snagset 0.1.16 → 0.1.19

package/dist/astro.d.ts

@@ -1,6 +1,6 @@
 import { tagFor, type InitOptions } from "./index.ts";
 /**
- * `snagset/astro` — D63.
+ * `snagset/astro`.
  *
  * Astro is the case where the OTHER answer is better, and this file says so
  * rather than pretending otherwise.

package/dist/astro.js

@@ -1,6 +1,6 @@
 import { tagFor } from "./index.js";
 /**
- * `snagset/astro` — D63.
+ * `snagset/astro`.
  *
  * Astro is the case where the OTHER answer is better, and this file says so
  * rather than pretending otherwise.

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { type ScriptAttr } from "./vendor/types/names";
 /**
- * `snagset` — the npm way in. D63, and D37's structure with D63's name.
+ * `snagset` — the npm way in., and the structure with the name.
  *
  * ── THIS PACKAGE DOES NOT CONTAIN THE WIDGET, AND THAT IS THE DESIGN ──
  *
@@ -17,7 +17,7 @@ import { type ScriptAttr } from "./vendor/types/names";
  * screenshot code, the panels, the fuzzy anchorer and the rest arrive only if
  * somebody actually opens the toolbar. Bundling that into `snagset` would put a
  * quarter of a megabyte into the host application's own bundle — or force them
- * to teach their bundler about our code-splitting — and foundations §6's eager
+ * to teach their bundler about our code-splitting — and the eager
  * envelope, the budget the whole architecture is built around, would be a
  * number about a file nobody loads.
  *
@@ -26,16 +26,16 @@ import { type ScriptAttr } from "./vendor/types/names";
  *  · **No version skew.** The chunks are fetched from the server at the
  *    server's version. A bundled widget pinned in someone's `package.json` at
  *    an older version would request chunk names that build no longer has.
- *  · **Same-origin stays same-origin** (D38, A7). The bytes come from the
+ *  · **Same-origin stays same-origin** (A7). The bytes come from the
  *    instance the widget already talks to, so a client's CSP is one
  *    `script-src 'self'` entry and there is no third party to justify.
- *  · **The script tag is still sacred** (D19, LOCK L5) — literally, not by
+ *  · **The script tag is still sacred** — literally, not by
  *    analogy. This package emits exactly the tag the docs tell you to paste,
  *    so a bug here cannot produce behaviour the tag cannot.
  *
  * ── AND NO CUSTOM ELEMENT ──
  *
- * D37 sketched registering one so that "Vue, Svelte and Astro need no adapter
+ * Sketched registering one so that "Vue, Svelte and Astro need no adapter
  * at all". That was reasoning about a *bundled* widget, where a framework needs
  * something to render. With a shim there is nothing to render — `init()` is
  * already framework-agnostic, and the framework subpaths are lifecycle glue
@@ -83,7 +83,7 @@ export declare function tagFor(options: InitOptions): {
  * ── WHY `init` AND NOT `mount` ──
  *
  * Because the product already had a name for this and it was not mine to
- * choose. [02 §5](../../../specs/02-widget-runtime.md) defines
+ * choose. defines
  * **`Snagset.init(config)`** as the public JS API — *"may be called repeatedly
  * before activation; each call merges"* — and `window.Snagset.init` /
  * `window.Snagset.destroy` are on the live object right now.
@@ -92,14 +92,14 @@ export declare function tagFor(options: InitOptions): {
  * vocabulary imported into a package whose underlying object has said `init`
  * since 02 draft 1. A developer reading `snagset.mount()` in their app and
  * `Snagset.init()` in the console would reasonably conclude they were two
- * different things. Raised by Eurico — *"init seems better than mount"* — and
+ * different things. Raised by the maintainer — *"init seems better than mount"* — and
  * he is right for a better reason than either of us gave at the time.
  *
  * ── REPEATED CALLS MERGE, LIKE THE SPEC SAYS ──
  *
  * A second `init()` does not add a second tag (that would boot a second
  * widget). It forwards the new config to `Snagset.init()`, which deep-merges
- * it — so this behaves the way §5 documents rather than being a same-named
+ * it — so this behaves the way documents rather than being a same-named
  * function with different rules. When the widget has not finished loading the
  * config is QUEUED and flushed on the script's `load` event, because a caller
  * has no way to know whether an async script has arrived yet and "your second
@@ -109,7 +109,7 @@ export declare function tagFor(options: InitOptions): {
  */
 declare function init(options: InitOptions): () => void;
 /**
- * Take Snagset off the page — [02 §5](../../../specs/02-widget-runtime.md)'s
+ * Take Snagset off the page — 's
  * `Snagset.destroy()`.
