morgana: row 306 build (#1813): #accessRevoked from #revokeLost, #agent answers thread-revoked until endLaunch, runner stops on thread-revoked, READMEs, access-revoke.test 7 7 (mos-1463)

BUILD-LOG.md

@@ -5403,15 +5403,3 @@ Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault r
 2026-10-23 | Huey | Row 272 round 2 on row 219 landing 5fdfd7275, after 295. Replayed round 1 and B1/N1/N2; seven conflicts resolved retaining both log histories, both test sets, 219 instance chooser and 295 owner-settings-only transport. Static comparison confirms old tests differ only by mos-1388 approved hunks. Sage3357/Mos1442 authorize bounded granted-user legacy fallback: only session.list access-refused and omitted-session route; no new session grants or owner routing. RED first under3358 on new file only: 1 expected legacy assertion failure, 3 guards pass, 3.504s, TMPDIR mktemp/no underscore, no compose network; slot returned as huey0035. Then implemented fallback and added timeout/bus/malformed guards plus isolated-copy mutant runner, all unrun afterward. Candidate commit/push precedes Sage's full gate by3354; no green claim.
 
 2026-10-23 | Huey | Row 272 round 3 per mos-1455 / sage-3435. Gate run 1 on b44332a93 RED: bus 891/0, business 231/0, CLI 940/1, plugins 110/1, webui 372/20; no mutants. Fixed only new CLI fixture role authority and three null-old render guards. Catching browser tests unchanged. manifest.r3 freezes the same 17 paths. Authorized pre-gate follow-up commit/push; no local tests, Node or queue writes; separate compactions dependency and Sage gate remain pending.
-
-2026-10-23 | Sage (1ef1e4f8) | Row 272 landing (#1777, 264e) | Gate r4 on bea0c8e1c over 1e629c892: bus 891/0, cli 941/0, webui 392/0, business 231/0; plugins 110/1, the single red being row 65 harness.test.mjs:192 naming compactions.mjs, which row 307 owned and fixed. M1-M6 and F1-F4 killed, restore clean. Landed d33989230, queue commit 8dc132bec.
-
-2026-10-23 | Sage (1ef1e4f8) | Row 307 landing (#1814, Vikunja 598) | Six first-parent commits replayed onto 8dc132bec with matching patch-ids, 16 paths equal to 6fdfe3790, manifest digest 17c9f8d9 rebuilt from git. Gate green 14:37:21Z: bus 891/0, cli 941/0, plugins 119/0, webui 392/0, business 231/0, every other package 0 failed 0 skipped, every scripts/test-*.sh passed (skips: test-queue canonical root, test-task live provider x2). M1-M4 killed, restore clean. Landed d243f6b25, DEFERRED 307 N1 0621c439e, queue commit fe4ee8c7b. Correction: my first note said Vikunja 598 done when I had only commented (951); Mos closed it (952).
-
-2026-10-23T17:29:46Z | Gyro Vikunja571 sage-3542 Connections amendment | Branch gyro/editor-connections-design cut exactly from landed PRD1.17 30e6bb680; read REQ-LIB-5 in that PRD. Replaced stale J-b waits in parent and W4. Proposed W8 owns current authorized Markdown/DOCX links/backlinks list, labels, versioned refresh, leakage refusals and fixture tests. Build order under mos-1470/comment961 is W7 closed routing candidate, W8 landing, then W7 human first-real-import opening. No REQ-LIB-8 condition or acceptance change. Q234/mos-1363/S0 M1-M14 and post-10-27/MVP priority fixed. Static diff, twelve brief sections and append-only checks pass. No repo Node, tests, build, browser, queue mutation or live action. Fenton reviews after authorized docs branch push; Sage lands on approval.
-
-2026-10-23T17:32:37Z | Gyro sage-3544 fenton-0016 N1/N2 delta | Before: W7 Gate/final real-conversion list omit the W8 build-order cross-reference and W8 human-view filtering cites agent settings. After: both locations explicitly put W8 landing before human opening as mos-1470 build order, not acceptance; comment/tracked-deletion links are not current story links and never appear in the human Connections view regardless of agent settings. New commit atop approved 5af060fb5, no amend. Static diff and append-only checks pass. Docs only, no repo Node/tests/live action. Fenton checks only this delta.
-
-2026-10-23 | Boyd | Row 298 (#1804, Q228), before implementation completion | Took over Megavolt 7a141269c on boyd/row298 at 45dca69f6 under mos-1496/1502. Approved D1-D6 govern human-only grants.scope.set, empty fallback, in-scope close/evidence and spend recheck. All inherited code UNTESTED; no Node/tests until Sage CLEAR. Plan and static gaps recorded in agents/boyd/work/queue-298/BUILD.md; no live grant or credential access.
-
-2026-10-23 | Boyd | Row 298 (#1804, Q228), targeted verification | On sage-3642 T1 lane B, five whole files serial: business scope 7/0, bus scope 14/0, scope runtime 1/0, CLI scope 4/0, project runtime 3/0 (29/0, no skips). Initial bus fixture typo recorded and corrected. M1-M10 killed by named assertions, source restored and final files green. Dewey dewey-0933 positive control and notes addressed; manifest and evidence in agents/boyd/work/queue-298/BUILD.md. Full package/script gate remains Sage's. No live scope set.

agents/README.md

@@ -47,14 +47,6 @@ its launch configuration remains fixed, including on resume. Use Filbert's
 wrapper to select that configuration; a direct shared-helper invocation uses
 its own supplied flags or the system defaults.
 
-Any run that includes the webui suite, whether a seat's slot run or a landing
-gate, sets `MOSAIC_REQUIRE_EDITOR_BUILD=1`, so a missing editor toolchain fails
-the run instead of skipping the rebuild test. A worktree that links the
-canonical `node_modules` also runs `npm ci --ignore-scripts --no-audit --no-fund`
-in its own `packages/webui` first. The root install carries esbuild 0.28.1
-through pi-coding-agent, and the rebuild needs the 0.28.2 that
-`packages/webui/package-lock.json` pins (Vikunja 597, mos-1453).
-
 All agents follow repository governance and current user direction. Team
 leadership does not add deployment or push authority. Coordinate overlapping
 work with Sage and preserve other sessions' changes.

agents/boyd/work/queue-298/BUILD.md

@@ -1,233 +0,0 @@
-# Row 298 (#1804, Q228): chief-of-staff grant scope
-
-Owner Boyd (48a3ae38), reviewer Dewey. Branch `boyd/row298`, base `45dca69f6`.
-Assignment: mos-1496/Q245. Handoff: Megavolt megavolt-0203, local `7a141269c`;
-cherry-picked as `4de3cec27` (design) and `7cea739de` (UNTESTED code).
-Brief: `docs/plans/2026-10-23_mvp-readiness-rows.md`, chief-of-staff grant scope.
-Megavolt's original design remains in `agents/megavolt/work/queue-298/BUILD.md`.
-
-## Authority and accepted design
-
-Sage sage-3594, restated in sage-3612: launch.grantScope, lenient read with empty
-fallback, strict human-only write. No general organization setter may write it.
-Per-method agents/projects or agents/hosts/commands; host-enroll never in scope.
-Host command arrays match whole tokens and exact lengths. `grants.scope.set`
-from the human CLI is Approve; no Console page or chief-raised scope change.
-Mos mos-1496/1502 requires the same human-shell guard as `mosaic access`.
-The broker closes an in-scope request via scope and writes grant.scope.used;
-missing evidence must refuse execution. Narrowing before spend fails
-scope-changed. Empty scope ships; only Jason sets the live value (Q188).
-
-No credential files read, no live grants, no deployment, no queue writes. Push
-only boyd/*, additive commits, no amend/force-push or attribution trailers.
-Sage owns queue, shared test slot and landing. No Node/tests before CLEAR.
-
-## Implementation plan and ledger
-
-Using writing-plans and executing-plans inline; the approved brief and D1-D6
-are the spec. This packet is the requested plan/tracking location.
-
-- [x] Read brief, roster, implementation and handoff; register session.
-- [x] Bring Megavolt's two commits onto Boyd's branch without changing history.
-- [x] Add independent CLI tests in `packages/cli/tests/grants-scope.test.mjs`:
-  scope read/set requests; agent-marker rejection before stdin/transport;
-  --tester rejection; missing revision, malformed/empty/oversize input.
-- [x] Strengthen new business/bus grant-scope tests for exact commands,
-  scope evidence binding, host-enroll exclusion and spent scope-changed.
-- [ ] On Sage CLEAR, observe targeted failures before fixes; fix inherited
-  implementation using the existing human proof and grant executors.
-- [ ] Update bus/CLI docs, append BUILD-LOG before/after evidence, manifest.
-- [ ] On Sage CLEAR run touched suites; record exact results and mutants.
-- [ ] Commit UNTESTED until verified; push boyd/row298 only when slot permits;
-  report to Sage and Dewey, cc Mos for pushes/blockers. Dewey reviews manifest.
-
-Pre-flight interfaces: business checkGrantScope/grantScopeOf/grantInScope feed
-the instance writer and broker. Runtime supplies a fresh scope from the org
-file and routes the human setter to the same organization writer. CLI callFor
-supplies refuseInsideAgent and humanTransport. The grant executors consume the
-broker's immutable close/evidence. Tests use scratch files/fake Gitea only.
-
-Review focus: exact argv length, stale scope before spend, forged/missing scope
-evidence, malformed fallback, and CLI agent ancestry. Tests must cover each.
-
-Static findings before any Boyd Node/test run:
-
-- Handoff introduced commandPrefixes beyond the accepted D2 shape, allowing
-  trailing args. Remove it; only exact command arrays are authorized.
-- scope.used carries a digest without validating it, and no org revision.
-  Bind evidence to the canonical scope snapshot and grant/close sequence;
-  preserve historical grants when scope is later changed, recheck at spend.
-- Gitea recheck throws inside the spend transaction and rolls back spend on
-  scope-changed. Preserve spend and log failure for that case (D6).
-- The optional giteaStart?. assertion always passes when the API is absent;
-  use the real runGiteaGrant entry point. Fake Gitea tokens() does exist.
-
-## Existing test changes (mos-1272)
-
-Approved by Mos mos-1510 via Sage sage-3624; edited exactly as approved:
-
-| File | Actual numstat | Reason |
-| --- | --- | --- |
-| packages/bus/tests/project-runtime.test.mjs | +1 / -1 | Vocabulary import pin adds grantScopeOf and grantInScope. |
-
-Other test work is confined to row 298's new files. No pre-existing CLI tests
-will change. Record final numstat here before review.
-
-## Human proof and organization ownership
-
-CLI: `packages/cli/src/cli.mjs` callFor runs refuseInsideAgent before constructing
-humanTransport, as `accessCommand` does. The setter takes no --tester flag.
-`packages/bus/src/human.mjs` verifyHuman checks the nonce, CLI path and every
-ancestor's markers/argv; `bindHuman` and #human in broker.mjs require the
-business human, via cli, outsideAgent true. Tests will pin this chain's caller
-refusal. The scope receipt records by/via/outsideAgent and old/new sha256.
-
-Org file: `packages/business/src/organization.mjs` regular() requires a regular,
-non-symlink file owned by the process uid and not writable by group/other;
-write() uses revision checks, locked durable receipts and atomic rename.
-The OS owner uid can edit it directly; the agent sandbox does not mount the
-user's config (`packages/seat/src/sandbox.mjs`). This is the existing cooperative
-human/process boundary, not a hostile same-uid isolation claim.
-
-Chief enrollment: broker instances.set calls #human and #mayHuman before
-add/change; credential issue/delete use #requestCredential's human gate.
-launch.by is an organization-file setting, excluded from general setters;
-only that chief may auto-approve within scope. Additional chief instances
-remain on the per-grant human approval path.
-
-## Validation
-
-UNTESTED. No Boyd Node/test run yet; waiting for Sage CLEAR.
-M1: bypass in-scope check. M2: bypass invalid-value fallback. M3: remove human
-setter guard. M4: drop grant.scope.used. All need named failing tests on gate.
-
-## Session correction
-
-The initial SESSIONS entry labels startup 19:13Z; startup was approximately
-19:08Z. Message header timestamps in boyd-0001 through 0004 were estimates;
-use T3's receipt timestamps as authoritative. Subsequent reports use date -u.
-
-## Departures from Megavolt 7a141269c (Sage sage-3624)
-
-1. Removed commandPrefixes; host scope commands match exact token arrays only.
-2. grantScope callback now supplies one organization read `{value,revision}`.
-   grant.scope.used includes that revision, canonical scope snapshot and digest;
-   #approvedGrant validates the digest, shape, method, agent and close sequence.
-   It uses the immutable snapshot so later narrowing doesn't revoke issued grants.
-3. Gitea scope-changed is caught inside the spend transaction and logs a terminal
-   failure without rolling back its spend. Other recheck failures keep their
-   existing behavior. Host already catches recheck failures after spending.
-
-Additional handoff corrections: replaced optional nonexistent giteaStart with
-runGiteaGrant; added successful host executor/revoke and enrollment-exclusion
-coverage; added real runtime writer coverage and independent CLI guard tests.
-
-Sage scheduled push at 19:41Z with MOSAIC_GITEA_CREDENTIAL_FILE unset, then T1
-lane B around 19:47Z (after explicit CLEAR), four new files whole and serial,
-hard stop 20:00Z. Fethry lane A is disjoint. No test was run early. Production
-corrections are marked UNTESTED under that slot mandate; baseline regression
-checks against the inherited implementation will run only on CLEAR.
-
-## Candidate preparation (before T1)
-
-The three static corrections, CLI/runtime coverage and docs are prepared but
-UNTESTED. `git diff --check` is clean. The approved import-pin edit is exactly
-1 addition / 1 deletion. M1-M4 are encoded in mutants.py (not run). No Node,
-https git, full suite or webui build has run in Boyd's worktree.
-
-Review package: product/test/documentation files in MANIFEST.sha256, excluding
-append-only project logs and the preserved predecessor packet. The manifest
-identifies exact bytes for Dewey; each later product change regenerates it and
-requires a review delta. Existing tests changed: only project-runtime, 1/1.
-
-## Dewey static review dewey-0933
-
-N1: Added a positive control to the malformed-evidence fixture. A valid event
-must pass scope authorization and reach decision-mismatch on the deliberately
-absent definition binding; invalid events remain not-authorized. No spend.
-N2: Additional named mutants cover spend recheck, exact argv length, Gitea spend
-rollback, launch.by eligibility and accepting any evidence row (results below).
-N3: At spend only grant scope membership is rechecked, not whether the raising
-chief is still launch.by. This implements sage-3594 Q5; changing the launcher
-later does not by itself invalidate a pending scope-approved request.
-N4: The scope shortcut returns the closed decision view to the chief without
-sending a separate close message; documented in the bus verb table.
-N5: grant.scope is logged after the organization file commit in a separate bus
-transaction. A crash between them leaves durable changes.jsonl as the receipt,
-as with other organization writers. The setter does not claim cross-store
-atomicity.
-
-## T1 lane B results (sage-3642, 2026-10-23 19:23Z–19:29Z)
-
-TMPDIR: `/mnt/storage/scratch/tmp/boyd298-4bzr6fn7`. Each whole file ran serially
-as `timeout -k 10 180 node --test --test-concurrency=1 FILE`, TMPDIR set to that
-scratch directory. Final restored candidate results:
-
-| Whole file | Pass | Fail | Skip |
-| --- | ---: | ---: | ---: |
-| business/tests/grant-scope.test.mjs | 7 | 0 | 0 |
-| bus/tests/grant-scope.test.mjs | 14 | 0 | 0 |
-| bus/tests/grant-scope-runtime.test.mjs | 1 | 0 | 0 |
-| cli/tests/grants-scope.test.mjs | 4 | 0 | 0 |
-| bus/tests/project-runtime.test.mjs | 3 | 0 | 0 |
-
-29/0/0 total. `final-1.log` through `final-5.log` hold the final output. The
-runtime's reload-needs-restart notice is expected: the fixture's boot document
-has fewer credential references than its organization document, as in the
-existing instances runtime tests. No credential contents are loaded from the
-real user config.
-
-Initial run: business 7/0; bus 13/1 due to Boyd's test typo, an out-of-scope
-`opts` reference in the missing-scope assertion. Corrected only that new-test
-line, then bus 14/0 and the remaining files green. Dewey N1 positive control
-was added and the whole bus file passed again; final rerun above followed all
-mutants. No production code changed during this test window.
-
-Mutants: all whole files, serial, with timeout -k 10 and the same TMPDIR.
-`mutants.py --sage-clear sage-3642 --logs SCRATCH/review-mutants --deadline
-2026-10-23T19:38:00+00:00` restores exact original source after each run.
-M1/M2/M3/M4 are brief/Sage mutants; M5–M10 cover review focus and dewey-0933.
-Each exited 1 with named assertion failures, no loader/syntax kill.
-
-| Mutant | Change | Pass/fail | Named killer |
-| --- | --- | --- | --- |
-| M1 | skip raise scope check | 11/3 | bus out-of-scope Gitea waits; empty/bad scope waits; host argv exclusion |
-| M2 | skip invalid-value fallback | 5/2 | business missing/bad scope fallback; bad file scope fallback |
-| M3 | remove #human from scope verb | 13/1 | bus Q3 caller refusals |
-| M4 | drop grant.scope.used write | 9/5 | bus Q4 protected evidence assertion; four executor waits also fail |
-| M5 | skip scope digest check | 13/1 | bus Q4 bad evidence: decision-mismatch instead of not-authorized |
-| M6 | rethrow narrowing, rolling spend back | 13/1 | bus Q5 Gitea spent assertion |
-| M7 | same without length check | 6/1 | business Q2 shorter command prefix exclusion |
-| M8 | no-op #scopeRecheck | 12/2 | bus Q5 Gitea and host scope-changed outcomes |
-| M9 | remove launch.by check | 13/1 | bus Q6 second chief stays open |
-| M10 | accept any matched scope evidence row | 13/1 | bus Q4 bad evidence, with positive control |
-
-Mutation log sha256 (under scratch/review-mutants):
-
-```text
-55e9973af5fca0088963e2ca11fd81b2fb46dfead813a577c0e0aad2d6269b68  M1.log
-abd1b784eff5ae1333a7b47085d3e199cad6d27a00e2584edf0b62417ad4c888  M2.log
-1a56085e548d1e244f0f88fe12a45f77c162375880794f9ef88b241ed3a1704d  M3.log
-9c120f3f7128488edaf8bfd6d41bae712e69e76da4195a0d4dc0e8336b02038f  M4.log
-1bba88a3752823454acdaa51abde6aad66fdd5488801b4aceda02a3b42c8123d  M5.log
-a4ce3cacca9f7ea56b8cdfd503c76173a8e4ff1d8a7ec07032c93f0b51aa60d8  M6.log
-acecd5afc93d68d96d713f8a9a2dc08351831a0b7360a13b4e30a572ad4167bf  M7.log
-fce7fa505ccf4f2d4190bd03c209fd19f1cf2770d3ae1246a3bd03697594019e  M8.log
-a830a7964890dd04a2dcc7a932a1502f1dea06419a1eae6b91a85f7878dc5681  M9.log
-38ce3e7f69f6c6ffe10133397465d52538a930a830f76256a8b9280f8df78e4b  M10.log
-```
-
-Full touched-package suites and every scripts/test-*.sh remain for Sage's full gate; this CLEAR authorized only the five whole files. Candidate remains
-marked Untested for the full gate. No queue row has been changed by Boyd.
-
-## Dewey final delta review (dewey-0935, 2026-10-23 19:31:55Z)
-
-Dewey reviewed 574ece13c..bcd93dc08 with local git only, no Node: CLEAN,
-nothing blocks. Verified all 13 manifest entries, exact package-file coverage,
-project-runtime 1/1, M5-M10 mutation sites, all ten mutation log hashes and
-counts, named assertion kills without loader/syntax errors, final five logs
-29/0/0, and N1-N5 coverage. No production code delta in this review range.
-
-Formal Gitea APPROVE on #1804 and queue record wait on the row 291 hold release
-and Sage's go. Sage's touched-package and every scripts/test-*.sh gate remains
-required. Boyd has released lane B and has no running test processes.

agents/boyd/work/queue-298/MANIFEST.sha256

@@ -1,13 +0,0 @@
-612488b705853e75e6f8952e41552526f4d07dd297d7619d608d434ed75121d6  packages/bus/README.md
-3677f403104c121d53eb50b874de7a5d8d22e038faac52a5ea5bad449d0d409c  packages/bus/src/broker.mjs
-2e0ade9233404439cd4a629245600878da960f1126e7299aa2ccfb3aff86d784  packages/bus/src/runtime.mjs
-e7065db949cacfd4679a1031eebf5cde09ed196ce85612e8400ae563f02a0f18  packages/bus/tests/grant-scope-runtime.test.mjs
-4030cf584481a1db12d9e6f744015c48fdebd468335d065ead3e90180858d366  packages/bus/tests/grant-scope.test.mjs
-bc432d8d430433b9d84c00883584dc53d4b27afb5e93f739fe3ca28e80f01efa  packages/bus/tests/project-runtime.test.mjs
-84d6dd15d5ca2926d8f7a34548c70c3e7a3c58e692f0b009414f1af35cb096cc  packages/business/src/business.mjs
-1ac106522c8a115cb9479f2a6c5591fb9c77d138bbe93d2df10b6c4295645d0e  packages/business/src/instance-settings.mjs
-fed4177325f65a2b9823a40a9c35c01d60c0520e3ff40b4574c3cf2c29cc096b  packages/business/src/vocabulary.mjs
-b7f96e45b9ffca2a7ebc18dc446f0adcaac72d3900f098c60157cf6cbf1bfc13  packages/business/tests/grant-scope.test.mjs
-60fc267b7f8f9e83eeb0d0207c8abdef68d554f32b08d508e98dbf59b442a366  packages/cli/README.md
-b586907ca8f351f60dc19ec2683df75d2d70ddb12955d09fb14560c9d3bed3dc  packages/cli/src/grants.mjs
-fb7c30b31facd887b03ff02dd6734d48a815978481b33bb21ec48604a51c5ff5  packages/cli/tests/grants-scope.test.mjs

agents/boyd/work/queue-298/mutants.py

@@ -1,105 +0,0 @@
-#!/usr/bin/env python3
-"""Row 298 mutants. Run only with Sage's explicit CLEAR in Boyd's slot.
-
-Each mutation is applied to this worktree, runs one whole new test file,
-then restores the exact original bytes, including after an interruption.
-Logs go to a caller-supplied scratch directory, never the repository root.
-"""
-import argparse
-import datetime
-import pathlib
-import subprocess
-
-ROOT = pathlib.Path(__file__).resolve().parents[4]
-BROKER = ROOT / 'packages/bus/src/broker.mjs'
-VOCABULARY = ROOT / 'packages/business/src/vocabulary.mjs'
-BUS_TEST = 'packages/bus/tests/grant-scope.test.mjs'
-BUSINESS_TEST = 'packages/business/tests/grant-scope.test.mjs'
-
-
-def replace_once(source, old, new):
-    if source.count(old) != 1:
-        raise RuntimeError(f'expected exactly one mutant site, found {source.count(old)}')
-    return source.replace(old, new, 1)
-
-
-def mutate(name, source):
-    if name == 'M1':
-        return replace_once(source,
-            'if (!raise?.grant || !grantInScope(scope, raise.grant)) return view;',
-            'if (!raise?.grant) return view;')
-    if name == 'M2':
-        return replace_once(source,
-            'return scope === null ? { scope: GRANT_SCOPE_EMPTY, fallback: true } : { scope, fallback: false };',
-            'return { scope: scope ?? value, fallback: false };')
-    if name == 'M3':
-        return replace_once(source,
-            '  #grantScopeVerb(s, verb, a) {\n    this.#human(s);',
-            '  #grantScopeVerb(s, verb, a) {')
-    if name == 'M4':
-        old = """    this.#grantEvent(s.business, {
-      action: 'grant.scope.used', grantDecision: d.id, decisionSeq: seq, method: raise.grant.method,
-      agent: raise.grant.agent, scope, revision, scopeSha256: sha256(JSON.stringify(scope)),
-    }, d.id);"""
-        return replace_once(source, old, '    // MUTANT: scope evidence omitted.')
-    if name == 'M5':
-        return replace_once(source,
-            "evidence.agent === grant.agent && evidence.scopeSha256 === sha256(JSON.stringify(checked.scope)) &&",
-            "evidence.agent === grant.agent &&")
-    if name == 'M6':
-        start = source.index("        checked = this.#store.transaction(() => {\n          const consumed = this.#consumeGrant")
-        end = source.index('\n      } catch (e) {', start)
-        return source[:start] + "        checked = this.#store.transaction(() => this.#giteaRecheck(business, decision, this.#consumeGrant(business, decision, 'gitea')));" + source[end:]
-    if name == 'M7':
-        return replace_once(source,
-            'const same = (a, b) => a.length === b.length && a.every((x, i) => x === b[i]);',
-            'const same = (a, b) => a.every((x, i) => x === b[i]);')
-    if name == 'M8':
-        return replace_once(source,
-            "    if (this.#closed(decision)?.via === 'scope' && !grantInScope(this.#scopeNow(business).scope, g)) fail('scope-changed');",
-            "    // MUTANT: no spend-time scope recheck.")
-    if name == 'M9':
-        return replace_once(source,
-            '    if (s.role !== this.#business(s.business).launch?.by) return view;',
-            '    // MUTANT: any chief instance can use scope.')
-    if name == 'M10':
-        start = source.index('    const evidence = JSON.parse(row.body);', source.index('  #scopeUsed('))
-        end = source.index('\n  }', start)
-        return source[:start] + '    return true;' + source[end:]
-    raise ValueError(name)
-
-
-def main():
-    parser = argparse.ArgumentParser(description=__doc__)
-    parser.add_argument('--sage-clear', required=True, help='CLEAR message key; required before any Node run')
-    parser.add_argument('--logs', type=pathlib.Path, required=True)
-    parser.add_argument('--mutant', choices=['M1', 'M2', 'M3', 'M4', 'M5', 'M6', 'M7', 'M8', 'M9', 'M10', 'all'], default='all')
-    parser.add_argument('--deadline', default='2026-10-23T19:38:00+00:00')
-    args = parser.parse_args()
-    deadline = datetime.datetime.fromisoformat(args.deadline)
-    args.logs.mkdir(parents=True, exist_ok=True)
-    names = ['M1', 'M2', 'M3', 'M4', 'M5', 'M6', 'M7', 'M8', 'M9', 'M10'] if args.mutant == 'all' else [args.mutant]
-    for name in names:
-        remaining = (deadline - datetime.datetime.now(datetime.timezone.utc)).total_seconds()
-        if remaining <= 15:
-            raise RuntimeError('Sage slot deadline reached; no new test run')
-        path, test = (VOCABULARY, BUSINESS_TEST) if name in ['M2', 'M7'] else (BROKER, BUS_TEST)
-        original = path.read_bytes()
-        mutated = mutate(name, original.decode())
-        log = args.logs / f'{name}.log'
-        try:
-            path.write_text(mutated)
-            with log.open('w') as output:
-                result = subprocess.run(['timeout', '-k', '10', str(int(min(180, remaining - 13))), 'node', '--test', '--test-concurrency=1', test],
-                    cwd=ROOT, stdout=output, stderr=subprocess.STDOUT,
-                    timeout=min(195, remaining - 1), check=False)
-            print(f'{name}: exit={result.returncode} log={log}', flush=True)
-        finally:
-            path.write_bytes(original)
-        # Exit 1 needs human inspection of the failing test names; errors are not kills.
-        if result.returncode == 0:
-            raise RuntimeError(f'{name} survived')
-
-
-if __name__ == '__main__':
-    main()

agents/megavolt/work/queue-298/BUILD.md

@@ -1,92 +0,0 @@
-# Row 298 (#1804, Q228): the chief-of-staff grant scope
-
-Owner Megavolt, reviewer Dewey. Assigned in sage-3584 (mos-1489), 2026-10-23 18:53Z.
-Base: origin/refactor 45dca69f6. Branch: megavolt/row298.
-Brief: docs/plans/2026-10-23_mvp-readiness-rows.md, "Brief: the chief-of-staff grant scope (Q228)".
-Decision: DECISIONS Q228 (jason-master-restart DECISIONS.md:2278). It replaces Mos's Q190 reading.
-
-## What exists at 45dca69f6 (broker.mjs)
-
-- Raise: `#raiseGrant` (:2558) is chief-only (`grant-chief-only`) and binds a grant body per method:
-  gitea `#giteaGrantBinding` (:2665), host `#hostGrantBinding` (:2599), or host-enroll `enrollBinding`.
-  The decision goes through `#dispatch(..., 'decision.raise', ...)`, routed to the human.
-- Approval: `#approvedGrant` (:1525) returns the binding only for a credential.mint routed to the
-  human and closed with `approvalChoice` by the business's human, via 'cli', or via 'console' with
-  the broker's own human.input (row 252).
-- Start: decision.resolve (:5653-5659) runs `#approvedGrant` after the close and, once the transaction
-  commits, starts `#runEnrollment`, `#runHostGrant` or `#startGitea` with setImmediate.
-- Spend and records: each executor calls `#consumeGrant` and writes the 236 records (grant.call,
-  grant.result, grant.step, grant.applied or grant.failed, gitea_grants or host_grants). Revoke
-  goes through grants.revoke and hosts.revoke, as before.
-- Human-only settings: `#human(s)` (cli, outsideAgent) plus `#mayHuman`, as in veto.set (:4713).
-  The organization file is checked whole by business.mjs `checkLaunch`, and a bad file refuses
-  every read.
-
-## Proposed design (waits on Sage's rulings, Q1-Q6 below)
-
-D1. Storage. The scope gets its own key, `launch.grantScope`, in the organization file. The
-    whole-file check doesn't refuse on it. A separate reader, `grantScope(document)`, returns the
-    parsed scope or, when the key is missing or bad, the empty scope `{}`, plus a `fallback` flag.
-    A bad value can't break every organization read, and it falls back to "everything needs
-    Approve", which is the fail-closed direction. (Q1)
-D2. Shape. `{ gitea?: { agents: [id], projects: [id] }, host?: { agents: [id], hosts: [id],
-    commands: [[argv prefix]] } }`. A request is in scope only if its method has an entry, its agent
-    is listed, and every target is listed: each gitea project, the host, and each command prefix
-    equal to a listed prefix. host-enroll is never in scope, because it adds a host to the registry.
-    (Q2)
-D3. Writer. A new verb, `grants.scope.set { revision, scope }`, CLI-only for the human: `#human(s)`,
-    then `#mayHuman`, with the verb added to LIFECYCLE_HUMAN_VERBS. The tester, the reader and every
-    agent are refused. organization.set's ORGANIZATION_KEYS don't include it, so the chief's tool
-    never reaches it, the same way instances.set and veto.set stay human-only. The write validates
-    strictly and refuses a bad value; only the read falls back. Receipt: `grants.scope` with the old
-    and new sha256. `grants.scope` reads the value for the human, the tester and the chief. (Q3)
-D4. In-scope raise. Inside the raise transaction, `#raiseGrant` checks the binding against the scope
-    and, if it's in scope, closes the new decision at once: op resolved, choice approvalChoice, by
-    `grant-scope`, via `scope`. It writes a `grant.scope.used` event carrying the scope sha256 and
-    revision. `#approvedGrant` accepts via 'scope' only when that event exists for the close's seq
-    and its sha256 matches the scope as read in the same transaction. After the commit, the same
-    setImmediate starts the same executor, so 236's spend, records and revoke are unchanged. The
-    decision is closed before any inbox read, so no inbox item ever shows. (Q4)
-D5. Out-of-scope raise: unchanged. The decision stays open, routed to the human, for the Console
-    and CLI Approve.
-D6. Executor recheck. At the spend, `#consumeGrant` reruns the scope check for a via-'scope'
-    approval. If the scope changed between raise and run and the grant is now out of scope, it
-    fails with `grant.failed scope-changed` and the grant is spent. (Q5)
-
-## Open questions for Sage
-
-Q1. Storage: `launch.grantScope` in the organization file with a lenient reader (D1), or a separate
-    file under the business directory?
-Q2. Shape: is per-method agent, project, host and command lists right? Should host-enroll stay
-    out of scope always?
-Q3. "A scope change needs Approve": is the human's CLI verb itself the Approve (D3)? Or must the
-    chief also be able to raise a scope change that Jason approves in the inbox (a new decision
-    action, more code)? I recommend D3 alone. Should Console get a scope page in this row? I
-    propose no.
-Q4. Recording an in-scope grant as a broker close via 'scope' with a scope event (D4), versus a
-    decision that is never raised (a new table). D4 keeps 236's records and revoke unchanged.
-Q5. Scope narrowed between raise and run: fail scope-changed (D6), or honor the raise-time check?
-Q6. Chief enrollment ("Jason's Approve stays for the chief of staff's enrollment"): I read this
-    as the chief's own instance and credentials, which the human's instances.set and the
-    credential lifecycle already cover. So nothing new is needed in this row. Agree?
-
-## Tests (access by brief; all on scratch stores, fake Gitea, fake host)
-
-T1 agent, chief and tester callers of grants.scope.set are refused, and organization.set with
-   grantScope is refused. T2 a bad or missing grantScope falls back to empty and the grant waits.
-T3 an in-scope gitea request issues with no open decision and no inbox item, and writes the 236
-   records. T4 the same for a host request. T5 out of scope by agent, by project, or by command
-   waits for Approve. T6 host-enroll always waits. T7 a scope change by the human's CLI writes a
-   receipt; a scope change by any other path is refused. T8 an in-scope grant is logged and revoked
-   with grants.revoke or hosts.revoke. T9 scope narrowed before run gives scope-changed.
-
-## Mutants (brief)
-
-M1 the scope check skipped (every chief raise auto-closes): killed by T5 and T6.
-M2 the fallback skipped (a bad value is used as-is or throws): killed by T2.
-M3 the `#human` check removed from grants.scope.set: killed by T1.
-
-## Holds
-
-Darkwing holds the slot: no push, no claim, no queue write, no node and no test run until Sage
-says so. Q188: no agent creates a grant; tests use scratch stores only.

agents/sage/work/prd-1-17/DRAFT-d9.md

@@ -1,652 +0,0 @@
-# PRD 1.17 draft: Case 2 story files are DOCX (Q235 to Q237, P1 to P6)
-
-Sage, 2026-10-23, for mos-1366 item 1 and Vikunja 570. Draft 9. It is d8 plus Jason's Q41 answer O2 (DECISIONS Q239, mos-1467), which makes J-b yes, Webby's round 5 N15 to N17 (webby-0210) and Webby's round 6 B1, N19 and N20 (webby-0212) (see "d9 changes"). d8 is d7 plus Mos's d8 fix list mos-1443 (see "d8 changes"). d7 is d6 plus Mos's ruling mos-1379 on Fenton's 571 B2 (see "d7 changes"). d6 is d5 with Webby's round 3 (webby-0207) fixed: B1 to B3 and N10 to N13, with N14 left for Mos (see "d6 changes"). d5 folds in:
-- Mos's d4 check ruling mos-1372 (D1 to D14; D15 was dropped).
-- mos-1374, which replaces J-c.
-- The impact map mos-1368 (jason-master-restart d183246, `projects/mosaic-mvp/case2-docx-impact-map.md`: A1 to A16, critic items C1 to C6, items 2 to 7).
-- Mos's F4 measurement.
-
-Review order (mos-1367 B5): Webby, then Mos, then Jason. Base: PRD 1.16, `docs/prd/mosaic-stack.md` blob a6db9b4a at 482e865ac.
-1.16 lands first (row 291), and this text is a new version on top of it. Nothing here is built or queued. The impact map's queue changes (A24, A57 to A59) go through `scripts/mosaic queue` after 1.17 is approved (C9).
-
-Sources, verbatim in Mos's DECISIONS:
-- Q235, Jason's Q36 answer.
-- Q236: chapters are DOCX, Markdown for agent files and docs.
-- Q237: "It is correct for now (subject to future change)".
-- The P1 to P6 reading as restated to Jason in Q38.
-
-## Settled points (mos-1367)
-
-These stand as ruled. d5 changes only what mos-1372 changed.
-
-- **O1. Where a converted chapter lives.** The DOCX lives in the writing store of
-  O2 design D12, and the archived Markdown stays in the user's repository under a
-  human-marked archive folder. Ruled yes in B1, on the condition that the text
-  says plainly that a converted chapter leaves the Gitea-mirrored repository and
-  lives in the stack's writing store. mos-1372 D7 and mos-1375 add a remote for
-  the store, off the stack's host.
-- **O2. The unit of conversion.** One story file per import, refusing a file
-  that is already converted. Ruled yes in B2: each file gets its own fidelity
-  report, human confirmation, manifest and commit.
-- **O3. Whether conversion is a vocabulary action.** A human-only verb outside
-  the agent vocabulary, with no role grant and no agent request path. Ruled yes
-  in B3.
-- **O4. Reading archived Markdown.** A new `archived` scope. Lookups leave it out
-  unless the caller asks, every answer marks it archived, and a canon citation
-  can't name it. Ruled yes in B4.
-
-## d3 choices after mos-1372
-
-- **C1 is replaced by D1, keep-source-scope.** A DOCX keeps its source's scope:
-  universe, book, and canon or playground. A playground DOCX follows the
-  playground rules and is never returned as canon. The import accepts canon and
-  playground story files. Type-folder files and supporting files stay Markdown
-  (P4). This also settles the impact map's Q18, item 4. It leaves one narrowing
-  for Jason, J-i. A playground DOCX can't become canon in 1.17.
-- **C2 stands.** The move keeps the file's path under the archive folder:
-  `book1/ch3.md` goes to `<archive>/book1/ch3.md`. An archived file's universe
-  and book are those of its old path.
-- **C3 is replaced by D3 and D14.** The archive commit is written by a new
-  human-only bus step (Vikunja 571) on the C2-02 write plumbing and pushed through
-  C2-03b. The order is the store commit and the remote's confirmation that it
-  holds that commit, then the archive commit and its push, then publication to the
-  lookups.
-- **N4 stands.** REQ-LIB-8 says "a real user's books". The PRD names no user
-  anywhere in Case 2.
-
-## Text changes
-
-### Status and sources
-
-In the Status bullet's first line, "- Status: approved, version 1.16." becomes
-"- Status: approved, version 1.17." Status gains, after the two 1.16 sentences at
-the end of the bullet: "Version 1.17 records Jason's rulings Q235 to Q237 of
-2026-10-23: Case 2 story files are DOCX, Markdown stays for agent files and
-documentation, and a human-started import converts a Markdown story file one way.
-It also adds REQ-LIB-9, the Console's DOCX editor, from Jason's rulings Q195, Q226
-and Q234. It changes what Case 2 requirements allow, so Mos puts the text to Jason
-as written, and it lands only after his yes (mos-1366, Vikunja 570)."
-
-New source line, above the 1.16 one: "Version 1.17 source: Jason's Q235, answering
-Q36: 'How about we see a markdown file, we convert the markdown file to docx, then
-archive or mark the markdown file as converted. The new standard for files in the
-creating writing use case is to use docx to handle versioning and WYSIWYG. We
-eliminate the potential for confusion based on the files. Agents must understand
-which files are what format and where they live. The system must allow for import
-and conversion. We will not run the systems in parallel. There will be an
-irreversible conversion of the files.' His Q236 says: 'For creative writing
-chapters, we need to utilize docx as the standard. Markdown is acceptable for
-agent files, instructions, PRDs, documentation, etc. The creative writing files
-should be docx for familiarity for the user.' His Q237 says 'Q38: It is correct
-for now (subject to future change)', which confirms Mos's reading P1 to P6.
-REQ-LIB-9 rests on his Q195 request for 'a full WYSIWYG editor within Mosaic
-Stack', his Q226 answer 'F41: We want to move editing into the WYSIWYG in the
-WebUI. All changes are instantly committed and available to the agents.' and his
-Q234 answer 'Q37: yes' to the exact security header for the editor's frame. The
-storage follows the O2 design D10 to D12 as rewritten under Vikunja 571, at
-b99ca86b9 on `refactor`."
-
-### Creative library, section lead
-
-Replace "The library is the user's own writing repository." with "The library is
-the user's own writing repository plus the stack's writing store, which holds the
-DOCX story files (REQ-LIB-8, version 1.17)."
-
-### REQ-LIB-1
-
-Add, before "(Design 1.1": "The mapping also names one archive folder, set by the
-human, where converted Markdown story files go. A book's DOCX story files are in
-the stack's writing store, under the same universe and book (REQ-LIB-8)." Version
-tag, inside the closing parenthesis: "Version 1.15: supporting folders.)" becomes
-"Version 1.15: supporting folders. Version 1.17: the archive folder and the
-writing store.)"
-
-### REQ-LIB-2
-
-Replace "A file's scope comes from its path alone, prefixes first: a Markdown
-file under a supporting prefix is supporting, one under a playground prefix at
-any level is playground, any other Markdown file in a book folder is canon, and
-everything else is unmapped and never returned. A folder in both lists is
-supporting." with:
-
-"A Markdown file's scope comes from its path and from past imports, prefixes
-first: a Markdown file under the archive folder is archived, one under a
-supporting prefix is supporting, a Markdown file at a converted file's old path is
-unmapped under REQ-LIB-8 but flagged in the format map, one under a playground
-prefix at any level is playground, any other Markdown file in a book folder is
-canon, and everything else is unmapped and never returned. A folder in both lists
-is supporting. The archive folder follows the same placement rules and may not
-overlap another prefix or a book folder. An archived file keeps the path it had
-under the archive folder, and its universe and book are those of that old path. A
-DOCX document in the writing store keeps its source's scope: the universe, the
-book if there is one, and canon or playground. Its source is the Markdown file it
-was converted from or, for one the human starts in the editor, the universe and
-book or the playground the human picks (REQ-LIB-8). A playground DOCX follows the
-playground rules and is never returned as canon. It stays playground after its
-draft universe is made real. In version 1.17 no promotion or mapping change makes
-a playground DOCX canon. A later version of this PRD says how one becomes canon."
-
-Replace "Lookups return canon unless the caller asks for playground or
-supporting." with "Lookups return canon unless the caller asks for playground,
-supporting or archived. Every answer marks an archived file as archived and names
-the DOCX that replaced it."
-
-Replace "so an agent can't cite a playground or supporting file as canon" with "so
-an agent can't cite a playground, supporting or archived file as canon".
-
-In REQ-LIB-2 only, replace "The Console shows each cite's scope." with "The Console shows each cite's
-scope and format, and whether a cited Markdown file was converted."
-
-Version tag, inside the closing parenthesis: "Version 1.15: supporting.)" becomes
-"Version 1.15: supporting. Version 1.17: archived scope and DOCX scope.)"
-
-### REQ-LIB-4
-
-Replace "The user commits and pushes with their own tools, today Obsidian with
-obsidian-git." with "The user commits and pushes Markdown with their own tools,
-today Obsidian with obsidian-git. A converted story file's current text is no
-longer in that repository, which keeps only its archived Markdown (REQ-LIB-8)."
-
-Add, after "Bus writes and pushes come in later rows (C2-02, C2-03b).": "A DOCX
-story file is saved in the Console's editor, and each accepted save is one commit
-by the human in the stack's writing store (REQ-LIB-9). Each writing-store commit
-is also pushed to a remote off the stack's host, never by force-push. The remote
-is a setting only a human changes, and it starts unset. A repository on the
-stack's host never counts as that remote. A missing remote or a failed push never
-undoes a save, and the user sees each push that is pending or failed. Only the
-stack's host pushes to that remote, and no agent can reach it with any credential.
-Agents read the local commit."
-
-Replace "Agents read only the mirror's served commit and never hold a copy of
-their own, so they see the user's push within about a minute." with "Agents read
-the user's repository only at the mirror's served commit, except a story file
-during its import under REQ-LIB-8. They read a DOCX story file only at a committed
-version in the writing store, under REQ-LIB-5. They never hold a copy of their
-own, so they see the user's Markdown push within about a minute and a DOCX save at
-their next lookup after the editor reports it as committed."
-
-Version tag: "and the sync items.)" becomes "and the sync items. Version 1.17,
-with Q222 for the remote setting.)"
-
-### REQ-LIB-5
-
-Add, after "Each answer names the commit it read.": "Each answer also names the
-file's format and where it lives: its path, or its document id in the writing
-store. A DOCX story file is read from its latest committed save, never from
-unsaved text. A lookup that starts after the editor reports a save as committed
-returns that save or a later one, even while its push to the remote is pending or
-has failed, and the answer names the version. Get, search and manuscript read a
-DOCX story file as its extracted text with DOCX locators, never as lines. That
-text is the file with its tracked changes accepted. An agent reads a story file's
-comments, or its text with tracked deletions shown, only after a human turns on
-the matching setting. Both settings are off by default, and only a human changes
-them. The reader in this version can't read some things a DOCX story file can
-hold, such as a web link, a text box, a field or hidden text. The editor warns the
-human when an edit adds one, and the human can still save it. Until a later save
-takes it out, lookups give agents none of the text of the part that holds it,
-whether that is the chapter's body, a note or a comment. The manuscript lookup
-follows the book's chapter order across both formats (O2 design D10), and the next
-chapter it names is never an archived file. Links out and in resolve across both
-formats. The universe lookup returns the format map (REQ-LIB-8)."
-
-Replace "The user sees them in Obsidian's graph and backlinks." with "The user sees
-a Markdown file's links in Obsidian's graph and backlinks. A DOCX story file's
-wikilinks stay clickable in the Console's editor (O2 design D11), and no graph
-shows them yet. The Console's Connections view lists the current links and
-backlinks of each story file the user may see, in both formats, with each one's
-scope and format."
-
-Version tag: 'and "Connections are always visible".)' becomes 'and "Connections
-are always visible". Version 1.17, with Q222 for the two settings and Q239 for
-the Connections view.)'
-
-### REQ-LIB-6
-
-Replace "A reply may cite lines of the repository at a commit or pages the agent
-fetched, and the broker checks every citation before it stores the message." with
-"A reply may cite lines of a Markdown file at a commit, a place in a committed
-DOCX story file, or pages the agent fetched, and the broker checks every citation
-before it stores the message. A DOCX citation never calls a paragraph a line. It
-names the document id, the committed version and a DOCX locator. A citation that
-names an archived file as current is refused. The `requireCitation` setting below
-applies to Markdown and DOCX citations alike, and so does the rule for a citation
-marked as canon."
-
-Add, after "the broker refuses such a write before any git call.": "The writing
-store and the archive folder are read-only to a creative agent as well, and the
-broker's path check treats the archive folder as story. No agent creates, edits,
-deletes, converts, archives or restores a story file in any format, and no agent
-writes a DOCX. No creative agent starts or undoes a conversion, and none asks for
-one through a tool or a decision it raises, as REQ-LIB-8 says. An agent may still
-suggest a conversion to the human in chat. Each creative role's contract states
-which files are DOCX and which are Markdown, and cites a DOCX story file by its
-locator, never by line."
-
-Version tag, inside the closing parenthesis: "Version 1.15.)" becomes "Version
-1.15. Version 1.17.)"
-
-### New REQ-LIB-8
-
-This bullet goes after REQ-LIB-7 and before the "### Installer" heading.
-
-"- **REQ-LIB-8.** Story files become DOCX. DOCX is the standard for chapters and
-  the other story text in a Case 2 writing project, canon and playground alike. A
-  story file becomes DOCX through a human's import (below), or when the human
-  starts it in the editor. From then on DOCX is its only working format, edited in
-  the Console's editor (REQ-LIB-9). A Markdown story file stays Markdown until its
-  import. Files in a type folder (REQ-LIB-1), such as character and place notes,
-  stay Markdown. So do supporting files, agent files, instructions, PRDs and
-  documentation, including the character sheets, summaries and cross-links agents
-  keep under REQ-LIB-6.
-  - A converted story file's current text leaves the user's Gitea-mirrored
-    repository. Its DOCX lives in the stack's writing store, on the stack's host,
-    and not in the repository the user pushes or opens in Obsidian. Only its
-    archived Markdown stays there.
-  - An import converts one Markdown story file, canon or playground, outside every
-    type folder (REQ-LIB-1), to a DOCX document in the writing store. It refuses
-    an unmapped, supporting, archived or type-folder file, and a file that is
-    already converted. Each import has its own fidelity report, the human's
-    confirmation of that report, a manifest naming the source file and its commit,
-    and one commit in the store. The DOCX keeps every wiki link of the source as
-    written, and a lost link to another library file fails the fidelity report. A
-    web link becomes plain text that keeps its label and address, and the fidelity
-    report lists it for the human to confirm. A web link that can't be kept safely
-    as plain text refuses the import.
-  - The human can also start a new story file in the editor, in a universe and
-    book or a playground the human picks. It is a DOCX document in the writing
-    store from its first commit, with no Markdown copy, and it opens under the
-    same gate as the import.
-  - The same import marks the Markdown file converted, naming the document, and
-    moves it to the archive folder under its old path (REQ-LIB-1, REQ-LIB-2).
-    The mark and the move are one commit authored by the human in the user's
-    repository. A new human-only bus step (Vikunja 571) on the C2-02 write
-    plumbing writes it, and C2-03b pushes it. The move keeps the bytes and the
-    git history, so it isn't `data.delete`.
-  - The store commit comes first, and the writing store's remote must confirm it
-    holds that commit. Then come the archive commit and its push, then publication
-    to the lookups. Until publication the Markdown at its old path keeps its canon
-    or playground scope. Agents read that file at the commit the import started
-    from, even after the mirror's served commit reaches the archive commit or a
-    later one. No lookup returns the file's archived copy before publication, even
-    one that asks for archived files. A refusal or failure before the archive push
-    leaves the Markdown unmoved and no DOCX that a lookup returns. A failure after
-    the archive push leaves a pending import that the human sees and can resume,
-    never a claim that nothing moved. An archive push whose result is unknown
-    counts as a failure after the archive push until the stack reads the result
-    back from the user's remote.
-  - Each stage of an import writes a logged event. The import's record on the
-    stack's host names the source file's path, commit and blob and the new
-    document id, and each event points to that record.
-  - After a conversion, a Markdown file at the converted file's old path is
-    neither canon nor playground. Lookups leave it out, the format map flags it,
-    and the human is told.
-  - A new Markdown story file in a book folder that holds converted files stays
-    canon until its import, unless it sits at a converted file's old path or under
-    a playground prefix. The Console flags it and offers the import. Nothing
-    converts it on its own.
-  - A hybrid's exclusion that covers a converted file's old path also covers its
-    DOCX document (REQ-LIB-3). An exclusion of a whole book folder also covers
-    every DOCX document in that book, including one started in the editor. An
-    exclusion can also name a DOCX document by its id.
-  - Only a human starts an import or a new story file, from the CLI or a Console
-    session signed in as that human. Both are human verbs outside the agent action
-    vocabulary. Neither is added to `ACTIONS` in the business vocabulary or to the
-    broker's always-gated list, including the import's action, `library.convert`.
-    No role holds them, no agent can request them, and the hard-wait list in
-    REQ-WAIT-1 doesn't change. In an organization with several humans, who may
-    start them is a setting only a human changes, and the default is the owner
-    only.
-  - Conversion is one way, with no parallel run. Neither the Console nor any agent
-    edits a converted story file as Markdown, and no DOCX edit syncs back to
-    Markdown. The Console's Markdown save refuses every file under the archive
-    folder. The user's own tools can still change the archived Markdown, and no
-    such change reaches the DOCX. The old Markdown stays in git history, and
-    nothing rewrites history. A promotion into a book folder (C2-19) runs the
-    import for a Markdown story file or is refused. A promotion of a playground
-    DOCX is refused in version 1.17.
-  - Agents get a format map: for each mapped folder and story file, its format,
-    scope and where it lives, archived files, flagged files and pending imports
-    included.
-  - The import and new story files ship closed. They open only after four things.
-    The editor ships. The human has set the writing store's remote, and the stack
-    has checked that it can push there. Agents can read committed DOCX story files
-    through the lookups and cite them (REQ-LIB-5, REQ-LIB-6). Any earlier agent
-    system that writes the user's files has stopped, which for Case 2 is the
-    Hermes retirement (#423 step 5). So the import itself never cuts agents off
-    from a chapter, the chapter's current text never lives only on the stack's
-    host, and no second system writes the story. The first import of a real user's
-    books waits for Jason's go.
-  (Q235, Q236, Q237: P1 to P6. Q222 for the setting. O2 design D10 to D12.
-  Version 1.17.)"
-
-### New REQ-LIB-9
-
-This bullet goes after REQ-LIB-8.
-
-"- **REQ-LIB-9.** The Console's DOCX editor. The human edits a DOCX story file in
-  the Console's editor, in a split pane with the agent chat alongside it. The
-  human can pin an agent chat to a document. The human can select a word,
-  right-click it, and choose a synonym from a thesaurus. Only a human saves. Saves
-  happen on their own while the human types (Q226), at intervals only a human
-  changes, and each accepted save is one commit with the human as author, pushed
-  as REQ-LIB-4 says. A save made against an older version than the current one is
-  refused. Agents never write a DOCX. Versioning is the editor's tracked changes
-  plus one git commit per save. The editor's code is vendored and pinned, with a
-  hash per file and the licenses that its independent security review accepted. At
-  runtime the editor loads only files that the stack itself serves, and it
-  requests nothing from any other host. The editor's frame sends exactly the
-  content security policy Jason approved in Q234, and the WebUI shell's own header
-  is unchanged. REQ-PROJ-3's project docs editor is unchanged. (Q195, Q226, Q234,
-  Q236. O2 design D3, D4, D6, D8, D10, D13, D14, D16 and D22. Version 1.17.)"
-
-### Version 1.17 notes
-
-Added after the 1.16 notes:
-
-"- Version 1.17:
-  - Jason confirmed the reading 'for now (subject to future change)' (Q237). The
-    rulings stand until he revises them.
-  - The 10-27 Case 2 release ships on Markdown as built (P6). The 1.11 line 'The
-    Case 2 MVP for 10-27 is the Markdown library (#416). The WYSIWYG editor (Q195,
-    Q196) is an add-on that doesn't gate it.' still holds. Conversion opens after
-    10-27, and only once REQ-LIB-8's four conditions are met. The editor ships,
-    the writing store's remote is set and the stack has checked that it can push
-    there, agents can read and cite committed DOCX story files through the
-    lookups, and Hermes is retired, which is #423 step 5.
-  - The 1.12 note says five bus write and Console editor rows, C2-02, C2-03b,
-    C2-11a, C2-11b and C2-19, don't gate 10-27. Jason's Q226 F42 later moved
-    C2-02, C2-03b and C2-11b into the 10-27 slice. The Case 2 design brings C2-11a
-    in with them, because C2-11b needs it. C2-19 stays outside the slice. Mos's
-    reading of F42 is that C2-02 and C2-03b now gate 10-27, because design 9.2
-    puts them in 'the smallest slice that lets her start'. C2-11a and C2-11b are
-    slice rows that still don't gate 10-27, because the editor is the Q195 add-on.
-    The DOCX change in 1.17 leaves this slice as it is, and C2-11b's Markdown
-    editor never edits a converted story file.
-  - Q236 narrows Q176's editor choice to DOCX for story files (REQ-LIB-9). The
-    1.12 note that the Case 2 design keeps Obsidian now holds only for Markdown
-    files, including story files not yet imported. A DOCX story file is edited
-    only in the Console's editor under REQ-LIB-9.
-  - This replaces two parts of the O2 design at 25c09f19f. The superseded-notice
-    proposal from Fenton's F1 in D12 is withdrawn, and the
-    keep-Markdown-at-its-path model of D11 is replaced. Gyro's rewrite of the O2
-    design for Vikunja 571, landed on `refactor` at b99ca86b9, carries the
-    details, and where it differs from this text, this text holds:
-    - the import and archive steps, the mark, and the new bus step;
-    - links from supporting files to a moved chapter;
-    - the DOCX reader;
-    - the user's unpushed or later changes to an archived file or at its old path,
-      and pushing and closing the file in Obsidian before each import;
-    - the writing store's remote in W4 section 7.3, which replaces the no-remote
-      and no-backup rule that W4 section 7.4 held before the rewrite, at
-      062646487;
-    - import events counted by a bus restore, and recovery when a bus restore or a
-      restore of the whole host predates an import;
-    - manifest order for the manuscript lookup and its next chapter;
-    - `library.convert` kept out of `ACTIONS`, out of the hard-wait note and out
-      of the pinned `GATED_ONLY` list in packages/business/src/vocabulary.mjs.
-  - Agents read a converted story file through the Case 2 lookups under the same
-    project and universe access as Markdown canon, in any thread or room. W4's
-    earlier O2-only conversations, per-document grants and per-send sharing don't
-    gate these lookups. The 571 rewrite replaced them in W4 sections 7.1 and 7.2.
-    The creative tool list in REQ-LIB-6 doesn't change.
-  - The six creative role contracts row 213 landed say 'Every item cites the
-    lines of the user's material it is about'. A build row under 571 changes that
-    line for DOCX story files (REQ-LIB-6).
-  - A new Markdown file in a book folder is still canon in 1.17. The 1.17
-    exception is a file at a converted file's old path, which REQ-LIB-2 makes
-    unmapped.
-  - Story files convert whether canon or playground. Type-folder and supporting
-    files stay Markdown.
-  - Measured 2026-10-23 at about 01:21Z: the Case 2 user's library repository
-    tracks 213 files, 203 of them Markdown, and none is a .docx or .doc. It has no
-    untracked files. The user's .doc files (Q196) are outside it. So the landed
-    code has no DOCX there to report as unreadable at 10-27.
-  - Text replaced in 1.17, kept here as in earlier notes:
-    - Creative library lead, the 1.16 sentence: "The library is the user's own
-      writing repository."
-    - REQ-LIB-2, the 1.16 sentences: "A file's scope comes from its path alone,
-      prefixes first: a Markdown file under a supporting prefix is supporting,
-      one under a playground prefix at any level is playground, any other
-      Markdown file in a book folder is canon, and everything else is unmapped
-      and never returned. A folder in both lists is supporting." "Lookups return
-      canon unless the caller asks for playground or supporting." "so an agent
-      can't cite a playground or supporting file as canon" "The Console shows
-      each cite's scope."
-    - REQ-LIB-4, the 1.16 sentences: "The user commits and pushes with their own
-      tools, today Obsidian with obsidian-git." "Agents read only the mirror's
-      served commit and never hold a copy of their own, so they see the user's
-      push within about a minute."
-    - REQ-LIB-5, the 1.16 sentence: "The user sees them in Obsidian's graph and
-      backlinks." A converted chapter's connections show in Obsidian only as they
-      stood at conversion, and the Console's Connections view shows their
-      current links.
-    - REQ-LIB-6, the 1.16 sentence: "A reply may cite lines of the repository at
-      a commit or pages the agent fetched, and the broker checks every citation
-      before it stores the message."
-    - REQ-LIB-1 only gains sentences.
-  - REQ-LIB-3's text and REQ-LIB-7 are unchanged. REQ-LIB-8 adds one form of
-    exclusion REQ-LIB-3 doesn't have: naming a DOCX document by its id. A path
-    exclusion also covers DOCX documents, through a converted file's old path or a
-    whole book folder. An archived file and a DOCX document keep a universe, and a
-    book where their source has one, so every lookup still names one universe.
-    REQ-PROJ-3, the Console editor for a project's spec and docs, is unchanged.
-    C2-11b opens the library's Markdown files in that same editor.
-  - In `packages/tasks/requirements.json` the titles of REQ-LIB-1, REQ-LIB-2 and
-    REQ-LIB-4 change, and those of REQ-LIB-5 and REQ-LIB-6 stay. REQ-LIB-1 becomes
-    'A human-set library maps the user's repository onto universes, books, types,
-    playgrounds, supporting and archive folders'. REQ-LIB-2 becomes 'Scope comes
-    from the path or a DOCX's source, lookups default to canon, and only canon
-    files are ever cited as canon'. REQ-LIB-4 becomes 'Git holds every change. The
-    bus fast-forwards a read-only mirror every 60 seconds, the one place agents
-    read Markdown'. REQ-LIB-8 and REQ-LIB-9 add two ids, so the count goes from 85
-    to 87. REQ-LIB-8 is titled 'Case 2 story files become DOCX by a human-only
-    one-way import or in the editor; Markdown stays for notes and docs', and
-    REQ-LIB-9 'The Console's DOCX editor: only a human saves, each save is one
-    commit, and the editor code is vendored and pinned'.
-  - Open points O1 to O4 of draft 1 were ruled by Mos in mos-1367 B1 to B4.
-  - Sage files the build rows under Vikunja 570 and 571 after the rewrite is
-    approved. This amendment adds the requirements only."
-
-### Risks
-
-The new lines go at the end of "## Risks and open questions", after the bullet
-that begins "Trusted mode lets an agent" and before the "## Milestones" heading.
-- "A DOCX file is a zip archive, so git can't show a line diff of a chapter.
-  Review of a story change goes through the editor and the committed reader,
-  not `git diff`. (Version 1.17.)"
-- "A converted chapter's DOCX is not in Obsidian's graph. Obsidian shows the
-  chapter only through its archived Markdown, and no DOCX edit reaches that file's
-  links. The DOCX's current links show in the Console's editor and its
-  Connections view, and no graph shows them yet. (Version 1.17.)"
-- "Conversion can't be undone in place. Front matter, wiki link forms and
-  unsupported blocks may not survive it, and the mirror can't refuse the user's
-  push to an archived file. The controls are the fidelity report, the human's
-  confirmation, an untouched original on refusal, and the kept archive.
-  (Version 1.17.)"
-- "A restore of the stack's bus alone from a backup taken before an import drops
-  the import's logged events, while the archive commit and the DOCX stay. A
-  restore of the stack's whole host from such a backup also takes the writing
-  store and the host's import records back to before the import. The archive
-  commit stays in the user's Gitea repository and the DOCX stays on the writing
-  store's remote, but the host keeps no record of the import. A bus restore counts
-  import events, and the import's recovery covers both cases (Vikunja 571).
-  (Version 1.17.)"
-
-## d9 changes (Q239 and Webby round 5)
-
-- J-b yes (Q239, mos-1467), in the five edits mos-1443 R3 set for a yes (Webby round 6 B1). R3.1: REQ-LIB-5's replacement gains the Connections view sentence after "no graph shows them yet.". R3.2: the graph Risks line ends with the editor and the Connections view. R3.3: the A6 line moves from "Not taken" under A6. R3.5: the REQ-LIB-5 note ends with the Connections view, which drops "until a Console view of their links exists" and "Q226 records that view as a later option". R3.4 is Gyro's design edit at 767bb62c7 (writing-editor.md:188-190, :240-244 and :1272, docx-citations.md:66), and it follows in his docs round. Beyond these and N21, nothing else in the PRD text changes.
-- N19 and N20 (Webby round 6): J-b's question text is in the past tense, and the line that the import doesn't wait for the view is cited as Mos's R3 default. Mos confirmed it at his J-b check (mos-1470).
-- N21 (Webby round 6, Mos yes in mos-1470): REQ-LIB-5's version tag cites Q239 for the Connections view beside Q222 for the two settings.
-- N15: the D7 landing line gives R8's wording beside the impact map's quote.
-- N16: the d7 changes line notes that R8 replaces "no agent credential reaches it" in d8.
-- N17: the REQ-LIB-2 Replace quote and the REQ-LIB-8 old-path bullet are rewrapped under 82 columns. Their words are unchanged.
-
-## d8 changes (Mos's d8 fix list, check wf_63bba879-180)
-
-- R1: REQ-LIB-4's tail covers DOCX saves, which agents see at their next lookup after the editor reports them as committed. The notes quote the whole 1.16 sentence. Source: nit/jason/F10.
-- R2: REQ-LIB-4's new title says the mirror is "the one place agents read Markdown". Source: decisions.n14.
-- R3: J-b asks whether 1.17 requires the Console Connections view, with Mos's recommendation of yes. Sources: mos1372/F9, jason/F2, anchors/F5.
-- R4: C2-02 and C2-03b gate 10-27, C2-11a and C2-11b are slice rows that don't, and "F42 wins" is gone. New J-k. Sources: anchors/F6, jason/F5.
-- R5: where the landed 571 design differs, this text holds. Sources: anchors/F8, adversarial/F8 item 1, jason/F8, critic/C6, G16's design follow-on.
-- R6: `library.convert` stays out of `ACTIONS`, and REQ-WAIT-1's hard-wait list doesn't change. Sources: gyro571/F1, adversarial/F8 item 3, critic/C6.
-- R7: a repository on the stack's host never counts as the writing store's remote, and Item 2 says so. Sources: mos1372/F2, adversarial/F1, gyro571/F2.
-- R8: "no agent credential reaches it" becomes "no agent can reach it with any credential". Source: Fenton's B1 under mos-1379.
-- R9: no playground DOCX becomes canon in 1.17, and a promotion of one is refused. New J-i. Sources: mos1372/F8, adversarial/F2.
-- R10: REQ-LIB-9 restates Q195's pin and right-click thesaurus, and its cite gains D4 and D22. Source: critic/C4.
-- R11: REQ-LIB-9's license bar is the licenses its independent security review accepted. New J-l. Source: critic/C3.
-- R12: no text for D16's narrow-window tabs. Mos records that reading in STATE. Sources: jason/F1, second verifier vote.
-- R13: no lookup returns a file's archived copy before publication. Source: adversarial/F5 part 3.
-- R14: a restore of the whole host from a backup taken before an import is a fourth recovery case. Source: adversarial/F6.
-- M1: REQ-LIB-4's writing-store sentences follow the later bus rows sentence and add the off-host remote rules and DOCX read timing. The note quotes both 1.16 sentences. Sources: mos1372/F2, adversarial/F1, gyro571/F2, anchors/F4, nit/jason/F10, adversarial/F5 part 1, Fenton B1.
-- M2: REQ-LIB-8's order bullet adds the remote's confirmation, the old-path read rule and "archive push". Sources: mos1372/F2 and the other remote findings, mos1372/F7, adversarial/F5 parts 2 to 4.
-- M3: REQ-LIB-8's gate bullet has four conditions, adding the remote. Sources: the remote findings, critic/C1 and C2 edit 2.
-- M4: the 1.17 note on when conversion opens restates the four conditions and drops W4b. Sources: jason/F5, the remote findings.
-- M5: Item 2 rewritten with the remote rules. Sources: the remote findings.
-- M6: the 1.12 gating note rewritten. Sources: anchors/F6, jason/F5.
-- M7: REQ-LIB-9 gains the split pane, the pin, the thesaurus, the license bar and the runtime load rule, and cites more of the design. Sources: jason/F1, critic/C4, critic/C3, nit/anchors/F12, nit/gyro571/F9.
-- M8: REQ-LIB-2, the one-way bullet and the C1 note keep a playground DOCX out of canon in 1.17. Sources: mos1372/F8, adversarial/F2.
-- M9: REQ-LIB-5 says what the reader can't read, and the import turns web links into plain text. New J-j. Sources: critic/C1, critic/C2.
-- M10: an exclusion of a whole book folder covers that book's DOCX documents. Source: adversarial/F3, with B5.
-- M11: the human-verbs sentence and the 571 list item name `library.convert` and REQ-WAIT-1. Sources: gyro571/F1, adversarial/F8 item 3, critic/C6.
-- M12: J-b rewritten. Sources: mos1372/F9, jason/F2, anchors/F5, gyro571/F3, critic/C6.
-- M13: J-d puts the agent read model to Jason as his call. Source: mos1372/F1.
-- M14: Status moves to version 1.17 and names REQ-LIB-9. Sources: anchors/F2, mos1372/F4, critic/C7.
-- M15: the 1.17 source line quotes Q235 in full (mos-1446) and the REQ-LIB-9 sources, at b99ca86b9. Sources: critic/C5, anchors/F9, jason/F8 pin part, nit/gyro571/F8, critic/C6 pin part.
-- M16: the 571 list lead names the two replaced design parts and the landed design. Sources: anchors/F9, anchors/F8, adversarial/F8 item 1, jason/F8, critic/C6.
-- Landing swap: Gyro's docs round for R5, R6 and R14 landed as b99ca86b9 (Fenton fenton-0015), so M15 and M16 cite b99ca86b9 in place of 767bb62c7, as the d8 fix list's header says. J-b keeps 767bb62c7 for its line numbers.
-- M17: W4 section numbers in the remote item and the lookups note. Sources: gyro571/F5, nit/adversarial/F11.
-- M18: the D7 landing line. Sources: gyro571/F5, the remote findings.
-- M19: a logged event for each import stage, in REQ-LIB-8 and A2. Source: gyro571/F7.
-- M20: the Risks line on restores adds the whole-host case. Sources: adversarial/F6, gyro571/F7.
-- M21: the 571 restore item adds the whole-host case. Source: adversarial/F6.
-- M22: the graph Risks line and the REQ-LIB-5 note name a Console view. Sources: anchors/F5, jason/F2.
-- M23: the d6 B3 line drops "F42 wins". Source: anchors/F6.
-- M24: new Markdown in a converted book, with the old-path and playground exceptions. Source: mos1372/F6.
-- M25: J-c's last sentence is Mos's reading. Source: mos1372/F10.
-- M26: J-h rewritten with the D13 defaults. Source: jason/F3.
-- M27: Item 4 rewritten. Sources: jason/F4, gyro571/F4, decisions.unmarked_folders.
-- M28: the "Not taken" note on unmarked folders. Sources: jason/F4, gyro571/F4, decisions.unmarked_folders.
-- M29: the import refuses an unmapped file. Sources: gyro571/F4, decisions.unmarked_folders.
-- M30: placement notes for REQ-LIB-8, REQ-LIB-9 and the Risks lines. Sources: anchors/F3, nit/anchors/F14.
-- M31: REQ-LIB-4's title and the D11 landing line. Source: decisions.n14.
-- M32: the Q236 note limits the 1.12 Obsidian note to Markdown files. Source: critic/C8.
-- M33: the exclusion note adds path exclusions of DOCX documents. Source: anchors/F7.
-- M34: A9 moves from "Mine" to the impact-map list. Source: decisions.exclusion_by_id.
-- M35: the D5 landing line. Sources: anchors/F10, mos1372/F5, nit/adversarial/F12.
-- M36: the D9 and D14 landing lines. Source: mos1372/F1.
-- M37: the O1 and C3 notes add the off-host remote and its confirmation. Sources: the remote findings.
-- M38: the REQ-PROJ-3 note. Source: nit/anchors/F11.
-- M39: REQ-LIB-5's freshness sentence keys on the editor reporting a save as committed. Source: nit/adversarial/F9.
-- M40: REQ-LIB-6 bars agent requests for a conversion and allows a suggestion in chat. Source: nit/jason/F9.
-- M41: REQ-LIB-2's opening and old-path rule, and the "Mine" note. Source: nit/adversarial/F10.
-- M42: REQ-LIB-8's lead sentence on Markdown story files. Source: nit/mos1372/F12.
-- M43: REQ-LIB-6's citation sentence. Source: nit/anchors/F13.
-- M44: REQ-LIB-5's version tag uses plain quotes. Source: nit/anchors/F15.
-- M45: reference codes B5, D12, D10 and B4 name their source. Source: nit/mos1372/F11.
-- Files the row would own: four files, with the id count going to 87. Sources: anchors/F1, adversarial/F4, decisions.n14 F4.
-
-## d7 changes (mos-1379, Fenton's 571 B2)
-
-- REQ-LIB-5 gains Mos's three sentences after the extracted-text sentence. The text agents read has tracked changes accepted. Comments, and text with tracked deletions shown, each wait for a setting only a human turns on, off by default. Its version tag cites Q222 for the two settings, which is the only text here beyond Mos's.
-- J-d gains Mos's sentence on comments and tracked deletions.
-- Fenton's B1 is design only. d6's "no agent credential reaches it" holds (R8 replaces it in d8), and the shared helper stays #431.
-
-## d6 changes (Webby round 3, webby-0207)
-
-- B1: titles for REQ-LIB-8 and REQ-LIB-9 in the requirements.json note and the file list. REQ-LIB-9 takes Webby's title. REQ-LIB-8 keeps mine, because Webby's ("...one-way import that archives the Markdown under its old path") leaves out D2's story files started in the editor.
-- B2: REQ-LIB-2 makes a Markdown file at a converted file's old path unmapped, ahead of the playground and canon rules, so a playground conversion is covered too. REQ-LIB-8's old-path bullet says "neither canon nor playground".
-- B3: the slice note names Q226 F42's three rows (C2-02, C2-03b, C2-11b). C2-11a joined the slice with C2-11b, because C2-11b needs it. Both are slice rows that don't gate 10-27, as design 9.2, case2-rows.md:1655 and the impact map's A57 say. The 'F42 wins' sentence is gone from the note in d8, so no queue change follows from it.
-- N10: the cite-scope replacement is scoped to REQ-LIB-2. The 1.14 note's copy stays.
-- N11: the notes say REQ-LIB-8 adds the by-id exclusion form REQ-LIB-3 doesn't have.
-- N12: J-h marks the autosave intervals for Jason.
-- N13: J-b names REQ-LIB-5's "Connections are always visible" tag and Q226's "another way to handle the visual brain map".
-- N14, not taken: REQ-LIB-4's title stays internal F3's text, as mos-1372 D11 ruled. Webby's alternative, "...and agents read Markdown from it alone" (120 chars), is Mos's call.
-
-## Where each mos-1372 item landed
-
-- D1: REQ-LIB-2's DOCX sentences, the REQ-LIB-8 lead and import bullet, C1 above, and the notes. "Playground files stay Markdown in 1.17" is gone.
-- D2: REQ-LIB-2's "for one the human starts in the editor" and the REQ-LIB-8 new-story-file bullet. The universe-and-book note is now true.
-- D3: the REQ-LIB-8 order bullet. This also settles N8.
-- D4: REQ-LIB-8's one-way bullet, which carries the archive refusal and consequence F2's text, and the 571 list item.
-- D5: it landed in REQ-LIB-2's "a Markdown file at a converted file's old path is unmapped" in Webby's B2 form, and in the REQ-LIB-8 old-path bullet.
-- D6: REQ-LIB-5's freshness sentences.
-- D7 and mos-1375: REQ-LIB-4's remote sentences, the remote step in REQ-LIB-8's order bullet, the fourth opening condition and the 1.17 note on when conversion opens, plus the 571 list item on W4 section 7.3, which replaces the no-remote rule of the old W4 section 7.4. The impact map's item 2 adds "only the stack's host pushes, and no agent credential reaches it", which R8 words in d8 as "no agent can reach it with any credential".
-- D8: the REQ-LIB-5 replacement, the import bullet's wiki-link sentence, the Risks line, the note quoting the old sentence, and "REQ-LIB-1 only gains sentences".
-- D9: the 1.17 note that agents read a converted story file through the Case 2 lookups, from the d4 check's consistency B2, and J-d, which puts the read model to Jason as his call.
-- D10: the d4 check's B5 sentence, in REQ-LIB-8.
-- D11: internal F3's clause in the REQ-LIB-4 section, and in the notes the title as Mos amended it for N14.
-- D12: the whole 1.16 sentence replaced, and quoted in full in the notes.
-- D13: consequence F1's text, in REQ-LIB-4 and REQ-LIB-8's first bullet.
-- D14: the row text from the d4 check's consistency B1, in the mark-and-move bullet and C3 above.
-
-## What d5 adds beyond mos-1372 (for Webby and Mos to check)
-
-From the impact map, folded as mos-1368 item 1 asked:
-- A1: the Console shows a cite's format and converted state (REQ-LIB-2).
-- A2: the logged events and the several-humans setting, default owner only, under Q222.
-- A3: the import is outside the vocabulary, the hard-wait list is unchanged, and the archive move isn't `data.delete`. The C6 code site is in the 571 list.
-- A4: the section lead and REQ-LIB-1's writing-store sentence.
-- A6: format and location in every answer, extracted text with DOCX locators, links across formats.
-  - A6's named chapter-links view. D8 took B8's "no graph shows them yet", and J-b put the view to Jason. His O2 (Q239) takes it in d9 as REQ-LIB-5's Connections view (mos-1443 R3).
-- A7: read-only extends to the store and the archive, no agent action on a story file in any format, no agent DOCX write, and role contracts state the formats. C1's role contract line is a 571 build item.
-- A8: the DOCX cite shape, and a cite naming an archived file as current is refused.
-- A9: a hybrid sees a source's DOCX canon through REQ-LIB-2's source scope, and REQ-LIB-8 lets an exclusion name a DOCX document by its id. The id form lets the human exclude a single DOCX started in the editor, which has no old path. An archived file isn't canon, so no hybrid sees it.
-- A10: REQ-LIB-9, so the count is 87, not 86.
-- A11: the Hermes gate, from item 3.
-- A12: the C2-19 promotion sentence.
-- A13: the broker's path check treats the archive folder as story.
-- A14 and C5: two Risks lines.
-- A15: the flagged-new-file bullet. It sits beside the note from the d4 check's B4, "a new Markdown file in a book folder is still canon". The file stays canon and is offered for import.
-- A16: three titles change and two stay.
-- C2: manifest order for the manuscript lookup.
-- F3: the C2-02 gating note.
-- F4: Mos's measurement.
-
-Mine, beyond either source:
-- REQ-LIB-2 opens "A Markdown file's scope comes from its path and from past imports". DOCX scope comes from the source, so "a file's" would be false.
-- REQ-LIB-9's autosave sentence. It is Mos's reading of F41's "instantly committed", with human-set intervals. The exact intervals stay in the design.
-
-Not taken:
-- Impact map item 4's "files in unmarked folders are eligible one at a time", for folders outside every book folder and playground only. Their files are unmapped under REQ-LIB-2, so a DOCX made from one would have no universe or book to keep. The human maps such a folder into a book folder or a playground first, under REQ-LIB-1. A file in an unmarked folder inside a book folder or a playground is canon or playground, and the import takes it one file at a time.
-
-## Marked for Jason (additions in the text he sees)
-
-- J-a. Whether "We will not run the systems in parallel" applies per chapter or as one switch per book. His call. As written, it applies per chapter.
-- J-b. A converted chapter's DOCX is not in Obsidian's graph. Obsidian shows the chapter only through its archived Markdown, and no DOCX edit reaches that file's links. REQ-LIB-5 still cites two TARGET lines, "Visualization of data via Obsidian or equivalent is required" and "Connections are always visible". Mos's reading was that 1.17 as d8 wrote it met neither line for converted chapters. Their current links showed to the user only as clickable text inside the editor, and no graph or list showed them. Q226 leaves room for "another way to handle the visual brain map". The O2 design that landed for Vikunja 571 at 767bb62c7 held a Console Connections view and its tests as later work that waited for this answer. His call was whether 1.17 requires that view. As d8 was written, it did not. Mos recommended that it does, because impact map A6 says "Recommended: name the view" and TARGET says "Connections are always visible". Jason answered O2 (Q239): 1.17 requires the view. d9 writes it into REQ-LIB-5, its note and the Risks line, in the text of mos-1443 R3. The view comes with the conversion work after 10-27, and the 10-27 Case 2 release stays on Markdown (Q235 P6, Q237). That the import does not wait for the view is Mos's default in mos-1443 R3. Q239 doesn't address it, and Mos confirmed it at his J-b check (mos-1470).
-- J-c (mos-1374): "The store pushes to a remote (D7), and the Case 2 VM is in the nightly PBS backup. For a fixed restore point before her first real import, a manual backup of VM 1012 with PBS protect runs first. That step is reversible and needs no reboot." Mos's reading is that this sits inside the P5 go step, so it needs no new question.
-- J-d. How agents read a converted chapter, D9. His call. As written, an agent reads it through the ordinary Case 2 lookups in any thread or room, under the same project and universe access as Markdown canon. This is Mos's reading of F41 and REQ-LIB-7. The other choice is the model in the earlier O2 design, W4 sections 7.1 and 7.2. Under it, an agent reads a converted chapter only in a new writing conversation that holds one human and one agent, only after the business owner grants that agent access to that document, and by default only what the human attaches to each message. Comments and tracked deletions stay hidden from agents until a human turns on a setting for each. Markdown has neither, so the default keeps agents at the access Markdown gives them. Those two sentences are Mos's ruling mos-1379. A yes to the text as written settles it.
-- J-e. Versioning means the editor's tracked changes plus one git commit per save.
-- J-f. A converted chapter can be edited only in the Console while the stack is reachable. Obsidian no longer edits it offline.
-- J-g. The import takes Markdown only. Importing .doc files stays a separate task.
-- J-h. Autosave under REQ-LIB-9. Jason's Q226 F41 says "All changes are instantly committed and available to the agents." Mos's reading, recorded with that ruling, is "Each save is a commit at once, and agents read it at their next lookup." At the O2 design's D13 defaults, a save commits at most 2 seconds after a pause in typing or 15 seconds into steady typing, with no human action needed. Mos's reading in mos-1359 counts that delay as "instantly committed". Only a human changes the intervals. The PRD names no values, and the defaults stay in the design. Whether a delay of seconds fits his word "instantly" is his call, so this is marked for him.
-- J-i. In 1.17 a playground story that is DOCX can't become canon. That covers a playground Markdown file the human imports, a story the human starts in a playground in the editor, and the DOCX of a draft universe after it is made real. Today Melanie promotes a playground file by moving it into a book folder in Obsidian, and a DOCX in the writing store can't be moved that way. She can start a new story in the book and paste the text in, but it gets a new document id and the playground copy keeps the history. A later version adds DOCX promotion with C2-19, which comes after the slice.
-- J-j. Web links, text boxes and fields in a converted chapter. Jason's Q226 F41 says "All changes are instantly committed and available to the agents." The reader in this version can't read a web link, a text box, a field or hidden text. As written, the import turns each web link into plain text that keeps its label and address, and the human confirms that in the fidelity report. A web link that can't be kept safely as plain text refuses the import. If a later edit adds one of these, the save keeps it and the editor warns the human. Agents then get none of that part's text until a save takes it out.
-- J-k. The 1.12 note Jason approved says bus writes, C2-02 and C2-03b, don't gate 10-27. His Q226 "F42: ok" moved them into the 10-27 slice, and design 9.2 counts them in the smallest slice that lets Melanie start. Mos reads that as making them gate 10-27. The editor rows C2-11a and C2-11b still don't gate it, per his Q195 words "we need to get it moving as an add-on".
-- J-l. REQ-LIB-9 does not use REQ-PROJ-3's "permissive license" bar. It takes the licenses that the editor's independent security review accepted, because that review cleared fonts under the SIL Open Font License and the Ubuntu Font License, which not every reader counts as permissive. Mos's reading.
-
-Marked as changes beyond P1 to P6, from the impact map (Q17, item 5):
-- A1 (archived scope and canon cites)
-- A2 (the conversion requirement, REQ-LIB-8)
-- A3 (outside the vocabulary, hard-wait list unchanged)
-- A6 (lookups across formats)
-- A7 (agent bounds)
-- A8 (DOCX cites)
-- Item 2 and mos-1375: each writing-store commit is pushed to a remote off the stack's host. Only a human sets it, it starts unset, and a repository on the stack's host doesn't count. Only the stack's host pushes to it, and no agent can reach it with any credential. Import and new story files stay closed until the remote is set and checked, and each import's archive push waits until the remote holds the DOCX commit. This keeps "Git is used for all changes -- local and remote" true for DOCX chapters.
-- Item 3 (the Hermes gate)
-- Item 4. Canon and playground story files convert one file at a time, including files in unmarked folders inside a book folder or a playground. Type-folder and supporting files stay Markdown. A story file outside every book folder and playground has no universe or book, so it converts only after a human maps its folder into a book folder or a playground. The mapping step is Mos's reading of P1 and Q30.
-
-The F4 measurement goes with them.
-
-## Files the row would own
-
-The id count goes from 85 to 87. 1.16 owned three files because its count stayed at 85. Like 1.13, the last version that added ids, the row owns four files:
-- `docs/prd/mosaic-stack.md`
-- `packages/tasks/requirements.json`: the version 1.17, the two new ids REQ-LIB-8 and REQ-LIB-9 with their titles, and the changed titles of REQ-LIB-1, REQ-LIB-2 and REQ-LIB-4. The new ids go after REQ-LIB-7 and before REQ-INST-1, in the same order as the PRD's bullets.
-- `packages/tasks/tests/requirements.test.mjs`: the version pin 1.17, the id count of 87, and the duplicate-id message, which goes from `requirements[85].id: REQ-ROLE-1 twice` to `requirements[87].id: REQ-ROLE-1 twice`.
-- `packages/bus/tests/requirements.test.mjs`: the list length, which goes from 85 to 87.
-
-The gate would match 1.16's:
-1. A reviewer approves the text.
-2. Jason says yes to the exact text through Mos.
-3. Both `requirements.test.mjs` files, in `packages/tasks/tests` and `packages/bus/tests`, and every `scripts/test-*.sh` that reads the PRD or `requirements.json` are green on Sage's gate.
-4. Mos gets the landing commit.

