@downdraft/engine 0.1.2-alpha.5 → 0.3.0

package/libraries/gamepad/src/feed-input.ts

@@ -57,7 +57,7 @@ export function writePadToInput(
     writer.setGamepadButton(playerIdx, b, (d.buttonsLo & (1 << b)) !== 0);
   }
   if (bindings) {
-    for (const bind of bindings) {
+    for (const bind of bindings.values()) {
       let active = false;
       if (bind.button !== undefined) {
         active = (d.buttonsLo & (1 << bind.button)) !== 0;

package/libraries/gamepad/src/hub.ts

@@ -171,10 +171,10 @@ export class GamepadHub {
           ffSupported: (s.flags & PAD_FLAG.FF_SUPPORTED) !== 0,
         });
         this.devices.set(slot, dev);
-        for (const cb of this.listeners.connect) cb(dev);
+        for (const cb of this.listeners.connect.values()) cb(dev);
       } else if (!connected && existing) {
         this.devices.delete(slot);
-        for (const cb of this.listeners.disconnect) cb(existing);
+        for (const cb of this.listeners.disconnect.values()) cb(existing);
       }
     }
     this.lastSeq = this.reader.getSequence();

package/libraries/gamepad/src/source-sab.ts

@@ -53,9 +53,9 @@ export class SabGamepadSource implements GamepadSource {
     for (let i = 0; i < GAMEPAD_MAX_SLOTS; i++) {
       if (!(changed & (1 << i))) continue;
       if (mask & (1 << i)) {
-        for (const cb of this.connectCbs) cb(i);
+        for (const cb of this.connectCbs.values()) cb(i);
       } else {
-        for (const cb of this.disconnectCbs) cb(i);
+        for (const cb of this.disconnectCbs.values()) cb(i);
       }
     }
     this.knownMask = mask;

package/libraries/gamepad/src/sysfs-enrich.ts

@@ -58,7 +58,7 @@ async function findBatteryLevel(macHint: string | null): Promise<number | undefi
   try {
     const psDir = "/sys/class/power_supply";
     if (!existsSync(psDir)) return undefined;
-    for (const entry of await fs.readdir(psDir)) {
+    for (const entry of (await fs.readdir(psDir)).values()) {
       const macPath = join(psDir, entry, "mac");
       if (existsSync(macPath)) {
         const mac = (await fs.readFile(macPath, "utf-8")).trim().toLowerCase();
@@ -98,7 +98,7 @@ export class SysfsGamepadEnricher {
   async enrich(slots: GamepadDeviceSlot[]): Promise<EnrichResult[]> {
     if (process.platform !== "linux") return [];
     const out: EnrichResult[] = [];
-    for (const s of slots) {
+    for (const s of slots.values()) {
       if (s.eventNode < 0) continue;
       const r = await this.enrichSlot(s);
       out.push(r);

package/libraries/gpu-kernels/src/kernel.ts

@@ -177,6 +177,7 @@ export class GpuKernel {
     const [, oy, oz] = this.outputSize;
     this.workgroupSize = opts.workgroupSize ?? (oy === 1 && oz === 1 ? [64, 1, 1] : [8, 8, 1]);
     const [wx, wy, wz] = this.workgroupSize;
+    this.label = opts.label ?? "gpu-kernel";
     const lim = this.device?.limits as {
       maxComputeWorkgroupSizeX?: number;
       maxComputeWorkgroupSizeY?: number;
@@ -192,7 +193,6 @@ export class GpuKernel {
         throw new Error(`kernel "${this.label}": workgroupSize ${wx}×${wy}×${wz} exceeds device limits`);
       }
     }
-    this.label = opts.label ?? "gpu-kernel";
     this.memoryBudget = opts.memoryBudget;
     this.extraUsage = opts.outputUsage ?? 0;
     this.externalResult = opts.outputBuffer ?? null;
@@ -586,7 +586,7 @@ export class GpuKernel {
     // Pre-validate against device limits — Adreno-class GPUs allow as few as
     // 16 storage buffers/stage and 256MB/binding, and wgpu otherwise reports a
     // generic "command buffer failed validation" at submit time.
-    const limits = this.device.limits as Record<string, number | undefined> | undefined;
+    const limits = this.device.limits as unknown as Record<string, number | undefined> | undefined;
     const maxStorage = limits?.maxStorageBuffersPerShaderStage ?? Infinity;
     const maxBinding = limits?.maxStorageBufferBindingSize ?? Infinity;
     const storageCount = unit.transpiled.bindings.length