  *
  * Delegates to the widget's OWN teardown rather than removing the script
@@ -122,13 +122,13 @@ declare function destroy(): void;
 /**
  * Is the tag on this page?
  *
- * `isInstalled`, not `isActive`: 02 §5's `state` is `inert | dormant | active`
+ * `isInstalled`, not `isActive`: The `state` is `inert | dormant | active`
  * and "active" already means *the toolbar is open*, which is a different
  * question with a different answer. Read `window.Snagset.state` for that one.
  */
 declare function isInstalled(): boolean;
 /**
- * The default export — the package's own name, carrying 02 §5's verbs.
+ * The default export — the package's own name, carrying the verbs.
  *
  * An OBJECT with `init`, not a callable. The first version made `snagset({…})`
  * itself the call, on the argument that one verb should be the noun; with the

package/dist/index.js

@@ -10,7 +10,7 @@ export function tagFor(options) {
         // `false` is dropped rather than written as the string "false". Every one
         // of these attributes is read by `loader.ts` as a STRING, and the presence
         // of `data-snag-disabled="false"` reads as "disabled" to anything doing a
-        // has-attribute check — which is the shape of kill switch §6 uses.
+        // has-attribute check — which is the shape of kill switch uses.
         if (value === false)
             continue;
         attrs[scriptAttr(key)] = value === true ? "" : String(value);
@@ -33,7 +33,7 @@ export function tagFor(options) {
  * ── WHY `init` AND NOT `mount` ──
  *
  * Because the product already had a name for this and it was not mine to
- * choose. [02 §5](../../../specs/02-widget-runtime.md) defines
+ * choose. defines
  * **`Snagset.init(config)`** as the public JS API — *"may be called repeatedly
  * before activation; each call merges"* — and `window.Snagset.init` /
  * `window.Snagset.destroy` are on the live object right now.
@@ -42,14 +42,14 @@ export function tagFor(options) {
  * vocabulary imported into a package whose underlying object has said `init`
  * since 02 draft 1. A developer reading `snagset.mount()` in their app and
  * `Snagset.init()` in the console would reasonably conclude they were two
- * different things. Raised by Eurico — *"init seems better than mount"* — and
+ * different things. Raised by the maintainer — *"init seems better than mount"* — and
  * he is right for a better reason than either of us gave at the time.
  *
  * ── REPEATED CALLS MERGE, LIKE THE SPEC SAYS ──
  *
  * A second `init()` does not add a second tag (that would boot a second
  * widget). It forwards the new config to `Snagset.init()`, which deep-merges
- * it — so this behaves the way §5 documents rather than being a same-named
+ * it — so this behaves the way documents rather than being a same-named
  * function with different rules. When the widget has not finished loading the
  * config is QUEUED and flushed on the script's `load` event, because a caller
  * has no way to know whether an async script has arrived yet and "your second
@@ -109,7 +109,7 @@ function flush() {
         merge(options);
 }
 /**
- * Take Snagset off the page — [02 §5](../../../specs/02-widget-runtime.md)'s
+ * Take Snagset off the page — 's
  * `Snagset.destroy()`.
  *
  * Delegates to the widget's OWN teardown rather than removing the script
@@ -128,7 +128,7 @@ function destroy() {
 /**
  * Is the tag on this page?
  *
- * `isInstalled`, not `isActive`: 02 §5's `state` is `inert | dormant | active`
+ * `isInstalled`, not `isActive`: The `state` is `inert | dormant | active`
  * and "active" already means *the toolbar is open*, which is a different
  * question with a different answer. Read `window.Snagset.state` for that one.
  */
@@ -136,7 +136,7 @@ function isInstalled() {
     return typeof window !== "undefined" && !!window[INSTALLED];
 }
 /**
- * The default export — the package's own name, carrying 02 §5's verbs.
+ * The default export — the package's own name, carrying the verbs.
