feat: add domformat package and canonical gallery corpus

[alowpoly]

Summary

• add the private source-only @layoutit/polycss-domformat workspace package with the closed domformat@0 / polycss-3d@0 retained-DOM contract
• support canonical UTF-8 JSON documents with digest-bound external sibling CSS and image resources; no .dom, archive, gzip, or embedded-package transport
• add deterministic canonical documents for all 304 current Gallery presets, plus generation, structural verification, fresh-regeneration, and browser-proof tooling
• keep the private package in workspace tests and builds while excluding it from public versioning and publication
• share Gallery animation selection and responsive presentation helpers with the corpus producer to prevent drift
• reject post-fit triangle basis collapse, map interaction input/cursors through the current presentation appearance, and align the independent readers with the fixed v0 META and input contracts

Architecture

The package remains producer-neutral and independent of Morph and renderer internals. Producer parsing, preparation, lowering, and product adapters remain outside domformat. No PolyCSS or Morph producer integration is added here.

The exact runtime lifecycle is validate -> construct -> bind -> initialize -> publish -> destroy. Partial lifecycle failures roll back DOM, styles, listeners, observers, object URLs, and host changes; destroy is idempotent.

For the optional pointer/grab interaction, button.hold intentionally freezes motion by zeroing spring velocity; release resumes from rest.

Package code is MIT. Per-model third-party Gallery licensing and attribution remain recorded in the corpus catalog and are not relicensed as MIT.

The checked Gallery corpus adds approximately 176 MiB: 304 JSON documents, 216 unique external assets, and one shared CSS resource.

Verification

• pnpm --filter @layoutit/polycss-domformat test:release — 160/160 tests, independent Python and format-level N-version reader corpora, exact real-Chromium browser proofs, clean-installed deterministic same-toolchain tarball
• pnpm gallery:domformat:verify
• pnpm gallery:domformat:verify:fresh
• representative retained-DOM/browser proofs across B, U, S, and voxel strategies
• running-human animation proof — 30/30 canonical ticks within the declared pixel-difference bound
• pnpm test
• pnpm build
• git diff --check

The package gate produced 62 exactly allowlisted entries and two byte-identical archives under Node v22.12.0/npm 10.9.0; clean-install API, CLI, declaration, and independent-producer smoke checks passed. Exact .tgz bytes are toolchain-scoped and are not claimed stable across npm versions or platforms.

Proof boundary

The committed corpus is a Chromium Gallery-strategy snapshot. Browser proof establishes retained-DOM and selected-tick browser equivalence within strict reported bounds; it is not native or universal cross-engine parity. Animated entries capture the Gallery-selected clip at canonical 30 Hz, not every clip in every source model.