@vibelord/lanes 1.2.0 → 1.3.0

package/payload/lanes/web/README.md

@@ -43,11 +43,15 @@ before the control socket opens makes 0.45.1 throw `InvalidStateError` and leave
 
 `lanes-mobile.service` runs a separate, loopback-only Caddy on port 8083 with its admin API disabled.
 It does not change the system Caddy. Tailscale Serve forwards private HTTPS on 8443 to this frontend;
-the original Zellij service stays on 8082. Caddy (2.5 or later) must already be installed on the host. `/enrol/*` is
-the one route that is neither these assets nor Zellij: `handle_path` strips `/enrol` and forwards to the enrolment
-service on 127.0.0.1:8184 (`lanes-enrold.service`, [runbook](../docs/RUNBOOK.md#enrolment-service-lanes-enrold-w8-a3));
+the original Zellij service stays on 8082. Caddy (2.5 or later) must already be installed on the host. `/enrol/*` and
+`/lanes-docs/*` are the routes that are neither these assets nor Zellij: `handle_path` strips `/enrol` and forwards to
+the enrolment service on 127.0.0.1:8184 (`lanes-enrold.service`, [runbook](../docs/RUNBOOK.md#enrolment-service-lanes-enrold-w8-a3));
 it must stay before the Zellij routes, and its `trusted_proxies 127.0.0.0/8` keeps the `X-Forwarded-For` Tailscale
-Serve sets (the client's tailnet address), so the redeem rate limit counts per device.
+Serve sets (the client's tailnet address), so the redeem rate limit counts per device. `/lanes-docs/*` (prefix
+stripped) goes to the docs service on 127.0.0.1:8185 (`lanes-docsd.service`,
+[runbook](../docs/RUNBOOK.md#docs-service-lanes-docsd-w10-w3)): it is the FIRST handle of the site, keeps Serve's
+`X-Forwarded-For` the same way, and the site-wide `header` block skips it (`header @notdocs`, `@notdocs not path
+/lanes-docs/*`) so docsd's own per-route security headers are the only ones a document gets.
 Run `lanes web <device> --token` on the server (it also adds that Tailscale Serve mapping when it is missing),
 `lanes-launch web phone|laptop` from an installed client, or `sh install/enable-phone.sh --host lanes` (`--local` on
 the server).
@@ -211,7 +215,7 @@ re-opens this contract: re-read `startWsControl`, `installSoftKeyboardCapture`,
 holds them to the table (cockpit v3 P5). The icon (`icon.svg`, `icon-192.png`, a raster with anti-aliased edges) is
 the brand mark, drawn before the token table and not generated: palette v2 did not recolour it, and its bars keep
 v1's dark accent. Bundle budget (spec §8, `test_web.test_bundle_growth`):
-`mobile.css` ≤ 18 982 B and `mobile.js` ≤ 24 612 B; the rules sit one per line and the explanations live here rather
+`mobile.css` ≤ 18 982 B and `mobile.js` ≤ 24 747 B; the rules sit one per line and the explanations live here rather
 than in the shipped files. MEASURED 2026-10-04 with `wc -c` after LNS-31 (plan Task 31) met Tasks 13/28: `mobile.js`
 21 964 B (23 268 B before its comments moved to Code notes below) and `mobile.css` 18 945 B. A laptop or tablet also
 fetches `browser.js` and `browser.css` (1 947 B); `test_web_view` pins that download at `LAPTOP_TABLET_JS_RATCHET` and
@@ -238,6 +242,72 @@ MEASURED `mobile.js` 24 612 B (+354 B over input v2) and the download 24 612 + 3
 those 354 B and the ratchet by 47 B (354 less the 307 B `browser.js` had already shed), each to the measured size
 (`test_web_view.JS_COCKPIT_V3`, `LAPTOP_TABLET_JS_RATCHET`), and all four cap assertions red on one byte more.
 