  *
  * An OBJECT with `init`, not a callable. The first version made `snagset({…})`
  * itself the call, on the argument that one verb should be the noun; with the

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAmB,MAAM,sBAAsB,CAAC;AAwE5E,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAE9C,6EAA6E;AAC7E,MAAM,UAAU,MAAM,CAAC,OAAoB;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1F,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,KAAK,KAAK,KAAK;YAAE,SAAS;QAC9B,KAAK,CAAC,UAAU,CAAC,GAAiB,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,8CAA8C;IAC9C,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,UAAU,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAS,IAAI,CAAC,OAAoB;IAChC,4EAA4E;IAC5E,4EAA4E;IAC5E,mDAAmD;IACnD,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAErD,MAAM,CAAC,GAAG,MAA4C,CAAC;IAEvD,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACjB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACtG,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAE7G,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5C,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC;IACb,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChF,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IACpB,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAElD,OAAO,GAAG,EAAE;QACV,EAAE,CAAC,MAAM,EAAE,CAAC;QACZ,CAAC,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QACrB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,MAAM,GAAkB,EAAE,CAAC;AAEjC,SAAS,MAAM;IACb,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACpD,OAAQ,MAA6C,CAAC,OAAO,CAAC,GAAG,CAAU,CAAC;AAC9E,CAAC;AAED,SAAS,KAAK,CAAC,OAAoB;IACjC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;IAC7C,IAAI,GAAG,EAAE,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;QAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,KAAK;IACZ,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,OAAO;IACd,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;IACrB,MAA6C,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAClE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW;IAClB,OAAO,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAE,MAA6C,CAAC,SAAS,CAAC,CAAC;AACtG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAEnE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACtC,eAAe,OAAO,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAmB,MAAM,sBAAsB,CAAC;AAwE5E,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAE9C,6EAA6E;AAC7E,MAAM,UAAU,MAAM,CAAC,OAAoB;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1F,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,gEAAgE;QAChE,IAAI,KAAK,KAAK,KAAK;YAAE,SAAS;QAC9B,KAAK,CAAC,UAAU,CAAC,GAAiB,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,8CAA8C;IAC9C,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,UAAU,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAS,IAAI,CAAC,OAAoB;IAChC,4EAA4E;IAC5E,4EAA4E;IAC5E,mDAAmD;IACnD,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAErD,MAAM,CAAC,GAAG,MAA4C,CAAC;IAEvD,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACjB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACtG,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAE7G,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5C,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC;IACb,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChF,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IACpB,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAElD,OAAO,GAAG,EAAE;QACV,EAAE,CAAC,MAAM,EAAE,CAAC;QACZ,CAAC,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QACrB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,MAAM,GAAkB,EAAE,CAAC;AAEjC,SAAS,MAAM;IACb,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACpD,OAAQ,MAA6C,CAAC,OAAO,CAAC,GAAG,CAAU,CAAC;AAC9E,CAAC;AAED,SAAS,KAAK,CAAC,OAAoB;IACjC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;IAC7C,IAAI,GAAG,EAAE,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;QAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,KAAK;IACZ,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,OAAO;IACd,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;IACrB,MAA6C,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAClE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW;IAClB,OAAO,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,CAAE,MAA6C,CAAC,SAAS,CAAC,CAAC;AACtG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAEnE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACtC,eAAe,OAAO,CAAC"}

package/dist/next.d.ts

@@ -1,7 +1,7 @@
 import { createElement } from "react";
 import { type InitOptions } from "./index.ts";
 /**
- * `snagset/next` — D67.
+ * `snagset/next`.
  *
  * ```tsx
  * // app/layout.tsx
@@ -28,7 +28,7 @@ import { type InitOptions } from "./index.ts";
  * Vercel's own toolbar ships one because their setup needs `next.config`
  * rewrites to proxy toolbar traffic through the deployment. Ours needs no
  * proxy: the widget is served by the studio's instance and talks back to that
- * same origin (D38). A config wrapper would exist to look like theirs, not to
+ * same origin. A config wrapper would exist to look like theirs, not to
  * do anything — the component is the whole install.
  *
  * ── PROPS, OR `NEXT_PUBLIC_SNAGSET_*` ──
@@ -37,7 +37,7 @@ import { type InitOptions } from "./index.ts";
  * `NEXT_PUBLIC_SNAGSET_SITE`, so per-environment values live where a Next
  * project already keeps them (`.env.local`, the host's env UI) instead of in
  * the layout. The names carry Next's own public prefix — deliberately NOT bare
- * `SNAGSET_*`, which is the server's reserved namespace (08 §4): an instance
+ * `SNAGSET_*`, which is the server's reserved namespace: an instance
  * colocated with the app must never find widget config in variables it treats
  * as its own and refuses to boot on.
