wenay-react2 1.0.48 → 1.0.50

package/doc/examples/peer-call-media.tsx

@@ -1,8 +1,8 @@
-/**
- * This is the same interactive component used by the QA stand cards 41–44.
- * It is shipped as a supported demo entrypoint, not a private test helper.
- *
- * import {PeerCallDemo, PeerPresenceDemo, MediaRelayAclDemo, MediaRelayAudioDemo}
- *   from "wenay-react2/demo/peer-media"
- */
+/**
+ * This is the same interactive component used by the QA stand cards 41–44.
+ * It is shipped as a supported demo entrypoint, not a private test helper.
+ *
+ * import {PeerCallDemo, PeerPresenceDemo, MediaRelayAclDemo, MediaRelayAudioDemo}
+ *   from "wenay-react2/demo/peer-media"
+ */
 export {PeerCallDemo, PeerPresenceDemo, MediaRelayAclDemo, MediaRelayAudioDemo} from "wenay-react2/demo/peer-media";

package/doc/examples/stand.tsx

@@ -1,6 +1,6 @@
-/** The complete interactive wenay-react2 stand, shipped in the package. */
-export {QABoard} from "wenay-react2/demo/stand";
-
-// import {createRoot} from "react-dom/client";
-// import {QABoard} from "wenay-react2/demo/stand";
+/** The complete interactive wenay-react2 stand, shipped in the package. */
+export {QABoard} from "wenay-react2/demo/stand";
+
+// import {createRoot} from "react-dom/client";
+// import {QABoard} from "wenay-react2/demo/stand";
 // createRoot(document.getElementById("root")!).render(<QABoard />);

package/doc/native.md

@@ -1,37 +1,37 @@
-# React Native entrypoint
-
-Import the renderer-neutral API from `wenay-react2/native`. It has no React DOM,
-CSS, browser-global or ag-grid dependency.
-
-```ts
-import AsyncStorage from '@react-native-async-storage/async-storage'
-import {createNativeColumnDots, createNativeColumnState} from 'wenay-react2/native'
-
-const columns = createNativeColumnState({
-    key: 'super-admin.columns',
-    columns: [
-        {key: 'server', title: 'Server', fixed: true},
-        {key: 'status', title: 'Status'},
-        {key: 'panic', title: 'Panic'},
-    ],
-    storage: AsyncStorage,
-})
-await columns.ready
-
-const dots = createNativeColumnDots({state: columns, max: 8})
-dots.begin('status', 40, 0)
-dots.move(120, 0, {start: 0, length: 240})
-dots.end()
-```
-
-The persisted `v/order/visible/width/sort/filter/groups` shape matches the web
-`ColumnsConfig`. Writes are serialized and local edits made while hydration is
-pending win over stale storage.
-
-`createNativeColumnDots` is a view-independent interaction model. Connect its
-`begin/move/end` coordinates to PanResponder or Gesture Handler. Set `removeDirection` to `up`, `down` or `either` (the renderer-neutral default). It supports
-live field replacement along the slider, explicit reorder and toggle, sticky
-`asc -> desc -> off` sorting, and upward tear-off.
-
-Call `dots.dispose()` and `columns.dispose()` with the owning screen. Use
-`columns.api.flush()` when the latest AsyncStorage write must be awaited.
+# React Native entrypoint
+
+Import the renderer-neutral API from `wenay-react2/native`. It has no React DOM,
+CSS, browser-global or ag-grid dependency.
+
+```ts
+import AsyncStorage from '@react-native-async-storage/async-storage'
+import {createNativeColumnDots, createNativeColumnState} from 'wenay-react2/native'
+
+const columns = createNativeColumnState({
+    key: 'super-admin.columns',
+    columns: [
+        {key: 'server', title: 'Server', fixed: true},
+        {key: 'status', title: 'Status'},
+        {key: 'panic', title: 'Panic'},
+    ],
+    storage: AsyncStorage,
+})
+await columns.ready
+
+const dots = createNativeColumnDots({state: columns, max: 8})
+dots.begin('status', 40, 0)
+dots.move(120, 0, {start: 0, length: 240})
+dots.end()
+```
+
+The persisted `v/order/visible/width/sort/filter/groups` shape matches the web
+`ColumnsConfig`. Writes are serialized and local edits made while hydration is
+pending win over stale storage.
+
+`createNativeColumnDots` is a view-independent interaction model. Connect its
+`begin/move/end` coordinates to PanResponder or Gesture Handler. Set `removeDirection` to `up`, `down` or `either` (the renderer-neutral default). It supports
+live field replacement along the slider, explicit reorder and toggle, sticky
+`asc -> desc -> off` sorting, and upward tear-off.
+
+Call `dots.dispose()` and `columns.dispose()` with the owning screen. Use
+`columns.api.flush()` when the latest AsyncStorage write must be awaited.

