test build: Windows NFC hot-plug fix (+ in-progress v1.10.30 work)

Test branch to produce an unsigned Windows installer for on-device
testing of the ACR122U/TigerPOD hot-plug fix on Windows.

Main fix under test:
- services/nfc-process.js — win32 watchdog re-establishes the PC/SC
  context when the reader monitor errors out (SCardSvr trigger-start),
  so readers plugged in after launch are detected without a restart.

Also bundles the rest of the in-progress v1.10.30 work (toolbox
surgical refresh + shared _wireToolbox, detail "Type de tag" badge +
row reorder, notifications auto-close on opening a side card, twin-link
preservation on single-chip scan) and the test-build-win workflow.

Author: BenGlut

.github/workflows/test-build-win.yml

@@ -0,0 +1,50 @@
+name: Test build (Windows)
+
+# On-demand Windows build for sharing a test .exe with a tester (e.g. the NFC
+# hot-plug fix), WITHOUT cutting a release. The installer is uploaded as a
+# workflow artifact — no git tag, no GitHub Release, no auto-update. The .exe is
+# UNSIGNED (Windows SmartScreen will warn → "More info" → "Run anyway").
+#
+# Two ways to run it:
+#   • push any branch named  test/**  (this file must be on that branch)
+#   • Actions tab → "Test build (Windows)" → Run workflow (once it's on main)
+#
+# Native module note: nfc-pcsc is a C++ addon, so the build MUST run on a real
+# Windows runner — it cannot be cross-compiled from macOS.
+
+on:
+  push:
+    branches:
+      - 'test/**'
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+
+jobs:
+  build-win:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 24
+
+      - run: npm ci
+
+      - name: Build Windows installer (unsigned, no publish)
+        run: npm run build:win:nopublish
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Baked in so Google sign-in works in the test build.
+          TIGERTAG_GOOGLE_DESKTOP_CLIENT_ID: ${{ secrets.TIGERTAG_GOOGLE_DESKTOP_CLIENT_ID }}
+          TIGERTAG_GOOGLE_DESKTOP_CLIENT_SECRET: ${{ secrets.TIGERTAG_GOOGLE_DESKTOP_CLIENT_SECRET }}
+
+      - name: Upload installer artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: TigerStudio-Windows-test
+          path: dist/*.exe
+          if-no-files-found: error
+          retention-days: 14

CLAUDE.md

@@ -320,6 +320,19 @@ Lazy ping: on `mouseenter`, fires one `fetch` to `/healthz/` and updates the too
 ### Weight slider auto-save
 The weight slider in the detail panel debounces writes to Firestore: after **500 ms of inactivity** the value is committed automatically. The fill bar pulses (`.wb-saving` class) during the debounce window. Clicking "Update" cancels the pending debounce and saves immediately. Closing the panel cancels any pending save.
 
