@nodegx/mcp 0.2.2 → 0.2.4

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodegx-mcp-bundles",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "private": true,
   "description": "Build metadata for the bundled CLIs beside it. See build-cloud-bundle.mjs: @noodl/platform reads it."
 }

package/dist/render-harness/data/node-catalog-enriched.json

@@ -37470,6 +37470,18 @@
           "isSignal": false,
           "description": "Object path inside the bucket, such as avatars/me.png. Supabase only. Leave blank to use the file's own name"
         },
+        {
+          "name": "photoQuality",
+          "displayName": "Photo Quality",
+          "group": "Shrink Photos",
+          "plug": "input",
+          "type": {
+            "name": "number"
+          },
+          "isSignal": false,
+          "default": 80,
+          "description": "How much detail a shrunk JPEG or WebP keeps, from 1 to 100; PNG keeps every pixel and its transparency, GIF and SVG are never shrunk"
+        },
         {
           "name": "private",
           "displayName": "Private",
@@ -37482,6 +37494,17 @@
           "default": false,
           "description": "Restricts the stored file to whoever uploaded it, so reading it later needs a Sign File URL node"
         },
+        {
+          "name": "readers",
+          "displayName": "Readers",
+          "group": "General",
+          "plug": "input",
+          "type": {
+            "name": "string"
+          },
+          "isSignal": false,
+          "description": "Roles that may read the file as well as whoever uploaded it, such as role:member, separated by commas; setting it makes the file private. NodeGX backends only"
+        },
         {
           "name": "recordId",
           "displayName": "Record ID (PocketBase)",
@@ -37493,6 +37516,18 @@
           "isSignal": false,
           "description": "Existing record to attach the file to. PocketBase only. Leave blank to create a new record as part of the upload"
         },
+        {
+          "name": "shrinkTo",
+          "displayName": "Shrink To",
+          "group": "Shrink Photos",
+          "plug": "input",
+          "type": {
+            "name": "number"
+          },
+          "isSignal": false,
+          "default": 0,
+          "description": "Makes a photo smaller in the browser before sending it, so its longer side is at most this many pixels; 0 sends every file as picked"
+        },
         {
           "name": "upload",
           "displayName": "Upload",
@@ -37635,6 +37670,15 @@
         "private": [
           "always: held as handed; read when the next Upload goes"
         ],
+        "readers": [
+          "always: held as handed; read when the next Upload goes — set, those roles may read the file as well as whoever uploaded it, and the file is private"
+        ],
+        "shrinkTo": [
+          "always: held as handed; read when the next Upload goes — above 0, a photo (not a GIF or an SVG) is drawn smaller in the browser first, its longer side at most this many pixels, and the smaller file is what goes; it goes as picked when it is already that small, when the smaller one would weigh more, or when the browser cannot read it"
+        ],
+        "photoQuality": [
+          "always: held as handed; read when the next Upload goes, and only when a photo is shrunk — 1 to 100 for a JPEG or WebP, anything else is 80; a PNG keeps every pixel"
+        ],
         "bucket": [
           "always: held as handed; read when the next Upload goes — set, the file goes to this bucket at Path (or under the file's own name)"
         ],
@@ -37651,7 +37695,7 @@
           "always: held as handed; read when the next Upload goes, and only with Collection — a half-filled group is no location at all"
         ],
         "upload": [
-          "always: its own upload at the frame's end — two presses are two uploads — with File, Private and the File Location held then: no File, or a Backend the project does not have, is Error, Error Status Code 0 and Failure at once; otherwise the backend answers with Cloud File then Done, or Error, Error Status Code and Failure"
+          "always: its own upload at the frame's end — two presses are two uploads — with File, Private, Readers and the File Location held then: no File, or a Backend the project does not have, is Error, Error Status Code 0 and Failure at once; otherwise the backend answers with Cloud File then Done, or Error, Error Status Code and Failure"
         ]
       },
       "enrichment": {