package/doc/progress/README.md

@@ -1,14 +1,14 @@
-# Task progress
-
-This directory is for short-lived checkpoint files during active non-trivial tasks.
-
-Rules:
-- create one file per task, named `doc/progress/<task>.md`;
-- keep it short: goal, checkpoints, decisions, blockers, and verification;
-- update it when checkpoints are completed or before switching context;
-- delete it when the task is finished;
-- keep durable history elsewhere: changelog/release notes for publishable changes,
-  roadmap/recommendations/target docs for long-lived project direction,
-  and the commit message or final response for the immediate summary.
-
+# Task progress
+
+This directory is for short-lived checkpoint files during active non-trivial tasks.
+
+Rules:
+- create one file per task, named `doc/progress/<task>.md`;
+- keep it short: goal, checkpoints, decisions, blockers, and verification;
+- update it when checkpoints are completed or before switching context;
+- delete it when the task is finished;
+- keep durable history elsewhere: changelog/release notes for publishable changes,
+  roadmap/recommendations/target docs for long-lived project direction,
+  and the commit message or final response for the immediate summary.
+
 Progress files are working notes, not API docs, release notes, or the durable target queue. When a task comes from `doc/target/my.md`, update that file before deleting the progress file: move completed work to `Verify` until checks pass, or remove it only after verification is recorded.

