@justai/cuts 0.108.0 → 0.109.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justai/cuts",
-  "version": "0.108.0",
+  "version": "0.109.0",
   "description": "A persona's named parts \u2014 the page shell that holds them, and the cuts themselves.",
   "license": "UNLICENSED",
   "repository": {
@@ -40,7 +40,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@justai/core": "^0.20.0",
+    "@justai/core": "^0.21.0",
     "@justai/ui": "^0",
     "@justai/atrium": "^0.1.9"
   }

package/src/Base.astro

@@ -33,7 +33,7 @@ import { dir as dirOf } from "@justai/ui/locale";
 import "./ground.css";
 // The load-bearing behaviour is framework-free and lives in @justai/core, so `feed` (Next) injects the
 // SAME strings instead of hand-copying them. This binding just decides where they go in an Astro head.
-import { AUTH_CAPTURE_JS, CONSENT_JS, JS_CLASS_JS, REVEAL_CSS, analyticsJs, consentCopy } from "@justai/core";
+import { AUTH_CAPTURE_JS, CONSENT_JS, JS_CLASS_JS, REVEAL_CSS, XRAY_JS, analyticsJs, consentCopy } from "@justai/core";
 // The consent ask IS a confirmation — a moment of trust — so it rides the fleet's ONE dialog
 // rather than keeping a private dialect. One anatomy for "are you sure?" and "may I count you?".
 import ConfirmSheet from "./ConfirmSheet.astro";
@@ -98,6 +98,18 @@ const localePath = (l: string) => (l === defaultLocale ? "/" : `/${l}/`);
          silently — no error, the visitor simply lands back signed out. */}
     <script is:inline set:html={AUTH_CAPTURE_JS} />
     <script is:inline set:html={JS_CLASS_JS} />
+    {/* queries: design grid · x-ray · ?xray · safe area · debug overlay · see the layout ·
+        is my content inside the safe area · layout debugging
+        THE X-RAY, AVAILABLE ON EVERY PERSONA AND OFF ON ALL OF THEM. Open any page with `?xray` and
+        the shell's design grid appears over it: the kernel's frame, the two safe areas, the centre
+        crosshairs, and every number the layout depends on with a verdict on each.
+        Here rather than in each persona because it is the SHELL's geometry it measures — the column,
+        the gutter, the sticky bar's landing — and a debug instrument that has to be installed per
+        repo is one nobody has when they need it.
+        It is glasses, not a renovation: nothing is added to the page's own elements, the overlay is
+        fixed and reads `#kernel`'s rect, and `pointer-events` is none throughout. And it costs
+        nothing when off — the script returns on its second line unless the flag is there. */}
+    <script is:inline set:html={XRAY_JS} />
     {/* Reveal only after a page marks itself ready — gated behind .js so the page is always visible
          if JS is off, and no scroll flash before we position at the Kernel. This style is a TRAP as
          much as a feature, and the warning must stay beside it: ANY page using this layout without a

package/src/XRay.astro

@@ -0,0 +1,39 @@
+---
+// ── THE X-RAY — the shell's own design grid, on demand ─────────────────────────────────────────
+//
+// queries: design grid · safe area · title safe · action safe · edge of frame · debug overlay ·
+//          xray · ?xray · how do I see the grid · is my content inside the safe area · layout
+//          debugging · why is the column off centre · does the kernel overlap the toolbar ·
+//          horizontal bleed · developing a persona
+//
+// ── WHAT IT IS FOR ─────────────────────────────────────────────────────────────────────────────
+//
+// Open any persona with `?xray` and its skeleton appears: the kernel's own frame, the two safe
+// areas, the centre crosshairs, an 8px rhythm, and every number the layout depends on with a
+// verdict on each. It draws OVER the real page — you look through the persona's own controls and
+// see whether they sit inside the safe areas or cross them.
+//
+// It began as a canary-only feature, which was the smaller idea. The founder's: this is a debug
+// instrument, so it belongs to the framework and to every persona that mounts the shell. Whoever is
+// building a persona now has the same view the canaries have, on their own work, at any width, at
+// any moment — without adding a line to their repo.
+//
+// ── WHAT IT COSTS WHEN IT IS OFF: NOTHING ──────────────────────────────────────────────────────
+//
+// No markup, no stylesheet, no listeners. This component renders ONE small inline script that reads
+// the URL and returns immediately unless the flag is there. Everything else — the CSS, the DOM, the
+// resize listener — is built inside that branch. A debug feature that is only free when a
+// developer remembers to remove it is a debug feature that ships.
+//
+// ── WHY A URL PARAMETER ────────────────────────────────────────────────────────────────────────
+//
+// It survives a share, a bug report and a device that is not the one you are sitting at: a
+// screenshot of `?xray` IS the measurement, and the person who took it did not have to install
+// anything. A keyboard shortcut would be invisible to everybody who was not told about it.
+//
+// `xray` is spelled once, here, and read from `location.search` so `?xray`, `?xray=1` and
+// `&xray` all work — a flag somebody has to spell exactly right is one they will spell wrong.
+import { XRAY_JS } from "@justai/core";
+---
+
+<script is:inline set:html={XRAY_JS} />