From 8415de0bad4372c03465f592205cadc24fd04c8b Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 12:11:16 -0500
Subject: [PATCH 01/14] ci: run Harden-Runner on every job (#2258)

Adds step-security/harden-runner (audit, pinned to v2.22.4 like
craft-common-actions) as the first step of each job that did not have it,
so every workflow in the org's public repos reports its egress to
StepSecurity. Audit, not block: block-mode allow lists come from each
job's observed traffic.
---
 .github/workflows/packaging-lint.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/packaging-lint.yml b/.github/workflows/packaging-lint.yml
index da85536c4..0a91cc050 100644
--- a/.github/workflows/packaging-lint.yml
+++ b/.github/workflows/packaging-lint.yml
@@ -29,6 +29,10 @@ jobs:
     name: Windows installation policy (no app build)
     runs-on: windows-latest
     steps:
+      - name: Harden runner
+        uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4
+        with:
+          egress-policy: audit
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false

From 2446e8718b116144ac5e3b47cd09db8c5a02a40a Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 12:44:16 -0500
Subject: [PATCH 02/14] Updates: take craft-update from craft-libs main at
 6e03f65bf

---
 Cargo.lock | 3 ++-
 Cargo.toml | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 8ca91ac04..73d4d60fb 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1134,7 +1134,7 @@ dependencies = [
 [[package]]
 name = "craft-update"
 version = "0.1.0"
-source = "git+https://github.com/storytold/craft-libs?rev=1b34eba41e62138fc2438d2734523b302840b45d#1b34eba41e62138fc2438d2734523b302840b45d"
+source = "git+https://github.com/storytold/craft-libs?rev=6e03f65bf45181db77ba6229716e6624db9eb25b#6e03f65bf45181db77ba6229716e6624db9eb25b"
 dependencies = [
  "chrono",
  "dunce",
@@ -1144,6 +1144,7 @@ dependencies = [
  "image",
  "log",
  "plist",
+ "rustix 1.1.5",
  "semver",
  "serde",
  "serde_json",
diff --git a/Cargo.toml b/Cargo.toml
index af0dcaa8b..21833c3ec 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -43,7 +43,7 @@ craft-docpath = { version = "0.1.0", git = "https://github.com/storytold/craft-l
 # pull a second egui family version).
 craft-window = { git = "https://github.com/storytold/craft-libs", rev = "e11f9d9aebea5f6b8e74643c1ea1ed172ba5f545" }
 # craft-update: app-specific pretend versions apply to startup and manual checks.
-craft-update = { git = "https://github.com/storytold/craft-libs", version = "=0.1.0", rev = "1b34eba41e62138fc2438d2734523b302840b45d", features = ["egui"] }
+craft-update = { git = "https://github.com/storytold/craft-libs", version = "=0.1.0", rev = "6e03f65bf45181db77ba6229716e6624db9eb25b", features = ["egui"] }
 # The suite's font store: exact lookup of a missing font in the pinned Google Fonts and Noto
 # indexes, and checksum-verified installs into the one folder every Craft app reads (craft-libs).
 craft-font-store = { git = "https://github.com/storytold/craft-libs", rev = "e11f9d9aebea5f6b8e74643c1ea1ed172ba5f545" }

From 74698fa89fb1219d219a9e1bbd102f1154f4cedd Mon Sep 17 00:00:00 2001
From: Oleksii Sukholita <72558888+aleksei-suholita@users.noreply.github.com>
Date: Wed, 11 Nov 2026 20:23:45 +0100
Subject: [PATCH 03/14] M7: links open in the browser in the desktop app,
 What's new on the update prompt among them (#2216)

The desktop app built eframe without its `links` feature, so egui-winit dropped every
`ctx.open_url` with only a log warning: the update prompt's What's new link and Download
button, the About and Credits links, Terms in Live and the link in the Dev Mode panel did
nothing on click. The feature adds no crate: `webbrowser` is already a dependency of the app.
DeckCraft's desktop app builds eframe with it too.

`links_in_the_interface_open_in_the_browser` fails without the feature.

Co-authored-by: Oleksii Sukholita <oleksii.sukholita@gmail.com>
---
 Cargo.lock                          |  1 +
 apps/figcraft/Cargo.toml            |  4 +++-
 apps/figcraft/src/services_tests.rs | 10 ++++++++++
 3 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/Cargo.lock b/Cargo.lock
index 73d4d60fb..6714be11b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1547,6 +1547,7 @@ dependencies = [
  "raw-window-handle",
  "smithay-clipboard",
  "web-time",
+ "webbrowser",
  "windows-sys 0.61.2",
  "winit",
 ]
diff --git a/apps/figcraft/Cargo.toml b/apps/figcraft/Cargo.toml
index f2ea73ba8..386cb1f33 100644
--- a/apps/figcraft/Cargo.toml
+++ b/apps/figcraft/Cargo.toml
@@ -23,7 +23,9 @@ craft-window = { workspace = true }
 # The suite's settings folder: `FIGCRAFT_CONFIG_DIR`, a portable marker, then the platform folder.
 craft-settings = { workspace = true }
 egui = { workspace = true }
-eframe = { workspace = true, features = ["default_fonts", "wgpu", "accesskit", "clipboard", "wayland", "x11"] }
+# `links`: without it eframe drops every `ctx.open_url` and hyperlink click (the update prompt's
+# What's new and Download, About, Credits) with only a log warning.
+eframe = { workspace = true, features = ["default_fonts", "wgpu", "accesskit", "clipboard", "links", "wayland", "x11"] }
 serde_json = { workspace = true }
 log = { workspace = true }
 rfd = { workspace = true }
diff --git a/apps/figcraft/src/services_tests.rs b/apps/figcraft/src/services_tests.rs
index 970f1729e..0d197f5ce 100644
--- a/apps/figcraft/src/services_tests.rs
+++ b/apps/figcraft/src/services_tests.rs
@@ -142,3 +142,13 @@ fn the_next_dialog_starts_in_the_folder_of_the_last_pick() {
     let _ = std::fs::remove_dir_all(&dir);
     assert_eq!(start_folder(Some(dir)), None, "a folder deleted since: the system's own");
 }
+
+/// The update prompt's What's new and Download, and the About and Credits links, open through
+/// `ctx.open_url`. eframe drops those with only a log warning unless it is built with `links`.
+#[test]
+fn links_in_the_interface_open_in_the_browser() {
+    let manifest = include_str!("../Cargo.toml");
+    let eframe: Vec<&str> = manifest.lines().filter(|l| l.trim_start().starts_with("eframe =")).collect();
+    assert!(!eframe.is_empty(), "the app depends on eframe");
+    assert!(eframe.iter().any(|l| l.contains("\"links\"")), "eframe is built with `links`: {eframe:?}");
+}

From 6bc8bbaef1718ff32fd322eeb585e053e9448f3e Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 14:48:38 -0500
Subject: [PATCH 04/14] inspect: work out a grid's cells once per inspection
 (#2260)

---
 crates/engine/src/automation/inspect.rs | 27 +++++++++++++++++--------
 crates/engine/src/cmd/layout.rs         |  7 +++++++
 2 files changed, 26 insertions(+), 8 deletions(-)

diff --git a/crates/engine/src/automation/inspect.rs b/crates/engine/src/automation/inspect.rs
index 324635071..931280dba 100644
--- a/crates/engine/src/automation/inspect.rs
+++ b/crates/engine/src/automation/inspect.rs
@@ -165,6 +165,14 @@ pub fn node_json(doc: &Document, id: NodeId, depth: usize) -> Value {
 
 /// A node's selected properties, applied at every level of its subtree.
 pub fn node_json_with_options(doc: &Document, id: NodeId, depth: usize, options: &InspectOptions) -> Value {
+    node_json_in(doc, id, depth, options, &GridCells::default())
+}
+
+/// The cells of the grid frames met so far in one inspection, so a grid's geometry is worked out
+/// once, not once per child.
+type GridCells = std::cell::RefCell<std::collections::HashMap<NodeId, std::collections::HashMap<NodeId, figcraft_layout::GridCell>>>;
+
+fn node_json_in(doc: &Document, id: NodeId, depth: usize, options: &InspectOptions, grids: &GridCells) -> Value {
     let Some(n) = doc.node(id) else { return Value::Null };
     let mut v = json!({"id": n.id});
     let Some(o) = v.as_object_mut() else { return v };
@@ -176,7 +184,7 @@ pub fn node_json_with_options(doc: &Document, id: NodeId, depth: usize, options:
     if !n.is_page() {
         base_props(doc, n, id, o, options);
         paint_props(n, o, options);
-        layout_props(doc, n, o, options);
+        layout_props(doc, n, o, options, grids);
         dev_props(doc, n, o, options);
     }
     // Layer data written with `node.set {props: {pluginData}}` (pages too).
@@ -189,7 +197,7 @@ pub fn node_json_with_options(doc: &Document, id: NodeId, depth: usize, options:
     }
     if !n.children.is_empty() {
         if depth > 0 {
-            o.insert("children".into(), Value::Array(n.children.iter().map(|c| node_json_with_options(doc, *c, depth - 1, options)).collect()));
+            o.insert("children".into(), Value::Array(n.children.iter().map(|c| node_json_in(doc, *c, depth - 1, options, grids)).collect()));
         } else {
             o.insert("childCount".into(), json!(n.children.len()));
         }
@@ -286,7 +294,7 @@ fn paint_props(n: &Node, o: &mut serde_json::Map<String, Value>, options: &Inspe
     }
 }
 
-fn layout_props(doc: &Document, n: &Node, o: &mut serde_json::Map<String, Value>, options: &InspectOptions) {
+fn layout_props(doc: &Document, n: &Node, o: &mut serde_json::Map<String, Value>, options: &InspectOptions, grids: &GridCells) {
     if let Some(l) = &n.layout {
         insert_prop(o, options, "layout", || camel(serde_json::to_value(l).unwrap_or(Value::Null)));
     }
@@ -303,11 +311,14 @@ fn layout_props(doc: &Document, n: &Node, o: &mut serde_json::Map<String, Value>
             insert_prop(o, options, k, || json!(v));
         }
     }
-    if let Some(cell) = (parent_al && options.includes("gridCell"))
-        .then(|| n.parent.and_then(|p| figcraft_layout::grid_geometry(doc, p)))
-        .flatten()
-        .and_then(|g| g.cells.into_iter().find(|c| c.id == n.id))
-    {
+    let cell = (parent_al && options.includes("gridCell")).then_some(n.parent).flatten().and_then(|p| {
+        let mut grids = grids.borrow_mut();
+        let cells = grids
+            .entry(p)
+            .or_insert_with(|| figcraft_layout::grid_geometry(doc, p).map(|g| g.cells.into_iter().map(|c| (c.id, c)).collect()).unwrap_or_default());
+        cells.get(&n.id).copied()
+    });
+    if let Some(cell) = cell {
         insert_prop(o, options, "gridCell", || {
             json!({"column": cell.column, "row": cell.row, "columnSpan": cell.column_span, "rowSpan": cell.row_span,
                        "anchored": cl.grid_column.is_some() || cl.grid_row.is_some(), "alignH": cl.grid_align_h, "alignV": cl.grid_align_v})
diff --git a/crates/engine/src/cmd/layout.rs b/crates/engine/src/cmd/layout.rs
index fc40cee88..6403dfd4b 100644
--- a/crates/engine/src/cmd/layout.rs
+++ b/crates/engine/src/cmd/layout.rs
@@ -270,6 +270,13 @@ mod tests {
         assert_eq!(info["gridCell"]["column"], json!(2));
         assert_eq!(info["gridCell"]["row"], json!(1));
         assert_eq!(info["gridCell"]["anchored"], json!(true));
+        // Inspected together with the frame, each child still gets its own cell.
+        let all = crate::inspect::node_json(s.doc().unwrap(), f, 1);
+        let cells: Vec<(Value, Value)> =
+            all["children"].as_array().unwrap().iter().map(|c| (c["gridCell"]["column"].clone(), c["gridCell"]["row"].clone())).collect();
+        assert_eq!(cells[3], (json!(2), json!(1)));
+        assert_eq!(cells[0].0, json!(0));
+        assert!(cells.iter().all(|(c, r)| c.is_number() && r.is_number()), "{cells:?}");
         ex(&mut s, "node.set", json!({"id": kids[3], "props": {"gridColumn": "auto", "gridRow": null}}));
         assert_eq!(node(&s, kids[3]).child_layout.grid_column, None);
         // Fewer columns drop the extra tracks.