package/dist/render-harness/data/node-catalog.json

@@ -34883,6 +34883,18 @@
           "isSignal": false,
           "description": "Object path inside the bucket, such as avatars/me.png. Supabase only. Leave blank to use the file's own name"
         },
+        {
+          "name": "photoQuality",
+          "displayName": "Photo Quality",
+          "group": "Shrink Photos",
+          "plug": "input",
+          "type": {
+            "name": "number"
+          },
+          "isSignal": false,
+          "default": 80,
+          "description": "How much detail a shrunk JPEG or WebP keeps, from 1 to 100; PNG keeps every pixel and its transparency, GIF and SVG are never shrunk"
+        },
         {
           "name": "private",
           "displayName": "Private",
@@ -34895,6 +34907,17 @@
           "default": false,
           "description": "Restricts the stored file to whoever uploaded it, so reading it later needs a Sign File URL node"
         },
+        {
+          "name": "readers",
+          "displayName": "Readers",
+          "group": "General",
+          "plug": "input",
+          "type": {
+            "name": "string"
+          },
+          "isSignal": false,
+          "description": "Roles that may read the file as well as whoever uploaded it, such as role:member, separated by commas; setting it makes the file private. NodeGX backends only"
+        },
         {
           "name": "recordId",
           "displayName": "Record ID (PocketBase)",
@@ -34906,6 +34929,18 @@
           "isSignal": false,
           "description": "Existing record to attach the file to. PocketBase only. Leave blank to create a new record as part of the upload"
         },
+        {
+          "name": "shrinkTo",
+          "displayName": "Shrink To",
+          "group": "Shrink Photos",
+          "plug": "input",
+          "type": {
+            "name": "number"
+          },
+          "isSignal": false,
+          "default": 0,
+          "description": "Makes a photo smaller in the browser before sending it, so its longer side is at most this many pixels; 0 sends every file as picked"
+        },
         {
           "name": "upload",
           "displayName": "Upload",
@@ -35048,6 +35083,15 @@
         "private": [
           "always: held as handed; read when the next Upload goes"
         ],
+        "readers": [
+          "always: held as handed; read when the next Upload goes — set, those roles may read the file as well as whoever uploaded it, and the file is private"
+        ],
+        "shrinkTo": [
+          "always: held as handed; read when the next Upload goes — above 0, a photo (not a GIF or an SVG) is drawn smaller in the browser first, its longer side at most this many pixels, and the smaller file is what goes; it goes as picked when it is already that small, when the smaller one would weigh more, or when the browser cannot read it"
+        ],
+        "photoQuality": [
+          "always: held as handed; read when the next Upload goes, and only when a photo is shrunk — 1 to 100 for a JPEG or WebP, anything else is 80; a PNG keeps every pixel"
+        ],
         "bucket": [
           "always: held as handed; read when the next Upload goes — set, the file goes to this bucket at Path (or under the file's own name)"
         ],
@@ -35064,7 +35108,7 @@
           "always: held as handed; read when the next Upload goes, and only with Collection — a half-filled group is no location at all"
         ],
         "upload": [
-          "always: its own upload at the frame's end — two presses are two uploads — with File, Private and the File Location held then: no File, or a Backend the project does not have, is Error, Error Status Code 0 and Failure at once; otherwise the backend answers with Cloud File then Done, or Error, Error Status Code and Failure"
+          "always: its own upload at the frame's end — two presses are two uploads — with File, Private, Readers and the File Location held then: no File, or a Backend the project does not have, is Error, Error Status Code 0 and Failure at once; otherwise the backend answers with Cloud File then Done, or Error, Error Status Code and Failure"
         ]
       }
     },

package/dist/render-harness/drive-steps.js

@@ -174,6 +174,52 @@ var require_src = __commonJS({
     .filter((x) => x.box > 0 && x.width > x.box + 1)
     .map((x) => ({ text: x.el.textContent.trim().slice(0, 80), width: round(x.width), parentWidth: round(x.box), cls: cls(x.el) }));
 
