@songsid/agend 2.3.2 → 2.3.3-beta.10

package/dist/ui/settings-owner-effects.js

@@ -1,82 +0,0 @@
-// #1629: authoritative selectors and local slot controls; the app owns all playback and resource reads.
-import { html, useEffect, useRef, useState } from "/assets/app-html.js";
-import { register, t } from "/assets/app-i18n.js";
-import { useStore } from "/assets/app-store.js";
-import { OWNER_EFFECT_PREF_KEYS } from "/assets/app-prefs.js";
-import { getAppEffects, wakeEffects } from "./effects-waker.js";
-import { ownerEffectsStore, watchOwnerEffects, refreshOwnerEffects, saveOwnerEffects } from "/assets/owner-effect-prefs.js";
-register("ownerEffects", {
-  en: {
-    title: "Your effect choices", operatorTitle: "Host-wide effect choices", person: "Follows your sign-in; Discord and Telegram are separate.",
-    operator: "Shared by everyone signed in as the host.",
-    sidebar: "Sidebar", header: "Header", page: "Page", box: "Box", cursor: "Cursor", none: "None", savedChoice: "Saved choice",
-    unknown: "Choices are unavailable. Reload to try again.", changed: "This page can no longer access these choices. Reload and sign in again.",
-    unavailable: "No longer available", clear: "Clear", reload: "Reload choices", saved: "Saved.", failed: "Couldn't save. Reload choices and try again.",
-    savedRefresh: "Saved, but the choices couldn't be refreshed. Reload to check.", readOnly: "Sign in as an admin to change these choices.",
-    playback: "Effects don't require HTML-preview permission.",
-    pause: "Pause", resume: "Resume", running: "Running", cursorFailed: "The cursor could not be applied here. Clear or reload the choice to try again.", starting: "Starting", queued: "Waiting for a slot", paused: "Paused", off: "Playback is off or unavailable here.", budget: "Paused to keep the page responsive.", resumeFailed: "This effect cannot resume: the page or its safety history is not ready. Reload the page or choose another effect.",
-  },
-  "zh-TW": {
-    title: "你的效果選擇", operatorTitle: "主機共用效果選擇", person: "跟隨你的登入身分；Discord 與 Telegram 各自獨立。",
-    operator: "所有以主機身分登入的人共用。",
-    sidebar: "側邊欄", header: "頁首", page: "頁面", box: "區塊", cursor: "游標", none: "無", savedChoice: "已儲存的選擇",
-    unknown: "目前無法取得選擇，請重新載入再試。", changed: "這個頁面已無法存取選擇，請重新載入並登入。",
-    unavailable: "已無法使用", clear: "清除", reload: "重新載入選擇", saved: "已儲存。", failed: "無法儲存，請重新載入選擇再試。",
-    savedRefresh: "已儲存，但無法更新畫面；請重新載入確認。", readOnly: "請以管理員身分登入才能修改選擇。",
-    playback: "效果不需要 HTML 預覽權限。",
-    pause: "暫停", resume: "恢復", running: "播放中", cursorFailed: "這裡無法套用游標。可清除或重新載入選擇後再試。", starting: "啟動中", queued: "等待空位", paused: "已暫停", off: "這裡已關閉播放，或無法播放效果。", budget: "為維持頁面順暢，已暫停。", resumeFailed: "頁面或安全紀錄尚未就緒，無法恢復此效果。請重新載入頁面，或選擇其他效果。",
-  },
-});
-const text = key => t(`ownerEffects.${key}`);
-export function ownerEffectFits(manifest, key) {
-  if (!manifest || typeof manifest !== "object" || !OWNER_EFFECT_PREF_KEYS.includes(key)) return false;
-  if (key === "fx.cursor") return !!manifest.cursor;
-  const region = key.slice(3);
-  return Array.isArray(manifest.regions) && manifest.regions.includes(region) && (region !== "box" || !!manifest.box);
-}
-export function OwnerEffects({ catalog, busy = false }) {
-  const state = useStore(ownerEffectsStore), [message, setMessage] = useState(null), life = useRef({ alive: false, seq: 0 }), [runtime, setRuntime] = useState(null);
-  useEffect(() => { life.current.alive = true; const stop = watchOwnerEffects(); return () => { life.current.alive = false; life.current.seq++; stop(); }; }, []);
-  useEffect(() => {
-    // #2193: managing personal effects needs the runtime's view of them: it is woken here (it may still be asleep).
-    let live = true, entry = getAppEffects(), off = null, end = null;
-    const pull = () => { if (!live) return; const gates = entry?.gates(); setRuntime({ entry, snapshot: entry?.api?.ownerSnapshot?.(), cursor: entry?.cursorSnapshot?.(), available: !!entry && !entry.dead && gates.enabled && gates.show && gates.transportReady && !gates.safe && !gates.publicLink && !gates.reducedMotion }); };
-    const bind = () => { off = entry?.subscribe(pull) ?? null; end = entry?.onEnd(pull) ?? null; pull(); };
-    if (entry) bind(); else { pull(); void wakeEffects().then(() => { if (!live) return; entry = getAppEffects(); bind(); }); }
-    return () => { live = false; off?.(); end?.(); };
-  }, []);
-  const reload = () => { getAppEffects()?.api?.changedOwner?.(); return refreshOwnerEffects(); };
-  // Library reloads/own share changes can alter availability without changing the preference revision.
