@songsid/agend 2.3.0-beta.1 → 2.3.0-beta.11

package/dist/ui/shared/effect-registry.js

@@ -1,16 +1,15 @@
 /** #1629 B2: one host-owned Canvas Worker pool. Product adapters are deliberately separate. */
-import { allocateEffectFrames, effectEvent } from "./effect-policy.js";
-import { captureEffectBaseline } from "./effect-baseline.js";
-import { createEffectFrame } from "./effect-frame.js";
+import { allocateEffectFrames, effectEvent, effectPlaybackReason } from "./effect-policy.js";
+import { createOpaqueEffectFrame } from "./effect-frame.js";
 import { createEffectGeometry, hostEffectRect } from "./effect-geometry.js";
-import { effectStockSnapshot, effectStockAllows } from "./effect-stock-snapshot.js";
+import { effectStockSnapshot, effectStockAllows, effectStockRefusal } from "./effect-stock-snapshot.js";
 import { effectTrialStage, effectTrialStageIdentity, watchEffectTrialStage } from "./effect-trial-stage.js";
 import { EffectBudget } from "./effect-profiler.js";
 
 const registries = new WeakMap();
 const plain = o => !!o && (Object.getPrototypeOf(o) === Object.prototype || Object.getPrototypeOf(o) === null);
 const finite = v => typeof v === "number" && Number.isFinite(v);
-const FLAGS = ["safe", "publicLink", "reducedMotion", "saveData", "hidden", "enabled", "show", "previewReady", "optIn", "constrained", "modal"];
+const FLAGS = ["safe", "publicLink", "reducedMotion", "hidden", "enabled", "show", "transportReady", "constrained", "modal"];
 const TYPES = ["state", "reply", "theme"];
 function unsafeSnapshotDescriptor(d) {
   if (!plain(d) || !plain(d.params ?? {})) return null;
@@ -41,9 +40,9 @@ function snapshotDescriptor(d) { try { return unsafeSnapshotDescriptor(d); } cat
  */
 export function createEffectRegistry({ window: host, origin, boot, load, safety, stockSnapshot, onChange = () => {}, onProfile = () => {}, onMount = () => {}, onRetire = () => {}, clock = () => host.performance.now() } = {}) {
   try { if (!host?.document || !host.document.body || registries.has(host) || typeof load !== "function" || typeof stockSnapshot !== "function" || typeof onChange !== "function" || typeof onProfile !== "function" || typeof onMount !== "function" || typeof onRetire !== "function" || typeof clock !== "function" || !safety || ["allowed", "begin", "finish", "pause", "resume"].some(k => typeof safety[k] !== "function") || ["requestAnimationFrame", "cancelAnimationFrame", "setTimeout", "clearTimeout", "MutationObserver", "ResizeObserver", "AbortController"].some(k => typeof host[k] !== "function")) return { ok: false, reason: "registry_unsupported" }; } catch { return { ok: false, reason: "registry_unsupported" }; }
-  let dead = false, blocked = null, revision = 0, last = null, lastView = null, frameSerial = 0, context = null, descriptors = [], calibration = null, baseline = null, baselineDevice = null, serial = 0, raf = null, timer = null;
+  let dead = false, blocked = null, revision = 0, last = null, lastView = null, frameSerial = 0, context = null, descriptors = [], raf = null, timer = null;
   const slots = new Map(), loads = new Set(), paused = new Map(), offs = [], observed = new Set(), failures = new Map(), results = new Map();
-  let readingStock = false;
+  let readingStock = false, stockFailure = "stock_evidence_invalid", warned = null;
   let root, geometry, observer, resize, longTasks = null, longTasksSupported = false;
   const time = () => {
     let n; try { n = clock(); } catch { return null; }
@@ -65,14 +64,18 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
     finally { readingStages.delete(d.trialStage); }
     return !dead && !blocked && revision === before && stage?.root === d.element ? stage : null;
   };
-  const permits = (d, proof) => d.trialStage ? !!localStage(d, proof) : effectStockAllows(proof, d);
+  const permits = (d, proof) => eligible(d) && (d.trialStage ? !!localStage(d, proof) : effectStockAllows(proof, d));
   const coverage = (d = null) => {
     if (dead || blocked || readingStock) return null;
     const before = revision; let proof = null; readingStock = true;
-    try { proof = effectStockSnapshot(stockSnapshot(Object.freeze({ frameRoot: root }))); }
-    catch { /* unknown is never permission */ }
+    let failure = "stock_provider_failed";
+    try { const raw = stockSnapshot(Object.freeze({ frameRoot: root })); proof = effectStockSnapshot(raw); failure = proof ? null : effectStockRefusal(raw); }
+    catch { /* unavailable stays denied, with a local diagnostic */ }
     finally { readingStock = false; }
     if (dead || blocked || before !== revision) return null;
+    stockFailure = failure;
+    if (failure !== warned) { warned = failure; if (failure) { try { host.console?.warn("[AgEnD effects] Playback blocked:", failure); } catch { /* display only */ } } }
+    if (dead || blocked || before !== revision) return null;
     return d === null || permits(d, proof) ? proof : null;
   };
   const position = (d, proof) => d.trialStage ? localStage(d, proof)?.rect ?? null : hostEffectRect(d.element);
@@ -91,6 +94,21 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
   const current = s => !dead && !blocked && slots.get(s.d.key) === s && s.live;
   const tell = () => { if (dead) return; const state = view(), stamp = JSON.stringify(state); if (stamp === lastView) return; lastView = stamp; try { onChange(state); } catch { /* a display callback cannot admit code */ } };
   const receipt = (fn, ...args) => { try { return Reflect.apply(fn, safety, args); } catch { return null; } };
+  // #2055: the history's own read names a denial; any other answer stays unknown (and denied).