+The docs cockpit (plan W10 W7, LNS-108, 2026-10-08): **More** gains a **Docs** row, a link to `/lanes-docs/` (the docs
+page, `lanes-docsd` behind Caddy's `/lanes-docs/*`) in a new tab, and the desktop bar a **Docs** link beside its two
+pickers. The operator raised the phone cap by the measured amount, pinned exact: `mobile.js` MEASURED 24 747 B with
+`wc -c`, +135 B (`test_web_view.JS_DOCS`; `menuRow()` takes a tag and an extra class, and the row borrows
+`.lanes-session-link` for its 48 px touch target, so `mobile.css` stays 18 945 B). `browser.js` paid for its link
+inside its own bytes — its line-1 pointer comment moved to Code notes below and the bar's Escape listener became an
+`onkeydown` property — 3 334 -> 3 318 B MEASURED, so the laptop/tablet download is 24 747 + 3 318 = 28 065 B and the
+DEF-1569 ratchet rose by the 135 `mobile.js` bytes net of those 16, to that measured size.
+
+| File | Cap | MEASURED 2026-10-08 (`wc -c`) | Bound by |
+| --- | --- | --- | --- |
+| `mobile.js` | 24 747 B (exact) | 24 747 B | spec §8 phone row, `test_web.test_bundle_growth`, `test_web_view` `JS_DOCS` |
+| `mobile.css` | 18 982 B | 18 945 B | spec §8 phone row |
+| `browser.js` | 4 096 B | 3 318 B | `test_web_view.BROWSER_JS_CAP` |
+| `browser.css` | 2 048 B | 1 947 B | `test_web_view.BROWSER_CSS_CAP` |
+| `mobile.js` + `browser.js` | 28 065 B (exact) | 28 065 B | DEF-1569, `LAPTOP_TABLET_JS_RATCHET` |
+| `mobile.css` + `browser.css` | 20 993 B | 20 892 B | DEF-1569's CSS twin, `LAPTOP_TABLET_CSS_CAP` |
+
+## Docs page (plan W10 W6, LNS-107)
+
+The docs cockpit's pages (Markdown, Mermaid, files; served by `lanes-docsd` behind `/lanes-docs/*`, plan W3) are their
+own HTML documents with their own assets, outside the phone budget above: `docs.css` (cap 2 560 B, MEASURED 2 351 B)
+and `docs.js` (cap 1 536 B, MEASURED 1 530 B), both from `/lanes-assets/` with `no-cache` like the shell's. A page links
+`/lanes-assets/docs.css` and loads `<script src="/lanes-assets/docs.js" defer></script>`, and renders a ```` ```mermaid ````
+fence as `<pre class="mermaid">` holding the escaped source (`libexec/mdlite.py`, plan W2).
+
+- `docs.css` is phone first: a 16 px gutter (safe-area aware), a 46 rem measure, tables and code blocks that scroll
+  sideways instead of the page, `pre.mermaid` centred, system fonts only (the docs CSP allows no font source). Its
+  colours are the block between the `BEGIN`/`END lanes tokens` markers, generated by `libexec/tokens.py --docs-css`:
+  the six roles it paints (`DOCS_ROLES`) on `:root`, dark by default and light under `prefers-color-scheme` — not the
+  phone's `html.lanes-mobile` / `data-zj-theme` block. `tokens.py --check` covers it; no colour lies outside it.
+- `docs.js` is a classic script that does nothing on a page without `pre.mermaid`. With one, it appends one
+  `<script>` for `/lanes-assets/vendor/mermaid-<version>.min.js` with `integrity="sha256-…"` (base64 of the raw
+  sha256 of the pinned member, `holders.lock`) and `crossorigin="anonymous"`; on load it calls
+  `mermaid.initialize({startOnLoad: false, securityLevel: 'strict', suppressErrorRendering: true, theme})` (`dark`
+  when the system scheme is dark, else `default`) and `mermaid.run({querySelector: 'pre.mermaid'})`. Mermaid empties a
+  fence before it draws, so each fence left without an `<svg>` gets its source text back (`textContent`, never markup;
+  DEF-1873). A missing file (`install/enable-docs.sh` not run yet: 404) or an integrity mismatch fires no load, and every
+  fence stays a `<pre>` with its source. It never evaluates strings, writes markup or names the unversioned link.
+- The vendor route: `handle_path /lanes-assets/vendor/*` serves `$LANES_SHARE/vendor` (`install/services.py` puts
+  `LANES_SHARE` in `lanes-mobile.service`, as it does `LANES_REPO`) with `Cache-Control: public, max-age=31536000,
+  immutable` and no listing. Immutable is safe only because a page names the VERSIONED file: under the stable
+  `mermaid.min.js` link a browser would keep the old bytes after a pin bump and refuse them under the new integrity
+  (DEF-1870). The block sits first among the `handle` routes: Caddy sorts it ahead of `/lanes-assets/*` (longest path
+  first) only past routes that also have exactly one path (Caddy issue #5037), so after `@backend` it would never be
+  reached (DEF-1872). `test_docs_assets.VendorRoute` proves the order on a model of Caddy's sort; no Caddy runs in the
+  tests (DEF-1871).
+- CSP needs, MEASURED 2026-10-08 in headless Chromium 153 with Mermaid 11.17.2: `script-src 'self'` suffices — no
+  `'unsafe-eval'` (a flowchart and a sequence diagram rendered with no violation; a control page's `eval` was refused
+  and reported) — but the SVG Mermaid draws carries inline `<style>` and `style` attributes, so `style-src` needs
+  `'unsafe-inline'` (without it: 88 violations, unstyled diagrams). The docs page's CSP (plan W3) has both.
+- Tests: `tests/unit/test_docs_assets.py` (the pin, the enable script against a fake curl, the route model, the unit's
+  environment, both files' caps, tokens and SRI) and `tests/web/docs.test.mjs` (docs.js in a vm against a fake page and
+  a fake Mermaid that empties fences as the real one does). How to bump the pin: [runbook](../docs/RUNBOOK.md#mermaid-pin).
+- The drop area (plan W10 W5, LNS-106): the index's upload form is a plain form that works without a script — a
+  `label.docs-drop` wrapping a multi-file input, so a tap opens the picker and a drop onto the input takes the files.
+  `upload.js` (cap 2 892 B, MEASURED 2 892 B, exact) and `upload.css` (cap 1 033 B, MEASURED 1 033 B, exact) make it
+  better: a drop anywhere on the area (`input.files` = the dropped files), a size check against the form's `data-max`
+  before anything is sent, an `XMLHttpRequest` `POST up` asking for JSON with a `<progress>`, then one line per receipt
+  — a link to `d/<id>` named with `textContent`, its size, sha256 and the in-container path it `landed` at — and a
+  refusal or a network error in words. They are their own files because `docs.js` had 6 B of its cap left and
+  `docs.css` 209 B; docsd serves them like `docs.css`/`docs.js`, and only the index (the page with the form) loads them.
+  The page CSP has `connect-src 'self'` for that request. The styles use `docs.css`'s token roles only (no colour of
+  their own), 44 px touch targets, phone first. Tests: `test_docs_assets.UploadAssets` (caps, classic script, no
+  markup, roles) and `tests/web/upload.test.mjs` (upload.js in a vm against a fake page and XHR).
+
 ## Code notes
 