-  useEffect(() => { if (catalog) reload(); }, [catalog]);
-  if (state.scope === "none") return null;
-  const disabled = busy || state.busy || state.status !== "known" || state.revoked || !catalog?.canWrite;
-  const save = async (key, id) => {
-    if (disabled || !life.current.alive) return;
-    if (id !== null && !(catalog.effects || []).some(e => e.id === id && ownerEffectFits(e.manifest, key))) return;
-    const seq = ++life.current.seq; setMessage(null);
-    const result = await saveOwnerEffects({ [key]: id });
-    if (!life.current.alive || seq !== life.current.seq) return;
-    if (result.ok || result.saved) getAppEffects()?.api?.changedOwner?.();   // #2193: asleep, the saved slot wakes it (app-prefs)
-    setMessage(text(result.ok ? "saved" : result.saved ? "savedRefresh" : "failed"));
-  };
-  return html`<section class="s-fx-owner" aria-label=${text(state.scope === "operator" ? "operatorTitle" : "title")}><h4>${text(state.scope === "operator" ? "operatorTitle" : "title")}</h4><p class="sub">${text(state.scope === "operator" ? "operator" : "person")}</p>
-    <p class="sub">${text("playback")}</p>${catalog && !catalog.canWrite ? html`<p class="sub">${text("readOnly")}</p>` : null}
-    <button class="btn" type="button" disabled=${busy || state.busy || state.revoked} onClick=${reload}>${text("reload")}</button>
-    ${state.status !== "known" ? html`<p class="sub" role="status">${text(state.revoked ? "changed" : "unknown")}</p>` : OWNER_EFFECT_PREF_KEYS.map(key => {
-      const row = state.slots[key], options = (catalog?.effects || []).filter(e => ownerEffectFits(e.manifest, key));
-      const absent = !!row.id && !options.some(e => e.id === row.id);
-      const play = runtime?.snapshot?.rows?.find(r => r.slot === key && r.id === row.id);
-      const unavailable = row.status === "unavailable" || runtime?.snapshot?.slots?.[key]?.id === row.id && runtime.snapshot.slots[key].status === "unavailable";
-      const phase = !runtime?.available ? "off" : play?.reason === "paused" || play?.reason === "host_budget" ? "paused" : play?.phase === "running" ? "running" : play?.phase ? "starting" : play?.verdict === "queued" ? "queued" : "off";
-      return html`<div class="s-fx-owner-row" key=${key}><label>${text(key.slice(3))}<select class="s-fx-target" data-owner-slot=${key} disabled=${disabled} value=${row.id || ""} onChange=${e => save(key, e.target.value || null)}>
-        <option value="">${text("none")}</option>${absent ? html`<option value=${row.id} disabled>${text(row.status === "unavailable" ? "unavailable" : "savedChoice")}</option>` : null}
-        ${options.map(e => html`<option key=${e.id} value=${e.id}>${e.manifest.title}</option>`)}</select></label>
-        ${unavailable ? html`<span class="sub" role="status">${text("unavailable")}</span>` : null}
-        ${key === "fx.cursor" && row.status === "available" && row.id && !unavailable ? html`<span class="sub" role="status" data-owner-runtime=${key}>${text(!runtime?.available ? "off" : runtime.cursor?.id === row.id && runtime.cursor.status === "running" ? "running" : runtime.cursor?.id === row.id && runtime.cursor.status === "loading" ? "starting" : runtime.cursor?.id === row.id && runtime.cursor.status === "unavailable" ? "cursorFailed" : "off")}</span>` : null}
-        ${key !== "fx.cursor" && row.status === "available" && row.id && !unavailable ? html`<span class="sub" role="status" data-owner-runtime=${key}>${text(phase)}</span>
-          ${play?.reason === "host_budget" ? html`<span class="sub">${text("budget")}</span>` : null}
-          <button class="btn" type="button" data-owner-pause=${key} disabled=${!runtime?.available || !play} onClick=${() => runtime?.entry?.api?.pauseOwner?.(key)}>${text("pause")}</button>
-          <button class="btn" type="button" data-owner-resume=${key} disabled=${!runtime?.available || !play} onClick=${() => { if (!runtime?.entry?.api?.resumeOwner?.(key)) setMessage(text("resumeFailed")); }}>${text("resume")}</button>` : null}
-        ${row.id ? html`<button class="btn" type="button" data-owner-clear=${key} disabled=${disabled} onClick=${() => save(key, null)}>${text("clear")}</button>` : null}</div>`;
-    })}${message ? html`<p class="sub" role="status">${message}</p>` : null}</section>`;
-}

package/dist/ui/shared/effect-app-runtime.js

@@ -1,299 +0,0 @@
-/** #1629: app-owned pool; Chat contributes a lease, never another registry/loader. */
-import { effectPlaybackReason, EFFECT_BLOCK_REASONS } from "./effect-policy.js";
-import { createEffectTrialSource } from "./effect-trial-source.js";
-import { createOwnerEffectSource } from "./effect-owner-source.js";
-import { createEffectRuntimeLoader } from "./effect-runtime-loader.js";
-import { createEffectRegistry } from "./effect-registry.js";
-import { createEffectSafety } from "./effect-safety.js";
-import { stockEffectTrust } from "./effect-stock-trust.js";
-import { createEffectProfileCollector } from "./effect-profiles.js";
-import { effectPlaybackIdentity, createEffectWriter } from "./effect-chat-runtime.js";
-
-const episodes = new WeakSet();
-
-/** `current` belongs to the page/session episode. Route cleanup only releases its contribution. */
-export function createAppEffectRuntime({ window: host, current, observe, onChange = () => {}, onDispose = () => {}, resolveOwnerTarget = null, onOwnerUnavailable = () => {}, factories = {} }) {
