compile)
    WRAP("glLinkProgram", r_link, w_link)
+    if (int_attribs) {
+        WRAP("glProgramBinary", e_pb, x_pb)
+        WRAP("glProgramBinaryOES", e_pboes, x_pboes)
+        WRAP("glDeleteProgram", e_dp, x_dp)
+        WRAP("glDrawArrays", e_da, x_da)
+        WRAP("glDrawElements", e_de, x_de)
+        WRAP("glDrawArraysInstanced", e_dai, x_dai)
+        WRAP("glDrawElementsInstanced", e_dei, x_dei)
+        WRAP("glDrawRangeElements", e_dre, x_dre)
+        WRAP("glDrawElementsBaseVertex", e_debv0, x_debv0)
+        WRAP("glDrawElementsBaseVertexEXT", e_debv1, x_debv1)
+        WRAP("glDrawElementsBaseVertexOES", e_debv2, x_debv2)
+        WRAP("glDrawRangeElementsBaseVertex", e_drebv0, x_drebv0)
+        WRAP("glDrawRangeElementsBaseVertexEXT", e_drebv1, x_drebv1)
+        WRAP("glDrawRangeElementsBaseVertexOES", e_drebv2, x_drebv2)
+        WRAP("glDrawElementsInstancedBaseVertex", e_deibv0, x_deibv0)
+        WRAP("glDrawElementsInstancedBaseVertexEXT", e_deibv1, x_deibv1)
+        WRAP("glDrawElementsInstancedBaseVertexOES", e_deibv2, x_deibv2)
+    }
 #ifdef GLSHIM_TRACE
    WRAP("glBindFramebuffer", r_bindFb, w_bindFb)
    WRAP("glFramebufferTexture2D", r_ft2d, w_ft2d)
@@ -0,0 +1,109 @@
+// SPDX-License-Identifier: GPL-3.0-only
+// FramePort thread-key pool for Unity (patch frame.unity_tls_key_pool, GitHub #198).
+//
+// Bionic gives a process 128 pthread keys. Unity 6 takes about 40 of them (most without a destructor), and on the
+// Frame the libraries Lepton and FramePort add (Mesa/Zink, FrameBridge, OVRPort's dispatcher, Valve's Vulkan layers)
+// take more than on a Quest. Games with many other native libraries then run out: Wander 0.3570 (Gecko, avatar
+// libraries, Firebase) aborted in Firestore's start with "cannot create thread specific key for __cxa_get_globals()".
+//
+// FramePort renames libunity.so's imports pthread_key_create/_delete and pthread_get/setspecific to the fp_tkey_*
+// functions below (same strings, shorter, NUL-padded) and adds this library to its DT_NEEDED. Keys without a
+// destructor become slots in one per-thread table that lives under a single real key; keys with a destructor, and
+// every other library, keep using real keys. Approach and the original helper: Klownicle (GitHub #198), verified in
+// the headset; this is FramePort's own implementation of it.
+//
+// Pooled keys are TAG + slot (bionic's own keys have bit 31 set, so the ranges can't meet). A slot's generation
+// changes at every create, so a value stored under a deleted key isn't seen through a new key that reuses the slot.
+// Using a key after deleting it is undefined in POSIX; here it just reads NULL / fails with EINVAL.