  *

package/dist/react.d.ts

@@ -1,6 +1,6 @@
 import { type InitOptions } from "./index.ts";
 /**
- * `snagset/react` — D63, and the twenty-line wrapper D37 predicted.
+ * `snagset/react`, and the twenty-line wrapper predicted.
  *
  * ```tsx
  * import { Snagset } from "snagset/react";
@@ -9,7 +9,7 @@ import { type InitOptions } from "./index.ts";
  * ```
  *
  * It renders NOTHING. There is no element to place, no wrapper div, no portal
- * — the widget owns its own root in the DOM (02 §3's shadow host) and this
+ * the widget owns its own root in the DOM (the shadow host) and this
  * component's whole job is to run `init()` while it is on screen. Returning
  * `null` is the honest expression of that, and it means the component can sit
  * anywhere in a tree without affecting layout.

package/dist/vendor/types/brief.d.ts

@@ -2,7 +2,7 @@
  * A thread as a BRIEF — the markdown an agent, a ticket or a clipboard wants:
  * Where to look · What's wrong · Environment · Breadcrumbs · Screenshot.
  *
- * ONE formatter in the shared package (plan/08 §3, D93), so the dashboard's
+ * ONE formatter in the shared package, so the dashboard's
  * Copy button, the MCP server's `get_thread` and the server's own markdown
  * route cannot drift from one another. Pure: a thread in, a string out, no
  * clock, so the same thread always produces the same brief.
@@ -16,12 +16,12 @@
  * before it is written. The dashboard passes nothing (the clipboard is the
  * studio's own), the MCP server passes `@snagset/adapters`' fence so a model
  * reads `<untrusted-content kind="body">…</untrusted-content>` around the
- * client's words (07 §8.6 mitigation 3). Ids, keys, timestamps and enums we
+ * client's words. Ids, keys, timestamps and enums we
  * minted are written bare.
  */
 export type BriefFenceKind = "body" | "name" | "label" | "selector" | "breadcrumb";
 export interface BriefComment {
-    /** Null is a tombstone (foundations §5) and is left out. */
+    /** Null is a tombstone and is left out. */
     body: string | null;
     createdAt: string;
     author?: {

package/dist/vendor/types/brief.js

@@ -2,7 +2,7 @@
  * A thread as a BRIEF — the markdown an agent, a ticket or a clipboard wants:
  * Where to look · What's wrong · Environment · Breadcrumbs · Screenshot.
  *
- * ONE formatter in the shared package (plan/08 §3, D93), so the dashboard's
+ * ONE formatter in the shared package, so the dashboard's
  * Copy button, the MCP server's `get_thread` and the server's own markdown
  * route cannot drift from one another. Pure: a thread in, a string out, no
  * clock, so the same thread always produces the same brief.
@@ -16,7 +16,7 @@
  * before it is written. The dashboard passes nothing (the clipboard is the
  * studio's own), the MCP server passes `@snagset/adapters`' fence so a model
  * reads `<untrusted-content kind="body">…</untrusted-content>` around the
- * client's words (07 §8.6 mitigation 3). Ids, keys, timestamps and enums we
+ * client's words. Ids, keys, timestamps and enums we
  * minted are written bare.
  */
 import { param } from "./names.js";

package/dist/vendor/types/index.js

@@ -1,4 +1,4 @@
 // @snagset/types — shared types and the executable Name Registry.
 // The names module is generated from registry.json (see scripts/gen-names.mjs);
-// domain types (specs §5) land here as the packages that own them are built.
+// domain types land here as the packages that own them are built.