+  // P112-OWN020-OFFSYSTEM \u2014 the controls, measured against the project's type scale. A control nobody styled draws
+  // the runtime's own look (a Radio Button is a 32px circle with a 2px black ring; a native select or button keeps
+  // the browser's 13.33px text), and that is the "chunky" control beside a page on tokens. A radio or checkbox input
+  // is opacity 0, so its box is read on the first ancestor a person can see. The scale is the project's --text-*
+  // tokens, read off :root; the fake DOMs in the tests have no getPropertyValue, so it is guarded.
+  const pxOf = (value) => {
+    const s = String(value || '').trim();
+    if (!s) return NaN;
+    if (s.slice(-3) === 'rem') return parseFloat(s) * (parseFloat(styleOf(document.documentElement).fontSize) || 16);
+    return parseFloat(s);
+  };
+  const textScale = [];
+  const rootStyle = styleOf(document.documentElement);
+  if (rootStyle && typeof rootStyle.getPropertyValue === 'function') {
+    for (const step of ['xs', 'sm', 'base', 'lg', 'xl', '2xl', '3xl', '4xl', '5xl', '6xl']) {
+      const px = pxOf(rootStyle.getPropertyValue('--text-' + step));
+      if (px > 0) textScale.push(Math.round(px * 100) / 100);
+    }
+  }
+  const controlKind = (el) => {
+    const type = String(el.type || '').toLowerCase();
+    if (el.tagName === 'INPUT' && type === 'radio') return 'Radio Button';
+    if (el.tagName === 'INPUT' && type === 'checkbox') return 'Checkbox';
+    if (el.tagName === 'SELECT') return 'Dropdown';
+    if (el.tagName === 'TEXTAREA' || (el.tagName === 'INPUT' && ['', 'text', 'email', 'password', 'search', 'number', 'tel', 'url'].indexOf(type) !== -1)) return 'Text Input';
+    if (el.tagName === 'BUTTON') return 'Button';
+    return null;
+  };
+  const controls = [];
+  for (const el of all) {
+    const kind = controlKind(el);
+    if (!kind) continue;
+    if (kind === 'Radio Button' || kind === 'Checkbox') {
+      let shown = el;
+      for (let hops = 0; shown && hops < 3 && (parseFloat(styleOf(shown).opacity) < 0.05 || shown.getBoundingClientRect().width < 2); hops++) shown = shown.parentElement;
+      if (!shown || shown.offsetParent === null) continue;
+      const r = shown.getBoundingClientRect();
+      let label = null;
+      if (el.id && typeof document.querySelector === 'function') label = document.querySelector('label[for="' + el.id + '"]');
+      controls.push({ kind, box: round(Math.max(r.width, r.height)), textSize: label ? pxOf(styleOf(label).fontSize) : NaN });
+    } else {
+      if (visible.indexOf(el) === -1) continue;
+      controls.push({ kind, box: 0, textSize: pxOf(styleOf(el).fontSize) });
+    }
+  }
+
   // AWP-004 \u2014 what is on screen, as opposed to what is in the DOM. The page is
   // never scrolled when this runs, so a rect is already a document position.
   // Kimi K3's storefront was 83 texts in the DOM and about three on screen, and
@@ -632,6 +678,7 @@ var require_src = __commonJS({
     overflowingCount: overflowing.length,
     textsWiderThanBox: textsWiderThanBox.slice(0, 10),
     textsWiderThanBoxCount: textsWiderThanBox.length,
+    controls: { textScale, items: controls.slice(0, 60), count: controls.length },
     text: {
       elements: textEls.length,
       onScreen: textEls.filter(onScreen).length,
@@ -721,6 +768,13 @@ var require_src = __commonJS({
        * page-level finding stayed quiet because the page itself kept its width.
        */
       TextWiderThanItsBox: "text-wider-than-its-box",
+      /**
+       * P112-OWN020-OFFSYSTEM — a control drawn at the runtime's own size beside a page on its token scale: a radio or
+       * checkbox box much bigger than its label, or control text off the project's --text-* scale (a native select or
+       * button keeps the browser's 13.33px). Mistral (SP1) and DeepSeek (OpenTune) both shipped one — the "chunky"
+       * Sort-by circles — because a control placed in passing is the one an agent never styles.
+       */
+      ControlOffScale: "control-off-scale",
       SingleColumnGrid: "single-column-grid",
       MinimumLayoutWidth: "minimum-layout-width",
       HorizontalOverflow: "horizontal-overflow",
@@ -789,9 +843,30 @@ var require_src = __commonJS({
