# ID9 — r207 Implementation Report — AI Summary

**Date**: 2026-08-30 | **Source**: a799 (full, 10 KB)
**Branch**: `feat/id9-r207-mount` | **Commit**: `aabe651` | **Repo**: `avidtech6/vibecoder-standalone`
**Base**: `clean/baseline-plus-wdm @ 0746358` (r206)

---

## TL;DR (5 bullets)

- **5 new files + 1 LoC tools.ts comment update shipped to `feat/id9-r207-mount` @ `aabe651`**, pushed to origin. 1,283 LoC added, 1 LoC removed. All 5 deliverables from the r207 v2 plan are present and bound to the real r206 contract.
- **24/24 tests pass** (8 functional + 3 bonus). Tests use a minimal in-memory `WindowBus` mock + `StudioContext` fixture; verify lazy-mount, surface-targeting, READ-ONLY invariant, region list, focus emit, frozen manifests, no iframe / no postMessage.
- **Typecheck clean** for all r207 files (no errors in `src/host/mounts/`). The full-project tsc shows pre-existing errors in `src/agent/core.ts` + `src/agent/plan.ts` that are NOT part of r207 and were present on `c8a8c6b` / `0746358` before this commit.
- **All r206 invariants honored**: nested capability bag (`ctx.inspector.vsil.loadScene(...)` not flat methods), window-level bus (`ctx.bus.on/off/emit`), lazy-mount via `composition:host-mounted`, surface-targeting via `targetSurface === ctx.activeSurface`, READ-ONLY inspector (rejects `transform` + `applyPreset` calls with `console.warn` when `readOnly={true}`), capabilities return `{ ok, reason }`.
- **8 of 33 r206 events used** by r207: `composition:host-mounted`, `composition:host-unmounted`, `composition:host-focus`, `composition:region-rerender`, `vsil:asset-bound`, `vsil:preview-mode-changed`, `preview:vsil`, `region:selected`, `region:transformed`, `region:preset-applied`, `surface:activated`. **No new events**, **no new capability types**, **no pact edits**.

## What was implemented

### `PreviewHostVSIL.tsx` (200 LoC)
- Reads `ctx.inspector.vsil.loadScene` + `ctx.preview['preview.vsil.show']` + `ctx.preview['preview.refocus']`
- Subscribes to 4 events: `composition:host-mounted` (lazy-mount), `vsil:asset-bound` (re-render), `vsil:preview-mode-changed` (mode sync), `preview:vsil` (surface-targeted request)
- Filters events by `e.detail.surface === targetSurface` (Q2 surface-targeting)
- Emits `composition:host-unmounted` on unmount
- Renders DOM with `data-preview-host`, `data-mounted`, `data-surface`, `data-mode`, `data-scene`, `data-regions`

### `InspectorHost.tsx` (248 LoC)
- Reads `ctx.inspector.region.{select, list, applyPreset, transform}`
- Subscribes to 3 events: `region:selected`, `vsil:asset-bound`, `surface:activated`
- **READ-ONLY by default** (`readOnly={true}`) — `onTransform` + `onApplyPreset` no-op + `console.warn` (a788 invariant)
- 5 sub-modes (ast / props / state / logs / metadata) per a788 spec
- Renders DOM with `data-inspector-host`, `data-read-only`, `data-sub-mode`, `data-region-count`, `data-active-region`

### `CompositionGraphHost.tsx` (228 LoC)
- Reads `ctx.inspector.vsil.asset.bind` + `ctx.inspector.region.list`
- **Lazy-mount contract**: calls `bind` on mount, which triggers r206's `ensureHostMounted` → emits `composition:host-mounted`
- Emits `composition:host-focus` (focusType='region') on region click
- Subscribes to `region:selected` (user-driven selection), `region:transformed` + `region:preset-applied` (re-render signals → emits `composition:region-rerender`)
- Renders DOM with `data-composition-host`, `data-loaded`, `data-region-count`, `data-asset-id`