+  const SAFETY_REASON = Object.freeze({ __proto__: null, off: "safety_off", paused: "paused", interrupted: "interrupted" });
+  // Display only: the sticky history state per descriptor, which outranks a waiting reason (a queue, a dialog, typing)
+  // because it is what Resume must answer. Admission, caps, latches and safety policy never read it.
+  const named = new Map();
+  // The read can re-enter (an update from a callback): only a pass still current, for the same device, may write.
+  const nameSafety = (d, dev = device()) => {
+    const proposed = revision;
+    const reason = d.trialStage ? null : SAFETY_REASON[receipt(safety.status, d.id, dev)?.state];
+    if (dead || proposed !== revision || dev !== device()) return false;
+    if (reason) named.set(d.key, { identity: signature(d), reason }); else named.delete(d.key);
+    return true;
+  };
+  // Display only: the closed global gate a row is waiting on, when the host knows it (else the caller's unknown).
+  const gateReason = () => effectPlaybackReason(context);
   const clearMarker = (s, why) => {
     if (!s.token) return true;
     const token = s.token; s.token = null;
@@ -102,7 +120,9 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
     s.live = false;
     if (slots.get(s.d.key) === s) slots.delete(s.d.key);
     if (s.request) { s.request.controller.abort(); if (s.request.timer !== null) host.clearTimeout(s.request.timer); }
-    if (!["disposed", "superseded", "hidden", "human_resume", "calibrating", "geometry_changed"].includes(why)) failures.set(s.d.key, { identity: signature(s.d), reason: why });
+    // A closed/unknown viewer gate revokes paint, not the effect identity. Fresh known gates
+    // may admit it again; resource failures and actual safety pauses retain their latches.
+    if (!["disposed", "superseded", "hidden", "human_resume", "geometry_changed", "gates_unknown"].includes(why)) failures.set(s.d.key, { identity: signature(s.d), reason: why });
     s.stageOff?.(); s.stageOff = null;
     s.frame?.remove(why); s.geometry?.remove();
     if (s.loadOff) s.loadOff();
@@ -110,6 +130,7 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       paused.set(s.d.key, signature(s.d));
       if (receipt(safety.pause, { id: s.d.id, device: s.device, reason: why, metrics: s.budget?.snapshot().metrics ?? null }) !== true) blocked = "safety_unknown";
     }
+    if (count || why === "safety_revoked") nameSafety(s.d, s.device);   // #2055: the third pause, or another tab's, says off now
     clearMarker(s, why);
     if (s.owner) { try { onRetire(s.owner, why); } catch { /* an observation cannot prevent physical cleanup */ } }
     if (blocked) for (const other of [...slots.values()]) retire(other, blocked);
@@ -120,18 +141,24 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       retire(s, why);
       if (revision !== proposed || dead !== wasDead) return false;
     }
-    if (calibration) { calibration.cancel(); calibration = null; }
     return true;
   }
   function gatesKnown() { return context && FLAGS.every(k => typeof context[k] === "boolean") && (context.openInstance === null || typeof context.openInstance === "string" && context.openInstance.length >= 1 && context.openInstance.length <= 128); }
-  function eligible() { return gatesKnown() && !context.safe && !context.publicLink && !context.reducedMotion && !context.saveData && context.enabled && context.show && context.previewReady && context.optIn; }
-  const globalAllowed = () => eligible() && host.document.visibilityState === "visible";
+  function eligible(d = null) {
+    return gatesKnown() && !context.safe && !context.reducedMotion && context.enabled && context.show && context.transportReady
+      && (!d || !context.publicLink || d.region === "chat" && !d.trialStage);
+  }
+  const globalAllowed = (d = null) => eligible(d) && host.document.visibilityState === "visible";
   const signature = d => d.identity;
+  // A frame stopped because its gates closed is recorded as gates_unknown; when the host knows which gate, say it.
+  const shown = why => (why === "gates_unknown" && !eligible() && gateReason()) || why;
   function view() {
     return descriptors.map(d => {
-      const r = results.get(d.key) ?? { verdict: "off", reason: blocked ?? "unknown", queuePos: null }, s = slots.get(d.key);
-      return { key: d.key, id: d.id, ...r, phase: s?.frame ? s.ready ? "running" : "starting" : s ? "loading" : null,
-        quality: s?.budget?.snapshot().quality ?? null, reason: blocked ?? ((paused.get(d.key) === signature(d)) ? "paused" : failures.get(d.key)?.identity === signature(d) ? failures.get(d.key).reason : s && context?.hidden ? "hidden" : r.reason) };
+      const r = results.get(d.key) ?? { verdict: "off", reason: blocked ?? (eligible() ? stockFailure : gateReason()) ?? "runtime_unavailable", queuePos: null }, s = slots.get(d.key);
+      // #2055 one display precedence: a global latch, then the sticky safety history, then this page's own pause/failure.