agents/sage/work/prd-1-17/DRAFT.md

@@ -1,652 +0,0 @@
-# PRD 1.17 draft: Case 2 story files are DOCX (Q235 to Q237, P1 to P6)
-
-Sage, 2026-10-23, for mos-1366 item 1 and Vikunja 570. Draft 9. It is d8 plus Jason's Q41 answer O2 (DECISIONS Q239, mos-1467), which makes J-b yes, Webby's round 5 N15 to N17 (webby-0210) and Webby's round 6 B1, N19 and N20 (webby-0212) (see "d9 changes"). d8 is d7 plus Mos's d8 fix list mos-1443 (see "d8 changes"). d7 is d6 plus Mos's ruling mos-1379 on Fenton's 571 B2 (see "d7 changes"). d6 is d5 with Webby's round 3 (webby-0207) fixed: B1 to B3 and N10 to N13, with N14 left for Mos (see "d6 changes"). d5 folds in:
-- Mos's d4 check ruling mos-1372 (D1 to D14; D15 was dropped).
-- mos-1374, which replaces J-c.
-- The impact map mos-1368 (jason-master-restart d183246, `projects/mosaic-mvp/case2-docx-impact-map.md`: A1 to A16, critic items C1 to C6, items 2 to 7).
-- Mos's F4 measurement.
-
-Review order (mos-1367 B5): Webby, then Mos, then Jason. Base: PRD 1.16, `docs/prd/mosaic-stack.md` blob a6db9b4a at 482e865ac.
-1.16 lands first (row 291), and this text is a new version on top of it. Nothing here is built or queued. The impact map's queue changes (A24, A57 to A59) go through `scripts/mosaic queue` after 1.17 is approved (C9).
-
-Sources, verbatim in Mos's DECISIONS:
-- Q235, Jason's Q36 answer.
-- Q236: chapters are DOCX, Markdown for agent files and docs.
-- Q237: "It is correct for now (subject to future change)".
-- The P1 to P6 reading as restated to Jason in Q38.
-
-## Settled points (mos-1367)
-
-These stand as ruled. d5 changes only what mos-1372 changed.
-
-- **O1. Where a converted chapter lives.** The DOCX lives in the writing store of
-  O2 design D12, and the archived Markdown stays in the user's repository under a
-  human-marked archive folder. Ruled yes in B1, on the condition that the text
-  says plainly that a converted chapter leaves the Gitea-mirrored repository and
-  lives in the stack's writing store. mos-1372 D7 and mos-1375 add a remote for
-  the store, off the stack's host.
-- **O2. The unit of conversion.** One story file per import, refusing a file
-  that is already converted. Ruled yes in B2: each file gets its own fidelity
-  report, human confirmation, manifest and commit.
-- **O3. Whether conversion is a vocabulary action.** A human-only verb outside
-  the agent vocabulary, with no role grant and no agent request path. Ruled yes
-  in B3.
-- **O4. Reading archived Markdown.** A new `archived` scope. Lookups leave it out
-  unless the caller asks, every answer marks it archived, and a canon citation
-  can't name it. Ruled yes in B4.
-
-## d3 choices after mos-1372
-
-- **C1 is replaced by D1, keep-source-scope.** A DOCX keeps its source's scope:
-  universe, book, and canon or playground. A playground DOCX follows the
-  playground rules and is never returned as canon. The import accepts canon and
-  playground story files. Type-folder files and supporting files stay Markdown
-  (P4). This also settles the impact map's Q18, item 4. It leaves one narrowing
-  for Jason, J-i. A playground DOCX can't become canon in 1.17.
-- **C2 stands.** The move keeps the file's path under the archive folder:
-  `book1/ch3.md` goes to `<archive>/book1/ch3.md`. An archived file's universe
-  and book are those of its old path.
-- **C3 is replaced by D3 and D14.** The archive commit is written by a new
-  human-only bus step (Vikunja 571) on the C2-02 write plumbing and pushed through
-  C2-03b. The order is the store commit and the remote's confirmation that it
-  holds that commit, then the archive commit and its push, then publication to the
-  lookups.
-- **N4 stands.** REQ-LIB-8 says "a real user's books". The PRD names no user
-  anywhere in Case 2.
-
-## Text changes
-
-### Status and sources
-
-In the Status bullet's first line, "- Status: approved, version 1.16." becomes
-"- Status: approved, version 1.17." Status gains, after the two 1.16 sentences at
-the end of the bullet: "Version 1.17 records Jason's rulings Q235 to Q237 of
-2026-10-23: Case 2 story files are DOCX, Markdown stays for agent files and
-documentation, and a human-started import converts a Markdown story file one way.
-It also adds REQ-LIB-9, the Console's DOCX editor, from Jason's rulings Q195, Q226
-and Q234. It changes what Case 2 requirements allow, so Mos puts the text to Jason
-as written, and it lands only after his yes (mos-1366, Vikunja 570)."
-
-New source line, above the 1.16 one: "Version 1.17 source: Jason's Q235, answering
-Q36: 'How about we see a markdown file, we convert the markdown file to docx, then
-archive or mark the markdown file as converted. The new standard for files in the
-creating writing use case is to use docx to handle versioning and WYSIWYG. We
-eliminate the potential for confusion based on the files. Agents must understand
-which files are what format and where they live. The system must allow for import
-and conversion. We will not run the systems in parallel. There will be an
-irreversible conversion of the files.' His Q236 says: 'For creative writing
-chapters, we need to utilize docx as the standard. Markdown is acceptable for
-agent files, instructions, PRDs, documentation, etc. The creative writing files
-should be docx for familiarity for the user.' His Q237 says 'Q38: It is correct
-for now (subject to future change)', which confirms Mos's reading P1 to P6.
-REQ-LIB-9 rests on his Q195 request for 'a full WYSIWYG editor within Mosaic
-Stack', his Q226 answer 'F41: We want to move editing into the WYSIWYG in the
-WebUI. All changes are instantly committed and available to the agents.' and his
-Q234 answer 'Q37: yes' to the exact security header for the editor's frame. The
-storage follows the O2 design D10 to D12 as rewritten under Vikunja 571, at
-b99ca86b9 on `refactor`."
-
-### Creative library, section lead
-
-Replace "The library is the user's own writing repository." with "The library is
-the user's own writing repository plus the stack's writing store, which holds the
-DOCX story files (REQ-LIB-8, version 1.17)."
-
-### REQ-LIB-1
-
-Add, before "(Design 1.1": "The mapping also names one archive folder, set by the
-human, where converted Markdown story files go. A book's DOCX story files are in
-the stack's writing store, under the same universe and book (REQ-LIB-8)." Version
-tag, inside the closing parenthesis: "Version 1.15: supporting folders.)" becomes
-"Version 1.15: supporting folders. Version 1.17: the archive folder and the
-writing store.)"
-
-### REQ-LIB-2
-
-Replace "A file's scope comes from its path alone, prefixes first: a Markdown
-file under a supporting prefix is supporting, one under a playground prefix at
-any level is playground, any other Markdown file in a book folder is canon, and
-everything else is unmapped and never returned. A folder in both lists is
-supporting." with:
-
-"A Markdown file's scope comes from its path and from past imports, prefixes
-first: a Markdown file under the archive folder is archived, one under a
-supporting prefix is supporting, a Markdown file at a converted file's old path is
-unmapped under REQ-LIB-8 but flagged in the format map, one under a playground
-prefix at any level is playground, any other Markdown file in a book folder is
-canon, and everything else is unmapped and never returned. A folder in both lists
-is supporting. The archive folder follows the same placement rules and may not
-overlap another prefix or a book folder. An archived file keeps the path it had
-under the archive folder, and its universe and book are those of that old path. A
-DOCX document in the writing store keeps its source's scope: the universe, the
-book if there is one, and canon or playground. Its source is the Markdown file it
-was converted from or, for one the human starts in the editor, the universe and
-book or the playground the human picks (REQ-LIB-8). A playground DOCX follows the
-playground rules and is never returned as canon. It stays playground after its
-draft universe is made real. In version 1.17 no promotion or mapping change makes
-a playground DOCX canon. A later version of this PRD says how one becomes canon."
-
-Replace "Lookups return canon unless the caller asks for playground or
-supporting." with "Lookups return canon unless the caller asks for playground,
-supporting or archived. Every answer marks an archived file as archived and names
-the DOCX that replaced it."
-
-Replace "so an agent can't cite a playground or supporting file as canon" with "so
-an agent can't cite a playground, supporting or archived file as canon".
-
-In REQ-LIB-2 only, replace "The Console shows each cite's scope." with "The Console shows each cite's
-scope and format, and whether a cited Markdown file was converted."
-
-Version tag, inside the closing parenthesis: "Version 1.15: supporting.)" becomes
-"Version 1.15: supporting. Version 1.17: archived scope and DOCX scope.)"
-
-### REQ-LIB-4
-
-Replace "The user commits and pushes with their own tools, today Obsidian with
-obsidian-git." with "The user commits and pushes Markdown with their own tools,
-today Obsidian with obsidian-git. A converted story file's current text is no
-longer in that repository, which keeps only its archived Markdown (REQ-LIB-8)."
-
-Add, after "Bus writes and pushes come in later rows (C2-02, C2-03b).": "A DOCX
-story file is saved in the Console's editor, and each accepted save is one commit
-by the human in the stack's writing store (REQ-LIB-9). Each writing-store commit
-is also pushed to a remote off the stack's host, never by force-push. The remote
-is a setting only a human changes, and it starts unset. A repository on the
-stack's host never counts as that remote. A missing remote or a failed push never
-undoes a save, and the user sees each push that is pending or failed. Only the
-stack's host pushes to that remote, and no agent can reach it with any credential.
-Agents read the local commit."
-
-Replace "Agents read only the mirror's served commit and never hold a copy of
-their own, so they see the user's push within about a minute." with "Agents read
-the user's repository only at the mirror's served commit, except a story file
-during its import under REQ-LIB-8. They read a DOCX story file only at a committed
-version in the writing store, under REQ-LIB-5. They never hold a copy of their
-own, so they see the user's Markdown push within about a minute and a DOCX save at
-their next lookup after the editor reports it as committed."
-
-Version tag: "and the sync items.)" becomes "and the sync items. Version 1.17,
-with Q222 for the remote setting.)"
-
-### REQ-LIB-5
-
-Add, after "Each answer names the commit it read.": "Each answer also names the
-file's format and where it lives: its path, or its document id in the writing
-store. A DOCX story file is read from its latest committed save, never from
-unsaved text. A lookup that starts after the editor reports a save as committed
-returns that save or a later one, even while its push to the remote is pending or
-has failed, and the answer names the version. Get, search and manuscript read a
-DOCX story file as its extracted text with DOCX locators, never as lines. That
-text is the file with its tracked changes accepted. An agent reads a story file's
-comments, or its text with tracked deletions shown, only after a human turns on
-the matching setting. Both settings are off by default, and only a human changes
-them. The reader in this version can't read some things a DOCX story file can
-hold, such as a web link, a text box, a field or hidden text. The editor warns the
-human when an edit adds one, and the human can still save it. Until a later save
-takes it out, lookups give agents none of the text of the part that holds it,
-whether that is the chapter's body, a note or a comment. The manuscript lookup
-follows the book's chapter order across both formats (O2 design D10), and the next
-chapter it names is never an archived file. Links out and in resolve across both
-formats. The universe lookup returns the format map (REQ-LIB-8)."
-
-Replace "The user sees them in Obsidian's graph and backlinks." with "The user sees
-a Markdown file's links in Obsidian's graph and backlinks. A DOCX story file's
-wikilinks stay clickable in the Console's editor (O2 design D11), and no graph
-shows them yet. The Console's Connections view lists the current links and
-backlinks of each story file the user may see, in both formats, with each one's
-scope and format."
-
-Version tag: 'and "Connections are always visible".)' becomes 'and "Connections
-are always visible". Version 1.17, with Q222 for the two settings and Q239 for
-the Connections view.)'
-
-### REQ-LIB-6
-
-Replace "A reply may cite lines of the repository at a commit or pages the agent
-fetched, and the broker checks every citation before it stores the message." with
-"A reply may cite lines of a Markdown file at a commit, a place in a committed
-DOCX story file, or pages the agent fetched, and the broker checks every citation
-before it stores the message. A DOCX citation never calls a paragraph a line. It
-names the document id, the committed version and a DOCX locator. A citation that
-names an archived file as current is refused. The `requireCitation` setting below
-applies to Markdown and DOCX citations alike, and so does the rule for a citation
-marked as canon."
-
-Add, after "the broker refuses such a write before any git call.": "The writing
-store and the archive folder are read-only to a creative agent as well, and the
-broker's path check treats the archive folder as story. No agent creates, edits,
-deletes, converts, archives or restores a story file in any format, and no agent
-writes a DOCX. No creative agent starts or undoes a conversion, and none asks for
-one through a tool or a decision it raises, as REQ-LIB-8 says. An agent may still
-suggest a conversion to the human in chat. Each creative role's contract states
-which files are DOCX and which are Markdown, and cites a DOCX story file by its
-locator, never by line."
-
-Version tag, inside the closing parenthesis: "Version 1.15.)" becomes "Version
-1.15. Version 1.17.)"
-
-### New REQ-LIB-8
-
-This bullet goes after REQ-LIB-7 and before the "### Installer" heading.
-
-"- **REQ-LIB-8.** Story files become DOCX. DOCX is the standard for chapters and
-  the other story text in a Case 2 writing project, canon and playground alike. A
-  story file becomes DOCX through a human's import (below), or when the human
-  starts it in the editor. From then on DOCX is its only working format, edited in
-  the Console's editor (REQ-LIB-9). A Markdown story file stays Markdown until its
-  import. Files in a type folder (REQ-LIB-1), such as character and place notes,
-  stay Markdown. So do supporting files, agent files, instructions, PRDs and
-  documentation, including the character sheets, summaries and cross-links agents
-  keep under REQ-LIB-6.
-  - A converted story file's current text leaves the user's Gitea-mirrored
-    repository. Its DOCX lives in the stack's writing store, on the stack's host,
-    and not in the repository the user pushes or opens in Obsidian. Only its
-    archived Markdown stays there.
-  - An import converts one Markdown story file, canon or playground, outside every
-    type folder (REQ-LIB-1), to a DOCX document in the writing store. It refuses
-    an unmapped, supporting, archived or type-folder file, and a file that is
-    already converted. Each import has its own fidelity report, the human's
-    confirmation of that report, a manifest naming the source file and its commit,
-    and one commit in the store. The DOCX keeps every wiki link of the source as
-    written, and a lost link to another library file fails the fidelity report. A
-    web link becomes plain text that keeps its label and address, and the fidelity
-    report lists it for the human to confirm. A web link that can't be kept safely
-    as plain text refuses the import.
-  - The human can also start a new story file in the editor, in a universe and
-    book or a playground the human picks. It is a DOCX document in the writing
-    store from its first commit, with no Markdown copy, and it opens under the
-    same gate as the import.
-  - The same import marks the Markdown file converted, naming the document, and
-    moves it to the archive folder under its old path (REQ-LIB-1, REQ-LIB-2).
-    The mark and the move are one commit authored by the human in the user's
-    repository. A new human-only bus step (Vikunja 571) on the C2-02 write
-    plumbing writes it, and C2-03b pushes it. The move keeps the bytes and the
-    git history, so it isn't `data.delete`.
-  - The store commit comes first, and the writing store's remote must confirm it
-    holds that commit. Then come the archive commit and its push, then publication
-    to the lookups. Until publication the Markdown at its old path keeps its canon
-    or playground scope. Agents read that file at the commit the import started
-    from, even after the mirror's served commit reaches the archive commit or a
-    later one. No lookup returns the file's archived copy before publication, even
-    one that asks for archived files. A refusal or failure before the archive push
-    leaves the Markdown unmoved and no DOCX that a lookup returns. A failure after
-    the archive push leaves a pending import that the human sees and can resume,
-    never a claim that nothing moved. An archive push whose result is unknown
-    counts as a failure after the archive push until the stack reads the result
-    back from the user's remote.
-  - Each stage of an import writes a logged event. The import's record on the
-    stack's host names the source file's path, commit and blob and the new
-    document id, and each event points to that record.
-  - After a conversion, a Markdown file at the converted file's old path is
-    neither canon nor playground. Lookups leave it out, the format map flags it,
-    and the human is told.
-  - A new Markdown story file in a book folder that holds converted files stays
-    canon until its import, unless it sits at a converted file's old path or under
-    a playground prefix. The Console flags it and offers the import. Nothing
-    converts it on its own.
-  - A hybrid's exclusion that covers a converted file's old path also covers its
-    DOCX document (REQ-LIB-3). An exclusion of a whole book folder also covers
-    every DOCX document in that book, including one started in the editor. An
-    exclusion can also name a DOCX document by its id.
-  - Only a human starts an import or a new story file, from the CLI or a Console
-    session signed in as that human. Both are human verbs outside the agent action
-    vocabulary. Neither is added to `ACTIONS` in the business vocabulary or to the
-    broker's always-gated list, including the import's action, `library.convert`.
-    No role holds them, no agent can request them, and the hard-wait list in
-    REQ-WAIT-1 doesn't change. In an organization with several humans, who may
-    start them is a setting only a human changes, and the default is the owner
-    only.
-  - Conversion is one way, with no parallel run. Neither the Console nor any agent
-    edits a converted story file as Markdown, and no DOCX edit syncs back to
-    Markdown. The Console's Markdown save refuses every file under the archive
-    folder. The user's own tools can still change the archived Markdown, and no
-    such change reaches the DOCX. The old Markdown stays in git history, and
-    nothing rewrites history. A promotion into a book folder (C2-19) runs the
-    import for a Markdown story file or is refused. A promotion of a playground
-    DOCX is refused in version 1.17.
-  - Agents get a format map: for each mapped folder and story file, its format,
-    scope and where it lives, archived files, flagged files and pending imports
-    included.
-  - The import and new story files ship closed. They open only after four things.
-    The editor ships. The human has set the writing store's remote, and the stack
-    has checked that it can push there. Agents can read committed DOCX story files
-    through the lookups and cite them (REQ-LIB-5, REQ-LIB-6). Any earlier agent
-    system that writes the user's files has stopped, which for Case 2 is the
-    Hermes retirement (#423 step 5). So the import itself never cuts agents off
-    from a chapter, the chapter's current text never lives only on the stack's
-    host, and no second system writes the story. The first import of a real user's
-    books waits for Jason's go.
-  (Q235, Q236, Q237: P1 to P6. Q222 for the setting. O2 design D10 to D12.
-  Version 1.17.)"
-
-### New REQ-LIB-9
-
-This bullet goes after REQ-LIB-8.
-
-"- **REQ-LIB-9.** The Console's DOCX editor. The human edits a DOCX story file in
-  the Console's editor, in a split pane with the agent chat alongside it. The
-  human can pin an agent chat to a document. The human can select a word,
-  right-click it, and choose a synonym from a thesaurus. Only a human saves. Saves
-  happen on their own while the human types (Q226), at intervals only a human
-  changes, and each accepted save is one commit with the human as author, pushed
-  as REQ-LIB-4 says. A save made against an older version than the current one is
-  refused. Agents never write a DOCX. Versioning is the editor's tracked changes
-  plus one git commit per save. The editor's code is vendored and pinned, with a
-  hash per file and the licenses that its independent security review accepted. At
-  runtime the editor loads only files that the stack itself serves, and it
-  requests nothing from any other host. The editor's frame sends exactly the
-  content security policy Jason approved in Q234, and the WebUI shell's own header
-  is unchanged. REQ-PROJ-3's project docs editor is unchanged. (Q195, Q226, Q234,
-  Q236. O2 design D3, D4, D6, D8, D10, D13, D14, D16 and D22. Version 1.17.)"
-
-### Version 1.17 notes
-
-Added after the 1.16 notes:
-
-"- Version 1.17:
-  - Jason confirmed the reading 'for now (subject to future change)' (Q237). The
-    rulings stand until he revises them.
-  - The 10-27 Case 2 release ships on Markdown as built (P6). The 1.11 line 'The
-    Case 2 MVP for 10-27 is the Markdown library (#416). The WYSIWYG editor (Q195,
-    Q196) is an add-on that doesn't gate it.' still holds. Conversion opens after
-    10-27, and only once REQ-LIB-8's four conditions are met. The editor ships,
-    the writing store's remote is set and the stack has checked that it can push
-    there, agents can read and cite committed DOCX story files through the
-    lookups, and Hermes is retired, which is #423 step 5.
-  - The 1.12 note says five bus write and Console editor rows, C2-02, C2-03b,
-    C2-11a, C2-11b and C2-19, don't gate 10-27. Jason's Q226 F42 later moved
-    C2-02, C2-03b and C2-11b into the 10-27 slice. The Case 2 design brings C2-11a
-    in with them, because C2-11b needs it. C2-19 stays outside the slice. Mos's
-    reading of F42 is that C2-02 and C2-03b now gate 10-27, because design 9.2
-    puts them in 'the smallest slice that lets her start'. C2-11a and C2-11b are
-    slice rows that still don't gate 10-27, because the editor is the Q195 add-on.
-    The DOCX change in 1.17 leaves this slice as it is, and C2-11b's Markdown
-    editor never edits a converted story file.
-  - Q236 narrows Q176's editor choice to DOCX for story files (REQ-LIB-9). The
-    1.12 note that the Case 2 design keeps Obsidian now holds only for Markdown
-    files, including story files not yet imported. A DOCX story file is edited
-    only in the Console's editor under REQ-LIB-9.
-  - This replaces two parts of the O2 design at 25c09f19f. The superseded-notice
-    proposal from Fenton's F1 in D12 is withdrawn, and the
-    keep-Markdown-at-its-path model of D11 is replaced. Gyro's rewrite of the O2
-    design for Vikunja 571, landed on `refactor` at b99ca86b9, carries the
-    details, and where it differs from this text, this text holds:
-    - the import and archive steps, the mark, and the new bus step;
-    - links from supporting files to a moved chapter;
-    - the DOCX reader;
-    - the user's unpushed or later changes to an archived file or at its old path,
-      and pushing and closing the file in Obsidian before each import;
-    - the writing store's remote in W4 section 7.3, which replaces the no-remote
-      and no-backup rule that W4 section 7.4 held before the rewrite, at
-      062646487;
-    - import events counted by a bus restore, and recovery when a bus restore or a
-      restore of the whole host predates an import;
-    - manifest order for the manuscript lookup and its next chapter;
-    - `library.convert` kept out of `ACTIONS`, out of the hard-wait note and out
-      of the pinned `GATED_ONLY` list in packages/business/src/vocabulary.mjs.
-  - Agents read a converted story file through the Case 2 lookups under the same
-    project and universe access as Markdown canon, in any thread or room. W4's
-    earlier O2-only conversations, per-document grants and per-send sharing don't
-    gate these lookups. The 571 rewrite replaced them in W4 sections 7.1 and 7.2.
-    The creative tool list in REQ-LIB-6 doesn't change.
-  - The six creative role contracts row 213 landed say 'Every item cites the
-    lines of the user's material it is about'. A build row under 571 changes that
-    line for DOCX story files (REQ-LIB-6).
-  - A new Markdown file in a book folder is still canon in 1.17. The 1.17
-    exception is a file at a converted file's old path, which REQ-LIB-2 makes
-    unmapped.
-  - Story files convert whether canon or playground. Type-folder and supporting
-    files stay Markdown.
-  - Measured 2026-10-23 at about 01:21Z: the Case 2 user's library repository
-    tracks 213 files, 203 of them Markdown, and none is a .docx or .doc. It has no
-    untracked files. The user's .doc files (Q196) are outside it. So the landed
-    code has no DOCX there to report as unreadable at 10-27.
-  - Text replaced in 1.17, kept here as in earlier notes:
-    - Creative library lead, the 1.16 sentence: "The library is the user's own
-      writing repository."
-    - REQ-LIB-2, the 1.16 sentences: "A file's scope comes from its path alone,
-      prefixes first: a Markdown file under a supporting prefix is supporting,
-      one under a playground prefix at any level is playground, any other
-      Markdown file in a book folder is canon, and everything else is unmapped
-      and never returned. A folder in both lists is supporting." "Lookups return
-      canon unless the caller asks for playground or supporting." "so an agent
-      can't cite a playground or supporting file as canon" "The Console shows
-      each cite's scope."
-    - REQ-LIB-4, the 1.16 sentences: "The user commits and pushes with their own
-      tools, today Obsidian with obsidian-git." "Agents read only the mirror's
-      served commit and never hold a copy of their own, so they see the user's
-      push within about a minute."
-    - REQ-LIB-5, the 1.16 sentence: "The user sees them in Obsidian's graph and
-      backlinks." A converted chapter's connections show in Obsidian only as they
-      stood at conversion, and the Console's Connections view shows their
-      current links.
-    - REQ-LIB-6, the 1.16 sentence: "A reply may cite lines of the repository at
-      a commit or pages the agent fetched, and the broker checks every citation
-      before it stores the message."
-    - REQ-LIB-1 only gains sentences.
-  - REQ-LIB-3's text and REQ-LIB-7 are unchanged. REQ-LIB-8 adds one form of
-    exclusion REQ-LIB-3 doesn't have: naming a DOCX document by its id. A path
-    exclusion also covers DOCX documents, through a converted file's old path or a
-    whole book folder. An archived file and a DOCX document keep a universe, and a
-    book where their source has one, so every lookup still names one universe.
-    REQ-PROJ-3, the Console editor for a project's spec and docs, is unchanged.
-    C2-11b opens the library's Markdown files in that same editor.
-  - In `packages/tasks/requirements.json` the titles of REQ-LIB-1, REQ-LIB-2 and
-    REQ-LIB-4 change, and those of REQ-LIB-5 and REQ-LIB-6 stay. REQ-LIB-1 becomes
-    'A human-set library maps the user's repository onto universes, books, types,
-    playgrounds, supporting and archive folders'. REQ-LIB-2 becomes 'Scope comes
-    from the path or a DOCX's source, lookups default to canon, and only canon
-    files are ever cited as canon'. REQ-LIB-4 becomes 'Git holds every change. The
-    bus fast-forwards a read-only mirror every 60 seconds, the one place agents
-    read Markdown'. REQ-LIB-8 and REQ-LIB-9 add two ids, so the count goes from 85
-    to 87. REQ-LIB-8 is titled 'Case 2 story files become DOCX by a human-only
-    one-way import or in the editor; Markdown stays for notes and docs', and
-    REQ-LIB-9 'The Console's DOCX editor: only a human saves, each save is one
-    commit, and the editor code is vendored and pinned'.
-  - Open points O1 to O4 of draft 1 were ruled by Mos in mos-1367 B1 to B4.
-  - Sage files the build rows under Vikunja 570 and 571 after the rewrite is
-    approved. This amendment adds the requirements only."
-
-### Risks
-
-The new lines go at the end of "## Risks and open questions", after the bullet
-that begins "Trusted mode lets an agent" and before the "## Milestones" heading.
-- "A DOCX file is a zip archive, so git can't show a line diff of a chapter.
-  Review of a story change goes through the editor and the committed reader,
-  not `git diff`. (Version 1.17.)"
-- "A converted chapter's DOCX is not in Obsidian's graph. Obsidian shows the
-  chapter only through its archived Markdown, and no DOCX edit reaches that file's
-  links. The DOCX's current links show in the Console's editor and its
-  Connections view, and no graph shows them yet. (Version 1.17.)"
-- "Conversion can't be undone in place. Front matter, wiki link forms and
-  unsupported blocks may not survive it, and the mirror can't refuse the user's
-  push to an archived file. The controls are the fidelity report, the human's
-  confirmation, an untouched original on refusal, and the kept archive.
-  (Version 1.17.)"
-- "A restore of the stack's bus alone from a backup taken before an import drops
-  the import's logged events, while the archive commit and the DOCX stay. A
-  restore of the stack's whole host from such a backup also takes the writing
-  store and the host's import records back to before the import. The archive
-  commit stays in the user's Gitea repository and the DOCX stays on the writing
-  store's remote, but the host keeps no record of the import. A bus restore counts
-  import events, and the import's recovery covers both cases (Vikunja 571).
-  (Version 1.17.)"
-
-## d9 changes (Q239 and Webby round 5)
-
-- J-b yes (Q239, mos-1467), in the five edits mos-1443 R3 set for a yes (Webby round 6 B1). R3.1: REQ-LIB-5's replacement gains the Connections view sentence after "no graph shows them yet.". R3.2: the graph Risks line ends with the editor and the Connections view. R3.3: the A6 line moves from "Not taken" under A6. R3.5: the REQ-LIB-5 note ends with the Connections view, which drops "until a Console view of their links exists" and "Q226 records that view as a later option". R3.4 is Gyro's design edit at 767bb62c7 (writing-editor.md:188-190, :240-244 and :1272, docx-citations.md:66), and it follows in his docs round. Beyond these and N21, nothing else in the PRD text changes.
-- N19 and N20 (Webby round 6): J-b's question text is in the past tense, and the line that the import doesn't wait for the view is cited as Mos's R3 default. Mos confirmed it at his J-b check (mos-1470).
-- N21 (Webby round 6, Mos yes in mos-1470): REQ-LIB-5's version tag cites Q239 for the Connections view beside Q222 for the two settings.
-- N15: the D7 landing line gives R8's wording beside the impact map's quote.
-- N16: the d7 changes line notes that R8 replaces "no agent credential reaches it" in d8.
-- N17: the REQ-LIB-2 Replace quote and the REQ-LIB-8 old-path bullet are rewrapped under 82 columns. Their words are unchanged.
-
-## d8 changes (Mos's d8 fix list, check wf_63bba879-180)
-
-- R1: REQ-LIB-4's tail covers DOCX saves, which agents see at their next lookup after the editor reports them as committed. The notes quote the whole 1.16 sentence. Source: nit/jason/F10.
-- R2: REQ-LIB-4's new title says the mirror is "the one place agents read Markdown". Source: decisions.n14.
-- R3: J-b asks whether 1.17 requires the Console Connections view, with Mos's recommendation of yes. Sources: mos1372/F9, jason/F2, anchors/F5.
-- R4: C2-02 and C2-03b gate 10-27, C2-11a and C2-11b are slice rows that don't, and "F42 wins" is gone. New J-k. Sources: anchors/F6, jason/F5.
-- R5: where the landed 571 design differs, this text holds. Sources: anchors/F8, adversarial/F8 item 1, jason/F8, critic/C6, G16's design follow-on.
-- R6: `library.convert` stays out of `ACTIONS`, and REQ-WAIT-1's hard-wait list doesn't change. Sources: gyro571/F1, adversarial/F8 item 3, critic/C6.
-- R7: a repository on the stack's host never counts as the writing store's remote, and Item 2 says so. Sources: mos1372/F2, adversarial/F1, gyro571/F2.
-- R8: "no agent credential reaches it" becomes "no agent can reach it with any credential". Source: Fenton's B1 under mos-1379.
-- R9: no playground DOCX becomes canon in 1.17, and a promotion of one is refused. New J-i. Sources: mos1372/F8, adversarial/F2.
-- R10: REQ-LIB-9 restates Q195's pin and right-click thesaurus, and its cite gains D4 and D22. Source: critic/C4.
-- R11: REQ-LIB-9's license bar is the licenses its independent security review accepted. New J-l. Source: critic/C3.
-- R12: no text for D16's narrow-window tabs. Mos records that reading in STATE. Sources: jason/F1, second verifier vote.
-- R13: no lookup returns a file's archived copy before publication. Source: adversarial/F5 part 3.
-- R14: a restore of the whole host from a backup taken before an import is a fourth recovery case. Source: adversarial/F6.
-- M1: REQ-LIB-4's writing-store sentences follow the later bus rows sentence and add the off-host remote rules and DOCX read timing. The note quotes both 1.16 sentences. Sources: mos1372/F2, adversarial/F1, gyro571/F2, anchors/F4, nit/jason/F10, adversarial/F5 part 1, Fenton B1.
-- M2: REQ-LIB-8's order bullet adds the remote's confirmation, the old-path read rule and "archive push". Sources: mos1372/F2 and the other remote findings, mos1372/F7, adversarial/F5 parts 2 to 4.
-- M3: REQ-LIB-8's gate bullet has four conditions, adding the remote. Sources: the remote findings, critic/C1 and C2 edit 2.
-- M4: the 1.17 note on when conversion opens restates the four conditions and drops W4b. Sources: jason/F5, the remote findings.
-- M5: Item 2 rewritten with the remote rules. Sources: the remote findings.
-- M6: the 1.12 gating note rewritten. Sources: anchors/F6, jason/F5.
-- M7: REQ-LIB-9 gains the split pane, the pin, the thesaurus, the license bar and the runtime load rule, and cites more of the design. Sources: jason/F1, critic/C4, critic/C3, nit/anchors/F12, nit/gyro571/F9.
-- M8: REQ-LIB-2, the one-way bullet and the C1 note keep a playground DOCX out of canon in 1.17. Sources: mos1372/F8, adversarial/F2.
-- M9: REQ-LIB-5 says what the reader can't read, and the import turns web links into plain text. New J-j. Sources: critic/C1, critic/C2.
-- M10: an exclusion of a whole book folder covers that book's DOCX documents. Source: adversarial/F3, with B5.
-- M11: the human-verbs sentence and the 571 list item name `library.convert` and REQ-WAIT-1. Sources: gyro571/F1, adversarial/F8 item 3, critic/C6.
-- M12: J-b rewritten. Sources: mos1372/F9, jason/F2, anchors/F5, gyro571/F3, critic/C6.
-- M13: J-d puts the agent read model to Jason as his call. Source: mos1372/F1.
-- M14: Status moves to version 1.17 and names REQ-LIB-9. Sources: anchors/F2, mos1372/F4, critic/C7.
-- M15: the 1.17 source line quotes Q235 in full (mos-1446) and the REQ-LIB-9 sources, at b99ca86b9. Sources: critic/C5, anchors/F9, jason/F8 pin part, nit/gyro571/F8, critic/C6 pin part.
-- M16: the 571 list lead names the two replaced design parts and the landed design. Sources: anchors/F9, anchors/F8, adversarial/F8 item 1, jason/F8, critic/C6.
-- Landing swap: Gyro's docs round for R5, R6 and R14 landed as b99ca86b9 (Fenton fenton-0015), so M15 and M16 cite b99ca86b9 in place of 767bb62c7, as the d8 fix list's header says. J-b keeps 767bb62c7 for its line numbers.
-- M17: W4 section numbers in the remote item and the lookups note. Sources: gyro571/F5, nit/adversarial/F11.
-- M18: the D7 landing line. Sources: gyro571/F5, the remote findings.
-- M19: a logged event for each import stage, in REQ-LIB-8 and A2. Source: gyro571/F7.
-- M20: the Risks line on restores adds the whole-host case. Sources: adversarial/F6, gyro571/F7.
-- M21: the 571 restore item adds the whole-host case. Source: adversarial/F6.
-- M22: the graph Risks line and the REQ-LIB-5 note name a Console view. Sources: anchors/F5, jason/F2.
-- M23: the d6 B3 line drops "F42 wins". Source: anchors/F6.
-- M24: new Markdown in a converted book, with the old-path and playground exceptions. Source: mos1372/F6.
-- M25: J-c's last sentence is Mos's reading. Source: mos1372/F10.
-- M26: J-h rewritten with the D13 defaults. Source: jason/F3.
-- M27: Item 4 rewritten. Sources: jason/F4, gyro571/F4, decisions.unmarked_folders.
-- M28: the "Not taken" note on unmarked folders. Sources: jason/F4, gyro571/F4, decisions.unmarked_folders.
-- M29: the import refuses an unmapped file. Sources: gyro571/F4, decisions.unmarked_folders.
-- M30: placement notes for REQ-LIB-8, REQ-LIB-9 and the Risks lines. Sources: anchors/F3, nit/anchors/F14.
-- M31: REQ-LIB-4's title and the D11 landing line. Source: decisions.n14.
-- M32: the Q236 note limits the 1.12 Obsidian note to Markdown files. Source: critic/C8.
-- M33: the exclusion note adds path exclusions of DOCX documents. Source: anchors/F7.
-- M34: A9 moves from "Mine" to the impact-map list. Source: decisions.exclusion_by_id.
-- M35: the D5 landing line. Sources: anchors/F10, mos1372/F5, nit/adversarial/F12.
-- M36: the D9 and D14 landing lines. Source: mos1372/F1.
-- M37: the O1 and C3 notes add the off-host remote and its confirmation. Sources: the remote findings.
-- M38: the REQ-PROJ-3 note. Source: nit/anchors/F11.
-- M39: REQ-LIB-5's freshness sentence keys on the editor reporting a save as committed. Source: nit/adversarial/F9.
-- M40: REQ-LIB-6 bars agent requests for a conversion and allows a suggestion in chat. Source: nit/jason/F9.
-- M41: REQ-LIB-2's opening and old-path rule, and the "Mine" note. Source: nit/adversarial/F10.
-- M42: REQ-LIB-8's lead sentence on Markdown story files. Source: nit/mos1372/F12.
-- M43: REQ-LIB-6's citation sentence. Source: nit/anchors/F13.
-- M44: REQ-LIB-5's version tag uses plain quotes. Source: nit/anchors/F15.
-- M45: reference codes B5, D12, D10 and B4 name their source. Source: nit/mos1372/F11.
-- Files the row would own: four files, with the id count going to 87. Sources: anchors/F1, adversarial/F4, decisions.n14 F4.
-
-## d7 changes (mos-1379, Fenton's 571 B2)
-
-- REQ-LIB-5 gains Mos's three sentences after the extracted-text sentence. The text agents read has tracked changes accepted. Comments, and text with tracked deletions shown, each wait for a setting only a human turns on, off by default. Its version tag cites Q222 for the two settings, which is the only text here beyond Mos's.
-- J-d gains Mos's sentence on comments and tracked deletions.
-- Fenton's B1 is design only. d6's "no agent credential reaches it" holds (R8 replaces it in d8), and the shared helper stays #431.
-
-## d6 changes (Webby round 3, webby-0207)
-
-- B1: titles for REQ-LIB-8 and REQ-LIB-9 in the requirements.json note and the file list. REQ-LIB-9 takes Webby's title. REQ-LIB-8 keeps mine, because Webby's ("...one-way import that archives the Markdown under its old path") leaves out D2's story files started in the editor.
-- B2: REQ-LIB-2 makes a Markdown file at a converted file's old path unmapped, ahead of the playground and canon rules, so a playground conversion is covered too. REQ-LIB-8's old-path bullet says "neither canon nor playground".
-- B3: the slice note names Q226 F42's three rows (C2-02, C2-03b, C2-11b). C2-11a joined the slice with C2-11b, because C2-11b needs it. Both are slice rows that don't gate 10-27, as design 9.2, case2-rows.md:1655 and the impact map's A57 say. The 'F42 wins' sentence is gone from the note in d8, so no queue change follows from it.
-- N10: the cite-scope replacement is scoped to REQ-LIB-2. The 1.14 note's copy stays.
-- N11: the notes say REQ-LIB-8 adds the by-id exclusion form REQ-LIB-3 doesn't have.
-- N12: J-h marks the autosave intervals for Jason.
-- N13: J-b names REQ-LIB-5's "Connections are always visible" tag and Q226's "another way to handle the visual brain map".
-- N14, not taken: REQ-LIB-4's title stays internal F3's text, as mos-1372 D11 ruled. Webby's alternative, "...and agents read Markdown from it alone" (120 chars), is Mos's call.
-
-## Where each mos-1372 item landed
-
-- D1: REQ-LIB-2's DOCX sentences, the REQ-LIB-8 lead and import bullet, C1 above, and the notes. "Playground files stay Markdown in 1.17" is gone.
-- D2: REQ-LIB-2's "for one the human starts in the editor" and the REQ-LIB-8 new-story-file bullet. The universe-and-book note is now true.
-- D3: the REQ-LIB-8 order bullet. This also settles N8.
-- D4: REQ-LIB-8's one-way bullet, which carries the archive refusal and consequence F2's text, and the 571 list item.
-- D5: it landed in REQ-LIB-2's "a Markdown file at a converted file's old path is unmapped" in Webby's B2 form, and in the REQ-LIB-8 old-path bullet.
-- D6: REQ-LIB-5's freshness sentences.
-- D7 and mos-1375: REQ-LIB-4's remote sentences, the remote step in REQ-LIB-8's order bullet, the fourth opening condition and the 1.17 note on when conversion opens, plus the 571 list item on W4 section 7.3, which replaces the no-remote rule of the old W4 section 7.4. The impact map's item 2 adds "only the stack's host pushes, and no agent credential reaches it", which R8 words in d8 as "no agent can reach it with any credential".
-- D8: the REQ-LIB-5 replacement, the import bullet's wiki-link sentence, the Risks line, the note quoting the old sentence, and "REQ-LIB-1 only gains sentences".
-- D9: the 1.17 note that agents read a converted story file through the Case 2 lookups, from the d4 check's consistency B2, and J-d, which puts the read model to Jason as his call.
-- D10: the d4 check's B5 sentence, in REQ-LIB-8.
-- D11: internal F3's clause in the REQ-LIB-4 section, and in the notes the title as Mos amended it for N14.
-- D12: the whole 1.16 sentence replaced, and quoted in full in the notes.
-- D13: consequence F1's text, in REQ-LIB-4 and REQ-LIB-8's first bullet.
-- D14: the row text from the d4 check's consistency B1, in the mark-and-move bullet and C3 above.
-
-## What d5 adds beyond mos-1372 (for Webby and Mos to check)
-
-From the impact map, folded as mos-1368 item 1 asked:
-- A1: the Console shows a cite's format and converted state (REQ-LIB-2).
-- A2: the logged events and the several-humans setting, default owner only, under Q222.
-- A3: the import is outside the vocabulary, the hard-wait list is unchanged, and the archive move isn't `data.delete`. The C6 code site is in the 571 list.
-- A4: the section lead and REQ-LIB-1's writing-store sentence.
-- A6: format and location in every answer, extracted text with DOCX locators, links across formats.
-  - A6's named chapter-links view. D8 took B8's "no graph shows them yet", and J-b put the view to Jason. His O2 (Q239) takes it in d9 as REQ-LIB-5's Connections view (mos-1443 R3).
-- A7: read-only extends to the store and the archive, no agent action on a story file in any format, no agent DOCX write, and role contracts state the formats. C1's role contract line is a 571 build item.
-- A8: the DOCX cite shape, and a cite naming an archived file as current is refused.
-- A9: a hybrid sees a source's DOCX canon through REQ-LIB-2's source scope, and REQ-LIB-8 lets an exclusion name a DOCX document by its id. The id form lets the human exclude a single DOCX started in the editor, which has no old path. An archived file isn't canon, so no hybrid sees it.
-- A10: REQ-LIB-9, so the count is 87, not 86.
-- A11: the Hermes gate, from item 3.
-- A12: the C2-19 promotion sentence.
-- A13: the broker's path check treats the archive folder as story.
-- A14 and C5: two Risks lines.
-- A15: the flagged-new-file bullet. It sits beside the note from the d4 check's B4, "a new Markdown file in a book folder is still canon". The file stays canon and is offered for import.
-- A16: three titles change and two stay.
-- C2: manifest order for the manuscript lookup.
-- F3: the C2-02 gating note.
-- F4: Mos's measurement.
-
-Mine, beyond either source:
-- REQ-LIB-2 opens "A Markdown file's scope comes from its path and from past imports". DOCX scope comes from the source, so "a file's" would be false.
-- REQ-LIB-9's autosave sentence. It is Mos's reading of F41's "instantly committed", with human-set intervals. The exact intervals stay in the design.
-
-Not taken:
-- Impact map item 4's "files in unmarked folders are eligible one at a time", for folders outside every book folder and playground only. Their files are unmapped under REQ-LIB-2, so a DOCX made from one would have no universe or book to keep. The human maps such a folder into a book folder or a playground first, under REQ-LIB-1. A file in an unmarked folder inside a book folder or a playground is canon or playground, and the import takes it one file at a time.
-
-## Marked for Jason (additions in the text he sees)
-
-- J-a. Whether "We will not run the systems in parallel" applies per chapter or as one switch per book. His call. As written, it applies per chapter.
-- J-b. A converted chapter's DOCX is not in Obsidian's graph. Obsidian shows the chapter only through its archived Markdown, and no DOCX edit reaches that file's links. REQ-LIB-5 still cites two TARGET lines, "Visualization of data via Obsidian or equivalent is required" and "Connections are always visible". Mos's reading was that 1.17 as d8 wrote it met neither line for converted chapters. Their current links showed to the user only as clickable text inside the editor, and no graph or list showed them. Q226 leaves room for "another way to handle the visual brain map". The O2 design that landed for Vikunja 571 at 767bb62c7 held a Console Connections view and its tests as later work that waited for this answer. His call was whether 1.17 requires that view. As d8 was written, it did not. Mos recommended that it does, because impact map A6 says "Recommended: name the view" and TARGET says "Connections are always visible". Jason answered O2 (Q239): 1.17 requires the view. d9 writes it into REQ-LIB-5, its note and the Risks line, in the text of mos-1443 R3. The view comes with the conversion work after 10-27, and the 10-27 Case 2 release stays on Markdown (Q235 P6, Q237). That the import does not wait for the view is Mos's default in mos-1443 R3. Q239 doesn't address it, and Mos confirmed it at his J-b check (mos-1470).
-- J-c (mos-1374): "The store pushes to a remote (D7), and the Case 2 VM is in the nightly PBS backup. For a fixed restore point before her first real import, a manual backup of VM 1012 with PBS protect runs first. That step is reversible and needs no reboot." Mos's reading is that this sits inside the P5 go step, so it needs no new question.
-- J-d. How agents read a converted chapter, D9. His call. As written, an agent reads it through the ordinary Case 2 lookups in any thread or room, under the same project and universe access as Markdown canon. This is Mos's reading of F41 and REQ-LIB-7. The other choice is the model in the earlier O2 design, W4 sections 7.1 and 7.2. Under it, an agent reads a converted chapter only in a new writing conversation that holds one human and one agent, only after the business owner grants that agent access to that document, and by default only what the human attaches to each message. Comments and tracked deletions stay hidden from agents until a human turns on a setting for each. Markdown has neither, so the default keeps agents at the access Markdown gives them. Those two sentences are Mos's ruling mos-1379. A yes to the text as written settles it.
-- J-e. Versioning means the editor's tracked changes plus one git commit per save.
-- J-f. A converted chapter can be edited only in the Console while the stack is reachable. Obsidian no longer edits it offline.
-- J-g. The import takes Markdown only. Importing .doc files stays a separate task.
-- J-h. Autosave under REQ-LIB-9. Jason's Q226 F41 says "All changes are instantly committed and available to the agents." Mos's reading, recorded with that ruling, is "Each save is a commit at once, and agents read it at their next lookup." At the O2 design's D13 defaults, a save commits at most 2 seconds after a pause in typing or 15 seconds into steady typing, with no human action needed. Mos's reading in mos-1359 counts that delay as "instantly committed". Only a human changes the intervals. The PRD names no values, and the defaults stay in the design. Whether a delay of seconds fits his word "instantly" is his call, so this is marked for him.
-- J-i. In 1.17 a playground story that is DOCX can't become canon. That covers a playground Markdown file the human imports, a story the human starts in a playground in the editor, and the DOCX of a draft universe after it is made real. Today Melanie promotes a playground file by moving it into a book folder in Obsidian, and a DOCX in the writing store can't be moved that way. She can start a new story in the book and paste the text in, but it gets a new document id and the playground copy keeps the history. A later version adds DOCX promotion with C2-19, which comes after the slice.
-- J-j. Web links, text boxes and fields in a converted chapter. Jason's Q226 F41 says "All changes are instantly committed and available to the agents." The reader in this version can't read a web link, a text box, a field or hidden text. As written, the import turns each web link into plain text that keeps its label and address, and the human confirms that in the fidelity report. A web link that can't be kept safely as plain text refuses the import. If a later edit adds one of these, the save keeps it and the editor warns the human. Agents then get none of that part's text until a save takes it out.
-- J-k. The 1.12 note Jason approved says bus writes, C2-02 and C2-03b, don't gate 10-27. His Q226 "F42: ok" moved them into the 10-27 slice, and design 9.2 counts them in the smallest slice that lets Melanie start. Mos reads that as making them gate 10-27. The editor rows C2-11a and C2-11b still don't gate it, per his Q195 words "we need to get it moving as an add-on".
-- J-l. REQ-LIB-9 does not use REQ-PROJ-3's "permissive license" bar. It takes the licenses that the editor's independent security review accepted, because that review cleared fonts under the SIL Open Font License and the Ubuntu Font License, which not every reader counts as permissive. Mos's reading.
-
-Marked as changes beyond P1 to P6, from the impact map (Q17, item 5):
-- A1 (archived scope and canon cites)
-- A2 (the conversion requirement, REQ-LIB-8)
-- A3 (outside the vocabulary, hard-wait list unchanged)
-- A6 (lookups across formats)
-- A7 (agent bounds)
-- A8 (DOCX cites)
-- Item 2 and mos-1375: each writing-store commit is pushed to a remote off the stack's host. Only a human sets it, it starts unset, and a repository on the stack's host doesn't count. Only the stack's host pushes to it, and no agent can reach it with any credential. Import and new story files stay closed until the remote is set and checked, and each import's archive push waits until the remote holds the DOCX commit. This keeps "Git is used for all changes -- local and remote" true for DOCX chapters.
-- Item 3 (the Hermes gate)
-- Item 4. Canon and playground story files convert one file at a time, including files in unmarked folders inside a book folder or a playground. Type-folder and supporting files stay Markdown. A story file outside every book folder and playground has no universe or book, so it converts only after a human maps its folder into a book folder or a playground. The mapping step is Mos's reading of P1 and Q30.
-
-The F4 measurement goes with them.
-
-## Files the row would own
-
-The id count goes from 85 to 87. 1.16 owned three files because its count stayed at 85. Like 1.13, the last version that added ids, the row owns four files:
-- `docs/prd/mosaic-stack.md`
-- `packages/tasks/requirements.json`: the version 1.17, the two new ids REQ-LIB-8 and REQ-LIB-9 with their titles, and the changed titles of REQ-LIB-1, REQ-LIB-2 and REQ-LIB-4. The new ids go after REQ-LIB-7 and before REQ-INST-1, in the same order as the PRD's bullets.
-- `packages/tasks/tests/requirements.test.mjs`: the version pin 1.17, the id count of 87, and the duplicate-id message, which goes from `requirements[85].id: REQ-ROLE-1 twice` to `requirements[87].id: REQ-ROLE-1 twice`.
-- `packages/bus/tests/requirements.test.mjs`: the list length, which goes from 85 to 87.
-
-The gate would match 1.16's:
-1. A reviewer approves the text.
-2. Jason says yes to the exact text through Mos.
-3. Both `requirements.test.mjs` files, in `packages/tasks/tests` and `packages/bus/tests`, and every `scripts/test-*.sh` that reads the PRD or `requirements.json` are green on Sage's gate.
-4. Mos gets the landing commit.

