hemx/PLAN.md

Current plan

Closed receipt — HMX-001

Result: Commit 31a0f02 delivers the generated-resource -> canonical batch -> Axum -> owned browser-root path for all eight effects. Proof: Focused Redgate script, workspace format/clippy/tests/deny, Wasm boundary, archive lists, and fresh-context review passed; HMX-001 IDs have no Redgate findings. Release note: The breaking API is versioned 0.4.0; dependent archives require publishing 0.4.0 crates in dependency order and are outside this non-release slice.

Slice HMX-002 — Native interaction and recovery

Outcome: Generated semantic HTML submits forms and navigation through the closed effect path while preserving accessibility and ordinary browser recovery. Delta: html/001–007, runtime/003–004, axum/003–004. Path: generated marker and native anchor/form -> request policy and Axum boundary -> rendered validation or navigation response -> accessible browser result or native fallback. Build: Align generated marker vocabulary, native-event defaults, bounded request policies, form encoding, validation markup, partial navigation metadata, and full-navigation recovery. Risk: Enhancement can suppress native input, accessibility, or fallback behavior and leave users unable to submit, navigate, or recover. Checks: Generated-markup assertions for every marker and policy value; browser scenarios with enhancement enabled and unavailable; form encoding and body-limit integration tests; validation accessibility assertions; partial/full navigation recovery scenarios; redgate check for the slice IDs. Non-goals: SSE, WebSocket, timers, reveal behavior, or island-owned local state. Residual risk: Optional adapter and island lifecycle remains open. State: Ready Blocked by: none

Slice HMX-003 — Direct adapters and explicit islands

Outcome: Optional transports and local islands compose with the generic runtime without adding effect schemas, a plugin registry, or mirrored client application state. Delta: runtime/006–008, boundary/001–004, axum/002. Path: root-owned adapter or explicit island marker -> direct bind/scan/cleanup lifecycle -> unchanged effect batch or island-owned subtree -> deterministic ownership result. Build: Keep generic runtime behavior in hemx-js, framework transport in hemx-axum, direct adapter lifecycle beside each adapter, and explicit morph boundaries around islands. Risk: Duplicate binding, leaked cleanup, or ambiguous ownership can apply effects twice, cross roots, or overwrite island state. Checks: Browser lifecycle scenarios for bind-once, inserted fragments, removal cleanup, wrong-root rejection, and island preservation; static/public-API checks excluding plugin registries, extra core effects, and client stores; unchanged-byte transport tests; redgate check for the slice IDs. Non-goals: New transports, a general extension API, or application-specific island frameworks. Residual risk: Adapter-specific network behavior remains owned by each optional adapter. State: Ready Blocked by: none

Slice HMX-004 — Deterministic generation and portable server build

Outcome: Template inspection and macros produce stable, actionable generated contracts, and normal server-side Hemx APIs compile for wasm32 without host parser dependencies. Delta: resource/005, build/001–003, derive/001–004, wasm/001. Path: Hemplate template input -> build inspection and macro expansion -> generated contract artifact -> unchanged rebuild or actionable compile failure -> portable server target. Build: Tighten semantic fingerprinting and no-op writes, source-path diagnostics, macro preservation and compile failures, and the target dependency boundary. Risk: Nondeterministic artifacts cause rebuild churn and ABI drift; leaked host parsers make the promised server target unusable. Checks: Existing deterministic/no-op build and compile-fail tests; source I/O diagnostic test; wasm32 check plus normal dependency-tree exclusion; tests/redgate_test.sh; redgate check for the slice IDs. Non-goals: Changing Hemplate syntax, parser internals, or package publication. Residual risk: None after focused checks and the repository’s required workspace gates pass. State: Ready Blocked by: none