 export * from "./names.js";

package/dist/vendor/types/names.d.ts

@@ -33,7 +33,7 @@ export declare const env: (name: string) => string;
 export declare const pgType: (name: string) => string;
 /** @returns e.g. `snagset_http_requests_total` */
 export declare const metric: (name: string) => string;
-/** window.* names (§2.2). Dunders are internal/test affordances, not public API. */
+/** window.* names. Dunders are internal/test affordances, not public API. */
 export declare const GLOBALS: {
     readonly api: "Snagset";
     readonly config: "SnagsetConfig";
@@ -41,19 +41,19 @@ export declare const GLOBALS: {
     readonly assetBase: "__SNAGSET_ASSET_BASE__";
     readonly collisionFallback: "__snagset__";
 };
-/** data-*-attributes on the host <script> tag (§2.3). */
+/** data-*-attributes on the host <script> tag. */
 export type ScriptAttr = "site" | "host" | "disabled" | "env" | "mode" | "badge" | "lang" | "theme" | "position" | "offset" | "assetBase" | "branch" | "build" | "storage" | "hotkey" | "allowAutomation" | "screenshots" | "maskSelectors" | "nonce" | "autoMount";
 export declare const scriptAttr: (name: ScriptAttr) => string;
-/** DOM the widget authors on itself (§2.3b). */
+/** DOM the widget authors on itself. */
 export type WidgetAttr = "root";
 export declare const widgetAttr: (name: WidgetAttr) => string;
-/** Attributes the host application may author (§2.4). */
+/** Attributes the host application may author. */
 export type HostAttr = "anchor" | "ignore" | "mask" | "nomask" | "src" | "component";
 export declare const hostAttr: (name: HostAttr) => string;
-/** Class-form masking hooks (§2.4). */
+/** Class-form masking hooks. */
 export type CssClass = "mask" | "block";
 export declare const cssClass: (name: CssClass) => string;
-/** Custom properties (§2.1's prefix, enumerated). 06 §14 makes every one of these public SemVer surface, so they are registered rather than minted at the point of use. Values are NOT here — the registry governs names, never design. */
+/** Custom properties (the prefix, enumerated). The design makes every one of these public SemVer surface, so they are registered rather than minted at the point of use. Values are NOT here — the registry governs names, never design. */
 export declare const CSS_VAR: {
     readonly font: "--snag-font";
     readonly accent: "--snag-accent";
@@ -97,7 +97,7 @@ export declare const cssVar: (name: CssVar) => string;
 export declare const cssRef: (name: CssVar) => string;
 export type QueryParam = "t" | "off" | "debug" | "theme";
 export type FragmentParam = "k";
-/** @returns e.g. `snag_t`. The review-link secret is a FRAGMENT param (§2.5). */
+/** @returns e.g. `snag_t`. The review-link secret is a FRAGMENT param. */
 export declare const param: (name: QueryParam | FragmentParam) => string;
 export declare const RESERVED_URL_PARAMS: {
     readonly query: readonly ["snag_t", "snag_off", "snag_debug", "snag_theme"];
@@ -105,13 +105,14 @@ export declare const RESERVED_URL_PARAMS: {
 };
 /** Point consts for hot paths: a chunk needing ONE key imports it and
  *  drops the whole table — object properties cannot tree-shake, and the
- *  panels chunk was carrying ten keys to read two (M2-13). */
+ *  panels chunk was carrying ten keys to read two. */
 export declare const DISCLOSURE_KEY = "snag:disclosure:v1";
 export declare const IDENTITY_KEY = "snag:identity";
 export declare const THEME_ATTR = "data-snag-theme";
-/** Web-storage keys (§2.6). Parameterised keys are functions. */
+/** Web-storage keys. Parameterised keys are functions. */
 export declare const storageKey: {
     readonly session: (uid: string) => string;
+    readonly silent: (uid: string) => string;
     readonly identity: "snag:identity";
     readonly threads: (uid: string, env: string) => string;
     readonly seen: (uid: string, env: string) => string;
@@ -123,28 +124,28 @@ export declare const storageKey: {
     readonly seenCoach: "snag:seen-coach";
     readonly disclosure: "snag:disclosure:v1";
 };
-/** The v0.1 IndexedDB blob store (§2.6, 05 §10.1) — one database, one
+/** The v0.1 IndexedDB blob store — one database, one
  *  object store, shared by screenshots, reviewer images and the v2 outbox. */
 export declare const IDB: {
     readonly database: "snag:blobs";
     readonly store: "blobs";
 };
-/** Anchored regex sources matching every registered key — AC-22's storage diff. */
-export declare const STORAGE_KEY_PATTERNS: readonly ["^snag:session:.+$", "^snag:identity$", "^snag:threads:.+:.+$", "^snag:seen:.+:.+$", "^snag:counts:.+$", "^snag:draft:.+:.+$", "^snag:outbox:.+$", "^snag:mode$", "^snag:handoff$", "^snag:seen-coach$", "^snag:disclosure:v1$"];
