@1agh/maude 1.0.9 → 1.2.0

package/apps/studio/test/canvas-shell-base.test.ts

@@ -1,107 +0,0 @@
-// The canvas shell under a based origin — Cloud Phase 27 (DDR-209).
-//
-// The fleet's canvas origin puts the project in the PATH:
-// `canvas.<zone>/<project>/_canvas-shell.html`. Every URL the shell builds must
-// therefore hang off the path it was SERVED from, not off the origin root —
-// otherwise the browser asks for `canvas.<zone>/.design/…`, the data plane reads
-// `.design` as a project name, and every dynamic import fails with
-// "Failed to fetch dynamically imported module".
-//
-// Two mechanisms, because the shell has two kinds of URL and only one of them
-// can be built at runtime:
-//
-//   built by JS        → `withCap()` prefixes the derived base.
-//   the IMPORTMAP      → cannot be: it must be static and present before any
-//                        module loads, and the server cannot rewrite it either
-//                        (the data plane strips the project segment before the
-//                        request arrives, so only the browser knows the base).
-//                        Importmap addresses resolve against the DOCUMENT's base
-//                        URL, so `./` gets it for free.
-
-import { describe, expect, test } from 'bun:test';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-const SHELL = readFileSync(
-  join(import.meta.dir, '..', '..', '..', 'plugins', 'design', 'templates', '_shell.html'),
-  'utf8'
-);
-
-/** The shell's own derivation, mirrored so the test breaks when it changes. */
-const baseOf = (pathname: string) => pathname.replace(/\/_canvas-shell(\.html)?$/, '');
-
-describe('the canvas shell hangs off the path it was served from', () => {
-  test('the base is derived from location, and is empty at the origin root', () => {
-    expect(baseOf('/alligators/_canvas-shell.html')).toBe('/alligators');
-    expect(baseOf('/alligators/_canvas-shell')).toBe('/alligators');
-    expect(baseOf('/_canvas-shell.html')).toBe('');
-    expect(baseOf('/_canvas-shell')).toBe('');
-    expect(SHELL).toContain("location.pathname.replace(/\\/_canvas-shell(\\.html)?$/, '')");
-  });
-
-  test('NO importmap entry is origin-absolute', () => {
-    // `"/_canvas-runtime/react.js"` resolves against the origin and drops the
-    // project. This is the one that cannot be fixed at runtime, so it is the one
-    // most worth pinning.
-    expect(SHELL).not.toContain('"/_canvas-runtime/');
-    expect(SHELL).toContain('"./_canvas-runtime/');
-  });
-
-  test('a relative importmap address resolves under the project, and at the root', () => {
-    // The actual browser rule, exercised rather than asserted.
-    expect(
-      new URL(
-        './_canvas-runtime/react.js',
-        'https://canvas.cloud.maude.sh/alligators/_canvas-shell.html?t=x'
-      ).href
-    ).toBe('https://canvas.cloud.maude.sh/alligators/_canvas-runtime/react.js');
-    expect(
-      new URL('./_canvas-runtime/react.js', 'http://localhost:4399/_canvas-shell.html').href
-    ).toBe('http://localhost:4399/_canvas-runtime/react.js');
-  });
-
-  test('withCap prefixes the base AND carries the capability', () => {
-    const base = '/alligators';
-    const cap = 'cap-1';
-    const withCap = (u: string) => {
-      const abs = u.startsWith('/') ? base + u : u;
-      return cap ? abs + (abs.includes('?') ? '&' : '?') + 't=' + encodeURIComponent(cap) : abs;
-    };
-    expect(withCap('/.design/ui/Home.tsx')).toBe('/alligators/.design/ui/Home.tsx?t=cap-1');
-    expect(withCap('/_api/canvas-meta?file=x')).toBe('/alligators/_api/canvas-meta?file=x&t=cap-1');
-    expect(SHELL).toContain("const abs = u.startsWith('/') ? base + u : u;");
-  });
-
-  test('EVERY absolute URL the shell requests goes through the base', () => {
-    // The systematic version of the three separate bugs this file records. Each
-    // was one absolute path that nobody had thought about: the module, then the
-    // importmap, then `comment-mount.js` — and the last one aborted the mount
-    // outright, because it is imported in the same `Promise.all` as the canvas.
-    //
-    // So this asserts the SHAPE rather than a list: nothing in the shell may
-    // form a request from an origin-absolute literal.
-    const offenders: string[] = [];
-    for (const re of [
-      /import\(\s*['"`]\//g, //  import('/…')
-      /fetch\(\s*['"`]\//g, //   fetch('/…')
-      /\.href\s*=\s*['"`]\//g, // el.href = '/…'
-      /\.src\s*=\s*['"`]\//g, //  el.src  = '/…'
-      /location\.host\s*\+\s*['"`]\//g, // ws://host + '/…'
-    ]) {
-      for (const m of SHELL.matchAll(re)) offenders.push(m[0].trim());
-    }
-    expect(offenders).toEqual([]);
-  });
-
-  test('the URLs that DO appear are the ones withCap builds', () => {
-    // Belt to the brace above: the four paths the shell legitimately names must
-    // each be reachable only through `withCap`.
-    for (const path of ['/_client/comment-mount.js', '/_api/canvas-meta']) {
-      const at = SHELL.indexOf(path);
-      expect(at).toBeGreaterThan(0);
-      // `withCap(` appears within the same expression, before the literal.
-      const before = SHELL.slice(Math.max(0, at - 120), at);
-      expect(before).toContain('withCap(');
-    }
-  });
-});