 `mobile.js` carries no explanations (the spec §8 budget above); each note is keyed to the code it explains, in file
@@ -289,8 +359,12 @@ order.
   dock's four columns hold its four items (DEF-1737), and flushes the `send()` queue after `updateLaneFilterBar()`, so a
   filter tail is dropped before it could reach a lane; `quick` is `true` on a view tab (every key), `2` on the picker
   while its title ends ` · › <verb>` (only `⏎ y Esc`), else none.
-- `menuRow()` / `installFontControls()`: a row of the client's **More** menu, prepended (Text size, then the release
-  above it once `/enrol/site` answers). The one `fetch` is there because `build()` runs once per page load.
+- `menuRow()` / `installFontControls()`: a row of the client's **More** menu, prepended (Text size, then **Docs** above
+  it, then the release at the top once `/enrol/site` answers). The one `fetch` is there because `build()` runs once per
+  page load. `menuRow(label, tag, more)`: the **Docs** row is an `<a>` (plan W10 W7) to `/lanes-docs/` with
+  `target="_blank"` — a new tab, so the terminal and its socket stay where they are, and a Home Screen app, which has
+  no back button, is never navigated away — carrying `lanes-session-link` as well, the existing rule that gives it a
+  48 px touch target with no CSS of its own.
 - `connect()`: waits for server state, because an earlier resize throws `InvalidStateError` in 0.45.1. `applyTheme` is
   re-applied after every `SetConfig` (the client calls the chained `__zjSyncInactiveCursorStyle` hook) and on the theme
   toggle.
@@ -302,10 +376,14 @@ order.
 
