wenay-react2 1.0.49 → 1.0.50

package/doc/examples/conference-server.mjs

@@ -1,150 +1,150 @@
-// Conference bridge server: the REAL-backend variant of QA card 46 / demo/peer-conference.
-// One Node process owns the peer host (call signaling + WebRTC negotiation pass-through),
-// the media relay and the ROOM policy; browser seats connect over Socket.IO from
-// conference-client.html. Media rides the server relay (technology 1); the peer-store
-// links between seats can promote to a real RTCPeerConnection datachannel negotiated
-// through this same signal hub (technology 2) and re-interpose back.
-//
-// Run:  node doc/examples/conference-server.mjs   (needs `socket.io` installed)
-// Then open the client page from the wenay-react2 stand dev server in 2-3 tabs:
-//   /doc/examples/conference-client.html?me=a&peers=b,c&host=1
-//   /doc/examples/conference-client.html?me=b&peers=a,c
-//   /doc/examples/conference-client.html?me=c&peers=a,b
-import {createServer} from "node:http";
-import {Server as SocketIOServer} from "socket.io";
-import {createRpcServerAuto, listen, Peer} from "wenay-common2";
-
-const PORT = Number(process.env.PORT ?? 8391);
-
-// ============== room policy: an accepted call joins BOTH parties to its room ==============
-// Membership is reference-counted per (room, account): in a host-star each member holds
-// one call to the host, while the host holds one call per member. canWatch/canSignal ask
-// "do these two accounts share a live room" — the ONLY media/endpoint authority here.
-function createRoomPolicy() {
-    const calls = new Map(); // pair -> {caller, callee, room, state, timer}
-    const rooms = new Map(); // room -> Map<account, refCount>
-
-    function join(room, account) {
-        const members = rooms.get(room) ?? new Map();
-        members.set(account, (members.get(account) ?? 0) + 1);
-        rooms.set(room, members);
-    }
-    function leave(room, account) {
-        const members = rooms.get(room);
-        if (!members) return;
-        const count = (members.get(account) ?? 0) - 1;
-        if (count > 0) members.set(account, count); else members.delete(account);
-        if (!members.size) rooms.delete(room);
-    }
-    function sameRoom(a, b) {
-        for (const members of rooms.values()) if (members.has(a) && members.has(b)) return true;
-        return false;
-    }
-    function finish(pair, reason) {
-        const call = calls.get(pair);
-        if (!call) return;
-        calls.delete(pair);
-        clearTimeout(call.timer);
-        if (call.state === "active") {
-            leave(call.room, call.caller);
-            leave(call.room, call.callee);
-        }
-        console.log(`[conf] call down: ${call.caller} <-> ${call.callee} in "${call.room}" (${reason})`);
-    }
-
-    function authorize(env) {
-        if (env.type === "ring") {
-            const room = typeof env.session?.room === "string" ? env.session.room : null;
-            if (!env.pair.startsWith("call:") || env.from === env.to || !room || calls.has(env.pair)) return false;
-            const timer = setTimeout(() => finish(env.pair, "expired"), 35_000);
-            timer.unref?.();
-            calls.set(env.pair, {caller: env.from, callee: env.to, room, state: "ringing", timer});
-            return true;
-        }
-        if (env.type === "accept" || env.type === "decline" || env.type === "hangup") {
-            const call = calls.get(env.pair);
-            if (!call) return false;
-            const reverse = env.from === call.callee && env.to === call.caller;
-            const participant = reverse || (env.from === call.caller && env.to === call.callee);
-            if (env.type === "accept") {
-                if (call.state !== "ringing" || !reverse) return false;
-                call.state = "active";
-                clearTimeout(call.timer);
-                join(call.room, call.caller);
-                join(call.room, call.callee);
-                console.log(`[conf] call up: ${call.caller} <-> ${call.callee} joined "${call.room}"`);
-                return true;
-            }
-            if (env.type === "decline" && (!reverse || call.state !== "ringing")) return false;
-            if (!participant) return false;
-            finish(env.pair, env.type);
-            return true;
-        }
-        // WebRTC direct negotiation (offer/answer/ice) is endpoint exposure: the server
-        // only brokers it between accounts that currently share a room.