package/apps/studio/test/canvas-shell-build-error.test.ts

@@ -1,52 +0,0 @@
-// Spike finding M8 (studyfi-design AWS run, 2026-08-20) — the mount's catch
-// showed `err.stack`, which for a failed dynamic import is the bare
-// "TypeError: Failed to fetch dynamically imported module". The 422 body the
-// server wrote ("Canvas build error: this canvas imports …") names the culprit
-// and the rule — and the browser throws it away on non-2xx. The spike spent
-// several rounds on token/cookie hypotheses before a manual curl surfaced the
-// body.
-//
-// The shell is a static template, so this suite pins the WIRING the way
-// canvas-shell-base.test.ts does: the diagnosis helper exists, and both import
-// failure paths (initial mount + soft reload) route through it instead of
-// printing the TypeError.
-
-import { describe, expect, test } from 'bun:test';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-const SHELL = readFileSync(
-  join(import.meta.dir, '..', '..', '..', 'plugins', 'design', 'templates', '_shell.html'),
-  'utf8'
-);
-
-describe('a canvas build error reaches the person (M8)', () => {
-  test('the shell carries the import-failure diagnosis helper', () => {
-    expect(SHELL).toContain('function diagnoseImportFailure(');
-    // It refetches the module URL to recover the discarded response body…
-    expect(SHELL).toMatch(/diagnoseImportFailure[\s\S]{0,400}fetch\(url/);
-    // …and shows the body, not just the status line.
-    expect(SHELL).toMatch(/r\.text\(\)/);
-  });
-
-  test('the initial mount catch routes through the diagnosis, not err.stack', () => {
-    expect(SHELL).toContain('diagnoseImportFailure(canvasUrl, err).then(showError)');
-    // The old shape — showError straight from the stack — must not come back.
-    expect(SHELL).not.toContain('showError((err && err.stack) || String(err))');
-  });
-
-  test('the soft-reload holding toast gets the same diagnosis', () => {
-    const soft = SHELL.slice(
-      SHELL.indexOf('function softReload'),
-      SHELL.indexOf('function softReload') + 1500
-    );
-    expect(soft).toContain('diagnoseImportFailure(canvasUrl, err)');
-  });
-
-  test('a 2xx refetch falls back to the original error — the diagnosis never masks a module-level throw', () => {
-    // If the module fetches fine, the failure was inside the module (a runtime
-    // throw at import time). Showing an "HTTP 200" line there would point the
-    // person at the network when the bug is in their code.
-    expect(SHELL).toMatch(/if \(r\.ok\) return fallback/);
-  });
-});

