test(cli): compare file bytes in the org tester-init refusal check

Sol review of 221c1e9d3 (P2): the snapshot held only path names, so a
rewrite of .mosaic-org.json before the refusal passed. It now holds names,
types and file bytes; the reviewer's rewrite mutant fails it.

BUILD-LOG.md

@@ -6115,3 +6115,235 @@ runs were joined. Queue remains with the lead after the linked-worktree refusal.
 Local commit only; no push or live instance/credential-file access.
 2026-11-04T17:21:41Z | Codex implementation sub-agent, t3/lifecycle-task-6b | #797 / Gitea #1839 lifecycle Task 6b before/after | Before: origin/refactor 103168614 includes Task 6a intake/staff tools and Task 5a create recovery; Task 4 source 76207fe48 cherry-picked as e41ec8159d23d52963d869abf22fc9d430831f44 with both append-only log sides retained. No checked task/review advancement or durable role continuation recovery existed. After: PM-only submit_prd and advance_request map to exact PRD submission and evidence-derived planning → implementation → review → delivery → complete transitions (changes return to implementation); task-create/assignment, latest project push/review/verdict and closure evidence are rechecked under the request revision and current snapshot. Eligible PM/CTO intake_status path reads expose only selected committed draft documents. Durable continuation intents are keyed by request/revision/target/step and composed atomically with outgoing messages; immutable attempt, manifest and exact launch-refusal receipts deduplicate retries. Message reads never acknowledge progress; validated lifecycle transitions and the chief's delivery effect in the originating assistant session do. Startup/event recovery plus a single-flight 30-second pass bounded to 64 requests catches missed wakeups. Successors receive the same unfinished key, with existing routed/effect receipts rechecked before resending. The launcher starts only the configured chief through its existing launchPm path; workers use that chief's real launch/end authority. Old product manifests drain their current turn, then the chief relaunches with request.admission and real ensureCheckouts. Exact refusals appear as RequestState.launch_refusal for intake-panel integration; no Console panel is present in this base. No synthetic capability, PM launch grant, hire through the empty chief hireable list, roles/*.json change, extra scheduler service, live-instance action, configuration/credential mount or new worker import was added. Six role duty documents updated. Migration 3q-3r is necessary solely to add the checked advanced lifecycle event to the closed request_events kind list; it preserves rows, sequence and all append-only guards, with historical fixture/version pins updated. Corrections: migration digest/pins and one bundle tool-list assertion were updated; notification scheduling was narrowed so reads do not cause unsolicited bootstrap retries; an accidental repository-root npm test invocation reported no test script and was corrected to packages/harness. One broad bus run hit the pre-existing #656 FIFO child niceness 16 vs 19 assertion (also recorded by Task 4); that test passed 21/21 in isolation and the final full bus rerun passed without a source change to it. Final GREEN, zero skips: new 43/43, focused compatibility 56/56, harness 227/227, bus 1512/1512, business 305/305, launcher 36/36; extra sandbox import closure 11/11, git diff --check clean. Logs: /mnt/storage/scratch/tmp/task6b-final-new.log, task6b-final-focused.log, task6b-final-harness.log, task6b-final-bus.log, task6b-final-business.log, task6b-final-launcher.log and task6b-final-sandbox.log in the same directory; earlier failure/isolated logs retained. All test invocations used fresh TMPDIR directories from /mnt/storage/scratch/tmp/XXXXXX. Queue command refused this linked worktree, so no queue movement was attempted in the canonical checkout. One local implementation commit only; no push, merge, release, deployment or live-instance changes.
 2026-11-04T17:57:52Z | Codex implementation sub-agent, t3/lifecycle-task-6b-r2 | #797 / Gitea #1839 Task 6b rebase before/after | Before: local 347791b55 on the superseded Task 4 cherry-pick e41ec8159; origin/refactor is b5a58b48b4c254f166135c24e22bd63ce4b5e0b9 with Task 4 c098fa022, #772 793f3b157, Task 3 and Task 5b. After: replay only 347791b55 on the explicitly requested new branch t3/lifecycle-task-6b-r2; e41ec8159 is dropped. Shipped Task 3 migration 3q-3r and all seventeen existing migration files are byte-identical to the base. New 3r-3s rebuild preserves all fifteen shipped event kinds (including question.asked, question.answered, attach.selected and every Task 4 PRD/mode kind) and adds advanced, for sixteen; schema.sql matches, SCHEMA_VERSION=3s, SCHEMA_SHA256=fde7a46505a964d0e3802aaee96a1e2d9fb8c7163fbafc2f86aca914ecc50f03. The migration test carries rows of every prior kind, preserves a sqlite_sequence high-water mark, index and every request/effect guard, then appends advanced at the next sequence. Current-version, offline-chain and synthetic future-step test pins updated through 3s (future fixture 3t). Conflicts resolved by keeping both behavior sets: broker retains Console owner/verb guards, request question/answer/attach/cancel handlers, Task 5b builtin binding and scoped requirements/git admission, plus 6b advance and continuation services; lifecycle exports the union of Task 3 and 6b operations; runtime retains Task 5b builtin binding and #772 pending-product readiness while adding 6b recovery; harness keeps Task 5b project/snapshot/op schemas and catalog prose while adding 6b tools, with duplicate schema properties removed; six role duty documents merged cleanly and retained; append-only logs keep both sides. Integration corrections: unanswered owner questions suspend new continuation dispatch, answer evidence resumes it, and planning continuations carry the stable create op required by Task 5b. A real Task 5b adapter test creates/assigns the task with that op, advances it and keeps cross-project git refused. First full bus run 1554/1555 found a Task 3 global-zero-effects assertion; it now asserts attach preserves the exact preexisting continuation receipts. Another bus run and isolated #656 control reproduced the existing nice 16 versus 19 race: the installed Node scheduling rule changes startup priority. The owned FIFO child now sets priority after fixture construction immediately before the measured operation; all priority/nonblocking assertions remain intact, no daemon or live instance changed. FIFO 21/21 and final full bus 1555/1555 pass. First WebUI run 537/540, two failures and one skip: missing local esbuild 0.28.2 and one browser refresh timeout; npm ci --ignore-scripts installed only the locked WebUI dependencies, the browser file passes 2/2 in isolation, and whole WebUI passes 540/540 with MOSAIC_REQUIRE_EDITOR_BUILD=1 and test-concurrency=4. An accidental root npm test invocation reported no script and ran no tests; corrected to the bus package. Final GREEN, zero skips/cancellations: new 45/45, bus 1555/1555, harness 228/228, business 307/307, launch 8/8, whole WebUI 540/540. Every test invocation used its own mktemp -d /mnt/storage/scratch/tmp/XXXXXX TMPDIR. Logs /mnt/storage/scratch/tmp/task6b-r2-new-final.log, task6b-r2-bus-final.log, task6b-r2-harness.log, task6b-r2-business.log, task6b-r2-launch.log, task6b-r2-webui-final.log; complete per-run counts in task6b-r2-runs.json and schema evidence in task6b-r2-schema-proof.json in the same directory. No unresolved conflict, role JSON authority change, shipped migration edit, credential/config mount, push, merge, deployment or live-instance action. Queue command again refused this linked worktree; canonical coordination is unchanged. Local rebase only, with no attribution trailers.
+
+2026-11-04 | Codex implementation sub-agent | #803 Console Model proxy in Settings | Before: the owner's native Model proxy page was linked above the Console tree at /proxy. After: Settings links to /settings/model-proxy, whose page links back to Settings; /proxy redirects there only after the existing sign-in, granted-user and named-host fences. The proxy script, fixed API routes, human bus verbs, read and write authority, origin, Fetch Metadata, transport and bounded body checks are unchanged. No secret values are displayed. Tests first: expected red 3 failures (new Settings link, redirect and tester fence), 18 passes, zero skips; final targeted proxy HTTP 13/13, proxy browser 5/5, Settings browser 3/3, whole webui 558/558, zero failures, cancellations or skips. Each test command used a fresh TMPDIR under /mnt/storage/scratch/tmp/XXXXXX; logs /mnt/storage/scratch/tmp/console803-logs/{red,proxy-page,proxy-browser,views,webui}.log. Root dependencies were symlinked and webui dependencies linked per entry without installation. Queue next in this worktree refused the linked checkout; canonical queue next t3 returned nothing, with no queue movement. Local commit only; no push, live configuration or secrets access.
+2026-11-04T18:34:22Z | Codex implementation sub-agent, t3/lifecycle-intake-question | #797 / Gitea #1839 PM intake question before/after | Before: base 647626bdd exposes request.question on the bus but no PM harness tool. After: PM with message.send gets intake_question in both harnesses, forwarding only request, revision, op, text and optional bounded choices; the existing broker enforces exact shape, distinct choice keys, authority and replay. A stable caller-supplied op and exact retry use the broker journal, while bus refusals remain errors and lost/unknown outcomes are reported as unknown with no automatic retry. PM duty prose describes status reconciliation and that answers do not approve a PRD. Red evidence: request-tools red-real.log 19/25, with missing tool and unknown-outcome failures; earlier fixture corrections are retained in the logs. Final gates: harness 234/234, bus 1556/1556, business 307/307, all zero failures/skips/cancellations; tests include both harness manifests, unauthorized roles, invalid input, refusal propagation, unknown outcome, stable-op replay and owner Console answer through the real bus. Logs: /mnt/storage/scratch/tmp/W6Jjos/; each invocation used a fresh TMPDIR from /mnt/storage/scratch/tmp/XXXXXX and pipefail. No bus, role JSON, contract or migration change; local commit only, no push. Canonical queue next t3 returned nothing; coordination stays with the controller.
+2026-11-04 | Codex implementation sub-agent, t3/release-811-migration-reader | Tracker #811 before/after | Before: on base 647626bdd1dbfe0fd5eebd1b0e717a2da8d2a644, the release admission and plan text readers omitted the inline 3p-to-3q and 3r-to-3s pairs, leaving 15 of the engine's 17 starting versions; the .53 Window C plan predicted store-newer for a 3r store. After: both readers recognize separate-line and inline pairs, and malformed key syntax is refused rather than silently skipped; the existing plan refusal for incomplete pairs remains. The regression imports the engine's private migration array through an in-memory test-only export, compares all 17 pairs and their order, exercises mixed layouts and malformed input, and failed on the unmodified script before passing. No store or migration changed. A full release run initially had 17 rehearsal failures because the requested base's rehearsal fixture omitted Task 5b's config imports; the test fixture now copies those dependencies, the affected rehearsal sweep passes, and the full release rerun passes. Final gates, zero skips: release 226/226, external release 25/25, stack-upgrade 34/34, focused rehearsal 21/21; syntax and diff checks passed. Each test run used a fresh TMPDIR from /mnt/storage/scratch/tmp/XXXXXX and fixture services, without Docker or live hosts. Logs: /mnt/storage/scratch/tmp/bqRed6/ (red.log, focused-final.log, stack-release.pre-fixture.log, rehearsal-group.log, stack-release.test.mjs.log, stack-release-external.test.mjs.log, stack-upgrade.test.mjs.log, static.log); interrupted preliminary runs also retained there. Canonical queue next for codex returned nothing; the linked worktree itself refused queue access. Local commit only, no push or live-instance action.
+2026-11-04 | GPT-6.1 Terra implementation sub-agent | #797 / Gitea #1839 lifecycle Task 7b WIP | Implemented reviewed-delivery draft, 6b completion transition, owner attachment and legacy completion handling on t3/lifecycle-task-7b; no migration. Red-first logs and focused evidence under /mnt/storage/scratch/tmp/vWMFoL/. Brief trio 22/22, harness 228/228, business 307/307, seat 239/239, webui 558/558, zero skips on those runs. Whole bus 1566/1569: channel-proof freezes the changed webui transport bytes and two Console whitelist pins omit the mandated artifact verb. Each failing file reproduced alone and passed on 647626bdd. Stopped for lead ruling on the security proof baseline; tests and changes remain uncommitted, no push.
+
+2026-11-04 | GPT-6.1 Terra implementation sub-agent | #797 / Gitea #1839 lifecycle Task 7b | Lead authorized the Console transport proof re-pin after the earlier stop: webui bus.mjs changes only the artifact response cap to 2 MiB, all other Console responses retain 1 MiB, and the focused transport test checks both boundaries and refusal above them. Added owner-only artifact read, reviewed blob and reviewer record.write receipt binding, atomic completion and chief intent, same-artifact duplicate handling, historical complete preservation, safe attachment and evidence panel. Real task.close through the tasks adapter and fake tracker now feeds an end-to-end delivery fixture; coder push_working and reviewer fetch_review use distinct local clones. The downloaded HTML was opened in offline Chromium and matched the reviewed blob and hash. No migration; schema remains 3s. GREEN zero skips: brief 24, bus 1570, harness 228, business 307, seat 239, webui 559; logs /mnt/storage/scratch/tmp/vWMFoL/final-*. Previous bus failure and stop remain recorded above; no push or deployment.
+
+2026-11-04 | GPT-6.1 Terra implementation sub-agent | #797 / Gitea #1839 Task 7b B1 fix round, before | On 1904c9775, review found delivery could combine the planned reviewer closure with a newer unclosed second reviewer verdict. Added two real task.close regressions: unclosed V2 must refuse without completion or chief intent, and closed planned V1 must remain deliverable after another reviewer’s V2. Both reproduced the defect before the fix; red log /mnt/storage/scratch/tmp/cLYQkO/red.log. Queue next refused linked-worktree use; canonical checkout untouched.
+
+2026-11-04 | GPT-6.1 Terra implementation sub-agent | #797 / Gitea #1839 Task 7b B1 fix round, after | Bound delivery to the exact push, planned review, approving verdict and task.closed receipt accepted by request progress. A newer unclosed second-reviewer V2 now refuses without completion or chief intent; the closed planned-reviewer V1 still delivers. Both real-adapter regressions red before and green after (logs /mnt/storage/scratch/tmp/cLYQkO/red.log and green.log). Required gates zero skips: bus 1572/1572, harness 228/228, seat 239/239, webui 559/559; logs /mnt/storage/scratch/tmp/cLYQkO/. The first whole webui attempt had one timeout in decide-browser I1 (558/559); that file passed 9/9 alone on both this branch and 647626bdd, and the whole rerun passed. No proof pin, Console whitelist, transport, policy or schema change; no push.
+
+2026-11-04 | Codex implementation sub-agent | #797 / Gitea #1839 lifecycle Task 8, before | Isolated branch t3/request-lifecycle-task-8-76f8d365 at exact origin/refactor base 76f8d3654faa8f22a96c1857c01c764e9637b1bd. Build the repository-only three-path acceptance harness and process crash recovery with shipped authority, persistent fake external services, real typed tools/Git/Console, plus a guarded explicit-instance live runner. Task 7b complete/delivery/artifact behavior is authoritative. No policy expansion, shipped migration edits, canonical working-tree writes, installs, credentials/config reads, push or live acceptance. Queue next refused linked-worktree access; coordination remains with the lead. Root node_modules linked to canonical dependencies; webui node_modules is a real directory with per-entry symlinks. Gates use fresh mktemp TMPDIR under /mnt/storage/scratch/tmp/XXXXXX and retained logs. Original fixture provenance is an owner-supplied incident quotation, not a runtime row or live receipt.
+
+2026-11-04 | Codex implementation sub-agent | #797 / Gitea #1839 lifecycle Task 8, stopped on brief/base conflict | Task 8 requires attach_existing_and_revise_missing_requirement to attach to an authorized existing product, reuse a matching approved snapshot or revise when missing, and deliver without creating another project. At exact base 76f8d365 the shipped hostPreparation in packages/bus/src/request-host.mjs supplies only preparePlans/admitPlan; neither it nor runtime/broker supplies listProjects or prepareExisting. request-lifecycle projects() therefore returns [] for every production-host picker; attachment refuses request-project-refused. The existing-path unit fixtures inject both missing services. Even with those test-only injections, selection.confirmed explicitly leaves existing associations in discovery/request-attachment-unavailable; runBootstrap skips existing bindings, and no shipped transition adopts the existing approved snapshot. Reproduction: /mnt/storage/scratch/tmp/fayxaI/attach-contract.test.mjs starts the real file-backed runtime with shipped role definitions and scopedFixture (only SCOPES imported from world, no permissive AUTHORITY/world broker), bootstraps timer through actual owner selection and product PRD approval, proves its snapshot resolves, opens a second request and resolves existing through authenticated Console verbs. Expected picker includes timer; actual []. Retained log /mnt/storage/scratch/tmp/fayxaI/attach-contract-red.log: 0 pass, 1 assertion failure, 0 skips/cancellations; fresh mktemp TMPDIR under /mnt/storage/scratch/tmp/XXXXXX with pipefail. This is a deterministic missing host capability, not a load failure. Per explicit assignment rule, no implementation chosen or production behavior changed; remaining harness/live-runner work and broad gates not run, no commit because acceptance is not green. Lead resolution needed: authorize Task 8 to implement the missing existing-product host preparation/attachment/snapshot-adoption path, or provide a revised base/brief that supplies it. No roles, ROUTED, security boundary, shipped migration, canonical tree, real credential/config or live host touched.
+
+2026-11-04 | Codex implementation sub-agent | #797 / Gitea #1839 lifecycle Task 8a, after | Lead ruled the missing existing-project host path an in-scope gap at 76f8d365, superseding the stop without changing its record. Wired the shipped host inventory/preparation to current owner/business mapping, project config, admitted product registry and existing role/tracker/mode authority. Picker rows carry the organization mapping revision; only the server retains the displayed inventory, and the owner pick journals that revision. A host restart before picking requires a fresh read. The exact current mapping, source commit, existing paths, tracker, staff and mode form the confirmation; stale picker, pick or confirmation refuses. Attachment holds the organization lock and processing lease through validation and its atomic bootstrap-kind receipt, creating no resource. A validated active product snapshot with the same exact original intent is a conservative proven fit and is adopted without a new approval; other intent enters PM discovery/revision, and the new attached request cannot borrow the older active snapshot for task creation. This adds bounded request binding under existing authority, no role, action, capability, ROUTED, Console whitelist, transport proof or security boundary change. Existing bootstrap.completed and attach.selected payloads gain optional host-validated attachment fields; historical rows are unchanged, no new event kind/table or migration, schema remains 3s. Retry after temporary records-read refusal now resumes instead of getting stuck in an invalid transition. README documents freshness and the conservative fit rule. Red logs: 8a-red.log (6/6 fail), 8a-red-scope-http.log (borrowed snapshot accepted; HTTP fixture initially missed log callback), corrected 8a-red-http.log (revision absent), 8a-red-retry.log (working-file dirt was not a valid committed-read refusal), corrected 8a-red-retry-real.log (repair could not resume). Original retained diagnostic went red-to-green; focused compatibility 105/105, final new tests 8/8. Final required gates, zero failures/cancellations/skips: bus 1580/1580; harness npm test 234/234; business npm test 307/307; seat npm test 239/239; whole webui node --test tests/ with concurrency 4 and MOSAIC_REQUIRE_EDITOR_BUILD=1 563/563. All commands had fresh mktemp TMPDIR under /mnt/storage/scratch/tmp/XXXXXX and pipefail; logs /mnt/storage/scratch/tmp/UMYC56/8a-final-{bus,harness,business,seat,webui}.log, 8a-green-final.log, 8a-static.log. Earlier green runs retained separately. Changed-module syntax, relative imports, documentation/reference review and git diff --check pass. Root dependency link and real webui directory of per-entry links only, no install. Pending before/stop SESSIONS and BUILD-LOG lines included as instructed. Local Task 8a commit only; Task 8b and lead-only live window remain.
+
+2026-11-04 | Codex implementation sub-agent | #797 / Gitea #1839 lifecycle Task 8b, before/after | Before: Task 8a local 81e54bf4d82f670c5c2aba947e650bc5d74a90f2 supplies the missing host path, but there was no three-path process acceptance fixture, standalone offline timer acceptance or guarded live runner. After: added the original owner-supplied quotation with its unchanged source IDs/SHA/provenance and an explicit distinction from newly generated runtime input/message IDs; real file-backed startBroker in a killable process; persistent parent FakeVikunja HTTP service with scoped fake credentials and valid isolated organization; shipped role definitions, real chief launch authority/limits, resolver/bundles/session manifests, independently spawned typed-tool callers, real record/PRD/task validation, Git socket/bundles, separate coder/reviewer workspaces and run identities, independent committed Node timer test execution, and signed-in fake-OP Console HTTP/browser actions. Scripted model responses supply agent-proposed 25/5 durations, start/pause/reset and a gesture-enabled cue only through the approved product PRD. The coder writes actual self-contained HTML, with request/snapshot provenance metadata; the reviewer fetches that exact commit, runs its test and writes the verification record before its verdict. Real close/deliver and chief → assistant → user messages complete the reviewed local delivery; no merge, remote publish or deployment is implied. Autonomous original-wording, guided question/reject/revise/exact approval, existing matching snapshot and missing-requirement revision, cancellation and mode change during approval all pass. Eight hard process crashes (selection resolution, mapping, intent/spec commit, PRD resolution, tracker POST, working push, review verdict, export before notification) restart over the same on-disk Store/repositories and surviving fake service; tests require unchanged historical rows, identical known IDs/commits and one product/task/artifact. A hidden remote POST outcome stays uncertain without a replacement POST or delivery claim and continues once proof is readable. Chromium controls time and verifies work/break transitions, pause/resume/reset, cue after a user gesture and no external requests while offline. Fixture success is integration/recovery evidence, not live model quality or deployment readiness.
+
+Task 8b defects reproduced before fixes: owner answer/attach/cancel controls on assistant-origin requests tried to thread a human→PM message into the assistant session, correctly refused by SQLite; controls now use the PM inbox unless the origin session is itself PM-owned, leaving the original request/session binding and message graph intact. Cancellation in PRD review previously selected the closed bootstrap decision; it now withdraws only the request's exact current pending PRD decision, with existing owner, PM, project and messaging checks. Targeted production regressions 2/2 red then green (8b-red-controls.log, 8b-green-controls.log). No schema/migration, shipped role JSON, ROUTED, capability, Console whitelist, transport-proof or security-boundary change. Existing bootstrap.completed/attach.selected extension from 8a remains schema 3s. New live-runner preflight tests 2/2 red then green. Repository live runner requires an explicit named isolated development instance, matching marker/config, expected business owner, existing staff/source/tracker/host, owner process proof and explicit run authorization before submission; it never starts hosts, supplies mode/PRD approval, provisions accounts/boards/grants, retries an unknown submission, or defaults to .53/.54/production. It retains request revisions and review/task/download receipts; exact artifact hash/length are checked separately from live browser acceptance.