From 6e9582c0a0f395eca36376dcc26a2ea4b58dfccb Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 14:48:52 -0500
Subject: [PATCH 05/14] codeConnect.import: index components by name and
 describe each once (#2265)

---
 crates/engine/src/code_connect_tests.rs | 13 +++++++++++++
 crates/engine/src/dev/code_connect.rs   | 13 +++++++++----
 2 files changed, 22 insertions(+), 4 deletions(-)

diff --git a/crates/engine/src/code_connect_tests.rs b/crates/engine/src/code_connect_tests.rs
index 69f655ec6..4474fe03a 100644
--- a/crates/engine/src/code_connect_tests.rs
+++ b/crates/engine/src/code_connect_tests.rs
@@ -285,3 +285,16 @@ fn vue_layer_trees_import_connected_components_in_script_setup() {
     assert!(code.starts_with(want), "{code}");
     assert_eq!(code.matches("import Card").count(), 1, "{code}");
 }
+
+#[test]
+fn many_entries_for_one_component_each_link() {
+    let mut s = Session::new();
+    let (_, hover) = button(&mut s);
+    let links: Vec<Value> = (0..crate::code_connect::MAX_FILE_LINKS)
+        .map(|i| json!({"component": "Button", "language": if i % 2 == 0 { "react" } else { "vue" }, "name": "Button", "template": "<Button />"}))
+        .collect();
+    let r = ex(&mut s, "codeConnect.import", json!({"json": {"version": 1, "links": links}}));
+    assert_eq!(r["linked"], crate::code_connect::MAX_FILE_LINKS, "{r}");
+    let i = idv(&ex(&mut s, "instance.create", json!({"component": hover, "x": 0, "y": 500})));
+    assert_eq!(code(&mut s, i, "react"), "<Button />\n");
+}
diff --git a/crates/engine/src/dev/code_connect.rs b/crates/engine/src/dev/code_connect.rs
index fe67ba1e9..27738d083 100644
--- a/crates/engine/src/dev/code_connect.rs
+++ b/crates/engine/src/dev/code_connect.rs
@@ -669,7 +669,12 @@ fn import(s: &mut Session, p: &Value) -> Result<Value> {
     }
     let doc = s.doc()?;
     // Components and sets by name (variants are linked through their set).
-    let owners: Vec<(String, NodeId)> = doc.nodes().filter(|n| owner(doc, n.id) == Some(n.id)).map(|n| (n.name.clone(), n.id)).collect();
+    let mut owners: std::collections::HashMap<&str, Vec<NodeId>> = std::collections::HashMap::new();
+    for n in doc.nodes().filter(|n| owner(doc, n.id) == Some(n.id)) {
+        owners.entry(n.name.as_str()).or_default().push(n.id);
+    }
+    // What each component looks like, worked out once however many entries name it.
+    let mut described: std::collections::HashMap<NodeId, Option<Component>> = std::collections::HashMap::new();
     let mut warnings: Vec<String> = Vec::new();
     let mut apply: Vec<(NodeId, CodeLink)> = Vec::new();
     for (i, e) in entries.iter().enumerate() {
@@ -689,13 +694,13 @@ fn import(s: &mut Session, p: &Value) -> Result<Value> {
             name: name.into(),
             template: template.into(),
         };
-        let matches: Vec<NodeId> = owners.iter().filter(|(n, _)| n == component).map(|(_, id)| *id).collect();
+        let matches = owners.get(component).cloned().unwrap_or_default();
         if matches.is_empty() {
             warnings.push(format!("link {}: no component named {component:?}", i + 1));
         }
         for id in matches {
-            let Some(c) = main_of(doc, id).and_then(|m| describe(doc, m)) else { continue };
-            match check(&c, &link, lang) {
+            let Some(c) = described.entry(id).or_insert_with(|| main_of(doc, id).and_then(|m| describe(doc, m))).as_ref() else { continue };
+            match check(c, &link, lang) {
                 Ok(_) => apply.push((id, link.clone())),
                 Err(err) => warnings.push(format!("link {} ({component}): {err}", i + 1)),
             }

From 64e91207f1b1b464237692bf122d895367c807f2 Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 14:49:06 -0500
Subject: [PATCH 06/14] svg import: bound the layer stack a filter chain builds
 (#2252)

---
 crates/svg/src/import/fx.rs       | 18 +++++++++++++-----
 crates/svg/src/import/fx_tests.rs | 12 ++++++++++++
 2 files changed, 25 insertions(+), 5 deletions(-)

diff --git a/crates/svg/src/import/fx.rs b/crates/svg/src/import/fx.rs
index 0708352e7..4fe59a7b6 100644
--- a/crates/svg/src/import/fx.rs
+++ b/crates/svg/src/import/fx.rs
@@ -70,10 +70,15 @@ impl Img {
     }
 }
 
-fn stack(bottom: Img, top: Img) -> Img {
+/// The most layers a stack may hold. Results that name earlier results can double a stack at each
+/// of up to 64 primitives; real shadow chains hold a handful of layers, and a longer stack isn't
+/// an effect list anyone wrote.
+const MAX_STACK: usize = 64;
+
+fn stack(bottom: Img, top: Img) -> Option<Img> {
     let mut v = bottom.into_layers();
     v.extend(top.into_layers());
-    Img::Stack(v)
+    (v.len() <= MAX_STACK).then_some(Img::Stack(v))
 }
 
 /// The effects `filters` amount to on a layer whose user space maps to the page by `world`; `None`
@@ -148,13 +153,16 @@ fn primitive(k: &Kind, get: &dyn Fn(&Input) -> Option<Img>) -> Option<Img> {
             let mut v = Vec::new();
             for i in m.inputs() {
                 v.extend(get(i)?.into_layers());
+                if v.len() > MAX_STACK {
+                    return None;
+                }
             }
             Img::Stack(v)
         }
         Kind::Blend(b) => {
             let (top, bottom) = (get(b.input1())?, get(b.input2())?);
             match b.mode() {
-                usvg::BlendMode::Normal => stack(bottom, top),
+                usvg::BlendMode::Normal => stack(bottom, top)?,
                 _ => return None,
             }
         }
@@ -162,7 +170,7 @@ fn primitive(k: &Kind, get: &dyn Fn(&Input) -> Option<Img>) -> Option<Img> {
             let sigma = (f64::from(d.std_dev_x().get()) + f64::from(d.std_dev_y().get())) / 2.0;
             let s = Sh { dx: f64::from(d.dx()), dy: f64::from(d.dy()), sigma, color: color(d.color(), d.opacity().get()), ..Sh::alpha() };
             match get(d.input())? {
-                Img::Layer(b) => stack(Img::Shadow(s), Img::Layer(b)),
+                Img::Layer(b) => stack(Img::Shadow(s), Img::Layer(b))?,
                 _ => return None,
             }
         }
@@ -190,7 +198,7 @@ fn tint(v: &[f32], s: Sh) -> Option<Img> {
 fn composite(a: Img, b: Img, op: CompositeOperator) -> Option<Img> {
     let tinted = |s: Sh, c: Color| Sh { color: Color::new(c.r, c.g, c.b, (c.a * s.color.a).clamp(0.0, 1.0)), ..s };
     Some(match (op, a, b) {
-        (CompositeOperator::Over, a, b) => stack(b, a),
+        (CompositeOperator::Over, a, b) => stack(b, a)?,
         (CompositeOperator::In, Img::Flood(c), Img::Shadow(s)) | (CompositeOperator::In, Img::Shadow(s), Img::Flood(c)) => Img::Shadow(tinted(s, c)),
         // A flood cut to everything but a shadow, then cut to the layer: an inner shadow.
         (CompositeOperator::Out, Img::Flood(c), Img::Shadow(s)) if !s.inner && !s.inverted => Img::Shadow(Sh { inverted: true, ..tinted(s, c) }),
diff --git a/crates/svg/src/import/fx_tests.rs b/crates/svg/src/import/fx_tests.rs
index 8fa77e86e..33f0413ae 100644
--- a/crates/svg/src/import/fx_tests.rs
+++ b/crates/svg/src/import/fx_tests.rs
@@ -228,3 +228,15 @@ fn coloured_copies_of_a_blurred_layer_arent_shadows() {
         assert!(!notes.is_empty(), "{filter}: reported");
     }
 }
+
+#[test]
+fn a_doubling_chain_of_merges_is_refused_not_expanded() {
+    // Each merge holds the previous result twice: 2^40 layers if expanded.
+    let mut f = String::from(r##"<feMerge result="r0"><feMergeNode in="SourceGraphic"/><feMergeNode in="SourceGraphic"/></feMerge>"##);
+    for i in 1..40 {
+        f.push_str(&format!(r##"<feMerge result="r{i}"><feMergeNode in="r{}"/><feMergeNode in="r{}"/></feMerge>"##, i - 1, i - 1));
+    }
+    let (fx, notes) = effects(&f, "");
+    assert!(fx.is_empty(), "{fx:?}");
+    assert!(!notes.is_empty());
+}

From 9032dc3e67c63d93ddcb9e8d2fc85da04bfb98dc Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 14:49:20 -0500
Subject: [PATCH 07/14] svg export: embed each image's bytes once per file
 (#2250)

---
 crates/svg/src/image_shadow_tests.rs | 10 +++++++
 crates/svg/src/lib.rs                | 39 ++++++++++++++++++----------
 crates/svg/src/tests.rs              |  1 +
 3 files changed, 37 insertions(+), 13 deletions(-)

diff --git a/crates/svg/src/image_shadow_tests.rs b/crates/svg/src/image_shadow_tests.rs
index f5d3fbcfd..7b10878ef 100644
--- a/crates/svg/src/image_shadow_tests.rs
+++ b/crates/svg/src/image_shadow_tests.rs
@@ -57,3 +57,13 @@ fn a_transparent_images_inner_shadow_is_an_embedded_render() {
     let svg = export(&d, n);
     assert!(svg.contains("<pattern") && svg.contains("<mask"), "an opaque picture stays vector, shaded from its box: {svg}");
 }
+
+#[test]
+fn paints_of_one_image_embed_its_bytes_once() {
+    let (mut d, n) = scene(false, EffectKind::DropShadow(shadow()));
+    let node = d.get_mut(n).unwrap();
+    node.fills = vec![Paint::image("svg-image-shadow-opaque", ImageScaleMode::Fill); 3];
+    let svg = export(&d, n);
+    assert_eq!(svg.matches("<image id=").count(), 1, "{svg}");
+    assert_eq!(svg.matches("<pattern").count(), 3);
+}
diff --git a/crates/svg/src/lib.rs b/crates/svg/src/lib.rs
index f9ce81e89..680f0eb4a 100644
--- a/crates/svg/src/lib.rs
+++ b/crates/svg/src/lib.rs
@@ -93,6 +93,8 @@ struct W<'a> {
     used_ids: std::collections::BTreeSet<String>,
     /// The next `_k` suffix to try per base id, so repeated names don't rescan from `_2`.
     next_suffix: std::collections::HashMap<String, usize>,
+    /// The `<image>` written to `defs` per image key, so paints of one image share its bytes.
+    images: std::collections::HashMap<String, String>,
 }
 
