@jokerized/decksmith 0.7.0 → 0.8.0

package/README.md

@@ -13,13 +13,19 @@ source.
 
 ## Prerequisites
 
-- Node 22 or later, and nothing else to **generate** a deck. `ingest`, `build`, `pack` and
-  `unpack` are pure Node: they read files, write files, and never open a browser. Decide
-  your deployment on that line — a service that turns papers into decks runs in a plain
-  Node image.
+- Node 22 or later, and nothing else to **generate** a deck. `ingest` of a file, `build`,
+  `pack` and `unpack` run in plain Node. `build` also opens each stop in Chrome when it can
+  find one, and warns `not_measured` when it cannot. Decide your deployment on that line —
+  a service that turns papers into decks runs in a plain Node image.
 - A Chromium build and ffmpeg to **render or check** one. `verify` drives the HyperFrames
   gates in a headless browser, and the MP4 encode is ffmpeg's. Both arrive with the
   hyperframes toolchain during `npm install`; there is nothing to install by hand.
+- On Linux, Chrome's sandbox needs unprivileged user namespaces, and Ubuntu 23.10 and later
+  deny them by default. DeckSmith then opens its own pages, the gates' view of a deck and a
+  caption band, without the sandbox, as HyperFrames' render always does, and prints a
+  `chrome:` line saying so. `ingest` of a URL refuses instead, because that page comes from
+  the web. `sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0`, or an AppArmor
+  profile for Chrome, gives the sandbox back.
 - Three commands reach outside for their own reasons: `plan` runs the Codex CLI, `narrate`
   runs edge-tts over the network, and `illustrate` asks an image backend or that same Codex
   account for pictures — and draws its own when neither will.
@@ -1199,6 +1205,19 @@ mechanically rather than free-hand.
   root timeline holds only a dummy tween spanning the deck.
 - KaTeX renders with `output: "html"`. The default also emits a hidden MathML mirror that
   the layout inspector reads as overlapping text.
+- No TeX reaches a `katex.render` call that KaTeX has not already parsed in Node, with
+  `throwOnError` and the deck's own options (`src/emit/tex.ts`). A formula that fails gets
+  a repair only where it cannot change what the formula says — a missing `\right.`, an
+  unclosed brace, a dropped `\label`, a paper's undefined macro drawn as its name — and the
+  repair is printed at `plan` and again at `build`. One no repair saves is shown as its
+  source in plain text by `equation-walk`, and costs the beat, by name, in
+  `equation-morph`. Until this existed the first parser a formula met was the browser at
+  `verify`, after the deck had been built and narrated: 26 of 92 failed HypePaper builds
+  in the week to 2026-10-07, 25 of them from `wrapTerms` cutting a `\left`/`\right` pair or
+  a superscript in half.
+- `equation-walk` measures its display after fonts and fits it to its box: smaller down to
+  the 40px floor, then broken after top-level relations and operators. One that still does
+  not fit fails `fidelity` as `math_unfit`, with the formula in the message.
 - No `Date.now()`, no `Math.random()`, no network at render time *in the composition*.
   Two renders of an image-free deck must be byte-identical. `deck.html` is exempt: it is
   presented, never rendered, and its subtitle loop legitimately reads a clock.