+#include <android/log.h>
+#include <errno.h>
+#include <pthread.h>
+#include <stdatomic.h>
+#include <stdint.h>
+#include <stdlib.h>
+
+#define TAG_LOG "FrameBridge"
+#define EXPORT __attribute__((visibility("default")))
+#define LOG(...) __android_log_print(ANDROID_LOG_INFO, TAG_LOG, __VA_ARGS__)
+
+#define SLOTS 512
+#define TAG 0x40000000u
+
+struct table {
+    void *value[SLOTS];
+    uint32_t generation[SLOTS];
+};
+
+static pthread_once_t once = PTHREAD_ONCE_INIT;
+static pthread_key_t storage;
+static int storage_error;
+static _Atomic uint32_t used[SLOTS];       // 0 free, 1 taken
+static _Atomic uint32_t generation[SLOTS];  // never 0 for a taken slot
+static _Atomic int pooled, logged_full;
+
+static void setup(void) {
+    storage_error = pthread_key_create(&storage, free);  // the table goes with its thread
+    if (storage_error) LOG("fp_tkeys: no real key for the pool (%d): Unity's keys stay real ones", storage_error);
+}
+
+static int slot_of(pthread_key_t key, unsigned *slot) {
+    uint32_t k = (uint32_t)key;
+    if (k < TAG || k >= TAG + SLOTS) return 0;
+    *slot = k - TAG;
+    return 1;
+}
+
+EXPORT int fp_tkey_create(pthread_key_t *key, void (*destructor)(void *)) {
+    if (destructor) return pthread_key_create(key, destructor);
+    pthread_once(&once, setup);
+    if (storage_error) return pthread_key_create(key, NULL);
+    for (unsigned i = 0; i < SLOTS; i++) {
+        uint32_t expected = 0;
+        if (atomic_compare_exchange_strong(&used[i], &expected, 1)) {
+            uint32_t g = atomic_fetch_add(&generation[i], 1) + 1;
+            if (!g) atomic_fetch_add(&generation[i], 1);  // skip 0: "never set" in a fresh table
+            *key = (pthread_key_t)(TAG + i);
+            if (atomic_fetch_add(&pooled, 1) == 0) LOG("fp_tkeys: pooling Unity's thread keys without destructor");
+            return 0;
+        }
+    }
+    if (!atomic_exchange(&logged_full, 1)) LOG("fp_tkeys: all %d pooled keys taken, using real keys", SLOTS);
+    return pthread_key_create(key, NULL);
+}
+
+EXPORT int fp_tkey_delete(pthread_key_t key) {
+    unsigned i;
+    if (!slot_of(key, &i)) return pthread_key_delete(key);
+    uint32_t expected = 1;
+    if (!atomic_compare_exchange_strong(&used[i], &expected, 0)) return EINVAL;
+    atomic_fetch_sub(&pooled, 1);
+    return 0;
+}
+
+EXPORT void *fp_tkey_get(pthread_key_t key) {
+    unsigned i;
+    if (!slot_of(key, &i)) return pthread_getspecific(key);
+    struct table *t = pthread_getspecific(storage);
+    if (!t || !atomic_load_explicit(&used[i], memory_order_acquire)) return NULL;
+    return t->generation[i] == atomic_load_explicit(&generation[i], memory_order_relaxed) ? t->value[i] : NULL;
+}
+
+EXPORT int fp_tkey_set(pthread_key_t key, const void *value) {
+    unsigned i;
+    if (!slot_of(key, &i)) return pthread_setspecific(key, value);
+    if (!atomic_load_explicit(&used[i], memory_order_acquire)) return EINVAL;
+    struct table *t = pthread_getspecific(storage);
+    if (!t) {
+        if (!value) return 0;  // nothing stored yet: NULL is what get answers anyway
+        t = calloc(1, sizeof(*t));
+        if (!t) return ENOMEM;
+        int rc = pthread_setspecific(storage, t);
+        if (rc) {
+            free(t);
+            return rc;
+        }
+    }
+    t->value[i] = (void *)value;
+    t->generation[i] = atomic_load_explicit(&generation[i], memory_order_relaxed);
+    return 0;
+}
@@ -0,0 +1,55 @@
+// SPDX-License-Identifier: GPL-3.0-only
+// FramePort: the VrApi FOV properties (7/8) before tracking starts.
+//
+// VrApi games may read the FOV right after vrapi_Initialize and cache it (BlazeRush builds its projection and its
+// TexCoordsFromTanAngles matrix from it once). OpenXR has no FOV before a session exists unless the runtime offers
+// XR_EPIC_view_configuration_fov, which the Steam Frame's doesn't, so the bridge answered 90 x 90 degrees and those
+// games kept a narrow, square view. The bridge now saves the live FOV of each session (it is a property of the
+// headset, not of the game's state) in the app's external files folder and answers with it the next time the
+// properties are asked for before a session has located its views. The headset's FOV is never hardcoded: the first
+// session on a Frame still starts at 90 degrees (FramePort's launch test after an install is that session).
+// Plain functions, no Android or OpenXR types: tests/test_blazerush.py builds them for the host.