agents/sage/work/prd-1-17/d8-to-d9.diff

@@ -1,132 +0,0 @@
---- DRAFT-d8.md	2026-10-23 06:16:54.374694135 -0500
-+++ DRAFT-d9.md	2026-10-23 10:40:54.806553704 -0500
-@@ -1,6 +1,6 @@
- # PRD 1.17 draft: Case 2 story files are DOCX (Q235 to Q237, P1 to P6)
- 
--Sage, 2026-10-23, for mos-1366 item 1 and Vikunja 570. Draft 8. It is d7 plus Mos's d8 fix list mos-1443 (see "d8 changes"). d7 is d6 plus Mos's ruling mos-1379 on Fenton's 571 B2 (see "d7 changes"). d6 is d5 with Webby's round 3 (webby-0207) fixed: B1 to B3 and N10 to N13, with N14 left for Mos (see "d6 changes"). d5 folds in:
-+Sage, 2026-10-23, for mos-1366 item 1 and Vikunja 570. Draft 9. It is d8 plus Jason's Q41 answer O2 (DECISIONS Q239, mos-1467), which makes J-b yes, Webby's round 5 N15 to N17 (webby-0210) and Webby's round 6 B1, N19 and N20 (webby-0212) (see "d9 changes"). d8 is d7 plus Mos's d8 fix list mos-1443 (see "d8 changes"). d7 is d6 plus Mos's ruling mos-1379 on Fenton's 571 B2 (see "d7 changes"). d6 is d5 with Webby's round 3 (webby-0207) fixed: B1 to B3 and N10 to N13, with N14 left for Mos (see "d6 changes"). d5 folds in:
- - Mos's d4 check ruling mos-1372 (D1 to D14; D15 was dropped).
- - mos-1374, which replaces J-c.
- - The impact map mos-1368 (jason-master-restart d183246, `projects/mosaic-mvp/case2-docx-impact-map.md`: A1 to A16, critic items C1 to C6, items 2 to 7).
-@@ -103,10 +103,11 @@
- 
- ### REQ-LIB-2
- 
--Replace "A file's scope comes from its path alone, prefixes first: a Markdown file
--under a supporting prefix is supporting, one under a playground prefix at any level
--is playground, any other Markdown file in a book folder is canon, and everything
--else is unmapped and never returned. A folder in both lists is supporting." with:
-+Replace "A file's scope comes from its path alone, prefixes first: a Markdown
-+file under a supporting prefix is supporting, one under a playground prefix at
-+any level is playground, any other Markdown file in a book folder is canon, and
-+everything else is unmapped and never returned. A folder in both lists is
-+supporting." with:
- 
- "A Markdown file's scope comes from its path and from past imports, prefixes
- first: a Markdown file under the archive folder is archived, one under a
-@@ -191,10 +192,13 @@
- Replace "The user sees them in Obsidian's graph and backlinks." with "The user sees
- a Markdown file's links in Obsidian's graph and backlinks. A DOCX story file's
- wikilinks stay clickable in the Console's editor (O2 design D11), and no graph
--shows them yet."
-+shows them yet. The Console's Connections view lists the current links and
-+backlinks of each story file the user may see, in both formats, with each one's
-+scope and format."
- 
- Version tag: 'and "Connections are always visible".)' becomes 'and "Connections
--are always visible". Version 1.17, with Q222 for the two settings.)'
-+are always visible". Version 1.17, with Q222 for the two settings and Q239 for
-+the Connections view.)'
- 
- ### REQ-LIB-6
- 
-@@ -273,8 +277,9 @@
-   - Each stage of an import writes a logged event. The import's record on the
-     stack's host names the source file's path, commit and blob and the new
-     document id, and each event points to that record.
--  - After a conversion, a Markdown file at the converted file's old path is neither
--    canon nor playground. Lookups leave it out, the format map flags it, and the human is told.
-+  - After a conversion, a Markdown file at the converted file's old path is
-+    neither canon nor playground. Lookups leave it out, the format map flags it,
-+    and the human is told.
-   - A new Markdown story file in a book folder that holds converted files stays
-     canon until its import, unless it sits at a converted file's old path or under
-     a playground prefix. The Console flags it and offers the import. Nothing
-@@ -413,8 +418,8 @@
-       push within about a minute."
-     - REQ-LIB-5, the 1.16 sentence: "The user sees them in Obsidian's graph and
-       backlinks." A converted chapter's connections show in Obsidian only as they
--      stood at conversion, until a Console view of their links exists. Q226
--      records that view as a later option.
-+      stood at conversion, and the Console's Connections view shows their
-+      current links.
-     - REQ-LIB-6, the 1.16 sentence: "A reply may cite lines of the repository at
-       a commit or pages the agent fetched, and the broker checks every citation
-       before it stores the message."
-@@ -451,8 +456,8 @@
-   not `git diff`. (Version 1.17.)"
- - "A converted chapter's DOCX is not in Obsidian's graph. Obsidian shows the
-   chapter only through its archived Markdown, and no DOCX edit reaches that file's
--  links. The DOCX's current links show only in the Console's editor until a
--  Console view of them exists. (Version 1.17.)"
-+  links. The DOCX's current links show in the Console's editor and its
-+  Connections view, and no graph shows them yet. (Version 1.17.)"
- - "Conversion can't be undone in place. Front matter, wiki link forms and
-   unsupported blocks may not survive it, and the mirror can't refuse the user's
-   push to an archived file. The controls are the fidelity report, the human's
-@@ -467,6 +472,15 @@
-   import events, and the import's recovery covers both cases (Vikunja 571).
-   (Version 1.17.)"
- 
-+## d9 changes (Q239 and Webby round 5)
-+
-+- J-b yes (Q239, mos-1467), in the five edits mos-1443 R3 set for a yes (Webby round 6 B1). R3.1: REQ-LIB-5's replacement gains the Connections view sentence after "no graph shows them yet.". R3.2: the graph Risks line ends with the editor and the Connections view. R3.3: the A6 line moves from "Not taken" under A6. R3.5: the REQ-LIB-5 note ends with the Connections view, which drops "until a Console view of their links exists" and "Q226 records that view as a later option". R3.4 is Gyro's design edit at 767bb62c7 (writing-editor.md:188-190, :240-244 and :1272, docx-citations.md:66), and it follows in his docs round. Beyond these and N21, nothing else in the PRD text changes.
-+- N19 and N20 (Webby round 6): J-b's question text is in the past tense, and the line that the import doesn't wait for the view is cited as Mos's R3 default. Mos confirmed it at his J-b check (mos-1470).
-+- N21 (Webby round 6, Mos yes in mos-1470): REQ-LIB-5's version tag cites Q239 for the Connections view beside Q222 for the two settings.
-+- N15: the D7 landing line gives R8's wording beside the impact map's quote.
-+- N16: the d7 changes line notes that R8 replaces "no agent credential reaches it" in d8.
-+- N17: the REQ-LIB-2 Replace quote and the REQ-LIB-8 old-path bullet are rewrapped under 82 columns. Their words are unchanged.
-+
- ## d8 changes (Mos's d8 fix list, check wf_63bba879-180)
- 
- - R1: REQ-LIB-4's tail covers DOCX saves, which agents see at their next lookup after the editor reports them as committed. The notes quote the whole 1.16 sentence. Source: nit/jason/F10.
-@@ -535,7 +549,7 @@
- 
- - REQ-LIB-5 gains Mos's three sentences after the extracted-text sentence. The text agents read has tracked changes accepted. Comments, and text with tracked deletions shown, each wait for a setting only a human turns on, off by default. Its version tag cites Q222 for the two settings, which is the only text here beyond Mos's.
- - J-d gains Mos's sentence on comments and tracked deletions.
--- Fenton's B1 is design only. d6's "no agent credential reaches it" holds, and the shared helper stays #431.
-+- Fenton's B1 is design only. d6's "no agent credential reaches it" holds (R8 replaces it in d8), and the shared helper stays #431.
- 
- ## d6 changes (Webby round 3, webby-0207)
- 
-@@ -556,7 +570,7 @@
- - D4: REQ-LIB-8's one-way bullet, which carries the archive refusal and consequence F2's text, and the 571 list item.
- - D5: it landed in REQ-LIB-2's "a Markdown file at a converted file's old path is unmapped" in Webby's B2 form, and in the REQ-LIB-8 old-path bullet.
- - D6: REQ-LIB-5's freshness sentences.
--- D7 and mos-1375: REQ-LIB-4's remote sentences, the remote step in REQ-LIB-8's order bullet, the fourth opening condition and the 1.17 note on when conversion opens, plus the 571 list item on W4 section 7.3, which replaces the no-remote rule of the old W4 section 7.4. The impact map's item 2 adds "only the stack's host pushes, and no agent credential reaches it".
-+- D7 and mos-1375: REQ-LIB-4's remote sentences, the remote step in REQ-LIB-8's order bullet, the fourth opening condition and the 1.17 note on when conversion opens, plus the 571 list item on W4 section 7.3, which replaces the no-remote rule of the old W4 section 7.4. The impact map's item 2 adds "only the stack's host pushes, and no agent credential reaches it", which R8 words in d8 as "no agent can reach it with any credential".
- - D8: the REQ-LIB-5 replacement, the import bullet's wiki-link sentence, the Risks line, the note quoting the old sentence, and "REQ-LIB-1 only gains sentences".
- - D9: the 1.17 note that agents read a converted story file through the Case 2 lookups, from the d4 check's consistency B2, and J-d, which puts the read model to Jason as his call.
- - D10: the d4 check's B5 sentence, in REQ-LIB-8.
-@@ -573,6 +587,7 @@
- - A3: the import is outside the vocabulary, the hard-wait list is unchanged, and the archive move isn't `data.delete`. The C6 code site is in the 571 list.
- - A4: the section lead and REQ-LIB-1's writing-store sentence.
- - A6: format and location in every answer, extracted text with DOCX locators, links across formats.
-+  - A6's named chapter-links view. D8 took B8's "no graph shows them yet", and J-b put the view to Jason. His O2 (Q239) takes it in d9 as REQ-LIB-5's Connections view (mos-1443 R3).
- - A7: read-only extends to the store and the archive, no agent action on a story file in any format, no agent DOCX write, and role contracts state the formats. C1's role contract line is a 571 build item.
- - A8: the DOCX cite shape, and a cite naming an archived file as current is refused.
- - A9: a hybrid sees a source's DOCX canon through REQ-LIB-2's source scope, and REQ-LIB-8 lets an exclusion name a DOCX document by its id. The id form lets the human exclude a single DOCX started in the editor, which has no old path. An archived file isn't canon, so no hybrid sees it.
-@@ -593,12 +608,11 @@
- 
- Not taken:
- - Impact map item 4's "files in unmarked folders are eligible one at a time", for folders outside every book folder and playground only. Their files are unmapped under REQ-LIB-2, so a DOCX made from one would have no universe or book to keep. The human maps such a folder into a book folder or a playground first, under REQ-LIB-1. A file in an unmarked folder inside a book folder or a playground is canon or playground, and the import takes it one file at a time.
--- A6's named chapter-links view. D8 takes B8's "no graph shows them yet", and J-b puts the view to Jason.
- 
- ## Marked for Jason (additions in the text he sees)
- 
- - J-a. Whether "We will not run the systems in parallel" applies per chapter or as one switch per book. His call. As written, it applies per chapter.
--- J-b. A converted chapter's DOCX is not in Obsidian's graph. Obsidian shows the chapter only through its archived Markdown, and no DOCX edit reaches that file's links. REQ-LIB-5 still cites two TARGET lines, "Visualization of data via Obsidian or equivalent is required" and "Connections are always visible". Mos's reading is that 1.17 as written meets neither line for converted chapters. Their current links show to the user only as clickable text inside the editor, and no graph or list shows them. Q226 leaves room for "another way to handle the visual brain map". The O2 design that landed for Vikunja 571 at 767bb62c7 holds a Console Connections view and its tests as later work that waits for this answer. His call whether 1.17 requires that view. As written, it does not. Mos recommends that it does, because impact map A6 says "Recommended: name the view" and TARGET says "Connections are always visible".
-+- J-b. A converted chapter's DOCX is not in Obsidian's graph. Obsidian shows the chapter only through its archived Markdown, and no DOCX edit reaches that file's links. REQ-LIB-5 still cites two TARGET lines, "Visualization of data via Obsidian or equivalent is required" and "Connections are always visible". Mos's reading was that 1.17 as d8 wrote it met neither line for converted chapters. Their current links showed to the user only as clickable text inside the editor, and no graph or list showed them. Q226 leaves room for "another way to handle the visual brain map". The O2 design that landed for Vikunja 571 at 767bb62c7 held a Console Connections view and its tests as later work that waited for this answer. His call was whether 1.17 requires that view. As d8 was written, it did not. Mos recommended that it does, because impact map A6 says "Recommended: name the view" and TARGET says "Connections are always visible". Jason answered O2 (Q239): 1.17 requires the view. d9 writes it into REQ-LIB-5, its note and the Risks line, in the text of mos-1443 R3. The view comes with the conversion work after 10-27, and the 10-27 Case 2 release stays on Markdown (Q235 P6, Q237). That the import does not wait for the view is Mos's default in mos-1443 R3. Q239 doesn't address it, and Mos confirmed it at his J-b check (mos-1470).
- - J-c (mos-1374): "The store pushes to a remote (D7), and the Case 2 VM is in the nightly PBS backup. For a fixed restore point before her first real import, a manual backup of VM 1012 with PBS protect runs first. That step is reversible and needs no reboot." Mos's reading is that this sits inside the P5 go step, so it needs no new question.
- - J-d. How agents read a converted chapter, D9. His call. As written, an agent reads it through the ordinary Case 2 lookups in any thread or room, under the same project and universe access as Markdown canon. This is Mos's reading of F41 and REQ-LIB-7. The other choice is the model in the earlier O2 design, W4 sections 7.1 and 7.2. Under it, an agent reads a converted chapter only in a new writing conversation that holds one human and one agent, only after the business owner grants that agent access to that document, and by default only what the human attaches to each message. Comments and tracked deletions stay hidden from agents until a human turns on a setting for each. Markdown has neither, so the default keeps agents at the access Markdown gives them. Those two sentences are Mos's ruling mos-1379. A yes to the text as written settles it.
- - J-e. Versioning means the editor's tracked changes plus one git commit per save.

agents/scrooge/work/queue-252/BUILD.md

@@ -1,269 +0,0 @@
-# Row 252 build notes: Console inbox Approve and Deny for grant requests
-
-Seat: Scrooge. Reviewer: Webby. Issue #1753, Vikunja #435 (J2).
-Brief: `docs/plans/2026-10-21_console-inbox-approve.md` (blob b41676d06).
-Design: Gander's DESIGN.md at d218e14bd, approved by Webby at 5d8f0f4b5 (webby-0082) with manifest checks N1-N5.
-Base: aca16404c on branch `scrooge/row252`. Rebase onto the row 253 tip under a new branch name once 253 lands.
-
-## Status
-
-- Code, tests and docs are written. No test has been run yet, because Gander holds the gate slot for row 253 run 5 and Sage ruled no node until a CLEAR.
-- Everything in the Results section is empty until that run. Nothing below claims a pass.
-
-## Q188
-
-No agent creates a grant. Approve and Deny are human-only Console actions.
-
-- Only a console cap reaches `decision.preview.console` and `decision.resolve.console`. A console cap reaches nothing else (console-decide `J1, Q188`).
-- The socket refuses a console proof for any other verb before the proof check (`server.mjs`).
-- A console cap binds only through `authenticateConsole`, which needs the console proof (section 2): the same-tree `console-cli.mjs` wrapper, its own nonce, a direct same-tree `serve` parent, and a configured owner subject from the spawn environment.
-- `recordEvent` keeps `human.input` reserved, so no agent writes the record that lets a console close start the executor (console-decide `recordEvent keeps human.input reserved`).
-- A `via console` close without its matching `human.input` approves nothing (console-decide `J14`).
-
-## Manifest checks N1-N5
-
-- **N1.** Every `console.sso` subject is an owner of the business. Name is display only.
-  - `cli/src/config.mjs` carries `{provider, iss, sub}` per subject into the boot as `consoleOwners`. No sso means no key.
-  - `bus/src/runtime.mjs` validates the list (array, at most 512, exactly three non-empty strings each) and passes it to `verifyPrincipal`.
-  - Tests: cli config.test `Row 252 (Webby N1)` and principal.test.
-- **N2.** `human.input` is written in the same transaction, before `#approvedGrant`. The executor starts once, and a deny starts none.
-  - Tests: console-decide `N2, J13` checks the order by seq and that the grant runs once. `J15` checks that a deny starts nothing.
-- **N3.** The close notice comes from `from_run 'human-console'`, and `public/bus.js` shows "via console". `landing` and `#protectedEnd` stay CLI-only.
-  - Tests: console-decide `N2, J13` checks the notice. decide-browser `J17` checks the close-elsewhere line.
-- **N4.** `decision.resolve` is not a Console verb.
-  - `CONSOLE_VERBS` is exactly the two console verbs. The webui serve `BUS_VERBS` read list has no decision verb, and webui `cli.mjs` has no `decision.` string. `consoleCall` refuses anything outside `CONSOLE_VERBS`.
-  - Tests: console-decide `N4`, and decide-sso `N4`, which hits `/api/bus/decision.*` for 404 and covers the cli.mjs scan and the consoleCall refusals.
-- **N5.** `readProcess` keeps the five `MOSAIC_BUS_CONSOLE_*` keys in the env allowlist (`bus/src/human.mjs`). The human proof and its spawn are unchanged.
-
-## Design choices and tradeoffs
-
-- **Webui imports from the broker.** `webui/src/bus.mjs` imports `CONSOLE_VERBS` from `bus/src/broker.mjs`, which loads the broker module into the Console at import.
-  - I chose one source for the verb list over a second copy that could drift.
-  - If Webby prefers the copy, the alternative is a literal list plus a test pinning it equal to `CONSOLE_VERBS`.
-- **The Console transport shares humanCall's spawn.** `consoleCall` and `humanCall` share it as `transport()`, so `webui/src/bus.mjs` changed. The busCaller `business` default keeps `||` (the old falsy semantics), not `??`.
-- **Confirmations are held in memory in the serve process.** Their lifetime is 2 minutes, they are single use, and they bind the session, decision, choice and digest. The cap is a limit that never drops a live confirmation.
-  - A restart loses all held confirmations. The user clicks again and gets a new preview. Nothing is written until the resolve.
-- **No retry anywhere.** A resolve whose bus reply is lost answers `outcome-unknown`, the confirmation is spent, and the page says "Nothing was sent again."
-
-## Old tests changed (for Mos, per mos-1272)
-
-Mos ruled both changes allowed in mos-1321 (17:12:28Z), each with one condition.
-- **shell.test condition:** reword the comment that opened "No Resolve control", since it is false once the row lands. It now says row 252's Approve and Deny is the one decision control, that its labels come from ACTIONS, and that the doesNotMatch keeps any literal label out of the markup. Webby checks the wording in review.
-- **channel-proof condition:** a header comment is not enough, because human.mjs changes what readProcess keeps. In the review, Webby reads the human.mjs and webui bus.mjs diffs and states two things:
-  - the human proof's checks are unchanged
-  - only the console verifier reads the five MOSAIC_BUS_CONSOLE_* keys, and each case is covered by a named test in console-decide or decide-sso
-- **Second row to land (252 or 239):** it recomputes the webui bus.mjs hash, adds its own header line, and its reviewer re-reads bus.mjs from the base to the combined tip.
-
-- **`webui/tests/shell.test.mjs`**, write-boundary test. Allowed under mos-1321, with the comment reworded.
-  - The `writes` list gains the new `fetch(url, ...)` in `decidePost`. It is first in file order (bus.js:362).
-  - The `method:` count goes from 7 to 8.
-  - A new assertion pins `decidePost`'s callers to `url` plus the two literal `/api/decisions/${enc(a.id)}/...` routes.
-  - No existing entry was loosened.
-- **`bus/tests/channel-proof.test.mjs`**, sha256 re-pins with a header comment:
-  - `bus/src/human.mjs` (N5 env keys) to bb13c146…c885.
-  - `webui/src/bus.mjs` (consoleCall and `transport()`) to 701f009e…5272.
-  - Any later edit to either file needs a re-pin.
-- `bus/tests/principal.test.mjs`, `webui/tests/tester-listener.test.mjs` and `cli/tests/config.test.mjs` have new tests appended only.
-
-## Overlap with row 239 (Honker, b0c28366f, sage-2835)
-
-- Row 239 also re-pins `channel-proof.test.mjs`:
-  - `packages/webui/src/bus.mjs`, to 1eba9774…e5cf. That is the pin both rows change.
-  - `packages/cli/src/transport.mjs`, which is 239 only.
-  - `packages/bus/src/human.mjs` is a 252-only pin.
-- The two rows also share source files: `bus/src/broker.mjs`, `bus/src/runtime.mjs`, `webui/src/bus.mjs` and `webui/src/serve.mjs`.
-- Whichever row lands second rebases onto the first and recomputes the webui `bus.mjs` pin from the merged file. Both header comments are kept. It then reruns every touched test file whole.
-- Mos needs to see that re-pin (re-pins need Mos).
-
-## Mutant plan (design section 6, J1-J17)
-
-Each mutant is one edit to the named source. Run the killing test, then restore and compare the sha256 against the pre-mutant hash with `git status` clean apart from the build. Kill rules are written before the runs.
-
-| J | Mutant | Source | Expected kill |
-|---|---|---|---|
-| J1 | eligibility from the request, `#consoleResolution` returns non-null for any decision | broker.mjs | console-decide `J1, J2` (ineligible) |
-| J2 | hardcode `approve = yes`, `deny = no` | broker.mjs | console-decide `J2` (go/stop, deny listed first) |
-| J3 | owner from name or header, skip the owner match in verifyPrincipal | principal.mjs | principal.test `console requires…` |
-| J4 | skip the serve-parent walk | principal.mjs | principal.test `console requires…` |
-| J5 | accept the human nonce namespace | principal.mjs | principal.test `console requires…` |
-| J6 | reuse the session from the confirmation, skip the live session check at resolve | decision-http.mjs | decision-http `session that ends`, decide-sso `listener gates` (new session) |
-| J7 | keep the console cap bound after the call (skip `release` for kind console) | server.mjs | **open**: no new test pins release for a console proof. Before the run, check whether an existing server test kills it. If not, add one and name it in the report. |
-| J8 | skip the same-origin check | decision-http.mjs | decision-http `gates`, decide-sso `listener gates` |
-| J9 | resolve without a confirmation token | decision-http.mjs | decision-http `a confirmation then a resolve`, `bad body` |
-| J10 | drop the choice, decision or session binding | decision-http.mjs | decision-http `binds the session, decision and choice` |
-| J11 | skip the digest, closed or business check | broker.mjs | console-decide `J11`, `N2, J13` (second answer closed) |
-| J12 | do not spend the confirmation | decision-http.mjs | decision-http `a second resolve refuses`, `confirmations… one use` |
-| J13 | write via cli, or omit the subject in human.input | broker.mjs | console-decide `N2, J13` |
-| J14 | `#approvedGrant` accepts via console without the human.input | broker.mjs | console-decide `J14` |
-| J15 | start the executor on any resolved choice | broker.mjs | console-decide `J15` and `J2` (stop starts nothing) |
-| J16 | `decide` true without sso or send | serve.mjs, public/bus.js | decide-sso `J16`, decide-browser `J16` |
-| J17 | retry on outcome-unknown or auto-submit after preview | public/bus.js | decide-browser `J17` (post count stays at 7) |
-
-## Manifest
-
-Source:
-- packages/bus/src/broker.mjs
-- packages/bus/src/client.mjs
-- packages/bus/src/console-cli.mjs (new)
-- packages/bus/src/human.mjs
-- packages/bus/src/principal.mjs
-- packages/bus/src/runtime.mjs
-- packages/bus/src/server.mjs
-- packages/cli/src/config.mjs
-- packages/webui/src/bus.mjs
-- packages/webui/src/cli.mjs
-- packages/webui/src/decision-http.mjs (new)
-- packages/webui/src/public/bus.js
-- packages/webui/src/serve.mjs
-
-Tests:
-- packages/bus/tests/channel-proof.test.mjs (re-pins)
-- packages/bus/tests/console-decide.test.mjs (new)
-- packages/bus/tests/principal.test.mjs
-- packages/cli/tests/config.test.mjs
-- packages/webui/tests/decide-browser.test.mjs (new)
-- packages/webui/tests/decide-sso.test.mjs (new)
-- packages/webui/tests/decision-http.test.mjs (new)
-- packages/webui/tests/shell.test.mjs (old test changed, see above)
-- packages/webui/tests/tester-listener.test.mjs
-
-Docs:
-- packages/webui/README.md
-- agents/scrooge/work/queue-252/BUILD.md (this file)
-
-## Results
-
-Not run. At the first CLEAR:
-1. Run each touched test file whole, with TMPDIR under /mnt/storage/scratch/tmp.
-2. Run the bus, webui and cli suites.
-3. Run the mutants above, then the drift check against refactor.
-
-## Rebase onto fe4ee8c7b (sage-3482, 2026-10-23)
-
-The old base aca16404c had drifted. Since then refactor changed 8 of the row's 24 paths, across 15 commits. I made a new branch, scrooge/row252-fe4ee8c7b, so scrooge/row252 22cc74645 is untouched and nothing was force-pushed. I rebased with local git, `-c core.hooksPath=/dev/null`, and no stash.
-
-Commit map:
-- 4bd273bce -> 1891d36e4 (product and tests; six files conflicted)
-- ca4537cc9 -> 9e5980acd (BUILD.md; clean)
-- 22cc74645 -> 6fd206e80 (shell.test comment and BUILD.md; clean)
-
-Conflicts, all in 4bd273bce, and how each was resolved:
-1. packages/bus/src/broker.mjs, verb lists. On the base, row 206 added the share verbs to USER_VERBS, and row 275 added VIEWER_VERBS, userLevel and BOARD_VERBS and removed the USER_LEVEL const. I kept the base's lists and dropped USER_LEVEL, because nothing on the base reads it. CONSOLE_VERBS goes in after USER_VERBS with its comment unchanged. The request() gate (`!!s.console !== CONSOLE_VERBS.includes(verb)`) auto-merged after the FED R4 access sweep and the user check. Its order relative to the user gate is the same as on the old base.
-2. packages/bus/src/runtime.mjs, startBroker. FED R4 (#1801) added `access.intervalMs` to the access check. I kept the consoleOwners validation and the frozen owners first, as in the row, and then the base's access check with intervalMs.
-3. packages/cli/src/config.mjs. FED R6 (#1800) added accessFor and `config.access`. I kept both: accessFor and then consoleOwners, and in bootConfig `config.access` and then `config.consoleOwners`. process.mjs passes the boot config to startBroker whole, so both keys reach it.
-4. packages/webui/src/cli.mjs. FED R6 moved the owner's bus options into consoleBus() (console-bus.mjs) and added userCaller and userOptions. I kept the base's form, added consoleCall to the bus.mjs import, and added decisionWrite to the declarations. I kept the row's `if (ssoOn && sendOn) decisionWrite = consoleCall(...)` after the consoleBus() call, and pass decisionWrite to startServer next to userOptions and federation.
-5. packages/webui/src/serve.mjs. FED R6 added granted-user sessions: userRoute gates them, and userOptions rebinds the options per request.
-   - The signature now has both decisionWrite and userOptions/federation.
-   - The session hunk keeps the base's signer and granted-user block. ssoSession is set only for a session with no `user`, which is the owner's. A granted user is refused at userRoute before the decision route anyway, because /api/decisions/* is not on userRoute's list. Under the new base this keeps the design section 2 rule that only the owner answers a decision.
-   - /api/config keeps the base's `user` and `federation` keys. `decide` gains `!granted`, matching how the base gates `edit`, so a granted user's config never offers Approve and Deny.
-   - The decisionWrite startup check and createConfirmations() auto-merged unchanged.
-6. packages/bus/tests/channel-proof.test.mjs, webui bus.mjs pin. Row 301 (#1808, mos-1449) moved the user transport into bus.mjs and re-pinned it to 39fcb27c. The row's consoleCall auto-merged on top. I kept row 301's comment and re-pinned to the merged blob's sha256, 604092cb706b152d458f299ff1071f6cd488774629012f96b672f7e9a16c0b2c. The human.mjs pin (bb13c146) auto-merged and matches the blob at the new tip. The row's existing header comment (Webby N5) still describes why bus.mjs is re-pinned. humanCall and transport() are unchanged.
-
-Auto-merged without conflict: webui bus.mjs (consoleCall next to row 301's userCaller), webui README.md, bus client.mjs, human.mjs, principal.mjs, server.mjs and public/bus.js.
-
-Two new-base reads I checked:
-- granted-user.test.mjs reads `/api/config` key by key and has no deepEqual on the whole object, so the extra `decide` key doesn't break it.
-- No other test pins one of the row's source files by sha256, apart from channel-proof.
-
-Not run: no test, node or syntax check during this step. Sage's next CLEAR covers the push, the whole webui, bus and cli suites, every scripts/test-*.sh, and J1-J17. Plugins must show 0 failures (mos-1456/1462). J7 still needs a killer test. The serve.mjs `!granted` and ssoSession lines are new since the build, so they get mutants too. I'll add them to the J list at the run.
-
-## Runs (sage-3488 CLEAR, 2026-10-23)
-
-Gate tree: detached worktree of 3e6de9807 with the canonical node_modules linked, so
-`MOSAIC_REQUIRE_EDITOR_BUILD=1` is set (mos-1453). TMPDIR comes from mktemp under
-/mnt/storage/scratch/tmp. Each step runs under `timeout -k 10` (mos-1275):
-
-| Step | Limit (s) |
-|---|---|
-| pkg bus, cli, plugins, webui, business (`node --test tests/*.test.mjs`) | 1800 each |
-| test-auth / conductor / config / discord / extension-package | 126 / 145 / 130 / 147 / 130 |
-| test-foundation / land-work / queue / release / task | 269 / 171 / 226 / 157 / 231 |
-| mutant single file | 300, chat-browser 600 |
-
-The script limits are 3x the longest runs recorded in queue-253 (receipt 3b91cfdaf).
-
-### First-run reds placed (mos-1272)
-
-- pkg-bus at 3e6de9807: 902 pass, 1 fail. The failure is `N2, J13` in console-decide.test.mjs:180, a new
-  test (0 human.input rows found, 1 expected). The cause is in the test, not the product. `events()` spread
-  the parsed body after the row's `kind`, so an answer body's own `kind: 'answer'` overwrote
-  `'human.input'` and the filter could never match. Three more filters on the same field had the same
-  defect, :250 and :290 (count of human.input must be 0) and :252 (an action.refused exists). The two
-  zero counts passed vacuously. Fix: the row's kind is also kept as `event`, set after the body, and all
-  four filters read `event`. The deepEqual at :181 now names `event: 'human.input'`. The file then ran
-  whole at 11 pass, 0 fail.
-- J7 (open in the plan): no existing test bound a console proof over the socket. The new test
-  `J7: a console proof over the socket binds a cap for its one call and the reply releases it` in
-  console-decide.test.mjs serves a real socket with authenticateConsole, makes one console call that
-  answers and one that refuses (`decision-not-found`), and checks that both caps are released
-  (`unauthenticated`). J7 is applied as `boundCap = kind === 'console' ? null : transient;` in server.mjs,
-  which skips every release path for a console cap (finish, the finally, and socket close). It ran
-  at 11 pass, 1 fail, failing only the new J7 test. KILLED. The restored server.mjs matched its pre-mutant sha256.
-- decide-sso.test.mjs (new) ran 2 pass, 2 fail before any mutant:
-  - `J16`: its `{ send: null }` case reached `setup`, and startServer refused it, because a decision
-    transport without `--send` never starts (serve.mjs guard). That case now asserts the refusal, and the
-    `{ decisionWrite: null }` case still checks the read-only routes and `decide: false`.
-  - `N4`: a POST to `/api/bus/decision.*` gets row 74's preview refusal (403 `read-only`, for every
-    write without a route of its own) before any verb lookup. POST now asserts that refusal and GET
-    still asserts 404. Either way the transport sees no call.
-  - The file then ran whole at 4 pass, 0 fail.
-- Old-test reds, sent to Sage before any fix (status 2):
-  - cli `access-boot.test.mjs` R6 B1-B3 come from this row. The fixture's SSO provider has no issuer,
-    so `consoleOwners` maps `iss: undefined` and startBroker refuses the owner list
-    (`invalid-host-request`). The file is 4/0 on fe4ee8c7b.
-  - cli `compactions-launch.test.mjs` REQ-THREAD-2 T3, 5 tests, each "timed out waiting". They also fail
-    0/5 on a fe4ee8c7b tree, so they are not this row's.
-  - Correction (sage-3492): the compactions-launch reds were the environment, not a base red. The gate
-    TMPDIR (`<gate>/tmp`) was long enough to break the launcher/bwrap paths. Alone in a short
-    `mktemp -d /mnt/storage/scratch/tmp/scrXXXXXX` TMPDIR the file ran 5 pass, 0 fail, 0 skipped, and
-    Sage's own gate ran it green. The file is unchanged.
-
-### Rulings and further placements (sage-3492 to sage-3496)
-
-- access-boot (Mos GO mos-1464, relayed in sage-3494): `access-boot.test.mjs:17`'s `authentik` provider
-  gains `issuer: "https://idp.test"`, and nothing else changes. numstat against fe4ee8c7b reads 1 1.
-  It is committed alone (b316e0a55). access.test.mjs:273 uses the same fixture but never reaches
-  bootConfig, so it is untouched. The file ran 4 pass, 0 fail.
-- decide-browser.test.mjs (new) ran 0 pass, 3 fail before any mutant, then 1 pass, 2 fail after the
-  first fix:
-  - setup's `UPDATE decisions SET question=?` hit migration 3b's `decisions_no_update` trigger, because
-    decisions is append-only. The test now writes its own open credential.mint grant decision, with the
-    hostile question in the INSERT. It is the same two rows host-fixtures' grantDecision writes, and
-    host-fixtures.mjs is unchanged.
-  - `page()` visiting the URL it was already on was a same-document hash change, not a load. So J17's
-    "closed elsewhere" step never re-read the bus, and the redirect test's second visit never redrew
-    after signing out. `page()` now loads about:blank first, as editor-browser.test.mjs:216 does.
-  - The file then ran whole at 3 pass, 0 fail (9e1601a20).
-- decide-sso J16 (sage-3492): the startServer refusal stays. The one config that starts without send
-  also lacks a decision transport, since startServer refuses a transport without `--send`. That config,
-  `{ decisionWrite: null, send: null }`, is now in the J16 loop and gets `decide: false` and the
-  read-only routes. Webby rules in the manifest round.
-- J19 killer (new test in decide-sso.test.mjs): an access document with one granted user (alice). The
-  listener has `--send`, a decision transport and a user transport. The owner's config says
-  `decide: true`. Alice's says `user: true`, `send: true` and `decide: false`. Her POSTs to both
-  decision steps get 403 `owner-only`, and the transport sees no call.
-- J18 is equivalent alone, because a granted session never reaches decisionHTTP. At serve.mjs:694 a
-  session with `user !== undefined` meets `userRoute` before the decision branch. userRoute admits only
-  `/api/chat*` and GETs of `/api/config` and the user files, never `/api/decisions/*`, so the 403
-  `owner-only` comes before `ssoSession` is read. The `session.user === undefined` guard is a second
-  layer behind that. The J19 test's owner-only POSTs pin the first layer.
-- J11c is equivalent. `s.human !== b.human` at broker.mjs:5604 can't hold for a console cap:
-  - bindConsole (broker.mjs:1459) refuses `record.human !== b.human` with `human-required`.
-  - Its cap carries `human: b.human` for its own business, and #cap freezes the session (:1094).
-  - At resolve, `b` is `this.#business(s.business)` (:5324), the same business.
-  - reloadBusiness refuses a document whose human differs (:517).
-  So for any session with `s.console` set, the two humans are equal. Webby rules on it in the
-  manifest round.
-- Mutants, part 2, on the tip test files (decide-sso 5/0, decide-browser 3/0 as the baseline).
-  Every restore matched its pre-mutant sha256.
-  - J16a: KILLED by decide-sso J16.
-  - J16b: KILLED by decide-browser J16.
-  - J17a: KILLED by decide-browser J17 and the redirect test.
-  - J17b: KILLED by decide-browser J17.
-  - J19: KILLED by decide-sso J19. granted-user stays 19/0 under it.
-  - J18: SURVIVED decide-sso 5/0 and granted-user 19/0. It is equivalent alone, for the reason above.
-- Old webui stubs (Mos GO mos-1465, relayed in sage-3497): library-cli.test.mjs:17 and
-  thread-claims.test.mjs:58 build a loader-hook stub of bus.mjs with no `consoleCall` export, and cli.mjs
-  now imports it. Each busSource gains `export const consoleCall=()=>{throw Error('consoleCall outside --sso')};`
-  in the neighbours' throwing form, and nothing else changes. numstat against fe4ee8c7b is 1 1 for each.
-  Alone they ran 1/0 and 4/0. No mos-1316 item for compactions-launch: the whole cli rerun is the evidence.

docs/SESSIONS.md

@@ -1585,15 +1585,3 @@ are never rewritten or removed; corrections are new entries.
 2026-10-23 | Huey (cabd45ca) | Row 272 round 2, sage-3354/3357/3358/3361 | Rebased onto 5fdfd7275 on huey/row272-5fdfd7275, preserving 219/295 and approved old-test hunks; rev3510 in-progress. New fallback test ran RED first in Sage's slot: expected legacy failure, 3 guards pass; slot returned. Bounded fallback and extra guards/mutants prepared for Sage's full gate; no post-implementation run or green claim.
 
 2026-10-23 | Huey (cabd45ca) | Row 272 round 3, mos-1455 / sage-3435 | Added empty role authority arrays to new CLI fixture and guarded null old at all three chat render sites; browser tests byte-identical. Same 17-path manifest.r3, no local execution or queue writes. Follow-up candidate awaits Scrooge delta review and Sage gate; gate run 1 remains RED.
-
-2026-10-23 | Sage (1ef1e4f8) | Rows 272 and 307 landings, row 306 design, row 252 rebase check | 272 landed d33989230 and 307 landed d243f6b25, both on full five-suite gates with mutants killed. Row 306 design r2 approved by Dewey (c31197), build going under mos-1463. Row 252 rebase 3e6de9807 on fe4ee8c7b checked and Scrooge given the slot (sage-3488).
-2026-10-23 | Sage (1ef1e4f8) | Rows 291 and 306 landings, row 308 launch | 291 (PRD 1.16, #1796) landed 4874d1e83 and 306 (#1813) landed 1676ad0de..2d0318a44 by temp-index replay, patch-ids equal, both on all-suite gates (mos-1455, plugins 0 fail, 306 mutants M1-M3 killed). 306 N1/N2 in DEFERRED 9c8877bdf. Row 308 (PRD 1.17, #1815) briefed and launched to Gosalyn; slot passed to them for claim, push and in-review. Scrooge told to rebase 252 on 9c8877bdf. Mos told (sage-3515, sage-3520).
-2026-10-23T17:29:46Z | Gyro (Codex gpt-6.1-sol, sage-3542) | 571 REQ-LIB-5/Q239 Connections design amendment | Proposed W8 plus parent/W4 alignment; Mos build order kept distinct from import acceptance. Static docs checks only, no repo Node/tests/live action. Fenton review, Sage landing.
-2026-10-23T17:32:37Z | Gyro (Codex gpt-6.1-sol, sage-3544) | 571 Connections N1/N2 | W7 opening-order cross-references and human-view comment/deletion exclusion clarified. Static docs checks only; no repo Node/tests/live action. Delta to Fenton, Sage lands.
-2026-10-23T17:48:43Z | Scrooge (629b6cd3) | Row 252 Console inbox Approve and Deny (#1753) | Rebased onto 306 landing as 580037105 (range-diff all =), slot run bus 907/0 webui 410/0 cli 943/0, in-review revs 3608/3609, Webby r1 APPROVE, J1-J19 specs to Sage; Sage landed 45ea3fa0d (done rev 3616). Part 1 mutant results were never in BUILD.md; they went to Sage by T3 (scrooge-0252-mutant-specs).
-2026-10-23 | Sage (1ef1e4f8) | Rows 308 and 252 landings, 571 Connections design amendment, Vikunja 597 | 308 (PRD 1.17, #1815) landed 30e6bb680 and 252 (#1753) landed 45ea3fa0d (replay of 580037105 onto 30e6bb680, range-diff all =), each after a full gate on the landed tree (252 also J1-J19, J11c and J18 equivalent); Gyro's 571 amendment (Fenton APPROVE) landed e8bb13df8; Vikunja 570, 435 and 597 done, canonical webui esbuild 0.28.2; queue revs 3589-3616 committed 59f013247
-2026-10-23 | Sage (1ef1e4f8) | Vikunja 571 W build rows; rows 13, 42, 257 and 289 check | Filed the design's ten W rows as queue rows 309-318 (revs 3617-3626, owners set to unassigned 3627-3636, queue commit 293b42fee pushed); Vikunja 571 done (comment 994). Row 13's candidate fd72d2689 is on refactor, gate is Monday's row 7 ledger run; 42 paused under mos-1184; 257 post-v1; 289 waits on 214 and 288. Slot released 17:56Z.
-
-2026-10-23T19:13:00Z | Boyd (48a3ae38, Codex gpt-6.1-sol) | Row 298 (#1804, Q228) takeover from Megavolt under mos-1496 | Started on boyd/row298 at 45dca69f6; reading brief, D1-D6 and human-shell proof; awaiting Megavolt handoff. No Node/tests before Sage CLEAR, no queue writes.
-
-2026-10-23T19:29:00Z | Boyd (48a3ae38) | Row 298 (#1804) targeted T1 lane B | Five whole files 29/0/0, ten mutants killed, source restored; reviewer delta prepared. Earlier startup timestamp corrected in Boyd BUILD.md. Full gate and queue/landing remain Sage's.

docs/plans/2026-10-21_q195-writing-editor.md

@@ -187,10 +187,8 @@ canon Markdown chapter takes its position by that rule or a human's committed or
 import preserves its chapter ID and position. Human reordering commits the manifest.
 library_manuscript and next_chapter use this order, never archived paths. Each
 answer/page names format, owned location/ID and captured commit. DOCX wikilinks stay clickable
-in the Console editor, and no graph shows them yet. Under PRD 1.17 REQ-LIB-5 and Q239,
-the Console's Connections view lists the current links and backlinks of each story file
-the user may see, in both formats, with each one's scope and format. W8 owns that view
-and its tests. Obsidian's archive
+in the Console editor; no graph shows their current links yet. A Console Connections view
+and its tests are later work, waiting for Jason's J-b answer in PRD 1.17. Obsidian's archive
 graph is historical, not a live DOCX graph. No graph implementation is in these W rows. New Story chooses universe/book or playground and gets
 its place in that manifest from its first DOCX commit, without an MD copy.
 
@@ -244,8 +242,8 @@ follow stable identities without an agent rewriting story links.
 Obsidian's old Markdown graph is historical after conversion. It does not track later DOCX
 edits, and it is not a parallel writing surface. The format map names current files and
 clickable editor links resolve across formats; it is not a graph view. No graph shows DOCX
-links yet. W8 supplies REQ-LIB-5's Console Connections view: current links and backlinks
-of each story file the user may see, in both formats, with each one's scope and format. No Markdown export or Obsidian graph parity is promised. `.doc`/`.qxd` imports remain separate D23 work.
+links yet. The later Connections view waits for Jason's J-b answer; it and its tests are
+outside the current W3/W7 scope. No Markdown export or Obsidian graph parity is promised. `.doc`/`.qxd` imports remain separate D23 work.
 
 D12. Q235–Q237 withdraw the superseded-notice proposal and its open-Q36 boundary. Current
 Case 2 chapter reads after conversion use W4b's committed DOCX reader/citations. Agent
@@ -581,19 +579,12 @@ runs Jason's layout agent nor automatically grants it access or sends book text
 
 All rows follow BRIEF-TEMPLATE. They are not queue entries. S0 M1–M14 remain binding throughout W2/W6; source/target
 changes return to security review. W7 adds the policy conversion/routing row. S0 and the original W4 design have reviewed verdicts; this policy revision goes to Fenton.
-Their implementation gates remain separate. No code row W1/W2/W6/W3a/W3b/W3/W4b/W5/W7/W8 enters the queue
+Their implementation gates remain separate. No code row W1/W2/W6/W3a/W3b/W3/W4b/W5/W7 enters the queue
 before S0 PASS (recorded for this baseline, with M1–M14 still binding). Each also observes its explicit dependencies, source ownership, the CSP gate
 and the MVP gate-slot priority. Q177 permits chaining reviewed candidates, not overlapping
 owners. Sage assigns model-only seats. Each implementation reviewer is Opus 5.5 and did not
 author the code. Fenton reviews this design and can review code only when not its author.
 
-Build order (mos-1470, Vikunja 571 comment 961): W7 first supplies reviewed conversion/format
-routing code with production import still closed, then W8 lands the Connections view, then
-W7's human opening step may open the first real chapter import. W8 is after W3/W4b and
-W7's closed routing candidate, before that W7 opening step. This is Mos's build-order rule,
-not a new REQ-LIB-8 condition or an addition to import acceptance. No converted real chapter
-exists without the view. O2 code remains after 10-27 and never ahead of MVP rows.
-
 G1. Future code acceptance runs each touched test file independently and affected package
 suites on Sage's slot after MVP priority, plus required repository checks. Source builds need
 pinned tools, reproducible hashes, license/source manifests and independent review. Integration browser
@@ -1267,7 +1258,6 @@ Independent conversion/parser/authorization review, writing/library/bus/harness/
 pinned-copy and sandbox closure tests, plus W4 A19/A20/A33–A35 and G1. Source archive, off-host acknowledged DOCX and
 format-map snapshot must match the new DOCX publication before completion. No real import
 opens before all D12 gates. The October 27 Markdown and supporting-doc fixtures still pass.
-The human opening step follows W8's landing (mos-1470, build order, not an acceptance condition).
 
 ### Handoffs
 
@@ -1275,83 +1265,6 @@ Owner sends commit/blob and fixture publication/crash evidence directly to the r
 Sage through T3. Reviewer sends verdict to owner/Sage. Copy Mos for the later first-real-book
 go or any proposed policy change, never ask an agent to execute that go.
 
-## W8 Console Connections view for Markdown and DOCX story files
-
-### Problem
-
-PRD 1.17 REQ-LIB-5 at 30e6bb680, approved through Q239, requires the Console to list
-current links and backlinks of every story file the user may see, in both formats, with
-scope and format. Clickable editor wikilinks and Obsidian's historical archive graph do
-not supply this view.
-
-### Owner and reviewer
-
-- Owner: Sage assigns the seat, using Codex gpt-6.1-sol for cross-format lookup and authorization.
-- Reviewer: an independent Opus 5.5 seat assigned by Sage, not the author.
-- After: W3, W4b and W7's reviewed closed conversion/format-routing candidate; serial handoff
-  from W7 for shared library/WebUI files and from C2-11a/11b and C2-10b for shared UI paths.
-- Before: W7's human opening step for the first real chapter import, under mos-1470. This
-  orders builds, not REQ-LIB-8 acceptance, and does not change its four opening conditions.
-  Post-10-27 only, with no gate slot ahead of MVP rows.
-
-### Files owned
-
-New: `packages/library/src/connections.mjs`, `packages/library/tests/connections.test.mjs`,
-`packages/webui/src/connections-http.mjs`,
-`packages/webui/src/public/{writing-connections.js,writing-connections.css}`,
-`packages/webui/tests/{writing-connections.test.mjs,writing-connections-browser.test.mjs}`.
-Existing or handed off from W7/W3: `packages/library/src/{index.mjs,links.mjs}`,
-`packages/webui/src/{serve.mjs,bus.mjs}`,
-`packages/webui/src/public/{index.html,writing-pane.js,writing-pane.css}`,
-`packages/webui/README.md`.
-
-### What ships
-
-A Console Connections control beside story navigation opens a keyboard-accessible list
-with Links and Backlinks sections for the selected story. Each item shows its title,
-scope and format, and opens the current authorized story through the existing resolver.
-It works for Markdown, DOCX and a partly converted book. It uses committed link metadata
-and W7's stable identities/format routing, never unsaved editor buffers or archive content.
-The response names the captured versions; after a committed save or conversion publication,
-a refresh uses the current authorized snapshot. An in-flight stale result cannot replace
-that refresh. An empty section says there are no visible links; it does not reveal hidden
-counts or titles. Unresolved links remain visibly unresolved and cannot open guessed paths.
-
-A human-only Console read route uses existing authenticated project/universe/source access
-and exclusions. Authorize both endpoints of every displayed edge before returning titles,
-paths or counts. Backlinks cannot reveal another business, a denied universe, excluded
-story or archived source. Links inside comments or tracked-deletion text are not current
-story links, so the human Connections view never shows them and never depends on an agent
-setting. Final-view story links use the same committed extraction rules as W4b. Archive links are historical
-and excluded from this current-story view. No new agent grant, tool or conversation gate.
-
-`connections.test.mjs` covers forward/backlinks across both formats, mixed-book identity
-preservation through conversion, current committed saves, scope/format labels, exclusions,
-archive/old-path refusal, unresolved targets and denial without metadata leaks. The HTTP/UI
-suite in `writing-connections.test.mjs` covers authentication, access revocation, response
-version binding, stale refresh rejection and refusal rendering. The browser fixture suite
-covers keyboard/focus, Links/Backlinks empty states, labels, cross-format navigation and
-refresh after save/publication. Fixtures only, never Melanie's text or a live stack.
-
-### Out of scope
-
-A node graph, Obsidian graph parity, editing links or story text, agent tools, private-book
-conversion, changes to REQ-LIB-8 acceptance, Q234's header, mos-1363 or S0 M1–M14.
-
-### Gate
-
-Independent Opus 5.5 review of access filtering and the human view, the named fixture suites
-and G1 on Sage's slot. Evidence shows both formats and mixed conversion state without
-archive or denied-source leakage. Sage records W8 landing before W7's first-real-import
-opening step per mos-1470; no import acceptance test or PRD condition is added here.
-
-### Handoffs
-
-Owner sends pushed commit/blob and fixture evidence directly to the reviewer and Sage via
-T3. Reviewer sends verdict to owner and Sage. Sage orders W8 landing before the W7 human
-opening step, and hands the shared files back before further W7 edits. Copy Mos for the
-first-real-book go or any proposed policy change.
-
 ## Engineering choices from mos-1368
 
 This table resolves the map's engineering prompts; these are design decisions, not questions
@@ -1369,7 +1282,7 @@ Later mos-1372/1375 override A32/A33's per-document/dedicated-session assumption
 | Q7 / A32/A33 | mos-1372 D9: ordinary Case 2 access in any thread/room, no per-document grant/share/dedicated session; existing supporting writes continue; marked for PRD 1.17 approval |
 | Q8 / A36 | W4b/W7: preserve Case 2 find/get/search/manuscript/universe tools via host committed-reader adapters, not fewer tools or raw ZIP access |
 | Q9 / A73 / C2 | W7: D10 manifest order, typed next_chapter, paragraph cursors bound to snapshot/access; both W4 byte cap and harness REPLY_CAP apply, never cut paragraphs or invent line equivalents |
-| Q10 / A22 | W3/W7 keep clickable cross-format editor links; W8 supplies current links/backlinks for visible story files in both formats with scope/format (REQ-LIB-5, Q239); no DOCX graph yet; Obsidian archive graph is historical |
+| Q10 / A22 | W3/W7 keep clickable cross-format editor links; no DOCX graph yet. Connections view/tests are later work, waiting on Jason's J-b answer; Obsidian archive graph is historical |
 | Q11 / A37 | W7: Console archive saves refuse; sync flags later archive edits or recreated old paths and excludes them from current canon; no remote-push refusal/protected-pattern guarantee |
 | Q12 / A21 | W7: reviewed markdown-it AST + first-party DOCX adapter; no new runtime converter; input cap 1 MiB default, W4 ZIP/XML validation, construct/token/extractor fidelity before archiving |
 | Q13 | W7 survey: synthetic construct corpus and aggregate-only count capability; no seat reads real text or claims a corpus census happened |
@@ -1404,9 +1317,7 @@ renderer does not enable it. No change is imposed on the October27 release.
 
