refactor: adopt native guidata browser APIs

Require guidata 3.15, retire the obsolete backend backport, and retain
only the FloatArray schema hints still missing upstream. Distinguish
inferred and live audits before removing future shims.

Assisted-by: GPT-5.6 Sol

Author: PierreRaybaut

.github/copilot-instructions.md

@@ -39,9 +39,10 @@ you add or restructure a top-level subsystem.
   DataLab desktop's `register_1_to_1` / `register_n_to_1` / etc. machinery.
 - **`src/runtime/dlw_main.py`, `dlw_plugins.py`, `dlw_h5browser.py`,
   `dlw_interactive_fit.py`, `notebook_display.py`, `macro_proxy.py`,
-  `_guidata_*_shim.py`** — focused Python modules pushed into Pyodide's FS
-  alongside `bootstrap.py` (plugin host, HDF5 browser, interactive fit,
-  notebook `display()`, macro/notebook proxy, guidata browser shims).
+  `_guidata_jsonschema_shim.py`** — focused Python modules pushed into
+  Pyodide's FS alongside `bootstrap.py` (plugin host, HDF5 browser,
+  interactive fit, notebook `display()`, macro/notebook proxy, and the
+  tracked guidata `FloatArrayItem` schema-hint backport).
 - **`src/runtime/runtime.ts`** is the only place that touches the Pyodide
   API. All Python calls go through `DataLabRuntime`; the rest of the UI
   consumes typed interfaces (`SignalMeta`, `SignalData`,
@@ -158,9 +159,12 @@ temporary shim**, not an ad-hoc patch:
   `run_with_env.py`) — those are permanent.
 - The network-free anti-drift test in `npm test`
   (`tests/ts/shims/shim-registry.test.ts`) **fails CI** if the registry,
-  the sources and the markers drift. The version audit
-  (`npm run audit:shims`, `*.spec.ts`) is **report-only** and runs only
-  via `vitest.audit.config.ts`. Full workflow in
+  the sources and the markers drift. `npm run audit:shims` is a fast,
+  **report-only** pre-audit inferred from PyPI and `pyodide-lock.json`;
+  `npm run audit:shims:runtime` is the authoritative live-Pyodide version
+  check. Before removing a candidate, also run focused contract or E2E tests
+  proving that the upstream implementation preserves the required behavior.
+  Full workflow in
   [`doc/shim-registry.md`](../doc/shim-registry.md).
 
 ## Testing

.vscode/tasks.json

@@ -322,7 +322,7 @@
     },
     {
       "label": "🔍 Audit shims (versions)",
-      "detail": "Report which temporary backport shims are now removable by comparing each shim's removableFrom with the version resolved at runtime (PyPI / pyodide-lock). Report-only; needs network.",
+      "detail": "Fast pre-audit: infer package versions from PyPI / pyodide-lock and report removable backports. Report-only; needs network.",
       "type": "shell",
       "command": "npm",
       "args": ["run", "audit:shims"],
@@ -331,6 +331,17 @@
       },
       "problemMatcher": []
     },
+    {
+      "label": "🔬 Audit shims (live Pyodide)",
+      "detail": "Authoritative audit: boot the browser runtime and classify shims against the package versions actually installed in Pyodide.",
+      "type": "shell",
+      "command": "npm",
+      "args": ["run", "audit:shims:runtime"],
+      "options": {
+        "cwd": "${workspaceFolder}"
+      },
+      "problemMatcher": []
+    },
     {
       "label": "🟢 Vitest watch",
       "type": "shell",

CHANGELOG.md

@@ -6,6 +6,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 
 ## [Unreleased]
 
+### Changed
+
+- **Guidata compatibility:** browser runtimes now require guidata 3.15 and use
+  its native async DataSet backend and JSON Schema exporter. The former
+  backend backport has been removed; a focused compatibility patch preserves
+  the `FloatArrayItem` sizing hints required by the browser array editor.
+
 ## [0.9.0] - 2026-08-11
 
 ### Added in 0.9.0

CONTRIBUTING.md

@@ -79,7 +79,7 @@ DataLab-Web is fully internationalised: English is the source language and Frenc
 
 ## Temporary shims
 
-DataLab-Web sometimes backports a feature or patches a bug that is fixed upstream (`guidata`, `sigima`, …) but not yet in a released wheel. These **temporary shims** are tracked centrally so they can be audited and removed once upstream catches up. Every backport shim is declared once in [src/runtime/shims/registry.ts](src/runtime/shims/registry.ts), carries `# TEMPORARY SHIM` / `@shim-registry: <id>` markers in its source, and is kept in sync by a network-free anti-drift test that runs in `npm test`. Run `npm run audit:shims` (or the **🔍 Audit shims (versions)** task) to see which shims are now removable. Full workflow — adding, registering and removing a shim — is in [doc/shim-registry.md](doc/shim-registry.md).
+DataLab-Web sometimes backports a feature or patches a bug that is fixed upstream (`guidata`, `sigima`, …) but not yet in a released wheel. These **temporary shims** are tracked centrally so they can be audited and removed once upstream catches up. Every backport shim is declared once in [src/runtime/shims/registry.ts](src/runtime/shims/registry.ts), carries `# TEMPORARY SHIM` / `@shim-registry: <id>` markers in its source, and is kept in sync by a network-free anti-drift test that runs in `npm test`. Use `npm run audit:shims` for the fast PyPI/lockfile pre-audit and `npm run audit:shims:runtime` to verify the versions actually installed in Pyodide. A `ready-to-remove` version result is only a candidate: focused contract or E2E tests must also prove native behavioral parity before the shim is deleted. The full workflow is in [doc/shim-registry.md](doc/shim-registry.md).
 
 ## Branching model
 

doc/architecture.md

@@ -389,13 +389,13 @@ param.edit_async(...)` for parameter dialogs.
   user scripts (macros and notebook cells). Each method ultimately
   becomes a `bridge_call` to the main thread.
 
-- **`_guidata_backends_shim.py`** / **`_guidata_jsonschema_shim.py`** —
-  patch guidata so that DataSet parameter classes (a) do not require a
-  Qt backend and (b) can be serialised as JSON schemas that
-  `DataSetDialog.tsx` consumes. These are **temporary backport shims**:
-  they are declared in `src/runtime/shims/registry.ts` and audited for
-  removal once upstream ships the feature — see
-  [`shim-registry.md`](shim-registry.md).
+- **guidata integration** — guidata 3.15 provides the native async backend
+  registry and JSON Schema exporter. `bootstrap.py` registers the browser
+  dialog bridge through that backend API. `_guidata_jsonschema_shim.py` is a
+  small **temporary backport shim** that only adds the `FloatArrayItem`
+  variable-size and min/max hints still missing upstream. It is declared in
+  `src/runtime/shims/registry.ts`; see
+  [`shim-registry.md`](shim-registry.md) for the audit and removal workflow.
 
 ### 3.5 SDK — `packages/sdk/`