 /// ` clip-path="url(#…)"` for a clip path id (else nothing).
@@ -269,17 +271,29 @@ impl W<'_> {
             PaintKind::Image(img) => {
                 let data = self.doc.images.get(&img.image)?;
                 let pid = self.id("pattern");
-                let iid = self.id("image");
-                // Formats SVG viewers don't show (TIFF, BMP) go in as PNG.
-                let png;
-                let (mime, bytes) = match sniff_mime(&data.bytes) {
-                    "application/octet-stream" => {
-                        png = figcraft_render::images::decode(&data.bytes).and_then(|p| figcraft_render::encode_png(&p).ok())?;
-                        ("image/png", png.as_slice())
+                let iid = match self.images.get(&img.image) {
+                    Some(iid) => iid.clone(),
+                    None => {
+                        let iid = self.id("image");
+                        // Formats SVG viewers don't show (TIFF, BMP) go in as PNG.
+                        let png;
+                        let (mime, bytes) = match sniff_mime(&data.bytes) {
+                            "application/octet-stream" => {
+                                png = figcraft_render::images::decode(&data.bytes).and_then(|p| figcraft_render::encode_png(&p).ok())?;
+                                ("image/png", png.as_slice())
+                            }
+                            m => (m, data.bytes.as_slice()),
+                        };
+                        let b64 = base64::engine::general_purpose::STANDARD.encode(bytes);
+                        let _ = write!(
+                            self.defs,
+                            "<image id=\"{iid}\" width=\"{}\" height=\"{}\" href=\"data:{mime};base64,{b64}\"/>",
+                            data.width, data.height
+                        );
+                        self.images.insert(img.image.clone(), iid.clone());
+                        iid
                     }
-                    m => (m, data.bytes.as_slice()),
                 };
-                let b64 = base64::engine::general_purpose::STANDARD.encode(bytes);
                 let t = figcraft_render::paint::image_transform(img, f64::from(data.width), f64::from(data.height), w, h);
                 let m = Affine::new([f64::from(t.sx), f64::from(t.ky), f64::from(t.kx), f64::from(t.sy), f64::from(t.tx), f64::from(t.ty)]);
                 let (pw, ph) = if img.scale_mode == figcraft_color::ImageScaleMode::Tile {
@@ -289,12 +303,10 @@ impl W<'_> {
                 };
                 let _ = write!(
                     self.defs,
-                    "<pattern id=\"{pid}\" patternUnits=\"userSpaceOnUse\" width=\"{}\" height=\"{}\" patternTransform=\"{}\"><image id=\"{iid}\" width=\"{}\" height=\"{}\" href=\"data:{mime};base64,{b64}\"/></pattern>",
+                    "<pattern id=\"{pid}\" patternUnits=\"userSpaceOnUse\" width=\"{}\" height=\"{}\" patternTransform=\"{}\"><use href=\"#{iid}\"/></pattern>",
                     num(pw),
                     num(ph),
-                    matrix(m),
-                    data.width,
-                    data.height
+                    matrix(m)
                 );
                 let op = if p.opacity < 0.999 { format!(" fill-opacity=\"{}\"", num(f64::from(p.opacity))) } else { String::new() };
                 Some(format!("fill=\"url(#{pid})\"{op}{blend}"))
@@ -1148,6 +1160,7 @@ pub fn try_export_svg(doc: &Document, ids: &[NodeId], opts: &SvgOptions) -> Resu
         clip: None,
         used_ids: Default::default(),
         next_suffix: Default::default(),
+        images: Default::default(),
     };
     for id in ids {
         let parent_xf = doc.node(*id).and_then(|n| n.parent).map(|p| doc.world_transform(p)).unwrap_or(Affine::IDENTITY);
diff --git a/crates/svg/src/tests.rs b/crates/svg/src/tests.rs
index ade0e3f30..8bce898da 100644
--- a/crates/svg/src/tests.rs
+++ b/crates/svg/src/tests.rs
@@ -294,6 +294,7 @@ fn unique_id_is_linear_for_repeated_names() {
         clip: None,
         used_ids: Default::default(),
         next_suffix: Default::default(),
+        images: Default::default(),
     };
     assert_eq!(w.unique_id("a"), "a");
     assert_eq!(w.unique_id("a_3"), "a_3");

From 81371f4a535de01bdbb46bf8d86abf4d569dc8d7 Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 14:49:35 -0500
Subject: [PATCH 08/14] render: seed and mix the node-id cache hash, skip the
 cell allocation past the pattern limit (#2254)

* render: seed and mix the node-id cache hash, skip the cell allocation past the pattern limit

* render: use hash_one in the bucket test
---
 crates/render/src/bounds_memo_tests.rs |  8 +++++++
 crates/render/src/draw.rs              | 29 ++++++++++++++++++++++----
 crates/render/src/pattern.rs           |  4 ++++
 3 files changed, 37 insertions(+), 4 deletions(-)

diff --git a/crates/render/src/bounds_memo_tests.rs b/crates/render/src/bounds_memo_tests.rs
index 44d7dc420..6f7ab1f18 100644
--- a/crates/render/src/bounds_memo_tests.rs
+++ b/crates/render/src/bounds_memo_tests.rs
@@ -91,3 +91,11 @@ fn kept_splat_answers_are_the_answers_worked_out_afresh() {
         }
     }
 }
+
+#[test]
+fn ids_chosen_to_differ_only_in_high_bits_still_spread_over_buckets() {
+    use std::hash::BuildHasher;
+    let state = crate::draw::IdState::default();
+    let buckets: std::collections::HashSet<u64> = (0..4096u64).map(|k| state.hash_one(NodeId(k << 40)) & 0xfff).collect();
+    assert!(buckets.len() > 2000, "{}", buckets.len());
+}
diff --git a/crates/render/src/draw.rs b/crates/render/src/draw.rs
index ff3a06270..bf5e8953c 100644
--- a/crates/render/src/draw.rs
+++ b/crates/render/src/draw.rs
@@ -69,16 +69,37 @@ impl<'a> Bounds<'a> {
 }
 
 /// A hash map keyed by node ids, which need no SipHash: they are counters (or a peer's range of
-/// them), and SipHash took a good part of a render.
-type IdMap<K, V> = HashMap<K, V, std::hash::BuildHasherDefault<IdHash>>;
+/// them), and SipHash took a good part of a render. A file can choose its ids, so each map is
+/// seeded at random and the hash mixes its high bits down (ids differing only up high would
+/// otherwise share a bucket).
+type IdMap<K, V> = HashMap<K, V, IdState>;
+
+/// Builds [`IdHash`]es from a per-map random seed.
+#[derive(Clone)]
+pub(crate) struct IdState(u64);
+
+impl Default for IdState {
+    fn default() -> Self {
+        use std::hash::BuildHasher;
+        IdState(std::collections::hash_map::RandomState::new().hash_one(0u8))
+    }
+}
+
+impl std::hash::BuildHasher for IdState {
+    type Hasher = IdHash;
+    fn build_hasher(&self) -> IdHash {
+        IdHash(self.0)
+    }
+}
 
 /// Mixes each word in with a multiply (Fibonacci hashing), so ids that differ in low bits spread.
-#[derive(Default)]
 pub(crate) struct IdHash(u64);
 
 impl Hasher for IdHash {
     fn finish(&self) -> u64 {
-        self.0
+        // The multiply's low bits depend only on the input's low bits: mix the high ones down.
+        let h = (self.0 ^ (self.0 >> 32)).wrapping_mul(0xFF51_AFD7_ED55_8CCD);
+        h ^ (h >> 29)
     }
     fn write(&mut self, bytes: &[u8]) {
         for b in bytes {
diff --git a/crates/render/src/pattern.rs b/crates/render/src/pattern.rs
index 55559d59f..f86f9e774 100644
--- a/crates/render/src/pattern.rs
+++ b/crates/render/src/pattern.rs
@@ -39,6 +39,10 @@ pub fn nested<T>(f: impl FnOnce() -> Option<T>) -> Option<T> {
 /// the pixmap, the cell and the pixmap's pixels per unit on each axis (whole pixels per cell, so
 /// the repeat lines up exactly).
 pub fn cell_pixmap(doc: &Document, pt: &PatternPaint, w: f64, h: f64, scale: f64, time: f64) -> Option<(Pixmap, PatternCell, (f64, f64))> {
+    // Past the nesting limit nothing is drawn, so don't allocate a cell first.
+    if DEPTH.with(Cell::get) >= MAX_DEPTH {
+        return None;
+    }
     let src = doc.node(NodeId(pt.source)).filter(|n| !n.is_page())?;
     let cell = pt.cell(src.width, src.height, w, h)?;
     let scale = if scale.is_finite() && scale > 0.0 { scale } else { 1.0 };

From 554ad0ea7761b06611b0d421abbddbfecfed4436 Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 14:49:49 -0500
Subject: [PATCH 09/14] pathops: budget the closed faces input, share the dash
 allowance, index point incidence (#2249)

* pathops: check closed inputs before faces normalises, share the dash allowance across subpaths, index point incidence once

* pathops: leave out move-only subpaths when closing, budget dashes by the fitted pattern, index only join points
---
 crates/pathops/src/budget_tests.rs | 26 ++++++++++++++++++++++++++
 crates/pathops/src/lib.rs          | 18 ++++++++++++++----
 crates/pathops/src/points.rs       | 17 +++++++++++++++--
 crates/pathops/src/width.rs        | 18 ++++++++++++++----
 crates/pathops/src/width_tests.rs  | 28 ++++++++++++++++++++++++++++
 5 files changed, 97 insertions(+), 10 deletions(-)

diff --git a/crates/pathops/src/budget_tests.rs b/crates/pathops/src/budget_tests.rs
index a55e58e85..dfcffdb5b 100644
--- a/crates/pathops/src/budget_tests.rs
+++ b/crates/pathops/src/budget_tests.rs
@@ -99,3 +99,29 @@ fn overlapping_rectangle_bounds_count_self_and_cross_pairs() {
     let shapes = rects([Rect::new(0.0, 0.0, 2.0, 2.0), Rect::new(1.0, 1.0, 3.0, 3.0), Rect::new(4.0, 4.0, 5.0, 5.0)]);
     assert_eq!(complexity([&shapes]), Some(Complexity { segments: 12, crossings: 14 }));
 }
+
+/// Open L shapes whose segments never overlap but whose implicit closing edges all do.
+#[test]
+fn faces_checks_the_closed_inputs_before_normalising() {
+    let mut p = BezPath::new();
+    for i in 0..2200 {
+        let (x, y) = (-(i as f64), 10_000.0 + i as f64);
+        p.move_to((x, 0.0));
+        p.line_to((x, y));
+        p.line_to((10_000.0, y));
+    }
+    assert!(complexity([&p]).is_some_and(|c| c.crossings <= MAX_CROSSINGS), "open input passes");
+    assert!(matches!(faces(&[(p, false)]), Err(PathOpsError::TooComplex)));
+}
+
+#[test]
+fn closing_drops_move_only_subpaths() {
+    let mut p = BezPath::new();
+    for i in 0..1000 {
+        p.move_to((i as f64, 0.0));
+    }
+    assert!(crate::closed(&p).elements().is_empty());
+    p.line_to((5.0, 5.0));
+    let c = crate::closed(&p);
+    assert_eq!(c.elements().len(), 3, "the last move, the line and the close: {:?}", c.elements());
+}
diff --git a/crates/pathops/src/lib.rs b/crates/pathops/src/lib.rs
index c24a22248..85f1ecd10 100644
--- a/crates/pathops/src/lib.rs
+++ b/crates/pathops/src/lib.rs
@@ -57,20 +57,27 @@ impl std::fmt::Display for PathOpsError {
     }
 }
 
-/// Close every open subpath (a filled open path paints as if closed).
+/// Close every open subpath (a filled open path paints as if closed). A subpath of a lone move
+/// fills nothing and is left out.
 pub fn closed(path: &BezPath) -> BezPath {
     let mut out = BezPath::new();
     let mut open = false;
+    let mut pending: Option<PathEl> = None;
     for el in path.elements() {
         match el {
             PathEl::MoveTo(_) => {
                 if open {
                     out.close_path();
                 }
-                open = true;
+                open = false;
+                pending = Some(*el);
+                continue;
             }
             PathEl::ClosePath => open = false,
-            _ => {}
+            _ => open = true,
+        }
+        if let Some(m) = pending.take() {
+            out.push(m);
         }
         out.push(*el);
     }
@@ -240,7 +247,10 @@ pub fn faces(paths: &[(BezPath, bool)]) -> Result<Vec<ArrangementFace>, PathOpsE
     // corner folds over itself and touches the shape's fill) leave the winding on each side of a
     // segment ambiguous where they touch, which made the sweep report overlapping faces. Reducing
     // every input to the simple contours of the area it fills first keeps the faces disjoint.
-    let closed_paths: Vec<BezPath> = paths.iter().map(|(p, even_odd)| plain(&closed(p), *even_odd)).collect();
+    // Closing adds edges, so what `plain` sweeps is checked first.
+    let closed_inputs: Vec<BezPath> = paths.iter().map(|(p, _)| closed(p)).collect();
+    budget::check(&closed_inputs)?;
+    let closed_paths: Vec<BezPath> = closed_inputs.iter().zip(paths).map(|(p, (_, even_odd))| plain(p, *even_odd)).collect();
     if closed_paths.iter().all(|p| p.elements().is_empty()) {
         return Ok(Vec::new());
     }
diff --git a/crates/pathops/src/points.rs b/crates/pathops/src/points.rs
index 650f309f4..452cd33ac 100644
--- a/crates/pathops/src/points.rs
+++ b/crates/pathops/src/points.rs
@@ -66,10 +66,23 @@ impl Styled {
         }
         // Each point's own join: a short corner along its two segments stroked with that join.
         let reach = (width * 0.05).max(0.2);
+        // Segments per point, built once (a scan of every segment per point is quadratic); like `incident`, a loop segment counts at its `a` end only.
+        // Only points that draw a join of their own get a list.
+        let mut incident: std::collections::HashMap<usize, Vec<(usize, bool)>> =
+            (0..self.net.vertices.len()).filter(|v| self.breaks(*v)).map(|v| (v, Vec::new())).collect();
+        for (i, s) in self.net.segments.iter().enumerate() {
+            if let Some(list) = incident.get_mut(&s.a) {
+                list.push((i, true));
+            }
+            if s.b != s.a
+                && let Some(list) = incident.get_mut(&s.b)
+            {
+                list.push((i, false));
+            }
+        }
         for (v, x) in self.net.vertices.iter().enumerate() {
             let Some(join) = x.join.filter(|_| self.breaks(v)) else { continue };
-            let inc = self.net.incident(v);
-            let [(s1, a1), (s2, a2)] = inc.as_slice() else { continue };
+            let Some([(s1, a1), (s2, a2)]) = incident.get(&v).map(Vec::as_slice) else { continue };
             let (Some(d1), Some(d2)) = (self.net.tangent_out(*s1, *a1), self.net.tangent_out(*s2, *a2)) else { continue };
             let p = x.point();
             let mut corner = BezPath::new();
diff --git a/crates/pathops/src/width.rs b/crates/pathops/src/width.rs
index c1f2d2de3..3bdd2a4d0 100644
--- a/crates/pathops/src/width.rs
+++ b/crates/pathops/src/width.rs
@@ -262,7 +262,12 @@ const DASH_ACCURACY: f64 = 0.05;
 /// Whether `pattern` (from [`dash_pattern`]) makes at most [`MAX_DASHES`] dashes along `len`;
 /// past that a stroke draws solid instead of one outline per dash (#1060).
 pub(crate) fn dashes_fit(len: f64, pattern: &[f64]) -> bool {
-    len / pattern.iter().sum::<f64>() * (pattern.len() as f64) < MAX_DASHES as f64
+    dash_count(len, pattern) < MAX_DASHES as f64
+}
+
+/// About how many dashes `pattern` makes along `len`.
+fn dash_count(len: f64, pattern: &[f64]) -> f64 {
+    len / pattern.iter().sum::<f64>() * (pattern.len() as f64)
 }
 