-        if (env.type === "offer" || env.type === "answer" || env.type === "ice") {
-            return sameRoom(env.from, env.to);
-        }
-        return true; // close/revoke pass through (session teardown)
-    }
-
-    function dropAccount(account) {
-        for (const [pair, call] of calls) {
-            if (call.caller === account || call.callee === account) finish(pair, "offline");
-        }
-    }
-
-    return {
-        authorize,
-        canWatch: (watcher, owner) => watcher !== owner && sameRoom(watcher, owner),
-        dropAccount,
-    };
-}
-
-const policy = createRoomPolicy();
-const media = Peer.createMediaRelay({lines: {cam: "video"}, videoHistory: 8, canWatch: policy.canWatch});
-const host = Peer.createPeerHost({authorize: policy.authorize});
-
-host.presence.changes.on(change => {
-    console.log(`[conf] presence: ${change.account} ${change.online ? "online" : "offline"}`);
-    if (change.online) return;
-    // media BEFORE policy: relay.dropAccount closes watcher views through their
-    // policy proxies, so the grants must still be alive while it runs (common2
-    // 1.0.74 throws on already-revoked views — see peer-media-relay dropAccount)
-    try { media.dropAccount(change.account); } catch (error) { console.log(`[conf] media drop ${change.account}: ${error}`); }
-    policy.dropAccount(change.account);
-});
-
-const httpServer = createServer((_req, res) => { res.statusCode = 404; res.end("conference signaling server"); });
-const ioServer = new SocketIOServer(httpServer, {cors: {origin: true}, maxHttpBufferSize: 1e7});
-
-ioServer.on("connection", socket => {
-    const account = String(socket.handshake.auth?.account ?? "anon");
-    const peer = host.connection(account);
-    const [disconnect, disconnectListen] = listen();
-    socket.on("disconnect", () => { disconnect(); peer.close(); });
-    createRpcServerAuto({
-        socket: {emit: (key, data) => socket.emit(key, data), on: (key, cb) => socket.on(key, cb)},
-        socketKey: "app",
-        object: {
-            serverTime: () => new Date().toISOString(),
-            // the fragment is exposed verbatim: the browser's CallManager, peer-store
-            // client and WebRTC connector all ride this one signal port over the socket
-            peer: peer.fragment,
-            media: {
-                publish: media.publishOf(account),
-                watch: media.watchOf(account),
-            },
-        },
-        disconnectListen,
-    });
-    console.log(`[conf] ${account} connected`);
-});
-
-httpServer.listen(PORT, () => {
-    console.log(`[conf] conference bridge is up on :${PORT}`);
-    console.log("[conf] open the client page from the stand dev server, e.g.");
-    console.log("  /doc/examples/conference-client.html?me=a&peers=b,c&host=1");
-    console.log("  /doc/examples/conference-client.html?me=b&peers=a,c");
-    console.log("  /doc/examples/conference-client.html?me=c&peers=a,b");
-});
+// Conference bridge server: the REAL-backend variant of QA card 46 / demo/peer-conference.
+// One Node process owns the peer host (call signaling + WebRTC negotiation pass-through),
+// the media relay and the ROOM policy; browser seats connect over Socket.IO from
+// conference-client.html. Media rides the server relay (technology 1); the peer-store
+// links between seats can promote to a real RTCPeerConnection datachannel negotiated
+// through this same signal hub (technology 2) and re-interpose back.
+//
+// Run:  node doc/examples/conference-server.mjs   (needs `socket.io` installed)
+// Then open the client page from the wenay-react2 stand dev server in 2-3 tabs:
+//   /doc/examples/conference-client.html?me=a&peers=b,c&host=1
+//   /doc/examples/conference-client.html?me=b&peers=a,c
+//   /doc/examples/conference-client.html?me=c&peers=a,b
+import {createServer} from "node:http";
+import {Server as SocketIOServer} from "socket.io";
+import {createRpcServerAuto, listen, Peer} from "wenay-common2";
+
+const PORT = Number(process.env.PORT ?? 8391);
+
+// ============== room policy: an accepted call joins BOTH parties to its room ==============
+// Membership is reference-counted per (room, account): in a host-star each member holds
+// one call to the host, while the host holds one call per member. canWatch/canSignal ask
+// "do these two accounts share a live room" — the ONLY media/endpoint authority here.