package/apps/studio/test/canvas-url.test.ts

@@ -1,138 +0,0 @@
-// DDR-093 — canvasUrl() token-resolution. Regression guard for the
-// "non-default-DS UI canvas renders unstyled" bug: every `ui/*.tsx` authored
-// under a non-default design system used to load designSystems[0]'s tokens
-// (scoped to a different `.<rootClass>` subtree) so every `var(--*)` went
-// undefined and the canvas rendered white.
-
-import { describe, expect, test } from 'bun:test';
-
-import { canvasUrl, urlOf } from '../client/canvas-url.js';
-
-// Mirrors this repo's real multi-DS config: `project` is the default (ds0),
-// `maude` is the non-default one that the bug broke.
-const cfg = {
-  designRel: '.design',
-  designSystems: [
-    { name: 'project', path: 'system/project', tokensCssRel: 'system/project/colors_and_type.css' },
-    { name: 'maude', path: 'system/maude', tokensCssRel: 'system/maude/colors_and_type.css' },
-  ],
-};
-
-function paramsOf(url: string): URLSearchParams {
-  const qs = url.split('?')[1] ?? '';
-  return new URLSearchParams(qs);
-}
-
-describe('canvasUrl — per-canvas design-system token resolution', () => {
-  test('explicit opts.ds resolves a non-default DS canvas to its OWN tokens', () => {
-    const p = paramsOf(canvasUrl('.design/ui/Studio.tsx', cfg, { ds: 'maude' }));
-    expect(p.get('tokens')).toBe('system/maude/colors_and_type.css');
-    expect(p.get('components')).toBe('system/maude/preview/_components.css');
-  });
-
-  test('RCA interface form — relative path + opts.ds', () => {
-    const p = paramsOf(canvasUrl('ui/Studio.tsx', cfg, { ds: 'maude' }));
-    expect(p.get('tokens')).toBe('system/maude/colors_and_type.css');
-    expect(p.get('components')).toBe('system/maude/preview/_components.css');
-  });
-
-  test('opts.ds = the default DS resolves to ds0 tokens', () => {
-    const p = paramsOf(canvasUrl('.design/ui/Studio.tsx', cfg, { ds: 'project' }));
-    expect(p.get('tokens')).toBe('system/project/colors_and_type.css');
-    expect(p.get('components')).toBe('system/project/preview/_components.css');
-  });
-
-  test('cfg.canvasDesignSystems map drives resolution when opts.ds is absent', () => {
-    const withMap = { ...cfg, canvasDesignSystems: { '.design/ui/Studio.tsx': 'maude' } };
-    const p = paramsOf(canvasUrl('.design/ui/Studio.tsx', withMap));
-    expect(p.get('tokens')).toBe('system/maude/colors_and_type.css');
-    expect(p.get('components')).toBe('system/maude/preview/_components.css');
-  });
-
-  test('opts.ds wins over the map', () => {
-    const withMap = { ...cfg, canvasDesignSystems: { '.design/ui/Studio.tsx': 'maude' } };
-    const p = paramsOf(canvasUrl('.design/ui/Studio.tsx', withMap, { ds: 'project' }));
-    expect(p.get('tokens')).toBe('system/project/colors_and_type.css');
-  });
-
-  test('unknown / no DS falls back to ds0 (single-DS + legacy behavior intact)', () => {
-    const p = paramsOf(canvasUrl('.design/ui/Plain.tsx', cfg, {}));
-    expect(p.get('tokens')).toBe('system/project/colors_and_type.css');
-    expect(p.get('components')).toBe('system/project/preview/_components.css');
-  });
-
-  test('an unknown DS name (not in designSystems) falls back to ds0, never undefined', () => {
-    const p = paramsOf(canvasUrl('.design/ui/Ghost.tsx', cfg, { ds: 'does-not-exist' }));
-    expect(p.get('tokens')).toBe('system/project/colors_and_type.css');
-  });
-
-  test('specimen paths stay path-resolved and are unaffected by the map', () => {
-    const withWrongMap = {
-      ...cfg,
-      // A bogus map entry must NOT override the specimen branch.
-      canvasDesignSystems: { '.design/system/maude/preview/Buttons.tsx': 'project' },
-    };
-    const p = paramsOf(canvasUrl('.design/system/maude/preview/Buttons.tsx', withWrongMap));
-    expect(p.get('tokens')).toBe('system/maude/colors_and_type.css');
-    expect(p.get('layout')).toBe('system/maude/preview/_layout.css');
-    expect(p.get('components')).toBe('system/maude/preview/_components.css');
-  });
-
-  test('the bug it guards against: ds0 is the WRONG DS for a maude canvas', () => {
-    // Documents the failure mode — with neither opts.ds nor a map entry the
-    // resolver returns designSystems[0] (project), which is exactly what broke a
-    // maude canvas before DDR-093. The fix is that the map now supplies 'maude'.
-    const p = paramsOf(canvasUrl('.design/ui/Studio.tsx', cfg));
-    expect(p.get('tokens')).toBe('system/project/colors_and_type.css'); // ds0 — wrong for maude
-    const fixed = paramsOf(
-      canvasUrl('.design/ui/Studio.tsx', {
-        ...cfg,
-        canvasDesignSystems: { '.design/ui/Studio.tsx': 'maude' },
-      })
-    );
-    expect(fixed.get('tokens')).toBe('system/maude/colors_and_type.css'); // fixed
-  });
-
-  test('non-tsx paths bypass the shell and return a direct URL', () => {
-    expect(canvasUrl('.design/ui/legacy.html', cfg)).toBe(urlOf('.design/ui/legacy.html'));
-  });
-
-  // Cloud Phase 25 C2 — the viewer role rides into the canvas as ?ro=1 so the
-  // iframe chrome is read-only from its very first paint (boot-static, no
-  // postMessage race).
-  test('cfg.readOnly stamps ro=1; absent/false omits it', () => {
-    expect(paramsOf(canvasUrl('.design/ui/Studio.tsx', { ...cfg, readOnly: true })).get('ro')).toBe(
-      '1'
-    );
-    expect(paramsOf(canvasUrl('.design/ui/Studio.tsx', cfg)).get('ro')).toBeNull();
-    expect(
-      paramsOf(canvasUrl('.design/ui/Studio.tsx', { ...cfg, readOnly: false })).get('ro')
-    ).toBeNull();
-  });
-});
-
-// Cloud Phase 27 (DDR-209) — the canvas origin's capability.
-//
-// In the cloud the canvas origin is a cookieless, cross-site hostname: a cookie
-// scoped widely enough to cover it would be readable by the untrusted canvas
-// content itself, which is the one thing the DDR-054 split exists to prevent.
-// So the capability rides in the URL. It reaches `cfg` through the `/_config`
-// projection — which silently dropped it once, and would have 401'd every
-// canvas iframe in production (see `config-projection.test.ts`).
-
-test('a canvas URL carries the capability when the server minted one', () => {
-  const url = canvasUrl('.design/ui/Home.tsx', {
-    designRel: '.design',
-    canvasOrigin: 'https://canvas.cloud.maude.sh/alligators',
-    canvasToken: 'cap-abc123',
-  });
-  expect(url.startsWith('https://canvas.cloud.maude.sh/alligators/_canvas-shell.html?')).toBe(true);
-  expect(new URL(url).searchParams.get('t')).toBe('cap-abc123');
-});
-
-test('a desktop URL is byte-identical to before — no capability, no query', () => {
-  // The loopback canvas origin needs none, so this must not change for the
-  // shell that has always worked.
-  const url = canvasUrl('.design/ui/Home.tsx', { designRel: '.design' });
-  expect(new URL(url, 'http://x').searchParams.has('t')).toBe(false);
-});