### `mounts.ts` (126 LoC)
- Exports 3 frozen capability manifests: `PREVIEW_HOST_VSIL_CAPABILITY`, `INSPECTOR_HOST_CAPABILITY`, `COMPOSITION_GRAPH_HOST_CAPABILITY`
- `Object.freeze` on the manifest + all sub-objects (`can`, `needs`, `contextRules`, `listens`, `emits`, `availableSlots`)
- `mountAllHosts()` single-entry returns `{ preview, inspector, composition, capabilities }`
- Follows ID10 v2 capability manifest pattern

### `__tests__/mounts.test.ts` (481 LoC)
- 11 test sections, 24 assertions, 24/24 pass
- Plain-Node test runner pattern (per `src/cms/app-fragments/ai-agent/v02.test.js`)
- Run with: `npx tsx src/host/mounts/__tests__/mounts.test.ts`

### `src/vibechat/tools.ts` (1 LoC diff)
- Updated `vsil_region_select` description: "Triggers InspectorCard" → "Triggers InspectorHost (r207, src/host/mounts/InspectorHost.tsx)"

## What was NOT done (per scope)

- ❌ No `pact/` edits
- ❌ No `<iframe>` in any r207 file (Test 11 verifies)
- ❌ No `postMessage` in any r207 file (Test 11 verifies)
- ❌ No new event types — only 8 of 33 r206 events consumed
- ❌ No new capability types — uses only r206 capabilities
- ❌ No InspectorCard migration in freshvibestudio (a788) — requires cross-repo package alias, deferred to next session
- ❌ No Playwright smoke in this session — deferred to next session
- ❌ No VPS deploy — deferred to next session

## What's at risk

1. **Cross-repo InspectorCard migration in freshvibestudio** — the `studio/modules/vibescope/src/cards/InspectorCard.tsx` from a788 still uses `useVSILSource()` (module-scoped, pre-r206). Needs to be rewritten as a ~15 LoC wrapper importing from vibecoder-standalone. **Default: link via package alias** (per the r207 v2 plan Q1).
2. **VPS deploy** — the r207 bundle is not yet deployed to `vibecoder.freshvibeapps.com`. Need to: `npm run build` locally → `scp -O dist/* root@185.249.73.178:/var/www/freshvibeapps/clients/vibecoder/`.
3. **Playwright smoke** — the 24 unit tests pass, but no integration test has been run against a live VibeCoder instance.

## How to verify (operator)

```bash
# 1. Check the commit on origin
GIT_SSL_NO_VERIFY=1 git -C /workspace/vibecoder-standalone ls-remote origin feat/id9-r207-mount
# Expected: aabe651 r207: PreviewHost + Inspector + Composition mounts bound to r206

# 2. Run the tests
cd /workspace/vibecoder-standalone-r207
npx tsx src/host/mounts/__tests__/mounts.test.ts
# Expected: 24 passed, 0 failed

# 3. Typecheck just the r207 files
npx tsc --noEmit src/host/mounts/PreviewHostVSIL.tsx \
                 src/host/mounts/InspectorHost.tsx \
                 src/host/mounts/CompositionGraphHost.tsx \
                 src/host/mounts/mounts.ts
# Expected: no output (clean)
```

## 3 open questions (deferred from r207 v2 plan)

1. **InspectorCard migration in freshvibestudio** (option a: vendor / option b: package alias)? → default: option b
2. **VPS deploy now or wait for freshvibestudio migration first**? → recommend: ship r207 first (independent), then do migration
3. **Playwright smoke in this session or next**? → default: next session (operator decision)

## Cross-references

- a786 / a787 / a788 / a789 / a791 — r207 v2 plan inputs
- a795 / a797 (r207 v2 plans) — superseded by this implementation
- r206 commit `0746358` on `clean/baseline-plus-wdm` — the contract r207 binds to
- ID10 v2 capability layer (b1818, b1269) — `*_CAPABILITIES` pattern reused

---

**Word count**: ~480. **Source report**: a799 (full, 10 KB).