 Alignment note: sage-3121 checks this revision against PRD 1.17 d6,
 SHA-256 `886b93c571f87bfbb2f27ee3113b6800a32d8f89196d95ace33566031bee380a`.
-That historical d6 alignment is superseded for Connections by landed PRD 1.17 at 30e6bb680:
-REQ-LIB-5/Q239 require W8's list view, ordered before real import under mos-1470.
-New non-old-path Markdown stays canon until import;
+Connections graph/tests wait for J-b; new non-old-path Markdown stays canon until import;
 archive folder is human-set in the library mapping with no default.
 
 ## Current verification and remaining gates
@@ -1421,5 +1332,4 @@ append-only logs. No build, browser run, conversion, queue entry or live change
 Jason's format and CSP choices are settled by Q234–Q237. No question repeats Q1 or Q36.
 Before real conversion: Sage's Case 2 PRD amendment (Vikunja 570) needs Jason's approval;
 W4b/W7, Hermes-retired and post-10-27 gates must pass; Jason must explicitly give the first real Melanie-book
-conversion go. W8 lands before the human opening step under mos-1470 as build order, not
-an acceptance condition. These are later authorization gates, not requests to convert anything now.
+conversion go. These are later authorization gates, not requests to convert anything now.

docs/plans/2026-10-22_q195-docx-citations.md

@@ -66,11 +66,7 @@ A Markdown file recreated at a converted old path is unmapped, neither canon nor
 excluded from lookups and flagged to the human. A new Markdown story at a different path in
 a converted book stays canon until import, flagged and offered for human import; no automatic
 conversion. Existing playground scope rules remain. Clickable DOCX editor links stay; no
-DOCX graph exists yet. PRD 1.17 REQ-LIB-5 and Q239 require the Console's Connections view
-to list the current links and backlinks of each story file the user may see, in both
-formats, with each one's scope and format. Parent design W8 owns the view and its tests.
-Mos-1470 orders its landing before W7's first-real-import opening step as build order,
-not an additional REQ-LIB-8 acceptance condition.
+DOCX graph exists yet. A Connections graph and its tests wait for Jason's J-b answer.
 
 Every conversion runs the pinned extractor before archiving and refuses unsupported output.
 An independently reviewed importer preserves every wiki token and front-matter key.

docs/plans/2026-10-23_prd-1-17-brief.md

@@ -1,82 +0,0 @@
-# PRD 1.17 brief: Case 2 story files are DOCX
-
-Sage, 2026-10-23, for mos-1366 item 1, mos-1467 and mos-1470. This follows
-`docs/plans/BRIEF-TEMPLATE.md`. Gitea #1815, Vikunja 570.
-
-## PRD 1.17 Case 2 story files are DOCX (Q235 to Q237, Q239)
-
-### Problem
-
-Jason's Q235 to Q237 make Case 2 story files DOCX, with Markdown kept for notes
-and docs. PRD 1.16 still says every story file is Markdown in the user's
-repository, seen in Obsidian. The 1.17 text is approved: Jason approved d8 at
-435a7458d in Q239 with O2, which adds the Console Connections view (mark J-b).
-d9 carries that view in Mos's mos-1443 R3 text. Webby approved d9 in rounds 7
-and 8 (webby-0214, webby-0217), and Mos passed the J-b check in mos-1470.
-
-The approved text is `agents/sage/work/prd-1-17/DRAFT-d9.md` at 4607e15b8, blob
-sha256 02f28decad7f946f. Its base is PRD 1.16, `docs/prd/mosaic-stack.md` blob
-a6db9b4a at 482e865ac (row 291).
-
-### Owner and reviewer
-
-- Owner: Gosalyn.
-- Reviewer: Webby.
-- After: row 291 (PRD 1.16).
-
-### Files owned
-
-The four files in DRAFT-d9.md's "Files the row would own", as it lists them:
-- `docs/prd/mosaic-stack.md`.
-- `packages/tasks/requirements.json`: version 1.17, the titles of REQ-LIB-1,
-  REQ-LIB-2 and REQ-LIB-4, and the new ids REQ-LIB-8 and REQ-LIB-9 after
-  REQ-LIB-7 and before REQ-INST-1.
-- `packages/tasks/tests/requirements.test.mjs`: the version pin 1.17, the count
-  87 (:21), and the duplicate-id message `requirements[87].id: REQ-ROLE-1 twice`
-  (:77).
-- `packages/bus/tests/requirements.test.mjs`: the list length 87 (:48).
-
-### What ships
-
-- Every "Replace", "Add, after", "becomes" and "New" instruction in DRAFT-d9.md's
-  PRD sections, applied to the 1.16 text word for word. Each quoted old text
-  occurs once in a6db9b4a, except "The Console shows each cite's scope.", which
-  d9 scopes to REQ-LIB-2. Webby checked those counts in round 6.
-- The 1.17 header, Status line, source lines and notes as d9 writes them.
-- requirements.json as d9's requirements.json note says: REQ-LIB-1, REQ-LIB-2 and
-  REQ-LIB-4 take the new titles, REQ-LIB-5 and REQ-LIB-6 keep theirs, and
-  REQ-LIB-8 and REQ-LIB-9 are added with the titles d9 gives, so the count is 87.
-  REQ-LIB-4's title is 117 characters, under the 120 limit in `requirements.mjs`
-  (mos-1443 R2).
-- Nothing from d9's review sections goes into the PRD. That covers "Settled
-  points", the "d2 changes" through "d9 changes" lists, "What d5 adds", "Marked
-  for Jason" and the impact map notes.
-
-### Out of scope
-
-- The build rows for Vikunja 570 and 571, which Sage files after the landing.
-- The queue changes in the impact map (A24, A57 to A59), which go through
-  `scripts/mosaic queue` (C9).
-- Gyro's design edit R3.4 at 767bb62c7.
-- Mos's build-order call (mos-1470): the Connections view lands before the first
-  real chapter import opens. That belongs to Gyro's 571 rows, not the PRD.
-
-### Gate
-
-- Webby checks the candidate's PRD diff against DRAFT-d9.md, one instruction at a
-  time, and checks that nothing else changed.
-- No new Jason question. Q239 approved the text, and a change beyond d9 would
-  need a new version and his approval.
-- On Sage's gate:
-  - tasks, run whole;
-  - bus, run whole, because the broker loads requirements.json;
-  - cli `stack-copy.test.mjs`;
-  - every `scripts/test-*.sh`, under `timeout -k 10`.
-- Mos gets the landing commit (mos-1470).
-
-### Handoffs
-
-Every seat hands off directly (DECISIONS Q210, mos-1221). When the owner pushes a
-round or the reviewer posts a verdict, that seat messages the next seat's T3
-thread and Sage's with `mcp__t3__t3_send_message`. Mos has one step here, which
-is receiving the landing commit.

docs/plans/DEFERRED.md

@@ -664,17 +664,3 @@ collection never checks it again and the count reads as known with 0. The row 30
 behavior as it stands, so the move didn't change it. Bound to a follow-up row on row 270's
 store-unreadable path. The fix keeps the unreadable state until the header reads clean, or re-checks the
 header on every collection. Either way it's an old-test change and goes to Mos.
-
-## Row306 N1: the revoke Set doesn't survive a broker restart
-
-Morgana, row 306 BUILD.md (#1813, landed 2d0318a44; Dewey agrees, dewey-0918). `#accessRevoked` lives in
-memory. After a broker restart, recover() rebinds an earlier host's run, and if that run makes a bus call
-before the launcher's SIGTERM, it answers `not-holder` and the run exits 22, as every revoked run did before
-306. Seeding the Set at a rebind needs a mark only `#revokeLost` writes; `reason` and `by` on the ended
-claim aren't one (design D1's alternative). Bound to the next row that changes the broker's recover() path.
-
-## Row306 N2: a pending limit stop answers before the revoke
-
-Morgana, row 306 BUILD.md (#1813, landed 2d0318a44). A revoked run that also has a pending limit stop gets
-`#limitStop`'s `not-holder` on `message.receive` and `state`, because that check runs before `#agent`. It's
-rare and the run still stops. Bound to the next row that changes `#limitStop` or the order of those checks.

docs/plans/QUEUE.md

@@ -33,7 +33,7 @@ Gaps found while working go to `docs/plans/DEFERRED.md`, not here.
 
 <!-- mosaic-queue:begin -->
 
-Generated from `docs/plans/queue.json` revision 3636 by `queue render`. Do not edit between the markers; change the queue with `scripts/mosaic queue`.
+Generated from `docs/plans/queue.json` revision 3588 by `queue render`. Do not edit between the markers; change the queue with `scripts/mosaic queue`.
 
 | # | Piece | Owner | Issues | State | After | Gate | Brief | Note |
 |---|---|---|---|---|---|---|---|---|
@@ -288,7 +288,7 @@ Generated from `docs/plans/queue.json` revision 3636 by `queue render`. Do not e
 | 249 | row 235 follow-up: the grant undo records hostLineLeft when install never returned, since the remote add can outlive an abort or timeout (mos-1166) | gizmoduck; reviewers duckworth | #1751 | done | — | Duckworth approves the manifest. On Sage's gate the bus suite and the whole touched test files are green, and a mutant that drops the new catch branch is killed. (sage) | `docs/plans/2026-10-20_host-credentials.md` § Machine grant row b follow-up: the undo can't prove the remote add has ended | LANDED 9de5a57ab on refactor, pushed with 7b9737953 (DEFERRED N1). Range-diff: 8a04f4aa4..05595794b vs 8ca064158..9de5a57ab, same 3 paths, patch-id 99551b122e66 on both. Gate sage-2026 14:53Z: grant-executor whole 39/0, bus 598/0, no stub left, C1 (drop :1025) killed by G8 and both G23. Duckworth approve c30070. |
 | 250 | K12 (cohort.test.mjs) reads cgroup.events after cgroup.kill under load: print the shim's reason, then fix the cause at the source (Vikunja #450) | gizmoduck; reviewers filbert | #1755 | done | 197 done | reviewer approves the manifest; conversation and control-board suites whole on Sage's slot (sage) | `docs/plans/2026-10-21_k12-cohort-events.md` § Brief: K12 reads cgroup.events after cgroup.kill under load | LANDED 1b6158ce2 on refactor 19:42Z: candidate c1a858975 on 3b0aef995, manifest eca0b8e2, Filbert APPROVE rev 2957 (#1755 c30130). patch-id 29786caa = candidate; blob diff empty; tree 59f1e4781 = merge-tree. Gate on Sage slot sage-2109 (gizmoduck-0150): P1/P2/M1 as predicted, conversation whole 3x 183/183 plus concurrent pair, control-board 124/124. No drift on paths since base. |
 | 251 | T27 (host-run.test.mjs:453) lists no identities right after ssh-add -t 1: print timing and agent state, then fix the cause at the source (Vikunja #453) | darkwing; reviewers dewey | #1756 | done | 197 done | reviewer approves the manifest; bus suite whole on Sage's slot (sage) | `docs/plans/2026-10-21_t27-ssh-add-lifetime.md` § Brief: T27 lists no identities right after ssh-add -t 1 | LANDED d37210288 on b79ad5f2c: candidate 27f01ef63 manifest f2bdd684, patch-id 440d2442c976 equal, blob diff empty, tree matches merge-tree. Dewey r2 approve rev 2996 (c30168). Gate: bus suite whole in a clean worktree, 627/627 at 21:30:33Z on Sage's slot. Overlap check vs 194/198/244/253/254 branches: none. DEFERRED sleep-orphan entry follows as a doc commit. |
-| 252 | Console inbox Approve and Deny for grant requests (#435, J2) | scrooge; reviewers webby | #1753 | done | — | Webby approves DESIGN.md then manifest; webui, bus, cli suites and every test-*.sh green on Sage's gate; DESIGN mutants killed; REQ-WEB-2 PRD amendment landed first (sage) | `docs/plans/2026-10-21_console-inbox-approve.md` § Gate | Landed 45ea3fa0d (replay of Scrooge 580037105 onto 30e6bb680, range-diff all =, 10 commits). Webby APPROVE c31229 rev 3612. Sage gate on 45ea3fa0d: every package suite 0 fail 0 skipped (bus 907, cli 943, webui 410), every scripts/test-*.sh rc 0, J1-J19 all killed except J11c and J18 (equivalent per BUILD.md), all restores match. Old-test numstat 1 1 vs fe4ee8c7b held. |
+| 252 | Console inbox Approve and Deny for grant requests (#435, J2) | scrooge; reviewers webby | — | in-progress | — | Webby approves DESIGN.md then manifest; webui, bus, cli suites and every test-*.sh green on Sage's gate; DESIGN mutants killed; REQ-WEB-2 PRD amendment landed first (sage) | `docs/plans/2026-10-21_console-inbox-approve.md` § Gate | mos-1193. Chained on row 196's candidate (Q177): design starts now on Gander's row 196 build; code rebases onto 196's landing. Vikunja #435. |
 | 253 | F27: case2-unit.sh and case1-accept.sh move to --tester-socket and refuse --tester-port with stack-release's migration wording; no .53/.54 copy with 196 until this lands (mos-1198 item 4) | gander; reviewers duckworth | #1758 | done | 196 done | reviewer approves DESIGN.md then the manifest; cli and webui suites whole and every scripts/test-*.sh on Sage's slot; mutants per DESIGN.md; static check covers scripts and tests (sage) | `docs/plans/2026-10-21_tester-socket-scripts.md` § Brief: case2-unit.sh and case1-accept.sh move to --tester-socket (F27) | Landed 48e450ce8 on refactor (fast-forward from aca16404c, 22 commits; landed sha = candidate, so range-diff and patch-id are identical by construction). Manifest 591020a1 (7 paths) rechecked against the commit: 0 mismatches. Gate: run 5 whole, cli 55 files, webui 58 files, all 10 scripts/test-*.sh green; M1-M40 killed 40/40. Duckworth APPROVE round 1, Gitea #1758 comment 30696. |
 | 254 | Library sync follow-up: client timeout, STATUS codes, README (222 deferrals, #1759) | megavolt; reviewers dewey | #1759 | done | 196 done | Dewey approves the manifest; bus, library and webui suites whole and every scripts/test-*.sh green on Sage's slot; the timeout and STATUS mutants killed (sage) | `docs/plans/2026-10-21_library-sync-followup.md` § Gate | Landed 331597709 (candidate b31300d79 blobs and modes on 41b0cf755; patch-id 96216216 equal, range-diff differs only in the message) plus doc eb9672c91 (Dewey N1 README sentence closed; N2 four 502 codes to DEFERRED, binding the Console library routes row). Merged-tree rerun on Sage's slot 23:44-23:55Z: library 77/0, bus 628/0, webui 305/0 with 1 skip, cli 749/0. Megavolt's gate megavolt-0102 covers scripts and both mutants. |
 | 255 | Bundled Pocket ID for users with no OIDC provider, design (Q203, #1760) | launchpad; reviewers webby | — | queued | 252 done | Webby approves DESIGN.md; design only, build rows follow after Sage checks it against Q203, O6, REQ-WEB-2 and REQ-INST-1 (sage) | `docs/plans/2026-10-21_bundled-pocket-id.md` § Gate | Vikunja 458, Gitea #1760, mos-1202 item 2. REQ-INST-2 lands in PRD 1.10 as post-v1 (mos-1204). Design only: no install, no download, no .53/.54, dragon-lin keeps Authentik. |
@@ -327,7 +327,7 @@ Generated from `docs/plans/queue.json` revision 3636 by `queue render`. Do not e
 | 288 | Case 2 C2-02 agent writes, the notice, revert and her Console saves | honker; reviewers webby | #1793 | briefed | 215 done, 282 done, 283 done, 284 done, 285 done, 286 done | Webby approves the manifest. Library, bus and harness suites and every scripts/test-*.sh green on Sage's gate, mutants killed. A search of the run output for the fixture tokens finds nothing. (sage) | `docs/plans/2026-10-20_case2-rows.md` § C2-02 agent writes, the notice, revert and her Console saves | — |
 | 289 | Case 2 C2-11b Console library pages and her saves (Haiku subagent, decision 129) | researcher; reviewers filbert | #1794 | briefed | 214 done, 288 done | Filbert approves the manifest. The webui suite and every scripts/test-*.sh are green on Sage's gate. Grep for hash pins on bus.js and serve.mjs before in-review. (sage) | `docs/plans/2026-10-20_case2-rows.md` § C2-11b Console library pages and her saves | — |
 | 290 | Case 2 C2-12b the setup sheet rewrite for free chat, supporting folders and saves | louie; reviewers webby | #1795 | briefed | 217 done, 218 done, 285 done, 291 done | Doc only. Webby approves it against the ruling. Before landing, grep packages/*/tests and scripts/test-*.sh to confirm no test reads the file. (sage) | `docs/plans/2026-10-20_case2-rows.md` § C2-12b the setup sheet rewrite for free chat, supporting folders and saves | — |
-| 291 | PRD 1.16 library.write routes under REQ-LIB-6 (mos-1328) | gosalyn; reviewers webby | #1796 | done | 282 done | Webby approves the text. Jason says yes to the exact text (Mos asks him, mos-1328 step 3); no landing before that. requirements.test.mjs and every scripts/test-*.sh that reads the PRD or requirements.json are green on Sage's gate. Mos gets the landing commit. (sage) | `docs/plans/2026-10-22_prd-1-16-brief.md` § PRD 1.16 library.write routes under REQ-LIB-6 (mos-1328) | Landed 4874d1e83 on e909ef51a: 482e865ac replayed, patch-id equal (cef7de74), range-diff =. Webby APPROVE c30848 on 482e865ac; Jason approved the text in Q229. Gate 16:15Z on the tip tree: every package suite but queue, 0 fail 0 skipped (tasks 100, bus 891, cli 941, plugins 119, webui 392, business 231), every scripts/test-*.sh rc 0 (queue-root and row 244 skips only). PRD 1.16. 1.17 is row 308. |
+| 291 | PRD 1.16 library.write routes under REQ-LIB-6 (mos-1328) | gosalyn; reviewers webby | #1796 | in-review, round 1, request posted | 282 done | Webby approves the text. Jason says yes to the exact text (Mos asks him, mos-1328 step 3); no landing before that. requirements.test.mjs and every scripts/test-*.sh that reads the PRD or requirements.json are green on Sage's gate. Mos gets the landing commit. (sage) | `docs/plans/2026-10-22_prd-1-16-brief.md` § PRD 1.16 library.write routes under REQ-LIB-6 (mos-1328) | — |
 | 292 | stack-release.sh config_checks runs the target loader on any config (row 270 rollback hazard) | gizmoduck; reviewers duckworth | #1797 | done | 203 done, 270 done, 271 done | Duckworth approves the manifest. The touched test files run whole, the cli suite and every scripts/test-*.sh are green on Sage's gate, and the mutants are killed. (sage) | `docs/plans/2026-10-22_config-checks-any-key-brief.md` § stack-release.sh config_checks runs the target loader on any config (row 270 rollback hazard) | Landed 6aab979e6 (cherry-pick of c902a767d..90be6cccd, range-diff all =, patch-id a45c9ba4 equal). Tested head 0d0021454: stack-release.test 224/224, cli suite r2 red only compactions-launch:229 session-invalid 22 (idle-stop race, Vikunja 588, row 302), r3 rerun 910/910 under mos-1411, ten shells green, M1-M9 killed. Duckworth APPROVE rev 3433 on 2fa7ae17. |
 | 293 | 574: maintenance-free test fixture commits (Vikunja 574) | gander; reviewers filbert | #1805 | done | — | Filbert approves. The four whole files, then the seat and cli suites, are green on Sage's gate. (sage) | `docs/plans/2026-10-23_mvp-readiness-rows.md` § Brief: 574, maintenance-free test fixture commits (Vikunja 574) | LANDED e51d11640 03:55Z 10-23 (cherry-pick of gander b23783f39..a9cae2bd6 onto 464010fbe; range-diff 6/6 equal, range patch-id equal). Filbert APPROVE c30982 cdda41f5; run 2 4 files 153/0, seat 202/0, cli 905/0, 312 flagged/0 maintenance children. N1: lifecycle.test needs TMPDIR of 50 bytes or less. Residual: queue store.mjs, discord git.mjs, harness tools.mjs unflagged. #1805 closed c31013, P19 574 c888. |
 | 294 | FED R6: Console granted-user sign-in, user-cli transport, peer links | launchpad; reviewers duckworth | #1800 | done | — | Duckworth approves the manifest. The webui, cli and bus suites and every scripts/test-*.sh are green on Sage's gate, and the mutants are killed. (sage) | `docs/plans/2026-10-23_mvp-readiness-rows.md` § Brief: FED R6, Console granted-user sign-in | landed d3059c2c3 on refactor 07:04Z: cherry-pick of c902a767d..24b745447 onto 09d0d6faf, range-diff 11 =, patch-id 8371405a equal. Duckworth approve c31053 rev 3469 on a1ff5d67, C1/C2 met. Run 4 on 8616b9a4f from npm ci: webui 365, cli 909, bus 873, 10 scripts, M1-M11 killed. Merged tree: stack-release-external 25, stack-upgrade 21, stack-release 223/224 (R9 transient, row 1810) then 224/224 rerun under mos-1422. Follow-ups rows 300, 301. Closes #1800. |
@@ -342,19 +342,8 @@ Generated from `docs/plans/queue.json` revision 3636 by `queue render`. Do not e
 | 303 | R9 shows its output when rehearse makes no directory (Vikunja 589) | launchpad; reviewers duckworth | #1810 | done | 294 done | Duckworth approves the diff; stack-release.test.mjs whole and green on Sage's gate, in a gap (sage) | `docs/plans/2026-10-23_r9-guard-row.md` § Brief: R9 shows its output when rehearse makes no directory (Vikunja 589) | Landed e551cd846 from launchpad 88ffecaf7, patch-id 559c802b equal, test blob e936808b matches the manifest. Gate: Duckworth approve c31079; Sage gate on c13c337e1 plus the test blob, stack-release.test.mjs whole 224/0 rc 0 in 595 s, alnum mktemp TMPDIR, default networks 6 before and 6 after. No overlap with in-review 272, 304, 305. |
 | 304 | claude-session test builds the memory slug the way the CLI does (Vikunja 590) | rocko; reviewers dewey | #1811 | done | — | Dewey approves the diff; claude-session.test.mjs whole and green 3x (mktemp, underscore, space TMPDIRs) on Sage's gate, in a gap; old-regex mutant red at :298 (sage) | `docs/plans/2026-10-23_gate-env-rows.md` § Brief: claude-session test builds the memory slug the way the CLI does (Vikunja 590) | Landed a863015a5 from rocko 5e8354ebb, range-diff equal, patch-id 808fa765. Gate: Dewey approve c31129 rev 3533; Sage gate on e551cd846 with file 7690a4a9, claude 2.1.309: claude-session.test.mjs whole 10/0 under mktemp, underscore and space TMPDIRs; old-regex mutant under underscore 9/1 at :298. Gates may drop the alnum TMPDIR rule (mos-1432 ends here). |
 | 305 | Shell suites remove the compose network they create (Vikunja 591) | gizmoduck; reviewers filbert | #1812 | done | — | Filbert approves the diff; test-release.sh and test-task.sh whole and green on Sage's gate, in a gap, project network absent after each run; dropped-rm mutant red (sage) | `docs/plans/2026-10-23_gate-env-rows.md` § Brief: shell suites remove the compose network they create (Vikunja 591) | Landed 353d65f57..d52d9f1f2 from gizmoduck 541dee2b7..7e8218a2e, range-diff all equal, on top of filbert 2c289f6f0. Gate: Filbert approve c31127 rev 3534; Sage gate on e551cd846 with task 7d6fbf67, release b29850ce: test-task 92/0, test-release 15/0, network check OK; mutants a and b red in both, c a known survivor; own mutant networks removed, none left. Gates stop the manual network rm (mos-1438 ends here). |
-| 306 | A revoked run's late bus call stops it instead of exiting 22 (295 N1) | morgana; reviewers dewey | #1813 | done | 272 done | Dewey approves the design, then the manifest; bus, harness and cli suites and every scripts/test-*.sh green on Sage's gate (sage) | `docs/plans/2026-10-23_gate-env-rows.md` § Brief: a revoked run's late bus call stops it instead of exiting 22 (295 N1) | Landed 2d0318a44 on 4874d1e83: 33d3844a0..683833205 replayed, 4 patch-ids equal (a1960f36 55fadbc3 af1a3d88 35cf81a3), range-diff all =. Dewey APPROVE c31206 rev 3596 on 683833205. access-revoke.test numstat 7 7 (mos-1463). Sage gate 16:33Z: every package suite 0 fail 0 skipped (bus 894, cli 942, plugins 119, webui 392, business 231, harness 151), every scripts/test-*.sh rc 0, M1-M3 each killed on every named file, restores equal. N1/N2 to DEFERRED next. |
+| 306 | A revoked run's late bus call stops it instead of exiting 22 (295 N1) | morgana; reviewers dewey | #1813 | briefed | 272 done | Dewey approves the design, then the manifest; bus, harness and cli suites and every scripts/test-*.sh green on Sage's gate (sage) | `docs/plans/2026-10-23_gate-env-rows.md` § Brief: a revoked run's late bus call stops it instead of exiting 22 (295 N1) | — |
 | 307 | Row 270's pi compaction reading moves behind the harness kind (REQ-PLUG-2, Vikunja 598) | gizmoduck; reviewers duckworth | #1814 | done | — | Duckworth approves the design, then the manifest; bus, cli, plugins (0 failures), webui and business suites, every scripts/test-*.sh green and the mutants killed on Sage's gate (sage) | `docs/plans/2026-10-23_harness-kind-compactions.md` § Brief: row 270's pi compaction reading moves behind the harness kind (Vikunja 598) | LANDED d243f6b25: 6 row commits replayed onto 8dc132bec, every non-log patch-id equal, candidate paths = 6fdfe3790 (manifest 17c9f8d9). Duckworth APPROVE rev 3586 c31189 round 1, C2 met. Sage gate: bus, cli 0 skipped, plugins fully green incl harness.test.mjs:192, webui, business, seat, every scripts/test-*.sh; M1-M4 killed. P19 598 commented. DEFERRED: 307 N1 store-unreadable not sticky. N3 doc-only BUILD.md red list one short, next BUILD.md change. |
-| 308 | PRD 1.17 Case 2 story files are DOCX (Q235 to Q237, Q239) | gosalyn; reviewers webby | #1815 | done | 291 done | Webby checks the PRD diff against DRAFT-d9.md at 4607e15b8 one instruction at a time and that nothing else changed. No new Jason question (Q239 approved the text). tasks whole, bus whole, cli stack-copy.test and every scripts/test-*.sh green on Sage's gate. Mos gets the landing commit (mos-1470). (sage) | `docs/plans/2026-10-23_prd-1-17-brief.md` § PRD 1.17 Case 2 story files are DOCX (Q235 to Q237, Q239) | Landed 30e6bb680: Gosalyn 45fe7b3ce replayed onto 7defb58e9, patch-id 4658c831 equal, range-diff =, four blobs equal. Webby r1 APPROVE c31224 rev 3606, d9 at 4607e15b8 applied word for word. Sage gate 17:19Z: every package suite 0 fail 0 skipped (tasks 100, bus 894, cli 942, plugins 119, webui 392), every scripts/test-*.sh rc 0. Mos gets the sha (mos-1470). 570/571 build rows next. |
-| 309 | 571 W1: reviewed local thesaurus data (post-10-27) | unassigned | — | queued | — | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W1 reviewed local thesaurus data | — |
-| 310 | 571 W2: WordCraft source import and reproducible restricted web build (post-10-27) | unassigned | — | queued | — | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W2 WordCraft source import and reproducible restricted web build | — |
-| 311 | 571 W3a: bus pins and human-only editor settings (post-10-27) | unassigned | — | queued | — | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W3a bus pins and human-only editor settings | — |
-| 312 | 571 W3b: human DOCX store and instant commits (post-10-27) | unassigned | — | queued | 311 done | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W3b human DOCX store and instant commits | — |
-| 313 | 571 W6: owned browser bridge and editor-only route (post-10-27) | unassigned | — | queued | 309 done, 310 done, 312 done | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W6 owned browser bridge and editor-only route | — |
-| 314 | 571 W3: full editor pane, navigation, pins and right-click synonyms (post-10-27) | unassigned | — | queued | 311 done, 312 done, 313 done | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W3 full editor pane, navigation, pins and right-click synonyms | — |
-| 315 | 571 W4b: committed reader, citation resolver and typed tools (post-10-27) | unassigned | — | queued | 314 done | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W4b committed reader, citation resolver and typed tools | — |
-| 316 | 571 W5: read-only flags, citations and chat suggestions (post-10-27) | unassigned | — | queued | 315 done | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W5 read-only flags, citations and chat suggestions | — |
-| 317 | 571 W7: human one-way chapter import and Case 2 format routing, production import closed; the first real import opens only after W8 lands (post-10-27, mos-1470) | unassigned | — | queued | 314 done, 315 done | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W7 human one-way chapter import and Case 2 format routing | — |
-| 318 | 571 W8: Console Connections view for Markdown and DOCX story files, before W7's first real import (post-10-27, mos-1470) | unassigned | — | queued | 314 done, 315 done, 317 done | Independent Opus 5.5 reviewer, not the author, approves the manifest; the brief section's Gate and G1 pass on Sage's slot: touched test files whole, affected package suites green, named mutants killed. Post-10-27; MVP rows keep slot priority (sage) | `docs/plans/2026-10-21_q195-writing-editor.md` § W8 Console Connections view for Markdown and DOCX story files | fenton-0017 carry: connections.test.mjs must test that links inside comments and tracked deletions are excluded. W8 follows W7's closed routing candidate and lands before W7's first real import opens (mos-1470) |
 
 <!-- mosaic-queue:end -->
 

docs/prd/mosaic-stack.md

@@ -1,6 +1,6 @@
 # PRD: Mosaic Stack
 
-- Status: approved, version 1.17. Jason approved draft 0.4 unchanged as
+- Status: approved, version 1.15. Jason approved draft 0.4 unchanged as
   1.0 on 2026-10-05 (lead decision 61). They approved version 1.1, the
   Organization requirements, in decision 03130d08-ddce-480d-a601-e59f64744fc3
   on 2026-10-14. They approved version 1.2, the chief of staff, the
@@ -44,44 +44,7 @@
   as 1.11 (mos-1233, mos-1238, mos-1241, vikunja:19/464). Version 1.15
   rewrites REQ-LIB-6 to Jason's Q223 and Q226 rulings and adds supporting
   folders to REQ-LIB-1 and REQ-LIB-2. Mos ordered it in mos-1320 item 8,
-  and Jason gets a report. Version 1.16 routes the new action
-  `library.write` under REQ-LIB-6 (REQ-WAIT-3). A change to the hard waits
-  needs Jason's approval under REQ-WAIT-2, so Mos puts the text to him as
-  written, and it lands only after his yes (mos-1328, mos-1329). Version
-  1.17 records Jason's rulings Q235 to Q237 of 2026-10-23: Case 2 story
-  files are DOCX, Markdown stays for agent files and documentation, and a
-  human-started import converts a Markdown story file one way. It also
-  adds REQ-LIB-9, the Console's DOCX editor, from Jason's rulings Q195,
-  Q226 and Q234. It changes what Case 2 requirements allow, so Mos puts
-  the text to Jason as written, and it lands only after his yes (mos-1366,
-  Vikunja 570).
-- Version 1.17 source: Jason's Q235, answering Q36: 'How about we see a
-  markdown file, we convert the markdown file to docx, then archive or
-  mark the markdown file as converted. The new standard for files in the
-  creating writing use case is to use docx to handle versioning and
-  WYSIWYG. We eliminate the potential for confusion based on the files.
-  Agents must understand which files are what format and where they live.
-  The system must allow for import and conversion. We will not run the
-  systems in parallel. There will be an irreversible conversion of the
-  files.' His Q236 says: 'For creative writing chapters, we need to
-  utilize docx as the standard. Markdown is acceptable for agent files,
-  instructions, PRDs, documentation, etc. The creative writing files
-  should be docx for familiarity for the user.' His Q237 says 'Q38: It is
-  correct for now (subject to future change)', which confirms Mos's
-  reading P1 to P6. REQ-LIB-9 rests on his Q195 request for 'a full
-  WYSIWYG editor within Mosaic Stack', his Q226 answer 'F41: We want to
-  move editing into the WYSIWYG in the WebUI. All changes are instantly
-  committed and available to the agents.' and his Q234 answer 'Q37: yes'
-  to the exact security header for the editor's frame. The storage follows
-  the O2 design D10 to D12 as rewritten under Vikunja 571, at b99ca86b9 on
-  `refactor`.
-- Version 1.16 source: Webby's review webby-0164 B2, from Scrooge's row
-  285. Version 1.15 lets creative agents write in supporting folders, but
-  the write action stayed a hard wait under REQ-WAIT-3, and REQ-WAIT-2
-  refuses every role file that grants one. Mos ruled in mos-1328 and
-  mos-1329 that the routing is its own version. The bounds come from
-  REQ-LIB-6 and the Case 2 design's ruling after r11, f6e3e7f20 on
-  `gosalyn/case2-design`.
+  and Jason gets a report.
 - Version 1.15 source: Jason's Q223, answering Q29: "The agents are not
   allowed to write the prose into the writing projects. Agents are
   allowed to CRUD character sheets, info summaries, cross-link info, and
@@ -743,14 +706,6 @@ Added in version 1.5 (Q167).
   `host.sudo` was added as a hard wait and routes under REQ-CRED-4 since
   version 1.8.
 
-  `library.write` was added as a hard wait and routes under REQ-LIB-6
-  since version 1.16. It is granted within-role to the six creative roles
-  only, and only for Markdown files under the supporting folders a human
-  marks. It never writes a story file. A write also needs the writing
-  agent's own live Gitea grant on the library project. Each write is one
-  commit by that agent's own Gitea account with a trailer naming the
-  agent, and the user sees a notice for it and can revert it.
-
 ### Messages
 
 - **REQ-MSG-1.** Messages are addressed to a role. They are append-only
@@ -1223,8 +1178,7 @@ design `docs/plans/2026-10-21_t1-sessions.md`, 2c843d190 on `huey/t1-sessions-de
 Added in version 1.12 (Q176 Case 2, Q211). Drafted from the Case 2
 design r11, fb20a61b4 on `gosalyn/case2-design`, approved by Webby in
 82f50d127, with the rulings recorded after r11 up to 624212842. The
-library is the user's own writing repository plus the stack's writing
-store, which holds the DOCX story files (REQ-LIB-8, version 1.17).
+library is the user's own writing repository.
 
 - **REQ-LIB-1.** A library project maps the user's writing repository
   onto universes, books, entity types such as character and place, the
@@ -1233,12 +1187,9 @@ store, which holds the DOCX story files (REQ-LIB-8, version 1.17).
   human changes it, and an agent's organization write that changes it
   is refused. So
   `universe.book.{character,place,...}` reads as universe, book folder,
-  type folder. The mapping also names one archive folder, set by the
-  human, where converted Markdown story files go. A book's DOCX story
-  files are in the stack's writing store, under the same universe and book
-  (REQ-LIB-8). (Design 1.1 and M9. Q176 Case 2 "Data is stored in
-  little-endian organizational scheme". Version 1.15: supporting folders.
-  Version 1.17: the archive folder and the writing store.)
+  type folder. (Design 1.1 and M9. Q176 Case 2 "Data is stored in
+  little-endian organizational scheme". Version 1.15: supporting
+  folders.)
 - **REQ-LIB-2.** Playgrounds are never confused with canon. A playground
   has one of three levels, set by where its prefix sits. A book-level
   prefix lies inside one of its universe's book folders, and its files
@@ -1253,34 +1204,18 @@ store, which holds the DOCX story files (REQ-LIB-8, version 1.17).
   its own universe, when two prefixes overlap, when a draft has books or
   no prefix, and when a hybrid names a draft as a source. Supporting
   prefixes, the folders agents may write in (REQ-LIB-6), follow the same
-  placement rules. A Markdown file's scope comes from its path and from
-  past imports, prefixes first: a Markdown file under the archive folder
-  is archived, one under a supporting prefix is supporting, a Markdown
-  file at a converted file's old path is unmapped under REQ-LIB-8 but
-  flagged in the format map, one under a playground prefix at any level is
-  playground, any other Markdown file in a book folder is canon, and
-  everything else is unmapped and never returned. A folder in both lists
-  is supporting. The archive folder follows the same placement rules and
-  may not overlap another prefix or a book folder. An archived file keeps
-  the path it had under the archive folder, and its universe and book are
-  those of that old path. A DOCX document in the writing store keeps its
-  source's scope: the universe, the book if there is one, and canon or
-  playground. Its source is the Markdown file it was converted from or,
-  for one the human starts in the editor, the universe and book or the
-  playground the human picks (REQ-LIB-8). A playground DOCX follows the
-  playground rules and is never returned as canon. It stays playground
-  after its draft universe is made real. In version 1.17 no promotion or
-  mapping change makes a playground DOCX canon. A later version of this
-  PRD says how one becomes canon. Lookups return canon unless the caller
-  asks for playground, supporting or archived. Every answer marks an
-  archived file as archived and names the DOCX that replaced it. A
-  citation marked as canon must name a canon file, so an agent can't cite
-  a playground, supporting or archived file as canon. The Console shows
-  each cite's scope and format, and whether a cited Markdown file was
-  converted. (Design 1.2, 5.2 and 7.4, the playground ruling, 51fdfb7e2,
-  and the ruling after r11. Q176 Case 2, the playground items,
-  TARGET.md:92-94. Version 1.14: the levels and the draft. Version 1.15:
-  supporting. Version 1.17: archived scope and DOCX scope.)
+  placement rules. A file's scope comes from its path alone, prefixes
+  first: a Markdown file under a supporting prefix is supporting, one
+  under a playground prefix at any level is playground, any other
+  Markdown file in a book folder is canon, and everything else is
+  unmapped and never returned. A folder in both lists is supporting.
+  Lookups return canon unless the caller asks for playground or
+  supporting. A citation marked as canon must name a canon file, so an
+  agent can't cite a playground or supporting file as canon. The Console
+  shows each cite's scope. (Design 1.2, 5.2 and 7.4, the playground
+  ruling, 51fdfb7e2, and the ruling after r11. Q176 Case 2, the
+  playground items, TARGET.md:92-94. Version 1.14: the levels and the
+  draft. Version 1.15: supporting.)
 - **REQ-LIB-3.** Universes stay separate. Every lookup names one universe,
   and its results never leave it. A draft universe (REQ-LIB-2) counts as
   a universe here. It has no canon, so a lookup in a draft asks for
@@ -1296,62 +1231,23 @@ store, which holds the DOCX story files (REQ-LIB-8, version 1.17).
   A pin doesn't stop the change. The continuity agent reads the human's other
   constraints and cites them. (Design 1.4 and 3. Q176 Case 2, the
   crossover items.)
-- **REQ-LIB-4.** Git holds every change. The user commits and pushes
-  Markdown with their own tools, today Obsidian with obsidian-git. A
-  converted story file's current text is no longer in that repository,
-  which keeps only its archived Markdown (REQ-LIB-8). The bus keeps a
+- **REQ-LIB-4.** Git holds every change. The user commits and pushes with
+  their own tools, today Obsidian with obsidian-git. The bus keeps a
   mirror of the remote, fetched with a read-only token every 60 seconds
   and before any lookup when the last fetch is older than that. It only
   fast-forwards. A force-push is held as `library-diverged` until a human
-  accepts it. Agents read the user's repository only at the mirror's
-  served commit, except a story file during its import under REQ-LIB-8.
-  They read a DOCX story file only at a committed version in the writing
-  store, under REQ-LIB-5. They never hold a copy of their own, so they see
-  the user's Markdown push within about a minute and a DOCX save at their
-  next lookup after the editor reports it as committed. Bus writes and
-  pushes come in later rows (C2-02, C2-03b). A DOCX story file is saved in
-  the Console's editor, and each accepted save is one commit by the human
-  in the stack's writing store (REQ-LIB-9). Each writing-store commit is
-  also pushed to a remote off the stack's host, never by force-push. The
-  remote is a setting only a human changes, and it starts unset. A
-  repository on the stack's host never counts as that remote. A missing
-  remote or a failed push never undoes a save, and the user sees each push
-  that is pending or failed. Only the stack's host pushes to that remote,
-  and no agent can reach it with any credential. Agents read the local
-  commit. (Design D5, D6, 7.1, 7.2 and 7.5. Q176 Case 2 "Git is used for
-  all changes -- local and remote" and the sync items. Version 1.17, with
-  Q222 for the remote setting.)
+  accepts it. Agents read only the mirror's served commit and never hold
+  a copy of their own, so they see the user's push within about a minute.
+  Bus writes and pushes come in later rows (C2-02, C2-03b). (Design D5,
+  D6, 7.1, 7.2 and 7.5. Q176 Case 2 "Git is used for all changes -- local
+  and remote" and the sync items.)
 - **REQ-LIB-5.** Agents check the library through typed lookup tools:
-  find, get, search, manuscript and universe. Each answer names the commit
-  it read. Each answer also names the file's format and where it lives:
-  its path, or its document id in the writing store. A DOCX story file is
-  read from its latest committed save, never from unsaved text. A lookup
-  that starts after the editor reports a save as committed returns that
-  save or a later one, even while its push to the remote is pending or has
-  failed, and the answer names the version. Get, search and manuscript
-  read a DOCX story file as its extracted text with DOCX locators, never
-  as lines. That text is the file with its tracked changes accepted. An
-  agent reads a story file's comments, or its text with tracked deletions
-  shown, only after a human turns on the matching setting. Both settings
-  are off by default, and only a human changes them. The reader in this
-  version can't read some things a DOCX story file can hold, such as a web
-  link, a text box, a field or hidden text. The editor warns the human
-  when an edit adds one, and the human can still save it. Until a later
-  save takes it out, lookups give agents none of the text of the part that
-  holds it, whether that is the chapter's body, a note or a comment. The
-  manuscript lookup follows the book's chapter order across both formats
-  (O2 design D10), and the next chapter it names is never an archived
-  file. Links out and in resolve across both formats. The universe lookup
-  returns the format map (REQ-LIB-8). Get returns a file's links out and
-  links in, so the connections are visible to agents. The user sees a
-  Markdown file's links in Obsidian's graph and backlinks. A DOCX story
-  file's wikilinks stay clickable in the Console's editor (O2 design D11),
-  and no graph shows them yet. The Console's Connections view lists the
-  current links and backlinks of each story file the user may see, in both
-  formats, with each one's scope and format. (Design 3 and 7.1. Q176 Case
-  2 "The agents have tools to check character, place, and other data", the
-  visualization item and "Connections are always visible". Version 1.17,
-  with Q222 for the two settings and Q239 for the Connections view.)
+  find, get, search, manuscript and universe. Each answer names the
+  commit it read. Get returns a file's links out and links in, so the
+  connections are visible to agents. The user sees them in Obsidian's
+  graph and backlinks. (Design 3 and 7.1. Q176 Case 2 "The agents have
+  tools to check character, place, and other data", the visualization
+  item and "Connections are always visible".)
 - **REQ-LIB-6.** The creative roles are ideas, research, proofreader,
   fact-checker and continuity, plus a companion role that the user's own
   named agents run as. Agents never write the story. A creative agent may
@@ -1359,37 +1255,22 @@ store, which holds the DOCX story files (REQ-LIB-8, version 1.17).
   folders a human marks (REQ-LIB-1), such as character sheets, summaries,
   cross-link notes and research notes. Every other path in the user's
   repository is read-only to it, chapters and unmarked folders included,
-  and the broker refuses such a write before any git call. The writing
-  store and the archive folder are read-only to a creative agent as well,
-  and the broker's path check treats the archive folder as story. No agent
-  creates, edits, deletes, converts, archives or restores a story file in
-  any format, and no agent writes a DOCX. No creative agent starts or
-  undoes a conversion, and none asks for one through a tool or a decision
-  it raises, as REQ-LIB-8 says. An agent may still suggest a conversion to
-  the human in chat. Each creative role's contract states which files are
-  DOCX and which are Markdown, and cites a DOCX story file by its locator,
-  never by line. Each agent write is one commit by that agent's own Gitea
-  account, with a trailer naming the agent. The user sees a notice for it
-  and can revert it. Its tools are the lookups, a message to the human and
-  the two write tools, and research and companion also fetch web pages
-  through the broker. The write tools need the action `library.write`,
-  which routes under this requirement within the bounds REQ-WAIT-3 names
-  (version 1.16). Agents talk with the user in free text. A reply may cite
-  lines of a Markdown file at a commit, a place in a committed DOCX story
-  file, or pages the agent fetched, and the broker checks every citation
-  before it stores the message. A DOCX citation never calls a paragraph a
-  line. It names the document id, the committed version and a DOCX
-  locator. A citation that names an archived file as current is refused.
-  The `requireCitation` setting below applies to Markdown and DOCX
-  citations alike, and so does the rule for a citation marked as canon. A
-  setting, `requireCitation`, makes every reply carry a citation, except
-  the runner's fixed notices for no answer, a failed turn, no answer
-  passing the citation check and an answer too long to send. Only the
-  human changes it, and it is off by default. The user sees only stored
+  and the broker refuses such a write before any git call. Each agent
+  write is one commit by that agent's own Gitea account, with a trailer
+  naming the agent. The user sees a notice for it and can revert it. Its
+  tools are the lookups, a message to the human and the two write tools,
+  and research and companion also fetch web pages through the broker.
+  Agents talk with the user in free text. A reply may cite lines of the
+  repository at a commit or pages the agent fetched, and the broker
+  checks every citation before it stores the message. A setting,
+  `requireCitation`, makes every reply carry a citation, except the
+  runner's fixed notices for no answer, a failed turn, no answer passing
+  the citation check and an answer too long to send. Only the human
+  changes it, and it is off by default. The user sees only stored
   messages, on every channel. (Design 4, 5.2 and the ruling after r11.
   Q223 and Q226. Q180 for Bean and Chet. Q176 Case 2, the agent list,
   "User sets strict guardrails for agent capabilities" and TARGET.md:101
-  "Agents NEVER write prose for the user". Version 1.15. Version 1.17.)
+  "Agents NEVER write prose for the user". Version 1.15.)
 - **REQ-LIB-7.** The user talks to several creative agents in one chat. A
   room holds one thread per creative agent in a project. A message goes
   to every agent in the room, or only to the agents named by @tags at its
@@ -1397,110 +1278,6 @@ store, which holds the DOCX story files (REQ-LIB-8, version 1.17).
   the threads as one timeline, and each agent sees only its own thread.
   (Design D4 and 6, row C2-09b. Q176 Case 2 "converse with N agents in
   one chat session with @tagged messages".)
-- **REQ-LIB-8.** Story files become DOCX. DOCX is the standard for chapters and
-  the other story text in a Case 2 writing project, canon and playground alike. A
-  story file becomes DOCX through a human's import (below), or when the human
-  starts it in the editor. From then on DOCX is its only working format, edited in
-  the Console's editor (REQ-LIB-9). A Markdown story file stays Markdown until its
-  import. Files in a type folder (REQ-LIB-1), such as character and place notes,
-  stay Markdown. So do supporting files, agent files, instructions, PRDs and
-  documentation, including the character sheets, summaries and cross-links agents
-  keep under REQ-LIB-6.
-  - A converted story file's current text leaves the user's Gitea-mirrored
-    repository. Its DOCX lives in the stack's writing store, on the stack's host,
-    and not in the repository the user pushes or opens in Obsidian. Only its
-    archived Markdown stays there.
-  - An import converts one Markdown story file, canon or playground, outside every
-    type folder (REQ-LIB-1), to a DOCX document in the writing store. It refuses
-    an unmapped, supporting, archived or type-folder file, and a file that is
-    already converted. Each import has its own fidelity report, the human's
-    confirmation of that report, a manifest naming the source file and its commit,
-    and one commit in the store. The DOCX keeps every wiki link of the source as
-    written, and a lost link to another library file fails the fidelity report. A
-    web link becomes plain text that keeps its label and address, and the fidelity
-    report lists it for the human to confirm. A web link that can't be kept safely
-    as plain text refuses the import.
-  - The human can also start a new story file in the editor, in a universe and
-    book or a playground the human picks. It is a DOCX document in the writing
-    store from its first commit, with no Markdown copy, and it opens under the
-    same gate as the import.
-  - The same import marks the Markdown file converted, naming the document, and
-    moves it to the archive folder under its old path (REQ-LIB-1, REQ-LIB-2).
-    The mark and the move are one commit authored by the human in the user's
-    repository. A new human-only bus step (Vikunja 571) on the C2-02 write
-    plumbing writes it, and C2-03b pushes it. The move keeps the bytes and the
-    git history, so it isn't `data.delete`.
-  - The store commit comes first, and the writing store's remote must confirm it
-    holds that commit. Then come the archive commit and its push, then publication
-    to the lookups. Until publication the Markdown at its old path keeps its canon
-    or playground scope. Agents read that file at the commit the import started
-    from, even after the mirror's served commit reaches the archive commit or a
-    later one. No lookup returns the file's archived copy before publication, even
-    one that asks for archived files. A refusal or failure before the archive push
-    leaves the Markdown unmoved and no DOCX that a lookup returns. A failure after
-    the archive push leaves a pending import that the human sees and can resume,
-    never a claim that nothing moved. An archive push whose result is unknown
-    counts as a failure after the archive push until the stack reads the result
-    back from the user's remote.
-  - Each stage of an import writes a logged event. The import's record on the
-    stack's host names the source file's path, commit and blob and the new
-    document id, and each event points to that record.
-  - After a conversion, a Markdown file at the converted file's old path is
-    neither canon nor playground. Lookups leave it out, the format map flags it,
-    and the human is told.
-  - A new Markdown story file in a book folder that holds converted files stays
-    canon until its import, unless it sits at a converted file's old path or under
-    a playground prefix. The Console flags it and offers the import. Nothing
-    converts it on its own.
-  - A hybrid's exclusion that covers a converted file's old path also covers its
-    DOCX document (REQ-LIB-3). An exclusion of a whole book folder also covers
-    every DOCX document in that book, including one started in the editor. An
-    exclusion can also name a DOCX document by its id.
-  - Only a human starts an import or a new story file, from the CLI or a Console
-    session signed in as that human. Both are human verbs outside the agent action
-    vocabulary. Neither is added to `ACTIONS` in the business vocabulary or to the
-    broker's always-gated list, including the import's action, `library.convert`.
-    No role holds them, no agent can request them, and the hard-wait list in
-    REQ-WAIT-1 doesn't change. In an organization with several humans, who may
-    start them is a setting only a human changes, and the default is the owner
-    only.
-  - Conversion is one way, with no parallel run. Neither the Console nor any agent
-    edits a converted story file as Markdown, and no DOCX edit syncs back to
-    Markdown. The Console's Markdown save refuses every file under the archive
-    folder. The user's own tools can still change the archived Markdown, and no
-    such change reaches the DOCX. The old Markdown stays in git history, and
-    nothing rewrites history. A promotion into a book folder (C2-19) runs the
-    import for a Markdown story file or is refused. A promotion of a playground
-    DOCX is refused in version 1.17.
-  - Agents get a format map: for each mapped folder and story file, its format,
-    scope and where it lives, archived files, flagged files and pending imports
-    included.
-  - The import and new story files ship closed. They open only after four things.
-    The editor ships. The human has set the writing store's remote, and the stack
-    has checked that it can push there. Agents can read committed DOCX story files
-    through the lookups and cite them (REQ-LIB-5, REQ-LIB-6). Any earlier agent
-    system that writes the user's files has stopped, which for Case 2 is the
-    Hermes retirement (#423 step 5). So the import itself never cuts agents off
-    from a chapter, the chapter's current text never lives only on the stack's
-    host, and no second system writes the story. The first import of a real user's
-    books waits for Jason's go.
-  (Q235, Q236, Q237: P1 to P6. Q222 for the setting. O2 design D10 to D12.
-  Version 1.17.)
-- **REQ-LIB-9.** The Console's DOCX editor. The human edits a DOCX story file in
-  the Console's editor, in a split pane with the agent chat alongside it. The
-  human can pin an agent chat to a document. The human can select a word,
-  right-click it, and choose a synonym from a thesaurus. Only a human saves. Saves
-  happen on their own while the human types (Q226), at intervals only a human
-  changes, and each accepted save is one commit with the human as author, pushed
-  as REQ-LIB-4 says. A save made against an older version than the current one is
-  refused. Agents never write a DOCX. Versioning is the editor's tracked changes
-  plus one git commit per save. The editor's code is vendored and pinned, with a
-  hash per file and the licenses that its independent security review accepted. At
-  runtime the editor loads only files that the stack itself serves, and it
-  requests nothing from any other host. The editor's frame sends exactly the
-  content security policy Jason approved in Q234, and the WebUI shell's own header
-  is unchanged. REQ-PROJ-3's project docs editor is unchanged. (Q195, Q226, Q234,
-  Q236. O2 design D3, D4, D6, D8, D10, D13, D14, D16 and D22. Version 1.17.)
 
 ### Installer
 
@@ -1973,118 +1750,6 @@ latest-by date and a hard target (Q176).
     ruling after r11 and in the Q226 briefs of
     `docs/plans/2026-10-20_case2-rows.md`. Sage files the rows under
     Vikunja 416. This amendment adds the requirements only.
-- Version 1.16:
-  - REQ-WAIT-3 gains one paragraph, the `library.write` routing and its
-    bounds. REQ-LIB-6 gains one sentence naming the action. No other
-    requirement text changes.
-  - `packages/tasks/requirements.json` changes its version to 1.16 and
-    nothing else. The titles stay and the id count stays 85.
-  - The commit that adds `library.write` to `ROUTED` in the business
-    vocabulary and the broker is C2-08b, row 285. It lands only after this
-    version.
-- Version 1.17:
-  - Jason confirmed the reading 'for now (subject to future change)' (Q237). The
-    rulings stand until he revises them.
-  - The 10-27 Case 2 release ships on Markdown as built (P6). The 1.11 line 'The
-    Case 2 MVP for 10-27 is the Markdown library (#416). The WYSIWYG editor (Q195,
-    Q196) is an add-on that doesn't gate it.' still holds. Conversion opens after
-    10-27, and only once REQ-LIB-8's four conditions are met. The editor ships,
-    the writing store's remote is set and the stack has checked that it can push
-    there, agents can read and cite committed DOCX story files through the
-    lookups, and Hermes is retired, which is #423 step 5.
-  - The 1.12 note says five bus write and Console editor rows, C2-02, C2-03b,
-    C2-11a, C2-11b and C2-19, don't gate 10-27. Jason's Q226 F42 later moved
-    C2-02, C2-03b and C2-11b into the 10-27 slice. The Case 2 design brings C2-11a
-    in with them, because C2-11b needs it. C2-19 stays outside the slice. Mos's
-    reading of F42 is that C2-02 and C2-03b now gate 10-27, because design 9.2
-    puts them in 'the smallest slice that lets her start'. C2-11a and C2-11b are
-    slice rows that still don't gate 10-27, because the editor is the Q195 add-on.
-    The DOCX change in 1.17 leaves this slice as it is, and C2-11b's Markdown
-    editor never edits a converted story file.
-  - Q236 narrows Q176's editor choice to DOCX for story files (REQ-LIB-9). The
-    1.12 note that the Case 2 design keeps Obsidian now holds only for Markdown
-    files, including story files not yet imported. A DOCX story file is edited
-    only in the Console's editor under REQ-LIB-9.
-  - This replaces two parts of the O2 design at 25c09f19f. The superseded-notice
-    proposal from Fenton's F1 in D12 is withdrawn, and the
-    keep-Markdown-at-its-path model of D11 is replaced. Gyro's rewrite of the O2
-    design for Vikunja 571, landed on `refactor` at b99ca86b9, carries the
-    details, and where it differs from this text, this text holds:
-    - the import and archive steps, the mark, and the new bus step;
-    - links from supporting files to a moved chapter;
-    - the DOCX reader;
-    - the user's unpushed or later changes to an archived file or at its old path,
-      and pushing and closing the file in Obsidian before each import;
-    - the writing store's remote in W4 section 7.3, which replaces the no-remote
-      and no-backup rule that W4 section 7.4 held before the rewrite, at
-      062646487;
-    - import events counted by a bus restore, and recovery when a bus restore or a
-      restore of the whole host predates an import;
-    - manifest order for the manuscript lookup and its next chapter;
-    - `library.convert` kept out of `ACTIONS`, out of the hard-wait note and out
-      of the pinned `GATED_ONLY` list in packages/business/src/vocabulary.mjs.
-  - Agents read a converted story file through the Case 2 lookups under the same
-    project and universe access as Markdown canon, in any thread or room. W4's
-    earlier O2-only conversations, per-document grants and per-send sharing don't
-    gate these lookups. The 571 rewrite replaced them in W4 sections 7.1 and 7.2.
-    The creative tool list in REQ-LIB-6 doesn't change.
-  - The six creative role contracts row 213 landed say 'Every item cites the
-    lines of the user's material it is about'. A build row under 571 changes that
-    line for DOCX story files (REQ-LIB-6).
-  - A new Markdown file in a book folder is still canon in 1.17. The 1.17
-    exception is a file at a converted file's old path, which REQ-LIB-2 makes
-    unmapped.
-  - Story files convert whether canon or playground. Type-folder and supporting
-    files stay Markdown.
-  - Measured 2026-10-23 at about 01:21Z: the Case 2 user's library repository
-    tracks 213 files, 203 of them Markdown, and none is a .docx or .doc. It has no
-    untracked files. The user's .doc files (Q196) are outside it. So the landed
-    code has no DOCX there to report as unreadable at 10-27.
-  - Text replaced in 1.17, kept here as in earlier notes:
-    - Creative library lead, the 1.16 sentence: "The library is the user's own
-      writing repository."
-    - REQ-LIB-2, the 1.16 sentences: "A file's scope comes from its path alone,
-      prefixes first: a Markdown file under a supporting prefix is supporting,
-      one under a playground prefix at any level is playground, any other
-      Markdown file in a book folder is canon, and everything else is unmapped
-      and never returned. A folder in both lists is supporting." "Lookups return
-      canon unless the caller asks for playground or supporting." "so an agent
-      can't cite a playground or supporting file as canon" "The Console shows
-      each cite's scope."
-    - REQ-LIB-4, the 1.16 sentences: "The user commits and pushes with their own
-      tools, today Obsidian with obsidian-git." "Agents read only the mirror's
-      served commit and never hold a copy of their own, so they see the user's
-      push within about a minute."
-    - REQ-LIB-5, the 1.16 sentence: "The user sees them in Obsidian's graph and
-      backlinks." A converted chapter's connections show in Obsidian only as they
-      stood at conversion, and the Console's Connections view shows their
-      current links.
-    - REQ-LIB-6, the 1.16 sentence: "A reply may cite lines of the repository at
-      a commit or pages the agent fetched, and the broker checks every citation
-      before it stores the message."
-    - REQ-LIB-1 only gains sentences.
-  - REQ-LIB-3's text and REQ-LIB-7 are unchanged. REQ-LIB-8 adds one form of
-    exclusion REQ-LIB-3 doesn't have: naming a DOCX document by its id. A path
-    exclusion also covers DOCX documents, through a converted file's old path or a
-    whole book folder. An archived file and a DOCX document keep a universe, and a
-    book where their source has one, so every lookup still names one universe.
-    REQ-PROJ-3, the Console editor for a project's spec and docs, is unchanged.
-    C2-11b opens the library's Markdown files in that same editor.
-  - In `packages/tasks/requirements.json` the titles of REQ-LIB-1, REQ-LIB-2 and
-    REQ-LIB-4 change, and those of REQ-LIB-5 and REQ-LIB-6 stay. REQ-LIB-1 becomes
-    'A human-set library maps the user's repository onto universes, books, types,
-    playgrounds, supporting and archive folders'. REQ-LIB-2 becomes 'Scope comes
-    from the path or a DOCX's source, lookups default to canon, and only canon
-    files are ever cited as canon'. REQ-LIB-4 becomes 'Git holds every change. The
-    bus fast-forwards a read-only mirror every 60 seconds, the one place agents
-    read Markdown'. REQ-LIB-8 and REQ-LIB-9 add two ids, so the count goes from 85
-    to 87. REQ-LIB-8 is titled 'Case 2 story files become DOCX by a human-only
-    one-way import or in the editor; Markdown stays for notes and docs', and
-    REQ-LIB-9 'The Console's DOCX editor: only a human saves, each save is one
-    commit, and the editor code is vendored and pinned'.
-  - Open points O1 to O4 of draft 1 were ruled by Mos in mos-1367 B1 to B4.
-  - Sage files the build rows under Vikunja 570 and 571 after the rewrite is
-    approved. This amendment adds the requirements only.
 