package/libraries/gpu-kernels/src/transpile.ts

@@ -720,7 +720,7 @@ class Emitter {
         if (e.ty === "vec") {
           throw new KernelSyntaxError(`arrays can't live in locals — return them directly`, d.init);
         }
-        const widen = this.widened.has(name) && e.ty !== "f32" && e.ty !== "bool" && e.ty !== "vec";
+        const widen = this.widened.has(name) && e.ty !== "f32" && e.ty !== "bool";
         this.declare(name, widen ? "f32" : e.ty);
         if (node.kind === "const") this.consts.add(name);
         const kw = node.kind === "const" ? "let" : "var";

package/libraries/html-ui-kit/src/nav/nav-controller.ts

@@ -209,7 +209,7 @@ export class NavController {
 
     let best: NavNodeInfo | null = null;
     let bestScore = Infinity;
-    for (const n of cands) {
+    for (const n of cands.values()) {
       if (n === cur || !n.rect) continue;
       const r = n.rect;
       const nx = r.x + r.w / 2, ny = r.y + r.h / 2;

package/libraries/html-ui-kit/src/nav/nav-input.ts

@@ -50,7 +50,7 @@ export class PadNavDriver {
       repeatDelayMs: opts.repeatDelayMs ?? 400,
       repeatIntervalMs: opts.repeatIntervalMs ?? 130,
     };
-    for (const d of ["up", "down", "left", "right"] as const) {
+    for (const d of (["up", "down", "left", "right"] as const).values()) {
       this.dirs.set(d, { held: false, since: 0, lastFire: 0 });
     }
   }
@@ -82,7 +82,7 @@ export class PadNavDriver {
     this.prevDirAxis = stickDir;
     if (stickDir) pressed.add(stickDir);
 
-    for (const [dir, st] of this.dirs) {
+    for (const [dir, st] of this.dirs.entries()) {
       const isDown = pressed.has(dir);
       if (isDown && !st.held) {
         st.held = true; st.since = now; st.lastFire = now;

package/libraries/networking/src/discovery.ts

@@ -206,19 +206,19 @@ export class LanDiscovery {
     const existing = this.peers.get(pkt.id);
     const peer: LanPeer = { ...pkt, host: rinfo.address, lastSeenMs: this.opts.now() };
     this.peers.set(pkt.id, peer);
-    if (!existing) for (const f of this.listeners.join) f(peer);
+    if (!existing) for (const f of this.listeners.join.values()) f(peer);
     else if (existing.name !== peer.name || existing.port !== peer.port
         || JSON.stringify(existing.meta) !== JSON.stringify(peer.meta)) {
-      for (const f of this.listeners.update) f(peer);
+      for (const f of this.listeners.update.values()) f(peer);
     }
   }
 
   private expire() {
     const cutoff = this.opts.now() - this.opts.ttlMs;
-    for (const [id, p] of this.peers) {
+    for (const [id, p] of this.peers.entries()) {
       if (p.lastSeenMs < cutoff) {
         this.peers.delete(id);
-        for (const f of this.listeners.leave) f(p);
+        for (const f of this.listeners.leave.values()) f(p);
       }
     }
   }
@@ -292,7 +292,7 @@ export class MdnsBrowser {
   }
 
   private requery() {
-    for (const t of this.watched) this.sendQuery(t);
+    for (const t of this.watched.values()) this.sendQuery(t);
     this.expire();
   }
 