-  let dead = false, claimed = false, error = null, loader = null, registry = null, writer = null, source = null, personal = null, trial = null, pending = null, lastMetadata = null, serial = 0, revision = 0, stamp = null, syncing = false, queued = false;
-  const bindings = new Map(), profiles = new Map();
-  let lastContext = null, playbackUnavailable = null;
-  const identity = effectPlaybackIdentity(host), auth = host?.AgendAuth;
-  const safe = fn => { try { return fn(); } catch { return null; } };
-  const alive = () => { if (dead) return false; const value = safe(() => current() === true && !auth.sessionEnded()); return !dead && value === true; };
-  const sourceAlive = s => {
-    if (!s || !alive() || s !== source || s.dead) return false;
-    const value = safe(() => s.current() === true && s.element.isConnected === true);
-    return !dead && s === source && !s.dead && value === true;
-  };
-  const placementIdentity = p => JSON.stringify([p.by, p.manifest.layer, p.params]);
-  const clock = () => host.performance.now();
-  let offAuth = null, disposed = null;
-  const snapshot = s => {
-    const effects = s?.metadata?.effects ?? [], known = registry?.snapshot?.() ?? [];
-    const rows = effects.map(p => {
-      const b = s.bindings.get(p.id), row = known.find(r => b && r.key === b.key && r.id === p.id);
-      if (row && !s.error && !playbackUnavailable) return row.reason == null && row.phase == null ? { ...row, phase: "loading" } : row;
-      return { id: p.id, key: b?.key ?? null, verdict: "off", phase: null, quality: null,
-        reason: s.error ?? playbackUnavailable ?? effectPlaybackReason(lastContext) ?? (!p.manifest.regions.includes("chat") ? "region_unavailable" : "runtime_unavailable") };
-    });
-    return { error: error ?? s?.error ?? null, rows, effects, loading: !!s && !s.dead && s.metadata === null && !s.error };
-  };
-  function tell() {
-    const s = source, value = snapshot(s); if (dead) return;
-    if (sourceAlive(s)) {
-      const next = JSON.stringify(value);
-      if (next !== s.lastSnapshot) { s.lastSnapshot = next; safe(() => s.onChange(value)); }
-    }
-    if (!dead) safe(() => onChange(snapshot(source)));
-  }
-  function reportPlayback(s) {
-    if (!sourceAlive(s) || identity.scope !== "owner") return;
-    const now = safe(clock);
-    if (!Number.isFinite(now) || now < 0 || s.reportClock !== null && now < s.reportClock) { s.reporter.dispose(); return; }
-    s.reportClock = now;
-    const value = snapshot(s);
-    for (const id of s.reported.keys()) if (!value.effects.some(p => p.id === id)) s.reported.delete(id);
-    for (const row of value.rows) {
-      if (!sourceAlive(s)) return;
-      const status = row.phase === "running" && row.reason == null ? "playing" : "blocked";
-      const reason = status === "playing" ? null : EFFECT_BLOCK_REASONS.includes(row.reason) ? row.reason : "unknown";
-      const device = lastContext?.constrained === true ? "constrained" : "standard";
-      const next = JSON.stringify([status, reason, device]), last = s.reported.get(row.id);
-      if (last && (now - last.at < 10000 || next === last.value && now - last.at < 60000)) continue;
-      s.reported.set(row.id, { at: now, value: next });
-      void s.reporter.post(`/ui/effects/profile/${row.id}?instance=${encodeURIComponent(s.name)}&ownerEpoch=${identity.epoch}`,
-        { v: 1, kind: "playback", device, status, reason });
-    }
-    // No server polling or unbounded retries: at most one observation per effect / 10s, a 60s heartbeat.
-    if (sourceAlive(s)) s.reportTimer = host.setTimeout(() => reportPlayback(s), 10000);
-  }
-  function discard(s) {
-    if (!s || s.dead) return;
-    s.dead = true; s.generation++; s.metadata = null;
-    safe(() => host.clearTimeout(s.reportTimer)); safe(() => s.reporter?.dispose());
-    if (source === s) source = null;
-    safe(() => trial?.stopFor(s));
-    for (const b of s.bindings.values()) bindings.delete(b.key); s.bindings.clear();
-    if (pending?.source === s) safe(() => pending.controller.abort());
-    revision++; stamp = null;
-  }
-  function dispose(restartable = false) {
-    if (dead) return disposed; dead = true; discard(source);
-    safe(() => trial?.dispose()); safe(() => pending?.controller.abort()); safe(() => registry?.dispose?.()); safe(() => loader?.dispose?.()); safe(() => personal?.dispose()); safe(() => writer?.dispose()); safe(() => offAuth?.());
-    safe(() => host?.removeEventListener?.("pagehide", dispose));
-    for (const row of profiles.values()) safe(() => row.collector.dispose()); profiles.clear(); bindings.clear(); safe(() => onDispose({ error }));
-    disposed = Promise.all([safe(() => loader?.whenDisposed?.()), safe(() => registry?.whenDisposed?.())]).then(() => { if (restartable === true && claimed) episodes.delete(host); });
-    return disposed;
-  }
-  function fail(reason) { if (dead) return; error = reason; dispose(); safe(() => onChange({ error, rows: [], effects: [], loading: false })); }
-  const unavailable = { ok: false, sync() {}, changedChat() {}, reply() {}, detachChat() {}, attachChat() { return null; }, attachTrial() { return null; }, stopTrial() {}, trialSnapshot: () => ({ rows: [] }), snapshot: () => snapshot(null), dispose };
-  if (!host || typeof host !== "object" || episodes.has(host) || !identity || typeof current !== "function" || typeof observe !== "function" || typeof auth?.onSessionEnd !== "function" || typeof auth?.sessionEnded !== "function") return unavailable;
-  episodes.add(host); claimed = true; // Claim before invoking current/auth callbacks: one attempt per Window episode.