+      const n = named.get(d.key), sticky = n && n.identity === signature(d) ? n.reason : null;
+      return { key: d.key, id: d.id, ...r, ...(sticky && r.verdict === "queued" ? { verdict: "off", queuePos: null } : {}), phase: s?.frame ? s.ready ? "running" : "starting" : s ? "loading" : null,
+        quality: s?.budget?.snapshot().quality ?? null, reason: blocked ?? sticky ?? ((paused.get(d.key) === signature(d)) ? "paused" : failures.get(d.key)?.identity === signature(d) ? shown(failures.get(d.key).reason) : s && context?.hidden ? "hidden" : r.reason) };
     });
   }
   function schedule() {
@@ -150,7 +177,7 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
   };
   function observe() {
     const nodes = host.document.querySelectorAll("[data-trust]");
-    if (nodes.length > 128) throw Error("trust coverage unavailable");
+    if (nodes.length > 4096) throw Error("trust coverage unavailable");
     const wanted = new Set([host.document.documentElement, ...nodes]);
     for (const d of descriptors) if (d.element?.ownerDocument === host.document && d.element.isConnected === true) wanted.add(d.element);
     for (const n of observed) if (!wanted.has(n)) { resize.unobserve(n); observed.delete(n); }
@@ -163,9 +190,12 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
     if (time() === null) blocked = "clock_unavailable";
     const hidden = context?.hidden === true || host.document.visibilityState !== "visible";
     const stock = eligible() ? coverage() : null;
+    if (dead || proposal !== revision) return;
     if (blocked || !eligible() || !stock) {
       if (!stopAll(blocked ?? "gates_unknown")) return;
-      results.clear(); tell(); return;
+      results.clear();
+      if (!blocked) for (const d of descriptors) if (!nameSafety(d) || dead || proposal !== revision) return;
+      tell(); return;
     }
     // Hidden frames already owned may survive for <=10 s, but no new frame or load is admitted while hidden.
     const ctx = { ...context, hidden: false };
@@ -176,6 +206,7 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       if (dead || proposal !== revision) return;
       ds.push({ ...d, paused: !allowed || d.paused === true || paused.get(d.key) === signature(d) || failures.get(d.key)?.identity === signature(d) });
     }
+    for (const d of descriptors) if (!nameSafety(d) || dead || proposal !== revision) return;
     const allocation = allocateEffectFrames(ds, ctx); results.clear();
     for (const r of allocation) {
       const d = descriptors.find(d => d.key === r.key);
@@ -193,10 +224,9 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       if (!chosen.has(s.d.key) || !d || signature(d) !== signature(s.d) || d.element !== s.d.element || s.device !== device()) retire(s, "superseded");
       if (dead || proposal !== revision) return;
     }
-    if (chosen.size === 0) { if (calibration) { calibration.cancel(); calibration = null; } baseline = null; baselineDevice = null; tell(); return; }
+    if (chosen.size === 0) { tell(); return; }
     if (hidden) {
       hideGeometry();
-      if (calibration) { calibration.cancel(); calibration = null; }
       for (const s of [...slots.values()]) {
         if (!s.frame) retire(s, "hidden");
         else { if (s.hiddenSince === null) { s.hiddenSince = last; s.healthySince = null; } if (s.budget.gates({ hidden: true, reducedMotion: false, saveData: false, show: true }).remove) retire(s, "hidden"); }
@@ -209,19 +239,9 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       if (s.frame && s.hiddenSince !== null) { s.hiddenSince = null; s.healthySince = last; if (s.budget.gates({ hidden: false, reducedMotion: false, saveData: false, show: true }).remove) retire(s, "hidden"); }
       if (dead || proposal !== revision) return;
     }
-    try { observe(); } catch { stopAll("trust_geometry_unknown"); tell(); return; }
-    if (baseline === null || baselineDevice !== device()) {
-      if (calibration && baselineDevice === device()) { tell(); return; }
-      if (!stopAll("calibrating") || dead || proposal !== revision) return;
-      const epoch = ++serial;
-      const job = captureEffectBaseline({ window: host, empty: () => !dead && slots.size === 0 && host.document.querySelectorAll("iframe.agend-effect-frame").length === 0 && globalAllowed() && !context.hidden && !!coverage(), clock: nativeClock });
-      calibration = job; baselineDevice = device();
-      job.promise.then(r => {
-        if (dead || calibration !== job || epoch !== serial) return;
-        calibration = null;
-        if (!r.ok) { blocked = r.reason; tell(); return; }
-        baseline = r.baselineFps; reconcile();
-      });
+    try { observe(); } catch {
+      if (dead || proposal !== revision || !stopAll("trust_geometry_unknown")) return;
+      for (const d of descriptors) results.set(d.key, { verdict: "off", reason: "trust_geometry_unknown", queuePos: null });
       tell(); return;
     }
     const max = context.constrained ? 1 : 3;
@@ -230,8 +250,14 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       if (slots.size >= max || loads.size >= max) break;
       const permitted = receipt(safety.allowed, d.id, device());
       if (proposal !== revision) return;
-      if (permitted !== true) { results.set(d.key, { verdict: "off", reason: "safety_unknown", queuePos: null }); continue; }
-      if (slots.has(d.key) || slots.size >= max || loads.size >= max || !globalAllowed() || context.hidden || !coverage(d) || proposal !== revision || !descriptors.some(x => x.key === d.key && signature(x) === signature(d) && x.element === d.element)) break;
+      if (permitted !== true) {
+        // #2055: say which denial it is. Only the safety history's own read names it; anything else stays unknown (still denied).