+
+Task 8b verification corrections: early harness runs exposed fixture cleanup ordering, unchanged record writes, globally reused create ops, missing persisted launch proof fields, a reused commit with nothing to push, a cross-request timestamp assertion and a missing empty owner-audit file. Those were corrected with the same strict production APIs; logs 8b-autonomous-*.log, 8b-integration-{1,2,4}.log and 8b-paths-recovery-3.log remain. The first autonomous prototype run was interrupted after a cleanup hang; it is recorded as a cancellation, not a passing run. Final required two-file acceptance run 16/16, zero skips/cancellations (8b-integration-final.log). Full CLI first run: 1192 tests, 1139 pass, 52 fail, 1 skip (8b-cli.log). Every failing file reproduced alone: lifecycle, proxy-launch-order, session-clear, thread-launch and thread-revoke (isolated-*.test.mjs.log). Their trusted-host fixtures lacked the request-host operations already used by the landed launcher. A shared test-only forwarding table now calls the actual runtime methods, with no unconditional allow/ready result; all 60 affected tests pass (8b-launcher-fixture-green.log, 8b-thread-fixture-green.log). The ordinary CLI suite intentionally skips R7; the final full npm run enabled R7 under an isolated fake HOME and its existing group/port/socket cleanup wrapper, adapted outside the repo only to run the complete suite. No federation/proof policy or production script changed. Final CLI 1192/1192, zero skips, with R7 acceptance and clean child/listener cleanup (8b-cli-final.log).
+
+Task 8b final whole-package gates, all zero failures/cancellations/skips: bus 1582; CLI 1192; tasks 132; project 50; harness npm test 234; business npm test 307; seat npm test 239; whole WebUI node --test tests/ with concurrency 4 and MOSAIC_REQUIRE_EDITOR_BUILD=1 564. Total 4300. Every test/gate invocation used fresh mktemp TMPDIR under /mnt/storage/scratch/tmp/XXXXXX, pipefail and retained logs; no install. Root node_modules remains a link; WebUI node_modules remains a real directory of per-entry links. Gate matrix /mnt/storage/scratch/tmp/tupyBK/8b-gate-results.json; 16 case-labeled immutable evidence sets indexed by /mnt/storage/scratch/tmp/tupyBK/8b-acceptance-evidence-index.json, including artifact bytes, original quote, live fixture IDs, histories, manifests, coder/reviewer test logs and crash-lock proof. Syntax, import/Markdown references, whitespace and byte preservation of shipped authority/migrations passed (8b-static-final.log). Self-review performed; no sub-agent/delegate was started. Queue coordination remains with the lead after the linked-worktree refusal. Local second commit only; no push or canonical working-tree/live-instance/real-credential action.
+
+Lead-only live window checks, not executed here: (1) explicitly authorize and select a named isolated development instance on .53 with its own data root/marker, installed source/board, scoped credentials, real PM/CTO/chief/coder/reviewer/assistant routes and signed-in owner Console; retain preflight and refuse any missing resource rather than provision it. (2) Run packages/cli/live/request-lifecycle.mjs with explicit --instance, --config, --business, --owner, --request-file and --evidence plus --authorize-isolated-run, from a genuine owner shell so the existing process proof applies; use --submit with an existing owned --thread, or observe the owner's existing --request. The owner selects/confirms the exact displayed autonomous plan once in Console. No user relay, manual task creation or worker shell command is part of the lifecycle. (3) Retain original request/message bytes, exact plan confirmation, approved snapshot/decision, tracker create/assignment, working commit, independent reviewer fetch/test/record/verdict, matching closure, delivery and chief/assistant notification; check identical project/snapshot/task/commit/review/verdict IDs across the chain. (4) Download through the owner-only Console URL, rerun observation with --request and --artifact, and require byte length/SHA to equal the reviewed delivery. Open that downloaded HTML with network disabled and verify the approved durations, start, pause/resume/reset, both transitions and the phase-end cue after Start, with no external requests/assets. Inspect actual independent model/session/test receipts before declaring live acceptance. (5) If live crash checks are authorized, kill only the owned isolated broker at the eight named checkpoints; preserve DB/WAL/SHM and repositories. Follow the existing operator rule: establish the exact writer PID is dead, retain its lock identity, and explicitly remove only the stale lock/socket before supported restart. There is no production automatic stale-lock reclaim and this task does not add one. Require unchanged historical rows, identical known IDs/commits and no duplicate project/task/artifact; an unprovable remote outcome must remain a visible wait. Full invocation and qualifications are in packages/cli/live/README.md. Stage 4 live acceptance remains with the lead.
+
+2026-11-04 | Lead Codex, #815 / Gitea #1843 chat-channel recovery before | Owner /chat screenshots show failed read plus false empty state and Create project channel-disabled. Read-only .53 checks: plugins.channel absent; existing usage-source transcript and harness claude-code retained; Console journal has matching refusal; existing typed tester plugins API is authorized. Failure precedes project dispatch. Plan: typed tester channel-only correction with private config backup/readback and no restart; Codex source fix for factory channel declaration and accurate failure UI, tests/review before integration. No signed-owner workflow or schema/role/secret change.
+
+2026-11-04 | Lead Codex, #815 / Gitea #1843 live configuration outcome | Operator enabled cli+webui through pinned 51525a31d tester plugin setter at 22:43:43Z, transaction e94c4db7-c3e3-4d31-825f-0b204a1ccf76; committed actor tester, only plugins.channel changed, other configuration deeply equal. Private backup/rollback report: /mnt/storage/scratch/mosaic-lead/reports/chat-channel-815.md. Lead independently verified configured channels, committed receipt and real tester WebUI GET /api/chat/projects HTTP 200. Services retained PIDs; no deployment/schema/credential/model/role change or owner workflow. Source regression fix remains active and issue open.
+
+2026-11-04 | Codex implementation sub-agent | #815 / Gitea #1843 Task 2, before (recorded during implementation) | Started in T3-prepared branch t3/channel-disabled-chat-recovery at controller base 3572bf9b32f414283686e828155ae859a45c537e, source baseline 51525a31d. Scope: explicit Case 1 CLI/WebUI opt-in and Console channel-refusal/failed-read recovery; preserve global defaults, enforcement and no-tracker starter. Controller owns coordination and live repair; no live config, role, queue or transport changes.
+2026-11-04 | Codex implementation sub-agent | #815 / Gitea #1843 Task 2, after | Case 1 explicitly opts into cli and webui; no-tracker starter and global defaults remain unchanged. Console renders a fixed disabled-channel explanation, retains in-memory drafts and distinguishes definite refusal from unknown outcome, disables known-refused creation/send actions, marks cached reads stale and does not claim empty on failed reads. TDD red logs and green gates under /mnt/storage/scratch/tmp/mosaic-815-logs/: final targeted chat/room HTTP and Chromium 100/100, full WebUI with MOSAIC_REQUIRE_EDITOR_BUILD=1 574/574, business 307/307, zero skips/cancellations. First full WebUI after root npm ci: 569 passed, 1 missing WebUI esbuild failure, 1 editor-build skip; WebUI lockfile install restored the pinned dependency. Concurrent run: 571/572 with one unrelated decide-browser I1 wait timeout; isolated decide-browser 9/9, subsequent full gate green. Superseded full gates were stopped when later regression corrections changed the source. No bus.mjs/proof pin, role, policy, auth, live host/config, queue, push or deployment change. Draft recovery tested through the Console Refresh action; full browser reload does not persist in-memory drafts.
+2026-11-04 | Codex implementation sub-agent | #815 / Gitea #1843 source fix round 1, stopped | At base 5558fe020 reproduced room channel state loss and sticky legacy-session controls in real Chromium, then made the scoped state corrections; focused red/green logs and the 47/47 covering-browser pass are under /mnt/storage/scratch/tmp/mosaic-815-r1/. The single authorized full WebUI run with MOSAIC_REQUIRE_EDITOR_BUILD=1 and concurrency 2 finished 575/576, zero skips/cancellations: unrelated thread-claims-browser row278 timed out waiting for its table; that entire file then passed 6/6 alone. The unchanged vendored-editor import warning remained, and the editor rebuild passed. No commit: the full applicable suite is not green, and the brief specified one full run. Controller owns the decision on further verification. Minor cached-room stale-label finding remains unchanged. No live, bus/proof, authentication, policy, role, schema, tracker, push, merge or PR change.
+
+2026-11-04 | #815 / Gitea #1843 source fix round 1 controller verification | Existing authorization covered another verification run after the unchanged row278 browser timeout. Same command and test settings: MOSAIC_REQUIRE_EDITOR_BUILD=1 node --test --test-concurrency=2 packages/webui/tests/; 576 passed, zero failures/cancellations/skips, required editor rebuild passed, duration 168128 ms. Source/test blob hashes unchanged from pre-run snapshot; no test weakening or unrelated source changes. Both earlier full failure and isolated 6/6 evidence retained. Log: /mnt/storage/scratch/tmp/mosaic-815-r1/full-webui-controller-retry.log. Local commit now permitted; independent I1/I2 re-review next.
+
+2026-11-04 | #815 / Gitea #1843 integration phase started | Independent scoped re-review APPROVE at a1ba9cd5669cf084ef69eb663b42234fbce38824: I1/I2 addressed; no new critical/important finding. Applied only the five reviewed source/test/template paths to refactor and appended worker records while preserving all existing controller log bytes. Entire tracked source outside BUILD-LOG/SESSIONS matches the reviewed candidate. Running final canonical WebUI gate and factory regression before commit/push. M1 cached-room stale label and M2 unchanged tooling/audit observations remain deferred/nonblocking. No deployment or owner acceptance.
+
+2026-11-04 | #815 / Gitea #1843 integration phase verified | Canonical full WebUI: MOSAIC_REQUIRE_EDITOR_BUILD=1 node --test --test-concurrency=2 packages/webui/tests/ passed 576/576, zero failures/cancellations/skips, required editor rebuild passed (171530 ms); factory regression passed 8/8, zero failures/cancellations/skips. Logs: /mnt/storage/scratch/tmp/mosaic-815-r1/full-webui-canonical.log and factory-canonical.log. Entire source outside append-only logs still equals independently approved candidate a1ba9cd56. Prior full business 307/307 applies to identical business/template source. All existing controller and worker log bytes preserved. Committing and pushing the reviewed repair under the established plan; source deployment and owner PRD-to-artifact acceptance remain separate. Known in-memory full-reload draft loss, minor cached-room stale-label omission and unchanged tooling observations retained.
+
+2026-11-04 | #816 / Gitea #1844 design phase started | Owner supplied current Chat/project/thread screenshots and familiar chat references, specifying Projects navigation, expandable project/session sidebar, customizable display, project KPI dashboard, in-project issues and north-star/PRD access, PRD agent alerts, and room broadcast. Begin design-only collaboration, then wireframes and generated images. Mobbin research follows owner connection; no application implementation, PRD/schema/policy changes or live operations. Brief: docs/plans/2026-11-04_projects-workspace-design-brief.md.
+
+2026-11-04 | #816 / Gitea #1844 wireframe draft phase | Navigation and autonomous-conversation reports align on project tree, distinct dashboard/disclosure actions, breadcrumbs and conversational work cards. First design artifact at /mnt/storage/scratch/mosaic-lead/design/projects-816/projects-wireframe.html; previewed desktop/mobile and checked local navigation/audience interactions. Dashboard detail remains provisional while its designer finishes. No application code or live change; wireframe example data and proposed capabilities are labeled.
+
+2026-11-04 | #816 / Gitea #1844 initial design phase delivered | Combined all three GPT reports into design-synthesis.md and reconciled v2 wireframes. Desktop/mobile preview and local state checks passed for navigation/disclosure, decisions/confirmation, local delivery, unavailable KPIs and room audience. Built-in image generation produced selected dashboard-v1.png, conversation-v2.png and room-v1.png; originals/variants and exact prompts retained, dimensions/SHA manifest recorded. Pack: /mnt/storage/scratch/mosaic-lead/design/projects-816/design-pack.md. This is a design draft for feedback; Mobbin research remains pending connection, not complete or approved implementation. Mandatory Git wrapper refused the #1844 update due to missing acting identity; prepared comment retained and Vikunja #816 updated without bypass. No application, PRD, schema, authority, credential or live change.
+
+2026-11-04 | #816 / #797 owner full-send parallel phase started | Owner requested independent UX Lead and MVP 3 Lead sessions. Both launched in separate T3-prepared worktrees at e9271841f, read back running; UX confirmed Mobbin search. Disjoint source/artifact ownership, preserved read-only initial reference manifest, separate status files, root-only canonical integration. Design work cannot modify application source and does not block functional repairs. Current browser capture unavailable in UX lane; supplied screenshots remain usable. Repository-native worktree/storage rules take precedence over generic estate prefix; /var/src creation denied, disk-backed /mnt/storage task storage retained. No live change or acceptance claim.
+
+2026-11-04 | #816 / #797 parallel phase evidence milestone | Independent visual baseline assessments verified against preserved references; method corrections and reviewer dissent retained without author disclosure. UX is finishing a new wireframe state package and independent review, with frozen manifest required before assessment. MVP reported an isolated source candidate with retained RED evidence and scoped gate; full-package checks and exact-candidate review remain in progress. Root made no application source, runtime, credential, deployment or acceptance change.
+
+2026-11-04 | #818 reusable UX improvement skill phase chartered | Owner requested reusable personal/distributable skill. New isolated GPT author owns skills/ms-ux-improvement and package-focused behavioral checks; root owns independent review/integration. Existing frontend-design guidance remains intact; no mandatory subscription/provider dependencies. Candidate is not yet reviewed, installed, activated or published. Active UX and MVP lanes continue without overlapping paths.
+
+2026-11-04 | #797 / Gitea #1839 R2 integration phase started | Exact patch18ff6455 verified, fresh R2 APPROVE and4333 distinct required local cases observed through retained normal-exit receipts; the one ordinary FEDR7 skip is covered by its dedicated standard wrapper. Apply only12 reviewed non-log paths on e9271841f, preserve/import candidate log suffixes and keep UX/skill source separate. Native Git transport currently refuses anonymous-credential-refused despite owner-confirmed Mos API identity; no helper/launcher bypass or live action authorized by this integration.
+
+2026-11-04 | Codex Terra implementation sub-agent | #797 / #1839 MVP 3 functional repair, before | T3 isolated checkout at e9271841f3af23bf2a72aa17d9d67a1ec5abe017; charter /mnt/storage/scratch/mosaic-lead/mvp3/functional-repair-plan.md. Reproduce late evidence, reviewer contract ordering, linked relay and requirement guidance before bounded fixes; preserve authorization and immutable receipts. Queue refused linked worktree; no canonical or queue access. Pinned npm ci only; no commit, forge, live or protected operations.
+2026-11-04 | Codex Terra implementation sub-agent | #797 / #1839 MVP 3 functional repair, after | At e9271841f3af23bf2a72aa17d9d67a1ec5abe017 reproduced premature PM continuation stalls, missing first review JSON contract, missing linked request header, and absent typed requirement example. Added evidence-keyed durable wakeups, overlapping recovery handling, lifecycle review guidance, owner/thread/role-checked relay provenance and requirement guidance. Focused RED/GREEN, cross-owner and removed-role negatives, late-record refusal and both harness prompts retained under /mnt/storage/scratch/mosaic-lead/mvp3/repair-author/. Final bus/harness/tasks/project/business/seat and relevant CLI gate: 2610 passed, 0 failed/cancelled/skipped, concurrency 2, MOSAIC_REQUIRE_EDITOR_BUILD=1 and private /mnt/storage/scratch/mosaic-lead/mvp3/a9. Earlier long-path suite refused Unix sockets and was interrupted (2591 pass, 88 fail, 75 cancelled, 1 skip); shorter-path lifecycle and three launcher reproductions passed. Two later intermediate suites were interrupted for newly reproduced provenance/claim races; all logs retained. No commit, push, forge, canonical, configuration, role JSON, schema or live change; independent exact-candidate review and lead's broader gates remain.
+
+2026-11-04 — MVP 3 independent lead candidate validation (#797/#1839): applying the byte-verified Terra candidate d8ef58ffc06b63e34d5e4e056898523fdb43643b933edcf3ed45135a2cc922b6 to the isolated lead worktree for broader local verification; canonical integration/live acceptance not performed. Author RED/GREEN retained; independent review pending.
+
+2026-11-04 — MVP 3 R1 remediation (#797/#1839): lead confirmed retained-history128/257 wake race with RED tests and repaired recovery to retain a complete reinspection cycle in bounded batches after overlap. Reviewer scratch plus source regressions and quiescent control4/4GREEN. Source remains uncommitted/unintegrated. Earlier parent broad run was mixed-candidate, ended143 without root terminal summary, and is not a final gate; excludedCLI compactions/revoke retry under short authorized TMPDIR passed6/6. R2 candidate and matching full-package verification pending.
+
+2026-11-04 | #797 / Gitea #1839 R2 canonical integration verified | All12 non-log files equal independently approved/tested source manifest6daf0668101bbad030c45411304d0d049de5e4da32bdcb03c40095ed1c63128f;8 JS syntax checks and whitespace check passed. Canonical prior log bytes preserved and candidate author/lead suffixes appended. Retained gate coverage4333 distinct cases plus independent115 focused checks applies to identical source; no duplicate broad test run. Commit/publish and deployment remain separate operations; no live acceptance claimed.
+
+2026-11-04 | #818 / Gitea #1845 skill integration phase started | Independently approved candidate02, exact3-file manifestb93d7836 and14 package-focused checks; fresh forward-use artifacts and synthetic/single-model limits retained. Integrate only new skills/ms-ux-improvement plus append-only records. No application/source-family overlap, installation, activation or publication.
+
+
+## 2026-11-05 — UX improvement skill author phase (Vikunja #818; related Gitea #1844)
+
+Before: clean isolated checkout at e9271841f3af23bf2a72aa17d9d67a1ec5abe017; no UX improvement skill. Scope: personally author skills/ms-ux-improvement, retain baseline/forward evidence at /mnt/storage/scratch/mosaic-lead/skill-ux-improvement/author/run-20261105T022125Z. Queue next refused linked worktree (exit 2); direct owner charter governs without queue/forge writes. Package-focused checks only; no application suites, commit, activation or publication.
+
+
+## 2026-11-05 — UX improvement skill author phase completed (Vikunja #818; related Gitea #1844)
+
+After: personally authored three-file skills/ms-ux-improvement coordinator package, complementary to existing frontend execution guidance; final candidate-02 content manifest b93d7836ed7c70db62386192d6e1db5c4f867f841aaa7645c3c861def5a9b140. Retained 19 bounded clean-context behavioral samples / 186 raw files: six unguided baselines, seven candidate-01 samples including ready-review control, six candidate-02 samples. Candidate-01's two unnecessary frozen-method recovery conditions and already-correct control remain recorded; narrowed wording and final tests show no extra gate, without causal/statistical improvement claim. Fresh package-focused skill-creator/resource validation passed for workspace, frozen snapshot and scratch copy; patch/whitespace, arithmetic, integrity, unchanged baseline and append-only ownership checks passed. Entry 637 words (2,210 total) and one-model synthetic/procedural-scope limits retained as author concerns. Exact source, patch, hashes, commands, raw evidence and independent-review brief: /mnt/storage/scratch/mosaic-lead/skill-ux-improvement/author/run-20261105T022125Z/HANDOFF.md. Author task complete; independent source approval pending. No application suites, commits, forge/queue writes, publication, installation, runtime activation or protected actions.
+
+2026-11-04 | #818 / Gitea #1845 canonical skill integration verified | Exact3 reviewed Markdown files match source hashes; canonical skill-creator validator and whitespace checks pass. Independent review APPROVE/no findings,14 focused checks and a fresh bounded forward-use handoff retained. All prior canonical and author log bytes preserved. Package is available in source by explicit path; no managed/personal installation, activation, publication or user-acceptance claim. MVP activation remains pinned to parentbd8120318, independent of this skill commit.
+
+## 2026-11-05 — MVP 3 relay fixes (#797 / #1839), author phase
+
+Before: isolated checkout at 05fdfef9ea1fdddf58c725c04f229ca8559fc054, branch fix/mvp3-relay-797; live acceptance diagnosis identified configured-chief addressing, misleading relay receipts, bootstrap approval wording, and premature-staffing wording. Direct charter authorizes bounded implementation, tests and local commit only. Queue next refused linked worktree; no queue, forge, push or live action. F2 regression reproduced null receipt before repair; scratch evidence and final gate will be recorded in /mnt/storage/scratch/mosaic-lead/mvp3/relay-fix-r1-report.md.
+
+## 2026-11-05 — MVP 3 relay fixes (#797 / #1839), author phase completed
+
+After: assistant addresses the configured chief instance; role-send receipts derive provenance from the stored message and existing reply-chain checks; PM and chief guidance describes the existing bound bootstrap decision and request-based staffing before task creation. No role JSON, schema, policy or alias change. F2 whole-file regression was red (7 pass, 1 fail: null relay receipt) then green (8 pass), with unlinked, wrong-recipient and caller-supplied-ID negatives; threaded reply file passed 20/20. Final whole-suite gates: bus on Node 24.22.1 1596/1596; harness 242/242; business 307/307; 37 additional broker-importer files 512/512; zero failures, cancellations or skips. Original Node 26 bus attempt was interrupted after project-files stalled in a socket send: 1593 pass, one cancelled; that whole file passed 8/8 on Node 24.22.1 and the complete bus suite was rerun. Scratch TMPDIR, exact commands and logs: /mnt/storage/scratch/mosaic-lead/mvp3/relay-fix-r1-report.md. Local commit authorized; independent review and all publication or live actions remain outside this author phase.
+
+## 2026-11-05 — MVP 3 relay R2 trusted coordinator context (#797 / #1839)
+
+Before: isolated branch fix/mvp3-relay-797-r2 from 29a3cc63238307d8644447c67a0364a6b03dfa36. Independent R1 review's sole CHANGES finding: owner-started assistants could not discover an arbitrary configured chief key, especially offline. Direct R2 charter authorizes trusted generated routing context, offline swapped-key integration evidence, required tests, append-only records and a local commit; no push or live action. Queue read refused linked worktree, then canonical read returned nothing; no queue mutation.
+
+After: assistant-only resolved coordinator context comes from validated launch.by and the coordinator's optional configured identity.name. The generated prompt names the exact instance key and role guidance uses it explicitly; no-launch context reports a blocker. Broker source, messaging policy, recipient checks and role JSON are unchanged. Config-to-bundle-to-broker integration covers owner-launched assistant, offline chief, violet/opal definition swap, descriptive name, ignored session override, correct stored recipient/provenance, forbidden CIO and definition-alias refusals. Required whole-file gate 321/321 and additional content/path/bundle checks 124/124 on Node 24.22.1; final touched bundle file 24/24, all zero failures/cancellations/skips. Existing digest machinery covers assistant coordinator and prompt bytes; no literal changed-source hash pin required an update. Original reviewer probes 12/13 because their F1 deepEqual asserts the diagnosed defect; preserved original and a scratch copy changing only that assertion to notDeepEqual passed 13/13, including F1. Initial added fixture runs had two setup mistakes (missing store directory, thread claims absent from agents); corrected. Initial related run 79/124 had missing local dependencies and one Claude style-hook assertion; npm ci from the unchanged lockfile followed by the same whole-group rerun passed 124/124. Scratch evidence: /mnt/storage/scratch/tmp/0T6C89; exact commands and limits: /mnt/storage/scratch/mosaic-lead/mvp3/relay-fix-r2-report.md. Local commit only; independent exact-candidate review remains.
