docs: clarify Connections opening order and current-link filtering

BUILD-LOG.md

@@ -5407,3 +5407,7 @@ Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault r
 2026-10-23 | Sage (1ef1e4f8) | Row 272 landing (#1777, 264e) | Gate r4 on bea0c8e1c over 1e629c892: bus 891/0, cli 941/0, webui 392/0, business 231/0; plugins 110/1, the single red being row 65 harness.test.mjs:192 naming compactions.mjs, which row 307 owned and fixed. M1-M6 and F1-F4 killed, restore clean. Landed d33989230, queue commit 8dc132bec.
 
 2026-10-23 | Sage (1ef1e4f8) | Row 307 landing (#1814, Vikunja 598) | Six first-parent commits replayed onto 8dc132bec with matching patch-ids, 16 paths equal to 6fdfe3790, manifest digest 17c9f8d9 rebuilt from git. Gate green 14:37:21Z: bus 891/0, cli 941/0, plugins 119/0, webui 392/0, business 231/0, every other package 0 failed 0 skipped, every scripts/test-*.sh passed (skips: test-queue canonical root, test-task live provider x2). M1-M4 killed, restore clean. Landed d243f6b25, DEFERRED 307 N1 0621c439e, queue commit fe4ee8c7b. Correction: my first note said Vikunja 598 done when I had only commented (951); Mos closed it (952).
+
+2026-10-23T17:29:46Z | Gyro Vikunja571 sage-3542 Connections amendment | Branch gyro/editor-connections-design cut exactly from landed PRD1.17 30e6bb680; read REQ-LIB-5 in that PRD. Replaced stale J-b waits in parent and W4. Proposed W8 owns current authorized Markdown/DOCX links/backlinks list, labels, versioned refresh, leakage refusals and fixture tests. Build order under mos-1470/comment961 is W7 closed routing candidate, W8 landing, then W7 human first-real-import opening. No REQ-LIB-8 condition or acceptance change. Q234/mos-1363/S0 M1-M14 and post-10-27/MVP priority fixed. Static diff, twelve brief sections and append-only checks pass. No repo Node, tests, build, browser, queue mutation or live action. Fenton reviews after authorized docs branch push; Sage lands on approval.
+
+2026-10-23T17:32:37Z | Gyro sage-3544 fenton-0016 N1/N2 delta | Before: W7 Gate/final real-conversion list omit the W8 build-order cross-reference and W8 human-view filtering cites agent settings. After: both locations explicitly put W8 landing before human opening as mos-1470 build order, not acceptance; comment/tracked-deletion links are not current story links and never appear in the human Connections view regardless of agent settings. New commit atop approved 5af060fb5, no amend. Static diff and append-only checks pass. Docs only, no repo Node/tests/live action. Fenton checks only this delta.

docs/SESSIONS.md

@@ -1588,3 +1588,5 @@ are never rewritten or removed; corrections are new entries.
 
 2026-10-23 | Sage (1ef1e4f8) | Rows 272 and 307 landings, row 306 design, row 252 rebase check | 272 landed d33989230 and 307 landed d243f6b25, both on full five-suite gates with mutants killed. Row 306 design r2 approved by Dewey (c31197), build going under mos-1463. Row 252 rebase 3e6de9807 on fe4ee8c7b checked and Scrooge given the slot (sage-3488).
 2026-10-23 | Sage (1ef1e4f8) | Rows 291 and 306 landings, row 308 launch | 291 (PRD 1.16, #1796) landed 4874d1e83 and 306 (#1813) landed 1676ad0de..2d0318a44 by temp-index replay, patch-ids equal, both on all-suite gates (mos-1455, plugins 0 fail, 306 mutants M1-M3 killed). 306 N1/N2 in DEFERRED 9c8877bdf. Row 308 (PRD 1.17, #1815) briefed and launched to Gosalyn; slot passed to them for claim, push and in-review. Scrooge told to rebase 252 on 9c8877bdf. Mos told (sage-3515, sage-3520).
+2026-10-23T17:29:46Z | Gyro (Codex gpt-6.1-sol, sage-3542) | 571 REQ-LIB-5/Q239 Connections design amendment | Proposed W8 plus parent/W4 alignment; Mos build order kept distinct from import acceptance. Static docs checks only, no repo Node/tests/live action. Fenton review, Sage landing.
+2026-10-23T17:32:37Z | Gyro (Codex gpt-6.1-sol, sage-3544) | 571 Connections N1/N2 | W7 opening-order cross-references and human-view comment/deletion exclusion clarified. Static docs checks only; no repo Node/tests/live action. Delta to Fenton, Sage lands.