+        const st = receipt(safety.status, d.id, device());
+        if (proposal !== revision) return;
+        const why = SAFETY_REASON[st?.state] ?? "safety_unknown";
+        results.set(d.key, { verdict: "off", reason: why, queuePos: null }); continue;
+      }
+      if (slots.has(d.key) || slots.size >= max || loads.size >= max || !globalAllowed(d) || context.hidden || !coverage(d) || proposal !== revision || !descriptors.some(x => x.key === d.key && signature(x) === signature(d) && x.element === d.element)) break;
       const rect = position(d, coverage(d));
       if (dead || proposal !== revision) return;
       if (!rect || d.element.ownerDocument !== host.document) { results.set(d.key, { verdict: "off", reason: "geometry_unknown", queuePos: null }); continue; }
@@ -254,7 +280,7 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       const acceptCompletion = () => {
         if (!current(s)) { clearMarker(s, "superseded"); return false; }
         if (!withinDeadline()) return false;
-        if (request.controller.signal.aborted || !globalAllowed() || context.hidden || !coverage(d)) {
+        if (request.controller.signal.aborted || !globalAllowed(d) || context.hidden || !coverage(d)) {
           if (current(s)) retire(s, "admission_revoked"); else clearMarker(s, "superseded");
           return false;
         }
@@ -287,10 +313,10 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
         if (d.trialStage && !local || !current(s)) { if (current(s)) retire(s, "admission_revoked"); return; }
         if (local) fresh = local.rect;
         s.rect = fresh;
-        s.budget = new EffectBudget({ device: s.device, baselineFps: baseline, clock: nativeClock, longTasksSupported });
-        const frame = createEffectFrame({ window: host, root: local?.root ?? root, origin, boot, clock: nativeClock,
+        s.budget = new EffectBudget({ device: s.device, clock: nativeClock, longTasksSupported });
+        const frame = createOpaqueEffectFrame({ window: host, root: local?.root ?? root, origin, boot, clock: nativeClock,
           render: { code: resource.code, params: resource.params, assets: resource.assets, wants: resource.wants, instance: d.instance, width: fresh.width, height: fresh.height, dpr: dpr(s.device) },
-          onReady() { if (!current(s)) return; if (!globalAllowed() || context.hidden || !coverage(d)) { retire(s, "hidden"); tell(); return; } const n = time(); if (n === null) { blocked = "clock_unavailable"; stopAll(blocked); tell(); return; } s.ready = true; s.readyAt = n; s.healthySince = n; publishEnv(s); schedule(); tell(); },
+          onReady() { if (!current(s)) return; if (!globalAllowed(d) || context.hidden || !coverage(d)) { retire(s, "hidden"); tell(); return; } const n = time(); if (n === null) { blocked = "clock_unavailable"; stopAll(blocked); tell(); return; } s.ready = true; s.readyAt = n; s.healthySince = n; publishEnv(s); schedule(); tell(); },
           onRemove(why) { if (current(s)) { retire(s, why); tell(); } },
         });
         s.frame = frame;
@@ -316,7 +342,7 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
     schedule(); tell();
   }
   function publishEnv(s, proof = coverage(s.d)) {
-    if (!s.ready || !current(s) || context.hidden || !globalAllowed() || !permits(s.d, proof)) return;
+    if (!s.ready || !current(s) || context.hidden || !globalAllowed(s.d) || !permits(s.d, proof)) return;
     const e = effectEvent("env", { width: s.rect.width, height: s.rect.height, dpr: dpr(s.device), quality: s.budget.snapshot().quality }, null, time());
     if (e) s.frame.send(e);
   }
@@ -339,12 +365,17 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       if (changed) publishEnv(s, paint);
       if (s.ready) s.budget.frame();
       if (s.pointer) {
-        const packet = s.pointer; s.pointer = null;
+        const packet = s.pointer;
         const n = time(), b = s.budget.snapshot();
-        if (n !== null && n - packet.at <= 100 && permits(s.d, paint) && pointerGate(paint) && current(s) && b.forward && (s.lastPointer === null || n - s.lastPointer >= 1000 / b.pointerHz)) {
+        if (n === null || n - packet.at > 100 || !permits(s.d, paint) || !pointerGate(paint) || !current(s) || !b.forward) {
+          if (s.pointer === packet) s.pointer = null;
+        } else if (s.lastPointer === null || n - s.lastPointer >= 1000 / b.pointerHz) {
+          if (s.pointer === packet) s.pointer = null;
           const event = effectEvent("pointer", packet.fields, s.d.instance, packet.at);
           if (event && s.frame.send(event)) s.lastPointer = n;
         }
+        // Keep the latest fresh sample until the next eligible frame. An early rAF must
+        // not consume a click just because the preceding move used this rate interval.
       }
     }
     if (dead || proposal !== revision) return;
@@ -401,7 +432,11 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
     if (!globalAllowed() || context.hidden || context.modal || !proof || proof.front !== true) return false;
     try {
       const focused = host.document.activeElement;
-      return host.document.designMode !== "on" && !!focused && ["BODY", "BUTTON", "A"].includes(focused.tagName) && focused.isContentEditable === false && typeof focused.matches === "function" && !focused.matches("input,textarea,select,[contenteditable]:not([contenteditable='false'])");
+      // Native clicks on ordinary stock content focus its tabindex=-1 main ancestor.
+      // Recognize only that unique host root; unknown/editor focus remains a refusal.