+
+## 2026-11-05 — MVP 3 planning coverage implementation started (#797)
+
+Before: pinned 05fdfef9ea1fdddf58c725c04f229ca8559fc054; live b1869a13 has five approved requirements but one singly cited task. Scope: preserve scalar task schema, surface exact uncovered IDs to PM, clarify planning versus push evidence, diagnose coder stop and report D3–D5. Local branch only; no push, merge, runtime writes or role authority changes. Queue refused in linked worktree; direct implementation charter governs this child.
+
+## 2026-11-05 — MVP 3 planning coverage implementation ready for review (#797)
+
+After: preserve the scalar task requirement schema and fail-closed coverage gate; incomplete advance now sends a deduplicated PM bus notice naming every uncovered id and explaining correction, task-limit reconciliation and why a push cannot clear coverage. PM contract, task_create description and planning continuation state the same rule. Five-requirement regression proves prose/push do not cover missing ids, retries do not flood, changed coverage updates the notice, and complete assigned coverage advances without pushes for the other tasks. Focused whole files: 52 pass/0 fail/0 skip; scoped/lifecycle/import/role regressions: 115 pass/0 fail/0 skip; dependency/path/closure files: 61 pass/0 fail/0 skip (228 total). Initial fixture run: 51 pass/1 fail (new test used an invalid PRD author; corrected to pm.pm). Initial path checks: 28 pass/23 fail from absent worktree node_modules; canonical dependency versions matched package.json, linked locally, then all 61 passed. Read-only .53 evidence identifies proxy-stall watchdog as coder stop cause; D2–D5 remain report-only follow-ups. Detailed commands, receipts, limitations and exact commit: /mnt/storage/scratch/mosaic-lead/mvp3/planning-gate-fix-r1-report.md. No push, merge, runtime write, role authority expansion or product-acceptance claim.
+
+## 2026-11-05 — MVP 3 coder first-activity watchdog correction (#797), implementation handoff
+
+Before: isolated branch fix/mvp3-coder-stall-797 starts at 05fdfef9ea1fdddf58c725c04f229ca8559fc054. Claude text-mode stdout appeared only at the final answer, so the 120-second first-output watchdog could stop productive thinking/tool work (D2 in planning-gate-fix-r1-report.md). Explicit child charter authorizes a local implementation/test/commit only; queue next codex refused this linked worktree, with no workaround or queue mutation.
+
+After: Claude's private stream-json reader marks real upstream assistant events and emits only the successful final text, matching real CLI newline semantics byte for byte. Pi's existing extension also marks model text/thinking/tool deltas; mock remains a test-only immediate echo. Both reuse the existing exclusive 0600 proxy-first-output marker with fixed output\n content; init/status, synthetic CLI errors, tool results, stderr and workspace writes do not count. Runner supplies only its existing run directory; helper gets a read-only harness mount and bundle source digest. No timeout, schema, role authority, credential, proxy management or live state changed. Silent runs still stop with proxy-stall; interrupted first/resumed turns emit no partial answer or successful new session ID.
+
+Verification: Node v24.22.1 with PATH pinned to /mnt/storage/scratch/tmp/z62zsJ/node24/node_modules/node-linux-x64/bin and fresh TMPDIR from mktemp -d /mnt/storage/scratch/tmp/XXXXXX. Final full 28-file command: 376 passed, 0 failed/cancelled/skipped/todo, test-concurrency=4 (coder-stall-final-r2.tap). Includes full launcher/model-stall, harness runner/bundle, seat session/sandbox, real Claude/Pi adapter, confinement, installer/copy, source-digest and import-closure checks. Delayed tool/thinking/header/assistant fixtures use 0.8-second injected watchdog and 1.4-second pre-answer work. Initial tests retained: missing test import and failed-result exit handling, real text-mode trailing-newline difference, then a combined-gate grandchild-reaping assertion race; all corrected and full final gate green. Whitespace and baseline log-prefix preservation checks pass. Report, exact commands, SHA256 manifest, scans and all TAP receipts: /mnt/storage/scratch/mosaic-lead/mvp3/coder-stall-fix-r1-report.md and coder-stall-* siblings. Local commit follows these green suites. Independent exact-commit review, CI/integration and deployment/live GLM acceptance remain with the lead; no push, stash, fleet operation or external message.
+
+
+## 2026-11-05 — MVP 3 coder-stall review F1 correction (#797), local implementation handoff
+
+Before: candidate 1bd0077391f1925db5e66796b98540e48f13bfc2 discarded complete error-typed result strings, losing text-mode stdout such as API Error: 400 review-local-api-error with exit 1. Restoring that output also required preventing the runner's generic stdout fallback from mistaking synthetic errors for model activity. Explicit correction charter authorizes one local follow-up commit on fix/mvp3-coder-stall-797; the linked-worktree queue refusal was diagnosed and left intact.
+
+After: the private stream reader renders every complete final result string independently of success/failure, retains CLI nonzero exit codes, fails error-typed zero-exit turns, and withholds result text on stream-integrity/helper marker failures. The adapter's existing success-only session persistence remains unchanged. The Claude plugin declares adapter-owned activity in its existing bundle environment; the runner reads module metadata, ignores ambient declarations and keeps stdout fallback for Pi/worker/mock paths. No core harness-name conditional, watchdog timing/default, broker, roles, contracts, policy or live state change. Bundle tests pin the helper SHA-256 to 9c2cc28b7e719c1d49913401fffc952759d8633e50ae39ca36bfc50729b9415b.
+
+Verification: before product edits, whole-file negative controls on 1bd007739 passed 68 and failed 7; the real installed Claude CLI HTTP 400 test failed on empty streaming stdout versus 38 text-mode bytes. It now passes with identical stdout bytes and exit 1, no activity marker and no new session ID, using only localhost, isolated HOME/configuration and a dummy key. Added subtype/is_error/nonzero controls, corrupt-after-result/oversized/truncated/helper marker-failure cases and real runner fallback controls. Final frozen gate: 414 passed, 0 failed/skipped/cancelled/todo across 31 whole files, one node --test invocation per file, at most two concurrently. Node v24.22.1 on the requested PATH; set -o pipefail and fresh scratch TMPDIR. The initial broad gate's sole architecture failure (412/413) is retained honestly; moved the declaration into the plugin and reran all 31 files green. Whitespace, source hashes and append-only prefix checks pass. Report: /mnt/storage/scratch/mosaic-lead/mvp3/coder-stall-fix-r2-report.md; per-file TAPs, exact commands, negative controls, source/pin scans and hashes: coder-stall-fix-r2-evidence/. Local commit follows verification; independent exact-commit review remains with the lead. No push, stash, forge write, real model call, contact with 10.1.1.53, deployment or live recovery.
+
+
+## 2026-11-05 — MVP 3 coder-stall review F2 correction (#797), local implementation handoff
+
+Before: 8094901bce2d46f952786eea6469643d8dac8868 propagated helper death/load errors without the fixed stream diagnostic; Node exit 1 or SIGKILL status 137 could also be ordinary complete CLI error codes. Explicit correction charter authorizes one new local commit on fix/mvp3-coder-stall-797. Queue next coder refused this linked worktree; no workaround or forge/queue mutation.
+
+After: the adapter captures a private fd-3 completion handshake independently of answer stdout, CLI stderr and exit status. The helper's child does not inherit the completion descriptor. Complete CLI results retain their bytes and nonzero codes; invalid/absent completion emits exactly the fixed diagnostic and cannot save a new session. Helper stacks and shell crash text stay private. No completion file or writable mount, no broker/role/contract changes, and no watchdog timing/default changes. Helper SHA-256 and bundle pin: ce66fb2581dd789163f227030b71a26af04ce0d165fc5da6da6818eeac044ed0.
+
+Verification: added adjacent SIGKILL, missing-helper, static-import and runtime-exception regressions plus complete CLI exit-1/137 byte-parity controls. Before product edits, whole-file baseline repeat had 20 pass/4 intended fail; the first run's additional short-watchdog assertion failure is retained honestly. Focused fixed file passes 24/24. Final requested matrix: 420 pass, 0 fail/skip/cancel/todo across 31 whole files, one sequential node --test invocation per file. Node v24.22.1, requested PATH first, set -o pipefail and fresh TMPDIR from mktemp -d /mnt/storage/scratch/tmp/XXXXXX. Real CLI localhost HTTP 400 retains identical 38 stdout bytes, exit 1 and empty stderr, no activity/session. Adapted direct and 13 managed hostile/fallback probes pass; managed helper death/missing-helper stderr is exact, with no activity/session and recorded descendants reaped. Five real bubblewrap invocations preserve read-only stream.mjs/session.json and distinguish helper SIGKILL from handled CLI errors at 1/137. Source/pin scans, whitespace and append-only prefix checks pass. Evidence and report: /mnt/storage/scratch/mosaic-lead/mvp3/coder-stall-fix-r3-report.md and coder-stall-fix-r3-evidence/. Local review candidate only; independent exact-commit review remains with the lead. No push, stash, amend/rewrite, forge write, real model call, contact with 10.1.1.53, deployment or live operation.
+
+
+## 2026-11-06 — MVP 3 coder-stall r3 review F2 drain-window correction (#797), lead fix
+
+Independent r3 review of 05fdfef9e..6c123ce67 returned CHANGES with one P2: stream.mjs wrote its fd-3 `complete` token before stdout had drained a large answer, so a helper killed in that window exited 137 with partial stdout and empty stderr, indistinguishable from a complete CLI error. Correction: the helper acknowledges only from the stdout write callback (an error there acknowledges `invalid`), and the token names the exit status (`complete <status>`). adapter.sh accepts only a token equal to `complete $HELPER_STATUS`; a bare or mismatched token gives the fixed diagnostic, and status 0 becomes 2. Complete CLI errors at 1/137 keep their bytes, status and empty stderr. Helper digest pin updated to ed1a052bdc1bf0bc38c28af684d7e67bc0dd47328e05f0c0a3b7e44cad625978. New regression in model-activity.test.mjs (8 MiB answer, unread stdout, helper SIGKILL) failed on 6c123ce67 (empty stderr) and passes after the fix. Whole-file matrix: 31 files, 421 pass, 0 fail, 0 skip, sequential, Node v24.22.1. Reviewer probes rerun against the fix: partial-drain reproducer passes; helper-failure 4/4; managed-hostile 13/13; confined bubblewrap probe passes; boundary probe passes after one fixture was adapted from the old bare `complete` token to `complete 19`, plus new mismatch and legacy-bare-token cases that now produce the diagnostic. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/coder-stall-fix-r4-evidence/. Local commit only; needs a fresh independent review. No push, stash, real model call or contact with 10.1.1.53.
+2026-11-05 | #797 ui797 support implementation phase | Explicit lead charter from 05fdfef9ea1fdddf58c725c04f229ca8559fc054 on feat/ui797-support: local isolated OIDC/TLS, persistent CDP browser CLI and durable metered campaign supervisor only under packages/cli/live. Queue next refused linked worktree (exit 2); canonical queue/forge ownership remains with lead. Initial author tests identified explicit-config selection and browser evidence-count defects, corrected locally; real browser SSO and full focused gates in progress. No .53/live access, push, runtime/role/contract edits, attribution trailers or stash.
+2026-11-05 | #797 ui797 support author candidate verified | Added local single-subject HTTPS OIDC and fixed TLS forwarder, persistent real-input Chromium CLI with private NSS trust, and external durable per-model metered-stop ledgers. Final focused run: 34 pass / 0 fail / 0 skip (identity 6, browser 5, budget 23); dependency regressions: 111 pass / 0 fail / 0 skip; supported processing CLI regressions: 4 pass / 0 fail / 0 skip. Initial configuration-selection, Basic credential decoding, browser readiness/count and shutdown issues were corrected; all final gates pass. Source remains confined to packages/cli/live plus append-only protocol records. Local commit authorized; independent exact-candidate review and supervised-service acceptance remain with lead. No .53/live activity, model spend, push or product-runtime/role/contract changes. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-r1-evidence/; report: /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-r1-report.md.
+
+2026-11-06 | #797 ui797 support R2 review corrections verified | Before: local bd8340b9b accepted unrelated named instances, allowed Chromium WebSocket escape, trusted journal token totals, bypassed halt on lock failure, split model allowances across routes, omitted the absolute cutoff/100M GLM exception, and leaked browser fixtures. After: literal ui797/config/marker validation and persisted campaign revalidation; forced origin-only HTTP proxy (loopback bypass disabled, upgrades refused, HTTPS CONNECT restricted) with real HTTP/HTTPS Chromium negatives and independent zero-TCP/zero-upgrade forbidden-listener assertions; authoritative entry-token comparison/recomputed totals; preserved stale locks with durable halt on interruption/restart/storage failure; chartered proxy GLM/Claude/Codex bindings and one allowance per provider/model; inclusive 2026-11-07T06:00:00.000Z cutoff; exact GLM 100M/other models 10M maxima; awaited reverse-order fixture shutdown with owned-process checks and an intentional-failure whole-file regression. Initial CDP/response-policy browser containment and daemon close-event attempts failed and were corrected; terminal individual whole-file runs are identity 8, browser 8, budget 33 = 49 pass / 0 fail / 0 skip / 0 cancelled. All retained review probes rerun: wrong instance/deadline/split-route refuse, numeric corruption latches/halts, locked checks halt without reclaim, forbidden WebSocket hits 0, SIGTERM/SIGKILL survivors 0. The original general probe now exits 1 at its uncaught, correctly refused split-route initialization; a logging-only companion records every outcome. Final owned-process and 17440/17442/17443 listener sweeps are empty; unrelated existing sessions untouched. Source scope packages/cli/live only plus append-only logs. Queue refused linked worktree; no queue/forge write, push, stash, model call, .53/live contact or product-runtime/role/contract/dependency change. Local author candidate only; independent exact-head approval remains with lead. Evidence/report: /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-fix-r2-evidence/ and ui797-support-fix-r2-report.md.
+
+2026-11-06 | #797 ui797 support R3 P1 corrections verified | Before: 19e6cb0f1 still emitted WebRTC STUN/TURN UDP despite its flag, and unavailable ledger directories bypassed halt and terminated serve. After: mandatory Bubblewrap network/PID namespaces with an isolated, up loopback; a single namespace TCP relay over a 0600 Unix socket to the existing origin-only proxy, preserving private NSS/TLS validation, control socket permissions and awaited browser-before-proxy cleanup. Real Chromium regressions from both origins create nine ICE agents against six independent IPv4/IPv6/127.0.0.2 STUN/TURN UDP listeners and three TCP listeners; zero datagrams/connections, existing WebSocket/HTTP/SSO/CA negatives retained. Campaign initialization now exclusively pins owner/config/binding/ledger evidence beside the campaign, independently of the ledger volume; missing/renamed/0500 storage still attempts supported CLI halt, explicitly reports nondurable latch/receipt, preserves evidence and never recreates an epoch. Serve survives failures and reasserts each tick/Resume, retaining its stop across storage recovery; invalid/foreign/changed targets refuse. Older intact ledger format preserved. Final sequential whole files: identity 8, browser 10, budget 43 = 61 pass / 0 fail / 0 skip / 0 cancelled. All R1/R2 probes rerun: zero forbidden TCP/UDP, all four storage variants count one halt, original latch preserved, stale-lock/corruption/cap/cutoff/identity negatives retained, SIGTERM/SIGKILL/startup-failure survivors zero. Original R1 general probe exits 1 at its correctly refused split-route setup. Independent final sweep: zero owned processes/listeners at fixed and 43 recorded endpoints; scratch sweep parser corrected before its terminal run. Exactly packages/cli/live plus this single entry and one SESSIONS line; linked-worktree queue refused, no queue/forge writes, push, stash, model call, .53 contact, host network/DNS/trust changes or unrelated-session cleanup. Local implementation ready for independent exact-head review; owner-service successful quiescence remains a later acceptance gate. Evidence/report: /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-fix-r3-evidence/ and ui797-support-fix-r3-report.md.
+
+2026-11-06 UTC | #797 ui797 support R4 review corrections verified | Before: unchanged 905d313cd reproduces 13 host pathname D-Bus connections/11 AUTH EXTERNAL requests, four damaged-sidecar cases with zero halt attempts, and a coherent epoch edit accepting 4 of 8 real stored tokens against cap 5. After: empty Bubblewrap mount view with read-only system/browser dependencies, minimal dev/proc, private tmpfs tmp/run/home, browser-owned writable evidence/NSS mounts and explicit environment; actual Chromium D-Bus traffic zero on HTTP/HTTPS, diagnostic pathname/abstract/TCP attempts fail, UDP listener sees zero, synthetic 0600 file/config/runtime paths hidden. Private NSS trust and unchanged production Console OIDC sign-in pass. Version-2 ledger independently pins config bytes; sidecar read/parse/mode/deletion and semantic corruption stop with explicit evidenceErrors and counted supported halts, preserving damage. Serve retains verified target/config/epoch evidence and revalidates marker/root/store/config before targeting and immediately before halt. Normal-path independent campaign hashes/epochs must agree; real coherent-epoch-edit and zero pin hash halt without journal reset. Modern sidecar deletion stops; legacy version-1 requires intact independent config-byte proof and an unpinned legacy ledger refuses, without migration/reinitialization. README requires Bubblewrap/user/network/PID namespaces on every browser host and states identity is HTTPS 17443/oidc behind the Console TLS forwarder, never 17442. Sequential whole files budget 89, identity 8, browser 13, request-lifecycle-live 2 = 112 pass / 0 fail / 0 skip / 0 cancelled. Both unchanged reviewer probes first fail semantically on baseline, then all six controls pass; three further retained probes pass, 31 network records/12 denied CONNECTs and both WebRTC origins retain zero forbidden traffic. External-reader positive control, changed-path 64-hex pin search, ten syntax checks and whitespace pass. Development missing import and explicit PWD assertion corrected; evidence retained. Cleanup finds zero processes from this run, no fixed test listeners and empty/removed TMPDIR; 29 older other-session daemons untouched after overbroad sweep was narrowed to this run. Five packages/cli/live paths plus this entry and one SESSIONS line only; original log bytes preserved. Queue read refused linked worktree; no queue/forge writes, push, stash, model spend, real secrets, .53/live-service/host-trust changes or attribution trailers. Local implementation ready for independent exact-commit review; owner-service quiescence remains outside this author charter. Report/evidence: /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-fix-r4-report.md and ui797-support-fix-r4-evidence/.
+
+2026-11-06 UTC | #797 ui797 support R5 conflicting-ledger correction verified | Before: fce831c05 let a valid pin and a v2 ledger disagree on target and still halted the ledger's binding; the reviewer's unchanged target-conflict probe sent 8 halts to the wrong business/config (business-only corruption and a foreign ledger, check and serve startup). After: checkTarget runs corroborate() on every tick. A ledger target directs a halt only when the owner campaign, the owner pin, or the live binding of the owner campaign names the same target; otherwise the owner pin replaces it only when it matches the owner campaign hash, the live config/marker/root/store and the live config digest (evidence 'ledger-target-changed'); anything else refuses with campaign-instance-changed. Retained-target comparison stays as the second guard. Four new regressions (check, serve startup, running service, no corroboration) fail 4/4 on r4 source and pass after. Probe after fix: 0 wrong halts in all six cases. Sequential whole files budget 93, identity 8, browser 13, request-lifecycle-live 2 = 116 pass / 0 fail / 0 skip. No push, stash, .53, live service or model spend. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-r5-fix-evidence/.
+
+2026-11-06 UTC | #797 ui797 support R6 matching-damage and ledger-path correction verified | Before: 85e1ec5d1 rule (b) accepted a pin whose binding.business had been damaged to match a damaged ledger, and a foreign pin restored with the invoked ledger path; the reviewer's probe sent 8 halts to business B in check and serve startup. serveBudget re-read opts.ledger every tick, so a programmatic caller that mutated it moved stop/halt receipts to the replacement ledger. After: a pin corroborates a ledger target only when its binding names its own campaign's instance/config/business/owner and, while the owner campaign is readable, the owner's too. serveBudget freezes the startup campaign/ledger paths and retains the ledger path with the startup target; a running service accepts an exactly unchanged startup ledger as its own corroboration. Tradeoff (recorded): with no retained evidence, an owner business/config edit while the pin and ledger are intact now refuses (ambiguous target, indistinguishable from a forged pin+ledger pair) instead of halting the original; a running service still halts its retained startup target with reason campaign-changed; owner cap/epoch edits and sidecar-only damage still stop. Proof: 4 new regressions, 3 fail on 85e1ec5d1 and all pass after (the running matching-damage case already refused on r5); whole files budget-supervisor 97, isolated-identity 8, ui-browser 13, request-lifecycle-live 2, all pass/0 fail; reviewer probes with r6 expectations: matching-damage 6 cases 0 wrong halts, ledger-path 2 halts to the startup binding with stop/halt receipts only in the startup ledger, adversarial 104 cases verified (3 owner-retarget cases refuse in check/startup), r4 target-conflict exit 0. Evidence /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-r6-evidence/. Local commit only; independent r6 review next.
+## 2026-11-05 — MVP 3 D3 requirement texts in continuations implemented (#797)
+
+Before: branch fix/mvp3-req-texts-797 off 62bece4a9da803d0734b435d157578ea5c8d2001 (planning-gate fix) in the T3 worktree; coder/reviewer could not read the product's approved requirement records (D3), and list_requirements remains PM/CTO-only by row 90 (#1584), asserted unchanged by packages/harness/tests/tools.test.mjs. Scope chosen by the lead: no role/tool widening; the bus itself quotes the task-cited approved texts into the implementation/review continuations it already sends.
+