+#pragma once
+#include <cmath>
+#include <cstdio>
+#include <cstring>
+
+namespace ovp {
+namespace fovcache {
+constexpr const char* FileName = "framebridge-vrapi-fov.txt";
+// symmetric coverage angles a VR headset can have (the Frame reports about 118 x 120)
+inline bool plausible(float horizontal, float vertical) {
+    return std::isfinite(horizontal) && std::isfinite(vertical) && horizontal >= 60.0f && horizontal <= 170.0f &&
+           vertical >= 60.0f && vertical <= 170.0f;
+}
+// "fov_h=118.14\nfov_v=119.55\n" (other lines ignored); false unless both are there and plausible
+inline bool parse(const char* text, float out[2]) {
+    float h = NAN, v = NAN;
+    for (const char* line = text; line && *line; line = std::strchr(line, '\n'), line = line ? line + 1 : nullptr) {
+        float value = 0;
+        if (std::sscanf(line, "fov_h=%f", &value) == 1) h = value;
+        else if (std::sscanf(line, "fov_v=%f", &value) == 1) v = value;
+    }
+    if (!plausible(h, v)) return false;
+    out[0] = h;
+    out[1] = v;
+    return true;
+}
+inline int format(char* buffer, size_t size, const float fov[2]) {
+    return std::snprintf(buffer, size, "fov_h=%.3f\nfov_v=%.3f\n", fov[0], fov[1]);
+}
+// worth rewriting the saved value: none saved yet, or a change of more than 0.01 degrees on an axis
+inline bool changed(bool haveSaved, const float saved[2], const float now[2]) {
+    return !haveSaved || std::fabs(saved[0] - now[0]) > 0.01f || std::fabs(saved[1] - now[1]) > 0.01f;
+}
+// the external files folder's file for the package in /proc/self/cmdline ("pkg" or "pkg:process"); false if unknown
+inline bool path(const char* cmdline, char* buffer, size_t size) {
+    char package[256] = {0};
+    std::strncpy(package, cmdline ? cmdline : "", sizeof(package) - 1);
+    if (char* colon = std::strchr(package, ':')) *colon = 0;
+    if (!*package || std::strchr(package, '/') || std::strstr(package, "..")) return false;
+    const int n = std::snprintf(buffer, size, "/sdcard/Android/data/%s/files/%s", package, FileName);
+    return n > 0 && static_cast<size_t>(n) < size;
+}
+}  // namespace fovcache
+}  // namespace ovp
@@ -8,6 +8,7 @@
 #include <array>
 #include <cmath>
 #include <cstdint>
+#include <cstdlib>
 #include <limits>
 #include <new>

@@ -26,6 +27,8 @@ constexpr int32_t kTexture2DArray = 2;
 constexpr int32_t kProjectionLayer = 1;
 constexpr uint32_t kLayerChromatic = 1u << 1;
 constexpr uint32_t kFrameFlush = 1u << 1;
+constexpr uint32_t kFrameInhibitVolume = 1u << 6;
+constexpr uint32_t kFrameShowTextureDensity = 1u << 8;  // obsolete Quest compositor debug overlay
 constexpr uint32_t kLayerFixedToView = 1u << 2;
 constexpr uint32_t kLayerClipRect = 1u << 4;
 constexpr uint32_t kLayerInhibitSrgb = 1u << 8;
@@ -263,10 +266,20 @@ bool ensureFullRateImage(ovrTextureSwapChain* chain) {
        image.arrayLayers = chain->arrayLayers;
        image.samples = VK_SAMPLE_COUNT_1_BIT;
        image.tiling = VK_IMAGE_TILING_OPTIMAL;
-        image.usage = VK_IMAGE_USAGE_SAMPLED_BIT | VK_IMAGE_USAGE_TRANSFER_DST_BIT;
+        image.usage = VK_IMAGE_USAGE_SAMPLED_BIT | VK_IMAGE_USAGE_TRANSFER_DST_BIT |
+                      VK_IMAGE_USAGE_FRAGMENT_DENSITY_MAP_BIT_EXT;
+        // Some engines bind this resource as a fragment-density attachment even when our VrApi capability says
+        // foveation is off (The Climb, GitHub #238). Turnip samples density maps on the CPU: this usage makes it
+        // choose linear storage and map the backing memory at bind time. An ordinary sampled image has a NULL
+        // image->map and crashes in vkCmdEndRenderPass. Keep the constant full-rate contents in either case.