-  if (!alive()) { dispose(); return unavailable; }
-  try {
-    offAuth = auth.onSessionEnd(dispose);
-    if (!alive()) { dispose(); safe(() => offAuth?.()); return unavailable; }
-    host.addEventListener?.("pagehide", dispose);
-  } catch { fail("runtime_unavailable"); return unavailable; }
-  const make = (key, fn) => factories[key] ?? fn;
-  function bindingAlive(b) { if (b?.kind === "trial") return trial?.current(b) === true; if (b?.kind === "owner") return personal?.current(b) === true; return !!b && sourceAlive(b.source) && b.source.generation === b.generation && bindings.get(b.key) === b && b.source.bindings.get(b.id) === b; }
-  const bindingFor = (key, id) => { const b = bindings.get(key) ?? trial?.binding(key, id) ?? personal?.binding(key, id); return b?.id === id && bindingAlive(b) ? b : null; };
-  try {
-    writer = createEffectWriter(host, alive);
-    loader = make("loader", createEffectRuntimeLoader)({ window: host, ownerEpoch: identity.epoch, current: alive, onRevoke: () => fail("runtime_unavailable") });
-    if (!loader.ok || typeof loader.placementsSettled !== "function" || typeof loader.resourceSettled !== "function") throw Error("runtime_unavailable");
-    registry = make("registry", createEffectRegistry)({ window: host, origin: host.location?.origin, boot: host.document.body.dataset.effectBoot,
-      load: async (descriptor, signal) => {
-        const b = bindingFor(descriptor.key, descriptor.id);
-        if (!bindingAlive(b) || descriptor.id !== b.id || signal.aborted) return null;
-        if (b.kind === "trial") return trial.load(b, signal);
-        if (b.kind === "owner") return personal.load(b, signal);
-        const value = await loader.resourceSettled({ id: b.id, instance: b.source.name }, signal);
-        if (!bindingAlive(b) || signal.aborted) return null;
-        if (!value) { refuseSource(b.source); return null; }
-        return value;
-      },
-      safety: make("safety", createEffectSafety)({ storage: host.localStorage, crypto: host.crypto }),
-      stockSnapshot: ({ frameRoot }) => make("stock", stockEffectTrust)(host, { frameRoot, ownerCss: observe().ownerCss }),
-      onChange() { try { tell(); emit(); } catch { fail("runtime_unavailable"); } },
-      onMount(owner) {
-        const b = bindingFor(owner.key, owner.id); if (identity.scope !== "owner" || !bindingAlive(b) || b.id !== owner.id || !owner.current()) return;
-        const collector = make("collector", createEffectProfileCollector)({ key: owner.key, id: owner.id, device: owner.device, clock });
-        const began = safe(clock);
-        if (collector.ok && Number.isFinite(began) && began >= 0 && bindingAlive(b) && owner.current()) profiles.set(owner, { binding: b, collector, began, attempted: null }); else collector.dispose?.();
-      },
-      onRetire(owner) { profiles.get(owner)?.collector.dispose(); profiles.delete(owner); },
-      onProfile(raw, owner) {
-        const row = profiles.get(owner); if (!row || !bindingAlive(row.binding) || !owner.current()) return;
-        row.collector.add(raw); if (row.binding.kind === "trial") return; // Diagnostic samples stay transient; shared safety still runs in registry.
-        const now = clock();
-        if (!Number.isFinite(now) || now < row.began || now - row.began < 10000 && raw.verdict !== "paused" || row.attempted !== null && now - row.attempted < 10000) return;
-        const report = row.collector.report(); if (!report || !bindingAlive(row.binding) || !owner.current()) return;
-        row.attempted = now;
-        const query = row.binding.kind === "owner" ? "" : `instance=${encodeURIComponent(row.binding.source.name)}&`;
-        void writer.post(`/ui/effects/profile/${owner.id}?${query}ownerEpoch=${identity.epoch}`, report.profile);
-      }, clock,
-    });
-    if (!registry.ok) {
-      // Keep authenticated placement metadata available for explanations. This inert adapter cannot create,
-      // load, resume, send to, or authorize a frame; a failed paint subsystem is never permission.
-      playbackUnavailable = "unsupported_host";
-      safe(() => registry?.dispose?.());
-      registry = { ok: true, frameRoot: null, update() {}, snapshot: () => [], publish() {}, resume: () => false, dispose() {} };
-    }
-    if (identity.scope === "owner") trial = make("trialSource", createEffectTrialSource)({ window: host, current: () => {
-      if (!alive()) return false; const v = observe(), c = v.context;
-      return alive() && c.enabled === true && c.show === true && c.transportReady === true
-        && c.safe === false && c.publicLink === false && c.reducedMotion === false && c.hidden === false;
-    }, ownerCurrent: (s, name) => sourceAlive(s) && s.name === name,
-      stock: () => registry.frameRoot ? make("stock", stockEffectTrust)(host, { frameRoot: registry.frameRoot, ownerCss: observe().ownerCss }) : null,
-      readResource: (spec, signal) => typeof loader.trialResourceSettled === "function" ? loader.trialResourceSettled(spec, signal) : Promise.resolve(null),
-      onChange() { revision++; stamp = null; sync(); tell(); },
-    });
-    if (identity.scope === "owner" && typeof resolveOwnerTarget === "function") {
-      if (typeof loader.ownerSettled !== "function") throw Error("runtime_unavailable");
-      personal = createOwnerEffectSource({ current: alive,
-        readMetadata: signal => loader.ownerSettled(signal), readResource: (spec, signal) => loader.resourceSettled(spec, signal), resolveTarget: resolveOwnerTarget,
-        stock: () => registry.frameRoot ? make("stock", stockEffectTrust)(host, { frameRoot: registry.frameRoot, ownerCss: observe().ownerCss }) : null,
-        onChange() { revision++; stamp = null; sync(); tell(); }, onUnavailable: (slot, id) => safe(() => onOwnerUnavailable(slot, id)),
-      });
-      if (!personal.ok) throw Error("runtime_unavailable");
-    }
-  } catch { fail("runtime_unavailable"); return unavailable; }
-  function descriptors(s) {
-    if (!sourceAlive(s) || s.error) return [];
-    return (s.metadata?.effects ?? []).filter(p => p.manifest.regions.includes("chat")).map((p, order) => {