+function createRoomPolicy() {
+    const calls = new Map(); // pair -> {caller, callee, room, state, timer}
+    const rooms = new Map(); // room -> Map<account, refCount>
+
+    function join(room, account) {
+        const members = rooms.get(room) ?? new Map();
+        members.set(account, (members.get(account) ?? 0) + 1);
+        rooms.set(room, members);
+    }
+    function leave(room, account) {
+        const members = rooms.get(room);
+        if (!members) return;
+        const count = (members.get(account) ?? 0) - 1;
+        if (count > 0) members.set(account, count); else members.delete(account);
+        if (!members.size) rooms.delete(room);
+    }
+    function sameRoom(a, b) {
+        for (const members of rooms.values()) if (members.has(a) && members.has(b)) return true;
+        return false;
+    }
+    function finish(pair, reason) {
+        const call = calls.get(pair);
+        if (!call) return;
+        calls.delete(pair);
+        clearTimeout(call.timer);
+        if (call.state === "active") {
+            leave(call.room, call.caller);
+            leave(call.room, call.callee);
+        }
+        console.log(`[conf] call down: ${call.caller} <-> ${call.callee} in "${call.room}" (${reason})`);
+    }
+
+    function authorize(env) {
+        if (env.type === "ring") {
+            const room = typeof env.session?.room === "string" ? env.session.room : null;
+            if (!env.pair.startsWith("call:") || env.from === env.to || !room || calls.has(env.pair)) return false;
+            const timer = setTimeout(() => finish(env.pair, "expired"), 35_000);
+            timer.unref?.();
+            calls.set(env.pair, {caller: env.from, callee: env.to, room, state: "ringing", timer});
+            return true;
+        }
+        if (env.type === "accept" || env.type === "decline" || env.type === "hangup") {
+            const call = calls.get(env.pair);
+            if (!call) return false;
+            const reverse = env.from === call.callee && env.to === call.caller;
+            const participant = reverse || (env.from === call.caller && env.to === call.callee);
+            if (env.type === "accept") {
+                if (call.state !== "ringing" || !reverse) return false;
+                call.state = "active";
+                clearTimeout(call.timer);
+                join(call.room, call.caller);
+                join(call.room, call.callee);
+                console.log(`[conf] call up: ${call.caller} <-> ${call.callee} joined "${call.room}"`);
+                return true;
+            }
+            if (env.type === "decline" && (!reverse || call.state !== "ringing")) return false;
+            if (!participant) return false;
+            finish(env.pair, env.type);
+            return true;
+        }
+        // WebRTC direct negotiation (offer/answer/ice) is endpoint exposure: the server
+        // only brokers it between accounts that currently share a room.