package/doc/progress/architecture-fix-queue.md

@@ -1,74 +1,74 @@
-# Architecture fix queue (A1-A10) — progress
-
-Status: in progress (session 2026-07-10). Queue source: `doc/target/my.md` (audit 2026-07-09).
-Durable per-change record: `doc/changes/v1.0.41.md` (shipped part), `doc/changes/v1.0.42.md` (current).
-
-## Session 2026-07-10 — recovery + tail of the queue
-
-Context: the machine rebooted; recovered from docs. Discovered and fixed first:
-the 1.0.41 release commit did NOT contain `columnGrid.tsx`, `fixedOrder.ts`,
-`persistedMaps.ts` and the whole architecture pass (npm had them, git did not —
-same failure mode as the earlier eb4e9b3 fix). Also `.npmrc` with a live npm
-auth token was sitting untracked — now gitignored (`/.npmrc`, `.vite-*.log`);
-the token itself should probably be rotated since it was on disk in the repo dir.
-
-Commits this session (chronological):
-
-1. **Post-release commit of the 1.0.41 working tree** — createColumnGrid sources,
-   A1/A2/A4/A5/A6/A8/A10-safe, hook-extraction do-now trio, common2 ^1.0.70,
-   changelog/docs; .gitignore hardening.
-2. **A10 safe part 2** — `onClickClose` alias (+deprecated `onCLickClose`),
-   `keyForSave` alias on `Button` (+deprecated `keySave`), QA card dup fix
-   (Replay 25→33, 26→34), `__test/tokens.test.ts` (two-way tokens.ts↔tokens.css).
-   Verify: tsc qa-check, jest 47/47.
-3. **A10 loop-guard** — `utils/structEqual.ts` (+barrel export, permanent test);
-   `columnState.readFromGrid` guards off `JSON.stringify`; order-sensitive
-   `sameMap` deliberately untouched (its sensitivity re-imposes stored order on
-   columnDefs reset). Verify: tsc, jest 53/53.
-4. **A7** — `DragBox` → thin adapter over `useDraggableApi` (+additive
-   `onMove`/`trackState:false` on the hook); `DragArea` @deprecated as-is;
-   `useFloatingWindowController`/`StickerMenu` deliberately stay bespoke
-   (recon: clamp, `buttons===1` recovery, persist, z-stack / mount-lifetime
-   listeners, click-suppression are load-bearing). `__test/dragBox.test.tsx`,
-   QA card 35. Verify: tsc, jest 58/58, stand: card 35 two drags commit without
-   jump-back (renders 1+2/gesture), card 26 reorder commits once, zero console
-   errors on fresh load.
-
-## A9 — DONE (committed 2026-07-10, 5th commit of the session; build OK)
-
-Done:
-
-- `components/Overlay.tsx` — INTERNAL (not exported) portal+scrim+outside+Escape
-  composition; outside-click delegates to `OutsideClickArea`; Escape listener only
-  when `onEscape` given; callbacks through refs. Doubles as the DOM seam for the
-  future react-native view layer (headless state stays in hosts).
-- `ModalProvider` → Overlay (inline token scrim + flex centering, Escape gated by
-  `closeOnEscape`, outside by `closeOnOutsideClick`) — public API untouched.
-- `SettingsDialog` → Overlay (`wenayDlgScrim`/`wenayDlgOutside` classes,
-  NO onEscape — the controller keeps the two-stage Escape: clear search, then close).
-- New permanent `__test/modalProvider.test.tsx` (portal/scrim/Escape/outside gates).
-
-Verified so far: tsc qa-check OK; jest 62/62; stand card 13 — open, Escape,
-outside click, close button all work (scrim dims, token z-index); card 20 —
-open, two-stage Escape (clear → close), outside click, window x. Console clean
-on fresh load (the ReferenceError seen mid-session was a vite HMR intermediate
-between two sequential edits, gone after reload).
-
-Deliberately NOT overlaid (recorded in changelog): `createModalElementStore`
-(render-slot store, not chrome), `LeftModal`/`Modal2` drawer (gesture-driven,
-no scrim), `ModalWrapper`/Input helpers (backdrop-less by design, hosted inside
-another modal slot).
-
-Close-out complete: fresh-page card-13/20 spot checks passed, changelog +
-my.md updated, `npm run build` OK, committed.
-
-## Queue after this session
-
-- **A3 (BREAKING)** dead `menuR.tsx` removal — only in a deliberate breaking version.
-- **A10 breaking leftovers** — raw `ListenApi` narrowing; removal of deprecated
-  `onCLickClose`/`keySave`/`DragArea`.
-- Then Ready queue: common2 1.0.66-1.0.70 adoption (useMediaSource, Peer SDK
-  adapter, WebRTC recipe), context-menu controller split, chart canvas wrapper.
-- New Inbox item 2026-07-10: React Native / mobile version of the library's
-  functionality (see `doc/target/my.md` Inbox + verbatim dictation) — A9 Overlay
-  was already shaped with that in mind (DOM isolated in one leaf).
+# Architecture fix queue (A1-A10) — progress
+
+Status: in progress (session 2026-07-10). Queue source: `doc/target/my.md` (audit 2026-07-09).
+Durable per-change record: `doc/changes/v1.0.41.md` (shipped part), `doc/changes/v1.0.42.md` (current).
+
+## Session 2026-07-10 — recovery + tail of the queue
+
+Context: the machine rebooted; recovered from docs. Discovered and fixed first:
+the 1.0.41 release commit did NOT contain `columnGrid.tsx`, `fixedOrder.ts`,
+`persistedMaps.ts` and the whole architecture pass (npm had them, git did not —
+same failure mode as the earlier eb4e9b3 fix). Also `.npmrc` with a live npm
+auth token was sitting untracked — now gitignored (`/.npmrc`, `.vite-*.log`);
+the token itself should probably be rotated since it was on disk in the repo dir.
+
+Commits this session (chronological):
+
+1. **Post-release commit of the 1.0.41 working tree** — createColumnGrid sources,
+   A1/A2/A4/A5/A6/A8/A10-safe, hook-extraction do-now trio, common2 ^1.0.70,
+   changelog/docs; .gitignore hardening.
+2. **A10 safe part 2** — `onClickClose` alias (+deprecated `onCLickClose`),
+   `keyForSave` alias on `Button` (+deprecated `keySave`), QA card dup fix
+   (Replay 25→33, 26→34), `__test/tokens.test.ts` (two-way tokens.ts↔tokens.css).
+   Verify: tsc qa-check, jest 47/47.
+3. **A10 loop-guard** — `utils/structEqual.ts` (+barrel export, permanent test);
+   `columnState.readFromGrid` guards off `JSON.stringify`; order-sensitive
+   `sameMap` deliberately untouched (its sensitivity re-imposes stored order on
+   columnDefs reset). Verify: tsc, jest 53/53.
+4. **A7** — `DragBox` → thin adapter over `useDraggableApi` (+additive
+   `onMove`/`trackState:false` on the hook); `DragArea` @deprecated as-is;
+   `useFloatingWindowController`/`StickerMenu` deliberately stay bespoke
+   (recon: clamp, `buttons===1` recovery, persist, z-stack / mount-lifetime
+   listeners, click-suppression are load-bearing). `__test/dragBox.test.tsx`,
+   QA card 35. Verify: tsc, jest 58/58, stand: card 35 two drags commit without
+   jump-back (renders 1+2/gesture), card 26 reorder commits once, zero console
+   errors on fresh load.
+
+## A9 — DONE (committed 2026-07-10, 5th commit of the session; build OK)
+
+Done:
+
+- `components/Overlay.tsx` — INTERNAL (not exported) portal+scrim+outside+Escape
+  composition; outside-click delegates to `OutsideClickArea`; Escape listener only
+  when `onEscape` given; callbacks through refs. Doubles as the DOM seam for the
+  future react-native view layer (headless state stays in hosts).
+- `ModalProvider` → Overlay (inline token scrim + flex centering, Escape gated by
+  `closeOnEscape`, outside by `closeOnOutsideClick`) — public API untouched.
+- `SettingsDialog` → Overlay (`wenayDlgScrim`/`wenayDlgOutside` classes,
+  NO onEscape — the controller keeps the two-stage Escape: clear search, then close).
+- New permanent `__test/modalProvider.test.tsx` (portal/scrim/Escape/outside gates).
+
+Verified so far: tsc qa-check OK; jest 62/62; stand card 13 — open, Escape,
+outside click, close button all work (scrim dims, token z-index); card 20 —
+open, two-stage Escape (clear → close), outside click, window x. Console clean
+on fresh load (the ReferenceError seen mid-session was a vite HMR intermediate
+between two sequential edits, gone after reload).
+
+Deliberately NOT overlaid (recorded in changelog): `createModalElementStore`
+(render-slot store, not chrome), `LeftModal`/`Modal2` drawer (gesture-driven,
+no scrim), `ModalWrapper`/Input helpers (backdrop-less by design, hosted inside
+another modal slot).
+
+Close-out complete: fresh-page card-13/20 spot checks passed, changelog +
+my.md updated, `npm run build` OK, committed.
+
+## Queue after this session
+
+- **A3 (BREAKING)** dead `menuR.tsx` removal — only in a deliberate breaking version.
+- **A10 breaking leftovers** — raw `ListenApi` narrowing; removal of deprecated
+  `onCLickClose`/`keySave`/`DragArea`.
+- Then Ready queue: common2 1.0.66-1.0.70 adoption (useMediaSource, Peer SDK
+  adapter, WebRTC recipe), context-menu controller split, chart canvas wrapper.
+- New Inbox item 2026-07-10: React Native / mobile version of the library's
+  functionality (see `doc/target/my.md` Inbox + verbatim dictation) — A9 Overlay
+  was already shaped with that in mind (DOM isolated in one leaf).