docs/plans/2026-10-21_q195-writing-editor.md

@@ -187,8 +187,10 @@ canon Markdown chapter takes its position by that rule or a human's committed or
 import preserves its chapter ID and position. Human reordering commits the manifest.
 library_manuscript and next_chapter use this order, never archived paths. Each
 answer/page names format, owned location/ID and captured commit. DOCX wikilinks stay clickable
-in the Console editor; no graph shows their current links yet. A Console Connections view
-and its tests are later work, waiting for Jason's J-b answer in PRD 1.17. Obsidian's archive
+in the Console editor, and no graph shows them yet. Under PRD 1.17 REQ-LIB-5 and Q239,
+the Console's Connections view lists the current links and backlinks of each story file
+the user may see, in both formats, with each one's scope and format. W8 owns that view
+and its tests. Obsidian's archive
 graph is historical, not a live DOCX graph. No graph implementation is in these W rows. New Story chooses universe/book or playground and gets
 its place in that manifest from its first DOCX commit, without an MD copy.
 
@@ -242,8 +244,8 @@ follow stable identities without an agent rewriting story links.
 Obsidian's old Markdown graph is historical after conversion. It does not track later DOCX
 edits, and it is not a parallel writing surface. The format map names current files and
 clickable editor links resolve across formats; it is not a graph view. No graph shows DOCX
-links yet. The later Connections view waits for Jason's J-b answer; it and its tests are
-outside the current W3/W7 scope. No Markdown export or Obsidian graph parity is promised. `.doc`/`.qxd` imports remain separate D23 work.
+links yet. W8 supplies REQ-LIB-5's Console Connections view: current links and backlinks
+of each story file the user may see, in both formats, with each one's scope and format. No Markdown export or Obsidian graph parity is promised. `.doc`/`.qxd` imports remain separate D23 work.
 
 D12. Q235–Q237 withdraw the superseded-notice proposal and its open-Q36 boundary. Current
 Case 2 chapter reads after conversion use W4b's committed DOCX reader/citations. Agent
@@ -579,12 +581,19 @@ runs Jason's layout agent nor automatically grants it access or sends book text
 
 All rows follow BRIEF-TEMPLATE. They are not queue entries. S0 M1–M14 remain binding throughout W2/W6; source/target
 changes return to security review. W7 adds the policy conversion/routing row. S0 and the original W4 design have reviewed verdicts; this policy revision goes to Fenton.
-Their implementation gates remain separate. No code row W1/W2/W6/W3a/W3b/W3/W4b/W5/W7 enters the queue
+Their implementation gates remain separate. No code row W1/W2/W6/W3a/W3b/W3/W4b/W5/W7/W8 enters the queue
 before S0 PASS (recorded for this baseline, with M1–M14 still binding). Each also observes its explicit dependencies, source ownership, the CSP gate
 and the MVP gate-slot priority. Q177 permits chaining reviewed candidates, not overlapping
 owners. Sage assigns model-only seats. Each implementation reviewer is Opus 5.5 and did not
 author the code. Fenton reviews this design and can review code only when not its author.
 
+Build order (mos-1470, Vikunja 571 comment 961): W7 first supplies reviewed conversion/format
+routing code with production import still closed, then W8 lands the Connections view, then
+W7's human opening step may open the first real chapter import. W8 is after W3/W4b and
+W7's closed routing candidate, before that W7 opening step. This is Mos's build-order rule,
+not a new REQ-LIB-8 condition or an addition to import acceptance. No converted real chapter
+exists without the view. O2 code remains after 10-27 and never ahead of MVP rows.
+
 G1. Future code acceptance runs each touched test file independently and affected package
 suites on Sage's slot after MVP priority, plus required repository checks. Source builds need
 pinned tools, reproducible hashes, license/source manifests and independent review. Integration browser
@@ -1258,6 +1267,7 @@ Independent conversion/parser/authorization review, writing/library/bus/harness/
 pinned-copy and sandbox closure tests, plus W4 A19/A20/A33–A35 and G1. Source archive, off-host acknowledged DOCX and
 format-map snapshot must match the new DOCX publication before completion. No real import
 opens before all D12 gates. The October 27 Markdown and supporting-doc fixtures still pass.
+The human opening step follows W8's landing (mos-1470, build order, not an acceptance condition).
 