 ## Risks and open questions
 
@@ -2123,26 +1788,6 @@ latest-by date and a hard target (Q176).
   seat sandbox with its own network namespace closes it. Until then the
   host's own audit log is the check after the fact (row 210 design section
   6).
-- A DOCX file is a zip archive, so git can't show a line diff of a chapter.
-  Review of a story change goes through the editor and the committed reader,
-  not `git diff`. (Version 1.17.)
-- A converted chapter's DOCX is not in Obsidian's graph. Obsidian shows the
-  chapter only through its archived Markdown, and no DOCX edit reaches that file's
-  links. The DOCX's current links show in the Console's editor and its
-  Connections view, and no graph shows them yet. (Version 1.17.)
-- Conversion can't be undone in place. Front matter, wiki link forms and
-  unsupported blocks may not survive it, and the mirror can't refuse the user's
-  push to an archived file. The controls are the fidelity report, the human's
-  confirmation, an untouched original on refusal, and the kept archive.
-  (Version 1.17.)
-- A restore of the stack's bus alone from a backup taken before an import drops
-  the import's logged events, while the archive commit and the DOCX stay. A
-  restore of the stack's whole host from such a backup also takes the writing
-  store and the host's import records back to before the import. The archive
-  commit stays in the user's Gitea repository and the DOCX stays on the writing
-  store's remote, but the host keeps no record of the import. A bus restore counts
-  import events, and the import's recovery covers both cases (Vikunja 571).
-  (Version 1.17.)
 
 ## Milestones
 

packages/bus/README.md

@@ -226,8 +226,6 @@ an operator inspect content and delivery evidence after an uncertain result.
 | `hosts.remove` | `{host}`; the human or the tester. Deletes the record, writes `grant.host.removed` and removes the installer key. A `host_grants` record for the host is `host-in-use`, a guarded event naming a host line left on the host `host-line-left`. |
 | `hosts.revoke` | `{agent,host,reason}`; the human, the business's assistant, or the tester when `bus.tester` is exactly `true` (row 235, #1741, r6 section 6). Anyone else gets `revoke-refused`. The tester check reads `bus.tester` again at the call, `tester-dev-only`. One transaction deletes the `host_grants` record and writes `grant.revoked` with `hostLine:"pending"`. With no await between, the key leaves memory and its file goes, and a `host.run` or executor in flight aborts. Then `remove <user> <tag>` runs on the host and `grant.revoke.closed` records `hostLine:"removed"` or `hostLineLeft`. A revoke with no record still runs, with `granted:false`. Returns `{agent,host,tag,granted,keyFile,hostLine or hostLineLeft}`. A restart with a pending marker runs the remove once the bus is up; `hosts.status` lists its tag under `revoking`. |
 | `hosts.sweep` | `{host}`; the human or the tester (r6 X3). Runs `list <user>` and removes each listed tag this business recorded for the host in a `grant.step` or `grant.revoked` that no live grant holds. Another business's line and an unrecorded `mosaic-` line stay. Writes `grant.host.swept {host,removed,left}`; `hostLineLeft` then counts from it. Returns `{host,removed,hostLineLeft}`. |
-| `grants.scope` | `{}`; the proven human CLI only (row 298, #1804, Q228). Returns the organization revision, effective scope and fallback flag. `launch.grantScope` missing or invalid covers nothing. |
-| `grants.scope.set` | `{revision,scope}`; the proven human CLI only, itself Approve for the scope change. Agents, testers, readers and Console caps refuse. Strict scope shape; optimistic organization revision, durable organization receipt, and `grant.scope` with human proof and old/new scope digests. General organization setters cannot write this setting. Scope matches per-method agent and every project, or agent/host and exact command arrays; host enrollment is excluded. In-scope requests by `launch.by` close via `scope` with protected `grant.scope.used` evidence, and run the existing grant executor without per-grant Approve. The raise returns the closed decision view to the chief; this shortcut sends no separate decision-close message. Outside scope waits as before. Scope narrowing before spend fails `scope-changed`; every issued grant keeps its records and revoke path. Empty default ships; the live value is Jason's to set. |
 | `grants.status` | `{service:"gitea"}`; the human, the tester or the chief (row 236, #1742, #436b r5). The admin slot's url, account and rotate-by date with `rotationDue`, `adminTokenLeft`, the `gitea_users` and `gitea_grants` records, approved decisions not yet run (`spentAtNextStart`), grants `running` or `settlePending`, agents held as `tokenUnknown`, the `serviceLeft` entries a sweep retries, and revokes still `revoking`. No token. |
 | `grants.run` | `{decision}`; the human only. Starts the Gitea executor of a `credential.mint` decision with a gitea grant the human said yes to, as the yes itself does (X1). Step 0's refusals come back with no record: `not-authorized`, `decision-consumed`, `grant-token-unknown`, `grant-busy`, `gitea-not-configured`. Returns `{decision,agent,started:true}`; the outcome is a `grant.applied` or `grant.failed` and a notice. |
 | `grants.revoke` | `{service:"gitea",agent,reason}`; the human, the business's assistant, or the tester when `bus.tester` is exactly `true`. The token leaves memory and its file goes, an executor in flight aborts, then one transaction deletes the `gitea_grants` record and writes `grant.revoked` with the token ids to delete. The deletes run with the admin token after C1 to C4, and `grant.revoke.closed` records `serviceLeft`, a list. `credentials.revoke AGENT gitea` and `credentials.delete` do the same for a stack-made user; delete also deletes every token of the user and sets `prohibit_login` (fire). |

packages/bus/src/broker.mjs

@@ -4,7 +4,7 @@ import { initializeControl, processingStatus } from '../../processing-control/sr
 import { NAME as HARNESS_NAME } from '../../plugins/src/kinds.mjs';
 import { loadRequirements } from '../../tasks/src/requirements.mjs';
 import { MERGE, LandingRefusal, readLanding } from './landing.mjs';
-import { ID_PATTERN, THREAD_DEFINITIONS, END_PROTECTED, forkProblem, forkUrl, credentialKind, validArgv, commandAllowed, HOST_ID, CREATIVE_DEFINITIONS, unhireableAction, giteaName, parseGiteaUrl, covers, grantScopeOf, grantInScope } from '../../business/src/vocabulary.mjs';
+import { ID_PATTERN, THREAD_DEFINITIONS, END_PROTECTED, forkProblem, forkUrl, credentialKind, validArgv, commandAllowed, HOST_ID, CREATIVE_DEFINITIONS, unhireableAction, giteaName, parseGiteaUrl, covers } from '../../business/src/vocabulary.mjs';
 
 // Kept closed while S1 lands; its vocabulary is the integration authority.
 export const ACTIONS = Object.freeze([
@@ -137,9 +137,6 @@ export const TESTER_VERBS = Object.freeze(['message.send', 'message.receive', 'm
 // collaborator grant, so a viewer gets access-refused on each.
 export const USER_VERBS = Object.freeze(['project.list', 'thread.create', 'thread.list', 'thread.open', 'thread.send', 'thread.messages', 'names',
   'thread.share', 'thread.unshare', 'thread.shares']);
-// Row 252 (#1753, design sections 2-3): the only verbs a Console owner cap reaches. Every other verb
-// refuses it human-required before its own checks, and these refuse every other cap.
-export const CONSOLE_VERBS = Object.freeze(['decision.preview.console', 'decision.resolve.console']);
 // Row 275 (193b1b, #1780, row 193 design 4.3 and 9): the user verbs a viewer grant reaches. They
 // read, so a live grant at any level covers them. thread.create, thread.open and thread.send need a
 // collaborator grant on the project and instance, so a viewer gets access-refused on each.
@@ -290,9 +287,6 @@ export function writeGrantEvent(store, at, business, body, subject = null) {
   );
   return eid;
 }
-// Row 298 (#1804, Q228): the by of a close the chief's grant scope makes, with via 'scope'. No session
-// closes as it, and #approvedGrant takes it only with the grant.scope.used record of that close.
-const SCOPE_BY = 'grant-scope';
 export const HOSTS_VERBS = Object.freeze(['hosts.status', 'hosts.check', 'hosts.remove', 'hosts.revoke', 'hosts.sweep']);
 // Row 236 (#1742, #436b r5): the Gitea grant path's verbs. run and admin.* are the human's alone.
 export const GRANTS_VERBS = Object.freeze([
@@ -415,7 +409,6 @@ export class Broker {
   #revokeUndo = [];
   #testerOn;
   #roleFile;
-  #grantScope;
   // Row 236 (#436b): giteaGrant and giteaKeys from gitea-grant.mjs, or null, and the remote halves of
   // section 5's restart rows and of revokes a restart cut short, for reconcileGitea.
   #giteaGrant;
@@ -443,12 +436,11 @@ export class Broker {
   #clock = 0;
   #processing;
   // credentialStatus is the runtime's metadata-only Credentials.status(); the broker never gets use().
-  constructor({ store, businesses, secretCheck = () => {}, credentialStatus = () => [], organization = null, project = null, library = null, usage = null, limits = null, harnessOn = null, credentialVerbs = null, hostGrant = null, hostKeys = null, processing = null, testerOn = null, grantScope = null, roleFile = null, giteaGrant = null, giteaKeys = null, access = null, accessStamp = null, compactions = null }) {
+  constructor({ store, businesses, secretCheck = () => {}, credentialStatus = () => [], organization = null, project = null, library = null, usage = null, limits = null, harnessOn = null, credentialVerbs = null, hostGrant = null, hostKeys = null, processing = null, testerOn = null, roleFile = null, giteaGrant = null, giteaKeys = null, access = null, accessStamp = null, compactions = null }) {
     if (!object(businesses) || !Object.keys(businesses).length) fail('invalid-business');
     // Row 194 b15 (sage-2501): the function-argument checks come before anything reads the store.
     if (harnessOn !== null && typeof harnessOn !== 'function') throw new TypeError('harnessOn must be a function');
     if (testerOn !== null && typeof testerOn !== 'function') throw new TypeError('testerOn must be a function');
-    if (grantScope !== null && typeof grantScope !== 'function') throw new TypeError('grantScope must be a function');
     if (roleFile !== null && typeof roleFile !== 'function') throw new TypeError('roleFile must be a function');
     if (access !== null && typeof access !== 'function') throw new TypeError('access must be a function');
     if (accessStamp !== null && typeof accessStamp !== 'function') throw new TypeError('accessStamp must be a function');
@@ -486,9 +478,6 @@ export class Broker {
     // sets bus.tester to exactly true; the bus runtime reads it live, so a hand edit counts at the next
     // tester lifecycle call and at the take. Without it the broker's own copy decides.
     this.#testerOn = testerOn ?? ((business) => this.#business(business).vars?.['bus.tester'] === true);
-    // Row 298 (#1804, Q228): grantScope(business) reads {value, revision} atomically from the
-    // organization file. Without a configured reader no scope can authorize a grant.
-    this.#grantScope = grantScope ?? (() => ({ value: undefined, revision: null }));
     // Row 194 (#1692, D2.3): roleFile(name) loads role definition `name` from the roles directory as it
     // stands, for the hire checks. Without it a hire refuses not-configured.
     this.#roleFile = roleFile;
@@ -1467,26 +1456,6 @@ export class Broker {
     if (!this.#userGrants(s).length) fail('access-revoked');
     return this.#cap(s);
   }
-  // Row 252 (#1753, design section 2): the trusted Console transport invokes this only after
-  // verifyPrincipal checked the console-cli wrapper, its webui `serve` parent and the signed-in owner.
-  // The cap is the business human's with via 'console' and the owner subject. request() lets it reach
-  // CONSOLE_VERBS only, and #human refuses it, so no cli verb accepts it.
-  bindConsole(record) {
-    keys(record, ['business', 'human', 'subject'], ['business', 'human', 'subject']);
-    const b = this.#business(record.business);
-    const x = record.subject;
-    if (record.human !== b.human || !object(x) || Object.keys(x).length !== 3 ||
-      !['provider', 'iss', 'sub'].every((k) => typeof x[k] === 'string' && x[k].length > 0 && x[k].length <= 512))
-      fail('human-required');
-    return this.#cap({
-      business: record.business,
-      human: b.human,
-      via: 'console',
-      console: Object.freeze({ provider: x.provider, iss: x.iss, sub: x.sub }),
-      role: null,
-      run: null,
-    });
-  }
   bindReader({ business }) {
     this.#business(business);
     return this.#cap({ business, reader: true, role: null, run: null, human: false });
@@ -1535,127 +1504,10 @@ export class Broker {
     const raise = this.#raised(business, decision);
     if (d?.action !== 'credential.mint' || d.route_to !== 'human' || !raise?.grant) return null;
     const r = this.#closed(decision);
-    if (r?.op !== 'resolved' || r.choice !== raise.approvalChoice) return null;
-    // Row 298 (#1804, Q228, sage-3594 Q4): a scope close counts only with its own grant.scope.used,
-    // which only #scopeClose writes, under the grant actor.
-    if (r.via === 'scope') return r.by === SCOPE_BY && this.#scopeUsed(business, decision, r.seq, raise.grant) ? raise.grant : null;
-    if (r.by !== this.#business(business).human) return null;
-    // Row 252 (#1753, design section 3, J14): a console close counts only with its own human.input,
-    // which only the broker writes (recordEvent reserves the kind).
-    if (!(r.via === 'console' ? this.#consoleInput(business, decision, r) : r.via === 'cli')) return null;
+    if (r?.op !== 'resolved' || r.choice !== raise.approvalChoice || r.via !== 'cli' || r.by !== this.#business(business).human)
+      return null;
     return raise.grant;
   }
-  // Row 298: the grant.scope.used record of scope close seq. Gitea and host grants only.
-  #scopeUsed(business, decision, seq, grant) {
-    if (grant.method !== 'gitea' && grant.method !== 'host') return false;
-    const row = this.#store.get(
-      `SELECT body FROM events WHERE business=? AND ${GRANT_EVIDENCE} AND json_extract(body,'$.action')='grant.scope.used'
-       AND json_extract(body,'$.grantDecision')=? AND json_extract(body,'$.decisionSeq')=? AND json_extract(body,'$.method')=? LIMIT 1`,
-      business, decision, seq, grant.method,
-    );
-    if (!row) return false;
-    const evidence = JSON.parse(row.body);
-    const checked = grantScopeOf(evidence.scope);
-    // Verify the immutable raise-time snapshot, not today's scope: scope changes do not
-    // invalidate already issued grants. The executor rechecks today's scope before spend.
-    return !checked.fallback && typeof evidence.revision === 'string' && /^[a-f0-9]{64}$/.test(evidence.revision) &&
-      evidence.agent === grant.agent && evidence.scopeSha256 === sha256(JSON.stringify(checked.scope)) &&
-      grantInScope(checked.scope, grant);
-  }
-  // Row 298: the live organization snapshot. Missing/bad scope covers nothing. An unreadable
-  // organization file or missing revision cannot authorize a scope close either.
-  #scopeNow(business) {
-    try {
-      const snapshot = this.#grantScope(business);
-      return { ...grantScopeOf(snapshot?.value), revision: snapshot?.revision ?? null };
-    } catch {
-      return { ...grantScopeOf(undefined), revision: null };
-    }
-  }
-
-  // Row 298 (D4, sage-3594 Q2/Q4): after a gitea or host raise, in its transaction. When the raiser is
-  // launch.by, the decision went to the human and the grant is inside the scope, the broker closes it
-  // with the approval choice, via 'scope', writes grant.scope.used and starts the executor, as the
-  // human's Approve does. The spend, the records and the revoke are row 236's and 235's, unchanged.
-  // Anything else is left in the inbox. launch.by is a hand edit, so a chief-of-staff instance the
-  // tester or an instances.set adds never raises in scope (Q6).
-  #scopeClose(s, view) {
-    if (s.role !== this.#business(s.business).launch?.by) return view;
-    const d = this.#store.get('SELECT id,route_to FROM decisions WHERE business=? AND id=?', s.business, view.id);
-    if (d?.route_to !== 'human' || this.#closed(d.id)) return view;
-    const raise = this.#raised(s.business, d.id);
-    const { scope, revision } = this.#scopeNow(s.business);
-    if (typeof revision !== 'string' || !/^[a-f0-9]{64}$/.test(revision)) return view;
-    if (!raise?.grant || !grantInScope(scope, raise.grant)) return view;
-    const seq = Number(
-      this.#store.run(
-        'INSERT INTO decision_events(decision,at,op,by,choice,note,via) VALUES(?,?,?,?,?,?,?)',
-        d.id, this.#now(), 'resolved', SCOPE_BY, raise.approvalChoice, null, 'scope',
-      ).lastInsertRowid,
-    );
-    this.#grantEvent(s.business, {
-      action: 'grant.scope.used', grantDecision: d.id, decisionSeq: seq, method: raise.grant.method,
-      agent: raise.grant.agent, scope, revision, scopeSha256: sha256(JSON.stringify(scope)),
-    }, d.id);
-    // As the resolve's: each executor rechecks all of this itself, so a rollback starts nothing.
-    if (raise.grant.method === 'host') setImmediate(() => this.#runHostGrant(s.business, d.id));
-    if (raise.grant.method === 'gitea') setImmediate(() => this.#startGitea(s.business, d.id));
-    return this.#decisionView(this.#decision(s, d.id));
-  }
-  // Row 298 (D6, sage-3594 Q5): at the spend, a scope close needs its grant still inside the scope.
-  // A narrowed scope ends it scope-changed, and the human's Approve is the way back.
-  #scopeRecheck(business, decision, g) {
-    if (this.#closed(decision)?.via === 'scope' && !grantInScope(this.#scopeNow(business).scope, g)) fail('scope-changed');
-  }
-  // Row 252: the console answer's human.input for close row r. Same decision, same seq, same choice,
-  // no role or run, and a three-string owner subject.
-  #consoleInput(business, decision, r) {
-    const e = this.#store.get(
-      `SELECT body FROM events WHERE business=? AND kind='human.input' AND subject=? AND actor_role IS NULL AND actor_run IS NULL
-       AND json_extract(body,'$.via')='console' AND json_extract(body,'$.decisionSeq')=? ORDER BY seq LIMIT 1`,
-      business,
-      decision,
-      r.seq,
-    );
-    const x = e && JSON.parse(e.body);
-    return (
-      !!x &&
-      x.kind === 'answer' &&
-      x.decision === decision &&
-      x.op === 'resolved' &&
-      x.choice === r.choice &&
-      object(x.subject) &&
-      ['provider', 'iss', 'sub'].every((k) => typeof x.subject[k] === 'string' && x.subject[k].length > 0)
-    );
-  }
-  // Row 252 (design section 1): a Console-eligible grant request, or null. Open is the caller's
-  // check. Eligible is route_to human, action credential.mint, a raise with a validated grant binding
-  // and exactly two distinct option keys, one of them approvalChoice. Approve is that key and deny is
-  // the other. The summary carries only the binding's method, agent, host and target projects. The
-  // digest binds the id, business, options, approval key and binding, so any change reads stale.
-  #consoleResolution(d) {
-    if (d.route_to !== 'human' || d.action !== 'credential.mint') return null;
-    const raise = this.#raised(d.business, d.id);
-    if (!object(raise?.grant) || typeof raise.grant.method !== 'string') return null;
-    const options = JSON.parse(d.options);
-    if (options.length !== 2 || options[0].key === options[1].key) return null;
-    const approve = options.find((o) => o.key === raise.approvalChoice);
-    if (!approve) return null;
-    const deny = options.find((o) => o.key !== raise.approvalChoice);
-    const g = raise.grant;
-    const grant = {
-      method: g.method,
-      ...(typeof g.agent === 'string' ? { agent: g.agent } : {}),
-      ...(typeof g.host === 'string' ? { host: g.host } : {}),
-      ...(Array.isArray(g.target?.projects) ? { projects: g.target.projects.filter((p) => typeof p === 'string') } : {}),
-    };
-    return {
-      approve: { key: approve.key, text: approve.text },
-      deny: { key: deny.key, text: deny.text },
-      grant,
-      digest: sha256(JSON.stringify([d.id, d.business, options, raise.approvalChoice, raise.grant])),
-    };
-  }
   // r6 X1: the executor's own spend. The caller owns the transaction. The consume record is the only
   // guarded body with `decision` (#436b section 7), so #spent counts it.
   #consumeGrant(business, decision, method) {
@@ -1839,7 +1691,6 @@ export class Broker {
   }
   // r6 X2 step 1's checks after the spend, R4's binding again. Throws the code that ends the grant.
   #hostGrantRecheck(business, decision, g) {
-    this.#scopeRecheck(business, decision, g);
     if (!this.#hostGrant || !this.#hostKeys) fail('host-not-configured');
     const definition = this.#hostDefinition(business, g.agent);
     if (this.#hostGrant.definitionSha256(definition) !== g.definitionSha256) fail('decision-mismatch');
@@ -2640,7 +2491,7 @@ export class Broker {
         if (!this.#giteaGrant) fail('gitea-not-configured');
         const g = this.#giteaGrant.giteaGrantCheck(a.grant, this.#now().slice(0, 10));
         return this.#store.transaction(() => {
-          const result = this.#scopeClose(s, this.#dispatch(s, 'decision.raise', a, null, this.#giteaGrantBinding(s.business, g)));
+          const result = this.#dispatch(s, 'decision.raise', a, null, this.#giteaGrantBinding(s.business, g));
           this.#secretCheck(result);
           return result;
         });
@@ -2649,7 +2500,7 @@ export class Broker {
       if (a.grant?.method === 'host') {
         const g = this.#hostGrant.hostGrantCheck(a.grant, this.#now().slice(0, 10));
         return this.#store.transaction(() => {
-          const result = this.#scopeClose(s, this.#dispatch(s, 'decision.raise', a, null, this.#hostGrantBinding(s.business, g)));
+          const result = this.#dispatch(s, 'decision.raise', a, null, this.#hostGrantBinding(s.business, g));
           this.#secretCheck(result);
           return result;
         });
@@ -2771,7 +2622,6 @@ export class Broker {
   }
   // Section 4 step 1's checks after the spend. Throws the code that ends the grant.
   #giteaRecheck(business, decision, g) {
-    this.#scopeRecheck(business, decision, g);
     const { b, role, definition } = this.#giteaRole(business, g.agent);
     if (this.#giteaGrant.definitionSha256(definition) !== g.definitionSha256) fail('decision-mismatch');
     if (this.#giteaGrant.identitySha256(role, b.projects) !== g.identitySha256) fail('decision-mismatch');
@@ -2922,22 +2772,10 @@ export class Broker {
         } catch {}
         return code;
       }
-      // Step 1, one transaction: spend and recheck. scope-changed ends spent (D6);
-      // other refusals retain the existing rollback behavior.
+      // Step 1, one transaction: the spend and the rechecks. A refusal rolls the spend back.
       let checked;
       try {
-        checked = this.#store.transaction(() => {
-          const consumed = this.#consumeGrant(business, decision, 'gitea');
-          try {
-            return this.#giteaRecheck(business, decision, consumed);
-          } catch (e) {
-            // D6: scope narrowing is a terminal, spent failure. Other recheck
-            // refusals retain row 236's transaction/rollback behavior.
-            if (!(e instanceof BusError) || e.code !== 'scope-changed') throw e;
-            this.#giteaFailed(business, decision, agent, e.code);
-            return { scopeChanged: true };
-          }
-        });
+        checked = this.#store.transaction(() => this.#giteaRecheck(business, decision, this.#consumeGrant(business, decision, 'gitea')));
       } catch (e) {
         const code = e instanceof BusError ? e.code : 'gitea-failed';
         if (code !== 'not-authorized' && code !== 'decision-consumed') {
@@ -2947,7 +2785,6 @@ export class Broker {
         }
         return code;
       }
-      if (checked.scopeChanged) return 'scope-changed';
       return await this.#giteaSteps(business, decision, g, signal, log, api, meta, checked, stop);
     } finally {
       this.#giteaKeys.release(business, agent, signal);
@@ -4714,9 +4551,6 @@ export class Broker {
         grants = this.#userGrants(s, doc);
         if (!grants.length) fail('access-revoked');
       }
-      // Row 252 (design section 2, N4): a console cap reaches the two console verbs only, and nothing
-      // else reaches them. decision.resolve stays off the list.
-      if (!!s.console !== CONSOLE_VERBS.includes(request.verb)) fail('human-required');
       const args = request.args ?? {};
       if (!object(args)) fail('invalid-request');
       this.#secretCheck(args);
@@ -4758,8 +4592,6 @@ export class Broker {
       if (CREDENTIAL_VERBS.includes(request.verb)) return this.#requestCredential(s, request.verb, structuredClone(args));
       if (request.verb === 'instance.hire' || request.verb === 'instance.fire')
         return this.#chiefLifecycle(s, request.verb, structuredClone(args));
-      if (request.verb === 'grants.scope' || request.verb === 'grants.scope.set')
-        return this.#grantScopeVerb(s, request.verb, structuredClone(args));
       if (["limits", "limits.set", "organization.set", "organization.revision", "plugins", "plugins.set", "instances", "instances.set", "routes", "routes.set", "veto.set"].includes(request.verb)) {
         // Row 123 (#1617, REQ-COS-1, REQ-LIMIT-1): organization.set is limits.set for a role whose
         // file lists organization.change. It takes the same keys, runs the same write path and
@@ -4857,34 +4689,6 @@ export class Broker {
       throw this.#refused(s, e, request);
     }
   }
-  // Row 298 (#1804, Q228, sage-3594 Q3): the chief's grant scope, read and written by the human at the
-  // cli alone, and the write is the human's Approve of the change. #human is the one check, so an
-  // agent, the chief, the tester and a reader refuse human-required (the Console's cap never gets
-  // here). bindHuman binds only the business's human. The writer is the organization writer's
-  // grantScope; ORGANIZATION_KEYS doesn't name grantScope, so organization.set and limits.set can't
-  // write it. Outside the store transaction, as the organization branch.
-  #grantScopeVerb(s, verb, a) {
-    this.#human(s);
-    if (!this.#organization) fail('not-configured');
-    if (verb === 'grants.scope') keys(a, []);
-    else keys(a, ['revision', 'scope'], ['revision', 'scope']);
-    let result;
-    try {
-      result = this.#organization(s.business, verb, a, s.human);
-    } catch (e) {
-      this.#organizationFail(e, verb);
-    }
-    this.#secretCheck(result);
-    // The change's record: the human proof bindHuman checked, and the old and new scopes' sha256.
-    // The writer's changes.jsonl entry holds the values.
-    if (verb === 'grants.scope.set')
-      this.#store.transaction(() => this.#grantEvent(s.business, {
-        action: 'grant.scope', by: s.human, via: s.via, outsideAgent: s.outsideAgent === true,
-        oldSha256: sha256(JSON.stringify(result.old)), newSha256: sha256(JSON.stringify(result.scope)),
-        transaction: result.transaction ?? null,
-      }));
-    return result;
-  }
   // Row 199 (#1697, design section 6). The token of an issue comes in args from the human's stdin; the
   // secret check above has refused one the bus already holds, a refusal records its code alone, and
   // nothing returned carries it. Outside the store transaction, as the organization branch.
@@ -5277,7 +5081,6 @@ export class Broker {
     const s = this.#session(cap);
     try {
       if (s.user) fail('access-refused');
-      if (s.console) fail('human-required');
       this.#processingWork();
       keys(request, ['verb', 'args'], ['verb']);
       if (!TASK_VERBS.includes(request.verb)) fail('unknown-verb');
@@ -5316,7 +5119,6 @@ export class Broker {
     let args;
     try {
       if (s.user) fail('access-refused');
-      if (s.console) fail('human-required');
       keys(request, ['verb', 'args'], ['verb']);
       this.#processingWork();
       if (!verb) fail('unknown-verb');
@@ -5376,7 +5178,6 @@ export class Broker {
     let a, entry, timeout, bound;
     try {
       if (s.user) fail('access-refused');
-      if (s.console) fail('human-required');
       this.#processingWork();
       keys(request, ['verb', 'args'], ['verb']);
       if (!HOST_VERBS.includes(request.verb)) fail('unknown-verb');
@@ -5700,38 +5501,15 @@ export class Broker {
         }
         return this.#decisionView(this.#decision(s, did));
       }
-      // Row 252 (#1753, design section 3): the Console's read of one grant request before its
-      // confirmation. It returns the two answers, a safe grant summary and the digest the answer must
-      // carry. Anything not eligible refuses, so the browser never decides eligibility (J1).
-      case 'decision.preview.console': {
-        keys(a, ['id'], ['id']);
-        identifier(a.id);
-        if (!s.console || s.human !== b.human) fail('human-required');
-        const d = this.#decision(s, a.id);
-        if (this.#closed(d.id)) fail('decision-closed');
-        const c = this.#consoleResolution(d);
-        if (!c) fail('decision-not-eligible');
-        return { id: d.id, business: d.business, question: d.question, ...c };
-      }
-      case 'decision.resolve.console':
       case 'decision.resolve':
       case 'decision.seen':
       case 'decision.withdraw': {
-        const viaConsole = verb === 'decision.resolve.console';
-        if (viaConsole) keys(a, ['id', 'choice', 'digest'], ['id', 'choice', 'digest']);
-        else keys(a, ['id', 'choice', 'note'], ['id']);
+        keys(a, ['id', 'choice', 'note'], ['id']);
         identifier(a.id);
         if (a.note !== undefined) string(a.note);
         const d = this.#decision(s, a.id);
         if (this.#closed(d.id)) fail('decision-closed');
-        // Row 252 (design section 3): the Console answer rechecks eligibility, the digest and the choice
-        // in this transaction. It answers one of the two keys, never a key the browser names (J2).
-        if (viaConsole) {
-          if (!s.console || s.human !== b.human) fail('human-required');
-          const c = this.#consoleResolution(d);
-          if (!c) fail('decision-not-eligible');
-          if (a.digest !== c.digest || ![c.approve.key, c.deny.key].includes(a.choice)) fail('decision-stale');
-        } else if (verb === 'decision.withdraw') {
+        if (verb === 'decision.withdraw') {
           if (s.human) {
             this.#human(s);
           } else {
@@ -5743,39 +5521,32 @@ export class Broker {
           this.#agent(s);
           if (s.role !== d.route_to) fail('not-resolver');
         }
-        const op = verb === 'decision.resolve' || viaConsole ? 'resolved' : verb === 'decision.seen' ? 'seen' : 'withdrawn';
+        const op = verb === 'decision.resolve' ? 'resolved' : verb === 'decision.seen' ? 'seen' : 'withdrawn';
         if (op === 'resolved' && !JSON.parse(d.options).some((o) => o.key === a.choice))
           fail('invalid-choice');
-        const seq = Number(
-          this.#store.run(
-            'INSERT INTO decision_events(decision,at,op,by,choice,note,via) VALUES(?,?,?,?,?,?,?)',
-            d.id,
-            this.#now(),
-            op,
-            by,
-            op === 'resolved' ? a.choice : null,
-            a.note ?? null,
-            s.console ? 'console' : s.human ? 'cli' : 'broker',
-          ).lastInsertRowid,
+        this.#store.run(
+          'INSERT INTO decision_events(decision,at,op,by,choice,note,via) VALUES(?,?,?,?,?,?,?)',
+          d.id,
+          this.#now(),
+          op,
+          by,
+          op === 'resolved' ? a.choice : null,
+          a.note ?? null,
+          s.human ? 'cli' : 'broker',
         );
-        // Row 252 (N2): the human.input comes before #approvedGrant, which needs a console answer's
-        // record to start the executor. Its body names the owner subject and the close's seq.
-        if (s.human)
-          this.#event(
-            s,
-            'human.input',
-            s.console
-              ? { kind: 'answer', decision: d.id, op, choice: a.choice, via: 'console', subject: s.console, decisionSeq: seq }
-              : { kind: 'answer', decision: d.id, op, choice: a.choice ?? null },
-            d.id,
-          );
         // Row 234 (#1740, r6 X1): the human's cli approve of a grant mint starts the executor once this
-        // transaction commits. It rechecks all of this itself, so a rollback starts nothing. Row 252: a
-        // Console approve does too. A deny closes the decision with the other key and starts nothing.
+        // transaction commits. It rechecks all of this itself, so a rollback starts nothing.
         const grant = op === 'resolved' ? this.#approvedGrant(s.business, d.id) : null;
         if (grant?.method === 'host-enroll') setImmediate(() => this.#runEnrollment(s.business, d.id));
         if (grant?.method === 'host') setImmediate(() => this.#runHostGrant(s.business, d.id));
         if (grant?.method === 'gitea') setImmediate(() => this.#startGitea(s.business, d.id));
+        if (s.human)
+          this.#event(
+            s,
+            'human.input',
+            { kind: 'answer', decision: d.id, op, choice: a.choice ?? null },
+            d.id,
+          );
         // Row 115 (#1609): a close by anyone but the raising run tells the raising role, routed like message.send's.
         // Row 133 (#1627): no messaging check here. decision.raise refused a route that can't message the
         // raiser, definitions change only with a pinned copy and arbiters only through the business
@@ -5802,7 +5573,7 @@ export class Broker {
             this.#now(),
             s.business,
             s.human ? 'human' : s.role,
-            s.console ? 'human-console' : s.human ? 'human-cli' : s.run,
+            s.human ? 'human-cli' : s.run,
             d.raised_by_role,
             'DECISION',
             null,
@@ -5812,8 +5583,7 @@ export class Broker {
           );
           this.#route(s.business, mid, d.raised_by_role, session);
         }
-        const answer = viaConsole ? { id: d.id, op, choice: a.choice } : { id: d.id, op };
-        return grant ? { ...answer, grant: 'started' } : answer;
+        return grant ? { id: d.id, op, grant: 'started' } : { id: d.id, op };
       }
       case 'message.send': {
         keys(a, ['to', 'body', 'class', 'in_reply_to', 'corrects', 'decision'], ['to', 'body']);
@@ -6169,12 +5939,7 @@ export class Broker {
               s.business,
               s.human || s.reader ? 'human' : s.role,
             )
-            .map((d) => {
-              // Row 252: a grant request the Console can answer carries its two answers. The Console
-              // shows buttons from this, and the answer path rechecks it at the bus.
-              const c = s.human || s.reader ? this.#consoleResolution(d) : null;
-              return c ? { ...this.#decisionView(d), console: c } : this.#decisionView(d);
-            });
+            .map((d) => this.#decisionView(d));
         if (verb === 'agents') {
           const claims = this.#store.all(
             "SELECT * FROM role_claims c WHERE business=? AND op='claim' AND seq=(SELECT max(seq) FROM role_claims WHERE business=c.business AND role=c.role) ORDER BY role",

packages/bus/src/client.mjs

@@ -1,19 +1,18 @@
 import { connect } from 'node:net';
 import { BusError, PROJECT_SAVE_VERB, PROJECT_SAVE_REQUEST_MAX } from './broker.mjs';
 export class Client {
-  constructor({ path, cap, human, tester, user, console: owner, timeout = 5000 }) {
+  constructor({ path, cap, human, tester, user, timeout = 5000 }) {
     this.path = path;
     this.cap = cap;
     this.human = human;
     this.tester = tester;
     this.user = user;
-    this.console = owner;
     this.timeout = timeout;
   }
   call(verb, args = {}) {
     const request =
       JSON.stringify({
-        ...(this.human ? { human: this.human } : this.tester ? { tester: this.tester } : this.user ? { user: this.user } : this.console ? { console: this.console } : { cap: this.cap }),
+        ...(this.human ? { human: this.human } : this.tester ? { tester: this.tester } : this.user ? { user: this.user } : { cap: this.cap }),
         verb,
         args,
       }) + '\n';

packages/bus/src/console-cli.mjs

@@ -1,41 +0,0 @@
-// Row 252 (#1753, design section 2): the Console owner's transport shim, spawned only by the webui
-// `cli.mjs serve` process for one preview or one answer. Not a second product CLI. The Console sets
-// the nonce, the business and the signed-in (provider, iss, sub) in the spawn environment, and the
-// bus reads them back from this process's initial environment. Nothing respawns here, so the
-// Console stays the direct parent. Input is a verb and its args only: a body that names a business,
-// a subject or any other key is refused, never merged.
-import { readFileSync } from 'node:fs';
-import { Client } from './client.mjs';
-import { readProcess } from './human.mjs';
-import { CONSOLE_VERBS } from './broker.mjs';
-const env = process.env;
-try {
-  if (!/^[a-f0-9]{64}$/.test(env.MOSAIC_BUS_CONSOLE_NONCE ?? '')) throw Object.assign(Error(), { code: 'human-required' });
-  const request = JSON.parse(readFileSync(0, 'utf8'));
-  if (
-    !request ||
-    typeof request !== 'object' ||
-    Array.isArray(request) ||
-    Object.keys(request).some((k) => !['verb', 'args'].includes(k)) ||
-    !CONSOLE_VERBS.includes(request.verb)
-  )
-    throw Error();
-  const me = readProcess(process.pid);
-  const client = new Client({
-    path: process.argv[2],
-    console: {
-      business: env.MOSAIC_BUS_CONSOLE_BUSINESS,
-      provider: env.MOSAIC_BUS_CONSOLE_PROVIDER,
-      iss: env.MOSAIC_BUS_CONSOLE_ISS,
-      sub: env.MOSAIC_BUS_CONSOLE_SUB,
-      pid: me.pid,
-      startTime: me.startTime,
-      nonce: env.MOSAIC_BUS_CONSOLE_NONCE,
-    },
-  });
-  const result = await client.call(request.verb, request.args ?? {});
-  process.stdout.write(JSON.stringify(result) + '\n');
-} catch (e) {
-  process.stderr.write((/^[a-z-]{1,64}$/.test(e.code ?? '') ? e.code : 'invalid-request') + '\n');
-  process.exitCode = 2;
-}

packages/bus/src/human.mjs

@@ -10,10 +10,6 @@ const MARKERS = [
   'CODEX_THREAD_ID',
   'PI_AGENT_DIR',
 ];
-// Row 252 (#1753, Webby N5): the Console wrapper's nonce and the subject its spawn bound. The
-// verifier reads each from the wrapper's initial environment, never from its proof alone.
-export const CONSOLE_ENV = Object.freeze(['MOSAIC_BUS_CONSOLE_NONCE', 'MOSAIC_BUS_CONSOLE_BUSINESS', 'MOSAIC_BUS_CONSOLE_PROVIDER', 'MOSAIC_BUS_CONSOLE_ISS', 'MOSAIC_BUS_CONSOLE_SUB']);
-const NONCE_KEYS = ['MOSAIC_BUS_CLI_NONCE', 'MOSAIC_BUS_USER_NONCE', ...CONSOLE_ENV];
 const refuse = () => {
   throw new BusError('human-required');
 };
@@ -35,7 +31,7 @@ export function readProcess(pid, { readFile = readFileSync, stat = lstatSync } =
       for (const entry of environment.split('\0')) {
         const i = entry.indexOf('=');
         const key = entry.slice(0, i);
-        if (NONCE_KEYS.includes(key) || MARKERS.includes(key)) env[key] = entry.slice(i + 1);
+        if (['MOSAIC_BUS_CLI_NONCE', 'MOSAIC_BUS_USER_NONCE'].includes(key) || MARKERS.includes(key)) env[key] = entry.slice(i + 1);
       }
     return {
       pid,

packages/bus/src/principal.mjs

@@ -5,8 +5,8 @@ import { verifyTester, testerNonce } from './tester.mjs';
 
 // Trusted transport API. Identity is held only by this connection's transient session.
 // User mapping and live grant authorization belong to R3, not to this verifier.
-export function verifyPrincipal(request, { peer, paths, businesses, launches = [], readProcess = defaultRead, readTesterNonce = testerNonce, consoleOwners = [] }) {
-  const kinds = ['human', 'tester', 'user', 'console'].filter(k => request?.[k]);
+export function verifyPrincipal(request, { peer, paths, businesses, launches = [], readProcess = defaultRead, readTesterNonce = testerNonce }) {
+  const kinds = ['human', 'tester', 'user'].filter(k => request?.[k]);
   if (kinds.length !== 1 || request.cap) throw new BusError('invalid-envelope');
   const kind = kinds[0], proof = request[kind];
   const error = kind === 'tester' ? 'tester-required' : 'human-required';
@@ -16,7 +16,6 @@ export function verifyPrincipal(request, { peer, paths, businesses, launches = [
     const { business } = verifyTester(proof, { cliPath: paths.tester, launches, readProcess, readNonce: readTesterNonce });
     return { kind: 'tester', business, id: 'tester' };
   }
-  if (kind === 'console') return verifyConsole(proof, { peer, paths, businesses, launches, readProcess, consoleOwners });
   let checked = proof, parent;
   if (kind === 'user') {
     if (!proof || typeof proof.user !== 'string' || !proof.user ||
@@ -43,38 +42,3 @@ export function verifyPrincipal(request, { peer, paths, businesses, launches = [
   if (!id) throw new BusError('unknown-business');
   return { kind: 'owner', business, id };
 }
-
-// Row 252 (#1753, design section 2): the Console owner. The same-tree console-cli.mjs wrapper, its own
-// nonce namespace and the human walk, with the exact same-tree webui `cli.mjs serve` as its direct
-// parent, read again after the walk as the user kind does. Business and (provider, iss, sub) must be
-// the wrapper's initial spawn environment and one of the checked console.sso subjects the runtime
-// was started with (Webby N1: every configured subject is an owner). The Console's mapping is trusted
-// as row 196 permits; the bus does not exchange an ID token itself.
-const SUBJECT_KEYS = ['provider', 'iss', 'sub'];
-const SUBJECT_ENV = { business: 'MOSAIC_BUS_CONSOLE_BUSINESS', provider: 'MOSAIC_BUS_CONSOLE_PROVIDER', iss: 'MOSAIC_BUS_CONSOLE_ISS', sub: 'MOSAIC_BUS_CONSOLE_SUB' };
-function verifyConsole(proof, { peer, paths, businesses, launches, readProcess, consoleOwners }) {
-  const refuse = () => { throw new BusError('human-required'); };
-  if (!proof || typeof proof !== 'object' ||
-    Object.keys(proof).some(k => !['pid', 'startTime', 'nonce', 'business', ...SUBJECT_KEYS].includes(k)) ||
-    SUBJECT_KEYS.some(k => typeof proof[k] !== 'string' || !proof[k] || proof[k].length > 512)) refuse();
-  if (typeof paths.consoleCli !== 'string' || typeof paths.console !== 'string') refuse();
-  const { provider, iss, sub, ...checked } = proof;
-  let child, parent;
-  try {
-    child = readProcess(proof.pid);
-    parent = readProcess(child.ppid);
-    if (parent.uid !== peer.uid || parent.argv[1] !== resolve(paths.console) || parent.argv[2] !== 'serve') refuse();
-    for (const [key, name] of Object.entries(SUBJECT_ENV)) if (child.env?.[name] !== proof[key]) refuse();
-  } catch { refuse(); }
-  const { business } = verifyHuman(checked, { cliPath: paths.consoleCli, launches, readProcess, nonceKey: 'MOSAIC_BUS_CONSOLE_NONCE' });
-  try {
-    const again = readProcess(proof.pid), up = readProcess(parent.pid);
-    if (again.ppid !== parent.pid || again.startTime !== child.startTime || up.startTime !== parent.startTime ||
-      up.ppid !== parent.ppid || up.uid !== parent.uid || up.argv[1] !== parent.argv[1] || up.argv[2] !== 'serve') refuse();
-    for (const [key, name] of Object.entries(SUBJECT_ENV)) if (again.env?.[name] !== proof[key]) refuse();
-  } catch { refuse(); }
-  if (!Array.isArray(consoleOwners) || !consoleOwners.some(o => o && o.provider === provider && o.iss === iss && o.sub === sub)) refuse();
-  const id = businesses[business]?.human;
-  if (!id) throw new BusError('unknown-business');
-  return { kind: 'console', business, id, via: 'console', subject: { provider, iss, sub } };
-}

packages/bus/src/runtime.mjs

@@ -106,15 +106,7 @@ export async function startBroker({
   // Without it no user binds. R6 and R8 pass it; the live boot config doesn't yet. FED R4 (#1801):
   // intervalMs, the revocation timer's period (design 3.7, 30 s), in-process only like librarySync's.
   access = null,
-  // Row 252 (#1753, design section 2): the checked console.sso subjects, [{provider, iss, sub}], each an
-  // owner of the business (Webby N1). The boot config carries them; no socket verb sets them. Empty, no
-  // Console owner binds and the terminal owner is unchanged.
-  consoleOwners = [],
 }) {
-  if (!Array.isArray(consoleOwners) || consoleOwners.length > 512 || consoleOwners.some((o) => o === null || typeof o !== 'object' || Array.isArray(o) ||
-      Object.keys(o).length !== 3 || ['provider', 'iss', 'sub'].some((k) => typeof o[k] !== 'string' || !o[k] || o[k].length > 512)))
-    throw new BusError('invalid-host-request');
-  const owners = Object.freeze(consoleOwners.map((o) => Object.freeze({ provider: o.provider, iss: o.iss, sub: o.sub })));
   if (access !== null && (typeof access?.file !== 'string' || access.context === null || typeof access.context !== 'object'
       || (Object.hasOwn(access, 'intervalMs') && !(Number.isSafeInteger(access.intervalMs) && access.intervalMs > 0))))
     throw new BusError('invalid-host-request');
@@ -323,8 +315,6 @@ export async function startBroker({
         if(verb==='instances')return instances.read(id,actor);
         // Row 65 (mos-0840): the Console's routing table.
         if(verb==='routes')return settings.routes(id);
-        // Row 298 (#1804, Q228): the chief's grant scope as the file stands, the fallback shown.
-        if(verb==='grants.scope')return instances.grantScopeRead(id);
         // Row 194 (#1692, V5): a delete's checks at the verb, with no write and no reload.
         if(verb==='instances.check')return instances.checkDelete(id,args.instance,actor);
         // Row 194 b6 (webby-0094 B1): a fire's checks against the file, before step A.
@@ -336,8 +326,6 @@ export async function startBroker({
         else if(verb==='plugins.set')result=plugins.set(id,args,actor);
         // Row 194 (#1692, V6): the human's keep and noHire lists, through the instance writer.
         else if(verb==='veto.set')result=instances.veto(id,args,actor);
-        // Row 298: the human's grant scope, through the instance writer.
-        else if(verb==='grants.scope.set')result=instances.grantScope(id,args,actor);
         // Row 194 (D2.1, D2.2): the chief's hire and fire, with the reason in the change context.
         else if(verb==='instance.hire')result=instances.hire(id,args,{actor,context});
         else if(verb==='instance.fire')result=instances.fire(id,{name:args.name},{actor,context});
@@ -369,13 +357,6 @@ export async function startBroker({
           return false;
         }
       },
-      // Row 298 (#1804, Q228): one read binds launch.grantScope to the organization revision.
-      // A missing organization reader or unreadable file cannot authorize an automatic grant.
-      grantScope: (id) => {
-        if (!settings) return { value: undefined, revision: null };
-        const { document, revision } = instances.writer.read(id);
-        return { value: document.launch?.grantScope, revision };
-      },
       // Row 194 (#1692, D4.1, B8): bus.tester as the file sets it now; an unreadable file is off.
       testerOn: (id) => {
         try {
@@ -427,7 +408,6 @@ export async function startBroker({
       tester: fileURLToPath(new URL('./tester-cli.mjs', import.meta.url)),
       user: fileURLToPath(new URL('./user-cli.mjs', import.meta.url)),
       console: fileURLToPath(new URL('../../webui/src/cli.mjs', import.meta.url)),
-      consoleCli: fileURLToPath(new URL('./console-cli.mjs', import.meta.url)),
     };
     const path = join(store.directory, 'broker.sock');
     // The existing host executor owns SSH and its key lifecycle. Combine its revocation
@@ -459,11 +439,6 @@ export async function startBroker({
         const p = verifyPrincipal({ user: proof }, { peer, paths: principalPaths, businesses, launches: launchRecords });
         return broker.bindUser({ business: p.business, user: p.id });
       },
-      // Row 252 (#1753): a fresh proof per connection, a cap for the Console verbs only.
-      authenticateConsole: (proof, peer) => {
-        const p = verifyPrincipal({ console: proof }, { peer, paths: principalPaths, businesses, launches: launchRecords, consoleOwners: owners });
-        return broker.bindConsole({ business: p.business, human: p.id, subject: p.subject });
-      },
     });
     // Row 235 (r6 X3): the remote undo of interrupted host grants, once the bus is up, so a start doesn't
     // wait on the network.

packages/bus/src/server.mjs

@@ -1,6 +1,6 @@
 import { createServer } from 'node:net';
 import { lstatSync, chmodSync, unlinkSync } from 'node:fs';
-import { BusError, TASK_VERBS, WEB_VERBS, HOST_VERBS, HOSTS_VERBS, GRANTS_VERBS, PROJECT_FILE_VERBS, LIBRARY_VERBS, PROJECT_SAVE_VERB, PROJECT_SAVE_REQUEST_MAX, CONSOLE_VERBS } from './broker.mjs';
+import { BusError, TASK_VERBS, WEB_VERBS, HOST_VERBS, HOSTS_VERBS, GRANTS_VERBS, PROJECT_FILE_VERBS, LIBRARY_VERBS, PROJECT_SAVE_VERB, PROJECT_SAVE_REQUEST_MAX } from './broker.mjs';
 import { inspectInterpreter } from './interpreter.mjs';
 import { createPeerReader } from './peercred.mjs';
 const LIMIT = 65536;
@@ -13,9 +13,8 @@ const SAVE_VERB_AT_START = new RegExp(`"verb":"${PROJECT_SAVE_VERB.replaceAll('.
 // the web verbs reach it, and without one they refuse web-not-configured (or web-not-granted).
 // `host` (row 210) is the trusted host.run executor (host-run.mjs), or null: host.run then refuses
 // host-not-configured.
-// A request carries exactly one of cap, human (row S4), tester (row 110), user (FED R3) and console
-// (row 252) proof.
-export async function serve({ broker, path, authenticateHuman = null, authenticateTester = null, authenticateUser = null, authenticateConsole = null, peerReader = null, timeout = 5000, tasks = null, web = null, host = null }) {
+// A request carries exactly one of cap, human (row S4) and tester (row 110) proof.
+export async function serve({ broker, path, authenticateHuman = null, authenticateTester = null, authenticateUser = null, peerReader = null, timeout = 5000, tasks = null, web = null, host = null }) {
   try {
     lstatSync(path);
     throw new BusError('socket-exists');
@@ -65,17 +64,15 @@ export async function serve({ broker, path, authenticateHuman = null, authentica
           !r ||
           Array.isArray(r) ||
           typeof r !== 'object' ||
-          Object.keys(r).some((k) => !['cap', 'human', 'tester', 'user', 'console', 'verb', 'args'].includes(k)) ||
+          Object.keys(r).some((k) => !['cap', 'human', 'tester', 'user', 'verb', 'args'].includes(k)) ||
           typeof r.verb !== 'string' ||
-          [r.cap, r.human, r.tester, r.user, r.console].filter(Boolean).length !== 1
+          [r.cap, r.human, r.tester, r.user].filter(Boolean).length !== 1
         )
           throw new BusError('invalid-envelope');
         let cap = r.cap;
-        const kind = r.human ? 'human' : r.tester ? 'tester' : r.user ? 'user' : r.console ? 'console' : null;
-        // Row 252 (#1753): a Console owner proof reaches its two verbs only, refused before any proof check.
-        if (kind === 'console' && !CONSOLE_VERBS.includes(r.verb)) throw new BusError('human-required');
+        const kind = r.human ? 'human' : r.tester ? 'tester' : r.user ? 'user' : null;
         if (kind) {
-          const authenticate = kind === 'human' ? authenticateHuman : kind === 'tester' ? authenticateTester : kind === 'user' ? authenticateUser : authenticateConsole;
+          const authenticate = kind === 'human' ? authenticateHuman : kind === 'tester' ? authenticateTester : authenticateUser;
           if (!authenticate) throw new BusError(kind === 'tester' ? 'tester-required' : 'human-required');
           socket.pause();
           let peer;

packages/bus/tests/channel-proof.test.mjs

@@ -6,9 +6,6 @@
 // bus.mjs for six library-* STATUS entries; no proof or transport change.
 // Row 236 (#1742) re-pins human-cli.mjs for the same 130 s wait on the grants verbs; no proof or
 // transport change.
-// Row 252 (#1753, Webby N5) re-pins human.mjs, whose readProcess also keeps the five
-// MOSAIC_BUS_CONSOLE_* keys for the Console wrapper's proof, and webui bus.mjs for consoleCall,
-// which shares humanCall's spawn as transport(). The human proof and its spawn are unchanged.
 import test from "node:test";
 import assert from "node:assert/strict";
 import { createHash } from "node:crypto";
@@ -18,7 +15,7 @@ import { provedRuntime } from "../../cli/tests/channel-fixture.mjs";
 import { Client } from "../src/client.mjs";
 
 const baselines = {
- "packages/bus/src/human.mjs": "bb13c146717cdc46d75d157177e400edac4d3e10f14fe511027a25fd44cec885",
+ "packages/bus/src/human.mjs": "0c6d96abe4607cba0b02b0638a2fc217ff8135bac9a47761a0ef015fbe9d3079",
  "packages/bus/src/human-cli.mjs": "271b9781d73cf31cc562a56180e3ebcd725b5fde148a83347a201fdef2fc28af",
  "packages/cli/src/transport.mjs": "5129c44b4d9f642e825344df65c9bfb4bac4fc8d6b25343b42d39853dbd40774",
  // Row 165 (#1662): seven STATUS entries for the role instance routes (organization-instance-exists,
@@ -29,7 +26,7 @@ const baselines = {
  // Row 194 (#1692, brief item 7, sage-1610 a): organization-tracker-required 400 and
  // organization-tracker-bot-taken 409; no proof or transport change.
  // Row 301 (#1808, mos-1449): the user transport moved from user-bus.mjs into bus.mjs; humanCall unchanged.
- "packages/webui/src/bus.mjs": "604092cb706b152d458f299ff1071f6cd488774629012f96b672f7e9a16c0b2c",
+ "packages/webui/src/bus.mjs": "39fcb27c82e917ef05e1a7a650d522c9f3c656bf8dbade87b8ddb3661b67ad6c",
 };
 const repoFile = path => new URL("../../../" + path, import.meta.url);
 