-      let b = s.bindings.get(p.id); const identity = placementIdentity(p);
-      if (!b || b.identity !== identity) {
-        if (b) bindings.delete(b.key);
-        b = Object.freeze({ key: `chat:${s.serial}:${p.id}`, id: p.id, source: s, generation: s.generation, identity });
-        s.bindings.set(p.id, b); bindings.set(b.key, b);
-      }
-      return { key: b.key, id: p.id, by: p.by, region: "chat", layer: p.manifest.layer, order, paused: s.paused.get(p.id) === identity, visible: true, instance: s.name, params: p.params, element: s.element };
-    });
-  }
-  function observation() {
-    const value = observe();
-    return { ...value, context: { ...value.context, openInstance: sourceAlive(source) ? source.name : null } };
-  }
-  function emit() {
-    if (!alive() || !registry?.ok) return;
-    const s = source, value = observation();
-    if (sourceAlive(s)) { const state = safe(() => s.observe().state); if (sourceAlive(s) && ["idle", "working", "needs_you", "stopped"].includes(state)) registry.publish("state", { state }, s.name); }
-    if (alive() && ["light", "dark"].includes(value.mode)) registry.publish("theme", { mode: value.mode });
-  }
-  function refuseSource(s) {
-    if (!sourceAlive(s)) return;
-    s.error = "resource_unavailable"; s.generation++;
-    for (const b of s.bindings.values()) bindings.delete(b.key); s.bindings.clear(); revision++; stamp = null; sync(); tell();
-  }
-  function queueSync() {
-    if (queued || dead) return; queued = true;
-    Promise.resolve().then(() => { queued = false; if (alive()) sync(); else dispose(); });
-  }
-  function sync() {
-    if (!alive()) { dispose(); return; } if (syncing) { queueSync(); return; }
-    syncing = true;
-    try {
-      const candidate = source;
-      if (candidate && !sourceAlive(candidate)) discard(candidate);
-      const before = revision, value = observation(), s = source;
-      if (!alive() || revision !== before || s !== source) { if (alive()) queueSync(); return; }
-      const entries = [...(personal?.descriptors() ?? []), ...(trial?.descriptors() ?? []), ...descriptors(s)];
-      if (!alive() || revision !== before || s !== source) { stamp = null; if (alive()) queueSync(); return; }
-      lastContext = { ...value.context };
-      const next = JSON.stringify([revision, value.context, entries.map(d => [d.key, d.paused])]);
-      if (stamp !== next) {
-        if (!alive() || revision !== before || s !== source) { stamp = null; if (alive()) queueSync(); return; }
-        stamp = next; registry.update(entries, value.context);
-      }
-      if (!alive() || revision !== before || s !== source) { stamp = null; if (alive()) queueSync(); return; }
-      emit();
-      const c = value.context;
-      // Metadata describes placements, not executable resources. Its existing session/epoch/current and
-      // shared settled-lane fences apply even when this viewer has declined playback. No code is fetched here.
-      if (!pending) {
-        const ownerNeeds = identity.scope === "owner" && !c.publicLink && c.enabled && c.show && c.transportReady && !c.safe && !c.reducedMotion && !c.hidden && personal?.needsMetadata() === true, chatNeeds = sourceAlive(s) && !s.error && !s.metadata;
-        if (!alive() || revision !== before || s !== source) { if (alive()) queueSync(); return; }
-        if (ownerNeeds && (!chatNeeds || lastMetadata !== "owner")) void readPersonal();
-        else if (chatNeeds) void read(s);
-      }
-      tell();
-    } catch { fail("runtime_unavailable"); }
-    finally { syncing = false; }
-  }
-  async function readPersonal() {
-    if (!personal || pending || !personal.needsMetadata() || !alive()) return;
-    const op = { source: personal, controller: new host.AbortController() }; pending = op; lastMetadata = "owner";
-    try { await personal.read(op.controller.signal); }
-    catch { fail("runtime_unavailable"); }
-    finally { if (pending === op) { pending = null; if (alive()) sync(); } }
-  }
-  function changedOwner() {
-    if (!personal || !alive()) return;
-    if (pending?.source === personal) safe(() => pending.controller.abort());
-    personal.invalidate();
-  }
-  function ownerSnapshot() {
-    return { ...(personal?.snapshot() ?? { error: null, rev: -1, loading: false, slots: {} }),
-      rows: registry?.snapshot().flatMap(row => { const b = personal?.binding(row.key, row.id); return b ? [{ ...row, slot: b.slot }] : []; }) ?? [] };
-  }
-  async function cursorImageSettled(selection, signal) {
-    const own = personal?.cursorSelection();
-    if (!alive() || !own || !personal.cursorCurrent(selection) || signal?.aborted) return null;
-    let value; try { value = await loader.cursorImageSettled(own.id, signal); } catch { value = null; }
-    if (!alive() || !personal.cursorCurrent(own) || !personal.cursorCurrent(selection) || signal?.aborted) return null;
-    if (!value) { personal.refuseCursor(own); return null; }
-    return value;
-  }
-  async function read(s) {
-    if (!sourceAlive(s) || pending || s.error) return;
-    const op = { source: s, generation: s.generation, controller: new host.AbortController() }; pending = op; lastMetadata = "chat";
-    try {
-      const answer = await loader.placementsSettled(s.name, op.controller.signal);
-      if (!sourceAlive(s) || op.generation !== s.generation || pending !== op || op.controller.signal.aborted) return;
-      if (!answer) { refuseSource(s); return; }
-      s.metadata = answer;
-      for (const [id, identity] of s.paused) if (!answer.effects.some(p => p.id === id && placementIdentity(p) === identity)) s.paused.delete(id);
-      revision++; stamp = null; sync(); tell();
-    } catch { if (sourceAlive(s) && op.generation === s.generation) refuseSource(s); }
-    finally { if (pending === op) { pending = null; if (alive()) sync(); } }
-  }
-  function changedSource(s) {
-    if (!sourceAlive(s) || s.error) return;
-    s.generation++; s.metadata = null;
-    for (const b of s.bindings.values()) bindings.delete(b.key); s.bindings.clear();
-    if (pending?.source === s) safe(() => pending.controller.abort()); revision++; stamp = null; sync(); tell();