 `browser.js` (laptop/tablet extras) carries none either, since cockpit v3 S5:
 
+- The file: the Lanes laptop/tablet extras (its line-1 pointer to these notes moved here in plan W10 W7, to pay for the
+  bar's Docs link).
+
 - `laneFullRender()`: the client starts a tablet in single pane on every load; once, it sends the client's own
   switch-to-desktop preference.
 - `desktop()`: the chip toggles an overlay bar (no refit); a pick sends the phone picker's `FocusPane`. The chip
-  cancels `mousedown`, so the terminal keeps the keys.
+  cancels `mousedown`, so the terminal keeps the keys. The bar ends in a **Docs** link to `/lanes-docs/` in a new tab
+  (plan W10 W7); Escape in the bar gives the terminal its keys back (`onkeydown`, one handler, as the listener was).
 - `ui()`: `window.__zjMobileUi` is set synchronously after the client appends its mobile root, which the
   `MutationObserver` on `<body>` waits for.
 

package/payload/lanes/web/browser.js

@@ -1,4 +1,3 @@
-/* Lanes laptop/tablet extras; see web/README.md, Code notes */
 function laneBarModel(d) {
   const panes = (d?.panes || []).filter(p => !p.is_plugin), at = d?.active_pane || {}, ws = new Map();
   const first = t => t && panes.find(p => p.tab_position === t.position);
@@ -46,7 +45,7 @@ if (typeof module === 'object') module.exports = {laneBarModel, laneFullRender};
       send({type: 'FocusPane', pane_id: +this.value, is_plugin: false});
       focus();
     }}));
-    const bar = make('nav', {className: 'lanes-bar', hidden: true});
+    const bar = make('nav', {className: 'lanes-bar', hidden: true, onkeydown: ev => ev.key === 'Escape' && focus()});
     const render = () => {
       const m = !bar.hidden && laneBarModel(api.getState()?.data), sig = JSON.stringify(m);
       if (!m || sig === last) return;
@@ -60,8 +59,7 @@ if (typeof module === 'object') module.exports = {laneBarModel, laneFullRender};
       window.term?.focus();
     }});
     chip.addEventListener('mousedown', ev => ev.preventDefault());
-    bar.addEventListener('keydown', ev => ev.key === 'Escape' && focus());
-    bar.append(...picks);
+    bar.append(...picks, make('a', {href: '/lanes-docs/', target: '_blank', textContent: 'Docs'}));
     document.body.append(bar, chip);
     return render;
   };

package/payload/lanes/web/docs.css

@@ -0,0 +1,52 @@
+/* Lanes docs page (plan W10 W6, LNS-107), phone first. Colours: the generated block below; system fonts only.
+   Notes: web/README.md "Docs page". */
+/* BEGIN lanes tokens (generated by libexec/tokens.py --docs-css; do not edit by hand) */
+:root {
+  --lanes-surface: #101318;
+  --lanes-surface-raised: #191e25;
+  --lanes-line: #2c333d;
+  --lanes-ink: #f2f5f8;
+  --lanes-ink-dim: #a6b1be;
+  --lanes-accent: #8fe3a6;
+  color-scheme: dark;
+}
+@media (prefers-color-scheme: light) {
+  :root {
+    --lanes-surface: #f3f5f2;
+    --lanes-surface-raised: #ffffff;
+    --lanes-line: #d5ded6;
+    --lanes-ink: #111a14;
+    --lanes-ink-dim: #4a5661;
+    --lanes-accent: #1f6f3f;
+    color-scheme: light;
+  }
+}
+/* END lanes tokens */
+*, *::before, *::after { box-sizing: border-box; }
+html { -webkit-text-size-adjust: 100%; text-size-adjust: 100%; }
+body {
+  max-width: 46rem; margin: 0 auto;
+  padding: 16px max(16px, env(safe-area-inset-right)) 32px max(16px, env(safe-area-inset-left));
+  background: var(--lanes-surface); color: var(--lanes-ink);
+  font: 16px/1.55 system-ui, -apple-system, "Segoe UI", sans-serif; overflow-wrap: break-word;
+}
+h1, h2, h3 { line-height: 1.25; margin: 1.4em 0 .5em; }
+h1 { font-size: 1.6em; margin-top: .4em; }
+h2 { font-size: 1.3em; padding-bottom: .2em; border-bottom: 1px solid var(--lanes-line); }
+a { color: var(--lanes-accent); }
+small { color: var(--lanes-ink-dim); }
+img { max-width: 100%; height: auto; }
+hr { border: 0; border-top: 1px solid var(--lanes-line); }
+blockquote { margin: 1em 0; padding-left: 12px; border-left: 3px solid var(--lanes-line); color: var(--lanes-ink-dim); }
+code, pre { font: .875em/1.45 ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; }
+code { padding: .1em .3em; border-radius: 4px; background: var(--lanes-surface-raised); }
+pre {
+  margin: 1em 0; padding: 12px; overflow-x: auto; tab-size: 4;
+  background: var(--lanes-surface-raised); border: 1px solid var(--lanes-line); border-radius: 8px;
+}
+pre code { padding: 0; font-size: 1em; background: none; }
+pre.mermaid { text-align: center; }
+pre.mermaid svg { max-width: 100%; height: auto; }
+table { display: block; max-width: 100%; overflow-x: auto; border-collapse: collapse; margin: 1em 0; }
+th, td { padding: 6px 10px; border: 1px solid var(--lanes-line); text-align: left; }
+th { background: var(--lanes-surface-raised); }