+        if (env.type === "offer" || env.type === "answer" || env.type === "ice") {
+            return sameRoom(env.from, env.to);
+        }
+        return true; // close/revoke pass through (session teardown)
+    }
+
+    function dropAccount(account) {
+        for (const [pair, call] of calls) {
+            if (call.caller === account || call.callee === account) finish(pair, "offline");
+        }
+    }
+
+    return {
+        authorize,
+        canWatch: (watcher, owner) => watcher !== owner && sameRoom(watcher, owner),
+        dropAccount,
+    };
+}
+
+const policy = createRoomPolicy();
+const media = Peer.createMediaRelay({lines: {cam: "video"}, videoHistory: 8, canWatch: policy.canWatch});
+const host = Peer.createPeerHost({authorize: policy.authorize});
+
+host.presence.changes.on(change => {
+    console.log(`[conf] presence: ${change.account} ${change.online ? "online" : "offline"}`);
+    if (change.online) return;
+    // media BEFORE policy: relay.dropAccount closes watcher views through their
+    // policy proxies, so the grants must still be alive while it runs (common2
+    // 1.0.74 throws on already-revoked views — see peer-media-relay dropAccount)
+    try { media.dropAccount(change.account); } catch (error) { console.log(`[conf] media drop ${change.account}: ${error}`); }
+    policy.dropAccount(change.account);
+});
+
+const httpServer = createServer((_req, res) => { res.statusCode = 404; res.end("conference signaling server"); });
+const ioServer = new SocketIOServer(httpServer, {cors: {origin: true}, maxHttpBufferSize: 1e7});
+
+ioServer.on("connection", socket => {
+    const account = String(socket.handshake.auth?.account ?? "anon");
+    const peer = host.connection(account);
+    const [disconnect, disconnectListen] = listen();
+    socket.on("disconnect", () => { disconnect(); peer.close(); });
+    createRpcServerAuto({
+        socket: {emit: (key, data) => socket.emit(key, data), on: (key, cb) => socket.on(key, cb)},
+        socketKey: "app",
+        object: {
+            serverTime: () => new Date().toISOString(),
+            // the fragment is exposed verbatim: the browser's CallManager, peer-store
+            // client and WebRTC connector all ride this one signal port over the socket
+            peer: peer.fragment,
+            media: {
+                publish: media.publishOf(account),
+                watch: media.watchOf(account),
+            },
+        },
+        disconnectListen,
+    });
+    console.log(`[conf] ${account} connected`);
+});
+
+httpServer.listen(PORT, () => {
+    console.log(`[conf] conference bridge is up on :${PORT}`);
+    console.log("[conf] open the client page from the stand dev server, e.g.");
+    console.log("  /doc/examples/conference-client.html?me=a&peers=b,c&host=1");
+    console.log("  /doc/examples/conference-client.html?me=b&peers=a,c");
+    console.log("  /doc/examples/conference-client.html?me=c&peers=a,b");
+});

package/doc/examples/peer-call-media.tsx

@@ -1,8 +1,8 @@
-/**
- * This is the same interactive component used by the QA stand cards 41–44.
- * It is shipped as a supported demo entrypoint, not a private test helper.
- *
- * import {PeerCallDemo, PeerPresenceDemo, MediaRelayAclDemo, MediaRelayAudioDemo}
- *   from "wenay-react2/demo/peer-media"
- */
+/**
+ * This is the same interactive component used by the QA stand cards 41–44.
+ * It is shipped as a supported demo entrypoint, not a private test helper.
+ *
+ * import {PeerCallDemo, PeerPresenceDemo, MediaRelayAclDemo, MediaRelayAudioDemo}
+ *   from "wenay-react2/demo/peer-media"
+ */
 export {PeerCallDemo, PeerPresenceDemo, MediaRelayAclDemo, MediaRelayAudioDemo} from "wenay-react2/demo/peer-media";

package/doc/examples/stand.tsx

@@ -1,6 +1,6 @@
-/** The complete interactive wenay-react2 stand, shipped in the package. */
-export {QABoard} from "wenay-react2/demo/stand";
-
-// import {createRoot} from "react-dom/client";
-// import {QABoard} from "wenay-react2/demo/stand";
+/** The complete interactive wenay-react2 stand, shipped in the package. */
+export {QABoard} from "wenay-react2/demo/stand";
+
+// import {createRoot} from "react-dom/client";
+// import {QABoard} from "wenay-react2/demo/stand";
 // createRoot(document.getElementById("root")!).render(<QABoard />);

package/doc/native.md

@@ -1,37 +1,37 @@
-# React Native entrypoint
-
-Import the renderer-neutral API from `wenay-react2/native`. It has no React DOM,
-CSS, browser-global or ag-grid dependency.