@@ -320,7 +320,7 @@ export class MdnsBrowser {
 
   private expire() {
     const now = this.opts.now();
-    for (const [k, s] of this.table) {
+    for (const [k, s] of this.table.entries()) {
       if (s.lastSeenMs + s.ttlMs < now) this.table.delete(k);
     }
   }
@@ -334,7 +334,7 @@ export class MdnsBrowser {
       .filter((r): r is Extract<typeof r, { data: unknown }> => "data" in r);
     const now = this.opts.now();
     // PTR gives instance names; SRV/TXT/A for the same instance fill detail.
-    for (const r of recs) {
+    for (const r of recs.values()) {
       if (r.type !== "PTR" || !this.watched.has(r.name)) continue;
       const instance = r.data as string;
       const key = `${instance}@${r.name}`;
@@ -350,7 +350,7 @@ export class MdnsBrowser {
       );
       const txtMap: Record<string, string> = {};
       if (txt) {
-        for (const item of (txt.data as Buffer[])) {
+        for (const item of (txt.data as Buffer[]).values()) {
           const s = item.toString("utf8");
           const eq = s.indexOf("=");
           txtMap[eq < 0 ? s : s.slice(0, eq)] = eq < 0 ? "" : s.slice(eq + 1);

package/libraries/persistence/src/file-save-store.ts

@@ -205,7 +205,7 @@ export class FileSaveStore implements ISaveStore {
       if (opts?.blobs && Object.keys(opts.blobs).length > 0) {
         await fs.mkdir(tmpBlobsDir, { recursive: true });
         for (let _i = 0, _it = Object.entries(opts.blobs) as Array<[string, ArrayBuffer]>, _n = _it.length; _i < _n; _i++) { const [key, buf] = _it[_i];
-          const safeKey = key.replace(/[^a-zA-Z0-9_\-]/g, "_");
+          const safeKey = key.replace(/[^a-zA-Z0-9_-]/g, "_");
           await fs.writeFile(join(tmpBlobsDir, safeKey), new Uint8Array(buf));
           blobBytes += buf.byteLength;
         }
@@ -524,22 +524,22 @@ export class FileSaveStore implements ISaveStore {
 
   private slotPath(slot: string): string {
     // Sanitize slot name to prevent path traversal
-    const safe = slot.replace(/[^a-zA-Z0-9_\-]/g, "_");
+    const safe = slot.replace(/[^a-zA-Z0-9_-]/g, "_");
     return join(this.saveDir, safe + SAVE_EXT);
   }
 
   private blobsDirPath(slot: string): string {
-    const safe = slot.replace(/[^a-zA-Z0-9_\-]/g, "_");
+    const safe = slot.replace(/[^a-zA-Z0-9_-]/g, "_");
     return join(this.saveDir, safe + BLOBS_DIR_SUFFIX);
   }
 
   private thumbPath(slot: string): string {
-    const safe = slot.replace(/[^a-zA-Z0-9_\-]/g, "_");
+    const safe = slot.replace(/[^a-zA-Z0-9_-]/g, "_");
     return join(this.saveDir, safe + THUMB_EXT);
   }
 
   private propsPath(slot: string): string {
-    const safe = slot.replace(/[^a-zA-Z0-9_\-]/g, "_");
+    const safe = slot.replace(/[^a-zA-Z0-9_-]/g, "_");
     return join(this.saveDir, safe + PROPS_EXT);
   }
 

package/libraries/persistence/src/opfs-save-store.ts

@@ -262,7 +262,7 @@ export class OpfsSaveStore implements ISaveStore {
   // ── Path helpers ────────────────────────────────────────────────────────
 
   private sanitizeSlot(slot: string): string {
-    return slot.replace(/[^a-zA-Z0-9_\-]/g, "_");
+    return slot.replace(/[^a-zA-Z0-9_-]/g, "_");
   }
 
   private genDirName(gen: number): string {
@@ -371,7 +371,7 @@ export class OpfsSaveStore implements ISaveStore {
       if (opts?.blobs && Object.keys(opts.blobs).length > 0) {
         const blobsDir = await this.getBlobsDir(genDir, true);
         for (const [key, buf] of Object.entries(opts.blobs)) {
-          const safeKey = key.replace(/[^a-zA-Z0-9_\-]/g, "_");
+          const safeKey = key.replace(/[^a-zA-Z0-9_-]/g, "_");
           await this.writeBinaryFile(blobsDir, safeKey, new Uint8Array(buf));
           blobCount++;
         }

package/libraries/physics-rapier/src/realm-worker-script.ts

@@ -233,5 +233,5 @@ self.onmessage = async (e: MessageEvent) => {
   }
 };
 