+After: broker #continuationQuote resolves, host-side and never from model input, this request's task.created citations (same product, exact approved snapshot) through the same catalog resolver behind the scoped requirements verb (#requirementsFor), bounding titles+texts at CONTINUATION_QUOTE_BUDGET=16384 bytes with a truncation+ask-PM line. request-continuation renders the block for push_working/review_verdict only, framed as quoted owner-approved data, never instructions; intents/evidence digests unchanged (quote lives in the message body only). request-lifecycle resolves the quote before its journal transactions (resume path; advance reuses the pre-transaction catalog.resolve result, covering the review→implementation changes loopback). Unresolvable or revoked snapshots and missing citations degrade to an ask-PM line without blocking or throwing. roles/coder.md and roles/reviewer.md gained one duty note each; no roles/*.json, tools.mjs gate, schema or authority change. New regressions: exact text/snapshot/records-commit/task citation with foreign-request, foreign-product and unknown-id isolation on a fresh send; reviewer quote; stale-drift and revoked-snapshot fallbacks without throw; budget truncation ordering. Whole files: bus+tasks 197 pass/0 fail/0 skip; harness+business 110 pass/0 fail/0 skip (Row 90 assertion green, coder/reviewer still lack list_requirements); adjacent recovery/limits/cli-lifecycle/launch 45 pass/0 fail/0 skip; 352 total, git diff --check clean. Initial runs failed three new tests ([draft] status not in snapshot rows; append-only request_snapshots/events triggers; successor reuses a waiting unroutable message) — corrected the tests, not the guards. Receipts: /mnt/storage/scratch/mosaic-lead/mvp3/req-texts-*.tap and req-texts-fix-r1-report.md. No push, merge, runtime write or product-acceptance claim.
+
+
+## 2026-11-05 — MVP 3 D3 requirement continuation texts, implementation R2 (#797)
+
+Before: exact R1 baseline 6e5cf26e7 on the owner-authorized fix/mvp3-req-texts-797 worktree. Independent review returned CHANGES: approved titles/bodies could forge PM/system/continuation lines, and catalog lookup could invalidate approval while resume dispatched obsolete implementation state. Corrected negative control ran the whole continuation file against unchanged production: 31 pass / 7 fail / 0 skip, including all four hostile coder/reviewer field cases and one persisted obsolete revision-7 coder message. Initial hostile fixtures included forbidden NUL and were rejected at PRD validation; removed that fixture character only, retained the initial receipt, then reproduced the actual containment failures before changing source.
+
+After: every requirement field is rendered in one JSON record per line under explicit data markers, with quotes/backslashes/control characters and Unicode controls/formatters/line separators escaped. The 16,384-byte limit still counts raw UTF-8 titles plus texts before encoding; metadata and escaping add message bytes. Budget/codepoint/later-ID/truncation/ask-PM semantics remain. After async lookup, resume rereads revision/phase/snapshot, discards changed bindings and re-settles before any continuation write. Real-catalog regression commits a new owner spec at implementation revision 7, consumes/relaunches the coder and proves discovery revision 8 with no newly persisted obsolete coder message. Four hostile-field/consumer cases and two encoding/budget cases added; changed continuation file 38/38. All 225 bus/tasks/harness/business whole files ran sequentially with Node v24.22.1, per-file pipefail/tee and fresh /mnt/storage/scratch/tmp/XXXXXX TMPDIR: initial 2287 pass / 1 fail / 0 skip, solely the known claude-session.test.mjs:329 row-66 correction-notice flake on turn 3; unchanged whole-file rerun 10 pass / 0 fail / 0 skip. Terminal repository cases 2288/0/0; reviewer-suite author rerun 11/0/0 plus byte-identical real-catalog reproduction 1/0/0. Initial failure remains recorded, not relabeled. No other positive failure or skip. Intent/evidence/digest compatibility, deduplication and coder/reviewer list_requirements exclusion pass; protected role/tool/schema hashes unchanged. Changed-path hex-pin search has no pin, positive control finds four. One local commit authorized; no push, amend, rebase, force, stash, remote/live/model/secret/fleet/.53 action. Queue refused linked worktree, no bypass/move. Report and per-file evidence: /mnt/storage/scratch/mosaic-lead/mvp3/req-texts-fix-r2-report.md and req-texts-fix-r2-evidence/. Ready for independent exact-commit review; no R2 approval, CI, deployment or product acceptance claimed.
+
+R3 encoded-budget correction (#797 D3, 2026-11-06, MVP3 lead): r2 review P2 found the raw 16,384-byte budget let JSON/control escaping grow one quote to ~98 KB, so stateBlock+continuation reached 142,978 bytes and the runner's MOSAIC_REQUEST exec failed E2BIG. request-continuation.mjs now applies QUOTE_BUDGET=16384 to JSON-encoded title+text bytes (same escaping as the rendered records), cutting on whole code points so no escape splits; later ids stay listed and the truncation/ask-PM notice is set by the render-time cut. broker CONTINUATION_QUOTE_BUDGET stays as a raw pre-bound and now also flags a title-only cut. Tests: two budget tests rewritten for encoded bytes, one control-escaping growth test, one execution-boundary regression (50-task state page with 250-character CJK titles + maximal escaping, runner stateBlock/turnRequest, /bin/sh spawn with MOSAIC_REQUEST). Negative control on 50a8d1a43: 3 of 4 new tests fail, boundary test E2BIG at 142,978 bytes. Fixed: request-continuation.test.mjs 40/0/0; bus+harness whole suites 1851 pass/0 fail/0 skip, Node v24.22.1; git diff --check clean. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/req-texts-r2-fix-evidence/. Local commit only; no push, merge or live action.
+
+R4 request-space correction (#797 D3, 2026-11-06, MVP3 lead): r3 review P2 found the quote serialized every cited task reference and record field outside the 16,384-byte title+text budget; 800 valid references plus the real 50-task state page made a 144,399-byte MOSAIC_REQUEST and exec failed E2BIG. request-continuation.mjs now derives the room from the host exec limit (REQUEST_ENV_MAX 131,056 = 131,072 minus "MOSAIC_REQUEST=" and NUL), the worst-case state page (STATE_BLOCK_MAX 40,724 for 50 tasks) and a 2,048-byte turn frame, leaving CONTINUATION_BODY_MAX 88,284. The quote gets that minus the lead. It charges the record skeleton for every requirement first, so every cited id stays listed; titles then texts fill min(16,384, remaining) with whole code-point cuts; task references fill what is left and the rest are counted in tasks_omitted; the truncation/ask-PM notice is kept. If even the skeleton does not fit, the block is replaced with a one-line ask-PM notice. Negative control: the three new tests against b3ee8a2bc's renderer fail 3 of 43 (800-reference case E2BIG at 144,399 bytes); with the fix the whole file passes 43/0/0. Bus+harness sweep 1853/1/0: the one failure is harness claude-session.test.mjs row 66 (scripted reply order), outside this diff; the whole file alone failed once and passed once on rerun, recorded as a pre-existing flake. Follow-up not fixed here: the lead (intent evidence with state.tasks and events) is itself unbounded, so a request with roughly 4,500+ tasks still exceeds the exec limit with no quote at all; that needs a file transport for MOSAIC_REQUEST or bounded intent evidence in its own row. Local commit only, awaiting independent r4 review.
+
+Correction to the R4 request-space entry (#797 D3, 2026-11-06, MVP3 lead): the stated limits were off by 50 bytes. STATE_BLOCK_MAX is 1024 + 50 * (2 + 41 + 1 + 750 + 1) = 40,774, not 40,724, so CONTINUATION_BODY_MAX is 88,234, not 88,284. The code was always computed from the expression; only the prose was wrong. The "roughly 4,500+ tasks" follow-up threshold is also wrong for the real fixture: with two evidence event ids per task, the lead alone passes the 88,234-byte static body budget at about 972 cited tasks (92,363 bytes), and the bare request there is 130,955 bytes, 101 bytes under the 131,056 exec limit.
+
+R5 quote fallback room (#797 D3, 2026-11-06, MVP3 lead): r4 review P2 found that both ask-PM fallbacks (oversize 131 bytes, unresolved 153 bytes) were appended without checking the room. A lead with 0-130 bytes left grew the body past CONTINUATION_BODY_MAX, and the real 972-task lifecycle case went from a 130,955-byte request that execs to 131,086 bytes and E2BIG. quoteBlock (now exported and outside createContinuations) holds every outcome to max(room, 0): the full notice when it fits, else the 47-byte "Ask the PM for the approved requirement texts." line, else nothing. That includes the final over-room check on a built block. New tests: a sweep of rooms -3..160 for push_working and review_verdict with both the unavailable and the oversize quote, checking the exact notice choice at each boundary; and the real 972-task lifecycle case (the shared manyCitedTasks helper, now also used by the 800-task test) asserting no fallback is appended and the request execs. Negative control in a scratch worktree at 2297d532e: both new tests fail, 972-task E2BIG at 131,086 bytes (the boundary sweep fails on the missing export there). With the fix the whole continuation file passes 45/0/0 on Node v26.12.1. The unbounded lead stays the recorded follow-up (file transport for MOSAIC_REQUEST or bounded intent evidence); in this fixture it reaches E2BIG on its own just above 972 tasks. Local commit only, awaiting independent r5 review.
+
+2026-11-06 | #797 MVP3 project archive round 2 — implementation charter | Owner-directed correction of round 1 candidate 3e21d239b: close archived thread/session execution and product/request/PRD/task admissions, preserve accepted-work completion and history, restore archived navigation and the two CSS hooks. Local feat/mvp3-project-archive-r2 only; no push, merge, deployment, delete, role/contract changes or fleet changes. Cross-lane budget-supervisor schema correction remains for integration. Reviewer-probe regressions first reproduced 8 failures (58 passes); exact runs retained under /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r2-evidence/.
+
+
+2026-11-06 | #797 MVP3 project archive round 2 — author verification complete | Archive admission now spans queued thread/session execution, product/repository intake, PRD activation, task requirements, bootstrap effects and request-bound manifests/continuations; accepted results, task/review/delivery receipts, cancellation, release/end and history remain usable. Archived navigation exposes saved threads/room history and Unarchive with only the two archive CSS hooks. Final full bus 1618/1618; WebUI 583/583; other path consumers 230/230; final affected lifecycle/launch files 67/67. CLI path gate 585/587: two dependency copy-fixture failures reproduced serially, then whole case2-install file 28/28 after removing an accidental yaml/yaml self-link; all other 31 files passed. Every earlier failed run and correction retained in /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r2-evidence/. Store/schema remain 3t; cross-lane budget-supervisor correction deferred as directed. Local candidate for independent review only; no push, merge, deployment, delete, role/contract or fleet changes. Report: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r2-report.md.
+
+2026-11-06 | #797 MVP3 project archive round 3 — implementation and verification | Before: r2 head 1c33c342b had two P1s: stale final launch admission and an omitted origin-chat binding downstream. After: a single broker snapshot fences thread and manifest at launch; shared complete request-binding checks fence bootstrap effects, PRD activation and task/requirements admission while preserving accepted receipts and reads. Added permanent race/origin/shared-repository regressions and operator guidance. Node 26: exact-parent negative 5 behavioral failures / 1 control pass; final regressions 6/6, bus excluding socket file 1614/1614, WebUI 583/583, corrected whole release file 226/226. The separate project-files socket test timed out after five passes (exit 124, one cancelled wrapper); C8 had 569/587 after fixture timeouts were fixed, with 17 release-fixture failures subsequently corrected and the known parent adapter-exited-127 failure remaining. Initial failures, full commands and comparisons are retained in /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r3-evidence/ and the report /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r3-report.md. No schema/store, supervisor, role, contract or policy changes; no push, merge, deployment or live acceptance. Independent limited re-review remains.
+
+2026-11-06 | #797 MVP3 project archive r4 — integration and author verification | Before: r3 f23a998ee and integration 5255e4e74 conflicted; the reviewed resolution tree reproduced WebUI 625 pass / 15 fail. After: exact reviewed merge 6a655a5cb, archive route fix and readable unknown archive state with real broker refusal evidence. Node 26 final WebUI 644/644, bus excluding project-files 1642/1642, harness 277/277, CLI whole-file partitions 1198 pass / 1 FED R7 skip. Candidate and integration parent project-files each timed out after five passes with three socket cases unfinished; this is not a green whole-bus gate. Earlier focus and Claude row 66 failures, clean reruns, comparisons and exact commands are retained in /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r4-report.md and project-archive-r4-evidence/. Local commits only; independent delta review remains, no push or deployment.
+
+2026-11-06 | #797 MVP3 project archive r5 — WebUI implementation | Before: r4 head 37f38d8e1 exposed unguarded request and session writes when archive lookup failed, and mapped guarded attach's project-archived refusal to 503 outcome-unknown. After: the unknown-state thread keeps reads and guarded writes available with a warning, suppresses unguarded controls and handlers including library revert, and reports guarded attach as 409/refused; live and archived recovery are tested. Node 26: final WebUI 649 pass / 0 fail / 0 cancelled / 0 skipped; exact-r4 negative 5 behavioral failures, real authenticated archived-origin attach 409. An initial diagnostic full run had 647 pass / 2 fail while source was changing (session catalog recovery and known-archived clear cancellation); both pass on exact r4 and after correction. All iterations, comparisons, inventory and commands: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r5-report.md and project-archive-r5-evidence/. Bus/harness/CLI not run for the WebUI-only change. Queue refused this linked worktree; no queue move, push, merge or deployment. Local implementation candidate for independent review.
+2026-11-06 UTC | #797 stall-guard implementation started | Pinned 5df42478b6c1ef5e22e2eb6c3fa8605722ab5f77 on feat/ui797-stall-guard. Before: both pi print mode and Claude text mode emit the turn reply only at completion, so a live first turn can be stopped despite model output; a chief can also immediately repeat an instance-running launch refusal. Scope is event-based first output and bounded launch refusal handling with focused and package gates; no configuration, role, schema, proxy initialization or live-instance change. The queue command refused in the linked worktree; no canonical queue access.
+
+2026-11-06 UTC | #797 F6 streamed first output | Managed pi JSON events and Claude stream-json partial events pass through one harness monitor; substantive text, thinking and tool-use events mark a fixed output token while stdout remains the final answer. Six real confined runner/adapter controls use a six-second guard: both streaming turns survived and both headers-only and keepalive-only cases stopped; both streaming tests failed on the pinned base and all four stall controls passed there. Harness suite 250 passed; CLI main partition 909 passed, one failed and one skipped, with its 53-test file rerun green; the failure also reproduced on the base. No guard threshold, proxy initialization, configuration, schema or role changes. Release and lane partitions are retained under /mnt/storage/scratch/mosaic-lead/mvp3/stall-guard-evidence/.
+
+2026-11-06 UTC | #797 F7 launch refusal guard | The typed launch path now reports instance-running as an existing run to wait for, serializes calls per instance and delays a new call for 30 seconds after a refusal; a disconnected caller cannot start a queued launch later. There is no automatic retry, an unknown outcome remains distinct, other instances are independent, and success clears the delay. Five new tests failed on the F6 base and passed after the fix; the complete harness suite passed 255/255. The backoff lives for the requesting runner's lifetime and resets on its restart. No policy, role, schema, configuration or live change.
+
+2026-11-06 UTC | #797 stall-guard review fix round | Before: managed stdout added or omitted bytes relative to adapter text mode, a signalled child lost its exit-137/stderr receipt, and no-route incurred the instance-running cooldown. After: adapter-specific byte rendering, a fixed signal-name diagnostic and signal exit status, and a 30-second cooldown only for instance-running; no-route can be retried after the route is set. New regression controls fail on 3e754c96a; real local-API adapter comparisons and owned-child death receipts match base behavior. Node 26 harness rerun 270/270; CLI whole-file coverage 1,197 pass and one existing federation skip after two whole-file reruns (one known timing flake and one interim stdout-fallback regression, both rerun green); isolated release 251/251 and gate-lane 61/61. The managed-session copies pass 20/20; all six real guard scenarios pass. Bus project-files independently reproduces the reviewed base hang under an external timeout. Initial namespace-only project-files attempt hit interpreter-unsafe; corrected ordinary-user run retained. Queue refused linked worktree; no push, deploy, model calls, live host, secret, policy, role, contract or schema changes. Exact evidence and remaining review boundary: /mnt/storage/scratch/mosaic-lead/mvp3/stall-guard-r2-report.md.
+
+2026-11-06 UTC | #797 stall-guard integration merge | Before: stall-guard tip 6b2c925b9 and integration 5255e4e74 each supplied a Claude activity route; managed Pi also had two potential marker producers. After: BASE's Claude stream helper is authoritative, the Pi monitor is retained and its extension duplicate is disabled for managed turns, runner metadata suppression and newline filtering coexist, instance-running-only cooldown remains, and known/unknown child-signal receipts survive on both paths. Claude empty-delta handling follows BASE's selected helper; helper SHA pin updated. Node 26 final harness 309 pass, CLI main/lane/release 885/61/251 pass with one FED R7 skip, separately verified guard E2Es 11 pass, bus excluding project-files 1615 pass. Bus project-files had 5 pass then timeout/cancellation on both candidate and exact BASE; gate is not green. One earlier harness run failed the known Claude row-66 timing assertion (exact BASE full harness 277/277 and two file runs 14/14; older-base reproduction recorded by prior review); final rerun passed. An initial signal test invoked the removed Claude monitor and was adapted. Queue refused linked worktree; canonical queue read returned nothing. Local merge candidate only, no push or deployment. Full counts, caveats and evidence: /mnt/storage/scratch/mosaic-lead/mvp3/stall-guard-int-report.md and stall-guard-int-evidence/.
+2026-11-06 UTC | #797 supervisor schema guard implementation | Before: the 3s-only accounting guard refused the 3t archive store. After: the lead-authorized closed 3s/3t fallback preserves 3s compatibility and accepts 3t; store.mjs performs load-time file reads and in-memory schema/migration execution, so it is not imported into the supervisor. The real-Store current-version regression failed on BASE with test-store-schema-refused; synthetic 3s accepts, 3r/3u/missing refuse. DDL diff adds only project_archives objects. README documents owner diagnosis and restoration or campaign end without reset. Sequential Node 26 whole-file gates: budget 102/0, isolated identity 8/0, browser 13/0, lifecycle 2/0; no skips. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/supervisor-3t-evidence/; local candidate for independent review, no push or deployment.
+
+2026-11-06 UTC | #797 resume chief implementation | Before: halted and launches-disabled receipts counted as the chief's launch attempt, so a resting request could not relaunch after resume at an unchanged prerequisite. After: continuation lookup excludes only those host-gate receipts while preserving visible refusals and earlier real attempt failures. Three real-bus/launcher regressions fail behaviorally on 13f81354e and pass with the fix, including bounded repeated ticks and a launch-failed retry guard. Node 26 touched file 12 pass; bus excluding project-files 1642 pass; serial CLI 1207 pass, 1 base-reproduced FED R7 skip. Initial concurrent CLI 1199 pass/8 fail/1 skip: four timing cases passed serially on base; four Claude wrapper failures reproduced on base and passed with the direct installed binary. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/resume-chief-evidence/; report: /mnt/storage/scratch/mosaic-lead/mvp3/resume-chief-report.md. One local commit for independent review; no push, merge, deployment or live host action.
+
+2026-11-06 | #797 MVP3 project archive r6 — WebUI implementation | Before: r5 head 8c3f48113 exposed server-unguarded request, accepted-clear cancel, library Revert and project settings Save controls on a known-archived project. After: known archived state suppresses those controls and fences stale handlers while preserving readable history, settings, Unarchive and the guarded attach picker. Node 26 frozen WebUI 654 pass / 0 fail / 0 cancelled / 0 skipped; five new tests plus the changed navigation assertion fail on exact r5 production for expected behavior; real authenticated Store/Broker probes verify guarded send, resume, clear and attach refusals. The first whole-suite run was diagnostic because the final disposed-form guard was added during it; it also reported 654/0/0/0. Detailed inventory, iterations, commands and evidence: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r6-report.md and project-archive-r6-evidence/. Bus/harness/CLI suites not run for WebUI-only change. Queue refused this linked worktree; no queue move, push, merge, deployment or server guard change. Local candidate for independent review.
+
+2026-11-06 | #797 MVP3 project archive r7 — WebUI implementation | Before: r6 head 51892cf95 lost known archived state during failed refresh, reopening repository Save and room Open and exposing guarded thread controls. After: settings, thread and room derive archive state from the displayed metadata through pending and failed reads; successful live reads restore controls, and refusal clearing remains intact. Node 26 final WebUI 658 pass / 0 fail / 0 cancelled / 0 skipped; four browser regressions fail on exact r6 for expected behavior. An earlier diagnostic whole suite had one 1440px remote-fixture timeout; candidate and r6 isolated reruns each passed 4/4, and the final whole suite passed that case. Room Send remains disabled on failed membership reads as before. Full iterations and comparison: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r7-report.md and project-archive-r7-evidence/. Bus/harness/CLI not run. Queue refused this linked worktree; no push, merge, deployment or server guard change. Local implementation candidate for independent review.
+
+2026-11-06 UTC | #797 MVP3 project archive r8 — WebUI implementation | Before: r7 head 5bf07f35f temporarily withdrew live thread controls and showed archive-unavailable notices on every same-thread refresh without a failed read. After: a non-navigation redraw retains the resolved archive state only for the same thread with its project in retained metadata; missing retained metadata on failed reads remains unknown. Two delayed refresh ticks retain live request, session, share, cancel and revert controls; a thread switch still withdraws them and stays unknown after failure. Node 26: exact-r7 negative reproduces disabled session control, switch control passes; focused archive browser files 11/11; full WebUI 660 pass / 0 fail / 0 cancelled / 0 skipped, versus r7 658/0. The 1440px remote fixture passed. Bus/harness/CLI not run; project-files excluded. Queue refused linked worktree; no queue move, push, merge, deployment or server guard change. Local candidate for independent review. Evidence/report: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r8-evidence/ and /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r8-report.md.
+
+2026-11-06 UTC | #797 MVP3 project archive r9 — WebUI fix for the r8 review P1 | Before: on r8 head 4c85d3784, a same-thread redraw kept the last resolved live controls. If the fresh lookup then found the project archived (listed or resolved) or unknown, the mounted request panel still offered mode, cancel, revoke, resend and answer, and the session, share, unshare, cancel and revert controls stayed enabled until the slower session and history reads finished. After: right after the fresh project lookup, a same-thread refresh that resolves archived or unknown withdraws those controls and remounts the request panel fenced, before the session read. The navigation and initial-load paths are unchanged. New browser test with the sessions read held open covers listed archived, resolved archived and unknown, and asserts no write. Node 26: negative control on exact r8 fails for behavior ("listed archived: [data-request-mode] offered while the sessions read is pending"); the r8 reviewer probe goes from 3/1 on r8 to 4/0; focused archive browser files 12/12; whole WebUI 661 pass / 0 fail / 0 cancelled / 0 skipped, versus r8 660/0. Bus/harness/CLI not run; project-files excluded. No push, merge, deployment or server guard change. Local candidate for independent review. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r9-evidence/.