package/payload/lanes/web/docs.js

@@ -0,0 +1,36 @@
+// Lanes docs page (plan W10 W6, LNS-107): render ```mermaid fences with the pinned Mermaid, only on a page that has
+// one: its versioned file (DEF-1870), its sha256 as SRI. Without it every fence keeps its source. web/README.md.
+(function () {
+  'use strict';
+  var SRC = '/lanes-assets/vendor/mermaid-11.17.2.min.js';
+  var SRI = 'sha256-WB7X10vZBI0OOpE2OSfXLvIpQtdyJUayf3zCnjU5Drg=';
+
+  function render() {
+    var pres = document.querySelectorAll('pre.mermaid'), text = [], i;
+    for (i = 0; i < pres.length; i++) text[i] = pres[i].textContent;
+    // Mermaid empties each fence first: one left without a diagram gets its source back (DEF-1873).
+    function restore() {
+      for (i = 0; i < pres.length; i++) if (!pres[i].querySelector('svg')) pres[i].textContent = text[i];
+    }
+    try {
+      mermaid.initialize({startOnLoad: false, securityLevel: 'strict', suppressErrorRendering: true,
+        theme: matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'default'});
+      mermaid.run({querySelector: 'pre.mermaid'}).then(restore, restore);
+    } catch (e) {
+      restore();
+    }
+  }
+
+  function start() {
+    if (!document.querySelector('pre.mermaid')) return;
+    var s = document.createElement('script');
+    s.setAttribute('integrity', SRI);
+    s.setAttribute('crossorigin', 'anonymous');
+    s.setAttribute('src', SRC);
+    s.onload = render;
+    document.head.appendChild(s);
+  }
+
+  if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', start);
+  else start();
+}());

package/payload/lanes/web/mobile.js

@@ -381,8 +381,8 @@ if (typeof module === 'object') module.exports = {laneShellMode};
     return t;
   }
   const applyTheme = () => { if (term) term.options.theme = lanesTheme(); };
-  function menuRow(label) {
-    const row = make('div', 'lanes-font-controls');
+  function menuRow(label, tag = 'div', more = '') {
+    const row = make(tag, 'lanes-font-controls' + more);
     row.append(make('span', '', label));
     document.querySelector('.zj-mobile-menu')?.prepend(row);
     return row;
@@ -396,6 +396,7 @@ if (typeof module === 'object') module.exports = {laneShellMode};
     smaller.addEventListener('click', () => {fontSize = Math.max(14, fontSize - 1); applyFont();});
     larger.addEventListener('click', () => {fontSize = Math.min(24, fontSize + 1); applyFont();});
     row.append(smaller, value, larger);
+    Object.assign(menuRow('Docs', 'a', ' lanes-session-link'), {href: '/lanes-docs/', target: '_blank'});
     fetch('/enrol/site', {credentials: 'same-origin'}).then(r => r.json())
       .then(({version: v}) => /^\d[\w.+-]{0,31}$/.test(v) && menuRow(`Lanes v${v}`)).catch(() => {});
   }

package/payload/lanes/web/upload.css

@@ -0,0 +1,17 @@
+/* Lanes docs page: the drop area (plan W10 W5, LNS-106), phone first; colours: docs.css's token block. */
+.docs-upload { margin: 1em 0; }
+.docs-upload label, .docs-upload select, .docs-upload button { display: block; width: 100%; }
+.docs-upload select, .docs-upload button, .docs-upload input { min-height: 44px; font: inherit; }
+.docs-upload select, .docs-upload button {
+  margin: .4em 0; padding: 8px; border: 1px solid var(--lanes-line); border-radius: 8px;
+  background: var(--lanes-surface-raised); color: var(--lanes-ink);
+}
+.docs-drop {
+  margin: .6em 0; padding: 20px 12px; text-align: center; color: var(--lanes-ink-dim);
+  border: 2px dashed var(--lanes-line); border-radius: 8px;
+}
+.docs-drop.over { border-color: var(--lanes-accent); color: var(--lanes-ink); }
+.docs-drop input { display: block; width: 100%; margin-top: 8px; }
+.docs-drop::after { content: attr(data-count); display: block; color: var(--lanes-accent); }
+.docs-sent { padding-left: 1.2em; overflow-wrap: anywhere; }
+.docs-sent progress { width: 100%; }