-export { };
+
 

package/modules/controller-ui/src/index.ts

@@ -138,7 +138,7 @@ export function createControllerUi(): RendererModule {
         const dev = selected();
         if (!p || !dev) return;
         const ops = [];
-        for (const [bit] of BTN_LABELS) {
+        for (const [bit] of BTN_LABELS.values()) {
           ops.push({ op: "attr", sel: `#ctl-btn-${bit}`, name: "data-on",
             value: dev.pressed(bit) ? "true" : "false" } as const);
         }

package/modules/devtools/src/blitz/fonts.ts

@@ -0,0 +1,78 @@
+// ============================================================================
+// fonts.ts — bind the host's real system fonts into the devtools dock doc.
+//
+// The OSR rasterizer ships a single embedded DejaVu Sans as the fallback for
+// every generic family — legible, but `monospace` resolves to it too, so the
+// console/REPL/tree read as proportional sans. Same fix as cruiser's
+// libraries/app-shell/fonts.ts: resolve the user's actual sans + mono faces
+// via fontconfig (fc-match -f %{file}), register them as `ui://` blobs on the
+// HtmlUiHost before mount, and emit @font-face rules the dock stylesheet
+// binds ahead of the generic fallbacks. Any failure (no fc-match, non-Linux
+// host, unreadable file) leaves the embedded fallback in place.
+// ============================================================================
+
+import { execFileSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+
+/** Resource sink — HtmlUiHost.registerResource, or anything shaped like it. */
+type ResourceSink = { registerResource(url: string, bytes: Uint8Array | ArrayBuffer): void };
+
+interface Face { family: string; pattern: string; urlName: string; weight: number }
+
+// Blitz-dom only fetches a @font-face source whose format is detectable —
+// either an explicit format() hint or a file extension on the url — so the
+// urls carry the resolved file's real extension.
+const FACES: Face[] = [
+  { family: "DevTools Sans", pattern: "sans-serif", urlName: "sans", weight: 400 },
+  { family: "DevTools Sans", pattern: "sans-serif:weight=bold", urlName: "sans-bold", weight: 700 },
+  { family: "DevTools Mono", pattern: "monospace", urlName: "mono", weight: 400 },
+  { family: "DevTools Mono", pattern: "monospace:weight=bold", urlName: "mono-bold", weight: 700 },
+];
+
+/** `fc-match -f %{file}` for a fontconfig pattern; null when fc-match is
+ *  absent or the match isn't a font file Blitz can load. */
+function fcFontFile(pattern: string): string | null {
+  try {
+    const p = execFileSync("fc-match", ["-f", "%{file}", pattern], { timeout: 5000 }).toString().trim();
+    return /\.(ttf|otf|woff2?)$/i.test(p) ? p : null;
+  } catch {
+    return null;
+  }
+}
+
+function fontExt(path: string): string {
+  return path.match(/\.(ttf|otf|woff2?)$/i)?.[0] ?? ".ttf";
+}
+
+/**
+ * Register system sans + mono faces as `ui://` resources and return the
+ * @font-face CSS to prepend to the dock stylesheet. Returns "" when nothing
+ * registered — the stylesheet's named families then fail to resolve and the
+ * generic fallbacks (embedded DejaVu) apply.
+ *
+ * Call before mount — the doc backend applies resources synchronously and in
+ * order, so the first doc resolve sees them.
+ */
+export function registerDevtoolsFonts(sink: ResourceSink): string {
+  try {
+    // Both weights of a family are required: a 700 rule pointing at the
+    // regular file keeps bold text in-family instead of falling back.
+    const files = new Map<string, string>();
+    for (const f of FACES) files.set(f.urlName, fcFontFile(f.pattern) ?? "");
+    if (!files.get("sans")) return "";
+    if (!files.get("mono")) files.set("mono", files.get("sans")!);
+    if (!files.get("sans-bold")) files.set("sans-bold", files.get("sans")!);
+    if (!files.get("mono-bold")) files.set("mono-bold", files.get("mono")!);
+    let css = "";
+    for (const f of FACES) {
+      const file = files.get(f.urlName)!;
+      const url = `ui://devtools-fonts/${f.urlName}${fontExt(file)}`;
+      sink.registerResource(url, readFileSync(file));
+      css += `@font-face { font-family:'${f.family}'; font-weight:${f.weight}; src:url('${url}'); }\n`;
+    }
+    return css;
+  } catch {
+    // fc-match absent / unreadable font file — the embedded fallback applies.
+    return "";
+  }
+}

package/modules/devtools/src/blitz/host.ts

@@ -16,12 +16,13 @@ import { createLogger } from "@downdraft/engine";
 import { CdpBridge, DevtoolsBackend } from "@downdraft/engine/libraries/devtools";
 import { HtmlUiHost, type OsrDomEvent, type UiPanelHandle } from "@downdraft/engine/modules/html-ui";
 