-  }
-  function publishReply(s, event) { if (host.document.body.dataset.webTransport !== "poll" && sourceAlive(s) && !s.error && event.instance === s.name) registry.publish("reply", {}, s.name); }
-  function attachChat(options) {
-    discard(source); const expected = revision; sync();
-    if (!alive() || revision !== expected || source !== null) return null;
-    const { name, element, current: ownCurrent, observe: ownObserve, onChange: ownChange = () => {} } = options ?? {};
-    if (!alive() || typeof name !== "string" || name.length < 1 || name.length > 128 || !element || element.isConnected !== true || typeof ownCurrent !== "function" || typeof ownObserve !== "function" || safe(() => ownCurrent() === true) !== true || revision !== expected || source !== null) return null;
-    const s = { name, element, current: ownCurrent, observe: ownObserve, onChange: ownChange, serial: ++serial, generation: 0, dead: false, error: null, metadata: null, bindings: new Map(), paused: new Map() };
-    source = s;
-    s.reporter = createEffectWriter(host, () => sourceAlive(s)); s.reported = new Map(); s.reportClock = null;
-    s.reportTimer = host.setTimeout(() => reportPlayback(s), 10000);
-    revision++; stamp = null;
-    const placement = id => sourceAlive(s) && !s.error ? s.metadata?.effects.find(p => p.id === id) : null;
-    const changed = () => changedSource(s);
-    const api = { ok: true, sync,
-      changed,
-      reply(event) { publishReply(s, event); },
-      pause(id) { const p = placement(id); if (!p) return false; s.paused.set(id, placementIdentity(p)); revision++; sync(); return true; },
-      resume(id) { const p = placement(id); if (!p) return false; s.paused.delete(id); revision++; sync(); const b = s.bindings.get(id); return bindingAlive(b) && registry.resume(b.key); },
-      async remove(id) { const p = placement(id); if (identity.scope !== "owner" || !p) return false; const generation = s.generation; const ok = await writer.post("/ui/effects/remove", { instance: s.name, id }); if (!sourceAlive(s) || generation !== s.generation) return false; if (ok) changed(); return ok; },
-      snapshot: () => sourceAlive(s) ? snapshot(s) : { error: null, rows: [], effects: [], loading: false },
-      dispose() { if (source !== s) return; discard(s); sync(); },
-    };
-    sync(); tell(); return sourceAlive(s) ? api : null;
-  }
-  return { ok: true, playbackAvailable: playbackUnavailable === null, sync, attachChat, changedOwner, ownerSnapshot,
-    attachTrial(options) { const s = source; return trial && !playbackUnavailable && sourceAlive(s) ? trial.attach(options, s) : null; },
-    stopTrial() { trial?.stop(); },
-    trialSnapshot() { return { rows: registry?.snapshot().filter(row => trial?.binding(row.key, row.id)) ?? [] }; },
-    cursorSelection: () => personal?.cursorSelection() ?? null, cursorImageSettled,
-    pauseOwner(slot) { return personal?.pause(slot) === true; },
-    resumeOwner(slot) { if (!personal?.unpause(slot)) return false; const b = personal.slotBinding(slot); return bindingAlive(b) && registry.resume(b.key); },
-    changedChat() { changedSource(source); }, reply(event) { publishReply(source, event); }, detachChat() { discard(source); sync(); }, snapshot: () => snapshot(source), dispose };
-}

package/dist/ui/shared/effect-baseline.js

@@ -1,64 +0,0 @@
-/** #1629: host cadence before ANY effect frame; never learns a baseline from an active effect. */
-const finite = n => typeof n === "number" && Number.isFinite(n);
-export function captureEffectBaseline({ window: host, empty, clock = () => host.performance.now() } = {}) {
-  let finish, settled = false, raf = null, timer = null, last = null, first = null, count = 0;
-  const promise = new Promise(resolve => { finish = resolve; });
-  const end = value => {
-    if (settled) return;
-    settled = true;
-    if (raf !== null) host.cancelAnimationFrame(raf);
-    if (timer !== null) host.clearTimeout(timer);
-    host.document.removeEventListener("visibilitychange", visibility);
-    finish(value);
-  };
-  const fail = reason => end({ ok: false, reason });
-  const gates = () => {
-    try { return host.document.visibilityState === "visible" && empty() === true; } catch { return false; }
-  };
-  const time = () => {
-    let now; try { now = clock(); } catch { return null; }
-    if (!finite(now) || now < 0 || last !== null && now < last) return null;
-    last = now; return now;
-  };
-  const visibility = () => { if (!gates()) fail("baseline_unavailable"); };
-  const step = () => {
-    if (settled) return;
-    raf = null;
-    if (!gates()) { fail("baseline_unavailable"); return; }
-    const now = time();
-    if (now === null) { fail("clock_unavailable"); return; }
-    if (now - began >= 10000) { fail("baseline_timeout"); return; }
-    if (first === null) { first = now; count = 1; }
-    else if (now > sample) count++;
-    sample = now;
-    if (now - first >= 2000) {
-      const fps = (count - 1) * 1000 / (now - first);
-      if (!finite(fps) || fps <= 0 || fps > 1000 || !gates()) fail("baseline_unavailable");
-      else end({ ok: true, baselineFps: fps });
-      return;
-    }
-    raf = host.requestAnimationFrame(step);
-  };
-  let began = null, sample = null;
-  if (!host || !host.document || typeof empty !== "function" || typeof clock !== "function" || ["requestAnimationFrame", "cancelAnimationFrame", "setTimeout", "clearTimeout"].some(k => typeof host[k] !== "function") || typeof host.document.addEventListener !== "function" || typeof host.document.removeEventListener !== "function") {
-    settled = true; finish({ ok: false, reason: "baseline_unsupported" });
-    return { promise, cancel() {} };
-  }
-  began = time();
-  if (began === null) fail("clock_unavailable");
-  else if (!gates()) fail("baseline_unavailable");
-  else {
-    host.document.addEventListener("visibilitychange", visibility);
-    const deadline = () => {
-      if (settled) return;
-      if (!gates()) { fail("baseline_unavailable"); return; }
-      const now = time();
-      if (now === null) fail("clock_unavailable");