+2026-11-06 UTC | #797 write_record JSON object compatibility — implementation and verification | Before: JSON-encoded requirements and decisions were refused and project-record-invalid detail was lost before the agent. After: strict object parsing preserves object-form bytes, and only record.write project-record-invalid details reach the tool result; docs remain Markdown. Exact-base negative control: seven behavioral failures. Node 26 serial gates: touched file 7/7, project 50/50, harness 316/316, bus excluding project-files 1642/1642, CLI 1204 pass and one federation acceptance skip reproduced on base. An initial candidate focused run failed one test due to a duplicate code prefix; corrected and rerun green. Evidence and handoff: /mnt/storage/scratch/mosaic-lead/mvp3/write-record-object-evidence/ and /mnt/storage/scratch/mosaic-lead/mvp3/write-record-object-report.md. Linked-worktree queue refused; local candidate for independent review, no push or deployment.
+
+2026-11-06 UTC | #797 Files polish — implementation and author verification | Before: caller and Files module each rendered a heading, and request redraws replaced settled content with a loading message. After: callers retain the single heading; cloned DOM content is cached per deduplicated request list or validated thread key, fenced against older mounts and cleared at sign-out. Exact-base negative control: 8 behavioral failures, 3 passes. Node 26 serial authorized browser gate: 91 pass, 0 fail, 0 cancelled, 0 skipped. An initial detached-container test timed out because its fixture awaited its own held request; the same timeout reproduced on base and the fixture was corrected. All evidence and limits: /mnt/storage/scratch/mosaic-lead/mvp3/files-polish-evidence/ and /mnt/storage/scratch/mosaic-lead/mvp3/files-polish-report.md. Local implementation candidate for independent review; no push, merge or deployment.
+
+2026-11-06 UTC | #797 Files polish r2 — review r1 F1/F2 ordering fix | Before (86383a9d1): the per-key sequence fenced only cache writes, so an older same-key read in another live container painted stale files after a newer mount settled (F1), and a pending newer mount kept a completed result out of the cache, so a remount flashed "Reading files…" (F2). After: each mount takes a start order; a settle paints and caches only if no later-started mount for the key has committed, otherwise it shows the newer cached result; a pending mount never blocks an earlier completion. Reviewer probes ported as two tests; on 86383a9d1 they fail 2/13 for behavior, on the fix w15-files-browser 13/13 and the touched caller browser files 93/0/0/0 (Node 26 serial). Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/files-polish-r2-evidence/.
+
+2026-11-06 UTC | #797 round A task evidence and request polling | Before: advance_request omitted missing per-task push/review chains, the coder continuation seeded the first task regardless of evidence, and missing request IDs were polled repeatedly. After: the broker names all incomplete task chains and supplies the same read-only result to continuation selection; scoped harness serialization exposes the refusal with the existing 300-character bound; thread-page readers suppress confirmed missing IDs until a new caught-up thread message. The owner authorized the narrow harness socket addition. Exact-base controls: five behavioral failures in the initial control and one in the bounded harness control. Node 26 serial named-file gate: 142 pass, 0 fail, 0 skip. An intermediate rerun was deliberately stopped after the owner clarified the bound; its log is retained. Queue refused this linked worktree. Local candidate for independent review; no push or deployment. Report and evidence: /mnt/storage/scratch/mosaic-lead/mvp3/roundA-fix-report.md and /mnt/storage/scratch/mosaic-lead/mvp3/roundA-fix-evidence/.
+2026-11-06 UTC | #797 round A fix r2 (Sol r1 P2 + two P3) | Before (97d670da9): a remembered request-not-found was retried only when the newest message on a caught-up thread changed, so a request opened with no new message stayed hidden; misses grew with paged history; an aborted read got a fabricated 404. After: misses are also cleared when the owner opens the thread (navigated) and when a mosaic-request-state for the id is seen anywhere on the page; timer refreshes and repaints still never retry. Misses are pruned to ids in the retained rows (200-row cap). An already-aborted read bypasses the memory and keeps the native AbortError. Remaining limit: the thread page reads only messages, so an event-only open with the thread left open and no navigation shows at the next message, navigation or reload. Closing that needs a server-visible thread signal, outside this change. New tests fail on 97d670da9 chat.js (2/2); webui chat-sessions-access, chat and browser files 40/0/0 (Node 26 serial). Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/roundA-fix-r2-evidence/.
+2026-11-06 UTC | #797 round A fix r3 (Sol r2 P2) | Before (16384bb12): a mosaic-request-state for an id advanced the thread's epoch only when a remembered miss was deleted, so a 404 still in flight from before the observation could record the miss afterwards and timer refreshes kept fabricating 404s for an open request. After: each observed state advances that id's own generation on every thread that retains it; an in-flight 404 records a miss only if both the thread epoch and the id generation are unchanged. Other ids' slow misses still settle. Generations are pruned to retained rows with the misses. New held-404 test fails on 16384bb12 chat.js at recovery; webui chat-sessions-access, chat and browser files 41/0/0 (Node 26 serial). Lead ruling: no third review round. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/roundA-fix-r3-evidence/.
+2026-11-06 UTC | #797 round A fix r4 (Lead push gate red on 9d3eb9e11) | Before (9d3eb9e11): the chat.js fetch wrapper recorded a request-not-found from /api/requests/<id>/workspace as a missing request, then served a synthetic 404 to every later read of that id, including request panel rereads; request-browser.test.mjs failed 11/24 (its stub has no workspace route), base 6b84fe136 24/0. After: only the request's own read records a miss; a remembered miss still answers its workspace read in the page. New regression test fails on 9d3eb9e11 chat.js and passes on the fix. The r3 held-404 test raced Files' cached repaint under concurrency 3 (678/1; alone 5/5 pass); it now waits, bounded, for the refresh's reads to reach the server and still fails on 16384bb12. request-browser 24/0; whole webui suite except project-files 679/0/0/0 (Node 26, concurrency 3). Correction: the r1-r3 author gate ran only chat-sessions-access, chat and browser and omitted request-browser.test.mjs, which also exercises chat.js; that omission let this regression reach the push gate. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/roundA-fix-push-gate/r4-*.
+2026-11-06 UTC | #1847/#1848 fix row (Round B halt, key roundb-2-halt) | Before (1186cf7b1): the runner auto-replied a RESULT to every non-RESULT message, so chief INFO/RESULT replies to assistant RESULTs looped (thread 40df75c5, 54 messages, 1,036,184 assistant tokens); continuation notices keyed on business-wide launch/end/claim seqs, so every unrelated lifecycle event, including kill-switch ends during a halt, re-noticed the chief and drove 13 instance-running refusals (1,198,607 tokens). After: the broker adds in_reply_to_class to agent inbox rows and the runner sends no automatic reply to an agent's non-REQUEST reply to a RESULT (REQUEST, ordinary INFO and human/tester/user messages unchanged); continuation versions use only the target's own lifecycle events and claims, no notice while processing is halted or while the target's latest launch has not ended; the instance-running refusal tells the chief not to relaunch or relay. Builder 4048e0f60 (Codex Terra xhigh); Sol xhigh review r1 CHANGES: a halted broker restart failed on the new retry refusal (P1) and an older unmatched launch hid later ends, worsening #1851 (P2). Lead fix c04529c7b: startup request recovery waits while processing is halted or invalid, as the periodic pass does, and resume reschedules it; only the target's latest lifecycle event gates notices. Each regression test fails on its base. Gate on c04529c7b (Node 26.12.1): touched 123/0, bus except project-files 1648/0, harness 318/0, webui 678/1 then 679/0 on rerun (decide-browser I1 timed out under full-suite load; file alone 9/9 twice; no webui diff vs base). project-files.test.mjs hangs on base and candidate alike. Residual: a latest launch whose end is lost still suppresses notices until host recovery (#1851). Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/step14/round-b/fix-1847-1848-gate/.
+
+2026-11-06 UTC | #1852 length-stop implementation | Before: an empty Pi length stop could become an empty RESULT, and the GLM registration inherited a 16,384 output cap. Candidate: marker metadata identifies the failed turn, bounded continuations share one usage transcript delta, exhaustion writes a message-trail event and a chief notice, and GLM limits are a separate plugin change. The lead accepted the larger limit's Pi compact-and-retry effect and the later usage limit check. The first bus gate exposed a missing sandbox binding for the shared notice constant; the binding was added, and the three affected launch cases passed in their file. A Claude row-66 assertion failed intermittently in candidate runs, while an untouched base full harness run passed; no base reproduction is claimed. The existing library citation retry's :retry usage calls remain a follow-up. Local work only; no push or deployment. Evidence: /mnt/storage/scratch/tmp/mDnSad/.
+2026-11-06 UTC | #1852 verification | Node 26 final harness 332/0, bus excluding project-files 1648/0, launcher and sandbox 69/0, and additional grep-selected tests 252/0. An overlapping bus run had library-sync-busy and a 30-second timeout; both affected files then passed 27/0 and the full bus rerun passed. The candidate's Claude row-66 test failed in an earlier full and isolated run, then the candidate and exact-base full harness suites passed 332/0 and 318/0 respectively; the base failure was not reproduced. Evidence: /mnt/storage/scratch/tmp/mDnSad/.
+2026-11-06 UTC | #1852 Sol review and lead fix round | Sol xhigh review of 3c689efa3/44c3b19fd: CHANGES, four findings. A processing halt between attempts still started a continuation, since state and usage.end pass the halt gate; a failed continuation check replied with an empty RESULT; a throwing attempt skipped usage.end; library retry continuations ran after the message's usage.end. Lead fix 3e03e123f: each continuation first reads state and processing.status, and a halted, invalid or unreadable processing state starts nothing and leaves the message unread with no reply; a failed check keeps the failed-turn classification and sends no RESULT; usage.end for the message id runs in a finally; the library citation retry starts no continuations, and an empty length retry fails visibly with no fixed RESULT (the retry's own bracket is refused, #1853). Each new runner test fails on 3c689efa3. Part B re-cut with the compaction effect qualified (gated as 542dbe030 directly on 3e03e123f; on the branch it follows this docs commit with the same code): pi allows one recovery in a row, re-armed by a new prompt or a successful reply, inside one runner attempt; output clamping now starts above about 58368 estimated input tokens instead of 107520; threshold compaction is unchanged above 111616. Corrections to the builder entries above: the one usage bracket did not cover the library retry continuations or a throwing attempt; the Claude row-66 failure does reproduce on base 3598839e6 (1 of 8 isolated runs, candidate 3 of 8), so it is a pre-existing flake.
+2026-11-06 UTC | #1852 gate | Node 26.12.1 on 542dbe030 (A+fix+B): touched 143/0, bus except project-files 1648/0, harness 337/0, webui 679/0 (first run 676/2/1: proxy-architecture could not load esbuild because the gate worktree lacked packages/webui/node_modules, and decide-browser I1 timed out; both passed 10/10 once the modules were linked, then the whole suite passed), grep-selected readers of the changed files 375/1. On 3e03e123f (A+fix, no B): touched 142/0, harness 335/1 (row-66 flake; file rerun 14/0), readers 375/1. The one reader failure, plugins harness.test row 65, also fails on base 3598839e6: first-output.mjs:42 (c7ddc7d31) and runner.mjs:406 (478df1cac) name a harness in core source; out of this row's scope. Evidence: /mnt/storage/scratch/tmp/PKGwA7/ and /mnt/storage/scratch/tmp/g0DYZH/.
+
+2026-11-06 UTC | UI slice 4 polish — implementation phase (recorded retrospectively) | Before: ui-dev base ad9b2dee4 had low project headers, clipped composer layouts, incomplete conversation work-card summaries and opaque or inappropriate agent launch controls. The assigned scope is documented in /mnt/storage/scratch/mosaic-lead/uidev/brief-s4-polish.md. The linked-worktree queue refused; canonical checkout access was excluded by the assignment. After and verification are recorded in the following phase entry.
+
+2026-11-06 UTC | UI slice 4 polish — implementation and verification | After: project headers, mobile details controls, phase stepper, linked PRD/files summaries and viewport composers were refined; thread instances no longer offer Launch, lifecycle refusals show codes and hints, and the unused proxy document was removed. Node 26 full WebUI suite: 758 pass, 0 fail, 0 cancelled, 0 skipped. Baseline and repaint/count/layout negative controls, intermediate failures and screenshot comparisons are recorded in /mnt/storage/scratch/mosaic-lead/uidev/s4-report.md and adjacent logs. Runtime source and tests were unchanged during the final suite; these append-only phase notes were recorded during and after it. Queue refused the linked worktree; no push, merge or deployment. Local candidate for independent review.
+
+2026-11-06 UTC | UI slice 6b — implementation phase | Before: ui-dev base 43686b145 shows unavailable project states for absent records and message correlation IDs with no lifecycle record, and the audit records several remaining presentation defects. The assignment and protected boundaries are in /mnt/storage/scratch/mosaic-lead/uidev/brief-s6b.md. The queue refused this linked worktree. Verification and outcome are recorded in the following phase entry.
+
+2026-11-06 UTC | UI slice 6b — implementation and verification | After: missing project records have a named refusal and empty presentation; message correlation IDs with no intake record no longer imply failed request reads, while real failures remain visible. Conversation, holder, tab, chip and Assistant sizing polish is included. Node 26 final gates: project 51 pass / 0 fail / 0 cancelled / 0 skipped; WebUI 786 / 0 / 0 / 0, bounded to four CPUs after two load-sensitive timeouts passed independently. The earlier full run and its failures, fixture screenshots and request-ID trace are in /mnt/storage/scratch/mosaic-lead/uidev/s6b-report.md. Queue refused the linked worktree; no push, merge or deployment. Local candidate for independent review.
+
+2026-11-07 UTC | Organizations S1 — implementation phase | Before: ui-dev c8d6d12fe used the instance root for one bus and the Console had no scoped lifecycle commands. The S1 stream charter and boundaries are in /mnt/storage/scratch/mosaic-lead/uidev/org-release/PLAN.md. The queue refused this linked worktree; canonical checkout access was excluded. Verification and unresolved integration boundaries follow in the stream report.
+
+2026-11-07 UTC | Organizations S1 — implementation evidence | Organization-root bus and launcher paths, guarded lifecycle and Console launch/stop were implemented locally. Focused Node 26 tests and host regressions passed; the fresh-organization notifier choice, shared-proxy S2 integration, and remaining instance-root consumers are not complete. Exact commands, inventory, failures and boundaries: /mnt/storage/scratch/mosaic-lead/uidev/org-release/report-s1.md. No push or deployment. Gitea issue creation was excluded by the no-network and no-external-communication limits.
+
+2026-11-09 UTC | Unified workspace (#1873) — direction recorded | Before: the 11-07 rulings had one Console switch between organizations from Settings, tasks only in each org queue, and an agent bound to one organization (REQ-USER-1). After: Jason's 11-09 direction and answers recorded in docs/plans/2026-11-09_unified-workspace-owner-direction.md (all orgs visible at once, per-org task stores with a Vikunja option and an aggregated Kanban, root/org/project agents with one cross-org assistant, system type plug-ins, self-service restart and model switch). PRD 1.20 draft 1 written for his exact-text approval; the PRD itself is unchanged. The unpushed 11-07 rulings record (ad8140065) lands with it.
+
+2026-11-09 UTC | Organizations friction round, landings #1876-#1881 (#1873) | Before: refactor 00ef0bd30. A Console launched by a relative path showed Request status unavailable, the overview printed the north star as raw markdown, packages/business and the business command spellings were the only names, Quick Setup ended with no route to a north star, an archived org could not be restored from a fresh page, and a dead bus after setup had no browser control. After, each through one Codex Sol xhigh review round plus a lead or builder fix round: #1876 re-execs a relative Console launch with its absolute script path (build 744753d7e, reproduced 121/0; review APPROVE 0/0/1). #1877 F1 renders the north star as sanitized markdown with a short preview (review APPROVE 0/0/1; live retest 4/0 twice). #1878 rename stage B moves packages/business to packages/organization and adds the org command spellings, keeping the business ones and their messages (builder 6828/6, see report; review CHANGES 0/1/0, fixed in e19db4009). #1879 F2 adds the onboarding interview after Quick Setup and on the project page, with human-only north-star approval (`mosaic project north-star --approve`) and no new agent grant (builder 411/0; review CHANGES 0/1/1: a refused start left its button disabled, fixed in 5937a977f along with the P3 stale approval capability). #1880 lands the U0 unified workspace samples, approved by Jason with the four-tile logo kept; the module names stay undecided at his request. #1881 E2E round 5 fixes restore from a fresh page, show an owner bus Start whenever the org list reads the bus down, say room changes are unavailable on org Consoles and recover the composer (builder 258/0; review CHANGES 0/1/0, 231/0: Settings kept Done after the bus died because only opening the org reread health). Lead fix fdd6658a6: every org list read is announced and the open setup redraws on a flip, and app.js reads the list before bus-status so a failed bus-status read cannot skip it; regression red on 8a8edc44b, 18 touched webui files 199/0 (Node 26.12.1, one file at a time). uiorg redeployed at fdd6658a6, 19:53Z. Open follow-ups: a down bus offers both the F3 banner Restart and the Settings Start, focus can move when setup redraws, and a Console stop also stops the org buses it started. Reports: /mnt/storage/scratch/mosaic-lead/reports/org-{reqget-2,f1,rename-b,f2,u0-design,e2e5}-*.md.
+
+2026-11-09 UTC, organizations F3 (#1873, PR #1884, a8f9f0957). The WebUI restarts the Console (supervised Consoles exit and `mosaic console start` relaunches them), restarts an organization's bus from the bus-down banner with a done receipt, and sends the owner's routing, agent, instance, name, assistant, limits and model proxy writes to the selected organization's bus. Routing apply lists how a change reaches each saved agent and offers Restart NAME now. Console restarts, bus restarts and routing, agent and instance changes append to `<dataRoot>/console/actions.jsonl`. Builder plus two refactor merges: combined list 354/0 on 999d173fd. Sol review CHANGES 1/0/1. P1: on a `--dev-local-owner` Console a local agent can send the right Origin and Fetch Metadata headers and reach these controls. The pinned startup warning and the accepted no-auth dev flags already cover this, but the README claimed no agent reaches them. Lead decision: correct the README and file the cooperative local-agent peer refusal as #1883, without building it in this round. P3: the instances route wrote no trail line. Fixed in 0a73279d6; the regression test fails on 999d173fd and passes on the fix. After the refactor merge, 25 touched or README-reading files 195/0 (Node 26.12.1, one file at a time, env -i). uiorg redeployed at a8f9f0957, 22:45Z; live config offers consoleRestart and org settingsSend. Correction to this session's process: after the test run completed I replied "No response requested" and stopped until Jason asked. Open follow-ups: defect l (a bus restart after adding a credentialed agent can refuse to start), the bus restart refusal code, a stale-lock Recover control, one control for banner Restart and Settings Start, #1883. Report: /mnt/storage/scratch/mosaic-lead/reports/org-f3-review.md.
+
+2026-11-09 UTC, PRD 1.20 and defect l (#1873, #1886; PRs #1887 03fe321b1 and #1888 7a97cfc4f). PRD 1.20: Jason approved draft 2 at 22:57Z ("The file looks fine other than that"; the Montage module name stays deferred). The PRD now has 118 requirements, with REQ-WS-1..8, REQ-AGENT-1..3, REQ-SYS-1..2, REQ-ACCT-1..2 and REQ-SETUP-1..2 added and REQ-ASSIST-1, REQ-USER-1, REQ-TASK-1 and REQ-WEB-3 amended. Builder Codex Terra xhigh declined to commit because stack-copy failed 20/1 (node-gyp missing from the test Node's npm); that failure is pre-existing on 483eccb3d, so the lead committed. Sol review APPROVE 0 (word-for-word diff against draft 2, catalog order, both requirements tests). Defect l: before, an agent that declared a store credential made the next bus start refuse, because Credentials refuses a missing store root and only issue() created it. After: start creates the root 0700 when any reference names the store; a root that exists with loose modes or as a symlink still refuses. Two new credential-verbs tests fail on the parent. Bus suite 171 files one at a time, 1713/0 (Node 26.12.1, env -i). Sol review APPROVE 0. uiorg redeployed at 7a97cfc4f, 23:15Z. Follow-up: the stack-copy node-gyp test environment. Reports: /mnt/storage/scratch/mosaic-lead/reports/{prd120-land,prd120-review,defectl-review}.md.
+
+2026-11-10 UTC, unified workspace U1 and SYS1 (#1873; PRs #1889 d35447005 and #1890 2c6556ab1). U1, before: each org page read only its own bus and nothing read every org at once. After: /api/workspace returns projects, sessions, inbox, tasks and metrics from every org the owner holds, each row tagged with its org and each org with a state (ok, starting, down, timeout, invalid); `mosaic console restart` and `mosaic org reload <org>` send the F3 routes. Sol review CHANGES 0/2 on 2109458b3: malformed data from one org turned the whole read into a 503, and the per-org deadline left sockets and transport children running. Terra fix 0672d5fe8 validates each org's result inside its boundary and carries an absolute deadline and AbortSignal through the status check and transport; the new workspace-failures test is 0/10 on the parent and 10/0 on the fix. The lead re-pinned the webui bus.mjs hash in bus channel-proof (the deliberate signal/deadline change; nonces, argv and limits unchanged) and amended as d35447005. SYS1, before: no system-type kind. After: a system-type plug-in kind with five modules (business-management, coding, creative-writing, marketing, montage), an org enable list under plugins.system-type, owner-only project selection with an append-only project_system_types table (migration 3t-3u) and CLI verbs; the modules grant no tools yet (REQ-SYS-2 deferred). Sol review CHANGES 1/2 on a9629f332: the restore guard did not count project_system_types, the CLI channel did not admit the two project verbs, and the #811 migration-reader pin still expected 18 steps. Lead fix 2c6556ab1 (rebased on d35447005) adds the table to COUNTED and LISTED with refusal and in-run recount tests, admits both verbs with a run()-level channel test (red on the unfixed channel), and moves the pin to 19 steps ending 3t-3u; fix files 323/0 and rebase overlap files 63/0 (Node 26.12.1, one file at a time, env -i). Full gate on a9629f332 4040/5: the two stack-release pins above, and tester-reads 3/3, which also fails on 1616d1dd6 (project.mjs:95 refuses an org --tester init; follow-up). Correction to the uiorg deploy at 00:50Z: the deploy script switched the tree without the offline schema migration, so all five buses refused to start (normal startup refuses an older schema by design). The lead ran migrate-schema.mjs for the five org stores (3t to 3u, all ready), restarted the buses (201 each) and added the migration to the deploy script with stop-on-refusal. test3 refused writer-locked and stays down, as before. Reports: /mnt/storage/scratch/mosaic-lead/reports/{u1-review,u1-fix,org-sys1-build,sys1-review}.md.