-
-```ts
-import AsyncStorage from '@react-native-async-storage/async-storage'
-import {createNativeColumnDots, createNativeColumnState} from 'wenay-react2/native'
-
-const columns = createNativeColumnState({
-    key: 'super-admin.columns',
-    columns: [
-        {key: 'server', title: 'Server', fixed: true},
-        {key: 'status', title: 'Status'},
-        {key: 'panic', title: 'Panic'},
-    ],
-    storage: AsyncStorage,
-})
-await columns.ready
-
-const dots = createNativeColumnDots({state: columns, max: 8})
-dots.begin('status', 40, 0)
-dots.move(120, 0, {start: 0, length: 240})
-dots.end()
-```
-
-The persisted `v/order/visible/width/sort/filter/groups` shape matches the web
-`ColumnsConfig`. Writes are serialized and local edits made while hydration is
-pending win over stale storage.
-
-`createNativeColumnDots` is a view-independent interaction model. Connect its
-`begin/move/end` coordinates to PanResponder or Gesture Handler. Set `removeDirection` to `up`, `down` or `either` (the renderer-neutral default). It supports
-live field replacement along the slider, explicit reorder and toggle, sticky
-`asc -> desc -> off` sorting, and upward tear-off.
-
-Call `dots.dispose()` and `columns.dispose()` with the owning screen. Use
-`columns.api.flush()` when the latest AsyncStorage write must be awaited.
+# React Native entrypoint
+
+Import the renderer-neutral API from `wenay-react2/native`. It has no React DOM,
+CSS, browser-global or ag-grid dependency.
+
+```ts
+import AsyncStorage from '@react-native-async-storage/async-storage'
+import {createNativeColumnDots, createNativeColumnState} from 'wenay-react2/native'
+
+const columns = createNativeColumnState({
+    key: 'super-admin.columns',
+    columns: [
+        {key: 'server', title: 'Server', fixed: true},
+        {key: 'status', title: 'Status'},
+        {key: 'panic', title: 'Panic'},
+    ],
+    storage: AsyncStorage,
+})
+await columns.ready
+
+const dots = createNativeColumnDots({state: columns, max: 8})
+dots.begin('status', 40, 0)
+dots.move(120, 0, {start: 0, length: 240})
+dots.end()
+```
+
+The persisted `v/order/visible/width/sort/filter/groups` shape matches the web
+`ColumnsConfig`. Writes are serialized and local edits made while hydration is
+pending win over stale storage.
+
+`createNativeColumnDots` is a view-independent interaction model. Connect its
+`begin/move/end` coordinates to PanResponder or Gesture Handler. Set `removeDirection` to `up`, `down` or `either` (the renderer-neutral default). It supports
+live field replacement along the slider, explicit reorder and toggle, sticky
+`asc -> desc -> off` sorting, and upward tear-off.
+
+Call `dots.dispose()` and `columns.dispose()` with the owning screen. Use
+`columns.api.flush()` when the latest AsyncStorage write must be awaited.

package/doc/progress/README.md

@@ -1,14 +1,14 @@
-# Task progress
-
-This directory is for short-lived checkpoint files during active non-trivial tasks.
-
-Rules:
-- create one file per task, named `doc/progress/<task>.md`;
-- keep it short: goal, checkpoints, decisions, blockers, and verification;
-- update it when checkpoints are completed or before switching context;
-- delete it when the task is finished;
-- keep durable history elsewhere: changelog/release notes for publishable changes,
-  roadmap/recommendations/target docs for long-lived project direction,
-  and the commit message or final response for the immediate summary.
-
+# Task progress
+
+This directory is for short-lived checkpoint files during active non-trivial tasks.
+
+Rules:
+- create one file per task, named `doc/progress/<task>.md`;
+- keep it short: goal, checkpoints, decisions, blockers, and verification;
+- update it when checkpoints are completed or before switching context;
+- delete it when the task is finished;
+- keep durable history elsewhere: changelog/release notes for publishable changes,
+  roadmap/recommendations/target docs for long-lived project direction,
+  and the commit message or final response for the immediate summary.
+
 Progress files are working notes, not API docs, release notes, or the durable target queue. When a task comes from `doc/target/my.md`, update that file before deleting the progress file: move completed work to `Verify` until checks pass, or remove it only after verification is recorded.

package/doc/progress/architecture-fix-queue.md

@@ -1,74 +1,74 @@
-# Architecture fix queue (A1-A10) — progress
-
-Status: in progress (session 2026-07-10). Queue source: `doc/target/my.md` (audit 2026-07-09).