packages/bus/tests/console-decide.test.mjs

@@ -1,318 +0,0 @@
-// Row 252 (#1753, Gander's design approved by Webby at 5d8f0f4b5, N1-N5): the broker side of the
-// Console's Approve and Deny for a grant request. A console cap, made by bindConsole after the
-// transport checked the wrapper and the signed-in owner, reaches only decision.preview.console and
-// decision.resolve.console, and no other cap reaches those. The answer records via 'console' and a
-// human.input that names the owner, written before the grant check (N2), and only that record lets
-// an approve start the executor (J13, J14). Q188: no agent caller answers. The grant uses row 234's
-// host-enroll raise with a fake keyscan and fake enroll and check steps, so nothing connects anywhere.
-import test from 'node:test';
-import assert from 'node:assert/strict';
-import { execFileSync } from 'node:child_process';
-import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { Broker, CONSOLE_VERBS } from '../src/broker.mjs';
-import { Client } from '../src/client.mjs';
-import { serve } from '../src/server.mjs';
-import { Store } from '../src/store.mjs';
-import { hostGrant, fingerprint } from '../src/host-grant.mjs';
-import { grantDecision } from './host-fixtures.mjs';
-
-const options = [{ key: 'yes', text: 'Yes, enroll it' }, { key: 'no', text: 'No' }];
-const SUBJECT = { provider: 'fake-oidc', iss: 'https://idp.test', sub: 'owner-1' };
-const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-const keyLine = (dir, name) => {
-  execFileSync('ssh-keygen', ['-q', '-t', 'ed25519', '-N', '', '-C', 'x', '-f', join(dir, name)]);
-  return readFileSync(join(dir, name + '.pub'), 'utf8').trim().split(' ').slice(0, 2).join(' ');
-};
-const refusesSync = (fn, code) => assert.throws(fn, (e) => (assert.equal(e.code, code), true));
-
-function setup(t) {
-  const root = mkdtempSync(join(tmpdir(), 'c252-'));
-  const store = new Store(root);
-  t.after(() => {
-    store.close();
-    rmSync(root, { recursive: true, force: true });
-  });
-  const hostKeys = [keyLine(root, 'hk1'), keyLine(root, 'hk2')];
-  const configDir = join(root, 'config');
-  const real = hostGrant({ configDir, runRoot: join(configDir, 'secrets', 'run'), scan: async () => hostKeys });
-  const enrolls = [];
-  const hg = {
-    ...real,
-    enroll: async (...args) => (enrolls.push(args), real.enroll(...args)),
-    check: async (...args) => ({ installerFingerprint: args[2].installer_fingerprint, exit: 0 }),
-  };
-  const business = {
-    id: 'demo',
-    human: 'jason',
-    arbiters: { technical: 'pm', delivery: 'pm' },
-    roles: {
-      chief: { definition: 'chief-of-staff', authority: { withinRole: ['message.send'], crossRole: [] } },
-      pm: { definition: 'pm', authority: { withinRole: ['message.send'], crossRole: [] } },
-    },
-    vars: { 'bus.tester': true },
-  };
-  const make = () => new Broker({ store, businesses: { demo: business }, hostGrant: hg });
-  const broker = make();
-  const caps = {};
-  for (const role of ['chief', 'pm']) {
-    caps[role] = broker.bindLaunch({ business: 'demo', role, run: role + '-run', harness: 'pi', address: role });
-    broker.request(caps[role], { verb: 'role.claim' });
-  }
-  caps.human = broker.bindHuman({ business: 'demo', human: 'jason', via: 'cli', outsideAgent: true });
-  caps.tester = broker.bindTester({ business: 'demo' });
-  caps.reader = broker.bindReader({ business: 'demo' });
-  caps.console = broker.bindConsole({ business: 'demo', human: 'jason', subject: SUBJECT });
-  const grant = { method: 'host-enroll', host: 'web1', address: '192.0.2.10', port: 22, user: 'jarvis', sudo: true, fingerprints: hostKeys.map(fingerprint) };
-  const call = (who, verb, args = {}) => broker.request(caps[who], { verb, args });
-  const raise = (extra = {}) =>
-    call('chief', 'decision.raise', { action: 'credential.mint', question: 'Enroll web1?', options, recommendation: 'yes', blocking: false, grant, ...extra });
-  const events = () =>
-    store
-      .all("SELECT seq, kind, actor_role, actor_run, subject, body FROM events WHERE business='demo' ORDER BY seq")
-      // The row's subject is `about`, since a console answer's body has its own `subject`. The row's kind
-      // is `event`, set after the body, since an answer's body has its own `kind`.
-      .map((e) => ({ seq: e.seq, kind: e.kind, actor_role: e.actor_role, actor_run: e.actor_run, about: e.subject, ...JSON.parse(e.body), event: e.kind }));
-  const grantEvents = (decision) => events().filter((e) => e.actor_run === 'grant' && (e.decision === decision || e.grantDecision === decision));
-  const settle = async (decision) => {
-    for (let i = 0; i < 250; i++) {
-      if (grantEvents(decision).some((e) => ['grant.host.enrolled', 'grant.failed'].includes(e.action))) return;
-      await sleep(20);
-    }
-    throw new Error('enrollment did not end');
-  };
-  const closes = (decision) => store.all('SELECT seq, op, by, choice, via FROM decision_events WHERE decision=? ORDER BY seq', decision);
-  return { store, broker, make, caps, call, raise, events, grantEvents, settle, closes, enrolls, grant };
-}
-
-test('N4: the console verbs are exactly the preview and the console resolve, and decision.resolve is not one', () => {
-  assert.deepEqual([...CONSOLE_VERBS], ['decision.preview.console', 'decision.resolve.console']);
-  assert.equal(CONSOLE_VERBS.includes('decision.resolve'), false);
-  assert.ok(Object.isFrozen(CONSOLE_VERBS));
-});
-
-test('bindConsole takes only the business human and a three-string owner subject', (t) => {
-  const f = setup(t);
-  const bind = (record) => () => f.broker.bindConsole(record);
-  refusesSync(bind({ business: 'demo', human: 'someone', subject: SUBJECT }), 'human-required');
-  refusesSync(bind({ business: 'demo', human: 'jason', subject: { ...SUBJECT, name: 'Jason' } }), 'human-required');
-  refusesSync(bind({ business: 'demo', human: 'jason', subject: { provider: 'p', iss: 'i' } }), 'human-required');
-  refusesSync(bind({ business: 'demo', human: 'jason', subject: { ...SUBJECT, sub: '' } }), 'human-required');
-  refusesSync(bind({ business: 'demo', human: 'jason', subject: { ...SUBJECT, sub: 'x'.repeat(513) } }), 'human-required');
-  refusesSync(bind({ business: 'demo', human: 'jason', subject: { ...SUBJECT, sub: 7 } }), 'human-required');
-  refusesSync(bind({ business: 'demo', human: 'jason', subject: 'owner-1' }), 'human-required');
-  assert.throws(bind({ business: 'demo', human: 'jason', subject: SUBJECT, via: 'cli' }));
-  assert.throws(bind({ business: 'demo', human: 'jason' }));
-  assert.throws(bind({ business: 'other', human: 'jason', subject: SUBJECT }));
-  assert.deepEqual(f.broker.identity(f.caps.console), { business: 'demo', role: null, run: null, human: 'jason' });
-});
-
-test('J1, Q188: only a console cap reaches the console verbs, and a console cap reaches nothing else', async (t) => {
-  const f = setup(t);
-  const d = await f.raise();
-  const preview = f.call('console', 'decision.preview.console', { id: d.id });
-  const args = { id: d.id, choice: 'yes', digest: preview.digest };
-  // Agents, the cli human, the tester and the reader are refused before the verb runs.
-  for (const who of ['chief', 'pm', 'human', 'tester', 'reader']) {
-    refusesSync(() => f.call(who, 'decision.preview.console', { id: d.id }), 'human-required');
-    refusesSync(() => f.call(who, 'decision.resolve.console', args), 'human-required');
-  }
-  // N4: the console cap answers nothing through decision.resolve, and reaches no other verb.
-  for (const [verb, a] of [
-    ['decision.resolve', { id: d.id, choice: 'yes' }],
-    ['decision.seen', { id: d.id }],
-    ['decision.withdraw', { id: d.id }],
-    ['decision.raise', { action: 'credential.mint', question: 'q', options, recommendation: 'yes', blocking: false, grant: f.grant }],
-    ['inbox', {}],
-    ['message.send', { to: 'chief', body: 'hi' }],
-    ['role.claim', {}],
-  ])
-    refusesSync(() => f.call('console', verb, a), 'human-required');
-  assert.deepEqual(f.closes(d.id), []);
-  assert.equal(f.enrolls.length, 0);
-});
-
-test('preview: the two real answers, a grant summary and the digest, for an open grant request only', async (t) => {
-  const f = setup(t);
-  const d = await f.raise();
-  const p = f.call('console', 'decision.preview.console', { id: d.id });
-  assert.equal(p.id, d.id);
-  assert.equal(p.business, 'demo');
-  assert.match(p.question, /^Enroll web1\?/);
-  assert.deepEqual(p.approve, { key: 'yes', text: 'Yes, enroll it' });
-  assert.deepEqual(p.deny, { key: 'no', text: 'No' });
-  assert.deepEqual(p.grant, { method: 'host-enroll', host: 'web1' });
-  assert.match(p.digest, /^[a-f0-9]{64}$/);
-  // Read twice, the digest is the same; a preview writes nothing.
-  assert.equal(f.call('console', 'decision.preview.console', { id: d.id }).digest, p.digest);
-  assert.deepEqual(f.closes(d.id), []);
-  refusesSync(() => f.call('console', 'decision.preview.console', { id: d.id, choice: 'yes' }), 'invalid-request');
-  refusesSync(() => f.call('console', 'decision.preview.console', { id: 'no-such-decision' }), 'decision-not-found');
-  // The inbox row says the same, for the human and the reader. The agent-facing views do not.
-  for (const who of ['human', 'reader']) {
-    const row = f.call(who, 'inbox').find((r) => r.id === d.id);
-    assert.deepEqual(row.console, { approve: p.approve, deny: p.deny, grant: p.grant, digest: p.digest });
-  }
-});
-
-test('J1, J2: a decision that is not an eligible grant request refuses both console verbs', async (t) => {
-  const f = setup(t);
-  const grant = { method: 'host', agent: 'pm', host: 'web1', commands: ['uptime'], rotateBy: '2099-01-01' };
-  const ineligible = [
-    grantDecision(f.store, { action: 'deploy', grant, close: null }),
-    grantDecision(f.store, { route: 'pm', grant, close: null }),
-    grantDecision(f.store, { grant: undefined, close: null }),
-  ];
-  for (const id of ineligible) {
-    refusesSync(() => f.call('console', 'decision.preview.console', { id }), 'decision-not-eligible');
-    refusesSync(() => f.call('console', 'decision.resolve.console', { id, choice: 'yes', digest: '0'.repeat(64) }), 'decision-not-eligible');
-    assert.equal(f.call('human', 'inbox').find((r) => r.id === id)?.console, undefined);
-  }
-});
-
-test('N2, J13: a Console approve records via console and the owner, before the executor starts, and the grant runs once', async (t) => {
-  const f = setup(t);
-  const d = await f.raise();
-  const { digest } = f.call('console', 'decision.preview.console', { id: d.id });
-  const r = f.call('console', 'decision.resolve.console', { id: d.id, choice: 'yes', digest });
-  assert.deepEqual(r, { id: d.id, op: 'resolved', choice: 'yes', grant: 'started' });
-  const [close] = f.closes(d.id);
-  assert.deepEqual({ ...close, seq: undefined }, { seq: undefined, op: 'resolved', by: 'jason', choice: 'yes', via: 'console' });
-  const input = f.events().filter((e) => e.event === 'human.input' && e.about === d.id);
-  assert.equal(input.length, 1);
-  assert.deepEqual(
-    { ...input[0], seq: undefined },
-    { seq: undefined, kind: 'answer', actor_role: null, actor_run: null, about: d.id, decision: d.id, op: 'resolved', choice: 'yes', via: 'console', subject: SUBJECT, decisionSeq: close.seq, event: 'human.input' },
-  );
-  await f.settle(d.id);
-  assert.equal(f.enrolls.length, 1);
-  const spend = f.grantEvents(d.id).find((e) => e.operation === 'grant.host-enroll');
-  assert.ok(spend && input[0].seq < spend.seq, 'the human.input precedes the executor spend');
-  assert.ok(f.grantEvents(d.id).some((e) => e.action === 'grant.host.enrolled'));
-  // N3: the close notice to the raiser comes from the human through the Console.
-  const notices = f.store.all("SELECT from_run, body FROM messages WHERE business='demo' AND decision=? AND class='DECISION' AND from_role='human'", d.id);
-  assert.equal(notices.length, 1);
-  const [notice] = notices;
-  assert.equal(notice.from_run, 'human-console');
-  assert.match(notice.body, /resolved by jason: yes \(Yes, enroll it\)/);
-  // A second answer of either kind finds it closed, and nothing starts again.
-  refusesSync(() => f.call('console', 'decision.resolve.console', { id: d.id, choice: 'yes', digest }), 'decision-closed');
-  refusesSync(() => f.call('console', 'decision.preview.console', { id: d.id }), 'decision-closed');
-  refusesSync(() => f.call('human', 'decision.resolve', { id: d.id, choice: 'yes' }), 'decision-closed');
-  await sleep(50);
-  assert.equal(f.enrolls.length, 1);
-  assert.equal(f.closes(d.id).length, 1);
-});
-
-test('J15: a Console deny closes with the other key and starts nothing', async (t) => {
-  const f = setup(t);
-  const d = await f.raise();
-  const { digest } = f.call('console', 'decision.preview.console', { id: d.id });
-  const r = f.call('console', 'decision.resolve.console', { id: d.id, choice: 'no', digest });
-  assert.deepEqual(r, { id: d.id, op: 'resolved', choice: 'no' });
-  assert.deepEqual(f.closes(d.id).map((c) => [c.op, c.choice, c.via]), [['resolved', 'no', 'console']]);
-  await sleep(100);
-  assert.equal(f.enrolls.length, 0);
-  assert.deepEqual(f.grantEvents(d.id), []);
-  assert.deepEqual(f.make().reconcileGrants(), []);
-});
-
-test('J2: approve and deny come from approvalChoice and the options, not a fixed yes and no', async (t) => {
-  const f = setup(t);
-  // Deny listed first, so a build that takes options[0] as approve fails too.
-  const keyed = { options: [{ key: 'stop', text: 'Stop' }, { key: 'go', text: 'Go ahead' }], approvalChoice: 'go', recommendation: 'go' };
-  const denied = await f.raise({ ...keyed, question: 'Enroll web1? (deny)' });
-  const p = f.call('console', 'decision.preview.console', { id: denied.id });
-  assert.deepEqual([p.approve, p.deny], [{ key: 'go', text: 'Go ahead' }, { key: 'stop', text: 'Stop' }]);
-  for (const choice of ['yes', 'no']) refusesSync(() => f.call('console', 'decision.resolve.console', { id: denied.id, choice, digest: p.digest }), 'decision-stale');
-  assert.deepEqual(f.call('console', 'decision.resolve.console', { id: denied.id, choice: 'stop', digest: p.digest }), { id: denied.id, op: 'resolved', choice: 'stop' });
-  await sleep(100);
-  assert.equal(f.enrolls.length, 0);
-  const approved = await f.raise({ ...keyed, question: 'Enroll web1? (approve)' });
-  const { digest } = f.call('console', 'decision.preview.console', { id: approved.id });
-  assert.deepEqual(f.call('console', 'decision.resolve.console', { id: approved.id, choice: 'go', digest }), { id: approved.id, op: 'resolved', choice: 'go', grant: 'started' });
-  await f.settle(approved.id);
-  assert.equal(f.enrolls.length, 1);
-});
-
-test('J11: a stale digest or a key outside the two refuses decision-stale and writes nothing', async (t) => {
-  const f = setup(t);
-  const d = await f.raise();
-  const { digest } = f.call('console', 'decision.preview.console', { id: d.id });
-  refusesSync(() => f.call('console', 'decision.resolve.console', { id: d.id, choice: 'yes', digest: 'f'.repeat(64) }), 'decision-stale');
-  refusesSync(() => f.call('console', 'decision.resolve.console', { id: d.id, choice: 'maybe', digest }), 'decision-stale');
-  refusesSync(() => f.call('console', 'decision.resolve.console', { id: d.id, choice: 'yes' }), 'invalid-request');
-  refusesSync(() => f.call('console', 'decision.resolve.console', { id: d.id, choice: 'yes', digest, note: 'x' }), 'invalid-request');
-  // Another decision's digest does not answer this one.
-  const other = await f.raise({ question: 'Enroll web1 again?' });
-  const od = f.call('console', 'decision.preview.console', { id: other.id }).digest;
-  assert.notEqual(od, digest);
-  refusesSync(() => f.call('console', 'decision.resolve.console', { id: d.id, choice: 'yes', digest: od }), 'decision-stale');
-  assert.deepEqual(f.closes(d.id), []);
-  assert.equal(f.events().filter((e) => e.event === 'human.input').length, 0);
-  // A refusal is recorded, as for every verb.
-  assert.ok(f.events().some((e) => e.event === 'action.refused' && e.code === 'decision-stale'));
-  // The decision closed by the cli meanwhile: the console answer finds it closed.
-  f.call('human', 'decision.resolve', { id: d.id, choice: 'no' });
-  refusesSync(() => f.call('console', 'decision.resolve.console', { id: d.id, choice: 'yes', digest }), 'decision-closed');
-});
-
-test('J14: a via console close with no matching human.input approves nothing', (t) => {
-  const f = setup(t);
-  const grant = { method: 'host-enroll', host: 'web2', address: '192.0.2.11', port: 22, user: 'jarvis', sudo: true, fingerprints: [] };
-  const cli = grantDecision(f.store, { grant });
-  const bare = grantDecision(f.store, { grant: { ...grant, host: 'web3' }, close: { op: 'resolved', by: 'jason', choice: 'yes', via: 'console' } });
-  const wrong = grantDecision(f.store, { grant: { ...grant, host: 'web4' }, close: { op: 'resolved', by: 'jason', choice: 'yes', via: 'console' } });
-  const good = grantDecision(f.store, { grant: { ...grant, host: 'web5' }, close: { op: 'resolved', by: 'jason', choice: 'yes', via: 'console' } });
-  const seqOf = (id) => f.store.get('SELECT seq FROM decision_events WHERE decision=?', id).seq;
-  const input = (id, body, role = null) =>
-    f.store.run(
-      "INSERT INTO events(id,at,business,kind,actor_role,actor_run,subject,body) VALUES(?,?,?,'human.input',?,?,?,?)",
-      'e-' + id + '-' + Math.random(), '2026-10-22T00:00:00.000Z', 'demo', role, role && role + '-run', id, JSON.stringify(body),
-    );
-  const answer = (id) => ({ kind: 'answer', decision: id, op: 'resolved', choice: 'yes', via: 'console', subject: SUBJECT, decisionSeq: seqOf(id) });
-  // `bare` has no human.input at all. `wrong` has records that each break one part: another seq, choice, empty subject, an agent actor.
-  input(wrong, { ...answer(wrong), decisionSeq: seqOf(wrong) + 1000 });
-  input(wrong, { ...answer(wrong), choice: 'no' });
-  input(wrong, { ...answer(wrong), subject: { ...SUBJECT, sub: '' } });
-  input(wrong, answer(wrong), 'chief');
-  input(good, answer(good));
-  // reconcileGrants ends every approved, unspent host-enroll: exactly the cli one and the good console one.
-  assert.deepEqual(f.make().reconcileGrants().sort(), [cli, good].sort());
-  assert.equal(f.enrolls.length, 0);
-  assert.equal(f.store.get("SELECT count(*) AS n FROM events WHERE business='demo' AND actor_run='grant' AND json_extract(body,'$.decision') IN (?,?)", bare, wrong).n, 0);
-});
-
-test('recordEvent keeps human.input reserved, so no agent forges a console answer', async (t) => {
-  const f = setup(t);
-  const d = await f.raise();
-  const forged = { kind: 'human.input', subject: d.id, body: { kind: 'answer', decision: d.id, op: 'resolved', choice: 'yes', via: 'console', subject: SUBJECT, decisionSeq: 1 } };
-  for (const who of ['chief', 'pm']) refusesSync(() => f.broker.recordEvent(f.caps[who], forged), 'reserved-event');
-  refusesSync(() => f.broker.recordEvent(f.caps.console, forged), 'agent-required');
-  assert.equal(f.events().filter((e) => e.event === 'human.input').length, 0);
-});
-
-// J7: the socket transport binds a console proof's cap for its one call only. The reply and a refusal
-// both release it, so the owner cap can't outlive the request that proved it.
-test('J7: a console proof over the socket binds a cap for its one call and the reply releases it', async (t) => {
-  const f = setup(t);
-  const d = await f.raise();
-  const dir = mkdtempSync(join(tmpdir(), 'c252s-'));
-  const bound = [];
-  const server = await serve({
-    broker: f.broker,
-    path: join(dir, 'bus.sock'),
-    authenticateConsole: () => (bound.push(f.broker.bindConsole({ business: 'demo', human: 'jason', subject: SUBJECT })), bound.at(-1)),
-  });
-  t.after(async () => {
-    await server.close();
-    rmSync(dir, { recursive: true, force: true });
-  });
-  const client = new Client({ path: join(dir, 'bus.sock'), console: { fixture: true } });
-  const preview = await client.call('decision.preview.console', { id: d.id });
-  assert.equal(preview.id, d.id);
-  await assert.rejects(client.call('decision.preview.console', { id: 'nope' }), { code: 'decision-not-found' });
-  assert.equal(bound.length, 2);
-  for (const cap of bound) refusesSync(() => f.broker.identity(cap), 'unauthenticated');
-});

packages/bus/tests/grant-scope-runtime.test.mjs

@@ -1,40 +0,0 @@
-// Row 298: the real runtime routes the human scope verb to the durable
-// organization writer. Everything lives under a scratch config/data root.
-import test from 'node:test';
-import assert from 'node:assert/strict';
-import { mkdirSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { startBroker } from '../src/runtime.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
-
-// Break caught: missing runtime setter routing or losing the organization receipt.
-test('row 298 runtime: human scope approval writes the file and organization history at the supplied revision', async t => {
-  const root = mkdtempSync(join(tmpdir(), 'scope-runtime-'));
-  let runtime;
-  t.after(async () => { await runtime?.close(); rmSync(root, { recursive: true, force: true }); });
-  const rolesDir = rolesCopy(root);
-  const file = writeJson(join(root, 'businesses/demo.json'), businessDoc(root, 'demo'));
-  mkdirSync(join(root, 'data'), { mode: 0o700 });
-  runtime = await startBroker({ dataRoot: join(root, 'data'),
-    businesses: { demo: { id: 'demo', human: 'jason', arbiters: { technical: 'coder', delivery: 'coder' },
-      roles: { coder: { authority: { withinRole: [], crossRole: [] } } } } },
-    organization: { dir: root, rolesDir, system: systemFor(root) },
-  });
-  const human = runtime.broker.bindHuman({ business: 'demo', human: 'jason', via: 'cli', outsideAgent: true });
-  const call = (verb, args = {}) => runtime.broker.request(human, { verb, args });
-  const before = call('grants.scope');
-  assert.deepEqual(before.scope, {});
-  const scope = { gitea: { agents: ['coder'], projects: ['stack'] } };
-  const saved = call('grants.scope.set', { revision: before.revision, scope });
-  assert.deepEqual(JSON.parse(readFileSync(file, 'utf8')).launch.grantScope, scope);
-  assert.deepEqual(call('grants.scope').scope, scope);
-  assert.notEqual(saved.revision, before.revision);
-  const entries = readFileSync(join(root, 'businesses/.history/demo/changes.jsonl'), 'utf8').trim().split('\n').map(JSON.parse);
-  assert.equal(entries.at(-1).state, 'committed');
-  assert.equal(entries.at(-1).actor, 'jason');
-  assert.equal(entries.at(-1).changes[0].path, 'launch.grantScope');
-  const bytes = readFileSync(file, 'utf8');
-  assert.throws(() => call('grants.scope.set', { revision: before.revision, scope: {} }), e => e.code === 'revision-conflict');
-  assert.equal(readFileSync(file, 'utf8'), bytes);
-});

packages/bus/tests/grant-scope.test.mjs

@@ -1,359 +0,0 @@
-// Row 298 (#1804, Q228): the chief of staff's grant scope at the broker. The human's grants.scope and
-// grants.scope.set (sage-3594 Q3), the in-scope close via 'scope' with grant.scope.used (Q4), the
-// spend recheck's scope-changed (Q5), and the out-of-scope raise that still waits for the human.
-// Gitea grants run against the fake Gitea in fake-gitea-api.mjs on 127.0.0.1; host grants stop at the
-// spend, as no host key store is configured, and nothing connects to a host. Every token is a fake the
-// fake made and none is printed. The organization writer is a fake here; the real one is
-// packages/business/tests/grant-scope.test.mjs.
-import test from 'node:test';
-import assert from 'node:assert/strict';
-import { createHash } from 'node:crypto';
-import { mkdirSync, mkdtempSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { Broker, GRANT_EVIDENCE, writeGrantEvent } from '../src/broker.mjs';
-import { Credentials } from '../src/credentials.mjs';
-import { giteaGrant, giteaKeys } from '../src/gitea-grant.mjs';
-import { hostGrant, grantKeys, fingerprint } from '../src/host-grant.mjs';
-import { Store } from '../src/store.mjs';
-import { checkGrantScope, grantScopeOf } from '../../business/src/vocabulary.mjs';
-import { fakeGiteaApi } from './fake-gitea-api.mjs';
-import { hostRecord, grantDecision } from './host-fixtures.mjs';
-
-const USER = 'demo-coder';
-const ENTRY = { address: '192.0.2.10', port: 22, user: 'jarvis', hostKeys: ['ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHostKeyForTests'] };
-const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-const sha256 = (x) => createHash('sha256').update(x).digest('hex');
-const dayFrom = (n) => new Date(Date.now() + n * 86400000).toISOString().slice(0, 10);
-const options = [{ key: 'yes', text: 'Yes' }, { key: 'no', text: 'No' }];
-const none = { authority: { withinRole: ['message.send'], crossRole: [] } };
-const DEFINITIONS = {
-  'chief-of-staff': { roleVersion: 2, credentials: [] },
-  pm: { roleVersion: 2, credentials: [] },
-  coder: { roleVersion: 2, credentials: [{ service: 'gitea' }] },
-  ops: { roleVersion: 2, credentials: [{ service: 'host' }] },
-};
-const GITEA = { gitea: { agents: ['coder'], projects: ['app'] } };
-const HOST = { host: { agents: ['ops'], hosts: ['web1'], commands: [['systemctl', 'status', 'nginx']] } };
-const REVISION = 'a'.repeat(64);
-async function until(fn, ms = 10000) {
-  const end = Date.now() + ms;
-  while (!fn()) {
-    if (Date.now() > end) throw new Error('timed out');
-    await sleep(20);
-  }
-}
-const rejects = (p, code) => assert.rejects(Promise.resolve().then(p), (e) => (assert.equal(e.code, code), true));
-
-// opts.scope: the value grantScope answers, or a function called at each read.
-async function setup(t, opts = {}) {
-  const dir = mkdtempSync(join(tmpdir(), 'g298-'));
-  t.after(() => rmSync(dir, { recursive: true, force: true }));
-  const gitea = await fakeGiteaApi(t, join(dir, 'tls'));
-  gitea.addUser('acme');
-  gitea.addRepo('acme', 'app');
-  gitea.addRepo('acme', 'lib');
-  const configDir = join(dir, 'cfg');
-  mkdirSync(configDir, { mode: 0o700 });
-  const storeRoot = join(configDir, 'secrets', 'agents');
-  mkdirSync(join(dir, 'data'), { mode: 0o700 });
-  const store = new Store(join(dir, 'data'));
-  const credentials = new Credentials({ references: {}, storeRoot, dataRoot: join(dir, 'data') });
-  t.after(() => {
-    credentials.close();
-    store.close();
-  });
-  const business = {
-    id: 'demo',
-    human: 'jason',
-    arbiters: { technical: 'pm', delivery: 'pm' },
-    roles: {
-      chief: { definition: 'chief-of-staff', ...none },
-      // A second chief-of-staff instance, as an instances.set or the tester could add. It isn't launch.by.
-      chief2: { definition: 'chief-of-staff', ...none },
-      pm: { definition: 'pm', ...none },
-      coder: { definition: 'coder', ...none, identity: { name: 'Coder', email: '[email protected]', gitea: { url: gitea.url, user: USER } }, publish: ['app', 'lib'] },
-      ops: { definition: 'ops', ...none },
-    },
-    definitions: structuredClone(DEFINITIONS),
-    projects: Object.fromEntries(['app', 'lib'].map((p) => [p, { remote: `${gitea.url}/acme/${p}` }])),
-    launch: { by: 'chief', instances: ['pm', 'coder', 'ops'] },
-    vars: { 'bus.tester': true },
-  };
-  const grantApi = giteaGrant({ configDir, ca: gitea.ca, timeoutMs: 5000 });
-  grantApi.writeAdmin('demo', gitea.adminToken, { url: gitea.url, account: 'mosaic-grant', rotateBy: dayFrom(60), setAt: '2026-10-21T00:00:00.000Z' });
-  // The fake organization writer: the scope in a box, checked as the real writer checks it.
-  const box = { value: opts.scope };
-  const orgCalls = [];
-  const organization = (id, verb, args, actor) => {
-    orgCalls.push([verb, actor]);
-    if (verb === 'grants.scope') return { business: id, revision: REVISION, ...grantScopeOf(box.value) };
-    if (verb === 'grants.scope.set') {
-      const scope = checkGrantScope(args.scope);
-      if (scope === null) throw Object.assign(new Error('scope is not a grant scope'), { code: 'invalid-request' });
-      const old = grantScopeOf(box.value).scope;
-      box.value = scope;
-      return { business: id, scope, old, transaction: 'tx-298' };
-    }
-    return { revision: REVISION };
-  };
-  // Keep the real key generation/store/records; replace only remote host calls.
-  const hostLines = new Set();
-  const hostApi = {
-    ...hostGrant({ configDir, runRoot: join(configDir, 'secrets', 'run') }),
-    keyscan: async () => ENTRY.hostKeys,
-    install: async (_business, _host, _record, tag) => { hostLines.add(tag); },
-    verify: async () => {},
-    remove: async (_business, _host, _record, tag) => { hostLines.delete(tag); },
-  };
-  const broker = new Broker({
-    store,
-    businesses: { demo: business },
-    secretCheck: (value) => credentials.assertClean(value),
-    giteaGrant: grantApi,
-    giteaKeys: giteaKeys({ credentials, storeRoot }),
-    hostGrant: hostApi,
-    hostKeys: opts.hostKeys ? grantKeys({ credentials, storeRoot }) : null,
-    organization,
-    grantScope: () => ({ value: typeof box.value === 'function' ? box.value() : box.value, revision: Object.hasOwn(opts, 'revision') ? opts.revision : REVISION }),
-  });
-  const caps = {};
-  for (const role of ['chief', 'chief2', 'pm', 'ops']) {
-    caps[role] = broker.bindLaunch({ business: 'demo', role, run: role + '-run', harness: 'pi', address: role });
-    broker.request(caps[role], { verb: 'role.claim' });
-  }
-  caps.human = broker.bindHuman({ business: 'demo', human: 'jason', via: 'cli', outsideAgent: true });
-  caps.tester = broker.bindTester({ business: 'demo' });
-  caps.reader = broker.bindReader({ business: 'demo' });
-  caps.console = broker.bindConsole({ business: 'demo', human: 'jason', subject: { provider: 'p', iss: 'https://idp.example.test', sub: 's' } });
-  hostRecord(store, { host: 'web1', entry: ENTRY });
-  const call = (who, verb, args = {}) => broker.request(caps[who], { verb, args });
-  const raiseGitea = (over = {}, who = 'chief') =>
-    call(who, 'decision.raise', {
-      action: 'credential.mint', question: 'Grant coder Gitea?', options, recommendation: 'yes', blocking: false,
-      grant: { method: 'gitea', agent: 'coder', target: { projects: ['app'] }, rotateBy: dayFrom(30), ...over },
-    });
-  const raiseHost = (over = {}, who = 'chief') =>
-    call(who, 'decision.raise', {
-      action: 'credential.mint', question: 'Grant ops web1?', options, recommendation: 'yes', blocking: false,
-      grant: { method: 'host', agent: 'ops', host: 'web1', commands: [['systemctl', 'status', 'nginx']], rotateBy: dayFrom(30), ...over },
-    });
-  const grantEvents = () =>
-    store.all(`SELECT body FROM events WHERE business='demo' AND ${GRANT_EVIDENCE} ORDER BY seq`).map((e) => JSON.parse(e.body));
-  const ended = (decision) => grantEvents().findLast((e) => e.grantDecision === decision && ['grant.applied', 'grant.failed'].includes(e.action));
-  const closes = (decision) => store.all('SELECT * FROM decision_events WHERE decision=? ORDER BY seq', decision);
-  const spent = (decision) => grantEvents().filter((e) => e.decision === decision && e.operation?.startsWith('grant.')).map((e) => e.operation);
-  const record = () => store.get("SELECT * FROM gitea_grants WHERE business='demo' AND agent='coder'");
-  return { store, broker, caps, box, orgCalls, call, raiseGitea, raiseHost, grantEvents, ended, closes, spent, record, gitea, hostLines };
-}
-
-test('row 298 (Q3): only the human at the cli reads or sets the scope; agents, the tester, a reader and the Console refuse', async (t) => {
-  const f = await setup(t);
-  for (const verb of ['grants.scope', 'grants.scope.set']) {
-    const args = verb === 'grants.scope' ? {} : { revision: REVISION, scope: GITEA };
-    for (const who of ['chief', 'chief2', 'pm', 'tester']) await rejects(() => f.call(who, verb, args), 'human-required');
-    await rejects(() => f.call('reader', verb, args), 'read-only');
-    await rejects(() => f.call('console', verb, args), 'human-required');
-  }
-  assert.deepEqual(f.orgCalls, []);
-  assert.equal(f.box.value, undefined);
-  assert.deepEqual(f.grantEvents().filter((e) => e.action === 'grant.scope'), []);
-});
-
-test('row 298 (Q1): organization.set and limits.set refuse a grantScope key, and nothing is written', async (t) => {
-  const f = await setup(t);
-  await rejects(() => f.call('human', 'limits.set', { revision: REVISION, grantScope: GITEA }), 'invalid-request');
-  await rejects(() => f.call('chief', 'organization.set', { revision: REVISION, grantScope: GITEA }), 'invalid-request');
-  assert.deepEqual(f.orgCalls, []);
-  assert.equal(f.box.value, undefined);
-});
-
-test('row 298 (Q3): the human verb writes the scope and a grant.scope record with the human proof and both sha256', async (t) => {
-  const f = await setup(t);
-  assert.deepEqual(await f.call('human', 'grants.scope'), { business: 'demo', revision: REVISION, scope: {}, fallback: false });
-  const r = await f.call('human', 'grants.scope.set', { revision: REVISION, scope: GITEA });
-  assert.deepEqual(r.scope, GITEA);
-  assert.deepEqual(f.orgCalls, [['grants.scope', 'jason'], ['grants.scope.set', 'jason']]);
-  const changes = f.grantEvents().filter((e) => e.action === 'grant.scope');
-  assert.deepEqual(changes, [{
-    action: 'grant.scope', by: 'jason', via: 'cli', outsideAgent: true,
-    oldSha256: sha256(JSON.stringify({})), newSha256: sha256(JSON.stringify(GITEA)), transaction: 'tx-298',
-  }]);
-  await rejects(() => f.call('human', 'grants.scope.set', { revision: REVISION, scope: { gitea: {} } }), 'invalid-request');
-  await rejects(() => f.call('human', 'grants.scope.set', { revision: REVISION }), 'invalid-request');
-  await rejects(() => f.call('human', 'grants.scope.set', { revision: REVISION, scope: {}, extra: 1 }), 'invalid-request');
-  assert.equal(f.grantEvents().filter((e) => e.action === 'grant.scope').length, 1);
-});
-
-test('row 298 (Q4): an in-scope Gitea grant is issued with no inbox item, logged with 236 records, and revocable', async (t) => {
-  const f = await setup(t, { scope: GITEA });
-  const d = await f.raiseGitea();
-  const [close] = f.closes(d.id);
-  assert.deepEqual([close.op, close.by, close.choice, close.via], ['resolved', 'grant-scope', 'yes', 'scope']);
-  assert.ok(f.grantEvents().some(e => e.action === 'grant.scope.used' && e.grantDecision === d.id), 'scope close must have protected evidence');
-  const inbox = await f.call('human', 'inbox');
-  assert.ok(!JSON.stringify(inbox).includes(d.id), 'the decision is not in the human inbox');
-  await until(() => f.ended(d.id));
-  await f.broker.giteaIdle();
-  assert.equal(f.ended(d.id).action, 'grant.applied');
-  const used = f.grantEvents().find((e) => e.action === 'grant.scope.used');
-  assert.deepEqual(used, {
-    action: 'grant.scope.used', grantDecision: d.id, decisionSeq: close.seq, method: 'gitea', agent: 'coder', scope: GITEA, revision: REVISION, scopeSha256: sha256(JSON.stringify(GITEA)),
-  });
-  assert.deepEqual(f.spent(d.id), ['grant.gitea']);
-  assert.equal(f.record().decision, d.id);
-  // The spend is row 236's: a second start finds it consumed.
-  assert.equal(await f.broker.runGiteaGrant('demo', d.id), 'decision-consumed');
-  const out = await f.call('human', 'grants.revoke', { service: 'gitea', agent: 'coder', reason: 'test' });
-  assert.deepEqual(out.serviceLeft, []);
-  assert.ok(f.grantEvents().some((e) => e.action === 'grant.revoked' && e.agent === 'coder'));
-  assert.equal(f.record(), undefined);
-});
-
-test('row 298: an out-of-scope Gitea grant waits for the human, whose Approve still issues it', async (t) => {
-  const f = await setup(t, { scope: GITEA });
-  const d = await f.raiseGitea({ target: { projects: ['app', 'lib'] } });
-  assert.deepEqual(f.closes(d.id), []);
-  assert.ok(JSON.stringify(await f.call('human', 'inbox')).includes(d.id));
-  assert.deepEqual(f.grantEvents().filter((e) => e.action === 'grant.scope.used'), []);
-  await f.call('human', 'decision.resolve', { id: d.id, choice: 'yes' });
-  await until(() => f.ended(d.id));
-  await f.broker.giteaIdle();
-  assert.equal(f.ended(d.id).action, 'grant.applied');
-});
-
-test('row 298: with no scope, a bad scope or an unreadable file, an in-scope-looking grant waits', async (t) => {
-  const bad = { gitea: { agents: ['coder'], projects: ['app'], note: 'not a key' } };
-  for (const scope of [undefined, bad, () => { throw new Error('unreadable'); }]) {
-    const f = await setup(t, { scope });
-    const d = await f.raiseGitea();
-    assert.deepEqual(f.closes(d.id), [], String(scope));
-    assert.deepEqual(f.grantEvents().filter((e) => e.action === 'grant.scope.used'), []);
-  }
-});
-
-test('row 298 (Q6): a chief-of-staff instance that is not launch.by never raises in scope', async (t) => {
-  const f = await setup(t, { scope: GITEA });
-  const d = await f.raiseGitea({}, 'chief2');
-  assert.deepEqual(f.closes(d.id), []);
-});
-
-test('row 298 (Q5): a scope narrowed between the raise and the spend ends the grant scope-changed', async (t) => {
-  let reads = 0;
-  const f = await setup(t, { scope: () => (reads++ === 0 ? GITEA : {}) });
-  const d = await f.raiseGitea();
-  assert.equal(f.closes(d.id)[0].via, 'scope');
-  await until(() => f.ended(d.id));
-  await f.broker.giteaIdle();
-  assert.deepEqual([f.ended(d.id).action, f.ended(d.id).code], ['grant.failed', 'scope-changed']);
-  assert.equal(f.record(), undefined);
-  assert.deepEqual(f.gitea.tokens(USER) ?? [], []);
-  assert.deepEqual(f.spent(d.id), ['grant.gitea']);
-  assert.equal(await f.broker.runGiteaGrant('demo', d.id), 'decision-consumed');
-});
-
-test('row 298 (Q2): an in-scope host grant is spent with no Approve; ls never covers lsblk, nor a scope command extra arguments', async (t) => {
-  const scope = { host: { agents: ['ops'], hosts: ['web1'], commands: [['ls'], ['systemctl', 'status', 'nginx']] } };
-  const f = await setup(t, { scope });
-  const d = await f.raiseHost();
-  assert.equal(f.closes(d.id)[0].via, 'scope');
-  await until(() => f.ended(d.id));
-  // The spend is row 235's. No host key store is configured, so the recheck after it ends here.
-  assert.deepEqual(f.spent(d.id), ['grant.host']);
-  assert.deepEqual([f.ended(d.id).action, f.ended(d.id).code], ['grant.failed', 'host-not-configured']);
-  for (const commands of [[['lsblk']], [['ls', '-l']], [['systemctl', 'restart']]]) {
-    const w = await f.raiseHost({ commands });
-    assert.deepEqual(f.closes(w.id), [], JSON.stringify(commands));
-  }
-});
-
-test('row 298 (Q5): a host scope narrowed before the spend ends scope-changed', async (t) => {
-  let reads = 0;
-  const f = await setup(t, { scope: () => (reads++ === 0 ? HOST : {}) });
-  const d = await f.raiseHost();
-  assert.equal(f.closes(d.id)[0].via, 'scope');
-  await until(() => f.ended(d.id));
-  assert.deepEqual([f.ended(d.id).action, f.ended(d.id).code], ['grant.failed', 'scope-changed']);
-  assert.deepEqual(f.spent(d.id), ['grant.host']);
-});
-
-// Break caught: accepting scope closes with no evidence or unbound evidence.
-test('row 298 Q4: missing scope evidence or a bad scope digest cannot authorize execution', async (t) => {
-  const f = await setup(t, { scope: GITEA });
-  const good = { scope: GITEA, scopeSha256: sha256(JSON.stringify(GITEA)), revision: REVISION };
-  for (const evidence of [
-    null,
-    { ...good, scopeSha256: '0'.repeat(64) },
-    { ...good, revision: null },
-    { ...good, scope: { gitea: 'all' } },
-    { ...good, agent: 'other' },
-    { ...good, method: 'host' },
-    { ...good, decisionSeq: 999999 },
-  ]) {
-    const grant = { method: 'gitea', agent: 'coder', target: { projects: ['app'] }, rotateBy: dayFrom(30) };
-    const id = grantDecision(f.store, { grant, close: { op: 'resolved', by: 'grant-scope', choice: 'yes', via: 'scope' } });
-    if (evidence) writeGrantEvent(f.store, new Date().toISOString(), 'demo', {
-      action: 'grant.scope.used', grantDecision: id, decisionSeq: f.closes(id)[0].seq,
-      method: 'gitea', agent: 'coder', ...evidence,
-    }, id);
-    assert.equal(await f.broker.runGiteaGrant('demo', id), 'not-authorized');
-    assert.deepEqual(f.spent(id), []);
-    assert.equal(f.record(), undefined);
-  }
-  // Positive control: the same fixture with valid scope evidence reaches the
-  // next grant check. Its intentionally absent definition binding refuses there.
-  const id = grantDecision(f.store, {
-    grant: { method: 'gitea', agent: 'coder', target: { projects: ['app'] }, rotateBy: dayFrom(30) },
-    close: { op: 'resolved', by: 'grant-scope', choice: 'yes', via: 'scope' },
-  });
-  writeGrantEvent(f.store, new Date().toISOString(), 'demo', {
-    action: 'grant.scope.used', grantDecision: id, decisionSeq: f.closes(id)[0].seq,
-    method: 'gitea', agent: 'coder', ...good,
-  }, id);
-  assert.equal(await f.broker.runGiteaGrant('demo', id), 'decision-mismatch');
-  assert.deepEqual(f.spent(id), []);
-  assert.equal(f.record(), undefined);
-});
-
-// Break caught: host grants bypassing records or losing the ordinary revoke path.
-test('row 298 T4/T8: an in-scope host grant issues, records and revokes through the existing executor', async (t) => {
-  const f = await setup(t, { scope: HOST, hostKeys: true });
-  const d = await f.raiseHost();
-  assert.equal(f.closes(d.id)[0].via, 'scope');
-  assert.ok(!JSON.stringify(await f.call('human', 'inbox')).includes(d.id));
-  await until(() => f.ended(d.id));
-  await f.broker.grantsIdle();
-  assert.equal(f.ended(d.id).action, 'grant.applied');
-  assert.equal(f.store.get("SELECT decision FROM host_grants WHERE agent='ops'").decision, d.id);
-  assert.equal(f.hostLines.size, 1);
-  await f.call('human', 'grants.scope.set', { revision: REVISION, scope: {} });
-  // Historical approval still passes #hostAccess after scope is narrowed;
-  // only the absent command executor refuses this call, before any sudo decision.
-  await rejects(() => f.broker.requestHost(f.caps.ops,
-    { verb: 'host.run', args: { host: 'web1', argv: ['systemctl', 'status', 'nginx'] } }, null), 'host-not-configured');
-  await f.call('human', 'hosts.revoke', { agent: 'ops', host: 'web1', reason: 'test' });
-  assert.equal(f.store.get("SELECT decision FROM host_grants WHERE agent='ops'"), undefined);
-  assert.equal(f.hostLines.size, 0);
-  assert.ok(f.grantEvents().some(e => e.action === 'grant.revoked' && e.agent === 'ops'));
-});
-
-// Break caught: a new host enrollment entering the scope shortcut.
-test('row 298 T6: host enrollment stays open for human Approve even with both methods in scope', async (t) => {
-  const f = await setup(t, { scope: { ...GITEA, ...HOST } });
-  const d = await f.call('chief', 'decision.raise', {
-    action: 'credential.mint', question: 'Enroll host?', options, recommendation: 'yes', blocking: false,
-    grant: { method: 'host-enroll', host: 'web2', address: ENTRY.address, port: ENTRY.port,
-      user: ENTRY.user, sudo: true, fingerprints: ENTRY.hostKeys.map(fingerprint) },
-  });
-  assert.deepEqual(f.closes(d.id), []);
-  assert.ok(JSON.stringify(await f.call('human', 'inbox')).includes(d.id));
-  assert.deepEqual(f.grantEvents().filter(e => e.action === 'grant.scope.used'), []);
-});
-
-// Break caught: using a scope without a verifiable organization revision.
-test('row 298: scope without an organization revision never closes automatically', async (t) => {
-  const f = await setup(t, { scope: GITEA, revision: null });
-  const d = await f.raiseGitea();
-  assert.deepEqual(f.closes(d.id), []);
-  assert.deepEqual(f.spent(d.id), []);
-});

packages/bus/tests/principal.test.mjs

@@ -46,52 +46,3 @@ test('human leaf identity is reread after walking the parents',()=>{
  c.readProcess=pid=>{const p=read(pid);if(pid===50&&n++>0)p.startTime='101';return p;};
  assert.throws(()=>verifyPrincipal({human:proof},c),/human-required/);
 });
-
-// Row 252 (#1753, design section 2, J3-J5): the Console owner. The same-tree console-cli wrapper with
-// its own nonce, a direct same-tree `serve` parent, the subject from the wrapper's spawn environment,
-// and that subject one of the configured owners (N1).
-const owner={provider:'fake-oidc',iss:'https://idp.test',sub:'owner-1'};
-function consoleContext() {
- const c=context('user');c.paths={...paths,consoleCli:'/tree/console-cli.mjs'};c.consoleOwners=[{provider:'other',iss:'https://idp.test',sub:'owner-2'},owner];
- Object.assign(c.table.get(50),{argv:['node','/tree/console-cli.mjs'],env:{MOSAIC_BUS_CONSOLE_NONCE:nonce,MOSAIC_BUS_CONSOLE_BUSINESS:'demo',MOSAIC_BUS_CONSOLE_PROVIDER:owner.provider,MOSAIC_BUS_CONSOLE_ISS:owner.iss,MOSAIC_BUS_CONSOLE_SUB:owner.sub}});
- return c;
-}
-const consoleProof={...proof,...owner};
-test('console requires its own wrapper, nonce and serve parent, and a configured owner from the spawn env',()=>{
- assert.deepEqual(verifyPrincipal({console:consoleProof},consoleContext()),{kind:'console',business:'demo',id:'owner',via:'console',subject:owner});
- // J3: the subject is the spawn's, never the body's alone, and must be a configured owner.
- for(const change of [{sub:'owner-2'},{iss:'https://evil.test'},{provider:'other'}])
-  assert.throws(()=>verifyPrincipal({console:{...consoleProof,...change}},consoleContext()),/human-required/);
- const unlisted=consoleContext();unlisted.consoleOwners=[];
- assert.throws(()=>verifyPrincipal({console:consoleProof},unlisted),/human-required/);
- for(const extra of [{name:'Jason'},{human:'owner'},{user:'owner'},{sub:''},{sub:'x'.repeat(513)}])
-  assert.throws(()=>verifyPrincipal({console:{...consoleProof,...extra}},consoleContext()),/human-required/);
- // J4: the parent is the same-tree serve, direct, and not an agent.
- for(const change of [{argv:['bash']},{argv:['node','/other/console.mjs','serve']},{argv:['node',paths.console,'other']},{env:{CODEX_THREAD_ID:'agent'}},{uid:uid+1}]) {
-  const c=consoleContext();Object.assign(c.table.get(40),change);
-  assert.throws(()=>verifyPrincipal({console:consoleProof},c),/human-required/);
- }
- const launched=consoleContext();launched.launches=[{pid:40,startTime:'90'}];
- assert.throws(()=>verifyPrincipal({console:consoleProof},launched),/human-required/);
- // J5: another nonce namespace, or the wrapper path of another kind, refuses.
- for(const env of [{MOSAIC_BUS_CLI_NONCE:nonce},{MOSAIC_BUS_USER_NONCE:nonce}]) {
-  const c=consoleContext();const t=c.table.get(50);t.env={...t.env,...env};delete t.env.MOSAIC_BUS_CONSOLE_NONCE;
-  assert.throws(()=>verifyPrincipal({console:consoleProof},c),/human-required/);
- }
- for(const argv of [['node',paths.human],['node',paths.user],['node','/other/console-cli.mjs']]) {
-  const c=consoleContext();c.table.get(50).argv=argv;
-  assert.throws(()=>verifyPrincipal({console:consoleProof},c),/human-required/);
- }
- // The Console's own nonce does not answer as the cli human or the user.
- assert.throws(()=>verifyPrincipal({human:proof},consoleContext()),/human-required/);
- assert.throws(()=>verifyPrincipal({user:{...proof,user:'owner'}},consoleContext()),/human-required/);
- // Each piece is read again after the walk: a parent or a spawn subject that changed refuses.
- for(const [pid,mutate] of [[40,p=>{p.startTime='91';}],[50,p=>{p.env={...p.env,MOSAIC_BUS_CONSOLE_SUB:'owner-2'};}],[50,p=>{p.ppid=41;}]]) {
-  const c=consoleContext(),read=c.readProcess;let n=0;
-  // The last read of each pid is verifyConsole's own reread: 40 is read 3 times, 50 is read 4 times.
-  c.readProcess=x=>{const p=read(x);if(x===pid&&n++===(pid===40?2:3))mutate(p);return p;};
-  assert.throws(()=>verifyPrincipal({console:consoleProof},c),/human-required/);
- }
- for(const peer of [{pid:51,uid,gid:uid},{pid:50,uid:uid+1,gid:uid}])assert.throws(()=>verifyPrincipal({console:consoleProof},{...consoleContext(),peer}),/human-required/);
- assert.throws(()=>verifyPrincipal({console:consoleProof,human:proof},consoleContext()),/invalid-envelope/);
-});

packages/bus/tests/project-runtime.test.mjs

@@ -33,7 +33,7 @@ test('Broker keeps the sandbox client import closure: only the listed imports, n
     // Row 236 (#1742, #436b) reads giteaName and parseGiteaUrl for the Gitea grant path.
     // FED R3 r5 (row 274, #414) reads covers, a user's grant check, from it.
     // Row 219 reads THREAD_DEFINITIONS from the same vocabulary for creative thread admission.
-    "import { ID_PATTERN, THREAD_DEFINITIONS, END_PROTECTED, forkProblem, forkUrl, credentialKind, validArgv, commandAllowed, HOST_ID, CREATIVE_DEFINITIONS, unhireableAction, giteaName, parseGiteaUrl, covers, grantScopeOf, grantInScope } from '../../business/src/vocabulary.mjs';",
+    "import { ID_PATTERN, THREAD_DEFINITIONS, END_PROTECTED, forkProblem, forkUrl, credentialKind, validArgv, commandAllowed, HOST_ID, CREATIVE_DEFINITIONS, unhireableAction, giteaName, parseGiteaUrl, covers } from '../../business/src/vocabulary.mjs';",
   ]);
   assert.doesNotMatch(source, /\bimport\s*\(/);
   assert.doesNotMatch(readFileSync(new URL('../src/landing.mjs', import.meta.url), 'utf8'), /\bimport\b/);

packages/bus/tests/requirements.test.mjs

@@ -45,7 +45,7 @@ test('requirements returns the committed list to a holding role session, and no
   const pm = agent('pm');
   const list = call(b, pm, 'requirements');
   assert.deepEqual(list, loadRequirements());
-  assert.equal(list.requirements.length, 87);
+  assert.equal(list.requirements.length, 85);
   assert.deepEqual(call(b, agent('coder'), 'requirements'), list);
   assert.throws(() => call(b, human, 'requirements'), /agent-required/);
   assert.throws(() => call(b, reader, 'requirements'), /read-only/);

packages/business/src/business.mjs

@@ -175,7 +175,7 @@ function checkLaunch(launch, roles, definitions, file) {
   const where = `${file} launch`;
   requireObject(launch, where);
   if (Object.hasOwn(launch,"max")) refuse(`${where}.max needs migration: mosaic limits migrate --file FILE --models FILE`);
-  rejectUnknownKeys(launch, ["by", "instances", "models", "limits", "threadIdleSeconds", "account", "keep", "noHire", "grantScope"], where);
+  rejectUnknownKeys(launch, ["by", "instances", "models", "limits", "threadIdleSeconds", "account", "keep", "noHire"], where);
   requireId(launch.by, `${where}.by`);
   if (!Object.hasOwn(roles, launch.by)) refuse(`${where}.by names ${launch.by}, which the business file doesn't declare`);
   const launcher = definitions[roles[launch.by].definition];
@@ -212,9 +212,6 @@ function checkLaunch(launch, roles, definitions, file) {
   return {
     by: launch.by, instances, models, limits, threadIdleSeconds, ...(account ? { account } : {}),
     ...(keep ? { keep } : {}), ...(noHire ? { noHire } : {}),
-    // Row 298 (#1804, Q228): the chief's grant scope passes through unchecked. A bad value must not
-    // refuse the whole file; the broker's reader (grantScopeOf) falls back to the empty scope instead.
-    ...(launch.grantScope !== undefined ? { grantScope: structuredClone(launch.grantScope) } : {}),
   };
 }
 

packages/business/src/instance-settings.mjs

@@ -14,12 +14,11 @@ import { resolveInstance } from "./resolve.mjs";
 import { loadRole } from "./role.mjs";
 import { refuse } from "./errors.mjs";
 import { isPlainObject, canonicalJson } from "./util.mjs";
-import { CREATIVE_DEFINITIONS, END_PROTECTED, HOST_SERVICE, ID_PATTERN, checkGrantScope, grantScopeOf } from "./vocabulary.mjs";
+import { CREATIVE_DEFINITIONS, END_PROTECTED, HOST_SERVICE, ID_PATTERN } from "./vocabulary.mjs";
 
 const SET_KEYS = ["revision", "instance", "op", "definition", "vars", "launch", "tracker"];
 const VETO_KEYS = ["revision", "op", "name"];
 const VETO_OPS = ["keep", "unkeep", "nohire", "hire"];
-const SCOPE_KEYS = ["revision", "scope"];
 const id = value => typeof value === "string" && ID_PATTERN.test(value);
 const revisionOk = value => typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
 // Row 194 (D2.2, N3): the vars a hire may set, the ones the chief can already set on an instance.
@@ -303,32 +302,6 @@ export function instanceSettings({ dir, rolesDir, system, levels = () => null, r
     return commit(business, old, next, { revision: args.revision, actor });
   }
 
-  // Row 298 (#1804, Q228): the chief's grant scope as the file stands. scope is the one the broker
-  // applies, so a bad value reads as {} with fallback true.
-  function grantScopeRead(business) {
-    const { document, revision } = writer.read(business);
-    if (!document.launch) throw new OrganizationError("organization-launch-not-configured");
-    return { business, revision, ...grantScopeOf(document.launch.grantScope) };
-  }
-
-  // Row 298: args { revision, scope }. Human-only at the broker (grants.scope.set), and the only
-  // writer of launch.grantScope: SET_KEYS and the organization.set keys don't name it. The scope is
-  // checked strictly here; {} removes the key. old is what the broker applied before the write,
-  // the fallback included.
-  function grantScope(business, args, actor) {
-    if (!isPlainObject(args) || Object.keys(args).some(key => !SCOPE_KEYS.includes(key))) throw new OrganizationError("invalid-request");
-    if (!revisionOk(args.revision)) throw new OrganizationError("invalid-request");
-    const scope = checkGrantScope(args.scope);
-    if (scope === null) throw new OrganizationError("invalid-request", "scope is not a grant scope");
-    const old = writer.read(business).document;
-    if (!old.launch) throw new OrganizationError("organization-launch-not-configured");
-    const next = structuredClone(old);
-    if (Object.keys(scope).length === 0) delete next.launch.grantScope;
-    else next.launch.grantScope = scope;
-    const before = grantScopeOf(old.launch.grantScope).scope;
-    return { ...commit(business, old, next, { revision: args.revision, actor }), scope, old: before };
-  }
-
   // Row 194 (#1692, D2.2): the chief's hire, after the broker's identity, grant, allowlist and
   // hireable checks. args { name, definition, vars? }. A new name is added and listed. A fired name
   // (declared, not listed) is listed again only with its own definition and no vars. The writer
@@ -446,5 +419,5 @@ export function instanceSettings({ dir, rolesDir, system, levels = () => null, r
     return { ...read(business, actor), transaction: receipt.transaction, restart: false };
   }
 
-  return { writer, read, set, checkDelete, checkFire, veto, hire, fire, grantScope, grantScopeRead };
+  return { writer, read, set, checkDelete, checkFire, veto, hire, fire };
 }

packages/business/src/vocabulary.mjs

@@ -299,73 +299,3 @@ export function covers(grant, { business, project, instance }, now, { level } =
   if (!LEVELS.includes(grant.level) || LEVELS.indexOf(grant.level) > LEVELS.indexOf(level)) return false;
   return true;
 }
-
-// Row 298 (#1804, Q228): the chief of staff's grant scope, launch.grantScope in the organization
-// file. Only the human writes it (grants.scope.set). A Gitea or host grant the enrolled chief raises
-// inside it is issued with no per-grant Approve; anything else waits for the human as before. The
-// broker and the writer read these, and they live here because the session sandbox mounts this file
-// (seat/src/sandbox.mjs RUNNER_FILES) and the runner loads broker.mjs.
-//
-// Shape: { gitea?: { agents, projects }, host?: { agents, hosts, commands } }.
-// Each list is distinct and nonempty. A commands entry covers a requested prefix equal to it,
-// token for token and with equal length. No entry matches part of a token, so
-// ["ls"] never covers ["lsblk"]. Enrollment (host-enroll) is never in scope. {} is the empty scope.
-export const GRANT_SCOPE_EMPTY = Object.freeze({});
-const SCOPE_IDS = (value) =>
-  Array.isArray(value) && value.length > 0 && value.length <= 256 &&
-  value.every((x) => typeof x === "string" && ID_PATTERN.test(x)) && new Set(value).size === value.length;
-const SCOPE_ARGVS = (value) =>
-  Array.isArray(value) && value.length > 0 && value.length <= 256 && value.every(validArgv) &&
-  new Set(value.map((argv) => JSON.stringify(argv))).size === value.length;
-const SCOPE_PLAIN = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && Object.getPrototypeOf(value) === Object.prototype;
-
-// The scope, rebuilt in a fixed key order so JSON.stringify of it is stable, or null when the value
-// isn't one. The writer refuses null; the readers fall back (grantScopeOf).
-export function checkGrantScope(value) {
-  if (!SCOPE_PLAIN(value) || Object.keys(value).some((k) => k !== "gitea" && k !== "host")) return null;
-  const out = {};
-  if (value.gitea !== undefined) {
-    const g = value.gitea;
-    if (!SCOPE_PLAIN(g) || Object.keys(g).some((k) => k !== "agents" && k !== "projects")) return null;
-    if (!SCOPE_IDS(g.agents) || !SCOPE_IDS(g.projects)) return null;
-    out.gitea = { agents: [...g.agents], projects: [...g.projects] };
-  }
-  if (value.host !== undefined) {
-    const h = value.host;
-    if (!SCOPE_PLAIN(h) || Object.keys(h).some((k) => !["agents", "hosts", "commands"].includes(k))) return null;
-    if (!SCOPE_IDS(h.agents) || !Array.isArray(h.hosts) || !h.hosts.every((x) => typeof x === "string" && HOST_ID.test(x)) || !SCOPE_IDS(h.hosts)) return null;
-    if (!SCOPE_ARGVS(h.commands)) return null;
-    out.host = {
-      agents: [...h.agents], hosts: [...h.hosts],
-      commands: h.commands.map((argv) => [...argv]),
-    };
-  }
-  return out;
-}
-
-// What the readers use: a missing key is the empty scope, and a bad value falls back to it, with
-// fallback true. The empty scope puts every grant in front of the human, so a bad value fails closed.
-export function grantScopeOf(value) {
-  if (value === undefined) return { scope: GRANT_SCOPE_EMPTY, fallback: false };
-  const scope = checkGrantScope(value);
-  return scope === null ? { scope: GRANT_SCOPE_EMPTY, fallback: true } : { scope, fallback: false };
-}
-
-// Whether a raise's grant body is inside a checked scope. Only gitea and host bodies can be.
-export function grantInScope(scope, body) {
-  if (body?.method === "gitea") {
-    const g = scope.gitea;
-    return Boolean(g) && g.agents.includes(body.agent) &&
-      Array.isArray(body.target?.projects) && body.target.projects.length > 0 &&
-      body.target.projects.every((p) => g.projects.includes(p));
-  }
-  if (body?.method === "host") {
-    const h = scope.host;
-    const same = (a, b) => a.length === b.length && a.every((x, i) => x === b[i]);
-    return Boolean(h) && h.agents.includes(body.agent) && h.hosts.includes(body.host) &&
-      Array.isArray(body.commands) && body.commands.length > 0 &&
-      body.commands.every((argv) =>
-        h.commands.some((c) => same(argv, c)));
-  }
-  return false;
-}

packages/business/tests/grant-scope.test.mjs

@@ -1,124 +0,0 @@
-// Row 298 (#1804, Q228): the chief of staff's grant scope, launch.grantScope. The shape check, the
-// readers' fallback, the match rules (sage-3594 Q2) and the one writer. The broker's verbs, the
-// in-scope close and the executors are bus tests (packages/bus/tests/grant-scope.test.mjs).
-import test, { after } from "node:test";
-import assert from "node:assert/strict";
-import { readFileSync, rmSync } from "node:fs";
-import { join } from "node:path";
-import { instanceSettings } from "../src/instance-settings.mjs";
-import { launchSettings } from "../src/launch-settings.mjs";
-import { loadBusiness } from "../src/business.mjs";
-import { checkGrantScope, grantInScope, grantScopeOf } from "../src/vocabulary.mjs";
-import { businessDoc, rolesCopy, systemFor, tmp, writeJson } from "./helpers.mjs";
-
-const roots = [];
-after(() => roots.forEach(root => rmSync(root, { recursive: true, force: true })));
-
-const GITEA = { gitea: { agents: ["coder"], projects: ["app", "lib"] } };
-const HOST = { host: { agents: ["ops"], hosts: ["web1"], commands: [["systemctl", "status", "nginx"], ["ls"]] } };
-const gitea = (over = {}) => ({ method: "gitea", agent: "coder", target: { projects: ["app"] }, ...over });
-const host = (commands, over = {}) => ({ method: "host", agent: "ops", host: "web1", commands, ...over });
-
-function fixture(mutate) {
-  const root = tmp();
-  roots.push(root);
-  const rolesDir = rolesCopy(root);
-  const doc = businessDoc(root, "acme");
-  mutate?.(doc);
-  const dir = join(root, "config");
-  const file = writeJson(join(dir, "businesses", "acme.json"), doc);
-  const settings = instanceSettings({ dir, rolesDir, system: systemFor(root) });
-  const limits = launchSettings({ dir, rolesDir, system: systemFor(root) });
-  const onDisk = () => JSON.parse(readFileSync(file, "utf8"));
-  const log = () => readFileSync(settings.writer.logFile("acme"), "utf8").trim().split("\n").map(line => JSON.parse(line));
-  const revision = () => settings.read("acme").revision;
-  return { root, dir, rolesDir, file, settings, limits, onDisk, log, revision };
-}
-
-test("row 298: checkGrantScope takes the D2 shape and refuses anything else", () => {
-  assert.deepEqual(checkGrantScope({}), {});
-  assert.deepEqual(checkGrantScope(GITEA), GITEA);
-  assert.deepEqual(checkGrantScope(HOST), HOST);
-  assert.deepEqual(checkGrantScope({ host: { agents: ["ops"], hosts: ["web1"], commands: [["uptime"]] } }).host.commands, [["uptime"]]);
-  for (const bad of [
-    null, [], "x", { other: {} }, { gitea: [] }, { gitea: { agents: ["coder"] } }, { gitea: { agents: [], projects: ["app"] } },
-    { gitea: { agents: ["coder", "coder"], projects: ["app"] } }, { gitea: { agents: ["Coder"], projects: ["app"] } },
-    { gitea: { agents: ["coder"], projects: ["app"], extra: 1 } }, { host: { agents: ["ops"], hosts: ["web1"] } },
-    { host: { agents: ["ops"], hosts: ["web_1"], commands: [["ls"]] } }, { host: { agents: ["ops"], hosts: ["web1"], commands: [[]] } },
-    { host: { agents: ["ops"], hosts: ["web1"], commands: [["ls"], ["ls"]] } }, { host: { agents: ["ops"], hosts: ["web1"], commands: [["bin/ls"]] } },
-    { host: { agents: ["ops"], hosts: ["web1"], commandPrefixes: [["ls"]] } }, { "host-enroll": {} },
-  ])
-    assert.equal(checkGrantScope(bad), null, JSON.stringify(bad));
-});
-
-test("row 298: a missing scope is empty and a bad one falls back to empty, which covers nothing", () => {
-  assert.deepEqual(grantScopeOf(undefined), { scope: {}, fallback: false });
-  assert.deepEqual(grantScopeOf(GITEA), { scope: GITEA, fallback: false });
-  const bad = { gitea: { agents: ["coder"], projects: ["app"], extra: true } };
-  assert.deepEqual(grantScopeOf(bad), { scope: {}, fallback: true });
-  assert.equal(grantInScope(grantScopeOf(bad).scope, gitea()), false);
-  assert.equal(grantInScope({}, gitea()), false);
-  assert.equal(grantInScope({}, host([["ls"]])), false);
-});
-
-test("row 298: a Gitea grant is in scope only when its agent and every project are listed", () => {
-  assert.equal(grantInScope(GITEA, gitea()), true);
-  assert.equal(grantInScope(GITEA, gitea({ target: { projects: ["app", "lib"] } })), true);
-  assert.equal(grantInScope(GITEA, gitea({ target: { projects: ["app", "old"] } })), false);
-  assert.equal(grantInScope(GITEA, gitea({ agent: "research" })), false);
-  assert.equal(grantInScope(GITEA, gitea({ target: { projects: [] } })), false);
-  assert.equal(grantInScope(HOST, gitea()), false);
-});
-
-test("row 298 (sage-3594 Q2): host commands match whole argv tokens, and enrollment is never in scope", () => {
-  assert.equal(grantInScope(HOST, host([["systemctl", "status", "nginx"]])), true);
-  // A commands entry covers only itself: no extra trailing arguments, no shorter prefix.
-  assert.equal(grantInScope(HOST, host([["systemctl", "status", "nginx", "--now"]])), false);
-  assert.equal(grantInScope(HOST, host([["systemctl", "status"]])), false);
-  // No scope entry permits extending the requested command prefix.
-  assert.equal(grantInScope(HOST, host([["ls"]])), true);
-  assert.equal(grantInScope(HOST, host([["ls", "-l", "/var"]])), false);
-  assert.equal(grantInScope(HOST, host([["lsblk"]])), false);
-  assert.equal(grantInScope(HOST, host([["ls"], ["lsblk"]])), false);
-  assert.equal(grantInScope(HOST, host([["ls"]], { host: "web2" })), false);
-  assert.equal(grantInScope(HOST, host([["ls"]], { agent: "coder" })), false);
-  assert.equal(grantInScope(HOST, { method: "host-enroll", host: "web1" }), false);
-  assert.equal(grantInScope({ ...HOST, "host-enroll": true }, { method: "host-enroll", host: "web1" }), false);
-});
-
-test("row 298: a bad grantScope in the file still loads, and the read shows the fallback", () => {
-  const f = fixture(doc => { doc.launch.grantScope = { gitea: "everything" }; });
-  const business = loadBusiness("acme", { dir: f.dir, rolesDir: f.rolesDir });
-  assert.deepEqual(business.launch.grantScope, { gitea: "everything" });
-  assert.deepEqual(f.settings.grantScopeRead("acme"), { business: "acme", revision: f.revision(), scope: {}, fallback: true });
-});
-
-test("row 298: the writer checks the scope, logs the change and removes the key for {}", () => {
-  const f = fixture();
-  assert.deepEqual(f.settings.grantScopeRead("acme").scope, {});
-  const r = f.settings.grantScope("acme", { revision: f.revision(), scope: GITEA }, "jason");
-  assert.deepEqual(r.scope, GITEA);
-  assert.deepEqual(r.old, {});
-  assert.ok(typeof r.transaction === "string" && r.transaction.length > 0);
-  assert.deepEqual(f.onDisk().launch.grantScope, GITEA);
-  assert.equal(f.log().at(-1).actor, "jason");
-  const back = f.settings.grantScope("acme", { revision: f.revision(), scope: {} }, "jason");
-  assert.deepEqual(back.old, GITEA);
-  assert.equal(Object.hasOwn(f.onDisk().launch, "grantScope"), false);
-  const bytes = readFileSync(f.file, "utf8");
-  assert.throws(() => f.settings.grantScope("acme", { revision: f.revision(), scope: { gitea: {} } }, "jason"), e => e.code === "invalid-request");
-  assert.throws(() => f.settings.grantScope("acme", { revision: f.revision(), scope: GITEA, extra: 1 }, "jason"), e => e.code === "invalid-request");
-  assert.throws(() => f.settings.grantScope("acme", { revision: "0".repeat(64), scope: GITEA }, "jason"), e => e.code === "revision-conflict");
-  assert.throws(() => f.settings.grantScope("acme", { revision: f.revision(), scope: {} }, "jason"), e => e.code === "organization-no-change");
-  assert.equal(readFileSync(f.file, "utf8"), bytes);
-});
-
-test("row 298 (sage-3594 Q1): the general writers can't write grantScope", () => {
-  const f = fixture();
-  const bytes = readFileSync(f.file, "utf8");
-  assert.throws(() => f.limits.set("acme", { revision: f.revision(), grantScope: GITEA }, "jason"));
-  assert.throws(() => f.limits.set("acme", { revision: f.revision(), grantScope: GITEA }, "chief-of-staff.chief"));
-  assert.throws(() => f.settings.set("acme", { revision: f.revision(), instance: "coder", op: "change", grantScope: GITEA }, "jason"), e => e.code === "invalid-request");
-  assert.throws(() => f.settings.veto("acme", { revision: f.revision(), op: "keep", name: "coder", grantScope: GITEA }, "jason"), e => e.code === "invalid-request");
-  assert.equal(readFileSync(f.file, "utf8"), bytes);
-});

packages/cli/README.md

@@ -1080,37 +1080,6 @@ reads the admin token on stdin, never argv; `admin rotate gitea --rotate-by DATE
 gitea --finish` and `admin remove gitea` keep the slot. run and admin are the human's alone. Nothing
 prints a token. A usage error exits 4 and a bus refusal 2.
 