+        // This API supplies a density attachment, so never substitute an ordinary sampled image when a layer
+        // filters the advertised format features. vkCreateImage can reject unsupported usage without publishing it.
        image.sharingMode = VK_SHARING_MODE_EXCLUSIVE;
        image.initialLayout = VK_IMAGE_LAYOUT_UNDEFINED;
-        if (vkCreateImage(s.vk.Device, &image, nullptr, &resource.image) != VK_SUCCESS) return false;
+        const VkResult created = vkCreateImage(s.vk.Device, &image, nullptr, &resource.image);
+        OVP_LOG("Full-rate image: format features=0x%x usage=0x%x create=%d",
+                properties.optimalTilingFeatures, image.usage, created);
+        if (created != VK_SUCCESS) return false;
        VkMemoryRequirements requirements{};
        vkGetImageMemoryRequirements(s.vk.Device, resource.image, &requirements);
        uint32_t memoryType = 0;
@@ -299,9 +312,7 @@ bool ensureFullRateImage(ovrTextureSwapChain* chain) {
    barrier.subresourceRange = {VK_IMAGE_ASPECT_COLOR_BIT, 0, 1, 0, chain->arrayLayers};
    vkCmdPipelineBarrier(gCopy.command, VK_PIPELINE_STAGE_TOP_OF_PIPE_BIT,
                        VK_PIPELINE_STAGE_TRANSFER_BIT, 0, 0, nullptr, 0, nullptr, 1, &barrier);
-    // Constant (1,1) density means full-rate shading. This ordinary sampled
-    // texture supports consumers which query the resource even with VRS off;
-    // it is not a hardware fragment-density attachment or an enabled feature.
+    // Constant (1,1) density means full-rate shading, including when the engine binds it as a density attachment.
    const VkClearColorValue fullRate{{1.0f, 1.0f, 1.0f, 1.0f}};
    vkCmdClearColorImage(gCopy.command, resource.image, VK_IMAGE_LAYOUT_TRANSFER_DST_OPTIMAL,
                        &fullRate, 1, &barrier.subresourceRange);
@@ -436,6 +447,17 @@ bool ensureOutput(ovrTextureSwapChain* chain) {
    create.faceCount = 1;
    create.arraySize = chain->arrayLayers;
    create.mipCount = chain->levels;
+    // Per-game opt-in: Valve's injection caches density maps by maximum extent.
+    // Keep mono overlays from replacing the stereo map at the same extent.
+    // Only output storage is padded; copies and submitted subrects retain the
+    // original dimensions, and all application-owned images remain unchanged.
+    const char* isolate = std::getenv("FRAMEPORT_VRAPI_FDM_ISOLATE_MONO");
+    if (isolate && std::strcmp(isolate, "1") == 0 && chain->arrayLayers == 1) {
+        create.width += 32;
+        create.height += 32;
+        OVP_LOG("Foveation separate mono output %ux%u -> %ux%u", chain->width, chain->height,
+                create.width, create.height);
+    }
    result = s.xr.xrCreateSwapchain(s.session, &create, &chain->output);
    if (XR_FAILED(result)) {
        ovp::xrOk(result, "xrCreateSwapchain");
@@ -1090,8 +1112,12 @@ VRAPI ovrResult vrapi_SubmitFrame2(ovrMobile* mobile,
        (description->LayerCount != 0 && !description->Layers)) {
        return failFrame(InvalidParameter);
    }
-    if ((description->Flags & ~kFrameFlush) != 0 || description->SwapInterval != 1) {
-        OVP_ERROR("Unsupported frame flags or swap interval");
+    // Volume suppression and the old texture-density visualization only affect Quest's compositor overlays.
+    // OpenXR has neither overlay; accepting those flags must still submit the application's actual layers.
+    if ((description->Flags & ~(kFrameFlush | kFrameInhibitVolume | kFrameShowTextureDensity)) != 0 ||
+        description->SwapInterval != 1) {
+        OVP_ERROR("Unsupported frame flags or swap interval: flags=0x%x interval=%u",
+                  description->Flags, description->SwapInterval);
        return failFrame(Unsupported);
    }

@@ -1191,10 +1217,21 @@ VRAPI ovrResult vrapi_SubmitFrame2(ovrMobile* mobile,
    if (!ovp::ensureSession(s.queue) || !ovp::beginFrame(static_cast<int64_t>(description->FrameIndex))) {
        return failFrame(DeviceUnavailable);
    }
-    if (!s.frame.shouldRender) {
+    // A short runtime visibility dip can be held by FrameBridge's focus_hold.