-Durable per-change record: `doc/changes/v1.0.41.md` (shipped part), `doc/changes/v1.0.42.md` (current).
-
-## Session 2026-07-10 — recovery + tail of the queue
-
-Context: the machine rebooted; recovered from docs. Discovered and fixed first:
-the 1.0.41 release commit did NOT contain `columnGrid.tsx`, `fixedOrder.ts`,
-`persistedMaps.ts` and the whole architecture pass (npm had them, git did not —
-same failure mode as the earlier eb4e9b3 fix). Also `.npmrc` with a live npm
-auth token was sitting untracked — now gitignored (`/.npmrc`, `.vite-*.log`);
-the token itself should probably be rotated since it was on disk in the repo dir.
-
-Commits this session (chronological):
-
-1. **Post-release commit of the 1.0.41 working tree** — createColumnGrid sources,
-   A1/A2/A4/A5/A6/A8/A10-safe, hook-extraction do-now trio, common2 ^1.0.70,
-   changelog/docs; .gitignore hardening.
-2. **A10 safe part 2** — `onClickClose` alias (+deprecated `onCLickClose`),
-   `keyForSave` alias on `Button` (+deprecated `keySave`), QA card dup fix
-   (Replay 25→33, 26→34), `__test/tokens.test.ts` (two-way tokens.ts↔tokens.css).
-   Verify: tsc qa-check, jest 47/47.
-3. **A10 loop-guard** — `utils/structEqual.ts` (+barrel export, permanent test);
-   `columnState.readFromGrid` guards off `JSON.stringify`; order-sensitive
-   `sameMap` deliberately untouched (its sensitivity re-imposes stored order on
-   columnDefs reset). Verify: tsc, jest 53/53.
-4. **A7** — `DragBox` → thin adapter over `useDraggableApi` (+additive
-   `onMove`/`trackState:false` on the hook); `DragArea` @deprecated as-is;
-   `useFloatingWindowController`/`StickerMenu` deliberately stay bespoke
-   (recon: clamp, `buttons===1` recovery, persist, z-stack / mount-lifetime
-   listeners, click-suppression are load-bearing). `__test/dragBox.test.tsx`,
-   QA card 35. Verify: tsc, jest 58/58, stand: card 35 two drags commit without
-   jump-back (renders 1+2/gesture), card 26 reorder commits once, zero console
-   errors on fresh load.
-
-## A9 — DONE (committed 2026-07-10, 5th commit of the session; build OK)
-
-Done:
-
-- `components/Overlay.tsx` — INTERNAL (not exported) portal+scrim+outside+Escape
-  composition; outside-click delegates to `OutsideClickArea`; Escape listener only
-  when `onEscape` given; callbacks through refs. Doubles as the DOM seam for the
-  future react-native view layer (headless state stays in hosts).
-- `ModalProvider` → Overlay (inline token scrim + flex centering, Escape gated by
-  `closeOnEscape`, outside by `closeOnOutsideClick`) — public API untouched.
-- `SettingsDialog` → Overlay (`wenayDlgScrim`/`wenayDlgOutside` classes,
-  NO onEscape — the controller keeps the two-stage Escape: clear search, then close).
-- New permanent `__test/modalProvider.test.tsx` (portal/scrim/Escape/outside gates).
-
-Verified so far: tsc qa-check OK; jest 62/62; stand card 13 — open, Escape,
-outside click, close button all work (scrim dims, token z-index); card 20 —
-open, two-stage Escape (clear → close), outside click, window x. Console clean
-on fresh load (the ReferenceError seen mid-session was a vite HMR intermediate
-between two sequential edits, gone after reload).
-
-Deliberately NOT overlaid (recorded in changelog): `createModalElementStore`
-(render-slot store, not chrome), `LeftModal`/`Modal2` drawer (gesture-driven,
-no scrim), `ModalWrapper`/Input helpers (backdrop-less by design, hosted inside
-another modal slot).