-/** The WIDGET's two (§2.7). Neither carries a credential, and no cookie authenticates the widget API — it runs on somebody else's origin. */
+/** Anchored regex sources matching every registered key — the storage diff. */
+export declare const STORAGE_KEY_PATTERNS: readonly ["^snag:session:.+$", "^snag:silent:.+$", "^snag:identity$", "^snag:threads:.+:.+$", "^snag:seen:.+:.+$", "^snag:counts:.+$", "^snag:draft:.+:.+$", "^snag:outbox:.+$", "^snag:mode$", "^snag:handoff$", "^snag:seen-coach$", "^snag:disclosure:v1$"];
+/** The WIDGET's two. Neither carries a credential, and no cookie authenticates the widget API — it runs on somebody else's origin. */
 export declare const COOKIE: {
     readonly off: "snag_off";
     readonly on: "snag_on";
 };
-/** The dashboard's session + CSRF pair (05 §4.7) — first-party, on the server's own origin, owner audience. */
+/** The dashboard's session + CSRF pair — first-party, on the server's own origin, owner audience. */
 export declare const DASHBOARD_COOKIE: {
     readonly session: "snag_session";
     readonly csrf: "snag_csrf";
 };
-/** 05 §4.7 names these two constants directly; both spellings resolve to the same string. */
+/** The design names these two constants directly; both spellings resolve to the same string. */
 export declare const DASHBOARD_SESSION_COOKIE: "snag_session";
 export declare const DASHBOARD_CSRF_COOKIE: "snag_csrf";
-/** Built widget chunks (§2.8). Preact lives only in `panels`. */
+/** Built widget chunks. Preact lives only in `panels`. */
 export declare const ARTIFACT: {
     readonly stub: "snag.js";
     readonly runtime: "snag.runtime.js";
@@ -157,7 +158,7 @@ export declare const ARTIFACT: {
     readonly dock: "snag.dock.js";
     readonly text: "snag.text.js";
 };
-/** Wire-form entity id prefixes (§2.10). Not brand-derived. */
+/** Wire-form entity id prefixes. Not brand-derived. */
 export declare const ID_PREFIX: {
     readonly project: "prj_";
     readonly thread: "thr_";
@@ -167,11 +168,11 @@ export declare const ID_PREFIX: {
     readonly link: "lnk_";
     readonly round: "rnd_";
 };
-/** Credential literals (07 §8.2). Brand-DERIVED, and deliberately not the three-letter row shape: the literal is what gets registered with secret scanning, so a token pasted into a public repo is reported. */
+/** Credential literals. Brand-DERIVED, and deliberately not the three-letter row shape: the literal is what gets registered with secret scanning, so a token pasted into a public repo is reported. */
 export declare const CREDENTIAL_PREFIX: {
     readonly mcp: "snagmcp_";
 };
-/** CustomEvents dispatched on document (§2.11). */
+/** CustomEvents dispatched on document. */
 export declare const DOM_EVENT: {
     readonly ready: "snagset:ready";
     readonly activate: "snagset:activate";
@@ -179,7 +180,7 @@ export declare const DOM_EVENT: {
     readonly threadCreated: "snagset:thread-created";
     readonly threadResolved: "snagset:thread-resolved";
 };
-/** Request/response header names inside §2.1's prefix (05 §2.3). */
+/** Request/response header names inside the prefix. */
 export declare const HTTP_HEADER: {
     readonly client: "x-snagset-client";
     readonly schema: "x-snagset-schema";
@@ -197,11 +198,11 @@ export declare const HTTP_HEADER: {
     readonly requestId: "x-snagset-request-id";
     readonly mcpTransport: "x-snagset-mcp-transport";
 };
-/** Host-authored `<meta name>` keys we READ and never mint (§2.11). 03 §5.3: `route` is the only one. */
+/** Host-authored `<meta name>` keys we READ and never mint .: `route` is the only one. */
 export declare const META_NAME: {
     readonly route: "snagset:route";
 };
-/** Keys for Symbol.for() patch bookkeeping (§2.11). */
+/** Keys for Symbol.for() patch bookkeeping. */
 export declare const SYMBOL_KEY: {
     readonly original: "snagset.original";
     readonly wrapped: "snagset.wrapped";

package/dist/vendor/types/names.js

@@ -3,7 +3,7 @@
 // Source of truth: packages/types/registry.json
 // Regenerate:      pnpm gen:names      (CI runs `pnpm gen:names:check`)
 //
-// The Name Registry (specs/00-foundations.md §2) made executable. Every token
+// The Name Registry made executable. Every token
 // below is DERIVED from registry.json's `brand` block — the product name lives
 // in exactly one place. test/rename.test.ts proves it: flip the brand, and no
 // token of the old one survives. SCHEMA_VERSION is the one deliberate literal.