+import { registerDevtoolsFonts } from "./fonts";
 import { ConsolePanel } from "./panels/console";
 import { ElementsPanel } from "./panels/elements";
 import { GpuPanel } from "./panels/gpu";
 import { PerformancePanel } from "./panels/performance";
 import { SnapshotPanel } from "./panels/snapshot";
-import type { DtPanel, DtPanelCtx } from "./panels/types";
+import { esc, type DtPanel, type DtPanelCtx } from "./panels/types";
 import { DEVTOOLS_CSS } from "./theme";
 
 const log = createLogger("info");
@@ -35,12 +36,17 @@ export interface DevtoolsUiSurface {
     z?: number;
     scale?: number;
     maxFps?: number;
+    /** Ease wheel deltas at pump cadence (html-ui PanelSpec.smoothWheel). */
+    smoothWheel?: boolean;
     interactive?: boolean;
     onEvent?: (ev: OsrDomEvent) => void;
   }): UiPanelHandle;
   /** Doc-backend capabilities — panels use incremental DOM ops only when
    *  the underlying cdylib provides them. */
   docCaps?(): { incrementalDom?: boolean };
+  /** Register a `ui://` resource (fonts) served to the dock doc — must run
+   *  before mount. Absent on surfaces that don't own a resource table. */
+  registerResource?(url: string, bytes: Uint8Array | ArrayBuffer): void;
 }
 
 export interface BlitzDevtoolsOptions {
@@ -83,6 +89,9 @@ export class BlitzDevtoolsHost {
   private panelCtx: DtPanelCtx;
   private lastPanelRender = -1e9;
   private lastSlowLog = 0;
+  /** @font-face css from registerDevtoolsFonts — "" means "embedded font
+   *  fallback", null means "not yet attempted". */
+  private fontCss: string | null = null;
 
   constructor(opts: BlitzDevtoolsOptions) {
     this.opts = opts;
@@ -119,7 +128,7 @@ export class BlitzDevtoolsHost {
       new ElementsPanel(ctx),
       new PerformancePanel(ctx),
       new GpuPanel(ctx),
-    ]) this.panels.set(p.id, p);
+    ].values()) this.panels.set(p.id, p);
   }
 
   get visible(): boolean { return this.panel !== null; }
@@ -154,19 +163,41 @@ export class BlitzDevtoolsHost {
 