-
-Close-out complete: fresh-page card-13/20 spot checks passed, changelog +
-my.md updated, `npm run build` OK, committed.
-
-## Queue after this session
-
-- **A3 (BREAKING)** dead `menuR.tsx` removal — only in a deliberate breaking version.
-- **A10 breaking leftovers** — raw `ListenApi` narrowing; removal of deprecated
-  `onCLickClose`/`keySave`/`DragArea`.
-- Then Ready queue: common2 1.0.66-1.0.70 adoption (useMediaSource, Peer SDK
-  adapter, WebRTC recipe), context-menu controller split, chart canvas wrapper.
-- New Inbox item 2026-07-10: React Native / mobile version of the library's
-  functionality (see `doc/target/my.md` Inbox + verbatim dictation) — A9 Overlay
-  was already shaped with that in mind (DOM isolated in one leaf).
+# Architecture fix queue (A1-A10) — progress
+
+Status: in progress (session 2026-07-10). Queue source: `doc/target/my.md` (audit 2026-07-09).
+Durable per-change record: `doc/changes/v1.0.41.md` (shipped part), `doc/changes/v1.0.42.md` (current).
+
+## Session 2026-07-10 — recovery + tail of the queue
+
+Context: the machine rebooted; recovered from docs. Discovered and fixed first:
+the 1.0.41 release commit did NOT contain `columnGrid.tsx`, `fixedOrder.ts`,
+`persistedMaps.ts` and the whole architecture pass (npm had them, git did not —
+same failure mode as the earlier eb4e9b3 fix). Also `.npmrc` with a live npm
+auth token was sitting untracked — now gitignored (`/.npmrc`, `.vite-*.log`);
+the token itself should probably be rotated since it was on disk in the repo dir.
+
+Commits this session (chronological):
+
+1. **Post-release commit of the 1.0.41 working tree** — createColumnGrid sources,
+   A1/A2/A4/A5/A6/A8/A10-safe, hook-extraction do-now trio, common2 ^1.0.70,
+   changelog/docs; .gitignore hardening.
+2. **A10 safe part 2** — `onClickClose` alias (+deprecated `onCLickClose`),
+   `keyForSave` alias on `Button` (+deprecated `keySave`), QA card dup fix
+   (Replay 25→33, 26→34), `__test/tokens.test.ts` (two-way tokens.ts↔tokens.css).
+   Verify: tsc qa-check, jest 47/47.
+3. **A10 loop-guard** — `utils/structEqual.ts` (+barrel export, permanent test);
+   `columnState.readFromGrid` guards off `JSON.stringify`; order-sensitive
+   `sameMap` deliberately untouched (its sensitivity re-imposes stored order on
+   columnDefs reset). Verify: tsc, jest 53/53.
+4. **A7** — `DragBox` → thin adapter over `useDraggableApi` (+additive
+   `onMove`/`trackState:false` on the hook); `DragArea` @deprecated as-is;
+   `useFloatingWindowController`/`StickerMenu` deliberately stay bespoke
+   (recon: clamp, `buttons===1` recovery, persist, z-stack / mount-lifetime
+   listeners, click-suppression are load-bearing). `__test/dragBox.test.tsx`,
+   QA card 35. Verify: tsc, jest 58/58, stand: card 35 two drags commit without
+   jump-back (renders 1+2/gesture), card 26 reorder commits once, zero console
+   errors on fresh load.
+
+## A9 — DONE (committed 2026-07-10, 5th commit of the session; build OK)
+
+Done:
+
+- `components/Overlay.tsx` — INTERNAL (not exported) portal+scrim+outside+Escape
+  composition; outside-click delegates to `OutsideClickArea`; Escape listener only
+  when `onEscape` given; callbacks through refs. Doubles as the DOM seam for the
+  future react-native view layer (headless state stays in hosts).
+- `ModalProvider` → Overlay (inline token scrim + flex centering, Escape gated by
+  `closeOnEscape`, outside by `closeOnOutsideClick`) — public API untouched.
+- `SettingsDialog` → Overlay (`wenayDlgScrim`/`wenayDlgOutside` classes,
+  NO onEscape — the controller keeps the two-stage Escape: clear search, then close).