 /// Resample a polyline so no step is longer than `max_step`; returns the points and the length at
@@ -303,6 +308,8 @@ pub fn variable_outline(path: &BezPath, width: f64, props: &StrokeProps, profile
     let style = Style { join: props.join, miter_limit: props.miter_limit.clamp(1.0, 100.0), cap_start, cap_end };
     let pattern = dash_pattern(props);
     let mut budget = MAX_WIDTH_SAMPLES;
+    // The dashes of all subpaths together stay within MAX_DASHES; the rest draw solid.
+    let mut dash_budget = MAX_DASHES as f64;
     let mut out = BezPath::new();
     for line in &lines {
         let len = line.length();
@@ -317,9 +324,12 @@ pub fn variable_outline(path: &BezPath, width: f64, props: &StrokeProps, profile
                 [0.5 * width * right, 0.5 * width * left]
             })
             .collect();
-        match &pattern {
-            Some(pat) if dashes_fit(len, pat) => {
-                let (pat, offset) = line_dashes(len, line.closed, pat);
+        // Budgeted by the pattern as fitted to this line (a short line still takes a whole pattern).
+        let fit = pattern.as_ref().map(|pat| line_dashes(len, line.closed, pat));
+        let used = fit.as_ref().map_or(0.0, |(pat, _)| dash_count(len, pat).max(pat.len() as f64));
+        match fit {
+            Some((pat, offset)) if used < dash_budget && dashes_fit(len, &pat) => {
+                dash_budget -= used;
                 for (p, h) in dashes(&pts, &hw, &pat, offset) {
                     outline_piece(&mut out, &p, &h, false, style);
                 }
diff --git a/crates/pathops/src/width_tests.rs b/crates/pathops/src/width_tests.rs
index e9a6427ce..769a120e3 100644
--- a/crates/pathops/src/width_tests.rs
+++ b/crates/pathops/src/width_tests.rs
@@ -145,3 +145,31 @@ fn hostile_and_huge_input_is_bounded() {
     let s = stroke_outline(&line(1e6), &tiny, false);
     assert!(s.elements().len() < 1_000_000);
 }
+
+#[test]
+fn dashes_of_all_subpaths_share_one_allowance() {
+    let tiny = StrokeProps { dashes: vec![1.0, 1.0], ..props(1.0, Some(WidthProfile::uniform())) };
+    let many = |n: usize| {
+        let mut p = BezPath::new();
+        for i in 0..n {
+            p.move_to((0.0, i as f64 * 4.0));
+            p.line_to((15_000.0, i as f64 * 4.0));
+        }
+        variable_outline(&p, 1.0, &tiny, &WidthProfile::uniform()).unwrap().elements().len()
+    };
+    // The later subpaths draw solid once the first has used most of the allowance.
+    assert!(many(10) < 3 * many(1), "{} vs {}", many(10), many(1));
+}
+
+#[test]
+fn a_short_subpath_is_budgeted_by_the_whole_pattern_it_takes() {
+    // 100 one-unit lines, each fitted to a 4,000-entry pattern: ~400,000 dashes if not budgeted.
+    let long = StrokeProps { dashes: vec![1.0; 4000], ..props(1.0, Some(WidthProfile::uniform())) };
+    let mut p = BezPath::new();
+    for i in 0..100 {
+        p.move_to((0.0, i as f64 * 4.0));
+        p.line_to((1.0, i as f64 * 4.0));
+    }
+    let n = variable_outline(&p, 1.0, &long, &WidthProfile::uniform()).unwrap().elements().len();
+    assert!(n < 20_000 * 12, "{n}");
+}

From 898bfc2e60e191fae9b0c87590c220bb6c6f2eb4 Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 15:01:36 -0500
Subject: [PATCH 10/14] Fix Flatpak updates and bump to 0.17.1 (#2267)

* fix(flatpak): allow release checks and self-update helpers

* test: keep Flatpak permission parsing within strict Clippy rules

* chore: bump version to 0.17.1 for the Flatpak update fix
---
 Cargo.lock                                    | 44 +++++++++----------
 Cargo.toml                                    |  2 +-
 crates/ui-egui/tests/flatpak_updates.rs       | 27 ++++++++++++
 .../ai.storyteller.figcraft.bundle.yml        |  2 +
 .../linux/flatpak/ai.storyteller.figcraft.yml |  2 +
 5 files changed, 54 insertions(+), 23 deletions(-)
 create mode 100644 crates/ui-egui/tests/flatpak_updates.rs

diff --git a/Cargo.lock b/Cargo.lock
index 6714be11b..7c94d0f61 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1785,7 +1785,7 @@ checksum = "b97b65636e5b9ef369943878ac74335ba1c55c1cb6adbf1e2c293c624248d693"
 
 [[package]]
 name = "figcraft"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "arboard",
  "craft-menu",
@@ -1817,7 +1817,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-cli"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "clap",
  "clap_complete",
@@ -1835,7 +1835,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-collab"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "base64 0.22.1",
  "chrono",
@@ -1853,7 +1853,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-collab-net"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "base64 0.22.1",
  "figcraft-collab",
@@ -1876,7 +1876,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-color"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "kurbo",
  "serde",
@@ -1885,7 +1885,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-doc"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "figcraft-color",
  "figcraft-geom",
@@ -1898,7 +1898,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-engine"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "base64 0.22.1",
  "craft-docpath",
@@ -1932,7 +1932,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-format"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "figcraft-doc",
  "figcraft-layout",
@@ -1949,7 +1949,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-geom"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "kurbo",
  "serde",
@@ -1957,7 +1957,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-layout"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "figcraft-doc",
  "figcraft-geom",
@@ -1965,7 +1965,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-mcp"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "base64 0.22.1",
  "figcraft-collab-net",
@@ -1981,7 +1981,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-pathops"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "figcraft-doc",
  "figcraft-geom",
@@ -1990,7 +1990,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-pdf"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "figcraft-color",
  "figcraft-doc",
@@ -2007,7 +2007,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-plugin"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "figcraft-color",
  "serde",
@@ -2020,7 +2020,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-render"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "crc32fast",
  "figcraft-color",
@@ -2039,7 +2039,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-server"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "chrono",
  "crc32fast",
@@ -2064,7 +2064,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-svg"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "base64 0.22.1",
  "figcraft-color",
@@ -2080,7 +2080,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-text"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "core-text",
  "craft-font-catalog",
@@ -2098,7 +2098,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-ui-egui"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "base64 0.22.1",
  "chrono",
@@ -2126,7 +2126,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-vectordrawable"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "figcraft-color",
  "figcraft-doc",
@@ -2140,7 +2140,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-web"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "base64 0.22.1",
  "craft-web-api",
@@ -6763,7 +6763,7 @@ checksum = "9440ea3e5aeabb0ac63af70daf835274065238cdd0cec83418f417eae38bacee"
 
 [[package]]
 name = "xtask"
-version = "0.15.0"
+version = "0.17.1"
 dependencies = [
  "figcraft-engine",
  "serde_json",
diff --git a/Cargo.toml b/Cargo.toml
index 21833c3ec..d24d8f03d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -6,7 +6,7 @@ exclude = ["plugins"]
 # default-members = ["crates/*", "apps/figcraft", "apps/figcraft-cli", "xtask"]
 
 [workspace.package]
-version = "0.15.0"
+version = "0.17.1"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 rust-version = "1.95"
diff --git a/crates/ui-egui/tests/flatpak_updates.rs b/crates/ui-egui/tests/flatpak_updates.rs
new file mode 100644
index 000000000..5097d2f93
--- /dev/null
+++ b/crates/ui-egui/tests/flatpak_updates.rs
@@ -0,0 +1,27 @@
+//! Release and source Flatpaks must allow release checks and host update helpers.
+fn finish_args(manifest: &str) -> Vec<&str> {
+    manifest
+        .split("finish-args:")
+        .nth(1)
+        .unwrap_or_default()
+        .lines()
+        .take_while(|line| line.is_empty() || line.starts_with(' ') || line.starts_with('#'))
+        .filter_map(|line| line.trim().strip_prefix("- "))
+        .map(|arg| arg.trim_matches(['\'', '"']))
+        .collect()
+}
+
+#[test]
+fn flatpak_update_permissions() {
+    let manifests = [
+        include_str!("../../../packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml"),
+        include_str!("../../../packaging/linux/flatpak/ai.storyteller.figcraft.yml"),
+    ];
+    let args = manifests.map(finish_args);
+    assert_eq!(args[0], args[1], "source and release permissions must agree");
+    for permissions in args {
+        for required in ["--share=network", "--talk-name=org.freedesktop.Flatpak"] {
+            assert!(permissions.contains(&required), "missing update permission: {required}");
+        }
+    }
+}
diff --git a/packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml b/packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml
index a46fa191c..d395a891b 100644
--- a/packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml
+++ b/packaging/linux/flatpak/ai.storyteller.figcraft.bundle.yml
@@ -17,6 +17,8 @@ runtime-version: '26.08'
 sdk: org.freedesktop.Sdk
 command: figcraft
 finish-args:
+  # The shared updater inspects and updates this installation via flatpak-spawn --host.
+  - --talk-name=org.freedesktop.Flatpak
   - --filesystem=xdg-data/ArtCraft/versions:ro
   # Display: Wayland first; X11 only when no Wayland compositor is running.
   - --socket=wayland
diff --git a/packaging/linux/flatpak/ai.storyteller.figcraft.yml b/packaging/linux/flatpak/ai.storyteller.figcraft.yml
index 91054f5cd..ec284ec99 100644
--- a/packaging/linux/flatpak/ai.storyteller.figcraft.yml
+++ b/packaging/linux/flatpak/ai.storyteller.figcraft.yml
@@ -22,6 +22,8 @@ sdk-extensions:
   - org.freedesktop.Sdk.Extension.rust-stable
 command: figcraft
 finish-args:
+  # The shared updater inspects and updates this installation via flatpak-spawn --host.
+  - --talk-name=org.freedesktop.Flatpak
   - --filesystem=xdg-data/ArtCraft/versions:ro
   # Display: Wayland first; X11 only when no Wayland compositor is running.
   - --socket=wayland

From 24cf70329bc6c7eea66a5e45149be9df63a08d63 Mon Sep 17 00:00:00 2001
From: Trevor Brown <trevorbrown.dev@gmail.com>
Date: Wed, 11 Nov 2026 15:06:56 -0500
Subject: [PATCH 11/14] M5: Locked layers follow Figma's rules: no nudge, a
 locked parent's children stay locked (#1560) (#2219)