package/apps/studio/test/canvas-wheel-delta.test.ts

@@ -1,42 +0,0 @@
-// canvas-wheel-delta — issue #94 dogfood report: mouse-wheel panning in the
-// canvas is very slow. Root cause: `onWheel` fed raw `WheelEvent.deltaX`/
-// `deltaY` straight into `panBy` as CSS pixels, but the Wheel Events spec
-// lets a browser report deltas in pixel/line/page units (`deltaMode`).
-// Physical mice on Firefox (and some browser/OS combos elsewhere) report
-// LINE-mode deltas — a single integer like 3 per notch — which, read as
-// pixels, panned the canvas only a few px per wheel notch. Trackpads report
-// pixel-mode deltas already, so trackpad panning felt fine while mouse-wheel
-// panning felt frozen. See .ai/logs/rca/issue-94-wheel-pan-slow.md.
-//
-// `wheelDeltaToPixels` is a pure function (no DOM needed) so this test
-// doesn't need happy-dom, unlike canvas-zoom-floor.test.ts's computeFit case.
-
-import { describe, expect, test } from 'bun:test';
-
-import { wheelDeltaToPixels } from '../canvas-lib.tsx';
-
-describe('wheelDeltaToPixels — normalizes WheelEvent units (issue #94)', () => {
-  test('pixel mode (deltaMode 0) passes the value through unchanged', () => {
-    expect(wheelDeltaToPixels(100, 0, 800)).toBe(100);
-    expect(wheelDeltaToPixels(-42.5, 0, 800)).toBe(-42.5);
-  });
-
-  test('line mode (deltaMode 1) scales a small per-notch delta up to a pixel-range step', () => {
-    // The regression: before the fix, `onWheel` fed the raw delta straight
-    // into `panBy`, so a line-mode notch of 3 panned only 3 CSS pixels —
-    // reproducing the "very slow" mouse-wheel report. This asserts the FIXED
-    // behavior: scaled up to a magnitude comparable to a trackpad's
-    // pixel-mode delta (~100 per gesture step). Pre-fix, `wheelDeltaToPixels`
-    // didn't exist and `onWheel` used the raw `3` — this assertion fails
-    // against that old code path (3 !== 48).
-    const raw = 3;
-    const scaled = wheelDeltaToPixels(raw, 1, 800);
-    expect(scaled).toBe(48);
-    expect(scaled).not.toBe(raw);
-  });
-
-  test('page mode (deltaMode 2) scales by the supplied page size', () => {
-    expect(wheelDeltaToPixels(1, 2, 800)).toBe(800);
-    expect(wheelDeltaToPixels(-2, 2, 600)).toBe(-1200);
-  });
-});