       const named = widest.cls ? `${widest.tag.toLowerCase()}.${widest.cls.split(/\s+/)[0]}` : widest.tag.toLowerCase();
       return `${named} at ${widest.width}px`;
     }
+    function controlsOffScale(controls) {
+      const scale = controls.textScale || [];
+      const onScale = (px) => scale.length === 0 || !(px > 0) || scale.some((s) => Math.abs(s - px) < 0.6);
+      const byKind = {};
+      for (const c of controls.items || []) {
+        const oversized = (c.kind === "Radio Button" || c.kind === "Checkbox") && c.box > Math.max(20, 1.5 * (c.textSize > 0 ? c.textSize : 0));
+        const offText = !onScale(c.textSize);
+        if (!oversized && !offText) continue;
+        const k = byKind[c.kind] || (byKind[c.kind] = { kind: c.kind, count: 0, box: c.box, textSize: c.textSize, oversized, offText });
+        k.count += 1;
+      }
+      const fmt = (n) => String(Math.round(n * 100) / 100);
+      return Object.keys(byKind).map((kind) => {
+        const k = byKind[kind];
+        const parts = [];
+        if (k.oversized) parts.push(fmt(k.box) + "px box" + (k.textSize > 0 ? " beside a " + fmt(k.textSize) + "px label" : ""));
+        if (k.offText) parts.push(fmt(k.textSize) + "px text, off the type scale (" + scale.map(fmt).join("/") + "px)");
+        return { kind, count: k.count, box: k.box, textSize: k.textSize, sentence: kind + " x" + k.count + ": " + parts.join(", ") };
+      });
+    }
     function summarise(viewports, diagnosis, overridden = {}) {
       const findings = [];
       const add = (f) => findings.push(f);
+      let controlsJudged = false;
       for (const [name, v] of Object.entries(viewports)) {
         if (!v || v.error) continue;
         const isDesktop = v.requested.width >= DESKTOP_WIDTH;
@@ -940,6 +1015,19 @@ var require_src = __commonJS({
             evidence: v.textsWiderThanBox
           });
         }
+        if (!controlsJudged && v.controls && v.controls.count > 0) {
+          controlsJudged = true;
+          const off = controlsOffScale(v.controls);
+          if (off.length > 0) {
+            add({
+              code: RenderFinding.ControlOffScale,
+              severity: "warning",
+              viewport: name,
+              message: "Controls drawn at a size the rest of the page is not: " + off.map((o) => o.sentence).join("; ") + `. A control nobody styled keeps the runtime's own look. Give the type one look for the whole app with set_element_style (find_tools group "theme"), or set_style_preset to add on-system styles for every control; a node that sets the parameter itself keeps its own value.`,
+              evidence: off.map((o) => ({ kind: o.kind, count: o.count, box: o.box, textSize: o.textSize, textScale: v.controls.textScale }))
+            });
+          }
+        }
         if (v.text.elements >= 10) {
           const weights = Object.keys(v.text.fontWeights);
           if (weights.length <= 1 || v.text.distinctFontSizes <= 2) {
@@ -1110,6 +1198,8 @@ var require_src = __commonJS({
       plural,
       widestOffender,
       describeSites,
+      // P112-OWN020-OFFSYSTEM — exported so its spec grades the judgement on readings, not only through a fake DOM.
+      controlsOffScale,
       TEXT_BEARING_PORTS,
       placeholderStringsFromCatalog
     };
@@ -2030,6 +2120,11 @@ var require_render_report = __commonJS({
           "--no-default-browser-check",
           "--hide-scrollbars",
           "--disable-gpu",
+          // PARKED-THREE-S3-NOWEBGL: `--disable-gpu` alone leaves no WebGL, so a three.js scene (three-kit, garden-3d-kit)
+          // drew its "No WebGL here" fallback to the agent. Software GL brings WebGL back with no GPU (measured 2026-10-19 in
+          // this harness: gl false → true, the three-kit fixture's 12 meshes drawn); a page with no WebGL never touches it.
+          "--use-angle=swiftshader",
+          "--enable-unsafe-swiftshader",
           // P112-S14-KEYCHAIN: on macOS a page that touches storage makes Chrome open the login keychain. With no
           // keychain where `HOME` points (an empty HOME, a CI user) the OS shows "Keychain Not Found" on the person's
           // screen and Chrome waits for the answer, so the render hangs until its 240 s kill. A throwaway profile