adapters/README.md

@@ -76,6 +76,8 @@ session's workspace and its own process group. Same contract, plus:
 | `MOSAIC_POLICY_FILE`, `MOSAIC_TOOLS_FILE` | The bundle's gate policy and typed tools. |
 | `MOSAIC_TOOL_SOCKET` | The runner's tool socket, which the typed tools call. |
 | `MOSAIC_TURN_MARKER` | `pi`: the extension writes it at `agent_end`; a pi turn that exits 0 without it failed. |
+| `MOSAIC_MODEL_ACTIVITY_DIR` | Managed runner's existing writable run directory. Trusted model streaming events publish the fixed `output\n` token to `proxy-first-output` (0600, exclusive create). No event contents or credentials enter it. Claude's private stream reader and Pi's extension signal thinking, tool-use and text activity before final stdout; init/status, tool results and workspace writes do not count. |
+| `MOSAIC_MODEL_ACTIVITY_SOURCE` | The harness module may set `adapter` in its bundle environment to declare model events authoritative and disable the runner's stdout activity fallback. Claude declares this because final stdout can be a synthetic error. Pi and mock retain the fallback. The runner reads the declaration from module metadata, ignoring any ambient environment copy. |
 | `MOSAIC_EXTENSIONS` | `pi` only: extension files loaded with `-e`; a missing one exits 2. The pi module names two: the gate and typed tools extension, then the unslop check's `tools/unslop-hook/extension.ts` (row 66). |
 | `MOSAIC_UNSLOP_LOG` | The unslop check's JSONL log, `<run>/unslop.jsonl`, which the runner sets for both adapters and reads after each turn (row 66). |
 | `MOSAIC_CLAUDE_SETTINGS`, `MOSAIC_CLAUDE_MCP_CONFIG` | `claude` only: the bundle's gate hook and MCP server; required. |
@@ -85,6 +87,25 @@ session's workspace and its own process group. Same contract, plus:
 The layers each adapter relies on, and what they don't cover, are in
 `packages/harness/README.md`.
 
+Claude uses `--output-format stream-json --verbose --include-partial-messages`.
+The adapter's `stream.mjs` consumes those events and prints a complete final
+result, including error results, with the same newline as the CLI's text format.
+CLI failures retain their nonzero exit status. Claude's model events alone mark
+activity; its final stdout may be a synthetic error. The runner retains stdout
+activity marking for Pi and mock adapters. Malformed or incomplete streams emit
+only the fixed diagnostic and fail the turn; a failed or interrupted first turn
+does not persist a reusable session ID. The helper is mounted read-only and
+its digest is recorded in the launch bundle. A private completion pipe separates
+handled CLI exits from helper launch/runtime failures, even if their exit codes
+collide. The helper acknowledges only after its answer has been handed to
+stdout, and the token names its exit status (`complete <status>`). The adapter
+emits the fixed diagnostic if completion is absent, the stream is invalid, or
+the helper's actual exit differs from the acknowledged status (the helper died
+while its answer was draining), suppressing helper stacks and shell crash text. CLI stderr
+keeps its existing channel; the CLI does not inherit the completion pipe. No extra
+writable mount or completion file is needed. Pi retains print mode and signals
+activity through its existing extension. Mock remains a test-only echo.
+
 ### A role's skills (row 64)
 
 A managed session's skills reach both adapters as text in the bundle's

adapters/claude/adapter.sh

@@ -11,6 +11,7 @@
 # wrapped as `timeout -k 2 10 <gate> || exit 2`, and the tool limit (--tools).
 # --bare is never passed: it turns settings hooks off.
 set -eu
+STREAM="$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)/stream.mjs"
 
 need() {
     eval "v=\${$1:-}"
@@ -60,7 +61,9 @@ fi
 
 # Flags:
 #   -p                       one-shot: print the answer and exit
-#   --output-format text     stdout is the answer only
+#   --output-format stream-json  private model events; stream.mjs emits only
+#   --verbose --include-partial-messages  the final result on stdout and marks
+#                            first model activity before long tool work
 #   --system-prompt-file     the generated prompt replaces the default, given
 #                            as a file so no local user reads it in
 #                            /proc/<pid>/cmdline (row 213); absolute, since
@@ -84,18 +87,34 @@ fi
 #                            text in the system prompt (row 64)
 ALLOWED=mcp__mosaic
 [ -z "${MOSAIC_TOOLS:-}" ] || ALLOWED="$MOSAIC_TOOLS,mcp__mosaic"
-"$CLAUDE" -p "$MOSAIC_REQUEST" \
-    --output-format text \
-    --system-prompt-file "$PROMPT_FILE" \
-    --model "$MOSAIC_MODEL" \
-    --effort "$MOSAIC_THINKING" \
-    --restricted \
-    --tools "${MOSAIC_TOOLS:-}" \
-    --allowedTools "$ALLOWED" \
-    --permission-mode dontAsk \
-    --settings "$MOSAIC_CLAUDE_SETTINGS" \
-    --strict-mcp-config \
-    --mcp-config "$MOSAIC_CLAUDE_MCP_CONFIG" \
-    --disable-slash-commands \
-    "$SESSION_FLAG" "$SESSION_ID" || exit $?
+# Completion travels on fd 3, independently of stdout and the CLI exit code.
+# fd 4 preserves answer stdout; fd 5 preserves CLI stderr while helper/shell
+# crashes stay private. The CLI never inherits the completion descriptor.
+HELPER_STATUS=0
+{
+    HELPER_COMPLETION=$(
+        { node "$STREAM" "$CLAUDE" -p "$MOSAIC_REQUEST" \
+        --output-format stream-json --verbose --include-partial-messages \
+        --system-prompt-file "$PROMPT_FILE" \
+        --model "$MOSAIC_MODEL" \
+        --effort "$MOSAIC_THINKING" \
+        --restricted \
+        --tools "${MOSAIC_TOOLS:-}" \
+        --allowedTools "$ALLOWED" \
+        --permission-mode dontAsk \
+        --settings "$MOSAIC_CLAUDE_SETTINGS" \
+        --strict-mcp-config \
+        --mcp-config "$MOSAIC_CLAUDE_MCP_CONFIG" \
+        --disable-slash-commands \
+        "$SESSION_FLAG" "$SESSION_ID" 3>&1 1>&4 4>&-; } 2>/dev/null
+    ) || HELPER_STATUS=$?
+} 4>&1 5>&2
+# The token must name the helper's actual exit status: "complete 0" for
+# success, "complete N" for a complete CLI error. A helper killed after its
+# answer was written but before exit leaves a mismatched status.
+if [ "$HELPER_COMPLETION" != "complete $HELPER_STATUS" ]; then
+    printf 'claude adapter: invalid or incomplete model stream\n' >&2
+    [ "$HELPER_STATUS" -ne 0 ] || HELPER_STATUS=2
+fi
+[ "$HELPER_STATUS" -eq 0 ] || exit "$HELPER_STATUS"
 [ "$SESSION_FLAG" = --resume ] || printf '%s\n' "$SESSION_ID" > "$ID_FILE"

adapters/claude/stream.mjs

@@ -0,0 +1,81 @@
+// Consume Claude Code's SDK event stream privately. A complete final result
+// reaches stdout, including errors, with the same newline as text mode.
+import { spawn } from 'node:child_process';
+import { writeSync } from 'node:fs';
+import { constants } from 'node:os';
+import { firstOutputMarker } from '../../packages/harness/src/first-output.mjs';
+
+const mark = process.env.MOSAIC_MODEL_ACTIVITY_DIR
+  ? firstOutputMarker(process.env.MOSAIC_MODEL_ACTIVITY_DIR) : () => {};
+const [binary, ...args] = process.argv.slice(2);
+const child = spawn(binary, args, { stdio: ['ignore', 'pipe', 5] });
+let pending = '', answer, resultSeen = false, resultFailed = false, failed = false, killTimer;
+const fail = () => {
+  if (failed) return;
+  failed = true;
+  child.kill('SIGTERM');
+  killTimer = setTimeout(() => child.kill('SIGKILL'), 5000).unref();
+};
+function event(line) {
+  if (!line.trim()) return;
+  const item = JSON.parse(line);
+  const model = item.type === 'stream_event' ? item.event : null;
+  // Init/status, hooks, user/tool results and arbitrary local writes aren't
+  // model activity. message_start is the upstream assistant response header;
+  // partial blocks also cover models that first respond with thinking/tools.
+  const start = model?.type === 'message_start' && model.message?.role === 'assistant';
+  const block = model?.type === 'content_block_start'
+    && ['text', 'thinking', 'tool_use'].includes(model.content_block?.type);
+  const delta = model?.type === 'content_block_delta'
+    && ['text_delta', 'thinking_delta', 'input_json_delta'].includes(model.delta?.type);
+  const assistant = item.type === 'assistant' && !item.error
+    && item.message?.model !== '<synthetic>' && item.message?.role === 'assistant'
+    && item.message.content?.some(c => ['text', 'thinking', 'tool_use'].includes(c.type));
+  if (start || block || delta || assistant) mark('activity');
+  if (item.type === 'result') {
+    if (resultSeen) throw Error();
+    resultSeen = true;
+    // Let a normal CLI failure exit on its own, retaining its exit code.
+    resultFailed = item.subtype !== 'success' || !!item.is_error;
+    if (typeof item.result === 'string') answer = item.result;
+    else if (!resultFailed) throw Error();
+  }
+}
+child.stdout.setEncoding('utf8');
+child.stdout.on('data', chunk => {
+  if (failed) return;
+  try {
+    pending += chunk;
+    let end;
+    while ((end = pending.indexOf('\n')) !== -1) {
+      if (end > 16 * 1024 * 1024) throw Error();
+      event(pending.slice(0, end));
+      pending = pending.slice(end + 1);
+    }
+    if (pending.length > 16 * 1024 * 1024) throw Error();
+  } catch { fail(); }
+});
+child.on('error', fail);
+child.on('close', (code, signal) => {
+  clearTimeout(killTimer);
+  if (!failed && pending) {
+    try { event(pending); } catch { fail(); }
+  }
+  // Integrity and rendering are separate from the CLI's success classification.
+  // Buffer until close so corrupt/truncated streams never leak a final result.
+  if (!failed && (!resultSeen || signal)) fail();
+  if (signal) writeSync(5, `model child killed by ${signal}\n`);
+  const number = signal && constants.signals[signal];
+  const signalStatus = signal ? (Number.isInteger(number) && number > 0 ? 128 + number : 1) : 0;
+  const status = process.exitCode = signalStatus || code || (failed || resultFailed ? 2 : 0);
+  // Only a fully consumed stream whose answer has been handed to stdout can
+  // acknowledge completion, and the token names the status it will exit with.
+  // A helper that dies after acknowledging exits with a different status, so
+  // the adapter still reports it. The adapter owns the fixed diagnostic,
+  // including when this helper never loads or dies early. spawn's explicit
+  // stdio keeps fd 3 out of the CLI and its descendants.
+  const acknowledge = error => writeSync(3, failed || error ? 'invalid' : `complete ${status}`);
+  if (!failed && answer !== undefined) {
+    process.stdout.write(answer.endsWith('\n') ? answer : answer + '\n', acknowledge);
+  } else acknowledge();
+});

adapters/pi/adapter.sh

@@ -132,4 +132,8 @@ set -- \
 # One-shot mode appends -p and the request (both safely quoted);
 # interactive mode appends nothing - clean TUI.
 [ "$INTERACTIVE" = "1" ] || set -- "$@" -p "$MOSAIC_REQUEST"
+if [ -n "${MOSAIC_MODEL_EVENT_MONITOR:-}" ] && [ "$INTERACTIVE" != "1" ]; then
+    STREAM="$(dirname "$0")/../../packages/plugins/harness/pi/model-stream.mjs"
+    exec node "$STREAM" pi "$MOSAIC_FIRST_OUTPUT_DIR" pi "$@" --mode json
+fi
 exec pi "$@"

agents/mos/work/org-archive/BUILD.md

@@ -0,0 +1,41 @@
+# Organization archive and restore
+
+Archive and restore add the `archived` registry state and increment the
+revision. Archive takes the existing lifecycle lock, verifies the revision,
+stops and verifies the bus through the caller-injected stop function, then
+checks the revision again before changing state. The registry lock is not held
+while stopping the bus. A concurrent update during the stop causes a revision
+conflict and leaves the organization active, although its bus has stopped.
+Restore uses the same lifecycle lock, changes the state back to active and does
+not start the bus. Files remain in place; delete remains available.
+
+The lifecycle log is append-only and private. Its line is appended under the
+registry lock immediately before registry publication. A crash or a failed
+registry publication in that narrow interval can leave a log line for an
+operation whose state change was not published; reconciliation or a durable
+transaction journal is a follow-up. A failed or uncertain stop never records a
+completed archive.
+
+Archived organizations remain available to the owner-only administration
+routes, but ordinary organization resolution rejects them with `org-archived`.
+The UI shares delete's reply verification, organization refresh and current-org
+switch logic. Archived documents are read-only, setup controls are hidden with
+an explanatory notice, and restore does not start the bus. Screenshots are
+untracked under `shots/`.
+
+The service, CLI, route and browser regressions and the requested existing
+checks passed in clean scratch homes. The full business suite passed. An
+additional routing check first caught a too-broad admin-hook exemption; it was
+narrowed to the built-in handler and the web checks passed again.
+
+## Review fix: lifecycle fences
+
+The internal host now takes the organization lifecycle lock before checking
+registry state and holds it through host readiness. The parent takes a short
+separate lock around its own host-directory preparation, then releases it before
+spawning the child, avoiding a parent/child deadlock. If archive wins between
+those two lock acquisitions, the child rechecks state and refuses; a competing
+start or archive may therefore need a retry. Queue and project setup hold the
+same lock through their receipt publication. A FIFO lifecycle log is opened
+nonblocking and refused; the regular-file ownership and mode checks remain.
+The log-before-registry publication crash interval remains the follow-up above.