+### Surgical DOM updates — patch the smallest unit, never rebuild the world
+**Default reflex when something changes: re-render only the sub-element that actually changed, not the whole panel / modal / view.** Blowing away a container's `innerHTML` to reflect a small change is the recurring bug source here — it **reloads `<img>`/`<video>` (media flashes / restarts), drops scroll + focus + text selection, cancels an in-progress hold-to-confirm or inline edit, and re-runs every wiring**. If only the toolbox buttons flip, only the toolbox should update.
+
+**Decision procedure (cheapest first):**
+1. **Guard with a signature** — compute a small string/tuple of *what the render depends on*; bail early when it's unchanged so nothing re-renders on a no-op event. (`_rowSignature`, `_detailStructuralSig`, `_panelCardSig`.)
+2. **Patch in place** when a scalar/class changed — set `textContent`/`style`/`classList` on the exact node, no HTML rebuild. (`_patchDetailWeight`, `_patchCamWall`.)
+3. **Swap one section** when a whole sub-block changed — regenerate the panel HTML *off-DOM* (`const tmp = document.createElement('div'); tmp.innerHTML = buildPanelHTML(r)`), lift out just that section (`tmp.querySelector('.panel-section--toolbox')`), `replaceWith` it into the live DOM, then re-wire **only** that section.
+4. **Full rebuild** (`innerHTML = buildX()`) is the LAST resort — only when the structural signature genuinely changed; even then preserve live media (`_rebuildDetailKeepVideo`).
+
+**To make a section independently swappable, split its render from its wiring** into paired functions and call the wirer from both the initial render and the surgical refresh (canonical example: `buildPanelHTML` renders the `.panel-section--toolbox`, `_wireToolbox(r)` wires it; `openDetail` calls both, `_maybeRefreshPanelForCard` swaps just the toolbox node + calls `_wireToolbox`). Keep delegated handlers on the stable parent (`#panelBody`) so children swapped underneath keep working without re-wiring (the ⓘ tips via `_wireToolInfoTips`).
+
+**Smell test before a rebuild:** does this change touch media, scroll, focus, an in-progress gesture, or 90% unchanged markup? If yes, find the smallest node that changed and patch/swap that instead.
+
 ### State
 ```js
 state = {

WORKLOG.md

@@ -1,6 +1,6 @@
 {
   "name": "tigertag-inventory",
-  "version": "1.10.29",
+  "version": "1.10.30",
   "description": "Tiger Studio Manager — desktop app",
   "main": "main.js",
   "engines": {

package-lock.json

@@ -231,7 +231,7 @@ Manual spool creation: full chip-schema editor with bottom-sheets. All helpers p
 
 ---
 
-## Spool detail panel (L7480-9804)
+## Spool detail panel (L7480-9990)
 
 | L | What | Anchors |
 |---|---|---|
@@ -247,7 +247,7 @@ Manual spool creation: full chip-schema editor with bottom-sheets. All helpers p
 
 ---
 
-## Panels / debug / auto-update (L9372-10601)
+## Panels / debug / auto-update (L9372-10800)
 
 | L | What | Anchors |
 |---|---|---|
@@ -341,7 +341,7 @@ Per-brand scan/manual flows live in `printers/<brand>/add-flow.js`; `inventory.j
 
 ---
 
-## Friend view (L16951-17844)
+## Friend view (L16951-18030)
 
 | L | What | Anchors |
 |---|---|---|
@@ -352,7 +352,7 @@ Per-brand scan/manual flows live in `printers/<brand>/add-flow.js`; `inventory.j
 
 ---
 
-## Display name + friend requests (L17523-18560)
+## Display name + friend requests (L17523-18760)
 
 | L | What | Anchors |
 |---|---|---|

package.json

@@ -1258,6 +1258,9 @@
   .panel-row { display: flex; justify-content: space-between; align-items: center; font-size: 13px; margin-bottom: 5px; }
   .panel-row .pk { color: var(--muted); }
   .panel-row .pv { font-weight: 500; text-align: right; max-width: 60%; }
+  /* Badge-valued row (e.g. "Type de tag" → tier badge + backup shield) — align
+     the pill to the right, vertically centred with the key. */
+  .panel-row .pv-badge { display: inline-flex; align-items: center; gap: 4px; }
   .panel-row .pv a { color: var(--primary); text-decoration: none; }
   .panel-row .pv a:hover { text-decoration: underline; }
   /* Value cell that is itself a link (e.g. Product ID → tigertag.io). */
@@ -2087,6 +2090,18 @@
   }
   .toolbox-row--inert:active { transform: none; }
 
+  /* Greyed-out look for a device-gated tool that isn't usable yet — desaturated
+     + dimmed so it reads as unavailable, but STILL clickable. The click either
+     opens the TigerPOD promo (reader-gated chip tools, +.toolbox-row--pod-lock)
+     or the device's own connect modal (TD1S measure tools — unchanged). The
+     grayscale neutralises the row's variant colour (danger red / primary orange
+     → grey). Also used on the main button of a split row. */
+  .toolbox-row--greyed {
+    filter: grayscale(1);
+    opacity: .5;
+  }
+  .toolbox-row--greyed:hover { opacity: .7; }
+
   /* Split rows: a flex wrapper containing a main <button> + a trailing
      <button>. The wrapper itself is not interactive — each child handles
      its own hover / hold state independently. */