* M5: Locked layers follow Figma's rules: no nudge, a locked parent's children stay locked (#1560)

Pins Figma's locked-layer behaviour (measured in Figma's web app, 2026-11-10; help center "Lock and unlock layers") in a new lock_behaviour_tests suite. Fixes the divergences: transform.nudge and transform.nudgeSize skip locked layers, object.toggleLock without a value counts a child of a locked parent as locked (so it never locks the child on its own), and the Layers panel padlock on such a child is inert.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Model-Effort: Opus 5.5 drove; Fable 5.1 briefed; Sonnet 5.5 wrote at medium

* Layers panel: a padlock sweep skips the children of a locked layer (#1560)

A padlock drag sweep no longer collects rows with `locked_above`, so
dragging across a locked frame's children leaves their own flags alone
and draws no swept value on them. An eye sweep is unchanged.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Model-Effort: Opus 5.5 drove; Opus 5.5 briefed; Sonnet 5.5 wrote at medium

* M5: Lock/Unlock leaves a locked layer's child alone in a mixed selection (#1560)

With a locked frame's child and an unlocked layer selected, Lock/Unlock set both own flags, so
the child stayed locked once the frame was unlocked. With no explicit `locked` value, the command
now skips a layer whose parent is locked, as its padlock does; an explicit value (scripts) still
sets it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Model-Effort: Opus 5.5 drove and wrote

---------

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
Co-authored-by: FredApps <FredApps@users.noreply.github.com>
---
 crates/engine/src/board_tables_tests.rs      |   3 +
 crates/engine/src/cmd/edit/select.rs         |  17 ++-
 crates/engine/src/lib.rs                     |   2 +
 crates/engine/src/lock_behaviour_tests.rs    | 141 +++++++++++++++++++
 crates/ui-egui/src/layers_behaviour_tests.rs |  48 +++++++
 crates/ui-egui/src/panels/layers.rs          |  21 ++-
 docs/ui-parity.md                            |   7 +-
 7 files changed, 227 insertions(+), 12 deletions(-)
 create mode 100644 crates/engine/src/lock_behaviour_tests.rs

diff --git a/crates/engine/src/board_tables_tests.rs b/crates/engine/src/board_tables_tests.rs
index 2c0d07bbc..3e7dbad80 100644
--- a/crates/engine/src/board_tables_tests.rs
+++ b/crates/engine/src/board_tables_tests.rs
@@ -182,6 +182,9 @@ fn table_edits_add_and_remove_rows_and_columns_keeping_text() {
 
 #[test]
 fn a_double_click_types_in_the_cell_and_its_row_grows_with_the_text() {
+    // Measure with system fonts when the optional craft-fonts checkout is absent,
+    // without depending on another test having scanned them first.
+    figcraft_text::scan_system_fonts();
     let mut s = board();
     let r = s.execute("board.table", &json!({"x": 0, "y": 0})).unwrap();
     let t = id(&r, "id");
diff --git a/crates/engine/src/cmd/edit/select.rs b/crates/engine/src/cmd/edit/select.rs
index ca1da3bbc..27eaf7d83 100644
--- a/crates/engine/src/cmd/edit/select.rs
+++ b/crates/engine/src/cmd/edit/select.rs
@@ -174,7 +174,8 @@ pub(super) fn nudge(s: &mut Session, p: &Value) -> Result<Value> {
     // no undo step.
     let mut work = s.doc()?.clone();
     let doc = &mut work;
-    let ids = roots(doc, &ids);
+    // A locked layer (or one in a locked layer) ignores the arrow keys.
+    let ids: Vec<NodeId> = roots(doc, &ids).into_iter().filter(|i| !crate::tools::locked_in(doc, *i)).collect();
     let mut changed = false;
     // Children in an auto layout flow move one place instead (see `al_keys`).
     for i in &ids {
@@ -209,6 +210,9 @@ pub(super) fn nudge_size(s: &mut Session, p: &Value) -> Result<Value> {
     let ids = req_targets("transform.nudgeSize", s, p)?;
     let ids = roots(s.doc()?, &ids);
     for i in ids {
+        if crate::tools::locked_in(s.doc()?, i) {
+            continue;
+        }
         let Some((w, h)) = s.doc()?.node(i).map(|n| (n.width, n.height)) else { continue };
         let mut q = serde_json::Map::new();
         q.insert("ids".into(), json!([i]));
@@ -231,9 +235,16 @@ pub(super) fn toggle(s: &mut Session, p: &Value, what: &str) -> Result<Value> {
     // Figma: if any is visible, hide all (and vice versa).
     let value = explicit.unwrap_or_else(|| match what {
         "visible" => !ids.iter().all(|i| doc.node(*i).is_some_and(|n| n.visible)),
-        _ => !ids.iter().all(|i| doc.node(*i).is_some_and(|n| n.locked)),
+        // A child of a locked layer counts as locked: its own flag can't be toggled while the
+        // parent is locked.
+        _ => !ids.iter().all(|i| crate::tools::locked_in(doc, *i)),
     });
-    for i in &ids {
+    // Lock/Unlock leaves a child of a locked layer alone, as its padlock does: its own flag must
+    // still hold once the parent is unlocked. An explicit `locked` (scripts) sets it anyway.
+    let under_lock = |i: NodeId| doc.ancestors(i).into_iter().any(|a| doc.node(a).is_some_and(|n| n.locked));
+    let skip: Vec<NodeId> =
+        if what == "locked" && explicit.is_none() { ids.iter().copied().filter(|i| under_lock(*i)).collect() } else { Vec::new() };
+    for i in ids.iter().filter(|i| !skip.contains(i)) {
         let n = doc.get_mut(*i)?;
         if what == "visible" {
             n.visible = value;
diff --git a/crates/engine/src/lib.rs b/crates/engine/src/lib.rs
index 302e7053e..89de7f22f 100644
--- a/crates/engine/src/lib.rs
+++ b/crates/engine/src/lib.rs
@@ -419,6 +419,8 @@ mod live_signal_tests;
 #[cfg(test)]
 mod live_tests;
 #[cfg(test)]
+mod lock_behaviour_tests;
+#[cfg(test)]
 mod mask_tests;
 #[cfg(test)]
 mod masks_behaviour_tests;
diff --git a/crates/engine/src/lock_behaviour_tests.rs b/crates/engine/src/lock_behaviour_tests.rs
new file mode 100644
index 000000000..90104da19
--- /dev/null
+++ b/crates/engine/src/lock_behaviour_tests.rs
@@ -0,0 +1,141 @@
+//! Locked layers, as measured in Figma's web app (2026-11-10) and described in the help-center
+//! article "Lock and unlock layers": the canvas never selects a locked layer or a child of a locked
+//! frame; a locked layer selected in the layers panel has no handles and ignores the arrow keys, but
+//! its properties still edit; a child of a locked frame can't be locked or unlocked on its own.
+
+use serde_json::{Value, json};
+
+use crate::Session;
+use crate::params::id_of;
+use crate::tools::{PointerEvent, PointerKind, handle_at};
+use figcraft_doc::NodeId;
+use figcraft_geom::Point;
+
+fn ex(s: &mut Session, cmd: &str, p: Value) -> Value {
+    s.execute(cmd, &p).unwrap_or_else(|e| panic!("{cmd}: {e}"))
+}
+
+fn rect(s: &mut Session, x: f64, y: f64, parent: Option<NodeId>) -> NodeId {
+    let mut p = json!({"x": x, "y": y, "width": 40, "height": 40});
+    if let Some(parent) = parent {
+        p["parent"] = json!(parent);
+    }
+    id_of(&ex(s, "shape.rectangle", p)["id"]).unwrap()
+}
+
+/// A frame `f` (0,0 300x200) holding rectangle `d` (20,20 40x40); a locked rectangle `lk`
+/// (400,0 40x40) and an unlocked one `r` (400,100 40x40) on the page.
+fn scene(s: &mut Session) -> (NodeId, NodeId, NodeId, NodeId) {
+    let f = id_of(&ex(s, "frame.create", json!({"x": 0, "y": 0, "width": 300, "height": 200}))["id"]).unwrap();
+    let d = rect(s, 20.0, 20.0, Some(f));
+    let lk = rect(s, 400.0, 0.0, None);
+    let r = rect(s, 400.0, 100.0, None);
+    ex(s, "object.toggleLock", json!({"ids": [lk], "locked": true}));
+    (f, d, lk, r)
+}
+
+fn ev(kind: PointerKind, x: f64, y: f64, cmd: bool) -> PointerEvent {
+    let mut e = PointerEvent::at(kind, x, y, 1.0);
+    e.cmd = cmd;
+    e
+}
+
+fn click(s: &mut Session, x: f64, y: f64, cmd: bool) {
+    s.pointer(&ev(PointerKind::Down, x, y, cmd)).unwrap();
+    s.pointer(&ev(PointerKind::Up, x, y, cmd)).unwrap();
+}
+
+fn origin(s: &Session, id: NodeId) -> (f64, f64) {
+    let b = s.doc().unwrap().world_bounds(id).unwrap();
+    (b.x0, b.y0)
+}
+
+fn size(s: &Session, id: NodeId) -> (f64, f64) {
+    let b = s.doc().unwrap().world_bounds(id).unwrap();
+    (b.width(), b.height())
+}
+
+fn locked(s: &Session, id: NodeId) -> bool {
+    s.doc().unwrap().node(id).unwrap().locked
+}
+
+#[test]
+fn canvas_never_selects_a_locked_layer_or_a_locked_frames_child() {
+    let mut s = Session::new();
+    let (f, d, _lk, _r) = scene(&mut s);
+    click(&mut s, 420.0, 20.0, false);
+    assert!(s.selection().is_empty(), "a click on a locked layer selects nothing");
+    click(&mut s, 420.0, 20.0, true);
+    assert!(s.selection().is_empty(), "Cmd/Ctrl-click on a locked layer selects nothing");
+    s.pointer(&ev(PointerKind::Down, 390.0, -10.0, false)).unwrap();
+    s.pointer(&ev(PointerKind::Move, 450.0, 50.0, false)).unwrap();
+    s.pointer(&ev(PointerKind::Up, 450.0, 50.0, false)).unwrap();
+    assert!(s.selection().is_empty(), "a marquee over a locked layer selects nothing");
+    ex(&mut s, "object.toggleLock", json!({"ids": [f], "locked": true}));
+    click(&mut s, 30.0, 30.0, false);
+    assert!(!s.selection().contains(&d), "a click on a child of a locked frame doesn't select it");
+    click(&mut s, 30.0, 30.0, true);
+    assert!(s.selection().is_empty(), "Cmd/Ctrl-click on a child of a locked frame selects nothing");
+}
+
+#[test]
+fn a_panel_selected_locked_layer_has_no_handles_ignores_arrows_and_takes_property_edits() {
+    let mut s = Session::new();
+    let (_f, _d, lk, _r) = scene(&mut s);
+    ex(&mut s, "select.set", json!({"ids": [lk]}));
+    assert_eq!(handle_at(s.doc().unwrap(), &[lk], Point::new(400.0, 0.0), 1.0), None, "no handles on a locked layer");
+    let steps = s.undo_depth();
+    for _ in 0..3 {
+        ex(&mut s, "transform.nudge", json!({"dx": 1}));
+    }
+    assert_eq!(origin(&s, lk), (400.0, 0.0), "the arrow keys don't move a locked layer");
+    ex(&mut s, "transform.nudgeSize", json!({"dw": 1}));
+    assert_eq!(size(&s, lk), (40.0, 40.0), "the resize arrows don't resize a locked layer");
+    assert_eq!(s.undo_depth(), steps, "an arrow that changes nothing adds no undo step");
+    ex(&mut s, "node.set", json!({"id": lk, "props": {"x": 300}}));
+    assert_eq!(origin(&s, lk).0, 300.0, "the X field still moves a locked layer");
+    let before = format!("{:?}", s.doc().unwrap().node(lk).unwrap().fills);
+    ex(&mut s, "fill.set", json!({"ids": [lk], "color": "#ff0000"}));
+    assert_ne!(format!("{:?}", s.doc().unwrap().node(lk).unwrap().fills), before, "a fill still edits");
+    assert_eq!(s.selection(), vec![lk], "the selection stays the locked layer");
+}
+
+#[test]
+fn a_child_of_a_locked_frame_cannot_be_locked_or_unlocked_on_its_own() {
+    let mut s = Session::new();
+    let (f, d, _lk, _r) = scene(&mut s);
+    ex(&mut s, "object.toggleLock", json!({"ids": [f], "locked": true}));
+    ex(&mut s, "object.toggleLock", json!({"ids": [d]}));
+    assert!(!locked(&s, d), "toggling a child of a locked frame doesn't lock the child");
+    ex(&mut s, "select.set", json!({"ids": [d]}));
+    ex(&mut s, "object.toggleLock", json!({}));
+    assert!(!locked(&s, d), "Lock/Unlock on a panel-selected child of a locked frame does nothing");
+    ex(&mut s, "object.toggleLock", json!({"ids": [f], "locked": false}));
+    click(&mut s, 30.0, 30.0, false);
+    assert_eq!(s.selection(), vec![d], "after unlocking the frame a click selects the child");
+    assert!(!locked(&s, d));
+}
+
+#[test]
+fn lock_unlock_on_a_mixed_selection_leaves_a_locked_frames_child_alone() {
+    let mut s = Session::new();
+    let (f, d, _lk, r) = scene(&mut s);
+    ex(&mut s, "object.toggleLock", json!({"ids": [f], "locked": true}));
+    ex(&mut s, "select.set", json!({"ids": [d, r]}));
+    ex(&mut s, "object.toggleLock", json!({}));
+    assert!(locked(&s, r), "the unlocked layer in the selection is locked");
+    assert!(!locked(&s, d), "the locked frame's child keeps its own flag");
+    ex(&mut s, "object.toggleLock", json!({"ids": [f], "locked": false}));
+    click(&mut s, 30.0, 30.0, false);
+    assert_eq!(s.selection(), vec![d], "so unlocking the frame frees the child");
+}
+
+#[test]
+fn ctrl_shift_l_on_a_panel_selected_locked_layer_unlocks_it() {
+    let mut s = Session::new();
+    let (_f, _d, lk, _r) = scene(&mut s);
+    ex(&mut s, "select.set", json!({"ids": [lk]}));
+    ex(&mut s, "object.toggleLock", json!({}));
+    assert!(!locked(&s, lk), "Lock/Unlock unlocks a locked layer");
+    assert!(handle_at(s.doc().unwrap(), &[lk], Point::new(400.0, 0.0), 1.0).is_some(), "handles return");
+}
diff --git a/crates/ui-egui/src/layers_behaviour_tests.rs b/crates/ui-egui/src/layers_behaviour_tests.rs
index 3790252c1..c56adecdf 100644
--- a/crates/ui-egui/src/layers_behaviour_tests.rs
+++ b/crates/ui-egui/src/layers_behaviour_tests.rs
@@ -252,6 +252,54 @@ fn sweeping_across_eyes_and_padlocks_sets_several_layers() {
     assert!(!u.app.session.doc().unwrap().node(a).unwrap().visible, "a click on the eye hides that layer");
 }
 