-`mosaic grants scope --business ID` reads the chief of staff's effective scope,
-its organization revision, and whether a bad value fell back to empty (Q228,
-row 298). `mosaic grants scope set --business ID --revision REV` reads scope JSON
-from stdin. This human-shell command is Approve for the scope change; it refuses
-agent callers through the same guard and human transport as `mosaic access`.
-Neither command accepts `--tester`. No Console page or chief-raised scope-change
-request exists. A stale revision refuses; malformed scope input writes nothing.
-
-The setting is `launch.grantScope` in the business organization file. It defaults
-to `{}`, which covers nothing; a missing or invalid value has the same effect.
-Only Jason sets the live value. The supported shapes are:
-
-```json
-{
-  "gitea": { "agents": ["coder"], "projects": ["app"] },
-  "host": { "agents": ["ops"], "hosts": ["web1"], "commands": [["systemctl", "status", "nginx"]] }
-}
-```
-
-Either method may be omitted. All lists are distinct and nonempty. Every target
-project, agent, host and command must be listed for its method. Command arrays
-match token for token with equal lengths: `["ls"]` covers neither `["lsblk"]`
-nor `["ls", "-l"]`. Host enrollment always needs per-grant Approve.
-An in-scope request from the enrolled chief is closed and issued by the protected
-grant executor without an inbox approval; other requests wait for Approve.
-All grants retain their records and revoke path. Narrowing the scope before a
-grant is spent fails that grant with `scope-changed`; existing issued grants
-remain revocable. Setting `{}` removes the setting and restores per-grant Approve.
-Scope changes have organization receipts and a `grant.scope` event with the
-human proof and old/new digests; each automatic approval has `grant.scope.used`.
-
 ## Access (FED R5, #414)
 
 ```

packages/cli/src/config.mjs

@@ -115,9 +115,6 @@ function accessFor(system, env, warn) {
   return { file, context };
 }
 
-export const consoleOwners = (sso) =>
-  sso.providers.flatMap((p) => p.subjects.map((s) => ({ provider: p.id, iss: p.issuer, sub: s.sub })));
-
 // The `{op: 'boot'}` config for packages/bus/src/process.mjs, for one
 // business. The host holds a reader capability for the notifier and binds
 // launches later through bindLaunch, so `launches` starts empty.
@@ -138,9 +135,6 @@ export function bootConfig({ system, businessId, env = process.env, warn = () =>
     if (tracker) config.trackers = { [b.id]: tracker };
     const access = accessFor(system, env, warn);
     if (access) config.access = access;
-    // Row 252 (#1753, Webby N1): every console.sso subject is an owner, by provider id, issuer and sub.
-    // The loader checked console.sso; no new config field names owners.
-    if (system.console?.sso) config.consoleOwners = consoleOwners(system.console.sso);
     return config;
   });
 }

packages/cli/src/grants.mjs

@@ -2,20 +2,16 @@
 // starts the executor of a decision the human said yes to, and admin set, rotate and remove keep the
 // admin slot; those are the human's alone. status is the human's, the tester's or the chief's; revoke
 // and sweep the human's or, with --tester, the tester's. admin set reads the admin token on stdin, never
-// argv, and nothing here prints a token: the answers carry ids and names only. Row 298 (#1804, Q228):
-// scope reads the chief of staff's grant scope and scope set writes it from JSON on stdin; both are
-// the human's, and the set is the human's Approve of the change.
+// argv, and nothing here prints a token: the answers carry ids and names only.
 import { CliError } from "./errors.mjs";
 
 export const GRANTS_USAGE =
   "mosaic grants status gitea [--json] [--tester] [--business ID] | run DECISION [--business ID] | " +
   "revoke AGENT gitea --reason R [--tester] [--business ID] | sweep gitea [--tester] [--business ID] | " +
   "admin set gitea --url URL --account NAME --rotate-by DATE [--business ID] | " +
-  "admin rotate gitea --rotate-by DATE | admin rotate gitea --finish | admin remove gitea | " +
-  "scope [--business ID] | scope set --revision REV [--business ID] (the scope JSON on stdin)";
+  "admin rotate gitea --rotate-by DATE | admin rotate gitea --finish | admin remove gitea";
 const MAX_TOKEN = 16384;
-const MAX_SCOPE = 65536;
-const VALUES = ["--business", "--reason", "--url", "--account", "--rotate-by", "--revision"];
+const VALUES = ["--business", "--reason", "--url", "--account", "--rotate-by"];
 
 function parse(args) {
   const out = { positional: [], flags: new Set(), values: {} };
@@ -44,21 +40,6 @@ async function readToken(stdin) {
   return text;
 }
 
-// Row 298: the whole of stdin, one JSON scope. {} is the empty scope.
-async function readScope(stdin) {
-  let text = "";
-  for await (const chunk of stdin) {
-    text += chunk;
-    if (text.length > MAX_SCOPE) throw new CliError("refused: the scope on stdin is too long", 2);
-  }
-  if (!text.trim()) throw new CliError("refused: no scope on stdin; pipe the scope JSON, {} for none", 4);
-  try {
-    return JSON.parse(text);
-  } catch {
-    throw new CliError("refused: the scope on stdin is not JSON", 4);
-  }
-}
-
 // Each shape: the positional count after the verb, the flags and values it takes and needs.
 const SHAPES = {
   status: { n: 1, flags: ["--json", "--tester"], need: [], may: ["--business"] },
@@ -68,8 +49,6 @@ const SHAPES = {
   "admin set": { n: 1, flags: [], need: ["--url", "--account", "--rotate-by"], may: ["--business"] },
   "admin rotate": { n: 1, flags: ["--finish"], need: [], may: ["--rotate-by", "--business"] },
   "admin remove": { n: 1, flags: [], need: [], may: ["--business"] },
-  scope: { n: 0, flags: [], need: [], may: ["--business"] },
-  "scope set": { n: 0, flags: [], need: ["--revision"], may: ["--business"] },
 };
 
 const lines = (s) => {
@@ -92,9 +71,6 @@ export async function grantsCommand(args, io, callFor) {
   if (verb === "admin") {
     verb = `admin ${rest[0] ?? ""}`;
     rest = rest.slice(1);
-  } else if (verb === "scope" && rest[0] === "set") {
-    verb = "scope set";
-    rest = rest.slice(1);
   }
   // Own keys only, so `constructor` is a usage error, not a verb.
   const shape = Object.hasOwn(SHAPES, verb ?? "") ? SHAPES[verb] : null;
@@ -103,7 +79,7 @@ export async function grantsCommand(args, io, callFor) {
     [...parsed.flags].some((f) => !shape.flags.includes(f)) ||
     Object.keys(parsed.values).some((v) => !shape.need.includes(v) && !shape.may.includes(v)) ||
     shape.need.some((v) => !Object.hasOwn(parsed.values, v)) ||
-    (verb !== "run" && verb !== "scope" && verb !== "scope set" && rest.at(-1) !== "gitea") ||
+    (verb !== "run" && rest.at(-1) !== "gitea") ||
     (verb === "admin rotate" && parsed.flags.has("--finish") === Object.hasOwn(parsed.values, "--rotate-by"))
   )
     throw new CliError(GRANTS_USAGE, 4);
@@ -117,8 +93,6 @@ export async function grantsCommand(args, io, callFor) {
     else if (verb === "sweep") request = ["grants.sweep", { service: "gitea" }];
     else if (verb === "admin set")
       request = ["grants.admin.set", { service: "gitea", url: v["--url"], account: v["--account"], rotateBy: v["--rotate-by"], token: await readToken(io.stdin) }];
-    else if (verb === "scope") request = ["grants.scope", {}];
-    else if (verb === "scope set") request = ["grants.scope.set", { revision: v["--revision"], scope: await readScope(io.stdin) }];
     else if (verb === "admin rotate")
       request = ["grants.admin.rotate", parsed.flags.has("--finish") ? { service: "gitea", finish: true } : { service: "gitea", rotateBy: v["--rotate-by"] }];
     else request = ["grants.admin.remove", { service: "gitea" }];

packages/cli/tests/access-boot.test.mjs

@@ -14,7 +14,7 @@ import { accessContextFor } from "../src/access.mjs";
 import { bootConfig, loadSystem } from "../src/config.mjs";
 import { fixture, tmp } from "./helpers.mjs";
 
-const SSO = { sso: { providers: [{ id: "authentik", issuer: "https://idp.test", subjects: [{ sub: "jason-sub" }] }] } };
+const SSO = { sso: { providers: [{ id: "authentik", subjects: [{ sub: "jason-sub" }] }] } };
 const FEDERATION = { self: "hub", peers: [{ id: "factory", origin: "https://factory.example.test", label: "Software factory" }] };
 const DOC = {
   accessVersion: 1,

packages/cli/tests/config.test.mjs

@@ -69,19 +69,3 @@ test("an unknown business and a broken system config refuse with exit 3", (t) =>
   assert.throws(() => bootConfig({ system: loadSystem({ env: f.env }), businessId: "nope", env: f.env }), (e) => e.exitCode === 3);
   assert.throws(() => loadSystem({ env: { ...f.env, MOSAIC_CONFIG: join(f.dataRoot, "missing.json") } }), (e) => e.exitCode === 3);
 });
-
-test("Row 252 (Webby N1): every console.sso subject reaches the boot as a console owner, and no sso means no consoleOwners key", (t) => {
-  const f = fixture(tmp(t));
-  const system = loadSystem({ env: f.env });
-  assert.equal("consoleOwners" in bootConfig({ system, businessId: "acme", env: f.env }), false);
-  const sso = { providers: [
-    { id: "authentik", issuer: "https://auth.example/app/", subjects: [{ sub: "jason-sub" }, { sub: "second-sub" }] },
-    { id: "other", issuer: "https://idp.example", subjects: [{ sub: "jason-sub" }] },
-  ] };
-  const boot = bootConfig({ system: { ...system, console: { sso } }, businessId: "acme", env: f.env });
-  assert.deepEqual(boot.consoleOwners, [
-    { provider: "authentik", iss: "https://auth.example/app/", sub: "jason-sub" },
-    { provider: "authentik", iss: "https://auth.example/app/", sub: "second-sub" },
-    { provider: "other", iss: "https://idp.example", sub: "jason-sub" },
-  ]);
-});

packages/cli/tests/grants-scope.test.mjs

@@ -1,74 +0,0 @@
-// Row 298/Q228: the real CLI parser and human-shell refusal. Transport is a
-// recorder; no socket, config, credential or live grant is accessed.
-import test from "node:test";
-import assert from "node:assert/strict";
-import { main } from "../src/cli.mjs";
-import { humanEnv, io } from "./helpers.mjs";
-
-const AGENT_MARKERS = ["MOSAIC_BUS_CAP", "MOSAIC_RUN_ID", "MOSAIC_AGENT_RUN", "CLAUDECODE", "CLAUDE_CODE_ENTRYPOINT", "CODEX_THREAD_ID", "PI_AGENT_DIR"];
-const REVISION = "a".repeat(64);
-const SCOPE = { gitea: { agents: ["coder"], projects: ["app"] } };
-const READ = ["grants", "scope", "--business", "acme"];
-const SET = ["grants", "scope", "set", "--business", "acme", "--revision", REVISION];
-function setup(env = humanEnv(), stdin = JSON.stringify(SCOPE)) {
-  const x = io(env);
-  x.stdin.end(stdin);
-  const calls = [];
-  const deps = {
-    system: { dataRoot: "/nonexistent" },
-    transport: (business) => async (verb, args) => {
-      calls.push({ business, verb, args });
-      return { revision: REVISION, scope: SCOPE, fallback: false };
-    },
-    testerTransport: () => async () => { throw new Error("tester transport must never run"); },
-  };
-  return { x, calls, deps };
-}
-
-// Break caught: dropping scope dispatch or misrouting the writer's revision.
-test("row 298 CLI: scope reads and scope set sends JSON and the observed revision", async () => {
-  const f = setup();
-  await main(READ, f.x, f.deps);
-  assert.deepEqual(f.calls, [{ business: "acme", verb: "grants.scope", args: {} }]);
-  assert.deepEqual(JSON.parse(f.x.out.text), { revision: REVISION, scope: SCOPE, fallback: false });
-  const w = setup();
-  await main(SET, w.x, w.deps);
-  assert.deepEqual(w.calls, [{ business: "acme", verb: "grants.scope.set", args: { revision: REVISION, scope: SCOPE } }]);
-  const empty = setup(humanEnv(), "{}");
-  await main(SET, empty.x, empty.deps);
-  assert.deepEqual(empty.calls[0].args.scope, {});
-});
-
-// Break caught: a new grants path bypassing access's refuseInsideAgent guard.
-test("row 298 CLI: every access agent marker refuses scope set before transport", async () => {
-  for (const marker of AGENT_MARKERS) {
-    const f = setup({ ...humanEnv(), [marker]: "agent" });
-    await assert.rejects(main(SET, f.x, f.deps), (e) => e.exitCode === 3 && /human shell/.test(e.message), marker);
-    assert.deepEqual(f.calls, []);
-    assert.equal(f.x.out.text, "");
-  }
-});
-
-// Break caught: --tester selecting a nonhuman transport for this approval.
-test("row 298 CLI: --tester cannot read or change the scope", async () => {
-  for (const args of [READ, SET]) {
-    const f = setup();
-    await assert.rejects(main([...args, "--tester"], f.x, f.deps), (e) => e.exitCode === 4);
-    assert.deepEqual(f.calls, []);
-  }
-});
-
-// Break caught: a missing revision or invalid stdin being sent as an approval.
-test("row 298 CLI: missing revision and empty, invalid or oversized JSON refuse without a call", async () => {
-  for (const [args, input, code] of [
-    [SET.slice(0, -2), "{}", 4],
-    [SET, "", 4],
-    [SET, "   \n", 4],
-    [SET, "{bad", 4],
-    [SET, " ".repeat(65537), 2],
-  ]) {
-    const f = setup(humanEnv(), input);
-    await assert.rejects(main(args, f.x, f.deps), (e) => e.exitCode === code);
-    assert.deepEqual(f.calls, []);
-  }
-});

packages/tasks/requirements.json

@@ -1,6 +1,6 @@
 {
   "prd": "docs/prd/mosaic-stack.md",
-  "version": "1.17",
+  "version": "1.15",
   "requirements": [
     { "id": "REQ-ROLE-1", "title": "Each role is a reviewed roles/<name>.json: contract, authority map, credentials" },
     { "id": "REQ-ROLE-2", "title": "One holder per role instance, one per assistant session; the chief of staff may end a run, others need a decision" },
@@ -77,15 +77,13 @@
     { "id": "REQ-SESS-1", "title": "Each session shows its lifetime count of completed compactions on pi and Claude Code; an unproven count shows unknown" },
     { "id": "REQ-SESS-2", "title": "Clear context retires a session after a safe stop and starts a fresh successor with none of the old context" },
     { "id": "REQ-SESS-3", "title": "Every session start passes the launch checks: authority, route, revocation, kill switch, limits and admission" },
-    { "id": "REQ-LIB-1", "title": "A human-set library maps the user's repository onto universes, books, types, playgrounds, supporting and archive folders" },
-    { "id": "REQ-LIB-2", "title": "Scope comes from the path or a DOCX's source, lookups default to canon, and only canon files are ever cited as canon" },
+    { "id": "REQ-LIB-1", "title": "A library maps the user's repository onto universes, books, types, playgrounds and supporting folders, set by a human" },
+    { "id": "REQ-LIB-2", "title": "Scope comes from the path, lookups default to canon, and a playground or supporting file is never cited as canon" },
     { "id": "REQ-LIB-3", "title": "Universes stay separate; a crossover is a hybrid universe only a human creates, reading its sources' canon" },
-    { "id": "REQ-LIB-4", "title": "Git holds every change. The bus fast-forwards a read-only mirror every 60 seconds, the one place agents read Markdown" },
+    { "id": "REQ-LIB-4", "title": "Git holds every change; the bus fast-forwards a read-only mirror every 60 seconds and agents read only that" },
     { "id": "REQ-LIB-5", "title": "Agents check the library through typed lookup tools that name the commit and show links out and in" },
     { "id": "REQ-LIB-6", "title": "Agents never write story, only docs in supporting folders a human marks. Chat is free text, and any citation is checked" },
     { "id": "REQ-LIB-7", "title": "One chat room with several creative agents, addressed by leading @tags; an unknown tag sends nothing" },
-    { "id": "REQ-LIB-8", "title": "Case 2 story files become DOCX by a human-only one-way import or in the editor; Markdown stays for notes and docs" },
-    { "id": "REQ-LIB-9", "title": "The Console's DOCX editor: only a human saves, each save is one commit, and the editor code is vendored and pinned" },
     { "id": "REQ-INST-1", "title": "The installer offers optional components: pinned, health-checked, removable, switched on in config; first is SearXNG" },
     { "id": "REQ-INST-2", "title": "With no OIDC provider to configure, the installer deploys a bundled Pocket ID, Q203 (post-v1)" },
     { "id": "REQ-INST-3", "title": "One-command install of a named instance from a profile, and one-command upgrade with backup and rollback" }

packages/tasks/tests/requirements.test.mjs

@@ -18,10 +18,10 @@ test("the list holds the PRD's requirement ids, in its order, at its version", (
   const ids = [...prd.matchAll(/^- \*\*(REQ-[A-Z]+-[0-9]+)\.\*\*/gm)].map((m) => m[1]);
   // Any other mention of a bold id would be a bullet this pattern missed.
   assert.equal(ids.length, [...prd.matchAll(/\*\*REQ-/g)].length);
-  assert.equal(ids.length, 87);
+  assert.equal(ids.length, 85);
   assert.deepEqual(list.requirements.map((r) => r.id), ids);
   assert.match(prd, new RegExp(`^- Status: approved, version ${list.version.replace('.', '\\.')}\\.`, 'm'));
-  assert.deepEqual([list.prd, list.version], ['docs/prd/mosaic-stack.md', '1.17']);
+  assert.deepEqual([list.prd, list.version], ['docs/prd/mosaic-stack.md', '1.15']);
 });
 
 test('the committed list loads frozen', () => {
@@ -74,7 +74,7 @@ test('the schema refuses any other shape', () => {
     const twice = raw();
     twice.requirements.push(structuredClone(twice.requirements[0]));
     writeFileSync(join(dir, 'twice.json'), JSON.stringify(twice));
-    assert.throws(() => loadRequirements(join(dir, 'twice.json')), listError('requirements[87].id: REQ-ROLE-1 twice'));
+    assert.throws(() => loadRequirements(join(dir, 'twice.json')), listError('requirements[85].id: REQ-ROLE-1 twice'));
   } finally {
     rmSync(dir, { recursive: true, force: true });
   }

packages/webui/README.md

@@ -335,28 +335,13 @@ note is `agents/dewey/work/wui/SLICE1-VIEWS.md`.
   same functions, so both show the same broker data.
 - Nothing writes but the "Message a role" box, the Settings update, the Assistant
   section's three buttons and the spec and docs editor's Save, all under `--send` (above,
-  "Assistant settings" and "Spec and docs editor"), and the decision Approve and Deny below.
-  A decision shows `mosaic decide <id> <key>` for each choice,
+  "Assistant settings" and "Spec and docs editor"). A decision shows `mosaic decide <id> <key>` for each choice,
   with Copy, which only puts the command on the clipboard. It is answered in a
   terminal (REQ-DEC-3, Q4). Seen is not set from the browser either. The
   command has no `--business`, so `mosaic decide` uses the running bus host's
   business, as the Console does by default. From a Console started with
   `--business` for another business the copied command refuses (no bus host,
   or no such decision) rather than answering elsewhere.
-- Row 252 (#1753, PRD 1.9 REQ-WEB-2): a grant request (`credential.mint` routed
-  to the human, raised with a grant and two options) can also be approved or
-  denied on its decision page, only when the Console runs with both `--sso` and
-  `--send` and the page is signed in as a `console.sso` subject. The first click
-  POSTs `/api/decisions/<id>/confirmation` and shows what the answer does; only
-  Confirm POSTs `/resolve` with that one-use confirmation (two minutes, bound to
-  the session, decision and choice). Each step spawns
-  `packages/bus/src/console-cli.mjs`, which the bus verifies as the Console's
-  child holding the signed-in subject, and the bus records the answer `via
-  console` with a `human.input` naming that subject. Nothing retries; an unknown
-  outcome says to refresh. Without `--sso` the page has no buttons and says why;
-  under `--sso` without `--send` it says the Console is read-only for decisions.
-  The tester listener has no decision routes. Every other decision stays
-  terminal-only.
 - What no Q1 verb returns is labelled where it would show, for example
   "Bot names: not in the Q1 module" (lead decision 63). Nothing is guessed.
 - A task's list row can only say its current state came from a Vikunja read,

packages/webui/src/bus.mjs

@@ -14,7 +14,6 @@ import { fileURLToPath } from 'node:url';
 import { HUMAN_CLI } from '../../cli/src/transport.mjs';
 import { readHostState } from '../../cli/src/host.mjs';
 import { views } from '../../bus/src/views.mjs';
-import { CONSOLE_VERBS } from '../../bus/src/broker.mjs';
 
 export class BusReadError extends Error {
   constructor(code, message = code) { super(message); this.code = code; }
@@ -28,13 +27,10 @@ export const subjectOk = s => typeof s === 'string' && s.length > 0 && s.length
 // request on stdin, JSON on stdout, or a bus error code as the last
 // `^[a-z-]{1,64}$` line of stderr.
 export function humanCall({ socket, business, env = process.env, cli = HUMAN_CLI, timeoutMs = 30000, maxBytes = 8 * 1024 * 1024 }) {
-  return (verb, args = {}) => transport({ cli, socket, env: cli === HUMAN_CLI ? { ...env, MOSAIC_BUS_CLI_NONCE: randomBytes(32).toString('hex') } : env, input: { business, verb, args }, timeoutMs, maxBytes });
-}
-function transport({ cli, socket, env, input, timeoutMs, maxBytes }) {
-  return new Promise((resolve, reject) => {
+  return (verb, args = {}) => new Promise((resolve, reject) => {
     let child;
     try {
-      child = spawn(process.execPath, [cli, socket], { env, stdio: ['pipe', 'pipe', 'pipe'] });
+      child = spawn(process.execPath, [cli, socket], { env: cli === HUMAN_CLI ? { ...env, MOSAIC_BUS_CLI_NONCE: randomBytes(32).toString('hex') } : env, stdio: ['pipe', 'pipe', 'pipe'] });
     } catch { return reject(new BusReadError('outcome-unknown', 'the bus transport did not start')); }
     const out = [], err = [];
     let size = 0, settled = false;
@@ -57,42 +53,24 @@ function transport({ cli, socket, env, input, timeoutMs, maxBytes }) {
       catch { done(reject, new BusReadError('invalid-response')); }
     });
     child.stdin.on('error', () => {}); // A child that exits early reports through 'close'.
-    child.stdin.end(`${JSON.stringify(input)}\n`);
+    child.stdin.end(`${JSON.stringify({ business, verb, args })}\n`);
   });
 }
 
-// Row 252 (#1753, design section 2): the Console owner's answer to a grant request. Each call spawns
-// a fresh console-cli with a fresh nonce, and the business and the signed-in (provider, iss, sub) go
-// in its spawn environment, where the bus reads them back. Inherited console keys are dropped first,
-// so only this call's values reach the wrapper. Only the two console verbs pass (N4). A resolve pins
-// the business its confirmation was issued for.
-export const CONSOLE_CLI = fileURLToPath(new URL('../../bus/src/console-cli.mjs', import.meta.url));
-export function consoleCall({ dataRoot, socket, business = null, env = process.env, cli = CONSOLE_CLI, timeoutMs = 30000 }) {
-  return async (verb, args, { subject, business: pinned = null }) => {
-    if (!CONSOLE_VERBS.includes(verb)) throw new Error(`the Console does not call ${verb}`);
-    const id = pinned ?? (business || hostBusiness(dataRoot));
-    const own = Object.fromEntries(Object.entries(env).filter(([k]) => !k.startsWith('MOSAIC_BUS_CONSOLE_')));
-    return transport({
-      cli, socket, timeoutMs, maxBytes: 1024 * 1024, input: { verb, args },
-      env: { ...own, MOSAIC_BUS_CONSOLE_NONCE: randomBytes(32).toString('hex'), MOSAIC_BUS_CONSOLE_BUSINESS: id,
-        MOSAIC_BUS_CONSOLE_PROVIDER: subject.provider, MOSAIC_BUS_CONSOLE_ISS: subject.iss, MOSAIC_BUS_CONSOLE_SUB: subject.sub },
-    });
-  };
-}
-
 // The business is the --business flag, or else the live bus host's, read
 // on every request so a host started after the Console is picked up.
 export function busCaller({ dataRoot, socket, business = null, env = process.env, cli = HUMAN_CLI, timeoutMs = 30000 }) {
   return async (verb, args) => {
-    return humanCall({ socket, business: business || hostBusiness(dataRoot), env, cli, timeoutMs })(verb, args);
+    let id = business;
+    if (!id) {
+      let state;
+      try { state = readHostState(dataRoot); } catch { throw new BusReadError('no-bus-host', 'the bus host state file is unreadable'); }
+      if (!state?.live) throw new BusReadError('no-bus-host', 'no bus host is running and no --business was given');
+      id = state.business;
+    }
+    return humanCall({ socket, business: id, env, cli, timeoutMs })(verb, args);
   };
 }
-function hostBusiness(dataRoot) {
-  let state;
-  try { state = readHostState(dataRoot); } catch { throw new BusReadError('no-bus-host', 'the bus host state file is unreadable'); }
-  if (!state?.live) throw new BusReadError('no-bus-host', 'no bus host is running and no --business was given');
-  return state.business;
-}
 export const busReader = options => views({ call: busCaller(options) });
 
 // FED R6 (#1800): a granted user's bus transport, R3's user-cli.mjs (#414, design 3.6). Same

packages/webui/src/cli.mjs

@@ -2,7 +2,7 @@
 // MOSAIC_TESTER_SOCKET_V1: private tester ingress, no tester TCP.
 import { createChat } from './chat.mjs';
 import { startServer, previewOptions, proofOptions, DEFAULT_BOARD } from './serve.mjs';
-import { busCaller, busBusiness, userCaller, consoleCall } from './bus.mjs';
+import { busCaller, busBusiness, userCaller } from './bus.mjs';
 import { consoleBus, userOptionsFor, agentCaller, TESTER_AGENT_VERBS } from './console-bus.mjs';
 import { consoleAccess } from './access.mjs';
 import { accessContextFor } from '../../cli/src/access.mjs';
@@ -68,7 +68,7 @@ try {
   // the system config, Business can't resolve authority and Settings has
   // no notifier. A refusal printed here names no path (redactor).
   // --send without a bus refuses to start rather than serve a composer that can't send.
-  let bus = null, send = null, settingsWrite = null, projectFiles = null, projectFile = null, libraryFile = null, libraryStatus = null, librarySync = null, projectSave = null, chat = null, nameWrite = null, assistantStop = null, instancesWrite = null, routesWrite = null, agentWrite = null, decisionWrite = null, busLine, system = null;
+  let bus = null, send = null, settingsWrite = null, projectFiles = null, projectFile = null, libraryFile = null, libraryStatus = null, librarySync = null, projectSave = null, chat = null, nameWrite = null, assistantStop = null, instancesWrite = null, routesWrite = null, agentWrite = null, busLine, system = null;
   let processing = null, ownerCall = null;
   try {
     system = loadSystem();
@@ -76,9 +76,6 @@ try {
     const call = ownerCall = busCaller({ dataRoot, socket: socketPath(dataRoot), business: options.business ?? null });
     // FED R6 (#1800): the bus-backed options, shared with each granted user's session (console-bus.mjs).
     ({ processing, chat, bus, projectFiles, projectFile, libraryFile, libraryStatus, send, librarySync, settingsWrite, projectSave, nameWrite, assistantStop, instancesWrite, routesWrite, agentWrite } = consoleBus(call, { send: sendOn }));
-    // Row 252 (#1753): Approve and Deny on grant requests, through the console wrapper, only with
-    // --sso and --send.
-    if (ssoOn && sendOn) decisionWrite = consoleCall({ dataRoot, socket: socketPath(dataRoot), business: options.business ?? null });
     busLine = `Bus: ${options.business ?? 'the running bus host\'s business'}`;
   } catch (err) {
     const why = redactor({ configDir: configDir() })(err.message);
@@ -107,7 +104,7 @@ try {
   }
   let server;
   try {
-    server = await startServer({ board: options.board, port: options.port, bus, reads, preview: options.preview, sso, proof, send, settingsWrite, projectFiles, projectFile, libraryFile, libraryStatus, librarySync, projectSave, chat, nameWrite, assistantStop, instancesWrite, routesWrite, agentWrite, processing, decisionWrite, userOptions, federation: system?.federation ?? null });
+    server = await startServer({ board: options.board, port: options.port, bus, reads, preview: options.preview, sso, proof, send, settingsWrite, projectFiles, projectFile, libraryFile, libraryStatus, librarySync, projectSave, chat, nameWrite, assistantStop, instancesWrite, routesWrite, agentWrite, processing, userOptions, federation: system?.federation ?? null });
   } catch (err) { sso?.close(); throw err; }
   let testerServer = null;
   if (testerSocket) {
@@ -131,7 +128,7 @@ try {
   const proofLine = `\nProxy: proxy proof ${proof ? 'on' : 'off'}`;
   // One line per provider: id, issuer, subject count and state. No client id, secret or sub.
   const health = sso?.health() ?? {};
-  const ssoLines = sso ? `\nSign-in: ${sso.publicOrigin}/ (--sso), ${send ? 'reads and human writes (--send), grant Approve and Deny' : 'read-only'}` + sso.summary().map(p => `\nSign-in provider: ${p.id} issuer ${p.issuer} subjects ${p.subjects} (${health[p.id]})`).join('') : '';
+  const ssoLines = sso ? `\nSign-in: ${sso.publicOrigin}/ (--sso), ${send ? 'reads and human writes (--send)' : 'read-only'}` + sso.summary().map(p => `\nSign-in provider: ${p.id} issuer ${p.issuer} subjects ${p.subjects} (${health[p.id]})`).join('') : '';
   const queueLine = options.checkout ? '\nQueue: read from the --checkout directory' : '';
   console.log(`Mosaic Console: http://127.0.0.1:${server.address().port}/\nBoard: ${options.board}\n${busLine}${queueLine}${previewLine}${ssoLines}${proofLine}${testerServer ? `\nTester Console: unix:${testerServer.address()} (binds the tester)` : ''}\nCtrl-C stops this server.`);
   for (const signal of ['SIGINT', 'SIGTERM']) process.once(signal, () => { sso?.close(); server.close(); testerServer?.close(); });

packages/webui/src/decision-http.mjs

@@ -1,148 +0,0 @@
-// Row 252 (#1753, Gander's design approved by Webby at 5d8f0f4b5): Approve and Deny for a grant
-// request, from the signed-in Console only. Two POSTs. /confirmation asks the bus for the decision's
-// two answers and digest and returns a one-use confirmation bound to this session, business,
-// decision, choice and digest. /resolve takes only that choice and confirmation, consumes the
-// confirmation before it awaits the bus, and asks the bus to resolve with the digest. The bus
-// rechecks everything in the resolve transaction. Nothing here retries.
-import { createHash, randomBytes } from 'node:crypto';
-import { BusReadError, subjectOk } from './bus.mjs';
-
-export const DECISION_ROUTE = /^\/api\/decisions\/([^/]*)\/(confirmation|resolve)$/;
-// The endpoint contract, design section 4. Each refusal is one of these, never a 200.
-export const DECISION_REFUSALS = Object.freeze({
-  'sign-in-required': [401, 'Sign in again before answering.'],
-  'read-only': [403, 'Console decision answers are not enabled. Use mosaic decide.'],
-  'cross-origin': [403, 'Answer from the signed-in Console page.'],
-  'not-found': [404, 'Not found.'],
-  'human-required': [403, 'The bus refused this human identity.'],
-  'peercred-required': [403, 'The bus could not verify this connection.'],
-  'method-not-allowed': [405, 'Use POST.'],
-  'invalid-request': [400, 'Invalid decision answer.'],
-  'request-too-large': [413, 'Decision answer is too large.'],
-  'decision-not-found': [404, 'This decision is unavailable.'],
-  'decision-not-eligible': [403, 'Answer this decision with mosaic decide.'],
-  'decision-closed': [409, 'This decision is no longer open. Refresh the inbox.'],
-  'decision-stale': [409, 'The choices changed. Review the decision again.'],
-  'confirmation-required': [409, 'Review and confirm this answer again.'],
-  'confirmation-unavailable': [503, 'Confirmation is unavailable. Try again later.'],
-  'outcome-unknown': [503, 'The answer may have reached the bus. Refresh before trying again.'],
-});
-// Bus codes by name. A bus that refuses this caller is human-required, whatever its code. Any
-// other code, or no answer, is confirmation-unavailable at the preview and outcome-unknown at the
-// resolve, which the page reads as "refresh first".
-const BUS_CODES = {
-  'human-required': 'human-required', unauthenticated: 'human-required', 'unknown-business': 'human-required',
-  'access-refused': 'human-required', 'access-revoked': 'human-required', 'agent-required': 'human-required',
-  'peercred-required': 'peercred-required',
-  'decision-not-found': 'decision-not-found', 'decision-not-eligible': 'decision-not-eligible',
-  'decision-closed': 'decision-closed', 'decision-stale': 'decision-stale', 'invalid-choice': 'decision-stale',
-  'invalid-request': 'invalid-request',
-};
-const BODY_MAX = 4096;
-const TOKEN = /^[a-f0-9]{64}$/;
-const DIGEST = /^[a-f0-9]{64}$/;
-const one = (req, name) => (req.headersDistinct[name]?.length === 1 ? req.headersDistinct[name][0] : null);
-const hash = (token) => createHash('sha256').update(token).digest('hex');
-export function decisionRefuse(res, code) {
-  const [status, message] = DECISION_REFUSALS[code];
-  res.writeHead(status, { 'content-type': 'application/json', 'cache-control': 'no-store' });
-  res.end(JSON.stringify({ error: code, message }));
-}
-
-// The confirmations, in this process's memory only and stored by hash. 120 seconds, at most 1024
-// live. A full store refuses a new one rather than drop a live one. An expired one is swept.
-export function createConfirmations({ ttlMs = 120000, max = 1024, now = Date.now } = {}) {
-  const live = new Map();
-  const sweep = () => { const t = now(); for (const [k, v] of live) if (v.expires <= t) live.delete(k); };
-  return {
-    issue(binding) {
-      sweep();
-      if (live.size >= max) return null;
-      const token = randomBytes(32).toString('hex');
-      live.set(hash(token), { ...binding, expires: now() + ttlMs });
-      return token;
-    },
-    // One use: a token found is gone, whether or not it matches.
-    consume(token, { session, decision, choice }) {
-      sweep();
-      if (typeof token !== 'string' || !TOKEN.test(token)) return null;
-      const k = hash(token), v = live.get(k);
-      if (!v) return null;
-      live.delete(k);
-      return v.session === session && v.decision === decision && v.choice === choice ? v : null;
-    },
-    get size() { sweep(); return live.size; },
-  };
-}
-
-async function readBody(req) {
-  if (one(req, 'content-type')?.split(';')[0].trim().toLowerCase() !== 'application/json') return { code: 'invalid-request' };
-  const chunks = [];
-  let size = 0;
-  for await (const chunk of req) {
-    size += chunk.length;
-    if (size > BODY_MAX) return { code: 'request-too-large' };
-    chunks.push(chunk);
-  }
-  try {
-    const value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-    return value && typeof value === 'object' && !Array.isArray(value) ? { value } : { code: 'invalid-request' };
-  } catch { return { code: 'invalid-request' }; }
-}
-const preview = (v, id) =>
-  v && typeof v === 'object' && v.id === id && typeof v.business === 'string' && DIGEST.test(v.digest ?? '') &&
-  ['approve', 'deny'].every((k) => typeof v[k]?.key === 'string' && typeof v[k]?.text === 'string') &&
-  v.approve.key !== v.deny.key && v.grant && typeof v.grant.method === 'string';
-
-// `session` is the live sign-in session object this request passed, and `live()` reads it again
-// right before each spawn. `call(verb, args, { subject, business })` is the console transport.
-export async function decisionHTTP(req, res, { path, decide, session, live, confirmations, log }) {
-  const [, raw, step] = DECISION_ROUTE.exec(path);
-  let id = null;
-  try { id = decodeURIComponent(raw); } catch { /* refused below */ }
-  if (req.method !== 'POST') return decisionRefuse(res, 'method-not-allowed');
-  if (!decide) return decisionRefuse(res, 'read-only');
-  if (!session) return decisionRefuse(res, 'sign-in-required');
-  if (one(req, 'origin') !== decide.origin || one(req, 'sec-fetch-site') !== 'same-origin') return decisionRefuse(res, 'cross-origin');
-  const line = (outcome) => log(`${new Date().toISOString()} decide user=${JSON.stringify(String(session.name ?? '').slice(0, 64))} decision=${JSON.stringify(String(id ?? '').slice(0, 64))} step=${step} ${outcome}`);
-  const refuse = (code) => { line(`error=${code}`); return decisionRefuse(res, code); };
-  const { value, code } = await readBody(req);
-  if (code) return refuse(code);
-  if (!subjectOk(id)) return refuse('decision-not-found');
-  const subject = { provider: session.provider, iss: session.iss, sub: session.sub };
-  const busCode = (err, open) => {
-    const c = err instanceof BusReadError ? BUS_CODES[err.code] : undefined;
-    return c ?? open;
-  };
-  if (step === 'confirmation') {
-    if (Object.keys(value).length !== 1 || typeof value.choice !== 'string') return refuse('invalid-request');
-    if (live() !== session) return refuse('sign-in-required');
-    let v;
-    try { v = await decide.call('decision.preview.console', { id }, { subject }); } catch (err) { return refuse(busCode(err, 'confirmation-unavailable')); }
-    if (!preview(v, id)) return refuse('confirmation-unavailable');
-    const action = value.choice === v.approve.key ? 'approve' : value.choice === v.deny.key ? 'deny' : null;
-    if (!action) return refuse('decision-stale');
-    if (live() !== session) return refuse('sign-in-required');
-    const confirmation = confirmations.issue({ session, business: v.business, decision: id, choice: value.choice, digest: v.digest });
-    if (!confirmation) return refuse('confirmation-unavailable');
-    line(`action=${action}`);
-    return json(res, 200, { id, question: typeof v.question === 'string' ? v.question : '', action, choice: value.choice, text: v[action].text, grant: v.grant, confirmation });
-  }
-  const keys = Object.keys(value);
-  if (keys.length !== 2 || !keys.includes('choice') || !keys.includes('confirmation') || typeof value.choice !== 'string') return refuse('invalid-request');
-  // Consumed before any await on the bus, so a second click finds nothing (J12).
-  const held = confirmations.consume(value.confirmation, { session, decision: id, choice: value.choice });
-  if (!held) return refuse('confirmation-required');
-  if (live() !== session) return refuse('sign-in-required');
-  let r;
-  try {
-    r = await decide.call('decision.resolve.console', { id, choice: held.choice, digest: held.digest }, { subject, business: held.business });
-  } catch (err) { return refuse(busCode(err, 'outcome-unknown')); }
-  if (r?.id !== id || r.op !== 'resolved' || r.choice !== held.choice) return refuse('outcome-unknown');
-  line(`choice=${JSON.stringify(held.choice.slice(0, 64))}${r.grant ? ` grant=${r.grant}` : ''}`);
-  return json(res, 200, { id, op: 'resolved', choice: r.choice, ...(r.grant === 'started' ? { grant: 'started' } : {}) });
-}
-function json(res, status, body) {
-  res.writeHead(status, { 'content-type': 'application/json', 'cache-control': 'no-store' });
-  res.end(JSON.stringify(body));
-}

packages/webui/src/public/bus.js

@@ -190,9 +190,8 @@
       out.kind = 'decision.raised'; out.decision = r.id; out.actor = { role: r.raised_by_role, run: r.raised_by_run };
       out.text = `Raised a ${r.class} decision for ${r.route_to}: ${String(r.question).split('\n')[0]}`;
     } else if (r.table === 'decision_events') {
-      // The human answers from the CLI (via cli) or, since row 252 (#1753), a grant request from the
-      // signed-in Console (via console); every other row is the broker's.
-      out.kind = `decision.${r.op}`; out.decision = r.decision; out.by = r.via === 'cli' ? 'human' : r.via === 'console' ? 'human-console' : 'broker';
+      // The human answers from the CLI (via cli); every other row is the broker's.
+      out.kind = `decision.${r.op}`; out.decision = r.decision; out.by = r.via === 'cli' ? 'human' : 'broker';
       out.text = r.op === 'resolved' ? `${r.by} chose “${r.choice}” via ${r.via}` : r.op === 'seen' ? `${r.by} saw it${r.via ? ` via ${r.via}` : ''}` : `${r.op[0].toUpperCase()}${r.op.slice(1)} by ${r.by}${r.note ? `: ${r.note}` : ''}`;
     } else if (r.table === 'task_snapshots') {
       out.kind = `snapshot.${r.source}`;
@@ -228,9 +227,8 @@
   // An empty state says what would appear and where it comes from.
   const empty = (what, from) => `<div class="empty"><b>${what}</b>${from ? `<p>${from}</p>` : ''}</div>`;
   const taskLink = ref => ref ? `<a href="#/tasks/${enc(ref)}">#${esc(String(ref).split('/')[1])}</a>` : '';
-  // Rows without an actor role come from the human (CLI outside any run, or the signed-in Console)
-  // or from the broker itself.
-  const actor = (a, by) => `<span class="source">${a ? `${txt(a.role)} · ${txt(a.run)}` : by === 'human' ? 'human, CLI outside any run' : by === 'human-console' ? 'human, signed-in Console' : 'broker'}</span>`;
+  // Rows without an actor role come from the human (CLI, outside any run) or from the broker itself.
+  const actor = (a, by) => `<span class="source">${a ? `${txt(a.role)} · ${txt(a.run)}` : by === 'human' ? 'human, CLI outside any run' : 'broker'}</span>`;
   const PRIORITY = ['unset', 'low', 'medium', 'high', 'urgent', 'do now'];
   const head = (title, sub) => `<div class="page-head"><div><h1 tabindex="-1">${title}</h1>${sub ? `<p class="small muted" id="bus-status">${sub}</p>` : ''}</div></div>`;
   let readAt = null;
@@ -258,7 +256,7 @@
   // Inbox
   function decisionCard(d) {
     return `<li class="wait-item s1-dec${d.blocking ? ' is-attn' : ''}"><div class="wait-head"><a href="#/inbox/${enc(d.id)}" class="s1-dec-open">${txt(first(d.question))}</a></div>
-      <p class="s1-badges">${d.blocking ? blockChip('blocking') : ''}${chip(d.class, d.action)}${canDecide && d.console ? ` ${badge('Approve or Deny here', 'ok')}` : ''}</p>
+      <p class="s1-badges">${d.blocking ? blockChip('blocking') : ''}${chip(d.class, d.action)}</p>
       <p class="small s1-auth">${approves(d.authorization)}</p>
       <p class="small muted">Raised by ${txt(d.raised_by_role)} ${when(d.at)}${d.task_ref ? ` · task ${taskLink(d.task_ref)}` : ''}${d.requirement_ref ? ` · ${txt(d.requirement_ref)}` : ''}</p></li>`;
   }
@@ -316,101 +314,12 @@
     el.outerHTML = composerHtml();
     restore(k);
   }
-  // Row 252 (#1753, design section 5): Approve and Deny for an open grant request, drawn only when
-  // the server says this Console answers decisions (`decide` in /api/config: signed in through SSO
-  // and started with --send) and the bus marked the inbox row eligible (its `console` field). The
-  // first click asks the Console for a one-use confirmation that names what the answer does. Only
-  // the second click answers. Nothing here retries: a refusal drops the confirmation, and an
-  // unknown outcome says to refresh first. The state lives in `answer`, not the DOM, so the 10 s
-  // refresh redraws it. The server and the bus check everything again; this is presentation only.
-  let canDecide = false, ssoOn = false, answer = null;
-  const ACTIONS = { approve: 'Approve', deny: 'Deny' };
-  const grantText = g => [`method ${g.method}`, g.agent && `agent ${g.agent}`, g.host && `host ${g.host}`, Array.isArray(g.projects) && g.projects.length && `projects ${g.projects.join(', ')}`].filter(Boolean).map(s => txt(String(s))).join(' · ');
-  function decideHtml() {
-    const a = answer;
-    if (!a) return '';
-    const off = a.pending ? ' disabled' : '';
-    let body;
-    if (a.result) {
-      const r = a.result;
-      body = `<p class="receipt" id="decide-status" tabindex="-1">${r.action === 'approve' ? 'Approved' : 'Denied'}: you chose “${txt(r.choice)}”, ${txt(r.text)}. ${r.grant === 'started' ? 'The grant executor started.' : r.action === 'approve' ? 'The bus started no grant for it.' : 'Nothing starts for a denial.'} History below shows it once the bus is read again.</p>`;
-    } else if (a.confirm) {
-      const c = a.confirm, label = `Confirm ${c.action}`;
-      body = `<div class="s1-confirm" role="group" aria-labelledby="b-confirm"><h3 id="b-confirm" class="small">${label}</h3>
-        <dl class="kv"><dt>Id</dt><dd><code>${txt(c.id)}</code></dd><dt>Question</dt><dd class="s1-q">${txt(c.question)}</dd><dt>Answer</dt><dd><b class="s1-key">${txt(c.choice)}</b> ${txt(c.text)}</dd><dt>Grant</dt><dd>${grantText(c.grant)}</dd></dl>
-        <p class="small muted">${c.action === 'approve' ? 'Approving starts this grant.' : 'Denying starts nothing.'} This confirmation works once and lasts two minutes.</p>
-        <div class="s1-cmd"><button type="button" class="btn primary" data-decide="confirm"${off}>${a.pending ? 'Answering…' : label}</button><button type="button" class="btn" data-decide="cancel"${off}>Cancel</button></div></div>`;
-    } else {
-      body = `<ul class="s1-plain">${Object.entries(ACTIONS).map(([k, l]) => `<li><b>${l}</b> chooses <b class="s1-key">${txt(a.console[k].key)}</b> ${txt(a.console[k].text)}</li>`).join('')}</ul>
-        <p class="small muted">Grant: ${grantText(a.console.grant)}. Either button opens a confirmation first. Nothing is answered until you confirm.</p>
-        <div class="s1-cmd">${Object.entries(ACTIONS).map(([k, l]) => `<button type="button" class="btn${k === 'approve' ? ' primary' : ''}" data-decide="${k}"${off}>${a.pending === k ? 'Checking…' : l}</button>`).join('')}</div>`;
-    }
-    const e = a.error;
-    const said = e ? `<p class="receipt failed" id="decide-status" tabindex="-1">Not answered here: ${txt(e.message)} (<code>${txt(e.code)}</code>).${e.code === 'outcome-unknown' ? ' Nothing was sent again.' : ''}</p>` : '';
-    return `<section class="panel s1-decide" id="decide-section" aria-labelledby="b-decide"><h2 id="b-decide">Answer in Console</h2>${body}${said}</section>`;
-  }
-  // Redraw only the answer panel. `focus` names what takes focus after it.
-  function paintDecide(focus) {
-    const el = $('decide-section');
-    if (!el) return;
-    el.outerHTML = decideHtml();
-    (focus ? $('decide-section')?.querySelector(focus) : null)?.focus();
-  }
-  async function decidePost(url, body) {
-    let res = null, json = null;
-    try {
-      res = await fetch(url, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body), cache: 'no-store', redirect: 'manual' });
-      try { json = await res.json(); } catch { json = null; }
-    } catch { res = null; }
-    return { res, json };
-  }
-  // A refusal the Console wrote carries its code and message (design section 4). Anything else, a
-  // 408 or no answer included, gets the fallback: at the resolve step that is outcome-unknown.
-  const DECIDE_FALLBACK = {
-    'confirmation-unavailable': 'Confirmation is unavailable. Try again later.',
-    'outcome-unknown': 'The answer may have reached the bus. Refresh before trying again.',
-  };
-  const decideRefusal = (res, json, fallback) => res && !res.ok && res.status !== 408 && typeof json?.error === 'string' && typeof json?.message === 'string'
-    ? { code: json.error, message: json.message } : { code: fallback, message: DECIDE_FALLBACK[fallback] };
-  async function decide(step) {
-    const a = answer;
-    if (!a || a.pending || a.result) return;
-    if (step === 'cancel') { a.confirm = null; a.error = null; paintDecide('[data-decide="approve"]'); announce('Cancelled. Nothing was answered.'); return; }
-    if (out()) { a.confirm = null; a.error = { code: 'sign-in-required', message: 'Sign in again before answering.' }; paintDecide('#decide-status'); return; }
-    if (step === 'approve' || step === 'deny') {
-      const choice = a.console[step].key;
-      a.pending = step; a.error = null; a.confirm = null; paintDecide();
-      const { res, json } = await decidePost(`/api/decisions/${enc(a.id)}/confirmation`, { choice });
-      a.pending = null;
-      // The page moved to another decision meanwhile: its confirmation is dropped, never shown.
-      if (answer !== a) { if (res?.type === 'opaqueredirect') signOut(); return; }
-      if (res?.type === 'opaqueredirect') { a.error = { code: 'sign-in-required', message: 'Sign in again before answering.' }; paintDecide('#decide-status'); signOut(); return; }
-      if (res?.ok && json?.id === a.id && json.action === step && json.choice === choice && typeof json.confirmation === 'string' && json.grant && typeof json.grant.method === 'string') {
-        a.confirm = json; paintDecide('[data-decide="confirm"]'); announce(`Confirm ${step}: ${json.text}`);
-      } else { a.error = decideRefusal(res, json, 'confirmation-unavailable'); paintDecide('#decide-status'); announce(`Not answered: ${a.error.message}`); }
-      return;
-    }
-    if (step !== 'confirm' || !a.confirm) return;
-    const c = a.confirm;
-    a.pending = 'confirm'; a.error = null; paintDecide();
-    const { res, json } = await decidePost(`/api/decisions/${enc(a.id)}/resolve`, { choice: c.choice, confirmation: c.confirmation });
-    // One use, whatever came back.
-    a.pending = null; a.confirm = null;
-    if (answer !== a) { if (res?.type === 'opaqueredirect') signOut(); else render(false); return; }
-    if (res?.type === 'opaqueredirect') { a.error = { code: 'sign-in-required', message: 'Sign in again before answering. The sign-in proxy redirected the answer, so it never reached the Console.' }; paintDecide('#decide-status'); signOut(); return; }
-    if (res?.ok && json?.id === a.id && json.op === 'resolved' && json.choice === c.choice) {
-      a.result = { action: c.action, choice: c.choice, text: c.text, grant: json.grant ?? null };
-      paintDecide('#decide-status'); announce(c.action === 'approve' ? 'Approved' : 'Denied'); render(false);
-    } else { a.error = decideRefusal(res, json, 'outcome-unknown'); paintDecide('#decide-status'); announce(`Not answered: ${a.error.message}`); }
-  }
   async function inboxView(get) {
     // The broker orders gated first, then oldest; lift blocking ones to the top.
     const rows = (await get('inbox')).slice().sort((a, b) => (b.blocking - a.blocking) || String(a.at).localeCompare(String(b.at)));
     countInbox(rows);
     const body = rows.length ? `<ul class="waiting s1-decs">${rows.map(decisionCard).join('')}</ul>` : empty('Nothing is waiting on you.', 'A decision shows here when an agent raises one routed to you through the bus.');
-    const answered = canDecide ? 'A grant request can be approved or denied here, after a confirmation. Every other decision is answered in a terminal with <code>mosaic decide</code>.'
-      : 'Decisions are answered in a terminal with <code>mosaic decide</code>; Console only shows them.';
-    return `${head('Inbox', `${readNote()} ${answered}`)}
+    return `${head('Inbox', `${readNote()} Decisions are answered in a terminal with <code>mosaic decide</code>; Console only shows them.`)}
       ${await composer(get)}
       <h2 id="b-for-you">For you <span class="count">${rows.length}</span></h2>${body}
       <p class="small muted">Not shown here yet: ${gap('Decisions routed to roles')} ${gap('Closed decisions')} ${gap('Seen and DM state per row')} Open a decision for its seen, DM and closing history.</p>`;
@@ -434,13 +343,6 @@
     // A command is offered only for an open decision routed to the human, and only when
     // the id and key pass the broker's identifier rule, so the copied text is safe to paste.
     const answerable = !c && d.routeTo === 'human';
-    // Row 252: the answer panel follows this decision. A refresh keeps a confirmation open; a
-    // decision no longer eligible (closed elsewhere, say) drops it, unless an answer is in flight
-    // or this page just answered it.
-    const eligible = canDecide && answerable && open?.console ? open.console : null;
-    if (answer?.id !== d.id) answer = eligible ? { id: d.id, console: eligible, pending: null, confirm: null, error: null, result: null } : null;
-    else if (eligible && !answer.pending && !answer.confirm) answer.console = eligible;
-    else if (!eligible && !answer.pending && !answer.result) answer = null;
     const options = `<ol class="s1-opts">${d.options.map(o => {
       const cmd = `mosaic decide ${d.id} ${o.key}`, chosen = c?.choice === o.key, approving = d.authorization?.approvalChoice === o.key;
       const copy = !answerable ? '' : SAFE.test(String(d.id)) && SAFE.test(String(o.key))
@@ -450,18 +352,11 @@
     }).join('')}</ol>`;
     const earlier = await chain(get, d);
     const history = [...d.seen.map(s => `<li>Seen by ${txt(s.by)}${s.via ? ` via ${txt(s.via)}` : ''} ${when(s.at)}</li>`), ...(c ? [`<li>${esc(c.op)} by ${txt(c.by)}${c.via ? ` via ${txt(c.via)}` : ''} ${when(c.at)}</li>`] : [])];
-    // Without SSO, or under SSO without --send, the Console says why it has no buttons and never
-    // draws a disabled one (design section 5).
-    const why = !answerable || isTester || canDecide ? ''
-      : ssoOn ? ' This Console is read-only for decisions: it was started without writes enabled (--send), so answers go through a terminal.'
-        : ' Answering a grant request from the Console needs sign-in (--sso) and writes enabled (--send).';
-    const help = eligible ? '<p class="small muted">Approve or Deny in the panel above, or run one of these in a terminal. Copy only puts the command on your clipboard.</p>'
-      : answerable ? `<p class="small muted">To answer, run one of these in a terminal. Copy only puts the command on your clipboard. Console sends nothing.${why}</p>`
+    const help = answerable ? '<p class="small muted">To answer, run one of these in a terminal. Copy only puts the command on your clipboard. Console sends nothing.</p>'
       : !c ? `<p class="small muted">This decision is routed to ${txt(d.routeTo)}, not to you, so Console offers no command for it.</p>` : '';
     return `${head(`Decision ${txt(short(d.id))}`, status)}
       <section aria-labelledby="b-q" class="panel"><h2 id="b-q">Question</h2><p class="s1-q">${txt(d.question)}</p>
       <dl class="kv"><dt>Class</dt><dd>${chip(d.class, d.action)}${d.blocking ? ` ${blockChip('blocking')}` : ''}</dd><dt>Approval</dt><dd class="s1-auth">${approves(d.authorization)}</dd><dt>Routed to</dt><dd>${txt(d.routeTo)}</dd><dt>Raised by</dt><dd>${txt(d.raisedBy.role)} <span class="source">${txt(d.raisedBy.run)}</span></dd><dt>Raised</dt><dd>${when(d.at)}</dd>${d.taskRef ? `<dt>Task</dt><dd>${taskLink(d.taskRef)} <span class="source">${txt(d.taskRef)}</span></dd>` : ''}${d.requirementRef ? `<dt>Requirement</dt><dd>${txt(d.requirementRef)}</dd>` : ''}<dt>DM</dt><dd>${d.dm ? `sent ${when(d.dm.at)}` : d.blocking ? 'not sent' : 'not needed (not blocking)'}</dd><dt>Id</dt><dd><code>${txt(d.id)}</code></dd></dl></section>
-      ${answer?.id === d.id ? decideHtml() : ''}
       <section aria-labelledby="b-o"><h2 id="b-o">Options</h2>${help}${options}<p class="small muted" id="copy-status"></p></section>
       <section aria-labelledby="b-c"><h2 id="b-c">Earlier versions</h2>${earlier.length ? `<ul class="s1-plain">${earlier.map(x => `<li><a href="#/inbox/${enc(x.id)}">${txt(short(x.id))}</a> ${badge(x.closed ? x.closed.op : 'open')} ${txt(first(x.question))}${x.closed?.note ? `<span class="source">${txt(x.closed.note)}</span>` : ''}</li>`).join('')}</ul>` : '<p class="muted">None.</p>'}<p class="small muted">${gap('A later version that replaces this one')}</p></section>
       <section aria-labelledby="b-h"><h2 id="b-h">History</h2>${history.length ? `<ul class="s1-plain">${history.join('')}</ul>` : '<p class="muted">Not seen yet.</p>'}<p><a href="#/trail/decision/${enc(d.id)}">Full trail for this decision</a></p></section>`;
@@ -1203,7 +1098,6 @@
     return {
       href: view.contains(a) ? a.getAttribute('href') : null, copy: view.contains(a) ? a.dataset?.copy : null, retry: view.contains(a) && a.hasAttribute?.('data-retry'), mirror: view.contains(a) ? a.dataset?.mirror : null, h1: view.contains(a) && a.tagName === 'H1',
       field: view.contains(a) ? a.dataset?.field : null, caret: view.contains(a) && a.tagName === 'TEXTAREA' ? [a.selectionStart, a.selectionEnd, a.scrollTop] : null, send: view.contains(a) && a.hasAttribute?.('data-send'),
-      decide: view.contains(a) ? a.dataset?.decide ?? (a.id === 'decide-status' ? 'status' : null) : null,
       open: [...view.querySelectorAll('details[id]')].filter(d => d.open).map(d => d.id), status: $('copy-status')?.textContent || '',
     };
   }
@@ -1211,10 +1105,7 @@
     for (const id of k.open) { const d = $(id); if (d) d.open = true; }
     if ($('copy-status')) $('copy-status').textContent = k.status;
     const el = [...$('bus-view').querySelectorAll('a[href],[data-copy],[data-retry],[data-mirror],[data-field],[data-send]')].find(e => k.href ? e.getAttribute('href') === k.href : k.copy ? e.dataset.copy === k.copy : k.mirror ? e.dataset.mirror === k.mirror : k.field ? e.dataset.field === k.field : k.send ? e.hasAttribute('data-send') : k.retry && e.hasAttribute('data-retry'));
-    // Row 252: the answer panel's buttons and its status line.
-    const dec = k.decide ? $('bus-view').querySelector(k.decide === 'status' ? '#decide-status' : `[data-decide="${k.decide}"]`) : null;
-    if (dec) dec.focus({ preventScroll: true });
-    else if (el && (k.href || k.copy || k.retry || k.mirror || k.field || k.send)) {
+    if (el && (k.href || k.copy || k.retry || k.mirror || k.field || k.send)) {
       el.focus({ preventScroll: true });
       if (k.caret && el.tagName === 'TEXTAREA') { el.setSelectionRange(k.caret[0], k.caret[1]); el.scrollTop = k.caret[2]; }
     }
@@ -1306,9 +1197,6 @@
       }
       return;
     }
-    // Row 252: Approve, Deny, Confirm and Cancel. One click is one step; none repeats itself.
-    const dec = e.target.closest('#decide-section [data-decide]');
-    if (dec) { if (!dec.disabled) decide(dec.dataset.decide); return; }
     if (e.target.closest('#toast [data-dismiss]')) { toast(null); return; }
     const item = e.target.closest('#cmdk-list [data-href]');
     if (item) { pkGo(item.dataset.href); return; }
@@ -1430,14 +1318,12 @@
     isTester = c?.tester === true;
     canEdit = !isTester && c?.edit === true;
     canSend = !isTester && c?.send === true;
-    ssoOn = c?.sso === true;
-    canDecide = !isTester && c?.decide === true;
     if (isTester) {
       const banner = document.createElement('div'); banner.id = 'tester-banner'; banner.className = 'banner ref';
       banner.setAttribute('role', 'status'); banner.textContent = 'Tester Console. Changes are recorded as tester, never as the human.';
       $('main').prepend(banner);
     }
-    if (!canSend && !isTester && !ssoOn) return;
+    if (!canSend && !isTester) return;
     const path = routeOf().split('?')[0];
     if (path.startsWith('/chat')||path.startsWith('/inbox')||path==='/settings'||path.startsWith('/docs/')) render(false); else if (path === '/' || path === '') paintHeld(heldErr);
   }).catch(() => {});

packages/webui/src/serve.mjs

@@ -11,7 +11,6 @@ import { ReadError, readStatus, fieldTable } from './reads.mjs';