-      else if (now - began >= 10000) fail("baseline_timeout");
-      else timer = host.setTimeout(deadline, Math.max(1, 10000 - (now - began)));
-    };
-    timer = host.setTimeout(deadline, 10000);
-    raf = host.requestAnimationFrame(step);
-  }
-  return { promise, cancel() { fail("baseline_cancelled"); } };
-}

package/dist/ui/shared/effect-chat-runtime.js

@@ -1,162 +0,0 @@
-import { chatEffectIdentity } from "./effect-display-metadata.js";
-/** #1629: one committed local Chat lease joins the reviewed host-only effect primitives. */
-import { createEffectRuntimeLoader } from "./effect-runtime-loader.js";
-import { createEffectRegistry } from "./effect-registry.js";
-import { createEffectSafety } from "./effect-safety.js";
-import { stockEffectTrust } from "./effect-stock-trust.js";
-import { createEffectProfileCollector } from "./effect-profiles.js";
-
-const writers = new WeakMap();
-/** Physical write reservations outlive a canceled caller. Responses never supply runtime authority. */
-export function createEffectWriter(host, current) {
-  let dead = false;
-  const own = new Set();
-  if (!writers.has(host)) writers.set(host, new Set());
-  const all = writers.get(host);
-  let previous = null;
-  function stop() { if (dead) return; dead = true; for (const op of own) op.cancel(); }
-  function time() {
-    let now; try { now = host.performance.now(); } catch { stop(); return null; }
-    if (!Number.isFinite(now) || now < 0 || previous !== null && now < previous) { stop(); return null; }
-    previous = now; return now;
-  }
-  return {
-    async post(path, body) {
-      if (dead || !current() || all.size >= 3) return false;
-      const began = time(); if (began === null) return false;
-      const text = JSON.stringify(body); if (new TextEncoder().encode(text).length > 16384) return false;
-      const controller = new host.AbortController(), op = { controller }; own.add(op); all.add(op);
-      let timer, cancel;
-      const aborted = new Promise(resolve => { cancel = () => { controller.abort(); resolve(false); }; }); op.cancel = cancel;
-      const work = Promise.resolve().then(async () => {
-        if (dead || !current() || controller.signal.aborted) return false;
-        const r = await host.fetch(path, { method: "POST", credentials: "same-origin", cache: "no-store", redirect: "error", headers: { "Content-Type": "application/json" }, body: text, signal: controller.signal });
-        // Settle the body before returning the physical reservation, even if the caller already timed out.
-        try { await r.body?.cancel(); } catch { /* no data is consumed */ }
-        const now = time();
-        return !dead && current() && !controller.signal.aborted && Number.isFinite(began) && began >= 0 && now !== null && now >= began && now - began < 10000 && r.ok && !r.redirected;
-      }).catch(() => false).finally(() => { host.clearTimeout(timer); controller.abort(); own.delete(op); all.delete(op); });
-      timer = host.setTimeout(cancel, 10000);
-      return Promise.race([work, aborted]);
-    },
-    dispose: stop,
-  };
-}
-
-/** Frozen, server-rendered session identity only. A header-token/public/View load has no identity. */
-export { chatEffectIdentity } from "./effect-display-metadata.js";
-/** Chat-only public/guest capability stays separate from personal preferences and management. */
-export function effectPlaybackIdentity(host) {
-  try {
-    const b = host.document.body.dataset;
-    if (b.mode !== "full" || typeof b.effectEpoch !== "string" || !/^[a-f0-9]{16}$/.test(b.effectEpoch)) return null;
-    if (b.effectScope === "owner") {
-      const own = chatEffectIdentity(host);
-      return own?.epoch === b.effectEpoch ? Object.freeze({ epoch: b.effectEpoch, scope: "owner" }) : null;
-    }
-    if (b.effectScope === "chat" && (b.publicLink === "1" && b.webTransport === "poll" || b.tier === "guest")) return Object.freeze({ epoch: b.effectEpoch, scope: "chat" });
-  } catch { /* no session capability */ }
-  return null;
-}
-export function chatEffectState(state, name) {
-  const inst = state.instances?.find(i => i.name === name);
-  if (!inst) return null;
-  if (["stopped", "paused"].includes(inst.status)) return "stopped";
-  if (Object.hasOwn(state.awaiting ?? {}, name)) return "needs_you";
-  return ["working", "stuck"].includes(state.exec?.[name]) ? "working" : state.exec?.[name] === "idle" ? "idle" : null;
-}
-
-/** `observe` supplies closed host gates, never event/message content. No timers poll server state. */
-export function createChatEffectRuntime({ window: host, name, element, current, observe, onChange = () => {}, factories = {} }) {
-  let dead = false, error = null, loader = null, registry = null, writer = null, active = null, queued = false, generation = 0, metadata = null, ctx = null, lastContext = null;
-  const paused = new Map(), owners = new Map();
-  const placementIdentity = p => JSON.stringify([p.by, p.manifest.layer, p.params]);
-  const identity = chatEffectIdentity(host), auth = host.AgendAuth;
-  const alive = () => !dead && current() === true && element.isConnected === true && !auth.sessionEnded();
-  const tell = () => { if (!dead && current()) onChange({ error, rows: registry?.snapshot() ?? [], effects: metadata?.effects ?? [], loading: metadata === null && !error }); };
-  const fail = reason => { if (dead) return; error = reason; generation++; metadata = null; active?.controller.abort(); registry?.dispose?.(); registry = null; loader?.dispose?.(); loader = null; writer?.dispose(); tell(); };
-  function dispose() {
-    if (dead) return; dead = true; generation++; active?.controller.abort(); registry?.dispose?.(); loader?.dispose?.(); writer?.dispose(); offAuth?.();
-    for (const value of owners.values()) value.collector.dispose(); owners.clear();
-  }
-  let offAuth = null;
-  if (!identity || typeof auth?.onSessionEnd !== "function" || typeof auth?.sessionEnded !== "function" || typeof name !== "string" || name.length < 1 || name.length > 128 || !current()) return { ok: false, dispose };
-  offAuth = auth.onSessionEnd(dispose); // May synchronously replay an already-ended episode.