package/doc/progress/column-state-present-gate.md

@@ -1,28 +1,28 @@
-# ColumnState present-gate — progress
-
-## Scope
-
-Fix the v1.0.43 regression reported by a consumer: a grid event must not persist
-`visible=false` for a column that is hidden only by the runtime `presentGate`.
-
-## Contract
-
-`presentGate` is application-owned runtime presence. `visible` is user-owned,
-persisted configuration. A grid readback may update visibility only when the
-column passes the gate; order, width, sort and filter continue to read back for
-all known columns.
-
-## Plan
-
-1. Reproduce against current source with a fake grid. **Confirmed:** an unrelated
-   resize changed gated `b` from persisted `visible=true` to `false`.
-2. Guard the visibility fold in `readFromGrid` with `passesPresentGate`. **Done.**
-3. Add regression coverage for closed and open gates. **Done:** fake GridApi
-   covers both the protected gated column and a normal open-gate visibility edit.
-4. Run TypeScript, Jest and package build; record release notes. **Done:**
-   targeted Jest 3/3, full Jest 64/64, qa-check TypeScript and build passed.
-
-## Result
-
-Published as `wenay-react2@1.0.44`; durable details are in
-`doc/changes/v1.0.44.md`.
+# ColumnState present-gate — progress
+
+## Scope
+
+Fix the v1.0.43 regression reported by a consumer: a grid event must not persist
+`visible=false` for a column that is hidden only by the runtime `presentGate`.
+
+## Contract
+
+`presentGate` is application-owned runtime presence. `visible` is user-owned,
+persisted configuration. A grid readback may update visibility only when the
+column passes the gate; order, width, sort and filter continue to read back for
+all known columns.
+
+## Plan
+
+1. Reproduce against current source with a fake grid. **Confirmed:** an unrelated
+   resize changed gated `b` from persisted `visible=true` to `false`.
+2. Guard the visibility fold in `readFromGrid` with `passesPresentGate`. **Done.**
+3. Add regression coverage for closed and open gates. **Done:** fake GridApi
+   covers both the protected gated column and a normal open-gate visibility edit.
+4. Run TypeScript, Jest and package build; record release notes. **Done:**
+   targeted Jest 3/3, full Jest 64/64, qa-check TypeScript and build passed.
+
+## Result
+
+Published as `wenay-react2@1.0.44`; durable details are in
+`doc/changes/v1.0.44.md`.