package/dist/render-harness/measure-from-disk.js

@@ -174,6 +174,52 @@ var require_src = __commonJS({
     .filter((x) => x.box > 0 && x.width > x.box + 1)
     .map((x) => ({ text: x.el.textContent.trim().slice(0, 80), width: round(x.width), parentWidth: round(x.box), cls: cls(x.el) }));
 
+  // P112-OWN020-OFFSYSTEM \u2014 the controls, measured against the project's type scale. A control nobody styled draws
+  // the runtime's own look (a Radio Button is a 32px circle with a 2px black ring; a native select or button keeps
+  // the browser's 13.33px text), and that is the "chunky" control beside a page on tokens. A radio or checkbox input
+  // is opacity 0, so its box is read on the first ancestor a person can see. The scale is the project's --text-*
+  // tokens, read off :root; the fake DOMs in the tests have no getPropertyValue, so it is guarded.
+  const pxOf = (value) => {
+    const s = String(value || '').trim();
+    if (!s) return NaN;
+    if (s.slice(-3) === 'rem') return parseFloat(s) * (parseFloat(styleOf(document.documentElement).fontSize) || 16);
+    return parseFloat(s);
+  };
+  const textScale = [];
+  const rootStyle = styleOf(document.documentElement);
+  if (rootStyle && typeof rootStyle.getPropertyValue === 'function') {
+    for (const step of ['xs', 'sm', 'base', 'lg', 'xl', '2xl', '3xl', '4xl', '5xl', '6xl']) {
+      const px = pxOf(rootStyle.getPropertyValue('--text-' + step));
+      if (px > 0) textScale.push(Math.round(px * 100) / 100);
+    }
+  }
+  const controlKind = (el) => {
+    const type = String(el.type || '').toLowerCase();
+    if (el.tagName === 'INPUT' && type === 'radio') return 'Radio Button';
+    if (el.tagName === 'INPUT' && type === 'checkbox') return 'Checkbox';
+    if (el.tagName === 'SELECT') return 'Dropdown';
+    if (el.tagName === 'TEXTAREA' || (el.tagName === 'INPUT' && ['', 'text', 'email', 'password', 'search', 'number', 'tel', 'url'].indexOf(type) !== -1)) return 'Text Input';
+    if (el.tagName === 'BUTTON') return 'Button';
+    return null;
+  };
+  const controls = [];
+  for (const el of all) {
+    const kind = controlKind(el);
+    if (!kind) continue;
+    if (kind === 'Radio Button' || kind === 'Checkbox') {
+      let shown = el;
+      for (let hops = 0; shown && hops < 3 && (parseFloat(styleOf(shown).opacity) < 0.05 || shown.getBoundingClientRect().width < 2); hops++) shown = shown.parentElement;
+      if (!shown || shown.offsetParent === null) continue;
+      const r = shown.getBoundingClientRect();
+      let label = null;
+      if (el.id && typeof document.querySelector === 'function') label = document.querySelector('label[for="' + el.id + '"]');
+      controls.push({ kind, box: round(Math.max(r.width, r.height)), textSize: label ? pxOf(styleOf(label).fontSize) : NaN });
+    } else {
+      if (visible.indexOf(el) === -1) continue;
+      controls.push({ kind, box: 0, textSize: pxOf(styleOf(el).fontSize) });
+    }
+  }
+
   // AWP-004 \u2014 what is on screen, as opposed to what is in the DOM. The page is
   // never scrolled when this runs, so a rect is already a document position.
   // Kimi K3's storefront was 83 texts in the DOM and about three on screen, and
@@ -632,6 +678,7 @@ var require_src = __commonJS({
     overflowingCount: overflowing.length,
     textsWiderThanBox: textsWiderThanBox.slice(0, 10),
     textsWiderThanBoxCount: textsWiderThanBox.length,
+    controls: { textScale, items: controls.slice(0, 60), count: controls.length },
     text: {
       elements: textEls.length,
       onScreen: textEls.filter(onScreen).length,
@@ -721,6 +768,13 @@ var require_src = __commonJS({
        * page-level finding stayed quiet because the page itself kept its width.
        */
       TextWiderThanItsBox: "text-wider-than-its-box",
+      /**
+       * P112-OWN020-OFFSYSTEM — a control drawn at the runtime's own size beside a page on its token scale: a radio or
+       * checkbox box much bigger than its label, or control text off the project's --text-* scale (a native select or
+       * button keeps the browser's 13.33px). Mistral (SP1) and DeepSeek (OpenTune) both shipped one — the "chunky"
+       * Sort-by circles — because a control placed in passing is the one an agent never styles.
+       */
+      ControlOffScale: "control-off-scale",
       SingleColumnGrid: "single-column-grid",
       MinimumLayoutWidth: "minimum-layout-width",