+#[test]
+fn the_padlock_of_a_layer_in_a_locked_frame_is_inert() {
+    let mut s = Session::new();
+    let frame = id(s.execute("frame.create", &json!({"name": "Locked frame"})).unwrap());
+    let child = rect(&mut s, "child", 0.0, Some(frame));
+    s.execute("select.none", &json!({})).unwrap();
+    s.execute("object.toggleLock", &json!({"ids": [frame], "locked": true})).unwrap();
+    let mut u = Ui::new(s);
+    // Selecting the child reveals its row; then the selection goes away.
+    u.app.run("select.set", json!({"ids": [child]}));
+    u.frame(vec![]);
+    u.app.run("select.none", json!({}));
+    u.frame(vec![]);
+    let steps = u.app.session.undo_depth();
+    let r = u.row_at(child);
+    // The padlock column (see the sweep test above).
+    click(&mut u, Pos2::new(250.0, r.y), Modifiers::NONE);
+    assert!(!u.app.session.doc().unwrap().node(child).unwrap().locked, "the child's padlock doesn't lock it");
+    assert_eq!(u.app.session.undo_depth(), steps, "and adds no undo step");
+}
+
+#[test]
+fn a_padlock_sweep_skips_the_children_of_a_locked_frame() {
+    let mut s = Session::new();
+    let frame = id(s.execute("frame.create", &json!({"name": "Locked frame"})).unwrap());
+    let c1 = rect(&mut s, "child 1", 0.0, Some(frame));
+    let c2 = rect(&mut s, "child 2", 20.0, Some(frame));
+    let sibling = rect(&mut s, "sibling", 40.0, None);
+    s.execute("select.none", &json!({})).unwrap();
+    s.execute("object.toggleLock", &json!({"ids": [frame], "locked": true})).unwrap();
+    let mut u = Ui::new(s);
+    // Selecting a child reveals the frame's rows; then the selection goes away.
+    u.app.run("select.set", json!({"ids": [c1]}));
+    u.frame(vec![]);
+    u.app.run("select.none", json!({}));
+    u.frame(vec![]);
+    let padlock = 250.0;
+    let (rs, rc) = (u.row_at(sibling), u.row_at(c1));
+    let from = Pos2::new(padlock, rs.y);
+    u.frame(vec![Event::PointerMoved(from)]);
+    u.drag_to(from, Pos2::new(padlock, rc.y));
+    u.button(Pos2::new(padlock, rc.y), false);
+    let doc = u.app.session.doc().unwrap();
+    assert!(doc.node(sibling).unwrap().locked, "the sibling is locked by the sweep");
+    assert!(!doc.node(c1).unwrap().locked, "a child of a locked frame keeps its own flag");
+    assert!(!doc.node(c2).unwrap().locked, "so does the other child");
+}
+
 #[test]
 fn renaming_several_layers_opens_the_rename_dialog() {
     let (mut u, [a, b, c, _d]) = four();
diff --git a/crates/ui-egui/src/panels/layers.rs b/crates/ui-egui/src/panels/layers.rs
index 124e630bc..1a62a851c 100644
--- a/crates/ui-egui/src/panels/layers.rs
+++ b/crates/ui-egui/src/panels/layers.rs
@@ -972,6 +972,8 @@ fn eye_lock(
     // A sweep across the eyes or padlocks takes in the rows the pointer passes.
     if let Some(sw) = sweep.as_mut()
         && !sw.ids.contains(&row.id)
+        // A padlock sweep leaves the children of a locked layer alone (their padlock is inert).
+        && !(sw.lock && row.locked_above)
         && ui.input(|i| i.pointer.hover_pos()).is_some_and(|p| r.y_range().contains(p.y))
     {
         sw.ids.push(row.id);
@@ -1003,13 +1005,20 @@ fn eye_lock(
         icons::paint(ui.painter(), lr.shrink(3.0), if locked || row.locked_above { Icon::Lock } else { Icon::Unlock }, col);
     }
     if show_lock && !dev {
-        let lresp = ui.interact(lr, ui.scope_id().with(("lock", row.id)), Sense::click_and_drag());
+        // A child of a locked layer can't be locked or unlocked on its own while the parent is
+        // locked (Lock and unlock layers): its padlock is inert.
+        let sense = if row.locked_above { Sense::hover() } else { Sense::click_and_drag() };
+        let lresp = ui.interact(lr, ui.scope_id().with(("lock", row.id)), sense);
         a11y::toggle(&lresp, tr("Locked"), locked || row.locked_above);
-        if lresp.clicked() {
-            lock = Some(row.id);
-        }
-        if lresp.drag_started() {
-            *sweep = Some(Sweep { lock: true, on: !n.locked, ids: vec![row.id] });
+        if row.locked_above {
+            a11y::disabled(&lresp);
+        } else {
+            if lresp.clicked() {
+                lock = Some(row.id);
+            }
+            if lresp.drag_started() {
+                *sweep = Some(Sweep { lock: true, on: !n.locked, ids: vec![row.id] });
+            }
         }
     }
     (vis, lock)
diff --git a/docs/ui-parity.md b/docs/ui-parity.md
index 4c684c81b..224286838 100644
--- a/docs/ui-parity.md
+++ b/docs/ui-parity.md
@@ -1,6 +1,6 @@
 # UI and interaction parity
 
