ZZD public AI gateway · zzd_public_ai_gateway_v2
Resource: 09 · Advanced patterns / WebGL 手势 仓库
Canonical map: https://zzd.show/docs/ai/map.json
Full handbook: https://zzd.show/llms-full.txt

# Advanced Show patterns

## GSAP, smooth scroll, and staged interactions

Keep the actual timeline, trigger ranges, easing, scroll owner, RAF,
pointer state, and cleanup logic live. In the editor iframe, deliver
real wheel/touch input to the inner scroller and inspect its
`scrollTop/scrollHeight`, active index, transforms, and animation
progress. A static first screen or synthetic `.click()` is not proof.
Pin shared libraries and guard initialization if optional dependencies
fail.

## Topology, WebGL, WebGPU, canvas, and 3D

Upload models, textures, HDR/EXR, buffers, shaders, workers, wasm,
decoders, and data files with explicit roles. Preserve URL identity
when loaders cache resources. Validate binary headers, MIME, decode,
canvas bounds, nonblank pixels/render targets, time-separated motion,
pointer/scroll response, resize, reduced-power fallback, and context
failure. Avoid assuming a backbuffer read proves the visible result.

## Webcam and gesture input

- Camera use must be visible, purposeful, and initiated by an
  understandable user action.
- Ask browser permission normally; never bypass or trick consent.
- Provide denied, unavailable, loading, and no-camera fallbacks.
- Show an active-camera indicator and a reliable stop/release path.
- Process locally by default. Do not upload frames, biometric
  features, or background recordings unless the user explicitly
  requests a legitimate feature and the current privacy policy,
  consent, retention, and BaaS rules allow it.
- Do not fingerprint, identify people, infer sensitive traits, or
  keep the camera active after the experience stops.
- Test HTTPS, mobile orientation, mirrored coordinates, performance,
  keyboard/touch fallback, and blank/edit/embed permission behavior.

## GitHub or local repository import

Work only with a repository the user owns or is authorized to use.
Preserve its license and third-party notices where required. Inspect
source, routes, assets, environment variables, server assumptions,
and tests. Never expose a GitHub token, deploy key, `.env`, private
submodule, issue data, CI secret, or commit metadata that the user did
not ask to publish.

Map the client application into meaningful live Pieces. Upload
source-specific runtime assets; use pinned shared dependencies; map
persistent/server behavior to explicit BaaS resources or approved
services. Do not upload a repository archive or opaque `dist` page
and load it through an iframe. Validate the ZZD runtime independently
from the local development server.

## Public visual references

Observe public frontend behavior only. The user must own or be
licensed to publish the resulting code, copy, media, trademarks, and
likenesses. Do not access private APIs or credentials, clone an
identity, collect data, leave trackers, remove required notices,
bypass a trial/license/watermark, or claim that a percentage of visual
change creates legal permission. Replace source-specific identity/
assets unless rights are clear.