       HorizontalOverflow: "horizontal-overflow",
@@ -789,9 +843,30 @@ var require_src = __commonJS({
       const named = widest.cls ? `${widest.tag.toLowerCase()}.${widest.cls.split(/\s+/)[0]}` : widest.tag.toLowerCase();
       return `${named} at ${widest.width}px`;
     }
+    function controlsOffScale(controls) {
+      const scale = controls.textScale || [];
+      const onScale = (px) => scale.length === 0 || !(px > 0) || scale.some((s) => Math.abs(s - px) < 0.6);
+      const byKind = {};
+      for (const c of controls.items || []) {
+        const oversized = (c.kind === "Radio Button" || c.kind === "Checkbox") && c.box > Math.max(20, 1.5 * (c.textSize > 0 ? c.textSize : 0));
+        const offText = !onScale(c.textSize);
+        if (!oversized && !offText) continue;
+        const k = byKind[c.kind] || (byKind[c.kind] = { kind: c.kind, count: 0, box: c.box, textSize: c.textSize, oversized, offText });
+        k.count += 1;
+      }
+      const fmt = (n) => String(Math.round(n * 100) / 100);
+      return Object.keys(byKind).map((kind) => {
+        const k = byKind[kind];
+        const parts = [];
+        if (k.oversized) parts.push(fmt(k.box) + "px box" + (k.textSize > 0 ? " beside a " + fmt(k.textSize) + "px label" : ""));
+        if (k.offText) parts.push(fmt(k.textSize) + "px text, off the type scale (" + scale.map(fmt).join("/") + "px)");
+        return { kind, count: k.count, box: k.box, textSize: k.textSize, sentence: kind + " x" + k.count + ": " + parts.join(", ") };
+      });
+    }
     function summarise(viewports, diagnosis, overridden = {}) {
       const findings = [];
       const add = (f) => findings.push(f);
+      let controlsJudged = false;
       for (const [name, v] of Object.entries(viewports)) {
         if (!v || v.error) continue;
         const isDesktop = v.requested.width >= DESKTOP_WIDTH;
@@ -940,6 +1015,19 @@ var require_src = __commonJS({
             evidence: v.textsWiderThanBox
           });
         }
+        if (!controlsJudged && v.controls && v.controls.count > 0) {
+          controlsJudged = true;
+          const off = controlsOffScale(v.controls);
+          if (off.length > 0) {
+            add({
+              code: RenderFinding.ControlOffScale,
+              severity: "warning",
+              viewport: name,
+              message: "Controls drawn at a size the rest of the page is not: " + off.map((o) => o.sentence).join("; ") + `. A control nobody styled keeps the runtime's own look. Give the type one look for the whole app with set_element_style (find_tools group "theme"), or set_style_preset to add on-system styles for every control; a node that sets the parameter itself keeps its own value.`,
+              evidence: off.map((o) => ({ kind: o.kind, count: o.count, box: o.box, textSize: o.textSize, textScale: v.controls.textScale }))
+            });
+          }
+        }
         if (v.text.elements >= 10) {
           const weights = Object.keys(v.text.fontWeights);
           if (weights.length <= 1 || v.text.distinctFontSizes <= 2) {
@@ -1110,6 +1198,8 @@ var require_src = __commonJS({
       plural,
       widestOffender,
       describeSites,
+      // P112-OWN020-OFFSYSTEM — exported so its spec grades the judgement on readings, not only through a fake DOM.
+      controlsOffScale,
       TEXT_BEARING_PORTS,
       placeholderStringsFromCatalog
     };
@@ -2030,6 +2120,11 @@ var require_render_report = __commonJS({
           "--no-default-browser-check",
           "--hide-scrollbars",
           "--disable-gpu",
+          // PARKED-THREE-S3-NOWEBGL: `--disable-gpu` alone leaves no WebGL, so a three.js scene (three-kit, garden-3d-kit)
+          // drew its "No WebGL here" fallback to the agent. Software GL brings WebGL back with no GPU (measured 2026-10-19 in
+          // this harness: gl false → true, the three-kit fixture's 12 meshes drawn); a page with no WebGL never touches it.
+          "--use-angle=swiftshader",
+          "--enable-unsafe-swiftshader",
           // P112-S14-KEYCHAIN: on macOS a page that touches storage makes Chrome open the login keychain. With no
           // keychain where `HOME` points (an empty HOME, a CI user) the OS shows "Keychain Not Found" on the person's
           // screen and Chrome waits for the answer, so the render hangs until its 240 s kill. A throwaway profile