-> **Last reviewed:** 2026-10-10 · **Last updated:** 2026-11-10 · **Change:** minor (the main menu and its submenus stay inside the window, moving up to fit and scrolling when taller (#2217); the left rail's and tab strip's icons are larger, 20 pt (#553); pick select: Tab while the keyboard selection box shows (or the chord again) puts a pink outline on a layer and the keys walk the layer tree from it, as Accessibility at Figma says (#1836); scrubbing a field faster or slower by the pointer's height, with a notice of the speed, as the help center's Scrub fields says (#1837); component rows in the Layers panel at AA contrast in the theme's component tint, with the rows inside a selected component in a tone of its row (#1903); Cmd/Ctrl-click on a padding field sets all four sides with the value typed, a documented auto layout shortcut; a fill per region of a vector: with regions selected in edit mode, the Fill section and the fill commands edit those regions' own fills, as Edit vector layers says (#1875); the Fill section of a text whose characters were coloured differently while editing shows mixed content, characters that all share fills the layer doesn't have show those, and a layer-level fill edit reaches every character (#1856); a number field scrubs when dragged with Alt held, as the help center's scrub section says, not only by its label; reuse visible layer selection roots (M8); ; with a shape or frame tool chosen and nothing selected, the arrows show a placement crosshair in the middle of the view and move it, and Enter places there, as Accessibility at Figma says (#1839); text direction per paragraph: Text ▸ Text direction forces a paragraph left to right or right to left, as Add right-to-left text says (#1830), with `text.direction`, `node.set textDirection`, the Type settings control once a right-to-left script is in the text, inspect, the CSS `direction` and the `.fig` lines' `sourceDirectionality`; the boolean operation menu in the Design panel leads each entry with an original icon drawn in code, a filled preview of the result (#2003); a press on the open gradient's handles or stops on the canvas keeps the colour picker open through the drag, as its own control (#1852); a click with the Bend tool on a sharp point curves it, its handles along the line between its neighbours, as Edit vector layers says (#1875); wrap style: Auto, Balance and Pretty on a text layer decide where its lines break, as Explore text properties says (#1827), with the Type settings control, `text.wrapStyle`, `node.set wrapStyle`, inspect and the CSS `text-wrap`; Backspace or Delete at the start of a list item keeps the item's indentation level, as the lists article says; max lines on auto-width text keep it auto width, hugging that many lines, as the text properties article says; superscript and subscript are synthesised where the font has no glyphs for them, from the standard glyphs shrunk and shifted by the font's OS/2 metrics, and a run mixing available and unavailable glyphs is synthesised whole, as Explore text properties says (#1828); Alt+Enter while editing text opens the link at the caret, as the accessibility page documents; Minimize, by its shortcut or the button by the file name, collapses the navigation bar and both sidebars as the help center says, with the right sidebar back while something is selected (#1835); the interface size keys of the help center's accessibility page: Cmd/Ctrl+Shift+Alt with =, - and 0 step the interface through the Preferences sizes and back to the system's size; Cmd/Ctrl+Alt+arrows rotate the selection a degree at a time, 15 with Shift, as the help center's accessibility page says; they resized before; the Layers panel answers Ctrl+1 as well as Alt+1 on Windows and Linux, the two keys the help center gives it; the colour picker's Image tab shows a placeholder and Upload from computer, an asset preview, and a file dropped on it replaces the image, keeping the fill mode, crop and position (#1682); the keyboard's Menu key opens the context menu, as Shift+F10 does; the eyedropper with Cmd/Ctrl+Shift makes a colour style or variable of what it picks; sidebar number and text fields keep their text vertically centered when focused, including typography spacing; with the pen out, Enter or a double-click ends the path and edits the vector with the Move tool instead of drawing on (#1430); the Actions palette offers only commands that run from it, and no second row reading like a menu item: Place image opens the file dialog (#1574); Preferences ▸ Scroll wheel zoom: a mouse wheel zooms the canvas about the pointer and Cmd/Ctrl+wheel scrolls (#1390); boolean operations refuse input past their caps, and a boolean group past them draws without its result (#1104); the selection and hover outlines of rounded rectangles and frames follow their corners (#1506); colour picker review fixes for text undo, fitted sidebars, moving controls and gradient variables; Corner smoothing: an original icon and the shared number-field drag gesture, preserving fractional baselines; guides snap to layers when dragged; Crop image: Object ▸ Crop image, the right-click menu and the image fill row enter crop mode (`image.crop`, #1464); the Design panel's sections on one grid — 16 / 8 margins, 88 + 8 + 88 + 8 + 24 columns, 24 pt rows, 4 pt between a row's buttons (#858); the toolbar on one 32 pt grid, without its Resources button (#1210); colour picker LCH and OKLCH models; an XML (Android Vector Drawable) export format; Context menus: the Menu key reaches egui 0.37 but is unbound (row done → partial); the Text on a path tool; board tool keys pinned; community fixes: the text box by dragging, the font picker keys, the pen path on leaving Design, a still canvas in vector edit mode, a scrolling pages list, colour emoji, readable new text in frames, system theme on first run; the Small caps sample in Type settings drawn from capitals; recent files as cards; vector edit mode: hovering, hatching, selecting and dragging filled regions; home screen: Templates tab, first-run templates and Getting started tips; number fields: scrub rates, arrow steps, arithmetic with brackets, relative edits of mixed values; outline mode's hidden layers and object bounds; Hide when publishing; cursors per tool and modifier; panel widths; dark pages for files made in the dark theme; drag threshold and double-clicks into text in groups; rotation origin on Alt+R and placing with Enter: no documented shortcut missing; keyboard shortcut parity suite and bindings; cursor chat and spotlight in live sessions; layers and assets panels behaviour suite and fixes; vector multi-edit and the vector edit tail; canvas navigation, guides and grids behaviour suite and fixes; shapes and vector behaviour suite and fixes; paint and effects behaviour suite and fixes; frames, groups, sections and masks behaviour suite and fixes; layers panel keyboard: F2 rename, Shift+F10 context menu, F8 box selection; selection and transform behaviour suite and fixes; Display P3: gamut warning and soft-proof (true P3 blocked upstream); several windows; boolean hit testing on the result, group drags, frame outlines and slices; outlines for the selection, mask outlines; arc fields, live boolean editing, shape builder on strokes, one-sided widths; fields select their text on focus; Typography spacing icons support scrubbing (#373); CSS colour names in hex fields; a rename selects the whole name, so typing replaces it; Escape or Enter after a pen path stays on the same vector (#760); IME composition kept on through idle frames of a text edit, candidates at the caret (#747); Selection colors for mixed selections and smart-selection spacing (#753); submenus with a hover delay and a safe triangle; the Actions palette's tabs, ranked search, highlight and recents; menu items that ask for a value; editor fixes from the community batches) · **Target:** Figma Design UI3 (desktop app 126.10.7)
+> **Last reviewed:** 2026-10-10 · **Last updated:** 2026-11-10 · **Change:** minor (the main menu and its submenus stay inside the window, moving up to fit and scrolling when taller (#2217); locked layers ignore the arrow keys and a locked parent's children can't be locked on their own (#1560); the left rail's and tab strip's icons are larger, 20 pt (#553); pick select: Tab while the keyboard selection box shows (or the chord again) puts a pink outline on a layer and the keys walk the layer tree from it, as Accessibility at Figma says (#1836); scrubbing a field faster or slower by the pointer's height, with a notice of the speed, as the help center's Scrub fields says (#1837); component rows in the Layers panel at AA contrast in the theme's component tint, with the rows inside a selected component in a tone of its row (#1903); Cmd/Ctrl-click on a padding field sets all four sides with the value typed, a documented auto layout shortcut; a fill per region of a vector: with regions selected in edit mode, the Fill section and the fill commands edit those regions' own fills, as Edit vector layers says (#1875); the Fill section of a text whose characters were coloured differently while editing shows mixed content, characters that all share fills the layer doesn't have show those, and a layer-level fill edit reaches every character (#1856); a number field scrubs when dragged with Alt held, as the help center's scrub section says, not only by its label; reuse visible layer selection roots (M8); ; with a shape or frame tool chosen and nothing selected, the arrows show a placement crosshair in the middle of the view and move it, and Enter places there, as Accessibility at Figma says (#1839); text direction per paragraph: Text ▸ Text direction forces a paragraph left to right or right to left, as Add right-to-left text says (#1830), with `text.direction`, `node.set textDirection`, the Type settings control once a right-to-left script is in the text, inspect, the CSS `direction` and the `.fig` lines' `sourceDirectionality`; the boolean operation menu in the Design panel leads each entry with an original icon drawn in code, a filled preview of the result (#2003); a press on the open gradient's handles or stops on the canvas keeps the colour picker open through the drag, as its own control (#1852); a click with the Bend tool on a sharp point curves it, its handles along the line between its neighbours, as Edit vector layers says (#1875); wrap style: Auto, Balance and Pretty on a text layer decide where its lines break, as Explore text properties says (#1827), with the Type settings control, `text.wrapStyle`, `node.set wrapStyle`, inspect and the CSS `text-wrap`; Backspace or Delete at the start of a list item keeps the item's indentation level, as the lists article says; max lines on auto-width text keep it auto width, hugging that many lines, as the text properties article says; superscript and subscript are synthesised where the font has no glyphs for them, from the standard glyphs shrunk and shifted by the font's OS/2 metrics, and a run mixing available and unavailable glyphs is synthesised whole, as Explore text properties says (#1828); Alt+Enter while editing text opens the link at the caret, as the accessibility page documents; Minimize, by its shortcut or the button by the file name, collapses the navigation bar and both sidebars as the help center says, with the right sidebar back while something is selected (#1835); the interface size keys of the help center's accessibility page: Cmd/Ctrl+Shift+Alt with =, - and 0 step the interface through the Preferences sizes and back to the system's size; Cmd/Ctrl+Alt+arrows rotate the selection a degree at a time, 15 with Shift, as the help center's accessibility page says; they resized before; the Layers panel answers Ctrl+1 as well as Alt+1 on Windows and Linux, the two keys the help center gives it; the colour picker's Image tab shows a placeholder and Upload from computer, an asset preview, and a file dropped on it replaces the image, keeping the fill mode, crop and position (#1682); the keyboard's Menu key opens the context menu, as Shift+F10 does; the eyedropper with Cmd/Ctrl+Shift makes a colour style or variable of what it picks; sidebar number and text fields keep their text vertically centered when focused, including typography spacing; with the pen out, Enter or a double-click ends the path and edits the vector with the Move tool instead of drawing on (#1430); the Actions palette offers only commands that run from it, and no second row reading like a menu item: Place image opens the file dialog (#1574); Preferences ▸ Scroll wheel zoom: a mouse wheel zooms the canvas about the pointer and Cmd/Ctrl+wheel scrolls (#1390); boolean operations refuse input past their caps, and a boolean group past them draws without its result (#1104); the selection and hover outlines of rounded rectangles and frames follow their corners (#1506); colour picker review fixes for text undo, fitted sidebars, moving controls and gradient variables; Corner smoothing: an original icon and the shared number-field drag gesture, preserving fractional baselines; guides snap to layers when dragged; Crop image: Object ▸ Crop image, the right-click menu and the image fill row enter crop mode (`image.crop`, #1464); the Design panel's sections on one grid — 16 / 8 margins, 88 + 8 + 88 + 8 + 24 columns, 24 pt rows, 4 pt between a row's buttons (#858); the toolbar on one 32 pt grid, without its Resources button (#1210); colour picker LCH and OKLCH models; an XML (Android Vector Drawable) export format; Context menus: the Menu key reaches egui 0.37 but is unbound (row done → partial); the Text on a path tool; board tool keys pinned; community fixes: the text box by dragging, the font picker keys, the pen path on leaving Design, a still canvas in vector edit mode, a scrolling pages list, colour emoji, readable new text in frames, system theme on first run; the Small caps sample in Type settings drawn from capitals; recent files as cards; vector edit mode: hovering, hatching, selecting and dragging filled regions; home screen: Templates tab, first-run templates and Getting started tips; number fields: scrub rates, arrow steps, arithmetic with brackets, relative edits of mixed values; outline mode's hidden layers and object bounds; Hide when publishing; cursors per tool and modifier; panel widths; dark pages for files made in the dark theme; drag threshold and double-clicks into text in groups; rotation origin on Alt+R and placing with Enter: no documented shortcut missing; keyboard shortcut parity suite and bindings; cursor chat and spotlight in live sessions; layers and assets panels behaviour suite and fixes; vector multi-edit and the vector edit tail; canvas navigation, guides and grids behaviour suite and fixes; shapes and vector behaviour suite and fixes; paint and effects behaviour suite and fixes; frames, groups, sections and masks behaviour suite and fixes; layers panel keyboard: F2 rename, Shift+F10 context menu, F8 box selection; selection and transform behaviour suite and fixes; Display P3: gamut warning and soft-proof (true P3 blocked upstream); several windows; boolean hit testing on the result, group drags, frame outlines and slices; outlines for the selection, mask outlines; arc fields, live boolean editing, shape builder on strokes, one-sided widths; fields select their text on focus; Typography spacing icons support scrubbing (#373); CSS colour names in hex fields; a rename selects the whole name, so typing replaces it; Escape or Enter after a pen path stays on the same vector (#760); IME composition kept on through idle frames of a text edit, candidates at the caret (#747); Selection colors for mixed selections and smart-selection spacing (#753); submenus with a hover delay and a safe triangle; the Actions palette's tabs, ranked search, highlight and recents; menu items that ask for a value; editor fixes from the community batches) · **Target:** Figma Design UI3 (desktop app 126.10.7)
 
 Fine canvas control is what Figma users feel first: handles, snapping, nudging, modifier keys,
 drag behaviour, numeric precision. This checklist covers the tools, gestures and panels. Status:
@@ -45,7 +45,7 @@ interaction feel not yet compared.
 | Rows: click, Shift-click range, Cmd/Ctrl-click toggle; the selection follows on the canvas and a canvas selection is revealed | done | `layers_behaviour_tests`; selected hierarchies share a continuous background with rounded outer corners, including nested selections |
 | Expand and collapse: Alt-click opens or closes everything inside; Collapse layers (Alt+L) keeps the way to the selection open | done | Alt-click pinned (the documentation is silent) |
 | Drag to reorder and into frames, groups and auto layout: insertion line, spring-loaded open, several layers together, Escape cancels | done | several layers dropped together land together (they split apart before); instances and a layer's own children refuse drops |
-| Eye and padlock: click, or drag across rows to set several in one step; layers in a locked frame show a faint padlock | done | the toggles no longer vanish under the pointer (clicks on them could miss) |
+| Eye and padlock: click, or drag across rows to set several in one step; layers in a locked frame show a faint padlock | done | the toggles no longer vanish under the pointer (clicks on them could miss) (a child's padlock can't be toggled while its parent is locked) |
 | Rename: double click, F2 / Cmd+R, Tab to the next row; several layers open Rename layers (match, regular expressions, current name and number codes, start value, preview) | done | numbered in stacking order, pinned |
 | Find layers (filter by name) | done | not covered by the documentation |
 | Pages: add, rename, drag to reorder, duplicate ("Copy of"), delete, dividers (a blank page named with a hyphen) | done | the line between Pages and Layers drags to size the pages list, kept in the preferences; a long list scrolls in its own area and a page dropped outside the visible list stays put (#272) (`layers_behaviour_tests`) |
@@ -56,7 +56,7 @@ interaction feel not yet compared.
 