+    // Continue supplying the real image while the application still has focus;
+    // otherwise an empty submission replaces it with the runtime's black image.
+    // shouldRender is an advisory; actual focus loss keeps the ordinary path.
+    const char* keepFocused = std::getenv("FRAMEPORT_VRAPI_KEEP_FOCUSED_IMAGE");
+    const bool retainImage = keepFocused && std::strcmp(keepFocused, "1") == 0 &&
+                             s.sessionState == XR_SESSION_STATE_FOCUSED;
+    if (!s.frame.shouldRender && !retainImage) {
        const XrResult result = ovp::endFrame(nullptr, 0);
        return XR_SUCCEEDED(result) ? Success : DeviceUnavailable;
    }
+    if (!s.frame.shouldRender && retainImage) {
+        static unsigned held = 0;
+        if (held++ % 72 == 0) OVP_LOG("CLIMB visibility: retaining image during held focus dip (%u)", held);
+    }

    std::array<CopyJob, kMaxCopyJobs> jobs{};
    uint32_t jobCount = 0;
@@ -1,8 +1,10 @@
 // SPDX-License-Identifier: GPL-3.0-only
 #include "runtime.h"
+#include "fov_cache.h"
 #include <algorithm>
 #include <chrono>
 #include <cmath>
+#include <cstdio>
 #include <cstring>
 #include <dlfcn.h>
 #include <thread>
@@ -45,6 +47,56 @@ static bool load(const char* name, PFN_xrVoidFunction* target) {
    auto& s = runtime();
    return xrOk(s.xr.xrGetInstanceProcAddr(s.instance, name, target), name) && *target;
 }
+// FramePort: the live FOV of earlier sessions for games that read it before any session (see fov_cache.h)
+static bool savedFovPath(char* buffer, size_t size) {
+    char cmdline[256] = {0};
+    if (FILE* f = std::fopen("/proc/self/cmdline", "r")) {
+        cmdline[std::fread(cmdline, 1, sizeof(cmdline) - 1, f)] = 0;
+        std::fclose(f);
+    }
+    return fovcache::path(cmdline, buffer, size);
+}
+static void loadSavedFov() {
+    auto& s = runtime();
+    char path[512], text[256] = {0};
+    if (!savedFovPath(path, sizeof(path))) return;
+    FILE* f = std::fopen(path, "r");
+    if (!f) return;
+    text[std::fread(text, 1, sizeof(text) - 1, f)] = 0;
+    std::fclose(f);
+    float fov[2];
+    if (!fovcache::parse(text, fov)) return;
+    s.savedFovDegrees = {fov[0], fov[1]};
+    s.savedFovValid = true;
+    OVP_LOG("FOV of an earlier session: %.2f x %.2f degrees", fov[0], fov[1]);
+}
+static void saveLiveFov() {
+    auto& s = runtime();
+    const float now[2] = {s.locatedFovDegrees[0], s.locatedFovDegrees[1]};
+    const float saved[2] = {s.savedFovDegrees[0], s.savedFovDegrees[1]};
+    if (!s.locatedFovValid || !fovcache::plausible(now[0], now[1]) || !fovcache::changed(s.savedFovValid, saved, now))
+        return;
+    // Only the private foveation bridge opts in; ordinary games retain their cache policy.