+      const mains = focused?.tagName === "MAIN" ? host.document.querySelectorAll("#app > .shell > main#main.main[tabindex='-1']") : [];
+      const stockMain = focused?.isConnected === true && focused.ownerDocument === host.document && mains.length === 1 && mains[0] === focused;
+      return host.document.designMode !== "on" && !!focused && (["BODY", "BUTTON", "A"].includes(focused.tagName) || stockMain) && focused.isContentEditable === false && typeof focused.matches === "function" && !focused.matches("input,textarea,select,[contenteditable]:not([contenteditable='false'])");
     } catch { return false; }
   }
   function pointer(event) {
@@ -416,7 +451,11 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       const fields = { kind, x: event.clientX - r.x, y: event.clientY - r.y, buttons: event.buttons };
       if (fields.x < 0 || fields.y < 0 || fields.x > r.width || fields.y > r.height) continue;
       if (kind === "wheel") { fields.dx = event.deltaX; fields.dy = event.deltaY; }
-      if (effectEvent("pointer", fields, s.d.instance, at)) s.pointer = { fields, at };
+      if (effectEvent("pointer", fields, s.d.instance, at)) {
+        // One slot, with discrete input ahead of motion. A later move must not erase
+        // a waiting click; down/up/click may still coalesce to the latest discrete event.
+        if (kind !== "move" || !s.pointer || s.pointer.fields.kind === "move" || at - s.pointer.at > 100) s.pointer = { fields, at };
+      }
     }
     schedule();
   }
@@ -464,11 +503,11 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
     revalidateSafety,
     /** Called only by the host's explicit human Resume UI. A descriptor update never clears this latch. */
     resume(key) {
-      if (dead || reentrantStock() || blocked && !blocked.startsWith("baseline_") || typeof key !== "string") return false;
+      if (dead || reentrantStock() || blocked || typeof key !== "string") return false;
       const proposed = revision, d = descriptors.find(d => d.key === key); if (!d || d.trialStage && !coverage(d) || revision !== proposed || receipt(safety.resume, d.id, device()) !== true || revision !== proposed) return false;
       revision++;
       if (!stopAll("human_resume")) return false;
-      if (blocked && !blocked.startsWith("baseline_")) return false; blocked = null; paused.delete(key); failures.delete(key); baseline = null; serial++; reconcile(); return true;
+      if (blocked) return false; paused.delete(key); failures.delete(key); reconcile(); return true;
     },
     /** Host-only content-free signal API. Raw pointer publishing is refused; native pointer metadata is coalesced here. */
     publish(type, fields, instance = null) {
@@ -484,7 +523,7 @@ export function createEffectRegistry({ window: host, origin, boot, load, safety,
       return sent;
     },
     dispose() {
-      if (dead) return; dead = true; revision++; serial++; stopAll("disposed");
+      if (dead) return; dead = true; revision++; stopAll("disposed");
       if (raf !== null) host.cancelAnimationFrame(raf); if (timer !== null) host.clearTimeout(timer);
       observer.disconnect(); resize.disconnect(); longTasks?.disconnect(); for (const off of offs) off();
       geometry.dispose(); root.remove(); observed.clear(); if (loads.size === 0 && registries.get(host) === api) registries.delete(host);

package/dist/ui/shared/effect-stock-snapshot.js

@@ -32,3 +32,12 @@ export function effectStockAllows(snapshot, { layer, by } = {}) {
   const proof = effectStockSnapshot(snapshot);
   return !!proof && (layer === "behind" || layer === "front" && proof.front && (by === "human" || proof.agentFront));
 }
+
+/** Display only. Refused provider metadata never becomes paint evidence or authority. */
+export function effectStockRefusal(value) {
+  try {
+    if (!plain(value)) return "stock_evidence_invalid";
+    const d = Object.getOwnPropertyDescriptor(value, "reason");
+    return d && Object.hasOwn(d, "value") && typeof d.value === "string" && /^[a-z][a-z0-9_]{0,79}$/.test(d.value) ? d.value : "stock_evidence_invalid";
+  } catch { return "stock_evidence_invalid"; }
+}

package/dist/ui/shared/effect-stock-trust.js

@@ -11,7 +11,7 @@ const SPECS = [
   ["confirmation", ".shell > .pending-stack, .shell .p-settings > .panel-body > .col > .pending-stack.inline"], ["preview", ".shell .chat-split > .pv-panel, .shell .chat-split > .pv-divider"],
   ["preview-menu", ".shell .thread details.pv-menu"], ["palette", ".shell .dock .cmd-palette"],
   ["drop", ".shell .p-chat > .drop-overlay"],
-  ["thread-control", ".shell .p-chat .jump-latest, .shell .thread .msg-tools, .shell .thread .st-more, .shell .thread .cb-head, .shell .thread .cb-more, .shell .thread .tc-head, .shell .thread .tc-more, .shell .thread .pv-head, .shell .thread .pv-note, .shell .thread .pv-banner, .shell .thread .effect-trial-offer, .shell .thread .click-chip"],
+  ["thread-control", ".shell .chat-main > .amb-note, .shell .p-chat .jump-latest, .shell .thread .msg-tools, .shell .thread .st-more, .shell .thread .cb-head, .shell .thread .cb-more, .shell .thread .tc-head, .shell .thread .tc-more, .shell .thread .pv-head, .shell .thread .pv-note, .shell .thread .pv-banner, .shell .thread .effect-trial-offer, .shell .thread .click-chip"],