 ### Handoffs
 
@@ -1265,6 +1275,83 @@ Owner sends commit/blob and fixture publication/crash evidence directly to the r
 Sage through T3. Reviewer sends verdict to owner/Sage. Copy Mos for the later first-real-book
 go or any proposed policy change, never ask an agent to execute that go.
 
+## W8 Console Connections view for Markdown and DOCX story files
+
+### Problem
+
+PRD 1.17 REQ-LIB-5 at 30e6bb680, approved through Q239, requires the Console to list
+current links and backlinks of every story file the user may see, in both formats, with
+scope and format. Clickable editor wikilinks and Obsidian's historical archive graph do
+not supply this view.
+
+### Owner and reviewer
+
+- Owner: Sage assigns the seat, using Codex gpt-6.1-sol for cross-format lookup and authorization.
+- Reviewer: an independent Opus 5.5 seat assigned by Sage, not the author.
+- After: W3, W4b and W7's reviewed closed conversion/format-routing candidate; serial handoff
+  from W7 for shared library/WebUI files and from C2-11a/11b and C2-10b for shared UI paths.
+- Before: W7's human opening step for the first real chapter import, under mos-1470. This
+  orders builds, not REQ-LIB-8 acceptance, and does not change its four opening conditions.
+  Post-10-27 only, with no gate slot ahead of MVP rows.
+
+### Files owned
+
+New: `packages/library/src/connections.mjs`, `packages/library/tests/connections.test.mjs`,
+`packages/webui/src/connections-http.mjs`,
+`packages/webui/src/public/{writing-connections.js,writing-connections.css}`,
+`packages/webui/tests/{writing-connections.test.mjs,writing-connections-browser.test.mjs}`.
+Existing or handed off from W7/W3: `packages/library/src/{index.mjs,links.mjs}`,
+`packages/webui/src/{serve.mjs,bus.mjs}`,
+`packages/webui/src/public/{index.html,writing-pane.js,writing-pane.css}`,
+`packages/webui/README.md`.
+
+### What ships
+
+A Console Connections control beside story navigation opens a keyboard-accessible list
+with Links and Backlinks sections for the selected story. Each item shows its title,
+scope and format, and opens the current authorized story through the existing resolver.
+It works for Markdown, DOCX and a partly converted book. It uses committed link metadata
+and W7's stable identities/format routing, never unsaved editor buffers or archive content.
+The response names the captured versions; after a committed save or conversion publication,
+a refresh uses the current authorized snapshot. An in-flight stale result cannot replace
+that refresh. An empty section says there are no visible links; it does not reveal hidden
+counts or titles. Unresolved links remain visibly unresolved and cannot open guessed paths.
+
+A human-only Console read route uses existing authenticated project/universe/source access
+and exclusions. Authorize both endpoints of every displayed edge before returning titles,
+paths or counts. Backlinks cannot reveal another business, a denied universe, excluded
+story or archived source. Links inside comments or tracked-deletion text are not current
+story links, so the human Connections view never shows them and never depends on an agent
+setting. Final-view story links use the same committed extraction rules as W4b. Archive links are historical
+and excluded from this current-story view. No new agent grant, tool or conversation gate.
+
+`connections.test.mjs` covers forward/backlinks across both formats, mixed-book identity
+preservation through conversion, current committed saves, scope/format labels, exclusions,
+archive/old-path refusal, unresolved targets and denial without metadata leaks. The HTTP/UI
+suite in `writing-connections.test.mjs` covers authentication, access revocation, response
+version binding, stale refresh rejection and refusal rendering. The browser fixture suite
+covers keyboard/focus, Links/Backlinks empty states, labels, cross-format navigation and
+refresh after save/publication. Fixtures only, never Melanie's text or a live stack.
+
+### Out of scope
+
+A node graph, Obsidian graph parity, editing links or story text, agent tools, private-book
+conversion, changes to REQ-LIB-8 acceptance, Q234's header, mos-1363 or S0 M1–M14.
+
+### Gate
+
+Independent Opus 5.5 review of access filtering and the human view, the named fixture suites
+and G1 on Sage's slot. Evidence shows both formats and mixed conversion state without
+archive or denied-source leakage. Sage records W8 landing before W7's first-real-import
+opening step per mos-1470; no import acceptance test or PRD condition is added here.
+
+### Handoffs
+
+Owner sends pushed commit/blob and fixture evidence directly to the reviewer and Sage via
+T3. Reviewer sends verdict to owner and Sage. Sage orders W8 landing before the W7 human
+opening step, and hands the shared files back before further W7 edits. Copy Mos for the
+first-real-book go or any proposed policy change.
+
 ## Engineering choices from mos-1368
 