+    static double lastCacheWrite = -10.0;
+    const double cacheTime = secondsNow();
+    const char* limitCache = std::getenv("FRAMEPORT_VRAPI_KEEP_FOCUSED_IMAGE");
+    if (limitCache && std::strcmp(limitCache, "1") == 0 && s.savedFovValid && cacheTime - lastCacheWrite < 10.0)
+        return;
+    lastCacheWrite = cacheTime;
+    s.savedFovDegrees = {now[0], now[1]};  // also when it can't be written: tried once per change, not every frame
+    s.savedFovValid = true;
+    char path[512], tmp[540], text[96];
+    if (!savedFovPath(path, sizeof(path))) return;
+    std::snprintf(tmp, sizeof(tmp), "%s.tmp", path);
+    FILE* f = std::fopen(tmp, "w");
+    if (!f) return;
+    const int n = fovcache::format(text, sizeof(text), now);
+    const bool ok = n > 0 && std::fwrite(text, 1, static_cast<size_t>(n), f) == static_cast<size_t>(n);
+    if (std::fclose(f) == 0 && ok && std::rename(tmp, path) == 0)
+        OVP_LOG("live FOV %.2f x %.2f degrees saved for the next start", now[0], now[1]);
+    else
+        std::remove(tmp);
+}
 static bool referenceSpace(XrReferenceSpaceType type, const XrPosef& pose, XrSpace& space) {
    auto& s = runtime();
    XrReferenceSpaceCreateInfo info{XR_TYPE_REFERENCE_SPACE_CREATE_INFO};
@@ -94,6 +146,9 @@ static void shutdown() {
    s.locatedFovValid = false;
    s.recommendedFovDegrees = {};
    s.locatedFovDegrees = {};
+    s.savedFovValid = false;
+    s.savedFovDegrees = {};
+    s.loggedFovSource = -1;
    s.recenterCount = 0;
    s.loggedDisplayRefreshRateSource = DisplayRefreshRateSource::Unqueried;
    s.loggedDisplayRefreshRate = 0;
@@ -284,6 +339,23 @@ bool beginFrame(int64_t index) {
        // Steam Frame reports poses as VALID without the TRACKED bits here, so only validity is required.
        constexpr XrSpaceLocationFlags tracked = XR_SPACE_LOCATION_ORIENTATION_VALID_BIT | XR_SPACE_LOCATION_POSITION_VALID_BIT;
        const bool visible = s.sessionState == XR_SESSION_STATE_VISIBLE || s.sessionState == XR_SESSION_STATE_FOCUSED;
+        if (!s.locatedFovValid) {
+            // The views' FOV doesn't depend on tracking: take it as soon as the session runs (also headless, without
+            // anyone wearing the headset), so it is saved for games that ask before their next session.
+            XrViewLocateInfo fovInfo{XR_TYPE_VIEW_LOCATE_INFO};
+            fovInfo.viewConfigurationType = XR_VIEW_CONFIGURATION_TYPE_PRIMARY_STEREO;
+            fovInfo.displayTime = s.frame.predictedDisplayTime;
+            fovInfo.space = s.viewSpace;
+            XrViewState fovState{XR_TYPE_VIEW_STATE};
+            uint32_t fovCount = 0;
+            if (XR_SUCCEEDED(s.xr.xrLocateViews(s.session, &fovInfo, &fovState, 2, &fovCount, s.views.data())) &&
+                fovCount == 2 && symmetricFovDegrees(s.views[0].fov, s.views[1].fov, s.locatedFovDegrees)) {
+                s.locatedFovValid = true;
+                OVP_LOG("FOV located before tracking: %.2f x %.2f degrees (view state 0x%llx)", s.locatedFovDegrees[0],
+                        s.locatedFovDegrees[1], (unsigned long long)fovState.viewStateFlags);
+                saveLiveFov();
+            }
+        }
        const bool located = visible &&
            xrOk(s.xr.xrLocateSpace(s.viewSpace, s.localSpace, s.frame.predictedDisplayTime, &head), "initial eye-level origin");
        static int logged;
@@ -325,6 +397,7 @@ bool beginFrame(int64_t index) {
    }
    s.locatedFovValid = symmetricFovDegrees(
        s.views[0].fov, s.views[1].fov, s.locatedFovDegrees);
+    saveLiveFov();
    input::sync();
    return true;
 }
@@ -519,6 +592,7 @@ VRAPI int vrapi_Initialize(const ovrInitParms* parms) {
        symmetricFovDegrees(s.viewConfigFov[0].recommendedFov,
                            s.viewConfigFov[1].recommendedFov,
                            s.recommendedFovDegrees);
+    if (!s.recommendedFovValid) loadSavedFov();
    s.colorSpaceExtension = has(XR_FB_COLOR_SPACE_EXTENSION_NAME);
    s.performanceExtension = has(XR_EXT_PERFORMANCE_SETTINGS_EXTENSION_NAME);
    s.threadExtension = has(XR_KHR_ANDROID_THREAD_SETTINGS_EXTENSION_NAME);
@@ -680,10 +754,20 @@ VRAPI float vrapi_GetSystemPropertyFloat(const ovrJava*, int property) {
    if (property == 4) return queryDisplayRefreshRate();
    if (property == 7 || property == 8) {
        const size_t axis = static_cast<size_t>(property - 7);
-        // Live optical FOV supersedes a provisional startup recommendation.