 | Item | Status | Notes |
 |---|---|---|
-| Click, Shift-click, marquee, Shift-marquee toggle | done | Shift-drag on a selected layer moves the selection, kept to one axis (#498); a marquee selects what it touches; from a top-level frame's background, the layers inside it; locked and hidden layers are skipped (`selection_behaviour_tests`) |
+| Click, Shift-click, marquee, Shift-marquee toggle | done | Shift-drag on a selected layer moves the selection, kept to one axis (#498); a marquee selects what it touches; from a top-level frame's background, the layers inside it; locked and hidden layers are skipped (`selection_behaviour_tests`) (a locked layer selected from the panel ignores the arrow keys and the nudge commands; its properties still edit; measured in Figma's web app, 2026-11-10) |
 | Deep select (Cmd/Ctrl-click, Cmd/Ctrl-marquee) | done | |
 | Select layer menu (every layer under the click) | done | |
 | Enter / Shift+Enter (children / parent), Tab / Shift+Tab (siblings) | done | Tab renames the next layer while renaming |
@@ -187,6 +187,7 @@ in the table. `crates/ui-egui/src/shortcut_keys_tests.rs` drives the keys a look
 
 | Date | Change | Summary |
 |---|---|---|
+| 2026-11-10 | patch | M5, #1560: locked layers follow Figma's rules (Lock and unlock layers; measured in Figma's web app): a locked layer selected in the Layers panel ignores the arrow keys and the nudge commands while its properties still edit, and a child of a locked layer keeps its padlock inert (the Layers panel padlock, Lock/Unlock and `object.toggleLock` without a value no longer lock the child on its own) |
 | 2026-11-10 | patch | #2217: the main menu's submenus (Object, say) ran past the window's bottom, behind the taskbar, with the lowest commands out of reach, because submenus were not constrained to the window (to keep them beside their row). Every menu panel now scrolls when taller than the window less 8 pt margins, and a submenu is held within the window's height (moved up, never above the top) while keeping its place beside its row, so menu-aim is unchanged. Tests: `menu_overflow_tests.rs`. Numbers unchanged. |
 | 2026-11-02 | patch | Shortcuts: a Cmd/Ctrl-click on a padding field (the horizontal or vertical pair, or a side with Individual padding open) makes the value typed go to all four sides, in one undo step (Guide to auto layout, Keyboard shortcut guide); a plain click still edits that axis or side alone. A documented gesture row: 134 documented, 133 bound. Test: `padding_individual_tests` |
 | 2026-11-01 | patch | Number fields: dragging the field itself with Alt held scrubs it ("You can also hover the input field itself and hold down the modifier key: Mac: ⌥ Option Windows: Alt", Adjust alignment, rotation, position, and dimensions), with the resize cursor and the label's rates (Alt is the enabler there, so it isn't the fine rate); a click with Alt doesn't open the editor. Found by a documentation audit of the ui-parity rows. Test: `field_tests::alt_held_over_a_field_scrubs_it`. Counts unchanged |

From 3b9bf8c9a27045bc0109af75a9085981e7b62c02 Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Wed, 11 Nov 2026 15:55:11 -0500
Subject: [PATCH 12/14] batch: bound how much referenced data one step's params
 copy (#2257)

* batch: bound how much referenced data one step's params copy

* batch: check a list's size before queuing its elements
---
 crates/engine/src/automation/batch.rs | 77 ++++++++++++++++++++++++---
 1 file changed, 70 insertions(+), 7 deletions(-)

diff --git a/crates/engine/src/automation/batch.rs b/crates/engine/src/automation/batch.rs
index e0f22d870..62810df36 100644
--- a/crates/engine/src/automation/batch.rs
+++ b/crates/engine/src/automation/batch.rs
@@ -14,6 +14,40 @@ use crate::{Result, bad};
 /// Deepest params nesting the resolver walks before giving up.
 const MAX_DEPTH: usize = 64;
 
+/// How much referenced data (values and string bytes) the params of one step may copy in.
+const MAX_EXPANDED: usize = 8 << 20;
+
+/// What copying `v` costs: its values and string bytes, counting stops past `limit`.
+fn weight(v: &Value, limit: usize) -> usize {
+    let mut total = 0usize;
+    let mut stack = vec![v];
+    while let Some(v) = stack.pop() {
+        total += 1;
+        match v {
+            Value::String(s) => total += s.len(),
+            // Checked before they are queued, so a huge list can't grow the worklist past the limit.
+            Value::Array(a) => {
+                if total + a.len() > limit {
+                    return total + a.len();
+                }
+                stack.extend(a);
+            }
+            Value::Object(o) => {
+                total += o.keys().map(String::len).sum::<usize>();
+                if total + o.len() > limit {
+                    return total + o.len();
+                }
+                stack.extend(o.values());
+            }
+            _ => {}
+        }
+        if total > limit {
+            return total;
+        }
+    }
+    total
+}
+
 /// One step of a batch: a command, its params and the name later steps can call it by.
 #[derive(Clone, Debug, PartialEq)]
 pub struct BatchStep {
@@ -99,30 +133,32 @@ impl BatchScope {
 
     /// `params` of the next step with every reference in it replaced.
     pub(crate) fn resolve(&self, params: &Value) -> Result<Value> {
-        self.resolve_in(params, 0)
+        let mut left = MAX_EXPANDED;
+        self.resolve_in(params, 0, &mut left)
     }
 
-    fn resolve_in(&self, v: &Value, depth: usize) -> Result<Value> {
+    /// `left`: how much referenced data one step's params may still copy in.
+    fn resolve_in(&self, v: &Value, depth: usize, left: &mut usize) -> Result<Value> {
         let step = self.next_step();
         if depth > MAX_DEPTH {
             return Err(bad("command.batch", format!("step {step}: params nest deeper than {MAX_DEPTH} levels")));
         }
         match v {
-            Value::Object(o) if o.contains_key("$step") || o.contains_key("$ref") => self.reference(o),
+            Value::Object(o) if o.contains_key("$step") || o.contains_key("$ref") => self.reference(o, left),
             Value::Object(o) => {
                 let mut out = Map::with_capacity(o.len());
                 for (k, x) in o {
-                    out.insert(k.clone(), self.resolve_in(x, depth + 1)?);
+                    out.insert(k.clone(), self.resolve_in(x, depth + 1, left)?);
                 }
                 Ok(Value::Object(out))
             }
-            Value::Array(a) => a.iter().map(|x| self.resolve_in(x, depth + 1)).collect::<Result<Vec<_>>>().map(Value::Array),
+            Value::Array(a) => a.iter().map(|x| self.resolve_in(x, depth + 1, left)).collect::<Result<Vec<_>>>().map(Value::Array),
             _ => Ok(v.clone()),
         }
     }
 
     /// The value a `{"$step": n}` or `{"$ref": "name"}` object (with an optional `field`) stands for.
-    fn reference(&self, o: &Map<String, Value>) -> Result<Value> {
+    fn reference(&self, o: &Map<String, Value>, left: &mut usize) -> Result<Value> {
         let step = self.next_step();
         let fail = |msg: String| bad("command.batch", format!("step {step}: {msg}"));
         let key = if o.contains_key("$step") { "$step" } else { "$ref" };
@@ -153,7 +189,10 @@ impl BatchScope {
             Some(_) => return Err(fail("`field` must be a string".into())),
         };
         let result = self.results.get(n).ok_or_else(|| fail(format!("{who} has no result")))?;
-        lookup(result, path).cloned().map_err(|why| fail(format!("{who}'s result has no `{path}`{why}")))
+        let value = lookup(result, path).map_err(|why| fail(format!("{who}'s result has no `{path}`{why}")))?;
+        // Counted before copying: a few references to one big result can't multiply it.
+        *left = left.checked_sub(weight(value, *left)).ok_or_else(|| fail("the references copy more than the batch may expand".into()))?;
+        Ok(value.clone())
     }
 
     /// Most step names a missing-reference error lists.
@@ -218,3 +257,27 @@ fn kind(v: &Value) -> &'static str {
         Value::Object(_) => "an object",
     }
 }
+
+#[cfg(test)]
+mod expansion_tests {
+    use super::*;
+    use serde_json::json;
+
+    #[test]
+    fn references_copy_a_bounded_amount_into_one_step() {
+        let steps = [BatchStep::new("a", json!({})), BatchStep::new("b", json!({}))];
+        let mut scope = BatchScope::new(&steps).unwrap();
+        // A result of about 1 MB.
+        scope.push(json!({"ids": vec!["x".repeat(1000); 1000]}));
+        let refs = |n: usize| json!({"all": vec![json!({"$step": 0, "field": "ids"}); n]});
+        assert!(scope.resolve(&refs(4)).is_ok());
+        let err = scope.resolve(&refs(200)).unwrap_err().to_string();
+        assert!(err.contains("more than the batch may expand"), "{err}");
+    }
+
+    #[test]
+    fn a_huge_list_is_refused_before_it_is_queued() {
+        assert!(weight(&json!(vec![0; 100_000]), 1000) > 1000);
+        assert!(weight(&json!(vec![0; 10]), 1000) <= 1000);
+    }
+}

From 8f36c3f16b6186b24e763fb9bce319d3e2a5ec51 Mon Sep 17 00:00:00 2001
From: FredApps <153173854+FredApps@users.noreply.github.com>
Date: Wed, 11 Nov 2026 23:04:08 +0100
Subject: [PATCH 13/14] CI: nightly release dry run (#2274)

release.yml also runs nightly on main with craft-common-actions' dry-run: every release build
except macOS, with nothing signed, pushed or drafted. Breakage that only the release build hits
(riscv64, Flatpak, FreeBSD, packaging) then shows up the next morning instead of on release
day, as it did on 11 Nov 2026.
---
 .github/workflows/release.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d686da692..026d5aac3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,6 +1,10 @@
 name: Release
 
 on:
+  # A nightly dry run on main: every release build except macOS, nothing signed or released
+  # (craft-common-actions release.yml `dry-run`). Finds release-only breakage before release day.
+  schedule:
+    - cron: "40 1 * * *"
   push:
     branches: [release]
   workflow_dispatch:
@@ -30,6 +34,7 @@ jobs:
     # Intentionally tracked at @main (not SHA-pinned) so org-wide CI improvements, security fixes, and build optimizations propagate without PR churn across all craftapp repos.
     uses: storytold/craft-common-actions/.github/workflows/release.yml@main
     with:
+      dry-run: ${{ github.event_name == 'schedule' }}
       app-name: figcraft
       app-title: FigCraft
       # Combined Latin presentation and core UI catalog. Required web builds enforce

From e8b53e3393218dd32641a92ba87796ed72d21967 Mon Sep 17 00:00:00 2001
From: FredApps <153173854+FredApps@users.noreply.github.com>
Date: Wed, 11 Nov 2026 23:27:43 +0100
Subject: [PATCH 14/14] Release: FigCraft v0.18.0 on main (#2275)

Co-authored-by: FredApps <FredApps@users.noreply.github.com>
---
 Cargo.lock | 44 ++++++++++++++++++++++----------------------
 Cargo.toml |  2 +-
 2 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 7c94d0f61..306660864 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1785,7 +1785,7 @@ checksum = "b97b65636e5b9ef369943878ac74335ba1c55c1cb6adbf1e2c293c624248d693"
 
 [[package]]
 name = "figcraft"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "arboard",
  "craft-menu",
@@ -1817,7 +1817,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-cli"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "clap",
  "clap_complete",
@@ -1835,7 +1835,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-collab"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "base64 0.22.1",
  "chrono",
@@ -1853,7 +1853,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-collab-net"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "base64 0.22.1",
  "figcraft-collab",
@@ -1876,7 +1876,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-color"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "kurbo",
  "serde",
@@ -1885,7 +1885,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-doc"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "figcraft-color",
  "figcraft-geom",
@@ -1898,7 +1898,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-engine"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "base64 0.22.1",
  "craft-docpath",
@@ -1932,7 +1932,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-format"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "figcraft-doc",
  "figcraft-layout",
@@ -1949,7 +1949,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-geom"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "kurbo",
  "serde",
@@ -1957,7 +1957,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-layout"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "figcraft-doc",
  "figcraft-geom",
@@ -1965,7 +1965,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-mcp"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "base64 0.22.1",
  "figcraft-collab-net",
@@ -1981,7 +1981,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-pathops"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "figcraft-doc",
  "figcraft-geom",
@@ -1990,7 +1990,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-pdf"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "figcraft-color",
  "figcraft-doc",
@@ -2007,7 +2007,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-plugin"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "figcraft-color",
  "serde",
@@ -2020,7 +2020,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-render"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "crc32fast",
  "figcraft-color",
@@ -2039,7 +2039,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-server"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "chrono",
  "crc32fast",
@@ -2064,7 +2064,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-svg"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "base64 0.22.1",
  "figcraft-color",
@@ -2080,7 +2080,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-text"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "core-text",
  "craft-font-catalog",
@@ -2098,7 +2098,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-ui-egui"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "base64 0.22.1",
  "chrono",
@@ -2126,7 +2126,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-vectordrawable"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "figcraft-color",
  "figcraft-doc",
@@ -2140,7 +2140,7 @@ dependencies = [
 
 [[package]]
 name = "figcraft-web"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "base64 0.22.1",
  "craft-web-api",
@@ -6763,7 +6763,7 @@ checksum = "9440ea3e5aeabb0ac63af70daf835274065238cdd0cec83418f417eae38bacee"
 
 [[package]]
 name = "xtask"
-version = "0.17.1"
+version = "0.18.0"
 dependencies = [
  "figcraft-engine",
  "serde_json",
diff --git a/Cargo.toml b/Cargo.toml
index d24d8f03d..4a5c019be 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -6,7 +6,7 @@ exclude = ["plugins"]
 # default-members = ["crates/*", "apps/figcraft", "apps/figcraft-cli", "xtask"]
 
 [workspace.package]
-version = "0.17.1"
+version = "0.18.0"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 rust-version = "1.95"