 This table resolves the map's engineering prompts; these are design decisions, not questions
@@ -1282,7 +1369,7 @@ Later mos-1372/1375 override A32/A33's per-document/dedicated-session assumption
 | Q7 / A32/A33 | mos-1372 D9: ordinary Case 2 access in any thread/room, no per-document grant/share/dedicated session; existing supporting writes continue; marked for PRD 1.17 approval |
 | Q8 / A36 | W4b/W7: preserve Case 2 find/get/search/manuscript/universe tools via host committed-reader adapters, not fewer tools or raw ZIP access |
 | Q9 / A73 / C2 | W7: D10 manifest order, typed next_chapter, paragraph cursors bound to snapshot/access; both W4 byte cap and harness REPLY_CAP apply, never cut paragraphs or invent line equivalents |
-| Q10 / A22 | W3/W7 keep clickable cross-format editor links; no DOCX graph yet. Connections view/tests are later work, waiting on Jason's J-b answer; Obsidian archive graph is historical |
+| Q10 / A22 | W3/W7 keep clickable cross-format editor links; W8 supplies current links/backlinks for visible story files in both formats with scope/format (REQ-LIB-5, Q239); no DOCX graph yet; Obsidian archive graph is historical |
 | Q11 / A37 | W7: Console archive saves refuse; sync flags later archive edits or recreated old paths and excludes them from current canon; no remote-push refusal/protected-pattern guarantee |
 | Q12 / A21 | W7: reviewed markdown-it AST + first-party DOCX adapter; no new runtime converter; input cap 1 MiB default, W4 ZIP/XML validation, construct/token/extractor fidelity before archiving |
 | Q13 | W7 survey: synthetic construct corpus and aggregate-only count capability; no seat reads real text or claims a corpus census happened |
@@ -1317,7 +1404,9 @@ renderer does not enable it. No change is imposed on the October27 release.
 
 Alignment note: sage-3121 checks this revision against PRD 1.17 d6,
 SHA-256 `886b93c571f87bfbb2f27ee3113b6800a32d8f89196d95ace33566031bee380a`.
-Connections graph/tests wait for J-b; new non-old-path Markdown stays canon until import;
+That historical d6 alignment is superseded for Connections by landed PRD 1.17 at 30e6bb680:
+REQ-LIB-5/Q239 require W8's list view, ordered before real import under mos-1470.
+New non-old-path Markdown stays canon until import;
 archive folder is human-set in the library mapping with no default.
 
 ## Current verification and remaining gates
@@ -1332,4 +1421,5 @@ append-only logs. No build, browser run, conversion, queue entry or live change
 Jason's format and CSP choices are settled by Q234–Q237. No question repeats Q1 or Q36.
 Before real conversion: Sage's Case 2 PRD amendment (Vikunja 570) needs Jason's approval;
 W4b/W7, Hermes-retired and post-10-27 gates must pass; Jason must explicitly give the first real Melanie-book
-conversion go. These are later authorization gates, not requests to convert anything now.
+conversion go. W8 lands before the human opening step under mos-1470 as build order, not
+an acceptance condition. These are later authorization gates, not requests to convert anything now.

docs/plans/2026-10-22_q195-docx-citations.md

@@ -66,7 +66,11 @@ A Markdown file recreated at a converted old path is unmapped, neither canon nor
 excluded from lookups and flagged to the human. A new Markdown story at a different path in
 a converted book stays canon until import, flagged and offered for human import; no automatic
 conversion. Existing playground scope rules remain. Clickable DOCX editor links stay; no
-DOCX graph exists yet. A Connections graph and its tests wait for Jason's J-b answer.
+DOCX graph exists yet. PRD 1.17 REQ-LIB-5 and Q239 require the Console's Connections view
+to list the current links and backlinks of each story file the user may see, in both
+formats, with each one's scope and format. Parent design W8 owns the view and its tests.
+Mos-1470 orders its landing before W7's first-real-import opening step as build order,
+not an additional REQ-LIB-8 acceptance condition.
 
 Every conversion runs the pinned extractor before archiving and refuses unsupported output.
 An independently reviewed importer preserves every wiki token and front-matter key.