   ["link", ".shell .thread .md a, .shell .thread .st-text > a.st-link, .shell .dock .prompts .txt > a.st-link"], ["attachment", ".shell .thread .atts"], ["media", ".shell .thread .att-media"],
   ["panel-navigation", ".shell .p-fleet > .seg, .shell .p-settings > .seg"],
   ["panel-content", ".shell .p-fleet > .panel-body, .shell .p-needs > .panel-body, .shell .p-settings > .panel-body, .shell .p-log > .panel-body, .shell .p-details > .panel-body, .shell .p-view > .panel-body, .shell .p-view > .v-term, .shell .p-view > .v-id, .shell .p-view > .v-card"],
@@ -20,7 +20,7 @@ const SPECS = [
 ];
 export const STOCK_TRUST_INVENTORY = Object.freeze(SPECS.map(([kind, selector]) => Object.freeze({ kind, selector })));
 const STRUCTURAL = ["html", "body", "#app", "#app > .shell", ".shell > .main", ".main > .p-chat", ".p-chat > .chat-split", ".chat-split > .chat-main"];
-const CONTENT = [".main > .conn", ".p-chat > .panel-head", ".p-chat > .chat-card", ".p-chat > .aw-chat_header", ".chat-main > .scroller", ".chat-main > .dock", ".sidebar > .side-head", ".sidebar > .side-nav", ".sidebar > .side-section", ".sidebar > .side-widget", ".sidebar > .side-foot", ".u-rail > .u-rail-head", ".u-rail > .u-rail-body"];
+const CONTENT = [".main > .conn", ".p-chat > .panel-head", ".p-chat > .chat-card", ".p-chat > .aw-chat_header", ".chat-main > .amb-note", ".chat-main > .scroller", ".chat-main > .dock", ".sidebar > .side-head", ".sidebar > .side-nav", ".sidebar > .side-section", ".sidebar > .side-widget", ".sidebar > .side-foot", ".u-rail > .u-rail-head", ".u-rail > .u-rail-body"];
 // Closed producer/topology inventory. Bare Outlet loading/error panels never become an effect surface.
 const PANELS = Object.freeze({
   fleet: { required: [".panel-head", ".seg", ".panel-body"], optional: [] },
@@ -95,14 +95,58 @@ function outset(style) {
   }
   return pad <= 256 ? Math.ceil(pad) : null;
 }
+/**
+ * #2086: the identity card's banner fill (a blurred copy beside a centred banner) — the one filter stock admits. Only
+ * this exact value, on exactly `.id-banner-box > img.id-banner-fill`, absolutely positioned in that box (so the box is
+ * its containing block — #2089 review: a fixed fill is the viewport's, and no box clips it), and the box positioned and
+ * clipping on both axes; its paint is then that box's rectangle (the blur and its scale never leave it). The box must
+ * also be a real block box that the browser reports as the fill's offset parent (#2089 review r3: `display: contents`
+ * keeps the computed position and overflow but generates no box, so an outer ancestor would place the fill, and an inline
+ * box clips differently). Anything else with a filter refuses.
+ */
+export const STOCK_BANNER_FILL_FILTER = "blur(24px) saturate(0.75) brightness(0.7)";
+function stockBannerFill(host, el) {
+  const box = el.parentElement;
+  if (typeof el.matches !== "function" || !el.matches(".id-banner-box > img.id-banner-fill") || !box) return null;
+  const s = host.getComputedStyle(el), b = host.getComputedStyle(box);
+  if (s.filter !== STOCK_BANNER_FILL_FILTER || !none(s.backdropFilter) || !none(b.filter) || !none(b.backdropFilter)) return null;
+  if (!["hidden", "clip"].includes(b.overflowX) || !["hidden", "clip"].includes(b.overflowY)) return null;
+  if (s.position !== "absolute" || !["relative", "absolute"].includes(b.position)) return null;
+  if (b.display !== "block" || el.offsetParent !== box) return null;
+  return rect(box);
+}
+function zeroClipMargin(host, style) {
+  const margin = style.overflowClipMargin ?? style.getPropertyValue?.("overflow-clip-margin");
+  // WebKit versions without this property still implement paint containment. An absent
+  // computed value is usable only when the engine explicitly reports it unsupported;
+  // unknown capability or a supported but unreadable/expanded margin cannot prove a box.
+  return margin === "0px" || [undefined, ""].includes(margin)
+    && host.CSS?.supports?.("overflow-clip-margin", "1px") === false;
+}
 function protectedPaint(host, root, budget) {
+  // These two stock toolbar boxes physically clip ALL descendants, including fixed-position
+  // children. Their entire box is a hole; descendant ink cannot escape it. Inline, fragmented,
+  // expanded-clip or CSS-overridden boxes take the ordinary bounded walk instead.
+  const s = host.getComputedStyle(root);
+  if (root.matches?.(".shell .thread .msg-tools, .shell .thread .codeblock > .cb-head") && s.contain === "paint"
+    && s.display === "flex" && s.overflowX === "clip" && s.overflowY === "clip" && zeroClipMargin(host, s)
+    && none(s.filter) && none(s.backdropFilter) && s.borderImageSource === "none" && [undefined, "", "visible"].includes(s.contentVisibility) && root.getClientRects().length === 1) {
+    if (++budget.n > 4096) { budget.exceeded = true; return null; }
+    const r = rect(root), pad = outset(s);
+    // Containment clips descendants, not the root's own ink. Do not infer a world-space
+    // outset from local CSS lengths under a potentially transformed content ancestor.