   show(): void {
     if (!this._ready || this.visible || this.disposed) return;
-    this.panel = this.opts.ui.mount(this.shellHtml(), {
-      id: "devtools",
-      rect: this.dockRect(),
-      // Above game overlays — menus/loading screens shouldn't bury the dock.
-      z: 1000,
-      scale: 1.5,
-      interactive: true,
-      // Devtools UI doesn't need vsync-rate raster — cap it so mutation
-      // bursts (console streams, snapshot refreshes) coalesce into ~66ms
-      // rasters instead of one raster per message.
-      maxFps: 15,
-      onEvent: (ev) => this.handleDocEvent(ev),
-    });
+    // Register real system fonts once per host — ui:// resources persist on
+    // the surface across dock remounts, and must land before the doc mounts
+    // so the first resolve sees them (embedded DejaVu fallback otherwise).
+    if (this.fontCss === null) {
+      const ui = this.opts.ui as DevtoolsUiSurface & { host?: HtmlUiHost };
+      const rr = ui.registerResource?.bind(ui)
+        ?? (ui.host ? ui.host.registerResource.bind(ui.host) : undefined);
+      this.fontCss = rr ? registerDevtoolsFonts({ registerResource: rr }) : "";
+    }
+    try {
+      this.panel = this.opts.ui.mount(this.shellHtml(), {
+        id: "devtools",
+        rect: this.dockRect(),
+        // Above game overlays — menus/loading screens shouldn't bury the dock.
+        z: 1000,
+        // Native-res raster: the vendored glifo/FreeType path grid-fits hinted
+        // glyph stems to whole pixels — supersample factors >1 just blur that
+        // back out on downscale (and cost 2.25x the texture memory).
+        scale: 1,
+        // Ease wheel detents at pump cadence instead of jumping per event.
+        smoothWheel: true,
+        interactive: true,
+        // Devtools UI doesn't need vsync-rate raster — cap it so mutation
+        // bursts (console streams, snapshot refreshes) coalesce into ~66ms
+        // rasters instead of one raster per message.
+        maxFps: 15,
+        onEvent: (ev) => this.handleDocEvent(ev),
+      });
+    } catch (err) {
+      // Mount fails when the ui worker is dead — stay hidden so the next F12
+      // retries cleanly instead of wedging on a half-mounted doc.
+      this.panel = null;
+      log.error("blitz-devtools-host", `dock mount failed: ${err}`);
+      return;
+    }
     this.syncProviders();
     this.renderTabs();
     this.activate(this.activeId);
@@ -190,8 +221,18 @@ export class BlitzDevtoolsHost {
     }
     const t1 = performance.now();
     if (!this.visible) return;
-    this.syncProviders();
-    this.flush();
+    // Guarded like backend.update() above — a throwing panel render can't be
+    // allowed to kill the game frame hook that drives this pump.
+    try {
+      this.syncProviders();
+      this.flush();
+    } catch (err) {
+      const tn = performance.now();
+      if (tn - this.lastSlowLog > 1000) {
+        this.lastSlowLog = tn;
+        log.warn("blitz-devtools-host", `panel render error: ${err}`);
+      }
+    }
     const t2 = performance.now();
     // ≤1/sec — these diagnostics used to feed the console panel's logger
     // sink, and each row forced another dock re-render: a self-feeding
@@ -244,12 +285,14 @@ export class BlitzDevtoolsHost {
   // ── Dock layout ──
 
   private dockRect() {
-    const h = Math.min(this.dockH, this.surfaceH - 60);
-    return { x: 0, y: this.surfaceH - h, w: this.surfaceW, h };
+    // A tiny surface (or a pathological resize event) must not produce a
+    // negative height — keep at least enough room for the tab strip.
+    const h = Math.max(48, Math.min(this.dockH, this.surfaceH - 60));
+    return { x: 0, y: Math.max(0, this.surfaceH - h), w: this.surfaceW, h };
   }
 
   private shellHtml(): string {
-    return `<html><head><style>${DEVTOOLS_CSS}</style></head><body>
+    return `<html><head><style>${this.fontCss ?? ""}${DEVTOOLS_CSS}</style></head><body>
       <div id="dt-root">
         <div id="dt-grip" title="drag to resize"></div>
         <div id="dt-chrome">
@@ -266,8 +309,11 @@ export class BlitzDevtoolsHost {
 