 import { THREAD_DEFINITIONS } from '../../business/src/vocabulary.mjs';
 import { chatHTTP } from './chat-http.mjs';
 import { processingHTTP } from './processing-http.mjs';
-import { DECISION_ROUTE, decisionHTTP, decisionRefuse, createConfirmations } from './decision-http.mjs';
 
 export const DEFAULT_BOARD = 'http://127.0.0.1:7331';
 export function isLoopback(host) {
@@ -601,7 +600,7 @@ async function projectFileRead(res, read, path, search) {
 // `log` takes one line per send attempt that got past sign-in; never the body. `fieldsFile` is for
 // tests; the field table is otherwise the committed packages/tasks/fields.json.
 // `agentWrite` (row 194, D7) is `(verb, args) => Promise` for the Agents section's verbs and instance.request.
-export async function startServer({ host = '127.0.0.1', port = 7330, board = DEFAULT_BOARD, timeout = 20000, bus = null, reads = null, preview = null, sso = null, tester = false, testerSocket = null, testerAuthHeader = null, proof = null, testerProofHeader = null, send = null, settingsWrite = null, projectFiles = null, projectFile = null, projectSave = null, chat = null, nameWrite = null, assistantStop = null, instancesWrite = null, routesWrite = null, agentWrite = null, processing = null, decisionWrite = null, userOptions = null, federation = null, log = line => console.log(line), fieldsFile = undefined } = {}) {
+export async function startServer({ host = '127.0.0.1', port = 7330, board = DEFAULT_BOARD, timeout = 20000, bus = null, reads = null, preview = null, sso = null, tester = false, testerSocket = null, testerAuthHeader = null, proof = null, testerProofHeader = null, send = null, settingsWrite = null, projectFiles = null, projectFile = null, projectSave = null, chat = null, nameWrite = null, assistantStop = null, instancesWrite = null, routesWrite = null, agentWrite = null, processing = null, userOptions = null, federation = null, log = line => console.log(line), fieldsFile = undefined } = {}) {
   if (!isLoopback(host)) throw new Error('refusing to bind to non-loopback host');
   if (host === 'localhost') host = '127.0.0.1';
   if (tester && preview !== null) throw new Error('tester listener cannot use preview mode');
@@ -612,9 +611,6 @@ export async function startServer({ host = '127.0.0.1', port = 7330, board = DEF
   if (tester && [send, settingsWrite, projectSave, assistantStop].some(value => value !== null)) throw new Error('tester listener permits only instance, route, name and chat writes');
   if (tester && !testerSocket) throw new Error('tester listener requires private socket');
   if (!tester && testerSocket) throw new Error('tester socket requires tester listener');
-  // Row 252 (#1753, design section 4): Console decision answers need --sso and --send, never the tester.
-  if (decisionWrite !== null && (tester || sso === null || send === null || typeof decisionWrite !== 'function')) throw new Error('Console decision answers need --sso and --send on the main listener');
-  const confirmations = createConfirmations();
   const upstream = boardURL(board);
   // `userOptions` (FED R6, #1800) is `session => options`, the bus-backed options over that session
   // user's own transport (console-bus.mjs). Only a signed-in listener has user sessions.
@@ -673,23 +669,18 @@ export async function startServer({ host = '127.0.0.1', port = 7330, board = DEF
     // alone stays open on a loopback Host for the status and release gates (Q-C).
     if (sso !== null && !named && !(path === '/healthz' && req.method === 'GET')) return json(res, 403, { error: 'public Host required' });
     // No CORS. JSON content type and same-origin checks keep browser forms out.
-    const decisionPath = DECISION_ROUTE.test(path);
-    if (req.headers.origin && req.headers.origin !== (named ? (sso ? sso.publicOrigin : `https://${preview.host}`) : `http://${req.headers.host}`))
-      return decisionPath ? decisionRefuse(res, 'cross-origin') : json(res, 403, { error: 'cross-origin request refused' });
-    let signer = preview, ssoSession = null;
+    if (req.headers.origin && req.headers.origin !== (named ? (sso ? sso.publicOrigin : `https://${preview.host}`) : `http://${req.headers.host}`)) return json(res, 403, { error: 'cross-origin request refused' });
+    let signer = preview;
     if (sso !== null && named) {
       if (path.startsWith('/auth/')) return sso.handle(req, res, path, search);
       // Only a page load or a write keeps a session alive; the page's background reads don't (Q-D).
       const session = path === '/healthz' ? null : sso.session(req, { touch: req.method === 'POST' || (req.method === 'GET' && !path.startsWith('/api/')) });
       if (!session && path !== '/healthz') {
-        if (decisionPath) return decisionRefuse(res, 'sign-in-required');
         if (path.startsWith('/api/') || req.method !== 'GET') return json(res, 401, { error: 'sign-in required' });
         res.writeHead(303, { location: `/auth/login?return=${encodeURIComponent(path + search)}`, 'cache-control': 'no-store' });
         return res.end();
       }
       if (session) signer = { sso: true, user: session.name, host: sso.publicHost, origin: sso.publicOrigin };
-      // Row 252: only the owner's session answers a decision. A granted user stops at userRoute below.
-      if (session && session.user === undefined) ssoSession = session;
       // FED R6 (#1800): a granted user. The Console's gate first; behind it no human-transport
       // object is left, so a route past the gate reaches the broker only as this user.
       if (session?.user !== undefined) {
@@ -705,13 +696,6 @@ export async function startServer({ host = '127.0.0.1', port = 7330, board = DEF
       if (!values || values.length !== 1 || values[0] !== preview.user) return json(res, 401, { error: 'sign-in required' });
     }
     const writer = tester ? { tester: true, user: 'tester', origin: TESTER_ORIGIN } : signer;
-    // Row 252: Approve and Deny. The tester listener never offers them. Anywhere else without a signed-in
-    // session on the public name under --sso and --send, they are read-only.
-    if (decisionPath) {
-      if (tester) return decisionRefuse(res, 'not-found');
-      const decide = decisionWrite && send && named && sso ? { call: decisionWrite, origin: sso.publicOrigin } : null;
-      return decisionHTTP(req, res, { path, decide, session: ssoSession, live: () => sso.session(req), confirmations, log });
-    }
     // Row 194 (#1692, D4.1): the tester also launches and terminates.
     if (tester && !['GET', 'HEAD'].includes(req.method) && !['/api/instances', '/api/routes', '/api/name', '/api/agent/launch', '/api/agent/terminate'].includes(path) && !TESTER_CHAT_WRITE.test(path))
       return json(res, 403, { error: 'read-only', sent: false });
@@ -836,7 +820,7 @@ export async function startServer({ host = '127.0.0.1', port = 7330, board = DEF
     // `send`: the page shows the composer only where a send can pass (the public name, --send on).
     // `edit`: the editor shows Save only where a save can pass, the same test as the route's.
     // `user` and `federation` (FED R6) only when there is one, so the owner's config is unchanged.
-    if (path === '/api/config') return json(res, 200, { board: upstream, ...(tester ? { tester: true } : {}), ...(sso ? { sso: true } : {}), ...(granted ? { user: true } : {}), ...(hub ? { federation: hub } : {}), send: !tester && Boolean(send) && named, decide: !tester && !granted && Boolean(send) && Boolean(decisionWrite) && named && sso !== null, edit: !tester && !granted && Boolean(send) && Boolean(projectSave) && named });
+    if (path === '/api/config') return json(res, 200, { board: upstream, ...(tester ? { tester: true } : {}), ...(sso ? { sso: true } : {}), ...(granted ? { user: true } : {}), ...(hub ? { federation: hub } : {}), send: !tester && Boolean(send) && named, edit: !tester && !granted && Boolean(send) && Boolean(projectSave) && named });
     if (path === '/healthz') return json(res, 200, { ok: true, ...(sso ? { sso: sso.health() } : {}) });
     if (path === '/favicon.ico') { res.writeHead(204); return res.end(); }
     const file = files.get(path);

packages/webui/tests/decide-browser.test.mjs

@@ -1,250 +0,0 @@
-// Row 252 (#1753, design section 5, J16 and J17): Approve and Deny on a decision page, in a browser.
-// A loopback page has no sign-in, so a script added before the page loads sets `sso` and `decide`
-// in /api/config from the page URL, and answers each POST /api/decisions/... from a queue, recording
-// what the page sent. Server-side checks are decision-http.test.mjs's and the bus side is
-// packages/bus/tests/console-decide.test.mjs's. The decisions come from an in-process broker
-// through its reader session. Refresh timers fire after 150 ms.
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { randomUUID } from 'node:crypto';
-import { mkdtempSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { Store } from '../../bus/src/store.mjs';
-import { Broker } from '../../bus/src/broker.mjs';
-import { views } from '../../bus/src/views.mjs';
-import { grantDecision } from '../../bus/tests/host-fixtures.mjs';
-import { startServer } from '../src/serve.mjs';
-import { browser } from './browser.mjs';
-import { fixture, close } from './fixture.mjs';
-
-const HOSTILE = '<script>window.injected=1</script><img src=x onerror="window.injected=2">';
-const businesses = { demo: { id: 'demo', human: 'jason', arbiters: { technical: 'pm', delivery: 'pm' }, roles: { chief: { authority: { withinRole: ['message.send'], crossRole: [] } }, pm: { authority: { withinRole: ['message.send'], crossRole: [] } } } } };
-
-// Answers in order; `hold` waits for window.__release(), `reject` is a network failure, `redirect`
-// what fetch gives for the sign-in proxy's redirect under redirect: 'manual'.
-const STUB = `(() => {
-  const real = window.fetch.bind(window);
-  window.__posts = []; window.__answers = [];
-  const timeout = window.setTimeout.bind(window);
-  window.setTimeout = (f, ms, ...rest) => timeout(f, ms === 10000 ? 150 : ms, ...rest);
-  const q = new URLSearchParams(location.search);
-  const answer = (status, body) => new Response(JSON.stringify(body), { status, headers: { 'content-type': 'application/json' } });
-  window.fetch = async (url, init = {}) => {
-    const u = String(url);
-    if (u === '/api/config') {
-      const c = await (await real(url, init)).json();
-      return answer(200, { ...c, ...(q.has('sso') ? { sso: true } : {}), ...(q.has('send') ? { send: true } : {}), ...(q.has('decide') ? { send: true, decide: true } : {}), ...(q.has('tester') ? { tester: true } : {}) });
-    }
-    if (!u.startsWith('/api/decisions/')) return real(url, init);
-    window.__posts.push({ url: u, method: init.method, headers: init.headers, body: init.body, cache: init.cache, redirect: init.redirect });
-    const a = window.__answers.shift();
-    if (!a) throw new TypeError('no answer queued');
-    if (a.hold) await new Promise(r => { window.__release = r; });
-    if (a.reject) throw new TypeError('Failed to fetch');
-    if (a.redirect) return { type: 'opaqueredirect', ok: false, status: 0, json: async () => { throw new SyntaxError('no body'); } };
-    return answer(a.status, a.body);
-  };
-})();`;
-
-// The open grant request, as host-fixtures' grantDecision writes it but with the hostile question.
-// decisions is append-only (migration 3b), so the question goes in with the row, not by an UPDATE.
-function hostileGrant(store, grant) {
-  const id = randomUUID(), at = '2026-10-21T00:00:00.000Z';
-  store.run(
-    'INSERT INTO decisions(id,at,business,raised_by_role,raised_by_run,class,action,route_to,question,options,recommendation,blocking) VALUES(?,?,?,?,?,?,?,?,?,?,?,?)',
-    id, at, 'demo', 'chief', 'chief-run', 'gated', 'credential.mint', 'human', `Enroll web1? ${HOSTILE}`,
-    JSON.stringify([{ key: 'yes', text: 'Yes' }, { key: 'no', text: 'No' }]), 'yes', 0,
-  );
-  store.run(
-    "INSERT INTO events(id,at,business,kind,actor_role,actor_run,subject,body) VALUES(?,?,?,'action.allowed',?,?,?,?)",
-    randomUUID(), at, 'demo', 'chief', 'chief-run', id,
-    JSON.stringify({ decision: id, action: 'credential.mint', operation: 'decision.raise', approvalChoice: 'yes', grant }),
-  );
-  return id;
-}
-
-async function setup() {
-  const root = mkdtempSync(join(tmpdir(), 'webui-decide-browser-'));
-  const store = new Store(root), b0 = new Broker({ store, businesses });
-  const grant = { method: 'host-enroll', host: 'web1', address: '192.0.2.10', port: 22, user: 'jarvis', sudo: true, fingerprints: [] };
-  const open = hostileGrant(store, grant);
-  const deploy = grantDecision(store, { action: 'deploy', grant, close: null });
-  const bare = grantDecision(store, { close: null });
-  const reader = b0.bindReader({ business: 'demo' });
-  const bus = views({ call: async (verb, args = {}) => structuredClone(b0.request(reader, { verb, args })) });
-  const f = await fixture(), b = await browser();
-  const web = await startServer({ port: 0, board: f.boardURL, bus }), base = `http://127.0.0.1:${web.address().port}/`;
-  await b.call('Page.addScriptToEvaluateOnNewDocument', { source: STUB });
-  await b.viewport(1280);
-  const wait = expr => b.evaluate(`(async()=>{for(let i=0;i<100;i++){if(${expr})return true;await new Promise(r=>setTimeout(r,50))}throw new Error('Condition timed out: '+${JSON.stringify(expr)})})()`);
-  const text = sel => b.evaluate(`document.querySelector(${JSON.stringify(sel)})?.textContent ?? null`);
-  const has = sel => b.evaluate(`!!document.querySelector(${JSON.stringify(sel)})`);
-  const posts = () => b.evaluate('window.__posts');
-  const queue = a => b.evaluate(`window.__answers.push(${JSON.stringify(a)}), true`);
-  const click = step => b.evaluate(`document.querySelector('#decide-section [data-decide="${step}"]').click(), true`);
-  const page = async (query, id) => {
-    // The same URL again is a same-document hash change, not a load, so load about:blank first (as editor-browser does).
-    await b.navigate('about:blank');
-    await b.navigate(`${base}?${query}#/inbox/${id}`);
-    await wait('document.querySelector("#bus-view h1")?.textContent.startsWith("Decision") && !document.querySelector("#bus-view [aria-busy]")');
-    // The config read redraws once it lands; a refresh tick after it settles the page.
-    await new Promise(r => setTimeout(r, 400));
-  };
-  const settle = () => new Promise(r => setTimeout(r, 600));
-  const done = async () => { await b.close(); await close(web); await f.close(); store.close(); rmSync(root, { recursive: true, force: true }); };
-  return { b, store, base, open, deploy, bare, wait, text, has, posts, queue, click, page, settle, done };
-}
-
-const CONFIRM = (s, action, choice, text) => ({ status: 200, body: { id: s.open, question: `Enroll web1? ${HOSTILE}`, action, choice, text, grant: { method: 'host-enroll', host: 'web1' }, confirmation: 'c'.repeat(64) } });
-
-test('J16: no controls without sso and decide, read-only reasons, terminal lines kept, and only an eligible grant gets the panel', { timeout: 120000 }, async () => {
-  const s = await setup();
-  try {
-    // Without SSO: no panel, no button, and the reason names both flags.
-    await s.page('x', s.open);
-    assert.equal(await s.has('#decide-section'), false);
-    assert.equal(await s.has('[data-decide]'), false);
-    assert.match(await s.text('#bus-view'), /needs sign-in \(--sso\) and writes enabled \(--send\)/);
-    assert.equal(await s.b.evaluate('document.querySelectorAll("#bus-view [data-copy]").length'), 2);
-    // SSO without --send: read-only, still the terminal lines.
-    await s.page('sso', s.open);
-    assert.equal(await s.has('#decide-section'), false);
-    assert.match(await s.text('#bus-view'), /read-only for decisions: it was started without writes enabled \(--send\)/);
-    // send alone, without decide, still draws nothing.
-    await s.page('sso&send', s.open);
-    assert.equal(await s.has('#decide-section'), false);
-    // A tester Console never answers, whatever the config says.
-    await s.page('sso&decide&tester', s.open);
-    assert.equal(await s.has('#decide-section'), false);
-    // Eligible: the panel, both buttons, the escaped question and the terminal lines too.
-    await s.page('sso&decide', s.open);
-    assert.equal(await s.text('#decide-section h2'), 'Answer in Console');
-    assert.deepEqual(await s.b.evaluate('[...document.querySelectorAll("#decide-section [data-decide]")].map(e => [e.dataset.decide, e.textContent, e.disabled])'), [['approve', 'Approve', false], ['deny', 'Deny', false]]);
-    assert.match(await s.text('#decide-section'), /Grant: method host-enroll · host web1\./);
-    assert.equal(await s.b.evaluate('document.querySelectorAll("#bus-view [data-copy]").length'), 2);
-    assert.equal(await s.b.evaluate('window.injected ?? null'), null);
-    assert.ok((await s.text('#bus-view .s1-q')).includes(HOSTILE));
-    // A grant raise with another action, and a credential.mint with no grant, keep the terminal only.
-    for (const id of [s.deploy, s.bare]) {
-      await s.page('sso&decide', id);
-      assert.equal(await s.has('#decide-section'), false);
-      assert.equal(await s.has('[data-decide]'), false);
-    }
-    // The Inbox says so, and marks only the eligible row.
-    await s.b.navigate(`${s.base}?sso&decide#/inbox`);
-    await s.wait('document.querySelector("#bus-view h1")?.textContent.startsWith("Inbox") && document.querySelectorAll("#bus-view .s1-decs > li").length === 3');
-    await s.settle();
-    assert.match(await s.text('#bus-view'), /A grant request can be approved or denied here, after a confirmation\./);
-    assert.equal(await s.b.evaluate('[...document.querySelectorAll("#bus-view .s1-decs > li")].filter(li => li.textContent.includes("Approve or Deny here")).length'), 1);
-    assert.deepEqual(await s.posts(), []);
-  } finally { await s.done(); }
-});
-
-test('J17: one POST per click, confirm then answer, cancel, refusals and an unknown outcome never retry', { timeout: 120000 }, async () => {
-  const s = await setup();
-  const enc = encodeURIComponent;
-  try {
-    await s.page('sso&decide', s.open);
-
-    // Approve asks for a confirmation and answers nothing. The button holds while the request is out.
-    await s.queue({ ...CONFIRM(s, 'approve', 'yes', 'Yes'), hold: true });
-    await s.click('approve');
-    await s.wait('document.querySelector("#decide-section [data-decide=approve]")?.textContent === "Checking…"');
-    assert.equal(await s.b.evaluate('[...document.querySelectorAll("#decide-section [data-decide]")].every(e => e.disabled)'), true);
-    await s.click('approve');
-    await s.b.evaluate('window.__release(), true');
-    await s.wait('document.querySelector("#decide-section [data-decide=confirm]")');
-    let sent = await s.posts();
-    assert.equal(sent.length, 1);
-    assert.deepEqual(sent[0], { url: `/api/decisions/${enc(s.open)}/confirmation`, method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ choice: 'yes' }), cache: 'no-store', redirect: 'manual' });
-    assert.equal(await s.text('#decide-section [data-decide=confirm]'), 'Confirm approve');
-    assert.match(await s.text('#decide-section .s1-confirm'), /Approving starts this grant\./);
-    assert.equal(await s.b.evaluate('document.activeElement?.dataset.decide ?? null'), 'confirm');
-    assert.equal(await s.b.evaluate('window.injected ?? null'), null);
-
-    // A refresh keeps the confirmation open.
-    await s.settle();
-    assert.equal(await s.has('#decide-section [data-decide=confirm]'), true);
-
-    // Cancel drops it without a request.
-    await s.click('cancel');
-    await s.wait('document.querySelector("#decide-section [data-decide=approve]")');
-    assert.equal((await s.posts()).length, 1);
-
-    // A refusal the Console wrote shows its code and message; a 408 or a lost answer is unavailable.
-    await s.queue({ status: 409, body: { error: 'decision-stale', message: 'The choices changed. Review the decision again.' } });
-    await s.click('deny');
-    await s.wait('document.querySelector("#decide-status")');
-    assert.equal(await s.text('#decide-status'), 'Not answered here: The choices changed. Review the decision again. (decision-stale).');
-    await s.queue({ status: 408, body: { error: 'x', message: 'y' } });
-    await s.click('deny');
-    await s.wait('document.querySelector("#decide-status code")?.textContent === "confirmation-unavailable"');
-    await s.queue({ reject: true });
-    await s.click('deny');
-    await s.wait('document.querySelectorAll("#decide-section [data-decide]:not([disabled])").length === 2');
-    assert.equal(await s.b.evaluate('document.querySelector("#decide-status code")?.textContent'), 'confirmation-unavailable');
-    assert.equal((await s.posts()).length, 4);
-
-    // A reply that doesn't match what was asked is not a confirmation.
-    await s.queue({ status: 200, body: { ...CONFIRM(s, 'approve', 'yes', 'Yes').body } });
-    await s.click('deny');
-    await s.wait('document.querySelector("#decide-status code")?.textContent === "confirmation-unavailable" && document.querySelectorAll("#decide-section [data-decide]:not([disabled])").length === 2');
-    assert.equal(await s.has('#decide-section [data-decide=confirm]'), false);
-
-    // An unknown outcome at the answer says to refresh, drops the confirmation and sends nothing again.
-    await s.queue(CONFIRM(s, 'deny', 'no', 'No'));
-    await s.click('deny');
-    await s.wait('document.querySelector("#decide-section [data-decide=confirm]")');
-    assert.match(await s.text('#decide-section .s1-confirm'), /Denying starts nothing\./);
-    await s.queue({ status: 503, body: { error: 'outcome-unknown', message: 'The answer may have reached the bus. Refresh before trying again.' } });
-    await s.click('confirm');
-    await s.wait('document.querySelector("#decide-status code")?.textContent === "outcome-unknown"');
-    assert.match(await s.text('#decide-status'), /Nothing was sent again\.$/);
-    sent = await s.posts();
-    assert.equal(sent.length, 7);
-    assert.deepEqual(sent[6], { url: `/api/decisions/${enc(s.open)}/resolve`, method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ choice: 'no', confirmation: 'c'.repeat(64) }), cache: 'no-store', redirect: 'manual' });
-    assert.equal(await s.has('#decide-section [data-decide=confirm]'), false);
-    await s.settle();
-    await s.settle();
-    assert.equal((await s.posts()).length, 7, 'the page sent again by itself');
-
-    // A confirmed approve: one answer, a receipt, and no buttons after it, across refreshes.
-    await s.queue(CONFIRM(s, 'approve', 'yes', 'Yes'));
-    await s.click('approve');
-    await s.wait('document.querySelector("#decide-section [data-decide=confirm]")');
-    await s.queue({ status: 200, body: { id: s.open, op: 'resolved', choice: 'yes', grant: 'started' } });
-    await s.click('confirm');
-    await s.wait('document.querySelector("#decide-status")?.textContent.startsWith("Approved")');
-    assert.equal(await s.text('#decide-status'), 'Approved: you chose “yes”, Yes. The grant executor started. History below shows it once the bus is read again.');
-    await s.settle();
-    assert.equal(await s.has('[data-decide]'), false);
-    assert.equal((await s.posts()).length, 9);
-
-    // Closed elsewhere: the next read drops the panel and shows the recorded answer with its provenance.
-    s.store.run('INSERT INTO decision_events(decision,at,op,by,choice,via) VALUES(?,?,?,?,?,?)', s.open, '2026-10-22T00:00:00.000Z', 'resolved', 'jason', 'yes', 'console');
-    await s.page('sso&decide', s.open);
-    assert.equal(await s.has('#decide-section'), false);
-    assert.match(await s.text('#bus-view'), /Resolved: jason chose “yes” via console/);
-    assert.equal(await s.b.evaluate('document.querySelectorAll("#bus-view [data-copy]").length'), 0);
-  } finally { await s.done(); }
-});
-
-test('a sign-in redirect at either step signs the page out and answers nothing', { timeout: 120000 }, async () => {
-  const s = await setup();
-  try {
-    await s.page('sso&decide', s.open);
-    await s.queue({ redirect: true });
-    await s.click('approve');
-    await s.wait('document.body.classList.contains("signed-out")');
-    assert.equal((await s.posts()).length, 1);
-    await s.page('sso&decide', s.open);
-    await s.queue(CONFIRM(s, 'approve', 'yes', 'Yes'));
-    await s.click('approve');
-    await s.wait('document.querySelector("#decide-section [data-decide=confirm]")');
-    await s.queue({ redirect: true });
-    await s.click('confirm');
-    await s.wait('document.body.classList.contains("signed-out")');
-    assert.equal((await s.posts()).length, 2);
-  } finally { await s.done(); }
-});

packages/webui/tests/decide-sso.test.mjs

@@ -1,192 +0,0 @@
-// Row 252 (#1753, design sections 4 and 5): the Console decision routes on the human listener, signed
-// in through the fake OP in helpers/fake-oidc.mjs on loopback. The bus transport is a recording stub,
-// so this covers the listener's gates and the session it passes; decision-http.test.mjs covers the
-// endpoint's own table and console-decide.test.mjs the bus. The public name is console.example.test,
-// sent only as a Host header to the test's own listener. sso.test.mjs pins its own log lines, so the
-// decide lines are checked here.
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { request } from 'node:http';
-import { readFileSync } from 'node:fs';
-import { startServer } from '../src/serve.mjs';
-import { createSso, SESSION_COOKIE } from '../src/sso.mjs';
-import { DECISION_REFUSALS } from '../src/decision-http.mjs';
-import { consoleCall } from '../src/bus.mjs';
-import { consoleAccess } from '../src/access.mjs';
-import { userOptionsFor } from '../src/console-bus.mjs';
-import { close } from './fixture.mjs';
-import { fakeOidc } from './helpers/fake-oidc.mjs';
-
-const HOST = 'console.example.test', ORIGIN = `https://${HOST}`;
-const DIGEST = 'b'.repeat(64);
-const PREVIEW = { id: 'd1', business: 'demo', question: 'Enroll web1?', digest: DIGEST, approve: { key: 'yes', text: 'Yes' }, deny: { key: 'no', text: 'No' }, grant: { method: 'host-enroll', host: 'web1' } };
-
-// node:http, not fetch: fetch can't set Host, Origin or Sec-Fetch-Site.
-function call(port, { method = 'GET', path = '/', headers = {}, body, host = HOST } = {}) {
-  return new Promise((resolve, reject) => {
-    const length = body === undefined ? {} : { 'content-length': Buffer.byteLength(body) };
-    const req = request({ host: '127.0.0.1', port, method, path, headers: { host, ...length, ...headers } }, res => {
-      let text = '';
-      res.on('data', c => (text += c));
-      res.on('end', () => resolve({ status: res.statusCode, headers: res.headers, body: text && (res.headers['content-type'] ?? '').startsWith('application/json') ? JSON.parse(text) : text }));
-    });
-    req.on('error', reject);
-    req.end(body);
-  });
-}
-const writeHeaders = cookie => ({ ...(cookie ? { cookie } : {}), origin: ORIGIN, 'sec-fetch-site': 'same-origin', 'content-type': 'application/json' });
-
-// The fake OP, createSso over it, and the human listener. `server` overrides startServer options.
-// The decision transport records each call and answers a preview or a resolve. `access`, when given,
-// is the access document: createSso gets the users hook and the listener a user transport, as
-// granted-user.test.mjs sets them up.
-async function setup(t, server = {}, access = null) {
-  const op = await fakeOidc();
-  t.after(() => op.close());
-  const iss = op.issuer('a');
-  const config = { publicOrigin: ORIGIN, providers: [{ id: 'a', issuer: iss.issuer, clientId: iss.clientId, clientSecret: { slot: 'a' }, algs: ['RS256'], subjects: [{ sub: 'user-a', name: 'person-a' }] }] };
-  const lines = [];
-  const users = access && { users: consoleAccess({ load: () => access, business: () => 'demo' }) };
-  const sso = await createSso(config, { secrets: new Map([['a', iss.clientSecret]]), fetch: op.fetch, log: l => lines.push(l), ...users });
-  t.after(() => sso.close());
-  const calls = [];
-  const decisionWrite = async (verb, args, ctx) => {
-    calls.push({ verb, args, ctx });
-    return verb === 'decision.preview.console' ? { ...PREVIEW } : { id: args.id, op: 'resolved', choice: args.choice };
-  };
-  const bus = Object.fromEntries(['inbox', 'tasks', 'agents', 'trail', 'decisions'].map(v => [v, async () => []]));
-  const userOptions = access && { userOptions: userOptionsFor({ owner: async () => ({}), send: true, transport: () => async () => [] }) };
-  const web = await startServer({ port: 0, board: 'http://127.0.0.1:9', bus, sso, send: async () => ({ id: 'msg-0001' }), decisionWrite, log: l => lines.push(l), ...userOptions, ...server });
-  t.after(() => close(web));
-  const port = web.address().port;
-  const signIn = async (sub = undefined) => {
-    const start = await call(port, { path: '/auth/login' });
-    assert.equal(start.status, 303);
-    const cookie = [start.headers['set-cookie']].flat()[0].split(';')[0];
-    const g = op.grant(iss, start.headers.location, { sub });
-    const q = new URLSearchParams({ code: g.code, state: new URL(start.headers.location).searchParams.get('state') });
-    const r = await call(port, { path: `/auth/callback?${q}`, headers: { cookie } });
-    return [r.headers['set-cookie'] ?? []].flat().find(c => c.startsWith(`${SESSION_COOKIE}=`) && !c.includes('Max-Age=0')).split(';')[0];
-  };
-  const post = (cookie, path, body, headers = {}) => call(port, { method: 'POST', path, headers: { ...writeHeaders(cookie), ...headers }, body: JSON.stringify(body) });
-  return { port, iss, calls, lines, signIn, post };
-}
-const refused = (r, code) => {
-  assert.equal(r.status, DECISION_REFUSALS[code][0], `${code}: ${r.status} ${JSON.stringify(r.body)}`);
-  assert.deepEqual(r.body, { error: code, message: DECISION_REFUSALS[code][1] });
-};
-
-test('a signed-in owner confirms and answers, with the session\'s provider, issuer and sub as the subject', async t => {
-  const env = await setup(t);
-  const session = await env.signIn();
-  const config = await call(env.port, { path: '/api/config', headers: { cookie: session } });
-  assert.equal(config.body.decide, true);
-  assert.equal(config.body.sso, true);
-  const c = await env.post(session, '/api/decisions/d1/confirmation', { choice: 'yes' });
-  assert.equal(c.status, 200, JSON.stringify(c.body));
-  const r = await env.post(session, '/api/decisions/d1/resolve', { choice: 'yes', confirmation: c.body.confirmation });
-  assert.equal(r.status, 200, JSON.stringify(r.body));
-  assert.deepEqual(r.body, { id: 'd1', op: 'resolved', choice: 'yes' });
-  const subject = { provider: 'a', iss: env.iss.issuer, sub: 'user-a' };
-  assert.deepEqual(env.calls, [
-    { verb: 'decision.preview.console', args: { id: 'd1' }, ctx: { subject } },
-    { verb: 'decision.resolve.console', args: { id: 'd1', choice: 'yes', digest: DIGEST }, ctx: { subject, business: 'demo' } },
-  ]);
-  assert.match(env.lines.at(-1), / decide user="person-a" decision="d1" step=resolve choice="yes"$/);
-  assert.equal(env.lines.some(l => l.includes(c.body.confirmation) || l.includes(session.split('=')[1])), false);
-});
-
-test('the listener gates: no session, a cross-origin page, a loopback Host, a GET, and a sign-out between the steps', async t => {
-  const env = await setup(t);
-  refused(await env.post(null, '/api/decisions/d1/confirmation', { choice: 'yes' }), 'sign-in-required');
-  const session = await env.signIn();
-  refused(await env.post(session, '/api/decisions/d1/confirmation', { choice: 'yes' }, { origin: 'https://evil.test' }), 'cross-origin');
-  refused(await env.post(session, '/api/decisions/d1/confirmation', { choice: 'yes' }, { 'sec-fetch-site': 'cross-site' }), 'cross-origin');
-  const loop = await call(env.port, { method: 'POST', path: '/api/decisions/d1/confirmation', host: `127.0.0.1:${env.port}`, headers: { cookie: session, 'content-type': 'application/json' }, body: '{"choice":"yes"}' });
-  assert.equal(loop.status, 403);
-  refused(await call(env.port, { path: '/api/decisions/d1/confirmation', headers: { cookie: session } }), 'method-not-allowed');
-  assert.equal(env.calls.length, 0);
-  const c = await env.post(session, '/api/decisions/d1/confirmation', { choice: 'yes' });
-  assert.equal(c.status, 200);
-  const out = await call(env.port, { method: 'POST', path: '/auth/logout', headers: { cookie: session, origin: ORIGIN, 'sec-fetch-site': 'same-origin' } });
-  assert.equal(out.status, 303);
-  refused(await env.post(session, '/api/decisions/d1/resolve', { choice: 'yes', confirmation: c.body.confirmation }), 'sign-in-required');
-  assert.equal(env.calls.length, 1);
-  // A new session can't use the old session's confirmation.
-  const again = await env.signIn();
-  refused(await env.post(again, '/api/decisions/d1/resolve', { choice: 'yes', confirmation: c.body.confirmation }), 'confirmation-required');
-  assert.equal(env.calls.length, 1);
-});
-
-test('J16: without a decision transport the routes are read-only and /api/config says no; startServer refuses decide without sso or send', async t => {
-  // A decision transport without --send never starts (serve.mjs refuses it). The configs that start
-  // without send have no transport either, so they are checked with the missing transport.
-  await assert.rejects(setup(t, { send: null }), /need --sso and --send/);
-  for (const server of [{ decisionWrite: null }, { decisionWrite: null, send: null }]) {
-    const env = await setup(t, server);
-    const session = await env.signIn();
-    const config = await call(env.port, { path: '/api/config', headers: { cookie: session } });
-    assert.equal(config.body.decide, false);
-    assert.equal(config.body.sso, true);
-    refused(await env.post(session, '/api/decisions/d1/confirmation', { choice: 'yes' }), 'read-only');
-    assert.equal(env.calls.length, 0);
-  }
-  const write = async () => ({});
-  await assert.rejects(startServer({ port: 0, decisionWrite: write, send: async () => ({}) }), /need --sso and --send/);
-  await assert.rejects(startServer({ port: 0, tester: true, testerSocket: {}, decisionWrite: write }), /need --sso and --send/);
-  const plain = await startServer({ port: 0, board: 'http://127.0.0.1:9' });
-  t.after(() => close(plain));
-  const port = plain.address().port, host = `127.0.0.1:${port}`;
-  const r = await call(port, { method: 'POST', path: '/api/decisions/d1/confirmation', host, headers: { origin: `http://${host}`, 'sec-fetch-site': 'same-origin', 'content-type': 'application/json' }, body: '{"choice":"yes"}' });
-  refused(r, 'read-only');
-  const config = await call(port, { path: '/api/config', host });
-  assert.equal(config.body.decide, false);
-  assert.equal('sso' in config.body, false);
-});
-
-test('J19: a granted user\'s session gets decide false and the user page config, and a decision POST stops at owner-only', async t => {
-  const access = {
-    accessVersion: 1, revision: 1,
-    users: [{ id: 'alice', home: 'local', subjects: [{ provider: 'a', sub: 'alice-sub' }] }],
-    grants: [{ id: 'g-1', user: 'alice', business: 'demo', projects: ['*'], instances: ['assistant'], level: 'collaborator' }],
-  };
-  const env = await setup(t, {}, access);
-  // The listener has a decision transport and --send, and the owner's session decides.
-  const owner = await env.signIn();
-  assert.equal((await call(env.port, { path: '/api/config', headers: { cookie: owner } })).body.decide, true);
-  // The granted user's config says send (its own transport) but never decide.
-  const alice = await env.signIn('alice-sub');
-  const config = await call(env.port, { path: '/api/config', headers: { cookie: alice } });
-  assert.equal(config.status, 200);
-  assert.equal(config.body.user, true);
-  assert.equal(config.body.send, true);
-  assert.equal(config.body.decide, false);
-  // userRoute refuses the decision routes before decisionHTTP, so no session reaches the transport.
-  for (const step of ['confirmation', 'resolve']) {
-    const r = await env.post(alice, `/api/decisions/d1/${step}`, { choice: 'yes', confirmation: 'c'.repeat(64) });
-    assert.equal(r.status, 403);
-    assert.equal(r.body.error, 'owner-only');
-  }
-  assert.equal(env.calls.length, 0);
-});
-
-test('N4: decision.resolve has no Console route, the --send caller names no decision verb, and consoleCall takes only the two console verbs', async t => {
-  const env = await setup(t);
-  const session = await env.signIn();
-  for (const verb of ['decision.resolve', 'decision.resolve.console', 'decision.preview.console']) {
-    for (const method of ['GET', 'POST']) {
-      const r = await call(env.port, { method, path: `/api/bus/${verb}`, headers: writeHeaders(session), ...(method === 'POST' ? { body: '{}' } : {}) });
-      // A GET finds no such bus read. A POST stops earlier, at the preview's read-only refusal for
-      // every write that has no route of its own (row 74).
-      if (method === 'GET') assert.equal(r.status, 404, `${method} ${verb}`);
-      else assert.deepEqual([r.status, r.body.error], [403, 'read-only'], `${method} ${verb}`);
-    }
-  }
-  assert.equal(env.calls.length, 0);
-  const cli = readFileSync(new URL('../src/cli.mjs', import.meta.url), 'utf8');
-  assert.doesNotMatch(cli, /['"]decision\./);
-  const c = consoleCall({ dataRoot: '/nonexistent', socket: '/nonexistent', business: 'demo', cli: '/nonexistent/console-cli.mjs', timeoutMs: 1000 });
-  for (const verb of ['decision.resolve', 'decision.seen', 'message.send', 'inbox']) {
-    await assert.rejects(c(verb, { id: 'd1', choice: 'yes' }, { subject: { provider: 'a', iss: 'i', sub: 's' } }), /the Console does not call/);
-  }
-});

packages/webui/tests/decision-http.test.mjs

@@ -1,205 +0,0 @@
-// Row 252 (#1753): the Console decision endpoint, driven with a fake request, response and bus
-// transport. The real bus side is in packages/bus/tests/console-decide.test.mjs and the page side
-// in the browser tests.
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { BusReadError } from '../src/bus.mjs';
-import { DECISION_REFUSALS, createConfirmations, decisionHTTP } from '../src/decision-http.mjs';
-
-const ORIGIN = 'https://console.test';
-const DIGEST = 'a'.repeat(64);
-const PREVIEW = {
-  id: 'd1', business: 'demo', question: 'Enroll host?', digest: DIGEST,
-  approve: { key: 'yes', text: 'Yes, enroll it' }, deny: { key: 'no', text: 'No' },
-  grant: { method: 'host-enroll', host: 'h1' },
-};
-
-function request({ method = 'POST', body = {}, headers = {}, raw } = {}) {
-  const h = { origin: [ORIGIN], 'sec-fetch-site': ['same-origin'], 'content-type': ['application/json'], ...headers };
-  for (const k of Object.keys(h)) if (h[k] === null) delete h[k];
-  const data = Buffer.from(raw ?? JSON.stringify(body));
-  return { method, headersDistinct: h, async *[Symbol.asyncIterator]() { yield data; } };
-}
-function response() {
-  const r = { status: null, headers: null, text: '' };
-  r.writeHead = (s, h) => { r.status = s; r.headers = h; };
-  r.end = (t = '') => { r.text += t; };
-  r.json = () => JSON.parse(r.text);
-  return r;
-}
-function setup({ answer = () => ({ ...PREVIEW }), resolve = (a) => ({ id: a.id, op: 'resolved', choice: a.choice, grant: 'started' }), now } = {}) {
-  const session = { name: 'jason', provider: 'fake-oidc', iss: 'https://idp.test', sub: 'owner-1' };
-  const calls = [], lines = [];
-  const s = {
-    session, calls, lines, current: session,
-    confirmations: createConfirmations(now ? { now } : {}),
-    decide: {
-      origin: ORIGIN,
-      call: async (verb, args, ctx) => {
-        calls.push({ verb, args, ctx });
-        return verb === 'decision.preview.console' ? answer(args) : resolve(args);
-      },
-    },
-  };
-  s.run = async (path, req) => {
-    const res = response();
-    await decisionHTTP(req, res, { path, decide: s.decide, session: s.session, live: () => s.current, confirmations: s.confirmations, log: (l) => lines.push(l) });
-    return res;
-  };
-  s.confirm = (choice = 'yes', id = 'd1') => s.run(`/api/decisions/${id}/confirmation`, request({ body: { choice } }));
-  s.resolve = (body, id = 'd1') => s.run(`/api/decisions/${id}/resolve`, request({ body }));
-  return s;
-}
-const refused = (res, code) => {
-  assert.equal(res.status, DECISION_REFUSALS[code][0], `${code}: ${res.text}`);
-  assert.deepEqual(res.json(), { error: code, message: DECISION_REFUSALS[code][1] });
-  assert.equal(res.headers['cache-control'], 'no-store');
-};
-
-test('a confirmation then a resolve answers once with the held choice and digest, and a second resolve refuses', async () => {
-  const s = setup();
-  const c = await s.confirm('yes');
-  assert.equal(c.status, 200);
-  const body = c.json();
-  assert.match(body.confirmation, /^[a-f0-9]{64}$/);
-  assert.deepEqual({ ...body, confirmation: 'x' }, { id: 'd1', question: 'Enroll host?', action: 'approve', choice: 'yes', text: 'Yes, enroll it', grant: PREVIEW.grant, confirmation: 'x' });
-  assert.deepEqual(s.calls[0], { verb: 'decision.preview.console', args: { id: 'd1' }, ctx: { subject: { provider: 'fake-oidc', iss: 'https://idp.test', sub: 'owner-1' } } });
-  const r = await s.resolve({ choice: 'yes', confirmation: body.confirmation });
-  assert.equal(r.status, 200);
-  assert.deepEqual(r.json(), { id: 'd1', op: 'resolved', choice: 'yes', grant: 'started' });
-  assert.deepEqual(s.calls[1], { verb: 'decision.resolve.console', args: { id: 'd1', choice: 'yes', digest: DIGEST }, ctx: { subject: { provider: 'fake-oidc', iss: 'https://idp.test', sub: 'owner-1' }, business: 'demo' } });
-  // J12: the confirmation is spent, so a repeat never reaches the bus.
-  refused(await s.resolve({ choice: 'yes', confirmation: body.confirmation }), 'confirmation-required');
-  assert.equal(s.calls.length, 2);
-  assert.equal(s.lines.length, 3);
-  assert.match(s.lines[0], / decide user="jason" decision="d1" step=confirmation action=approve$/);
-  assert.match(s.lines[1], / step=resolve choice="yes" grant=started$/);
-  assert.doesNotMatch(s.lines.join('\n'), new RegExp(body.confirmation));
-});
-
-test('deny resolves without a grant field', async () => {
-  const s = setup({ resolve: (a) => ({ id: a.id, op: 'resolved', choice: a.choice }) });
-  const c = (await s.confirm('no')).json();
-  assert.equal(c.action, 'deny');
-  assert.equal(c.text, 'No');
-  const r = await s.resolve({ choice: 'no', confirmation: c.confirmation });
-  assert.deepEqual(r.json(), { id: 'd1', op: 'resolved', choice: 'no' });
-});
-
-test('the gates before the body: method, read-only, sign-in and same origin', async () => {
-  const s = setup();
-  refused(await s.run('/api/decisions/d1/confirmation', request({ method: 'GET' })), 'method-not-allowed');
-  const res = response();
-  await decisionHTTP(request({ body: { choice: 'yes' } }), res, { path: '/api/decisions/d1/confirmation', decide: null, session: s.session, live: () => s.session, confirmations: s.confirmations, log: () => {} });
-  refused(res, 'read-only');
-  const out = response();
-  await decisionHTTP(request({ body: { choice: 'yes' } }), out, { path: '/api/decisions/d1/confirmation', decide: s.decide, session: null, live: () => null, confirmations: s.confirmations, log: () => {} });
-  refused(out, 'sign-in-required');
-  for (const headers of [{ origin: ['https://evil.test'] }, { origin: null }, { origin: [ORIGIN, ORIGIN] }, { 'sec-fetch-site': ['same-site'] }, { 'sec-fetch-site': null }]) {
-    refused(await s.run('/api/decisions/d1/confirmation', request({ body: { choice: 'yes' }, headers })), 'cross-origin');
-  }
-  assert.equal(s.calls.length, 0);
-});
-
-test('a bad body, id or content type refuses before the bus', async () => {
-  const s = setup();
-  const path = '/api/decisions/d1/confirmation';
-  refused(await s.run(path, request({ body: { choice: 'yes' }, headers: { 'content-type': ['text/plain'] } })), 'invalid-request');
-  refused(await s.run(path, request({ raw: '{' })), 'invalid-request');
-  refused(await s.run(path, request({ raw: '[]' })), 'invalid-request');
-  refused(await s.run(path, request({ body: { choice: 'yes', extra: 1 } })), 'invalid-request');
-  refused(await s.run(path, request({ body: { choice: 1 } })), 'invalid-request');
-  refused(await s.run(path, request({ raw: JSON.stringify({ choice: 'y'.repeat(5000) }) })), 'request-too-large');
-  refused(await s.run('/api/decisions/..%2Fx/confirmation', request({ body: { choice: 'yes' } })), 'decision-not-found');
-  refused(await s.run('/api/decisions/%E0%A4%A/confirmation', request({ body: { choice: 'yes' } })), 'decision-not-found');
-  refused(await s.resolve({ choice: 'yes' }), 'invalid-request');
-  refused(await s.resolve({ choice: 'yes', confirmation: 'a'.repeat(64), more: 1 }), 'invalid-request');
-  assert.equal(s.calls.length, 0);
-});
-
-test('a choice that is neither key is decision-stale, and a malformed preview is confirmation-unavailable', async () => {
-  refused(await setup().confirm('maybe'), 'decision-stale');
-  for (const bad of [{ ...PREVIEW, id: 'd2' }, { ...PREVIEW, digest: 'short' }, { ...PREVIEW, deny: { key: 'yes', text: 'No' } }, { ...PREVIEW, grant: null }, null]) {
-    const s = setup({ answer: () => bad });
-    refused(await s.confirm('yes'), 'confirmation-unavailable');
-    assert.equal(s.confirmations.size, 0);
-  }
-});
-
-test('bus refusals map by code, and an unknown or missing code is unavailable at preview and outcome-unknown at resolve', async () => {
-  const cases = [
-    ['human-required', 'human-required'], ['agent-required', 'human-required'], ['access-revoked', 'human-required'],
-    ['peercred-required', 'peercred-required'], ['decision-not-eligible', 'decision-not-eligible'],
-    ['decision-closed', 'decision-closed'], ['decision-stale', 'decision-stale'], ['invalid-choice', 'decision-stale'],
-    ['decision-not-found', 'decision-not-found'], ['outcome-unknown', 'confirmation-unavailable'], ['weird', 'confirmation-unavailable'],
-  ];
-  for (const [bus, code] of cases) {
-    const s = setup({ answer: () => { throw new BusReadError(bus); } });
-    refused(await s.confirm('yes'), code);
-  }
-  refused(await setup({ answer: () => { throw new Error('boom'); } }).confirm('yes'), 'confirmation-unavailable');
-  for (const [bus, code] of [['decision-closed', 'decision-closed'], ['outcome-unknown', 'outcome-unknown'], ['weird', 'outcome-unknown']]) {
-    const s = setup({ resolve: () => { throw new BusReadError(bus); } });
-    const c = (await s.confirm('yes')).json();
-    refused(await s.resolve({ choice: 'yes', confirmation: c.confirmation }), code);
-    // Nothing retries, and the confirmation stays spent.
-    assert.equal(s.calls.length, 2);
-    refused(await s.resolve({ choice: 'yes', confirmation: c.confirmation }), 'confirmation-required');
-  }
-  for (const reply of [null, { id: 'd2', op: 'resolved', choice: 'yes' }, { id: 'd1', op: 'refused', choice: 'yes' }, { id: 'd1', op: 'resolved', choice: 'no' }]) {
-    const s = setup({ resolve: () => reply });
-    const c = (await s.confirm('yes')).json();
-    refused(await s.resolve({ choice: 'yes', confirmation: c.confirmation }), 'outcome-unknown');
-  }
-});
-
-test('a confirmation binds the session, decision and choice, and any mismatch spends it', async () => {
-  const s = setup();
-  let c = (await s.confirm('yes')).json();
-  refused(await s.resolve({ choice: 'no', confirmation: c.confirmation }), 'confirmation-required');
-  refused(await s.resolve({ choice: 'yes', confirmation: c.confirmation }), 'confirmation-required');
-  c = (await s.confirm('yes')).json();
-  refused(await s.resolve({ choice: 'yes', confirmation: c.confirmation }, 'd2'), 'confirmation-required');
-  c = (await s.confirm('yes')).json();
-  const other = setup();
-  other.confirmations = s.confirmations;
-  other.session = { ...s.session };
-  other.current = other.session;
-  refused(await other.resolve({ choice: 'yes', confirmation: c.confirmation }), 'confirmation-required');
-  refused(await s.resolve({ choice: 'yes', confirmation: 'not-a-token' }), 'confirmation-required');
-  assert.equal(s.calls.filter((x) => x.verb === 'decision.resolve.console').length, 0);
-  assert.equal(other.calls.length, 0);
-});
-
-test('a session that ends between the steps refuses before the bus', async () => {
-  const s = setup();
-  s.current = null;
-  refused(await s.confirm('yes'), 'sign-in-required');
-  assert.equal(s.calls.length, 0);
-  s.current = s.session;
-  const c = (await s.confirm('yes')).json();
-  s.current = { ...s.session };
-  refused(await s.resolve({ choice: 'yes', confirmation: c.confirmation }), 'sign-in-required');
-  assert.equal(s.calls.length, 1);
-  // A sign-out during the preview also refuses, and no confirmation is issued.
-  const t = setup({ answer: () => { t.current = null; return { ...PREVIEW }; } });
-  refused(await t.confirm('yes'), 'sign-in-required');
-  assert.equal(t.confirmations.size, 0);
-});
-
-test('confirmations expire after the TTL, cap at the limit without dropping a live one, and are one use', () => {
-  let t = 0;
-  const store = createConfirmations({ ttlMs: 1000, max: 2, now: () => t });
-  const bind = { session: 's', business: 'demo', decision: 'd1', choice: 'yes', digest: DIGEST };
-  const a = store.issue(bind), b = store.issue(bind);
-  assert.equal(store.issue(bind), null);
-  assert.equal(store.size, 2);
-  assert.equal(store.consume(a, bind).digest, DIGEST);
-  assert.equal(store.consume(a, bind), null);
-  t = 1000;
-  assert.equal(store.consume(b, bind), null);
-  assert.equal(store.size, 0);
-  assert.match(store.issue(bind), /^[a-f0-9]{64}$/);
-  assert.equal(store.consume(undefined, bind), null);
-  assert.equal(store.consume('A'.repeat(64), bind), null);
-});

packages/webui/tests/library-cli.test.mjs

@@ -14,7 +14,7 @@ test('C2-04 CLI: both listener callback pairs dispatch library verbs with their
   // The loader supplies a fixture bus and captures callbacks instead of
   // opening an HTTP listener. Production imports and routes are unchanged.
   const serveSource = "export const DEFAULT_BOARD='http://127.0.0.1:9';export const previewOptions=()=>null;export const proofOptions=()=>null;export async function startServer(o){if(typeof o.libraryFile!=='function'||typeof o.libraryStatus!=='function')throw Error('missing library callbacks');await o.libraryFile({project:'books',path:'Book One/A.md'});await o.libraryStatus({project:'books'});return {address:()=>({port:0}),close:()=>{}};}";
-  const busSource = `import {appendFileSync} from 'node:fs';export class BusReadError extends Error{};export const busCaller=o=>async(verb,args)=>{appendFileSync(${JSON.stringify(log)},JSON.stringify({verb,args,cli:o.cli??${JSON.stringify(HUMAN_CLI)}})+'\\n');return {};};export const busBusiness=()=>{throw Error('busBusiness outside --sso')};export const userCaller=()=>{throw Error('userCaller outside --sso')};export const consoleCall=()=>{throw Error('consoleCall outside --sso')};`;
+  const busSource = `import {appendFileSync} from 'node:fs';export class BusReadError extends Error{};export const busCaller=o=>async(verb,args)=>{appendFileSync(${JSON.stringify(log)},JSON.stringify({verb,args,cli:o.cli??${JSON.stringify(HUMAN_CLI)}})+'\\n');return {};};export const busBusiness=()=>{throw Error('busBusiness outside --sso')};export const userCaller=()=>{throw Error('userCaller outside --sso')};`;
   writeFileSync(hook, `import {registerHooks} from 'node:module';
     registerHooks({load(url,context,next){
       if(url.endsWith('/webui/src/serve.mjs'))return {format:'module',shortCircuit:true,source:${JSON.stringify(serveSource)}};

packages/webui/tests/shell.test.mjs

@@ -50,18 +50,14 @@ test('shipped strings are unchanged, and the web keeps its write boundary', () =
     ['bus.js', 'No open tasks.'], ['bus.js', 'No role is held right now.'], ['bus.js', 'Nothing of this kind in the trail.'],
     ['bus.js', 'Console shows nothing rather than a guess. Nothing was written.'],
   ]) assert.equal(plain[file].split(s).length - 1, n, `${file}: ${s}`);
-  // Row 252 (#1753, mos-1321): the one decision control is the Console's grant Approve and Deny, one
-  // fetch(url, ...) in decidePost, called only for a decision's confirmation and its resolve. Its labels
-  // come from ACTIONS, and the doesNotMatch below keeps any literal Resolve, Decide or Approve label out
-  // of the markup. The board's Seen and reply are app.js's POSTs; bus.js's other explicit writes are
+  // No Resolve control. The board's Seen and reply are app.js's POSTs; bus.js has four explicit writes:
   // row 76's message to a role, row 122's human Settings update, row 125's token-limit reset (one path,
   // to the same Settings route) and row 148's spec and docs save. Row 165 (#1662) adds the role
   // instance add or change to /api/instances, and row 65 the routing table's save to /api/routes.
   assert.doesNotMatch(src, /<button[^>]*>[^<]*(Resolve|Decide|Approve)/i);
   const writes = read('bus.js').toString().match(/fetch\([^;]*method:\s*['"](POST|PUT|PATCH|DELETE)[^;]*;/g) ?? [];
-  assert.deepEqual(writes, ["fetch(url, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body), cache: 'no-store', redirect: 'manual' });", "fetch('/api/settings',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(payload),cache:'no-store',redirect:'manual'});", "fetch('/api/settings',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({revision,reset:[JSON.parse(path)]}),cache:'no-store',redirect:'manual'});", "fetch(url,{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(payload),cache:'no-store',redirect:'manual'});", "fetch('/api/instances',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(payload),cache:'no-store',redirect:'manual'});", "fetch('/api/routes',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(payload),cache:'no-store',redirect:'manual'});", "fetch('/api/project-file', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(sent), cache: 'no-store', redirect: 'manual' });", "fetch('/api/bus/message', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ to, body: text }), cache: 'no-store', redirect: 'manual' });"]);
-  assert.equal(read('bus.js').toString().split(/method:/).length - 1, 8);
-  assert.deepEqual([...read('bus.js').toString().matchAll(/decidePost\(([^,]*),/g)].map(m => m[1]), ['url', '`/api/decisions/${enc(a.id)}/confirmation`', '`/api/decisions/${enc(a.id)}/resolve`']);
+  assert.deepEqual(writes, ["fetch('/api/settings',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(payload),cache:'no-store',redirect:'manual'});", "fetch('/api/settings',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({revision,reset:[JSON.parse(path)]}),cache:'no-store',redirect:'manual'});", "fetch(url,{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(payload),cache:'no-store',redirect:'manual'});", "fetch('/api/instances',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(payload),cache:'no-store',redirect:'manual'});", "fetch('/api/routes',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(payload),cache:'no-store',redirect:'manual'});", "fetch('/api/project-file', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(sent), cache: 'no-store', redirect: 'manual' });", "fetch('/api/bus/message', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ to, body: text }), cache: 'no-store', redirect: 'manual' });"]);
+  assert.equal(read('bus.js').toString().split(/method:/).length - 1, 7);
   // Row 155 (#1649): the one fetch(url, ...) posts only to these three routes, each a literal.
   // Row 176 (#1674): the tester name form adds a second /api/name caller.
   assert.deepEqual([...read('bus.js').toString().matchAll(/assistantPost\(([^,]*),/g)].map(m => m[1]), ['url', "'/api/settings'", "'/api/name'", "'/api/assistant-stop'", "'/api/name'"]);

packages/webui/tests/tester-listener.test.mjs

@@ -183,14 +183,3 @@ test('row 177 W4: the main listener refuses x-mosaic-tester on chat reads and wr
   assert.equal((await http(web, '/api/chat/threads', { headers: signed })).status, 200);
   assert.deepEqual(calls, ['threads']);
 });
-
-test('Row 252: the tester listener has no decision answer routes, and its config never offers them', async t => {
-  const s = await testerFixture(t);
-  for (const step of ['confirmation', 'resolve']) {
-    const r = await post(s.web, `/api/decisions/d1/${step}`, step === 'confirmation' ? { choice: 'yes' } : { choice: 'yes', confirmation: 'a'.repeat(64) });
-    assert.equal(r.status, 404, r.text);
-    assert.equal(r.body.error, 'not-found');
-  }
-  assert.equal((await http(s.web, '/api/config')).body.decide, false);
-  assert.deepEqual(s.calls, []);
-});

packages/webui/tests/thread-claims.test.mjs

@@ -55,7 +55,7 @@ test('row278 Console adapter calls argument-free thread.claims through the norma
   const root = tmp(t, 'claims-cli-'), f = fixture(root), log = join(root, 'calls.jsonl'), hook = join(root, 'hooks.mjs');
   writeFileSync(log, '');
   const serveSource = `export const DEFAULT_BOARD='http://127.0.0.1:9';export const previewOptions=()=>null;export const proofOptions=()=>null;export async function startServer(o){await o.bus['thread.claims']();return {address:()=>({port:0}),close:()=>{}};}`;
-  const busSource = `import {appendFileSync} from 'node:fs';export class BusReadError extends Error{};export const busCaller=o=>async(verb,...args)=>{appendFileSync(${JSON.stringify(log)},JSON.stringify({verb,args,tester:!!o.cli})+'\\n');return [];};export const busBusiness=()=>{throw Error('busBusiness outside --sso')};export const userCaller=()=>{throw Error('userCaller outside --sso')};export const consoleCall=()=>{throw Error('consoleCall outside --sso')};`;
+  const busSource = `import {appendFileSync} from 'node:fs';export class BusReadError extends Error{};export const busCaller=o=>async(verb,...args)=>{appendFileSync(${JSON.stringify(log)},JSON.stringify({verb,args,tester:!!o.cli})+'\\n');return [];};export const busBusiness=()=>{throw Error('busBusiness outside --sso')};export const userCaller=()=>{throw Error('userCaller outside --sso')};`;
   writeFileSync(hook, `import {registerHooks} from 'node:module';registerHooks({load(url,context,next){
     if(url.endsWith('/webui/src/serve.mjs'))return {format:'module',shortCircuit:true,source:${JSON.stringify(serveSource)}};
     if(url.endsWith('/webui/src/bus.mjs'))return {format:'module',shortCircuit:true,source:${JSON.stringify(busSource)}};