+    if (!r || pad !== 0) return null;
+    return r;
+  }
   const nodes = [root, ...root.querySelectorAll("*")]; budget.n += nodes.length;
-  if (budget.n > 4096) return null;
+  if (budget.n > 4096) { budget.exceeded = true; return null; }
   let union = null;
   for (const el of nodes) {
     if (!visible(host, el)) continue;
-    const style = host.getComputedStyle(el), r = rect(el), pad = outset(style);
-    if (!r || pad === null || !none(style.filter) || !none(style.backdropFilter)) return null;
+    const style = host.getComputedStyle(el), pad = outset(style);
+    if (style.borderImageSource !== undefined && style.borderImageSource !== "none" || ![undefined, "", "visible"].includes(style.contentVisibility)) return null;
+    const r = none(style.filter) ? rect(el) : stockBannerFill(host, el);
+    if (!r || pad === null || !none(style.backdropFilter)) return null;
     const a = { x: r.x - pad, y: r.y - pad, width: r.width + pad * 2, height: r.height + pad * 2 };
     if (!union) union = a;
     else { const x = Math.min(union.x, a.x), y = Math.min(union.y, a.y); union = { x, y, width: Math.max(union.x + union.width, a.x + a.width) - x, height: Math.max(union.y + union.height, a.y + a.height) - y }; }
@@ -144,22 +188,30 @@ export function stockEffectTrust(host, { frameRoot = null, ownerCss = "unknown"
       if (s.position !== "relative" || s.zIndex !== "1" || !neutral(s)) return fail("stock_order_unknown");
     }
     const marked = [...doc.querySelectorAll("[data-trust]")], expected = new Set(), rects = [], budget = { n: 0 };
-    if (marked.length > 128) return fail("stock_trust_unknown");
+    if (marked.length > 4096) return fail("stock_marker_limit");
     for (const { kind, selector } of STOCK_TRUST_INVENTORY) for (const el of doc.querySelectorAll(selector)) {
       if (el.ownerDocument !== doc || el.isConnected !== true || el.getAttribute("data-trust") !== kind) return fail("stock_trust_unknown");
       expected.add(el);
     }
     if (marked.some(el => !expected.has(el)) || surface.kind === "chat" && !chat.querySelector('.dock[data-trust="composer"]') || !surface.panel.querySelector('.panel-head[data-trust="header"]')) return fail("stock_trust_unknown");
     for (const el of marked) {
-      const bounds = protectedPaint(host, el, budget); if (!bounds) return fail("stock_paint_unknown");
-      if (bounds.width && bounds.height) rects.push(bounds);
+      const bounds = protectedPaint(host, el, budget); if (!bounds) return fail(budget.exceeded ? "stock_paint_limit" : "stock_paint_unknown");
+      // Off-screen history remains inventoried and paint-checked; it need not consume a
+      // viewport hole. Include the clip algorithm's extra 8px protection margin.
+      if (bounds.width && bounds.height && (!finite(host.innerHeight) || bounds.x + bounds.width + 8 >= 0 && bounds.y + bounds.height + 8 >= 0 && bounds.x - 8 <= host.innerWidth && bounds.y - 8 <= host.innerHeight)) rects.push(bounds);
+    }
+    // Keep the existing 128-hole transport bound. Conservative union may hide extra
+    // effect pixels; it can never reveal protected pixels, even for a dense viewport.
+    if (rects.length > 128) {
+      const rest = rects.splice(127), x = Math.min(...rest.map(r => r.x)), y = Math.min(...rest.map(r => r.y));
+      rects.push({ x, y, width: Math.max(...rest.map(r => r.x + r.width)) - x, height: Math.max(...rest.map(r => r.y + r.height)) - y });
     }
     if (doc.querySelector(".agend-session-ended")) return fail("session_ended");
     let barrier = [...doc.querySelectorAll(BARRIERS)].some(el => visible(host, el));
     if (host.innerWidth < 900 && [...doc.querySelectorAll(".pv-panel")].some(el => visible(host, el))) barrier = true;
-    const active = doc.activeElement;
     if (doc.fullscreenElement || doc.pictureInPictureElement) barrier = true;
-    if (active && active !== doc.body && active !== doc.documentElement && (active.matches("input,select,textarea,[contenteditable]") || active.isContentEditable)) barrier = true;
+    // Focus alone does not change protected paint bounds. Composer/controls stay clipped; editable focus
+    // separately suppresses pointer delivery in the registry, and keyboard events never enter a Worker.