@@ -43,7 +43,7 @@ export const env = (name) => ENV_PREFIX + name;
 export const pgType = (name) => PG_TYPE_PREFIX + name;
 /** @returns e.g. `snagset_http_requests_total` */
 export const metric = (name) => METRIC_PREFIX + name;
-/** window.* names (§2.2). Dunders are internal/test affordances, not public API. */
+/** window.* names. Dunders are internal/test affordances, not public API. */
 export const GLOBALS = {
     api: "Snagset",
     config: "SnagsetConfig",
@@ -92,7 +92,7 @@ const cssClassToken = {
     block: "snag-block",
 };
 export const cssClass = (name) => cssClassToken[name];
-/** Custom properties (§2.1's prefix, enumerated). 06 §14 makes every one of these public SemVer surface, so they are registered rather than minted at the point of use. Values are NOT here — the registry governs names, never design. */
+/** Custom properties (the prefix, enumerated). The design makes every one of these public SemVer surface, so they are registered rather than minted at the point of use. Values are NOT here — the registry governs names, never design. */
 export const CSS_VAR = {
     font: "--snag-font",
     accent: "--snag-accent",
@@ -133,7 +133,7 @@ export const CSS_VAR_GROUPS = {
 export const cssVar = (name) => CSS_VAR[name];
 /** @returns e.g. `var(--snag-bg)` — what stylesheets actually interpolate. */
 export const cssRef = (name) => `var(${CSS_VAR[name]})`;
-/** @returns e.g. `snag_t`. The review-link secret is a FRAGMENT param (§2.5). */
+/** @returns e.g. `snag_t`. The review-link secret is a FRAGMENT param. */
 export const param = (name) => "snag_" + name;
 export const RESERVED_URL_PARAMS = {
     query: ["snag_t", "snag_off", "snag_debug", "snag_theme"],
@@ -141,13 +141,14 @@ export const RESERVED_URL_PARAMS = {
 };
 /** Point consts for hot paths: a chunk needing ONE key imports it and
  *  drops the whole table — object properties cannot tree-shake, and the
- *  panels chunk was carrying ten keys to read two (M2-13). */
+ *  panels chunk was carrying ten keys to read two. */
 export const DISCLOSURE_KEY = "snag:disclosure:v1";
 export const IDENTITY_KEY = "snag:identity";
 export const THEME_ATTR = "data-snag-theme";
-/** Web-storage keys (§2.6). Parameterised keys are functions. */
+/** Web-storage keys. Parameterised keys are functions. */
 export const storageKey = {
     session: (uid) => `snag:session:${uid}`,
+    silent: (uid) => `snag:silent:${uid}`,
     identity: IDENTITY_KEY,
     threads: (uid, env) => `snag:threads:${uid}:${env}`,
     seen: (uid, env) => `snag:seen:${uid}:${env}`,
@@ -159,15 +160,16 @@ export const storageKey = {
     seenCoach: "snag:seen-coach",
     disclosure: DISCLOSURE_KEY,
 };
-/** The v0.1 IndexedDB blob store (§2.6, 05 §10.1) — one database, one
+/** The v0.1 IndexedDB blob store — one database, one
  *  object store, shared by screenshots, reviewer images and the v2 outbox. */
 export const IDB = {
     database: "snag:blobs",
     store: "blobs",
 };
-/** Anchored regex sources matching every registered key — AC-22's storage diff. */
+/** Anchored regex sources matching every registered key — the storage diff. */
 export const STORAGE_KEY_PATTERNS = [
     "^snag:session:.+$",
+    "^snag:silent:.+$",
     "^snag:identity$",
     "^snag:threads:.+:.+$",
     "^snag:seen:.+:.+$",
@@ -179,20 +181,20 @@ export const STORAGE_KEY_PATTERNS = [
     "^snag:seen-coach$",
     "^snag:disclosure:v1$",
 ];
-/** The WIDGET's two (§2.7). Neither carries a credential, and no cookie authenticates the widget API — it runs on somebody else's origin. */
+/** The WIDGET's two. Neither carries a credential, and no cookie authenticates the widget API — it runs on somebody else's origin. */
 export const COOKIE = {
     off: "snag_off",
     on: "snag_on",
 };
-/** The dashboard's session + CSRF pair (05 §4.7) — first-party, on the server's own origin, owner audience. */
+/** The dashboard's session + CSRF pair — first-party, on the server's own origin, owner audience. */
 export const DASHBOARD_COOKIE = {
     session: "snag_session",