+- New permanent `__test/modalProvider.test.tsx` (portal/scrim/Escape/outside gates).
+
+Verified so far: tsc qa-check OK; jest 62/62; stand card 13 — open, Escape,
+outside click, close button all work (scrim dims, token z-index); card 20 —
+open, two-stage Escape (clear → close), outside click, window x. Console clean
+on fresh load (the ReferenceError seen mid-session was a vite HMR intermediate
+between two sequential edits, gone after reload).
+
+Deliberately NOT overlaid (recorded in changelog): `createModalElementStore`
+(render-slot store, not chrome), `LeftModal`/`Modal2` drawer (gesture-driven,
+no scrim), `ModalWrapper`/Input helpers (backdrop-less by design, hosted inside
+another modal slot).
+
+Close-out complete: fresh-page card-13/20 spot checks passed, changelog +
+my.md updated, `npm run build` OK, committed.
+
+## Queue after this session
+
+- **A3 (BREAKING)** dead `menuR.tsx` removal — only in a deliberate breaking version.
+- **A10 breaking leftovers** — raw `ListenApi` narrowing; removal of deprecated
+  `onCLickClose`/`keySave`/`DragArea`.
+- Then Ready queue: common2 1.0.66-1.0.70 adoption (useMediaSource, Peer SDK
+  adapter, WebRTC recipe), context-menu controller split, chart canvas wrapper.
+- New Inbox item 2026-07-10: React Native / mobile version of the library's
+  functionality (see `doc/target/my.md` Inbox + verbatim dictation) — A9 Overlay
+  was already shaped with that in mind (DOM isolated in one leaf).

package/doc/progress/column-state-present-gate.md

@@ -1,28 +1,28 @@
-# ColumnState present-gate — progress
-
-## Scope
-
-Fix the v1.0.43 regression reported by a consumer: a grid event must not persist
-`visible=false` for a column that is hidden only by the runtime `presentGate`.
-
-## Contract
-
-`presentGate` is application-owned runtime presence. `visible` is user-owned,
-persisted configuration. A grid readback may update visibility only when the
-column passes the gate; order, width, sort and filter continue to read back for
-all known columns.
-
-## Plan
-
-1. Reproduce against current source with a fake grid. **Confirmed:** an unrelated
-   resize changed gated `b` from persisted `visible=true` to `false`.
-2. Guard the visibility fold in `readFromGrid` with `passesPresentGate`. **Done.**
-3. Add regression coverage for closed and open gates. **Done:** fake GridApi
-   covers both the protected gated column and a normal open-gate visibility edit.
-4. Run TypeScript, Jest and package build; record release notes. **Done:**
-   targeted Jest 3/3, full Jest 64/64, qa-check TypeScript and build passed.
-
-## Result
-
-Published as `wenay-react2@1.0.44`; durable details are in
-`doc/changes/v1.0.44.md`.
+# ColumnState present-gate — progress
+
+## Scope
+
+Fix the v1.0.43 regression reported by a consumer: a grid event must not persist
+`visible=false` for a column that is hidden only by the runtime `presentGate`.
+
+## Contract
+
+`presentGate` is application-owned runtime presence. `visible` is user-owned,
+persisted configuration. A grid readback may update visibility only when the
+column passes the gate; order, width, sort and filter continue to read back for
+all known columns.
+
+## Plan
+
+1. Reproduce against current source with a fake grid. **Confirmed:** an unrelated
+   resize changed gated `b` from persisted `visible=true` to `false`.
+2. Guard the visibility fold in `readFromGrid` with `passesPresentGate`. **Done.**
+3. Add regression coverage for closed and open gates. **Done:** fake GridApi
+   covers both the protected gated column and a normal open-gate visibility edit.
+4. Run TypeScript, Jest and package build; record release notes. **Done:**
+   targeted Jest 3/3, full Jest 64/64, qa-check TypeScript and build passed.
+
+## Result
+
+Published as `wenay-react2@1.0.44`; durable details are in
+`doc/changes/v1.0.44.md`.