agents/mos/work/org-delete/BUILD.md

@@ -0,0 +1,108 @@
+# Organization deletion — implementation notes
+
+Base: `c09570d69` on `quick-setup`. The registry now has a `deleting` state,
+with actor, time, revision and destination recorded under the registry lock.
+The lock is released before waiting for the bus. Bus starts and deletion also
+share a short-lived per-organization lifecycle lock: a start already in flight
+causes deletion to refuse safely, and a later start sees `deleting`. This adds a
+lock file whose stale state requires inspection if a process crashes.
+
+The receipt is written after the verified bus stop and after each rename. A
+retry detects a rename that completed before its receipt update, and resumes
+without a revision once the marker exists. No moves are rolled back. Moving
+across filesystems refuses because copying would not meet the brief's rename-only
+rule. Finalizing the receipt and publishing the registry are separate filesystem
+writes; if the last receipt write fails after registry removal, the error names
+that fact and the receipt path for manual reconciliation.
+
+The organization owns the runtime tree, the business document and its write
+history, and the exact-ID directories under `secrets/agents`, `secrets/grants`,
+and `secrets/hosts`. Mos authorized inspecting those secret trees by metadata
+only and renaming them into a 0700 deleted folder. Their contents are never
+opened, read, copied or logged. The receipt identifies each directory and its
+entry count only. Unsafe ownership, permissions or symlinks refuse deletion.
+
+Moving a grant does not revoke anything remotely. Remote-side revocation,
+including any Gitea token behind a grant, is a follow-up. Purging the deleted
+folder is out of scope.
+
+Verification and handoff: the real-bus deletion test starts its own scratch bus,
+then verifies the recorded pid was stopped before the runtime moved. Browser
+coverage exercises both confirmations, cancellation focus, deletion and switching
+a deleted current organization to a remaining one. Screenshots are untracked.
+
+The CLI's broad compliant selection exposed `business-imports.test.mjs`: the
+scanner rejects the plugin loader's nonliteral dynamic import. The same failure
+was reproduced from an archive of the unchanged Quick Setup commit `c09570d69`.
+All 19 `stack-copy.test.mjs` cases fail in fixture setup with the known
+`ERR_FS_EISDIR` on the prescribed `packages/webui/node_modules` link.
+`org-bus.test.mjs` and `org-console.test.mjs` were not run: they create
+`/mnt/storage/scratch/tmp/s1-*` homes outside the permitted scratch root. Both
+import changed code. Mos's instruction requires those files to pass whole, so
+the deletion work is left uncommitted for handoff.
+
+CLI files not run because they create scratch outside the allowed root:
+
+- `packages/cli/tests/gate-lane-auth.test.mjs`
+- `packages/cli/tests/gate-lane-fixtures.test.mjs`
+- `packages/cli/tests/gate-lane-image-base.test.mjs`
+- `packages/cli/tests/gate-lane-image.test.mjs`
+- `packages/cli/tests/gate-lane-state.test.mjs`
+- `packages/cli/tests/gate-lane.test.mjs`
+- `packages/cli/tests/org-bus.test.mjs`
+- `packages/cli/tests/org-console.test.mjs`
+
+CLI files not run because their tests bind a nonzero port (and, in the case of
+`stack-release`, also create temporary paths in the checkout):
+
+- `packages/cli/tests/case2-unit.test.mjs`
+- `packages/cli/tests/stack-release.test.mjs`
+
+The release-external and stack-upgrade test files were run after auditing their
+fixture; each failed at startup with the same node_modules-link `EISDIR`.
+
+Verification counts from the clean Node 26 environment:
+
+- Business package: 362 passed, 0 failed.
+- WebUI package: 1,016 passed, 8 failed, 1 skipped. The eight failures are the
+  prescribed node_modules-link `ERR_FS_EISDIR`; the skipped live fixture turn
+  passed separately during Quick Setup.
+- Compliant CLI selection: 628 passed, 1 failed (`business-imports.test.mjs`).
+  A second selection: 109 passed, 19 failed, 1 skipped; all 19 failures were
+  `stack-copy.test.mjs` fixture setup on the same `ERR_FS_EISDIR` link.
+  `stack-release-external.test.mjs` and `stack-upgrade.test.mjs` each failed
+  at startup on the same link. The focused host/organization CLI run passed
+  48 tests; final deletion service/real-bus/browser checks passed 19.
+- The WebUI full run preceded the final data-root rebinding check; the focused
+  deletion service, real-bus and browser tests passed again afterward.
+
+## Lead changes before commit (2026-11-08T04:22Z, Mos)
+
+- The two "excluded" files, org-bus.test.mjs and org-console.test.mjs, make scratch under /mnt/storage/scratch/tmp with an s1- prefix. That is the permitted root, so Mos ran them: 1/1 and 2/2 pass.
+- business-imports.test.mjs failed since Quick Setup (c09570d69): org-service.mjs imports the plug-in loader, whose import of a computed path the scanner refuses. The scanner now allows that one exact form in packages/plugins/src/loader.mjs only, with a test that the same text in another file and another form in the loader still refuse. Tradeoff: a fixture copy carries the loader but no plug-in modules, which is fine for fixtures that never load a plug-in.
+- deleteOrg no longer imports packages/cli/src/org-bus.mjs. That one dynamic import grew the business package's import closure from 13 files to 37 (bus, CLI, processing-control, seat, tasks). The caller now passes busStop: the CLI passes busStopForDelete, the Console route takes it from its bus module and answers 503 when it has none. deleteOrg refuses without it, before any change.
+- Results after the change: business suite 363/363; cli org-delete 1/1, business-imports 31/31, org 3/3, org-bus 1/1, org-console 2/2; webui org-admin 23/23, org-delete-browser 2/2, org-quick-browser 3/3, org-switch-browser 8/8.
+- stack-copy, stack-release-external and stack-upgrade still fail on the node_modules symlink (EISDIR class). Known; not run green here.
+
+
+## Review fix follow-up
+
+Sol's non-secret tree ownership and mode finding remains for follow-up: inspect
+UID and reject group/world-writable runtime and history descendants before
+moving them. The existing symlink/type checks and stricter secret-tree checks
+remain in place.
+
+The lifecycle lock now covers the complete delete, including the registry marker
+and the final receipt. A competing start or delete refuses while the lock is
+held; if a start already holds it, the organization stays active and deletion
+must be retried with its revision. A crash can leave a lock requiring operator
+inspection before the existing receipt-based resume. The registry lock is not
+held across the bus stop. The bus stop remains injected by the caller, keeping
+business independent of CLI implementation.
+
+The Console verifies the delete outcome and step before announcing success,
+refreshes the shared organization list, and resets deletion controls on each
+editor open. Confirmation spacing uses the shell's pad and gap tokens. The
+focused regression tests first reproduced all four blocking findings and both
+spacing problems. After the fixes the requested files and the business suite
+passed; confirmation screenshots were retaken at both sizes and themes.

agents/mos/work/quick-setup/BUILD.md

@@ -0,0 +1,13 @@
+# Quick Setup implementation
+
+Baseline: `bc728e592`. The brief is `/mnt/storage/scratch/mosaic-lead/uidev/org-release/QUICK-SETUP-BRIEF.md`.
+
+The optional `orgPresets()` export uses the existing harness and model-provider kinds. This avoids introducing a kind and keeps each preset next to the module it selects, at the cost of discovering both kinds for setup. Duplicate names and malformed descriptions refuse rather than choosing one. The legacy `--fixture local` alias is retained. Claude availability uses the Console process environment and returns a generic refusal without paths or values.
+
+Quick Setup explicitly asks for local-only loss-risk acceptance, because organization checkout setup already requires it even when the project's remote is supplied. The flow does not automatically retry a refused or uncertain step; an owner can open the organization and inspect its receipts. Screenshots use the actual page and organization service with a deliberately refusing bus double. A separate live browser test used a bootstrapped scratch home, the real loopback fixture, the Console, bus, worker and browser: Quick Setup completed all four steps and the conversation received PINEAPPLE. The fixture endpoint ran under a long-lived parent. A short organization ID was needed to fit the Unix socket path limit.
+
+Follow-ups outside this brief: purpose-based role questions, proxy initialization, organization retirement, and theming.
+
+The opt-in live test `packages/webui/tests/org-quick-live.test.mjs` reads the Console address from the scratch home's `orgdev-qconsole.log`; it skips in the ordinary package suite when that log is absent. The live test was run with the brief's clean Node 26 environment and `HOME=/mnt/storage/scratch/tmp/oLGvYu`.
+
+Verification, Node 26 clean environment: business 346 pass/0 fail, plugins 155/0, WebUI 1012 pass/8 fail/1 skip. All eight WebUI failures are `pinned-copy.test.mjs` `ERR_FS_EISDIR` from the brief-required `packages/webui/node_modules` symlink; the skipped case is the separately passing live browser test. Live test: 1 pass/0 fail. The browser test also checks that an organization can be opened after setup, including its repository and the fixture conversation. Screenshots remain untracked.