package/dist/render-harness/render-from-disk.js

@@ -7018,6 +7018,24 @@ function readScriptFiles() {
   walk(root);
   return scripts;
 }
+function readVariants() {
+  const file = path.join(PROJECT, "nodegx.styles.json");
+  if (!fs.existsSync(file)) return [];
+  let styles;
+  try {
+    styles = readJSON(file);
+  } catch {
+    return [];
+  }
+  return (Array.isArray(styles.variants) ? styles.variants : []).filter((v) => v && typeof v.typename === "string").map((v) => ({
+    ...typeof v.name === "string" && v.name !== "" ? { name: v.name } : {},
+    typename: v.typename,
+    parameters: v.parameters || {},
+    stateParameters: v.stateParameters || v.stateParamaters || {},
+    stateTransitions: v.stateTransitions || {},
+    defaultStateTransitions: v.defaultStateTransitions || {}
+  }));
+}
 function buildProjectData() {
   const project = readJSON(path.join(PROJECT, "nodegx.project.json"));
   const componentsDir = path.join(PROJECT, project.structure?.componentsDir || "components");
@@ -7132,7 +7150,8 @@ function buildProjectData() {
     componentIndex: {},
     rootComponent,
     routerIndex: { routers, pages },
-    scripts: readScriptFiles()
+    scripts: readScriptFiles(),
+    variants: readVariants()
   };
 }
 function projectOverrideDecls() {

package/dist/src/external/viewer/global.d.ts.keep

@@ -592,6 +592,19 @@ declare namespace Noodl {
         onProgress?: (progress: number) => void;
       }
     ): Promise<CloudFile>;
+
+    /**
+     * A link an image can use for a private file, the way the Sign File URL node mints one.
+     * Takes a CloudFile, a record's file (or an item of a list of them), or the stored name.
+     * Rejects for someone who could not read the file itself.
+     *
+     * Example:
+     * ```ts
+     *  const link = await Noodl.Files.sign(post.photos[0])
+     *  console.log(link.url, link.expiresAt)
+     * ```
+     */
+    sign(file: CloudFile | { name: string } | string): Promise<{ url: string; kind: string; expiresAt?: string; ttlSeconds?: number }>;
   }
 
   /**