package/apps/studio/test/canvas-zoom-floor.test.ts

@@ -1,73 +0,0 @@
-// canvas-zoom-floor — issue #91 dogfood report: dragging an artboard across a
-// large board, the user can't zoom out far enough to complete the move in one
-// motion. Root cause: `clampZoom` applies a single hard-coded floor to every
-// viewport write, including the programmatic `fit()` path — a board wider
-// than ~10x the viewport could never be framed whole. See
-// .ai/logs/rca/issue-91-canvas-zoom-floor.md.
-//
-// canvas-lib.tsx pulls in a React/DOM dependency graph, so we register
-// happy-dom for this file (like camera-reveal.test.tsx) before importing.
-
-import { afterAll, beforeAll, describe, expect, test } from 'bun:test';
-import { GlobalRegistrator } from '@happy-dom/global-registrator';
-
-beforeAll(() => {
-  GlobalRegistrator.register();
-});
-afterAll(() => {
-  GlobalRegistrator.unregister();
-});
-
-import { clampZoom, computeFit } from '../canvas-lib.tsx';
-
-function fakeHost(clientWidth: number, clientHeight: number): HTMLElement {
-  const el = document.createElement('div');
-  Object.defineProperty(el, 'clientWidth', { value: clientWidth });
-  Object.defineProperty(el, 'clientHeight', { value: clientHeight });
-  return el;
-}
-
-describe('clampZoom — the interactive zoom floor (issue #91)', () => {
-  test('a deep zoom-out below the OLD 0.1 floor is no longer clamped', () => {
-    expect(clampZoom(0.05)).toBe(0.05);
-    expect(clampZoom(0.02)).toBe(0.02);
-  });
-
-  test('still clamps below the new floor', () => {
-    expect(clampZoom(0.0001)).toBe(0.02);
-    expect(clampZoom(-5)).toBe(0.02);
-  });
-
-  test('still clamps above the max and normalizes non-finite input', () => {
-    expect(clampZoom(99)).toBe(4);
-    expect(clampZoom(Number.NaN)).toBe(1);
-    expect(clampZoom(Number.POSITIVE_INFINITY)).toBe(1);
-  });
-});
-
-describe('computeFit → clampZoom — fit() can now frame a wide board (issue #91)', () => {
-  test('a board ~20x the viewport width computes a zoom the old floor would have clamped up', () => {
-    // Viewport 1000x800; board 20000 wide — the exact "more than a screenful
-    // of artboards" shape from the report. Ideal fit zoom is well under 0.1.
-    const host = fakeHost(1000, 800);
-    const fit = computeFit([{ x: 0, y: 0, w: 20000, h: 800 }], host, 24);
-
-    expect(fit.zoom).toBeLessThan(0.1); // the bug: old floor would have clamped this
-    expect(fit.zoom).toBeGreaterThanOrEqual(0.02); // still within the new interactive floor
-
-    // The regression proper: applying the viewport funnel's clamp must be a
-    // no-op for this value now — before the fix (ZOOM_MIN = 0.1) this would
-    // have raised fit.zoom back up to 0.1, cropping the board.
-    expect(clampZoom(fit.zoom)).toBe(fit.zoom);
-  });
-
-  test('an extremely wide board (>50x viewport) still bottoms out at the interactive floor', () => {
-    const host = fakeHost(1000, 800);
-    const fit = computeFit([{ x: 0, y: 0, w: 100000, h: 800 }], host, 24);
-
-    // The ideal fit zoom is far below even the new floor — clampZoom must
-    // still protect the interactive floor for pathological board sizes.
-    expect(fit.zoom).toBeLessThan(0.02);
-    expect(clampZoom(fit.zoom)).toBe(0.02);
-  });
-});