     return { ok: true, rects, front: !barrier, reason: barrier ? "stock_overlay" : "stock", agentFront: !barrier && ownerCss === "off", agentReason: barrier ? "stock_overlay" : ownerCss === "off" ? "stock" : "owner_css", settingsHref: "/settings/appearance" };
   } catch { return fail("stock_trust_unknown"); }
 }

package/dist/ui/shared/effect-trial-shadow.js

@@ -0,0 +1,62 @@
+/** #2039: fixed host-only closed shadow shell. Owner CSS has no exported parts or slots into it. */
+const roots = new WeakMap();
+const clear = root => { while (root.firstChild) root.removeChild(root.firstChild); };
+function sheetOf(host, record) {
+  try {
+    const link = record.link, sheet = link?.sheet;
+    return record.ready && !record.dead && roots.get(record.panel)?.current === record && record.root.mode === "closed" && record.root.host === record.panel
+      && link.getRootNode() === record.root && link.isConnected && link.disabled === false && sheet?.ownerNode === link && sheet.disabled === false
+      && sheet.href === new URL("/assets/effect-trial.css", host.location.origin).href && typeof sheet.insertRule === "function" && typeof sheet.deleteRule === "function" && sheet.cssRules ? sheet : null;
+  } catch { return null; }
+}
+/** Reflect only a shell issued here, after its fixed same-origin stylesheet loaded. Never a serialized capability. */
+export function effectTrialShadow(host, panel) {
+  const record = roots.get(panel)?.current;
+  return record && sheetOf(host, record) === record.proof?.sheet ? record.proof : null;
+}
+export function createEffectTrialShadow({ window: host, panel, title, labels, onStop, onClose, onReady, onError } = {}) {
+  if (!host?.document || panel?.ownerDocument !== host.document || typeof panel.attachShadow !== "function" || typeof onReady !== "function" || typeof onError !== "function") return null;
+  let slot = roots.get(panel), cleanup = null;
+  const clock = () => (host.performance ?? globalThis.performance).now(), later = host.setTimeout?.bind(host) ?? globalThis.setTimeout, cancel = host.clearTimeout?.bind(host) ?? globalThis.clearTimeout;
+  try {
+    if (slot?.current && !slot.current.dead) return null;
+    if (!slot) { slot = { root: panel.attachShadow({ mode: "closed" }), current: null }; roots.set(panel, slot); }
+    const root = slot.root; clear(root);
+    const doc = host.document, element = (tag, cls) => { const el = doc.createElement(tag); el.className = cls; return el; };
+    const link = element("link", "effect-trial-style"); link.setAttribute("rel", "stylesheet"); link.setAttribute("href", "/assets/effect-trial.css");
+    const head = element("header", "effect-trial-head"), label = element("strong", "effect-trial-label"), name = element("span", "effect-trial-title"), close = element("button", "effect-trial-close"), controls = element("div", "effect-trial-controls"), stop = element("button", "effect-trial-stop"), body = element("div", "effect-trial-body"), stage = element("div", "effect-trial-stage"), note = element("p", "effect-trial-note");
+    close.setAttribute("type", "button"); stop.setAttribute("type", "button"); stage.setAttribute("aria-hidden", "true");
+    head.append(label, name, close); controls.append(stop); body.append(stage);
+    const nodes = [head, controls, body, note]; for (const el of nodes) el.setAttribute("hidden", "");
+    const began = clock(); if (!Number.isFinite(began) || began < 0) return null;
+    let timer = null;
+    const record = { panel, root, link, stage, head, controls, body, note, close, stop, ready: false, dead: false, proof: null }; slot.current = record;
+    const text = (nextTitle, nextLabels) => {
+      if (record.dead || !nextLabels) return;
+      label.textContent = nextLabels.label; name.textContent = typeof nextTitle === "string" ? nextTitle : "";
+      close.textContent = nextLabels.close; stop.textContent = nextLabels.stop; note.textContent = nextLabels.note;
+      panel.setAttribute("data-effect-trial-theme", doc.documentElement.dataset.theme === "dark" ? "dark" : "light");
+    };
+    const failed = () => { if (!record.dead) { dispose(); try { onError("stage_unavailable"); } catch { /* cleanup already owns failure */ } } };
+    const loaded = () => {
+      if (record.dead || record.ready || slot.current !== record) return;
+      const at = clock(); if (!Number.isFinite(at) || at < began || at - began >= 10000) { failed(); return; }
+      record.ready = true; const sheet = sheetOf(host, record);
+      if (!sheet) { failed(); return; }
+      cancel(timer); timer = null;
+      record.proof = Object.freeze({ panel, root, link, sheet, stage, head, controls, body, note, close, stop });
+      for (const el of nodes) el.removeAttribute("hidden");
+      try { onReady(record.proof); } catch { failed(); }
+    };
+    const stopClick = () => { if (!record.dead) onStop?.(); }, closeClick = () => { if (!record.dead) onClose?.(); };
+    function dispose() {
+      if (record.dead) return; record.dead = true; cancel(timer); timer = null;
+      link.removeEventListener("load", loaded); link.removeEventListener("error", failed); stop.removeEventListener("click", stopClick); close.removeEventListener("click", closeClick);
+      if (slot.current === record) { slot.current = null; clear(root); }
+    }
+    cleanup = dispose;
+    link.addEventListener("load", loaded); link.addEventListener("error", failed); stop.addEventListener("click", stopClick); close.addEventListener("click", closeClick);
+    text(title, labels); timer = later(failed, 10000); root.append(link, ...nodes);
+    return Object.freeze({ dispose, text });
+  } catch { cleanup?.(); return null; }
+}

package/dist/ui/shared/effect-trial-source.js

@@ -64,7 +64,7 @@ export function createEffectTrialSource({ window: host, current, ownerCurrent, s
     const lease = { identity, reply, stage, owner, current: x.current, onStop: x.onStop, startedAt: x.startedAt, until, dead: false, checking: false, pending: new Set(), timer: null, off: null, binding: null };
     lease.binding = Object.freeze({ kind: "trial", key: identity.key, id: identity.id, source: lease, generation: identity.generation });
     active = lease; used.add(stage.receipt);
-    lease.off = watchEffectTrialStage(stage.receipt, () => stop(lease, "stage_ended"));
+    lease.off = watchEffectTrialStage(stage.receipt, reason => stop(lease, typeof reason === "string" ? reason : "stage_ended"));
     if (typeof lease.off !== "function" || constrainEffectTrialStage(stage.receipt, () => checked(lease)) !== true || !checked(lease)) { stop(lease, "stage_unavailable"); return null; }
     try { arm(lease); } catch { stop(lease, "trial_unavailable"); return null; }
     if (!checked(lease)) return null;