package/doc/progress/common2-adoption-1.0.73.md

@@ -1,30 +1,30 @@
-# wenay-common2 1.0.73 adoption — progress
-
-## Update
-
-- Previous dependency: 1.0.70.
-- npm latest verified: 1.0.73.
-- Updated dependency and lockfile to 1.0.73.
-- Compatibility: `tsc -p tsconfig.qa-check.json --noEmit` and full Jest 21 suites / 68 tests pass.
-
-## Architecture decision
-
-| common2 capability | wenay-react2 decision | Reason |
-| --- | --- | --- |
-| Peer gap repair / `resync()` (1.0.71) | Core-only protocol; future `usePeer` may expose status and explicit `resync` | React must not own journal or repair state. |
-| Hidden-tab Media capture (1.0.72) | Adopt core defaults, no adapter | Browser worker/ImageCapture implementation belongs below React. |
-| `Media.attachVideoCanvas` / audio player / publish pipe (1.0.73) | Recipe and QA consumer first; thin ref-lifecycle hooks only if repeated | Frame decode/playback must bypass React renders. |
-
-## Follow-up
-
-- Keep the existing `useMediaSource`, `usePeer` and WebRTC recipe items in target.
-- Add a real Media/Peer QA consumer before introducing any new hook.
-- No raw route-coordinator hook: Peer mirrors already survive route changes.
-## Implementation batch
-
-- Added `useMediaSource`: React owns source start/stop/device lifecycle only; frames remain on the common2 Listen path.
-- Added `usePeer`: React exposes an SDK peer's mirrored store, low-frequency route state and explicit controls; it owns no repair or transport state.
-- QA cards 38/39/40 cover camera canvas viewer, microphone player and an in-process Peer host/mirror/resync scenario.
-- Verification: qa-check TypeScript, Jest 22 suites / 71 tests, package build, diff-check and live stand HTTP 200.
+# wenay-common2 1.0.73 adoption — progress
+
+## Update
+
+- Previous dependency: 1.0.70.
+- npm latest verified: 1.0.73.
+- Updated dependency and lockfile to 1.0.73.
+- Compatibility: `tsc -p tsconfig.qa-check.json --noEmit` and full Jest 21 suites / 68 tests pass.
+
+## Architecture decision
+
+| common2 capability | wenay-react2 decision | Reason |
+| --- | --- | --- |
+| Peer gap repair / `resync()` (1.0.71) | Core-only protocol; future `usePeer` may expose status and explicit `resync` | React must not own journal or repair state. |
+| Hidden-tab Media capture (1.0.72) | Adopt core defaults, no adapter | Browser worker/ImageCapture implementation belongs below React. |
+| `Media.attachVideoCanvas` / audio player / publish pipe (1.0.73) | Recipe and QA consumer first; thin ref-lifecycle hooks only if repeated | Frame decode/playback must bypass React renders. |
+
+## Follow-up
+
+- Keep the existing `useMediaSource`, `usePeer` and WebRTC recipe items in target.
+- Add a real Media/Peer QA consumer before introducing any new hook.
+- No raw route-coordinator hook: Peer mirrors already survive route changes.
+## Implementation batch
+
+- Added `useMediaSource`: React owns source start/stop/device lifecycle only; frames remain on the common2 Listen path.
+- Added `usePeer`: React exposes an SDK peer's mirrored store, low-frequency route state and explicit controls; it owns no repair or transport state.
+- QA cards 38/39/40 cover camera canvas viewer, microphone player and an in-process Peer host/mirror/resync scenario.
+- Verification: qa-check TypeScript, Jest 22 suites / 71 tests, package build, diff-check and live stand HTTP 200.
 - Manual Verify: run cards 38, 39, 40 together with existing replay cards 23 and 34 before release.
 - Manual verification completed by the user on the stand; release candidate is 1.0.45.