-        if (s.locatedFovValid) return s.locatedFovDegrees[axis];
-        if (s.recommendedFovValid) return s.recommendedFovDegrees[axis];
-        return 90.0f;
+        // Live optical FOV supersedes a provisional startup recommendation; before any session (no runtime
+        // recommendation): the live FOV saved by an earlier session, else 90 degrees.
+        static const char* const sources[] = {"live", "runtime recommendation", "saved by an earlier session",
+                                              "default, nothing known before tracking"};
+        int source = 3;
+        std::array<float, 2> fov{90.0f, 90.0f};
+        if (s.locatedFovValid) { source = 0; fov = s.locatedFovDegrees; }
+        else if (s.recommendedFovValid) { source = 1; fov = s.recommendedFovDegrees; }
+        else if (s.savedFovValid) { source = 2; fov = s.savedFovDegrees; }
+        if (source != s.loggedFovSource) {
+            s.loggedFovSource = source;
+            OVP_LOG("FOV properties: %.2f x %.2f degrees (%s)", fov[0], fov[1], sources[source]);
+        }
+        return fov[axis];
    }
    OVP_LOG("Unsupported float system property %d", property);
    return 0;
				`@@ -0,0 +1 @@`
				<svg xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 64 64"><defs><linearGradient id="fp0" x1="0" y1="0" x2="1" y2="0"><stop offset="0" stop-color="#3AA8FF" stop-opacity=".18"/><stop offset=".5" stop-color="#3AA8FF" stop-opacity="0"/><stop offset=".5" stop-color="#FF8A1F" stop-opacity="0"/><stop offset="1" stop-color="#FF8A1F" stop-opacity=".18"/></linearGradient><linearGradient id="fp1" gradientUnits="userSpaceOnUse" x1="26" y1="0" x2="38" y2="0"><stop offset=".3" stop-color="#3AA8FF"/><stop offset=".7" stop-color="#FF8A1F"/></linearGradient><clipPath id="fp2"><polygon points="-30,-30 49.14502116644019,-30 8.854978833559809,94 -30,94"/></clipPath><clipPath id="fp3"><polygon points="55.14502116644019,-30 94,-30 94,94 14.854978833559809,94"/></clipPath></defs><rect width="64" height="64" rx="0" fill="#101218"/><rect width="64" height="64" rx="0" fill="url(#fp0)"/><g clip-path="url(#fp2)"><g transform="translate(0 0)"><path d="M34 15H9a3 3 0 0 0-3 3v20a3 3 0 0 0 3 3h25z" fill="#101218" stroke="#ECEDF3" stroke-width="3" stroke-linejoin="round"/><rect x="10.5" y="19.5" width="24" height="17" rx="1" fill="#3AA8FF" fill-opacity="0.35"/><path d="M18 41v6M11 47h14" stroke="#ECEDF3" stroke-width="3" stroke-linecap="round"/></g></g><g clip-path="url(#fp3)"><path d="M56.5 31.5H58.5" stroke="#ECEDF3" stroke-width="3.4" stroke-linecap="round"/><path d="M22 21h27a8 8 0 0 1 8 8v5a8 8 0 0 1-8 8H48.65a3 3 0 0 1-2.6-1.5l-1-1.7a.9.9 0 0 0-1.6 0l-1 1.7a3 3 0 0 1-2.6 1.5H22z" fill="#101218" stroke="#ECEDF3" stroke-width="3" stroke-linejoin="round"/><ellipse cx="39.5" cy="30.5" rx="4.2" ry="3.8" fill="#FF8A1F"/><ellipse cx="49" cy="30.5" rx="4.2" ry="3.8" fill="#FF8A1F"/></g><g transform="rotate(18 32 32)"><ellipse cx="32" cy="32" rx="4.5" ry="22" fill="#08090C" stroke="#08090C" stroke-width="5.8"/><ellipse cx="32" cy="32" rx="4.5" ry="22" fill="none" stroke="url(#fp1)" stroke-opacity=".25" stroke-width="6.46"/><ellipse cx="32" cy="32" rx="4.5" ry="22" fill="url(#fp1)" fill-opacity="0.14" stroke="url(#fp1)" stroke-width="3.4"/></g></svg>