package/payload/lanes/web/upload.js

@@ -0,0 +1,84 @@
+// Lanes docs page: the drop area (plan W10 W5, LNS-106). The form works without this; here a drop lands anywhere on
+// the area, the size is checked before sending, progress shows and each file's receipt is listed. web/README.md.
+(function () {
+  'use strict';
+  var form = document.querySelector('form.docs-upload');
+  if (!form) return;
+  var area = form.querySelector('.docs-drop'), input = form.querySelector('input[type=file]'),
+    list = form.querySelector('.docs-sent'), button = form.querySelector('button'),
+    max = +form.getAttribute('data-max') || 0;
+
+  function add(text, href, name) {
+    var li = document.createElement('li'), a;
+    if (href) {
+      a = li.appendChild(document.createElement('a'));
+      a.setAttribute('href', href);
+      a.textContent = name;
+    }
+    li.appendChild(document.createTextNode(text));
+    return list.appendChild(li);
+  }
+
+  function count() {
+    area.setAttribute('data-count', input.files.length ? input.files.length + ' chosen' : '');
+  }
+
+  function over(on) {
+    return function (e) {
+      e.preventDefault();
+      area.classList.toggle('over', on);
+    };
+  }
+
+  area.addEventListener('dragenter', over(true));
+  area.addEventListener('dragover', over(true));
+  area.addEventListener('dragleave', over(false));
+  area.addEventListener('drop', function (e) {
+    over(false)(e);
+    input.files = e.dataTransfer.files;
+    count();
+  });
+  input.addEventListener('change', count);
+
+  form.addEventListener('submit', function (e) {
+    var files = input.files, total = 0, i, x, row, bar;
+    e.preventDefault();
+    if (!files.length) return;
+    for (i = 0; i < files.length; i++) total += files[i].size + 1024;
+    if (max && total > max) {
+      add('Too large: ' + Math.ceil(total / 1048576) + ' MiB; an upload may be ' + max / 1048576 + ' MiB.');
+      return;
+    }
+    x = new XMLHttpRequest();
+    row = add('');
+    bar = row.appendChild(document.createElement('progress'));
+    function done(said) {
+      list.removeChild(row);
+      button.disabled = false;
+      if (said) add(said);
+    }
+    x.upload.onprogress = function (p) {
+      if (p.lengthComputable) bar.value = p.loaded / p.total;
+    };
+    x.onload = function () {
+      var r = {};
+      try {
+        r = JSON.parse(x.responseText);
+      } catch (err) { /* not JSON: said below */ }
+      done('');
+      (r.receipts || []).forEach(function (t) {
+        add(' · ' + t.bytes + ' B · sha256 ' + t.sha256 + ' · ' + t.landed, 'd/' + t.id, t.name);
+      });
+      if (x.status !== 200) add('Refused: ' + (r.error || x.status));
+      input.value = '';
+      count();
+    };
+    x.onerror = function () {
+      done('The upload did not reach the server; try again.');
+    };
+    x.open('POST', form.getAttribute('action'));
+    x.setRequestHeader('Accept', 'application/json');
+    button.disabled = true;
+    x.send(new FormData(form));
+  });
+}());

package/payload/manifest.json

@@ -1,8 +1,8 @@
 {
  "name": "@vibelord/lanes",
- "version": "1.2.0",
- "commit": "d7718161405f7bd8a7ab6144b61a9edb550f4500",
- "digest": "sha256:e67fcdfbd2a64b636d204f007e453989e601231d0c06348a66b066df534d9fee",
+ "version": "1.3.0",
+ "commit": "cf8bfb3df12fb6210350adb6b3e481f29051ffae",
+ "digest": "sha256:7e3cce373458d09b77c588dfb98b00777ceda08df504b319bcdf7d26cc3cc206",
  "executables": [
   "bin/lanes",
   "client/install.sh",
@@ -20,6 +20,7 @@
   "holders/tmux.sh",
   "holders/zmx.sh",
   "install.sh",
+  "install/enable-docs.sh",
   "install/enable-studio-host.sh",
   "install/enable-web.sh",
   "install/host-install.sh",