package/apps/studio/test/capture-core.test.ts

@@ -1,32 +0,0 @@
-// capture-core.test.ts — pure-logic guards of the shared capture spine
-// (DDR-231). The DOM-dependent half (svgForElement, rasterizeSvg) is exercised
-// end-to-end by the fidelity gate (plan T6) — no DOM emulation here.
-
-import { describe, expect, test } from 'bun:test';
-
-import {
-  assertRasterSizeOk,
-  MAX_OUTPUT_BYTES,
-  MAX_OUTPUT_SIDE_PX,
-} from '../exporters/capture-core.ts';
-
-describe('assertRasterSizeOk — the raster render guard', () => {
-  test('a 1440×900 artboard at 2× passes', () => {
-    expect(() => assertRasterSizeOk(1440, 900, 2)).not.toThrow();
-  });
-
-  test('a 600dpi A0 poster still fits (the guard ceiling rationale)', () => {
-    // 9933×14043 px ≈ 558MB RGBA — deliberately inside the ~600MB ceiling.
-    expect(() => assertRasterSizeOk(9933 / 6.25, 14043 / 6.25, 6.25)).not.toThrow();
-  });
-
-  test('exceeding the side ceiling throws with an actionable max-DPI hint', () => {
-    expect(() => assertRasterSizeOk(MAX_OUTPUT_SIDE_PX, 900, 2)).toThrow(/max supported DPI/);
-  });
-
-  test('exceeding the byte ceiling throws even when both sides fit', () => {
-    // 15000×15000 × 4B = 900MB > ceiling while each side < 16000.
-    expect(15000 * 15000 * 4).toBeGreaterThan(MAX_OUTPUT_BYTES);
-    expect(() => assertRasterSizeOk(15000, 15000, 1)).toThrow(/render guard/);
-  });
-});