   private renderTabs(): void {
     if (!this.panel) return;
+    // esc() both interpolations — provider names feed panel ids/titles and
+    // arrive as raw strings (a game registering "x\"><img" would otherwise
+    // inject markup into the tab strip).
     const tabs = [...this.panels.values()].map((p) =>
-      `<span class="tab${p.id === this.activeId ? " active" : ""}" data-action="dt.tab" data-tab="${p.id}">${p.title}</span>`
+      `<span class="tab${p.id === this.activeId ? " active" : ""}" data-action="dt.tab" data-tab="${esc(p.id)}">${esc(p.title)}</span>`
     ).join("");
     this.panel.setInnerHtml("#dt-tabs",
       `<span class="brand">downdraft</span>${tabs}<span class="spacer"></span>
@@ -280,13 +326,21 @@ export class BlitzDevtoolsHost {
     this.activeId = id;
     const p = this.panels.get(id)!;
     this.renderTabs();
-    this.panel.setInnerHtml("#dt-top", p.renderTop?.() ?? "");
-    this.panel.setInnerHtml("#dt-bottom", p.renderBottom?.() ?? "");
+    try {
+      this.panel.setInnerHtml("#dt-top", p.renderTop?.() ?? "");
+      this.panel.setInnerHtml("#dt-bottom", p.renderBottom?.() ?? "");
+    } catch (err) {
+      log.warn("blitz-devtools-host", `panel ${id} chrome render error: ${err}`);
+    }
     p.dirty = true;
     p.shellDirty = false;
-    this.panel.setInnerHtml("#dt-body", p.renderBody());
-    p.afterRender?.();
-    p.activate?.();
+    this.panel.setInnerHtml("#dt-body", this.safeBody(p));
+    try { p.afterRender?.(); } catch (err) {
+      log.warn("blitz-devtools-host", `panel ${id} afterRender error: ${err}`);
+    }
+    try { p.activate?.(); } catch (err) {
+      log.warn("blitz-devtools-host", `panel ${id} activate error: ${err}`);
+    }
     // Only the snapshot tab being viewed gets periodic provider refreshes;
     // fixed panels suspend auto-refresh entirely (manual Refresh still works).
     this.backend.providerWatch = p.providerSlot ?? -1;
@@ -298,7 +352,7 @@ export class BlitzDevtoolsHost {
     const slots = this.backend.providerSlots();
     let changed = false;
     const seen = new Set<number>();
-    for (const { slot, name } of slots) {
+    for (const { slot, name } of slots.values()) {
       seen.add(slot);
       if (!this.snapshotPanels.has(slot)) {
         const p = new SnapshotPanel(this.panelCtx, slot, name);
@@ -307,7 +361,7 @@ export class BlitzDevtoolsHost {
         changed = true;
       }
     }
-    for (const [slot, p] of this.snapshotPanels) {
+    for (const [slot, p] of this.snapshotPanels.entries()) {
       if (!seen.has(slot)) {
         this.snapshotPanels.delete(slot);
         this.panels.delete(p.id);
@@ -346,10 +400,25 @@ export class BlitzDevtoolsHost {
     }
     if (p.dirty) {
       p.dirty = false;
-      if (p.flushDom?.() !== true) {
-        this.panel.setInnerHtml("#dt-body", p.renderBody());
+      let handled = false;
+      try { handled = p.flushDom?.() === true; } catch (err) {
+        log.warn("blitz-devtools-host", `panel ${p.id} flushDom error: ${err}`);
+      }
+      if (!handled) this.panel.setInnerHtml("#dt-body", this.safeBody(p));
+      try { p.afterRender?.(); } catch (err) {
+        log.warn("blitz-devtools-host", `panel ${p.id} afterRender error: ${err}`);
       }
-      p.afterRender?.();
+    }
+  }
+
+  /** renderBody that can't take the dock down — the error surfaces in-panel
+   *  (and the next push retries since dirty just flips back on). */
+  private safeBody(p: DtPanel): string {
+    try {
+      return p.renderBody();
+    } catch (err) {
+      log.warn("blitz-devtools-host", `panel ${p.id} renderBody error: ${err}`);
+      return `<div class="status-banner error">panel render error: ${esc(String(err))}</div>`;
     }
   }
 
@@ -387,20 +456,26 @@ export class BlitzDevtoolsHost {
       }
     }
 
+    // Left-click only — routing actions on contextmenu meant a right-click
+    // on a tab/button fired it instead of just focusing.
     const action = ev.d?.action;
-    if ((ev.t === "click" || ev.t === "contextmenu") && action) {
+    if (ev.t === "click" && action) {
       if (action === "dt.tab") {
         const id = ev.d!.tab;
         if (id) this.activate(id);
         return;
       }
       if (action === "dt.close") { this.hide(); return; }
-      this.panels.get(this.activeId)?.onAction?.(ev.d!, ev);
+      try { this.panels.get(this.activeId)?.onAction?.(ev.d!, ev); } catch (err) {
+        log.warn("blitz-devtools-host", `panel action error: ${err}`);
+      }
       return;
     }
 
     // Everything else (input, keydown/up, scroll, focus…) → active panel.
-    this.panels.get(this.activeId)?.onEvent?.(ev);
+    try { this.panels.get(this.activeId)?.onEvent?.(ev); } catch (err) {
+      log.warn("blitz-devtools-host", `panel event error: ${err}`);
+    }
   }
 }
 
@@ -426,5 +501,6 @@ export function createSelfHostedDevtoolsUi(ctx: RendererModuleContext): Devtools
     host,
     mount: (markup, spec) => host.mount({ ...spec, html: markup }),
     docCaps: () => host.docCaps,
+    registerResource: (url, bytes) => host.registerResource(url, bytes),
   };
 }