-  if (dead || !alive()) { dispose(); return { ok: false, dispose }; }
-  const clock = () => host.performance.now();
-  try {
-    const make = (key, fn) => factories[key] ?? fn;
-    writer = createEffectWriter(host, alive);
-    loader = make("loader", createEffectRuntimeLoader)({ window: host, ownerEpoch: identity.epoch, current: alive });
-    if (!loader.ok) throw Error("runtime_unavailable");
-    registry = make("registry", createEffectRegistry)({ window: host, origin: host.location?.origin, boot: host.document.body.dataset.effectBoot,
-      load: async (d, signal) => {
-        const mine = generation, value = await loader.resource({ id: d.id, instance: name }, signal);
-        if (!alive() || mine !== generation || signal.aborted) return null;
-        if (!value) { fail("resource_unavailable"); return null; }
-        return value;
-      },
-      safety: make("safety", createEffectSafety)({ storage: host.localStorage, crypto: host.crypto }),
-      stockSnapshot: ({ frameRoot }) => make("stock", stockEffectTrust)(host, { frameRoot, ownerCss: observe().ownerCss }),
-      onChange() { tell(); emit(); },
-      onMount(owner) {
-        if (!alive() || !owner.current()) return;
-        const collector = make("collector", createEffectProfileCollector)({ key: owner.key, id: owner.id, device: owner.device, clock });
-        if (collector.ok) owners.set(owner, { collector, began: clock(), attempted: null });
-      },
-      onRetire(owner) { const row = owners.get(owner); row?.collector.dispose(); owners.delete(owner); },
-      onProfile(raw, owner) {
-        const row = owners.get(owner); if (!row || !alive() || !owner.current()) return;
-        row.collector.add(raw);
-        const now = clock();
-        if (now - row.began < 10000 && raw.verdict !== "paused" || row.attempted !== null && now - row.attempted < 10000) return;
-        const report = row.collector.report(); if (!report || !owner.current()) return;
-        row.attempted = now;
-        void writer.post(`/ui/effects/profile/${owner.id}?instance=${encodeURIComponent(name)}&ownerEpoch=${identity.epoch}`, report.profile);
-      }, clock,
-    });
-    if (!registry.ok) throw Error("runtime_unavailable");
-  } catch { fail("runtime_unavailable"); }
-  function descriptors() {
-    return (metadata?.effects ?? []).filter(p => p.manifest.regions.includes("chat")).map((p, order) => ({ key: `chat:${p.id}`, id: p.id, by: p.by, region: "chat", layer: p.manifest.layer,
-      order, paused: paused.get(p.id) === placementIdentity(p), visible: true, instance: name, params: p.params, element }));
-  }
-  function emit() {
-    if (!alive() || error || !registry?.ok) return;
-    const value = observe();
-    if (["idle", "working", "needs_you", "stopped"].includes(value.state)) registry.publish("state", { state: value.state }, name);
-    if (["light", "dark"].includes(value.mode)) registry.publish("theme", { mode: value.mode });
-  }
-  function sync() {
-    if (!alive()) { dispose(); return; } if (error) return;
-    const value = observe(); ctx = value.context;
-    const stamp = JSON.stringify(ctx);
-    if (stamp !== lastContext) { lastContext = stamp; registry.update(descriptors(), ctx); }
-    emit();
-    if (!metadata && !active && ctx.enabled && ctx.show && ctx.transportReady && !ctx.safe && !ctx.publicLink && !ctx.reducedMotion && !ctx.hidden) void read();
-  }
-  async function read() {
-    if (!alive() || error || active) return;
-    const op = { controller: new host.AbortController(), generation }; active = op;
-    try {
-      const answer = await loader.placements(name, op.controller.signal);
-      if (!alive() || active !== op) return;
-      if (op.generation !== generation) return;
-      if (!answer) { fail("resource_unavailable"); return; }
-      metadata = answer;
-      for (const [id, stamp] of paused) if (!answer.effects.some(p => p.id === id && placementIdentity(p) === stamp)) paused.delete(id);
-      lastContext = null; sync(); tell();
-    } finally {
-      if (active === op) active = null;
-      if (queued && alive() && !error) { queued = false; sync(); }
-    }
-  }
-  return { ok: !error && !dead, sync,
-    changed() { if (!alive() || error) return; generation++; metadata = null; registry.update([], observe().context); lastContext = null; if (active) queued = true; else sync(); tell(); },
-    reply(event) { if (alive() && !error && event.instance === name) registry.publish("reply", {}, name); },
-    pause(id) { if (!alive() || !metadata?.effects.some(p => p.id === id)) return false; paused.set(id, placementIdentity(metadata.effects.find(p => p.id === id))); lastContext = null; sync(); return true; },
-    resume(id) { if (!alive() || error || !metadata?.effects.some(p => p.id === id)) return false; paused.delete(id); lastContext = null; sync(); return registry.resume(`chat:${id}`); },
-    async remove(id) { if (!alive() || error || !metadata?.effects.some(p => p.id === id)) return false; const mine = generation; const ok = await writer.post("/ui/effects/remove", { instance: name, id }); if (!alive() || mine !== generation) return false; if (ok) this.changed(); return ok; },
-    snapshot: () => ({ error, rows: registry?.snapshot() ?? [], effects: metadata?.effects ?? [], loading: metadata === null && !error }), dispose,
-  };
-}