     csrf: "snag_csrf",
 };
-/** 05 §4.7 names these two constants directly; both spellings resolve to the same string. */
+/** The design names these two constants directly; both spellings resolve to the same string. */
 export const DASHBOARD_SESSION_COOKIE = DASHBOARD_COOKIE.session;
 export const DASHBOARD_CSRF_COOKIE = DASHBOARD_COOKIE.csrf;
-/** Built widget chunks (§2.8). Preact lives only in `panels`. */
+/** Built widget chunks. Preact lives only in `panels`. */
 export const ARTIFACT = {
     stub: "snag.js",
     runtime: "snag.runtime.js",
@@ -205,7 +207,7 @@ export const ARTIFACT = {
     dock: "snag.dock.js",
     text: "snag.text.js",
 };
-/** Wire-form entity id prefixes (§2.10). Not brand-derived. */
+/** Wire-form entity id prefixes. Not brand-derived. */
 export const ID_PREFIX = {
     project: "prj_",
     thread: "thr_",
@@ -215,11 +217,11 @@ export const ID_PREFIX = {
     link: "lnk_",
     round: "rnd_",
 };
-/** Credential literals (07 §8.2). Brand-DERIVED, and deliberately not the three-letter row shape: the literal is what gets registered with secret scanning, so a token pasted into a public repo is reported. */
+/** Credential literals. Brand-DERIVED, and deliberately not the three-letter row shape: the literal is what gets registered with secret scanning, so a token pasted into a public repo is reported. */
 export const CREDENTIAL_PREFIX = {
     mcp: "snagmcp_",
 };
-/** CustomEvents dispatched on document (§2.11). */
+/** CustomEvents dispatched on document. */
 export const DOM_EVENT = {
     ready: "snagset:ready",
     activate: "snagset:activate",
@@ -227,7 +229,7 @@ export const DOM_EVENT = {
     threadCreated: "snagset:thread-created",
     threadResolved: "snagset:thread-resolved",
 };
-/** Request/response header names inside §2.1's prefix (05 §2.3). */
+/** Request/response header names inside the prefix. */
 export const HTTP_HEADER = {
     client: "x-snagset-client",
     schema: "x-snagset-schema",
@@ -245,11 +247,11 @@ export const HTTP_HEADER = {
     requestId: "x-snagset-request-id",
     mcpTransport: "x-snagset-mcp-transport",
 };
-/** Host-authored `<meta name>` keys we READ and never mint (§2.11). 03 §5.3: `route` is the only one. */
+/** Host-authored `<meta name>` keys we READ and never mint .: `route` is the only one. */
 export const META_NAME = {
     route: "snagset:route",
 };
-/** Keys for Symbol.for() patch bookkeeping (§2.11). */
+/** Keys for Symbol.for() patch bookkeeping. */
 export const SYMBOL_KEY = {
     original: "snagset.original",
     wrapped: "snagset.wrapped",

package/dist/vite.d.ts

@@ -1,6 +1,6 @@
 import { type InitOptions } from "./index.ts";
 /**
- * `snagset/vite` — D67, the config-level install.
+ * `snagset/vite`, the config-level install.
  *
  * ```ts
  * // vite.config.ts
@@ -30,7 +30,7 @@ import { type InitOptions } from "./index.ts";
  * ── DEV AND BUILD BOTH, DELIBERATELY ──
  *
  * The tag is safe in a production build because who sees the toolbar is a
- * DASHBOARD setting, checked by the stub on load (D66) — shipping the tag is
+ * DASHBOARD setting, checked by the stub on load — shipping the tag is
  * not showing the toolbar. So the plugin does not carry an `enabled`/`dev`
  * option that re-answers a question Vite already answers natively: a project
  * that wants the tag only in dev writes the standard idiom

package/dist/vue.d.ts

@@ -1,6 +1,6 @@
 import { type PropType } from "vue";
 /**
- * `snagset/vue` — D63.
+ * `snagset/vue`.
  *
  * ```vue
  * <script setup>

package/dist/vue.js

@@ -1,7 +1,7 @@
 import { defineComponent, onBeforeUnmount, onMounted } from "vue";
 import { init } from "./index.js";
 /**
- * `snagset/vue` — D63.
+ * `snagset/vue`.
  *
  * ```vue
  * <script setup>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snagset",
-  "version": "0.1.16",
+  "version": "0.1.19",
   "private": false,
   "type": "module",
   "description": "Click-to-comment review for a live website. One script tag, or one import. React, Vue, Next.js, Vite, Astro.",