package/apps/studio/test/capture-determinism-shape.test.ts

@@ -1,135 +0,0 @@
-// Source-shape gates for capture determinism.
-//
-// These guard properties that only manifest in a browser under load, which CI
-// has no way to run — `test/exporters/pw-launch.test.ts` says as much ("the
-// launch path itself is integration-shape (needs a real browser)"), and
-// `test/export-shim-multi-capture.test.ts` exists precisely because of it. So,
-// in that same house style, the FIX SHAPE is asserted at the source level.
-//
-// Why these particular shapes: the plan's original premise was that frame-step
-// capture is "deterministic by construction" — a doc comment in video-comp.tsx
-// with nothing enforcing it. It was not true. A seek could fail silently, and
-// the capture wait could give up on a wall-clock timer and screenshot a stale
-// frame. Serially both were survivable; under any parallel capture neither is.
-// If someone deletes these guards, the resulting bug is a valid-looking video
-// with wrong frames — invisible to every other test we have.
-
-import { describe, expect, test } from 'bun:test';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-const STUDIO = join(import.meta.dir, '..');
-const read = (rel: string) => readFileSync(join(STUDIO, rel), 'utf8');
-
-describe('the seek bridge must not report a seek that did not happen', () => {
-  const src = () => read('video-comp.tsx');
-
-  test('no empty catch swallows a failed seekTo', () => {
-    // The exact regression: `catch { /* comment only */ }` around the seek.
-    const emptyCatch = /catch\s*\{\s*(?:\/\*[\s\S]*?\*\/|\/\/[^\n]*)?\s*\}/g;
-    const body = src();
-    const seekRegion = body.slice(
-      body.indexOf('__maude_seek__ = async'),
-      body.indexOf('Ordinary-artboard fallback')
-    );
-    expect(seekRegion.length).toBeGreaterThan(0);
-    expect(seekRegion.match(emptyCatch)).toBeNull();
-  });
-
-  test('an unlanded seek throws rather than resolving', () => {
-    expect(src()).toContain('refusing to report a seek that did not happen');
-  });
-
-  test('failures are counted where the shim can read them', () => {
-    expect(src()).toContain('__maude_seek_failures__');
-  });
-
-  test('a cold Player still gets bounded retries — the fix is not "fail faster"', () => {
-    expect(src()).toContain('SEEK_ATTEMPTS');
-    expect(src()).toContain('seekEntryWithRetry');
-  });
-});
-
-describe('the capture shim must refuse a capture built on stale frames', () => {
-  test('it reads the in-page failure count and throws on any', () => {
-    const shim = read('bin/_video-playwright.mjs');
-    expect(shim).toContain('__maude_seek_failures__');
-    expect(shim).toMatch(/seekFailures\s*>\s*0/);
-    expect(shim).toContain('Refusing to encode');
-  });
-
-  test('the refusal happens BEFORE the encoded output is written', () => {
-    const shim = read('bin/_video-playwright.mjs');
-    const guardAt = shim.indexOf('seekFailures');
-    const writeAt = shim.indexOf('writeFileSync(out, Buffer.from(enc.b64');
-    expect(guardAt).toBeGreaterThan(0);
-    expect(writeAt).toBeGreaterThan(0);
-    // Ordering is the whole point — a check after the write ships the bad file.
-    expect(guardAt).toBeLessThan(writeAt);
-  });
-});
-
-describe('encoder guards (unit-shape — these run without a browser)', () => {
-  const enc = () => read('exporters/video-encode-lib.ts');
-
-  test('a mismatched frame is rejected, never silently resampled', () => {
-    const src = enc();
-    expect(src).toContain('refusing to resample');
-    // The check must precede the draw, or the resample already happened.
-    const guardAt = src.indexOf('refusing to resample');
-    const drawAt = src.indexOf('vstate.ctx.drawImage(bmp, 0, 0');
-    expect(guardAt).toBeGreaterThan(0);
-    expect(guardAt).toBeLessThan(drawAt);
-  });
-
-  test("latencyMode is pinned to 'quality' — 'realtime' may drop frames", () => {
-    expect(enc()).toContain("latencyMode: 'quality'");
-  });
-
-  test('the encoder canvas is NOT cleared between frames — pinned deliberately', () => {
-    // Current behaviour: a transparent artboard ghosts the previous frame,
-    // because nothing clears the canvas before drawImage. That is a real defect
-    // for transparent comps, but changing it is a visual change to every export
-    // and belongs in its own change with its own before/after. Pinned here so
-    // the next person changes it ON PURPOSE rather than as a side effect.
-    expect(enc()).not.toContain('clearRect');
-  });
-});
-
-describe('bundle cache paths must be content-addressed', () => {
-  test('no fixed-name temp bundle two servers could race on', () => {
-    const src = read('exporters/_browser-bundles.ts');
-    expect(src).toContain('writeHashedBundle');
-    expect(src).not.toContain("'maude-video-encode-lib.mjs'");
-    expect(src).not.toContain("'maude-video-render-lib.mjs'");
-  });
-});
-
-describe('the video shim must guard its output size', () => {
-  test('it calls assertRenderOutputSizeOk like the pdf shim does', () => {
-    const shim = read('bin/_video-playwright.mjs');
-    expect(shim).toContain(
-      "assertRenderOutputSizeOk(clip.width, clip.height, deviceScaleFactor, '_video-playwright')"
-    );
-  });
-});
-
-describe('timing telemetry must not break the summary contract', () => {
-  test('MAUDE_TIMING is filtered in _runtime.ts, not in an adapter', () => {
-    const rt = read('exporters/_runtime.ts');
-    expect(rt).toContain('TIMING_LINE');
-    expect(rt).toContain('onTiming');
-    // video.ts parses stdoutLines.at(-1) as its summary JSON — an unfiltered
-    // trailing diagnostic line would break EVERY video export.
-    const video = read('exporters/video.ts');
-    expect(video).toContain('stdoutLines.at(-1)');
-    expect(video).not.toContain('MAUDE_TIMING');
-  });
-
-  test('both capture paths emit it, so they are comparable', () => {
-    const shim = read('bin/_video-playwright.mjs');
-    expect(shim).toContain("path: 'frame-step'");
-    expect(shim).toContain("path: 'renderer'");
-    expect(shim).toContain('stageMs');
-  });
-});