package/doc/progress/common2-adoption-1.0.74.md

@@ -1,24 +1,24 @@
-# wenay-common2 1.0.74 — adoption assessment
-
-## Upgrade
-
-- Updated the workspace lockfile from `wenay-common2` 1.0.73 to 1.0.74.
-- Compatibility: qa-check TypeScript, full Jest (20 suites / 67 tests), package build and diff-check pass.
-
-## Architecture decision
-
-- `Peer.createCallManager` is a new application interaction lifecycle, not an extension of the mirrored-store `usePeer` adapter.
-- React may bind call state and controls; common2 retains signaling envelopes, call-id ordering, busy/glare handling, timeouts and offline verdicts.
-- Presence belongs to the host protocol (`list()` plus edge-triggered `changes`), not polling or a second React-owned store.
-- `createMediaRelay` remains relay-first and server-authorized through `watchOf` / `canWatch`; a call UI attaches viewers only while active. React must not make ACL decisions.
-
-## Planned validation batch
-
-Presence edges; ring/accept/active; media keyframe; hangup/decline/offline/busy; ACL revoke of an already-open viewer.
-## Implementation batch — 1.0.46
-
-- Added `usePeerCalls(manager)`: a thin binding for ring/active state and explicit `call`; the app owns `manager.close()`.
-- Added `usePeerPresence(presence)`: subscribe-first snapshot plus online/offline edge projection.
-- QA cards 41–44 verify an in-process call lifecycle, presence disconnect/reconnect and media relay ACL revocation on an open viewer.
-- Automated verification: qa-check TypeScript, real in-process hook tests, full Jest and package build.
-- Manual Verify pending: QA card 43 — grant camera access, confirm canvas receives frames; revoke ACL and confirm viewer frame count freezes while source remains live; grant again and confirm it resumes. QA card 44 — grant microphone access, confirm audio player receives frames/plays; revoke and grant ACL with the same expectation.
+# wenay-common2 1.0.74 — adoption assessment
+
+## Upgrade
+
+- Updated the workspace lockfile from `wenay-common2` 1.0.73 to 1.0.74.
+- Compatibility: qa-check TypeScript, full Jest (20 suites / 67 tests), package build and diff-check pass.
+
+## Architecture decision
+
+- `Peer.createCallManager` is a new application interaction lifecycle, not an extension of the mirrored-store `usePeer` adapter.
+- React may bind call state and controls; common2 retains signaling envelopes, call-id ordering, busy/glare handling, timeouts and offline verdicts.
+- Presence belongs to the host protocol (`list()` plus edge-triggered `changes`), not polling or a second React-owned store.
+- `createMediaRelay` remains relay-first and server-authorized through `watchOf` / `canWatch`; a call UI attaches viewers only while active. React must not make ACL decisions.
+
+## Planned validation batch
+
+Presence edges; ring/accept/active; media keyframe; hangup/decline/offline/busy; ACL revoke of an already-open viewer.
+## Implementation batch — 1.0.46
+
+- Added `usePeerCalls(manager)`: a thin binding for ring/active state and explicit `call`; the app owns `manager.close()`.
+- Added `usePeerPresence(presence)`: subscribe-first snapshot plus online/offline edge projection.
+- QA cards 41–44 verify an in-process call lifecycle, presence disconnect/reconnect and media relay ACL revocation on an open viewer.
+- Automated verification: qa-check TypeScript, real in-process hook tests, full Jest and package build.
+- Manual Verify pending: QA card 43 — grant camera access, confirm canvas receives frames; revoke ACL and confirm viewer frame count freezes while source remains live; grant again and confirm it resumes. QA card 44 — grant microphone access, confirm audio player receives frames/plays; revoke and grant ACL with the same expectation.