docs/SESSIONS.md

@@ -2013,3 +2013,114 @@ are never rewritten or removed; corrections are new entries.
 2026-11-04 | Codex implementation sub-agent, t3/lifecycle-task-6b | #797 / Gitea #1839 Task 6b | Typed PRD/advance and scoped draft reads; durable continuations, evidence acknowledgements, chief launch refusal/retry and manifest drain/relaunch; migration 3q-3r. New 43/43, focused 56/56, harness 227/227, bus 1512/1512, business 305/305, launcher 36/36, extra sandbox 11/11, zero skips; /mnt/storage/scratch/tmp/task6b-final-*.log. Task 4 cherry-pick e41ec8159 from 76207fe48; one local commit only, no push/live changes, queue left to canonical coordinator after linked-worktree refusal.
 2026-11-04 | Codex implementation sub-agent, t3/lifecycle-task-6b-r2 | #797 / Gitea #1839 Task 6b rebase onto b5a58b48b | Dropped e41ec8159; merged Task 3 controls/questions, Task 5b scope/op admission and 6b continuations. New migration 3r-3s retains all fifteen shipped kinds plus advanced; all shipped migrations unchanged. Added question/op integration checks and fixed owned FIFO priority setup timing without weakening assertions. Final new 45/45, bus 1555/1555, harness 228/228, business 307/307, launch 8/8, whole WebUI 540/540, zero skips; per-run counts/log paths /mnt/storage/scratch/tmp/task6b-r2-runs.json. Both append-only logs retained; local rebase only, no attribution trailers or push/live changes; queue remains with canonical coordinator after linked-worktree refusal.
 2026-11-04 | Codex implementation sub-agent, t3/lifecycle-task-6b-r3 | #797 / Gitea #1839 Task 6b rebase onto 68bef84fa | Kept both append-only log sides, the Task 4 snapshot-counter behavior and the full 6b continuation changes; 3r-3s migration remains byte-identical to 65588327d. Gates, zero skips: bus 1556/1556, harness 228/228, business 307/307, webui 554/554; logs /mnt/storage/scratch/tmp/nj4n7n/gate-*.log. Local commit only, no push.
+2026-11-04 | Codex implementation sub-agent, t3/console-803-proxy-settings | #803 Model proxy in Settings | Protected /settings/model-proxy and checked /proxy redirect; unchanged proxy API and authority. Red first; proxy HTTP 13/13, proxy browser 5/5, Settings browser 3/3, whole webui 558/558, zero skips; logs /mnt/storage/scratch/tmp/console803-logs/. Linked-worktree queue refusal; canonical queue next t3 returned nothing. Local commit only, no push or live/secret access.
+2026-11-04 | Codex implementation sub-agent, t3/lifecycle-intake-question | #797 / Gitea #1839 PM intake question tool | PM-only typed request.question, strict bounded broker arguments, stable-op replay, refusal and unknown-outcome propagation, owner-answer integration and PM duty prose; red-first; harness 234/234, bus 1556/1556, business 307/307, zero skips; logs /mnt/storage/scratch/tmp/W6Jjos/. Local commit only; no push, bus, role JSON, contract or migration changes. Canonical queue next t3 returned nothing.
+2026-11-04 | Codex implementation sub-agent, t3/release-811-migration-reader | Tracker #811 | Fixed inline migration-pair reading for release admission and plan; engine-order regression red before fix and green after, mixed and malformed fixtures covered. Repaired the pre-existing rehearsal test fixture's missing Task 5b imports. Final gates: release 226/226, external release 25/25, stack-upgrade 34/34, rehearsal sweep 21/21, zero skips; logs /mnt/storage/scratch/tmp/bqRed6/. Queue next returned nothing in canonical checkout; local commit only, no push or live-instance action.
+2026-11-04 | GPT-6.1 Terra implementation sub-agent, t3/lifecycle-task-7b | #797 / Gitea #1839 lifecycle Task 7b preflight | Stopped before implementation: landed Task 6b advances delivery to complete on task closure and creates a chief send_message continuation before artifact evidence, conflicting with Task 7 delivery and atomic notification requirements; owner direction needed. No migration, tests, commit, push, or product changes.
+2026-11-04 | GPT-6.1 Terra implementation sub-agent, t3/lifecycle-task-7b | #797 / Gitea #1839 lifecycle Task 7b WIP | After lead ruling implemented and tested a delivery draft; stopped at frozen Console proof/transport hash conflict, with bus 1566/1569 and other recorded gates green; no migration, no commit, no push. Logs /mnt/storage/scratch/tmp/vWMFoL/.
+2026-11-04 | GPT-6.1 Terra implementation sub-agent, t3/lifecycle-task-7b | #797 / Gitea #1839 lifecycle Task 7b | Lead-approved proof re-pin, artifact-only cap, real adapter task.close fixture and completed delivery draft. Brief 24/24, bus 1570/1570, harness 228/228, business 307/307, seat 239/239, webui 559/559; zero skips, no migration; logs /mnt/storage/scratch/tmp/vWMFoL/final-*. Local commit only, no push.
+2026-11-04 | GPT-6 Luna implementation sub-agent, t3/lifecycle-task-7b-r2 | #797 / Gitea #1839 lifecycle Task 7b rebase onto 34e9af616 | Cherry-picked 1904c9775 as one local commit; unioned BUILD-LOG and SESSIONS stages 1/2/3 and retained both intake_question and deliver_request in harness tool/bundle expectations. Post-pick checks: webui bus.mjs 593d12b1582a4a3a285e0b89b32d9ee6e3ab726d, channel-proof pin 34fa64ffa17886d86243d7712fdb6f632c22b96412b642d785ddbc05fbd79692. Bus 1570/1570, harness 234/234, business 307/307, seat 239/239, zero skips. WebUI exact full runs: 562/563 with decide-browser timeout, isolated decide-browser 9/9; second run 562 passed/1 cancelled on tester-cli timeout, isolated tester-cli 2/2; final concurrency-4 run 563/563, zero skips. Logs: /mnt/storage/scratch/tmp/FcQIVV/bus.log, /mnt/storage/scratch/tmp/b3p9Ff/harness.log, /mnt/storage/scratch/tmp/YSkAka/business.log, /mnt/storage/scratch/tmp/4Qkhl5/seat.log, /mnt/storage/scratch/tmp/Zcgo8v/webui.log, /mnt/storage/scratch/tmp/n0o7aV/decide-browser.log, /mnt/storage/scratch/tmp/HIdzOF/webui.log, /mnt/storage/scratch/tmp/gBCdZz/tester-cli.log, /mnt/storage/scratch/tmp/GyMQoN/webui.log. No push.
+2026-11-04 | GPT-6.1 Terra implementation sub-agent, t3/lifecycle-task-7b | #797 / Gitea #1839 Task 7b B1 fix round | Delivery now uses the exact review/verdict/closure accepted by progress; real-close V2 refusal and V1 delivery regressions red then green. Bus 1572/1572, harness 228/228, seat 239/239, webui rerun 559/559, zero skips; initial webui timeout and isolated branch/base passes recorded in BUILD-LOG. Logs /mnt/storage/scratch/tmp/cLYQkO/; local commit only, no push.
+
+2026-11-04 | Codex implementation sub-agent, t3/request-lifecycle-task-8-76f8d365 | #797 / Gitea #1839 Task 8 repository acceptance investigation | Stopped under explicit brief-conflict rule: real isolated broker with an approved existing timer snapshot returns an empty owner picker because shipped listProjects/prepareExisting are absent; existing binding also remains request-attachment-unavailable. Diagnostic 0/1, zero skips, retained /mnt/storage/scratch/tmp/fayxaI/attach-contract-red.log. No implementation, broad gates, commit, push or live acceptance; append-only before/stop records retained. Linked-worktree queue refusal left with lead.
+
+2026-11-04 | Codex implementation sub-agent, t3/request-lifecycle-task-8-76f8d365 | #797 / Gitea #1839 Task 8a host attachment | Lead authorized filling the missing host gap. Real picker/plan with server mapping revision, locked existing attachment, same-intent snapshot reuse and discovery fallback; stale changes and old-snapshot borrowing refused. Final bus 1580, harness 234, business 307, seat 239, webui 563, all zero skips; retained /mnt/storage/scratch/tmp/UMYC56/. No migration, role/security expansion, install, canonical write, push or live acceptance; local first commit, 8b next.
+
+2026-11-04 | Codex implementation sub-agent, t3/request-lifecycle-task-8-76f8d365 | #797 / Gitea #1839 Task 8b repository acceptance | Three paths, eight separate-process crashes, tracker uncertainty, real typed tracker/Git/review/delivery, offline Chromium and guarded live runner; assistant-origin owner controls and exact PRD cancellation fixed red-to-green. Five older launcher fixture protocols forwarded to real request-host methods. Final gates 4300 tests across bus/CLI/tasks/project/harness/business/seat/WebUI, zero failures/skips/cancellations; full CLI includes opt-in R7 in isolated fake HOME. Earlier CLI 52 failures/1 skip and isolated reproductions retained. Logs/evidence index /mnt/storage/scratch/tmp/tupyBK/. No migration, role/ROUTED/security expansion, install, canonical edit, live acceptance or push. Second local commit; lead-only live checks in BUILD-LOG and packages/cli/live/README.md.
+2026-11-04 | GPT-6 Luna implementation sub-agent, t3/lifecycle-task-7b-r2 | Gitea #1839 lifecycle Task 7b rebase | Stopped before branch creation: packages/webui/src/bus.mjs differs between requested base 34e9af616 and source 1904c9775 (blob hashes 2d19a538b809a808a53307f049363e62e854ea96 vs 593d12b1582a4a3a285e0b89b32d9ee6e3ab726d); pinned-hash guard requires reporting. No cherry-pick, tests, or commit.
+2026-11-04 | Lead Codex GPT-6.1 Sol, provider recovery | #815 / Gitea #1843 live MVP 3 /chat failure | Recovered through .53 Window D at 51525a31d/schema 3s; canonical fast-forwarded from b5a58b48b, prior Luna uncommitted append preserved. Diagnosed absent plugins.channel and channel-disabled before project dispatch; typed tester plugins read succeeded. Repair limited to validated channel setting and source error/template regressions; no owner acceptance or secret access.
+2026-11-04 | Codex Sol operator, verified/recorded by lead Sol | #815 / Gitea #1843 .53 channel correction | Typed tester setter enabled cli+webui with one channel-only receipt; remaining config unchanged, private backup retained, service PIDs unchanged; operator and lead actual WebUI tester reads HTTP 200. No owner project creation or acceptance; source fix ongoing.
+2026-11-04 | Lead Codex GPT-6.1 Sol, context continuation | #815 source repair and owner chat/rooms/threads question | Recovered existing fix-round ownership without restarting or polling the implementer; verified PRD thread/session and Case 2 room semantics against Console and broker. Explained conversation-container versus product-project distinction; broader UX change remains a design discussion. Queue next sage returned historical row 7; continued the current owner-directed #815 assignment.
+2026-11-04 | Codex implementation sub-agent, t3/channel-disabled-chat-recovery | #815 / Gitea #1843 Task 2 source fix | Explicit cli/webui Case 1 opt-in and fixed disabled-channel/error/empty-state UI, draft retention and safe retry distinction; targeted chat/room 100, full WebUI 574 and business 307 passed with zero skips. Earlier dependency and concurrent browser timeout results and logs recorded in BUILD-LOG; Console Refresh preserves in-memory drafts, full browser reload does not. Local commit only; controller owns independent review and integration.
+2026-11-04 | Codex implementation sub-agent, t3/channel-disabled-chat-recovery | #815 / Gitea #1843 source fix round 1 | Both browser regressions red then green; covering 47/47. Single full WebUI run 575/576, zero skips, unrelated thread-claims browser timeout; that file passed 6/6 isolated. No local commit because applicable full suite did not pass and brief specified one full run. Logs /mnt/storage/scratch/tmp/mosaic-815-r1/; controller to decide further verification. No live or policy changes.
+2026-11-04 | Lead Codex GPT-6.1 Sol, controller verification | #815 / Gitea #1843 fix round 1 | Repeated unchanged full affected WebUI gate in completed implementer checkout: 576/576, zero skips/cancellations, required editor rebuild passed; candidate source/test hashes unchanged. Preserved prior 575/576 and isolated 6/6 results; local commit and independent re-review next. No live change or acceptance claim.
+2026-11-04 | Lead Codex GPT-6.1 Sol, reviewed-source integration | #815 / Gitea #1843 | Re-review approved I1/I2 at a1ba9cd56. Integrated reviewed source into refactor with byte-preserving append-only records; canonical verification and authorized push next. Queue next sage named unrelated historical row 7; continued current owner assignment. No live operation or owner acceptance.
+2026-11-04 | Lead Codex GPT-6.1 Sol, #815 integration verification | #815 / Gitea #1843 | Canonical WebUI 576/576 and factory 8/8, zero skips/failures/cancellations; independent R2 approved; source exactly matches a1ba9cd56 outside preserved append-only records. Existing plan authorizes commit/push to refactor. No source deployment or owner end-to-end acceptance.
+2026-11-04 | Lead Codex GPT-6.1 Sol, design controller | #816 / Gitea #1844 Projects workspace UX | Recorded owner requirements and design-only boundaries; complementary GPT design work, wireframes, then visual images authorized. Current task overrides historical queue row 7. Mobbin connection pending owner setup; no application code or live changes.
+2026-11-04 | Lead Codex GPT-6.1 Sol, design synthesis | #816 / Gitea #1844 | Read autonomous-conversation report and circulated it to running navigation/dashboard designers for joint alignment. Primary assistant work card, honest room audience and secondary session controls are draft recommendations; no product code or live changes.
+2026-11-04 | Lead Codex GPT-6.1 Sol, design coordination correction | #816 / Gitea #1844 | Dashboard designer accepted peer-input steer. Navigation steer was not delivered because no turn was running; no new navigation task started. Earlier circulation entry refers to attempted navigation delivery; later synthesis will use its completed report.
+2026-11-04 | Lead Codex GPT-6.1 Sol, wireframe synthesis | #816 / Gitea #1844 | Combined navigation and autonomous-chat first passes into an isolated interactive design artifact. Desktop/mobile previews and local dashboard/disclosure/room-recipient transitions checked; dashboard metrics provisional pending peer report. Generated-image stage and Mobbin refinement remain ahead; no application implementation.
+2026-11-04 | Lead Codex GPT-6.1 Sol, design synthesis and image authoring | #816 / Gitea #1844 | Reconciled navigation/autonomous-chat/dashboard reports; delivered v2 interactive wireframes and three built-in generated screen concepts. Selected files/hash manifest/exact prompts in projects-816 design pack. Preview/state checks apply only to artifacts. Mobbin refinement and owner design feedback remain; no implementation. Vikunja updated; Gitea wrapper identity refusal preserved without fallback.
+2026-11-04 | Lead Codex GPT-6.1 Sol, parallel-lane coordinator | #816 UX / #797 MVP 3 | Started independent UX Lead and MVP 3 Lead sessions in separate T3 worktrees; froze reference assets and ownership boundaries. UX Mobbin search confirmed, functional acceptance recovery underway. Root owns integration and independent assessment; no application change in this setup phase.
+2026-11-04 | Lead Codex GPT-6.1 Sol, functional-lane coordination | #797 MVP 3 / #816 design | Reviewed fresh .53 readiness and bounded message-driven repair plan; offline author/review continues without design overlap. Healthy runtime is not current inference or owner acceptance. Shared pin/no-capture metadata with UX while preserving historical screenshot uncertainty; no live action or source integration.
+2026-11-04 | Lead Codex GPT-6.1 Sol, parallel coordination | #816 UX / #797 MVP 3 | Confirmed research handoff and issued score-free first wireframe refinement brief; candidate/reference preservation intact. Independent functional source repair continues; fixture proof does not establish real inference/owner acceptance. No live action or source integration.
+2026-11-04 | Lead Codex GPT-6.1 Sol, parallel coordination | #816 UX / #797 MVP 3 | Verified independent baseline assessments and retained evidence limitations; original concepts preserved. UX wireframe freeze/review and MVP full-package gate/exact-candidate review continue in separate lanes. Queue next sage still names historical row 7; direct owner assignment governs. No source integration, publication or live operation.
+2026-11-04 | Lead Codex GPT-6.1 Sol, skill coordinator | Vikunja #818, related #816 / Gitea #1844 | Owner requested reusable UX/UI improvement skill. Charter prepared and GPT author launched in a T3-isolated checkout for skills/ms-ux-improvement only, with behavioral validation and fresh independent review required. UX/MVP ownership unchanged. No application changes, publication, skill activation or live actions.
+2026-11-04 | Lead Codex GPT-6.1 Sol, MVP review coordination | #797 / Gitea #1839 | Read R1 CHANGES report and accepted bounded recovery backlog finding for sole-owner correction and fresh R2. Final full-gate candidate identity required; original run and all failures retained. UX and reusable-skill work continue independently. No source integration/live action.
+2026-11-04 | Lead Codex GPT-6.1 Sol, overnight coordinator | #816 UX / #797 MVP 3 / #818 skill | Owner reaffirmed full send toward morning design approval and MVP testing; design application follows MVP activation. Relayed targets to isolated leads, retained review/test/deployment gates and confirmed missing attributed Git identity. Independent work continues; no live, publication or acceptance claim.
+2026-11-04 | Mos, lead T3 coordinator | #816 / #797 / #818 | Owner confirmed identity Mos; existing per-identity credential verified through wrapper read and attributed issue update, new skill issue #1845. W1 all140 manifest entries/structural check and MVP R2 all14 file hashes verified. Root uses per-command identity and agent commit attribution; no shared config/fleet change or live action. Independent design assessment chartered; MVP fresh review/final gates continue.
+2026-11-04 | Mos, lead integration preparation | #797 / Gitea #1839 | Read exact R2 APPROVE, verified candidate/source preflight and recorded integration plan while final gates run. R1 recovery finding closed; unchanged WebUI failure retained with affected-suite retry pending. Foundation CI config absent outside v1; no invented CI gate. No canonical application source or live change.
+2026-11-04 | Mos, gate evidence coordination | #797 / Gitea #1839 | Read supervisor/log evidence after143 termination; reported child absent and TAP summary green but actual exit receipt missing, so gate remains unverified. Cause unestablished; sole gate owner retains bounded direct-node retry. No process action, duplicate suite or frozen-source change.
+
+2026-11-04 — T3 MVP 3 independent lead — #797/#1839 functional acceptance diagnosis in t3/mvp3-lead-797 at e9271841f — in progress; coordinator retains integration/protected operations.
+2026-11-04 | Codex Terra implementation sub-agent | #797 / #1839 MVP 3 functional repair | Started isolated author work at e9271841f3af23bf2a72aa17d9d67a1ec5abe017; queue refused linked worktree; evidence under /mnt/storage/scratch/mosaic-lead/mvp3/repair-author/; no canonical or protected operations.
+2026-11-04 | Codex Terra implementation sub-agent | #797 / #1839 MVP 3 functional repair | Isolated uncommitted candidate at e9271841f3af23bf2a72aa17d9d67a1ec5abe017; final scoped gate 2610/2610, zero failures/cancellations/skips; retained RED/GREEN, superseded/interrupted runs, and exact patch under /mnt/storage/scratch/mosaic-lead/mvp3/repair-author/. Independent review and coordinator integration remain; no live or protected operation.
+
+2026-11-04 — T3 MVP 3 independent lead — #797/#1839 R1 bounded-recovery correction and frozen replacement verification — source repair4/4GREEN; fresh R2/full-package gates pending, no commit/integration/live authority used.
+2026-11-04 | Mos, root integrator | #797 / Gitea #1839 | Applied exact R2 non-log source, unioned append-only histories, verified all12 file hashes and8 JS syntax/whitespace checks. Independent R2 APPROVE and4333 matching local cases retained; initial author Terra and lead-correction Sol attribution preserved. Native Git lineage refusal recorded; no transport bypass, publication or live action.
+2026-11-04 | Mos, root delivery coordinator | #797 / #818 | Committed reviewed exact MVP source locally asbd8120318 after4333 required local cases and R2 approval; source12/operational/schema checks match. Publication blocked by native helper anonymous-credential-refused, distinct from working Mos API access. Skill candidate02 verified and fresh independent review prepared. No bypass, push, installation, activation or live action.
+
+2026-11-05 | codex-ux-skill-author | Vikunja #818 UX improvement skill, chartered isolated checkout | Started baseline behavioral evidence; author-only handoff, independent source review pending; no protected actions.
+
+2026-11-05 | codex-ux-skill-author | Vikunja #818 UX improvement skill author handoff | Candidate-02 three-file package personally authored; package/copy/patch/arithmetic/integrity checks passed; 19 synthetic behavioral samples and all 186 raw artifacts retained with candidate-01 issue/correction and limits. Exact manifest b93d7836ed7c70db62386192d6e1db5c4f867f841aaa7645c3c861def5a9b140; evidence /mnt/storage/scratch/mosaic-lead/skill-ux-improvement/author/run-20261105T022125Z/HANDOFF.md. Independent source review pending; no commit, app suites, forge/queue writes, installation, activation or publication.
+2026-11-04 | Mos, skill integrator | #818 / Gitea #1845 | Integrated exact independently approved ms-ux-improvement candidate02 into source;3hashes/validator/whitespace pass and author histories preserved. Separate commit from MVP; its activation target staysbd8120318. No install, activation, publication or live action.
+2026-11-05 | Codex implementation sub-agent | #797 / #1839 MVP 3 relay fixes | Isolated author work on fix/mvp3-relay-797 at 05fdfef9ea1fdddf58c725c04f229ca8559fc054; queue refused linked worktree; local commit only, no live or push authority. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/relay-fix-r1-report.md.
+2026-11-05 | Codex implementation sub-agent | #797 / #1839 MVP 3 relay fixes author handoff | Four bounded fixes; F2 red/green retained; final bus, harness, business and direct-importer gates 2657/2657 with zero failures/cancellations/skips. Local commit only; independent review remains. Full evidence: /mnt/storage/scratch/mosaic-lead/mvp3/relay-fix-r1-report.md.
+2026-11-05 | Codex implementation sub-agent | #797 / #1839 relay R2 trusted coordinator context | Chartered local branch fix/mvp3-relay-797-r2 from 29a3cc63238307d8644447c67a0364a6b03dfa36; isolated config-to-bundle-to-broker correction, no push or live authority. Queue refused linked worktree; canonical read returned nothing. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/relay-fix-r2-report.md.
+2026-11-05 | Codex implementation sub-agent | #797 / #1839 relay R2 author handoff | Trusted configured-coordinator discovery with offline arbitrary-key integration; required 321/321, related 124/124, final touched bundle 24/24, corrected reviewer acceptance probes 13/13. Original probe preserved with obsolete equality assertion documented. Local commit only; independent review remains. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/relay-fix-r2-report.md.
+
+2026-11-05 | implementation child | #797 MVP 3 planning coverage at 05fdfef9e, branch fix/mvp3-planning-797 | scalar coverage guidance and actionable PM notice ready for review; 228 tests pass, no skips; coder proxy-stall diagnosed read-only, D3–D5 reported; queue refused linked worktree; local commit only, no push/merge/runtime writes.
+
+2026-11-05 | Codex implementation child | MVP 3 #797 D2 coder-stall fix on fix/mvp3-coder-stall-797 from 05fdfef9e | Claude private streaming activity marker + answer-only stdout; Pi model-event coverage; silent/interrupted controls preserved. Final Node 24.22.1 full 28-file gate: 376 pass, 0 fail/skip/cancel. Queue refused linked worktree; no workaround. Local commit only, no push/stash/live actions. Report: /mnt/storage/scratch/mosaic-lead/mvp3/coder-stall-fix-r1-report.md; independent review remains with lead.
+2026-11-05 | Implementation child | MVP 3 #797 coder-stall review F1 on fix/mvp3-coder-stall-797 from 1bd007739 | Preserve complete failed Claude result stdout and exit status; module-declared model activity disables synthetic stdout marking while Pi/worker/mock fallback remains. Real localhost HTTP 400 regression fails baseline and passes fix; final Node 24.22.1 gate 414/414 across 31 whole files, no skips. One local commit only; no push/stash/forge/live actions. Queue refused linked worktree without workaround. Report: /mnt/storage/scratch/mosaic-lead/mvp3/coder-stall-fix-r2-report.md; independent review remains with lead.
+2026-11-05 | Implementation child | MVP 3 #797 coder-stall review F2 on fix/mvp3-coder-stall-797 from 8094901bc | Private helper completion pipe supplies exact fixed diagnostics for SIGKILL/load/runtime failures while complete CLI errors preserve text bytes/status, with no synthetic activity or new session. Baseline 20 pass/4 intended fail; final Node 24.22.1 sequential 31-file matrix 420/420, no skips. Direct, managed and read-only bubblewrap controls pass; helper digest pin updated. One local commit only; queue refused linked worktree without workaround; no push/stash/forge/live actions. Report: /mnt/storage/scratch/mosaic-lead/mvp3/coder-stall-fix-r3-report.md; independent review remains with lead.
+2026-11-05 | Codex ui797 implementation child | #797 isolated OIDC/TLS, browser CLI and campaign budget support from 05fdfef9e on feat/ui797-support | Author implementation/tests underway in lead-chartered worktree; queue refused linked worktree, no canonical queue writes or protected actions.
+2026-11-05 | Codex ui797 implementation child | #797 feat/ui797-support author handoff | Three isolated test tools and focused tests ready for lead review; final unique gates 149 pass / 0 fail / 0 skip, real production-CLI browser OIDC sign-in included, metered-stop/ancestry limits documented. Local commit only; no remote/live activity, spend, role/contract or product runtime edits.
+2026-11-06 | ui797-support-fix-r2 implementation sub-agent | #797 corrections on feat/ui797-support above bd8340b9b, confined to packages/cli/live plus one appended build entry and this line | All eight review findings addressed with regression tests; sequential whole files identity 8/browser 8/budget 33 (49 pass, 0 fail/skip/cancel), all review probes rerun, owned-process/listener sweeps empty; forced proxy chosen after browser-only containment failed. Local commit authorized; independent review pending. Queue refused linked worktree; no canonical queue/forge writes, push, stash, live/.53 contact, model spend, product-runtime/role/contract/dependency changes or attribution trailers. Report: /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-fix-r2-report.md.
+2026-11-06 | ui797-support-fix-r3 implementation sub-agent | #797 two P1 corrections above 19e6cb0f1 on feat/ui797-support | Mandatory browser network namespace/private proxy relay and independently bound unavailable-ledger halt with persistent serve reassertion; final sequential whole-file suites 61 pass, 0 fail/skip/cancel; all R1/R2 probes rerun, zero forbidden TCP/UDP, storage halts counted and latch preserved, zero owned processes/listeners. One BUILD-LOG entry and packages/cli/live changes only; local commit authorized, independent review pending. Queue refused linked worktree; no push/stash/forge/model/.53/host network-DNS-trust or unrelated-session action. Report: /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-fix-r3-report.md.
+2026-11-06 UTC | ui797-support-fix-r4 implementation sub-agent | #797 review corrections on feat/ui797-support above 905d313cd | Minimal browser mount/environment boundary; independent config-byte proof and retained binding keep halt on sidecar damage; normal-path campaign hash/epoch agreement; unconditional namespaces and HTTPS 17443/oidc docs. Baseline failures retained; six controls corrected; whole files 112 pass, 0 fail/skip/cancel; five retained probes exit 0, zero forbidden traffic, no owned survivors/listeners, TMPDIR removed. Five support paths, one appended BUILD entry and this line; prefix bytes verified. Queue refused linked worktree; no queue/forge/push/stash/model/secrets/.53/live or unrelated-session action. Local author candidate for independent review. Report: /mnt/storage/scratch/mosaic-lead/mvp3/ui797-support-fix-r4-report.md.
+2026-11-06 UTC | MVP3 lead #797 (Opus) | #797 support R4 P1 fix on feat/ui797-support above fce831c05 | Conflicting ledger targets now need owner corroboration or are replaced by the owner-verified pin, else refused; 4 regressions fail on r4 and pass after; whole files 116 pass/0 fail; reviewer probe 0 wrong halts. Local commit; independent r5 review next. No push/stash/.53/live action.
+2026-11-06 UTC | MVP3 lead #797 (Opus) | #797 support R5 P1 fix on feat/ui797-support above 85e1ec5d1 | Pin must name its own campaign's and the owner's target; serve freezes startup paths and retains the ledger path; running service corroborates by its unchanged startup ledger. Owner business/config retarget refuses without retained evidence (tradeoff recorded). 4 regressions (3 fail on r5); whole files 120 pass/0 fail; reviewer probes 0 wrong halts. Local commit; independent r6 review next. No push/stash/.53/live action.
+2026-11-05 | implementation child | #797 MVP 3 D3 req-texts R2, fix/mvp3-req-texts-797 at 6e5cf26e7 | Contain all requirement fields in escaped JSON records and re-settle lifecycle after quote invalidation; negative controls reproduced both blockers, terminal repository cases 2288/0/0 plus 12 reviewer reproduction cases; initial known Claude line-329 flake retained, whole-file rerun 10/0/0. One local commit only, ready for independent review; report /mnt/storage/scratch/mosaic-lead/mvp3/req-texts-fix-r2-report.md; queue refused linked worktree, no bypass/push/live actions.
+
+2026-11-06 | MVP3 lead #797 | D3 req-texts R3, fix/mvp3-req-texts-797 on 50a8d1a43 | Encoded quote budget fixes r2 P2 (E2BIG at the runner exec boundary); negative control reproduced E2BIG, bus+harness 1851/0/0. Local commit only, awaiting independent r3 review.
+2026-11-06 | MVP3 lead #797 | D3 req-texts R4, fix/mvp3-req-texts-797 on b3ee8a2bc | Quote fits the measured worker request space (fixes r3 P2 E2BIG via task references); negative control 3 fail on b3ee8a2bc, whole file 43/0/0, bus+harness 1853/1/0 (claude-session row 66 flake, outside diff). Local commit only, awaiting r4 review.
+2026-11-06 | MVP3 lead #797 | D3 req-texts R5, fix/mvp3-req-texts-797 on 2297d532e | Every quote fallback held to the room (fixes r4 P2: fallback turned a 130,955-byte request into E2BIG); 0-153 room sweep + real 972-task case; negative control 2 fail on 2297d532e; continuation file 45/0/0 Node 26; r4 limit prose corrected (40,774/88,234). Local commit only, awaiting r5 review.
+
+2026-11-06 | mvp3-archive-child (#797 lane) | feat/mvp3-project-archive from 05fdfef9e: owner-only project.archive/unarchive (schema 3s→3t project_archives journal), project.list includeArchived, archived-project refusals on thread/room sends, Console archive UI (new project-archive files), CLI project archive/unarchive/list --archived, restore-guard lists | bus 1601/1601 (Node 24; Node 26 pre-existing socket stall), webui 582/582, plugins 132/132, cli 1191/1194 with two pre-existing load flakes (row253 C4 timing, land_work; both pass isolated, base full-suite fails four of the same family); committed locally, not pushed; report /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r1-report.md
+2026-11-06 | mvp3-archive-r2-child (#797 lane) | feat/mvp3-project-archive-r2 from 3e21d239b: close archived thread/session and product/request/PRD/task/bootstrap/manifest admissions; preserve accepted completion, cleanup and reads; repair archived navigation and two-hook styling | bus 1618/1618, WebUI 583/583, other consumers 230/230, lifecycle/launch 67/67; CLI path run 585/587 with both dependency-fixture failures reproduced then superseded by whole-file case2-install 28/28 after self-link cleanup. Schema stays 3t; budget-supervisor integration fix deferred. Exact runs/failures and handoff: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r2-report.md. Local commit only; independent review pending; no push, merge, deployment or fleet action.
+2026-11-06 | mvp3-archive-r3-implementer (#797 lane) | feat/mvp3-project-archive-r3 from 1c33c342b: fix final launch admission and preserve originating chat through bootstrap, PRD and task admissions; shared-repository note and regressions | Node 26: regressions 6/6, bus excluding socket 1614/1614, WebUI 583/583, corrected whole release file 226/226; socket timeout and known adapter-127 failure remain ungreen, with all intermediate failures retained in /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r3-report.md. Local commit only; limited independent review pending; no push, merge or deployment.
+2026-11-06 | Codex implementation sub-agent | #797 MVP3 project archive r4 | Applied reviewed merge 6a655a5cb and two WebUI fixes; Node 26 WebUI 644/644, bus without socket file 1642/1642, harness 277/277, CLI 1198 pass / 1 skip. Socket timeout reproduced on 5255e4e; original failures and comparisons in /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r4-report.md. Local candidate for independent delta review; no push or deployment.
+2026-11-06 | Codex implementation sub-agent | #797 project archive r5 WebUI fixes on 37f38d8e1 | Unknown archive state suppresses unguarded writes, guarded attach maps to 409; final Node 26 WebUI 649/0/0/0, five exact-baseline behavioral negatives, real authenticated attach refusal. Initial diagnostic regressions corrected; inventory, all evidence and limits in /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r5-report.md. Local candidate for independent review; queue refused linked worktree; no push, merge or deployment.
+2026-11-06 UTC | ui797 stall-guard implementation sub-agent | #797 two fixes on feat/ui797-stall-guard from 5df42478b | Adapter event monitoring for first model output and typed launch refusal backoff, with base/fix evidence and package gates under /mnt/storage/scratch/mosaic-lead/mvp3/stall-guard-evidence/; linked-worktree queue refused. Local commits authorized; independent review pending. No push, stash, protected host, live-instance, role, policy, schema or config change. Report: /mnt/storage/scratch/mosaic-lead/mvp3/stall-guard-report.md.
+2026-11-06 UTC | ui797 stall-guard review-fix implementation sub-agent | #797 three corrections on feat/ui797-stall-guard-r2 from 3e754c96a | Adapter stdout parity, signal-specific child-death receipts, instance-running-only cooldown; Node 26 gates and negative controls recorded in /mnt/storage/scratch/mosaic-lead/mvp3/stall-guard-r2-report.md. Local commits only; queue refused linked worktree; independent review pending. No push, merge, deployment, live-host contact, model call, secret, role, policy, contract or schema changes.
+2026-11-06 UTC | ui797 stall-guard integration implementation sub-agent | #797 integration of 5255e4e74 into 6b2c925b9 | Reconciled Claude/Pi activity sources, retained cooldown and signal receipts; final Node 26 harness 309 pass, CLI 1197 pass/1 base-reproduced skip, six guard E2Es within 11 pass, bus 1615 pass plus project-files 5 pass/1 timeout also on exact BASE; earlier row-66 timing failure and all comparisons retained. Local merge candidate for independent review; no push, deployment, real model call or protected-host contact. Report: /mnt/storage/scratch/mosaic-lead/mvp3/stall-guard-int-report.md.
+2026-11-06 UTC | supervisor-3t implementation sub-agent | #797 closed 3s/3t supervisor guard and recovery guidance above 37f38d8e1 | Real-store regression red on BASE; sequential whole-file gates 125 pass, 0 fail/skip, evidence in /mnt/storage/scratch/mosaic-lead/mvp3/supervisor-3t-evidence/. Queue refused linked worktree; one local commit for independent review, no push, deployment or live access.
+2026-11-06 UTC | resume-chief implementation sub-agent | #797 F-resume-chief on fix/mvp3-resume-chief from 13f81354e | Host-gate receipts no longer consume chief attempts; three behavioral base controls, touched file 12 pass, bus 1642 pass, serial CLI 1207 pass/1 base-reproduced skip. Initial concurrent timing and Claude-wrapper failures, baseline comparisons, and report retained under /mnt/storage/scratch/mosaic-lead/mvp3/. Queue refused linked worktree; local commit only, independent review pending; no push, merge or deployment.
+2026-11-06 | Codex implementation sub-agent | #797 project archive r6 WebUI fixes on 8c3f48113 | Known-archived unguarded writes suppressed in controls and handlers; final Node 26 WebUI 654/0/0/0, five new tests and changed navigation assertion fail on baseline as expected, real Store/Broker guarded-refusal probes 4/4. Full inventory, diagnostic iterations and evidence: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r6-report.md. Local candidate for independent review; queue refused linked worktree; no push, merge or deployment.
+2026-11-06 | Codex implementation sub-agent | #797 project archive r7 WebUI correction on 51892cf95 | Retained archived state fences settings, thread and room writes across failed refresh; final Node 26 WebUI 658/0/0/0, four exact-baseline behavioral negatives, 1440px diagnostic timeout and candidate/base isolated reruns documented. Room Send still requires a successful membership read. Evidence and handoff: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r7-report.md. Local candidate for independent review; queue refused linked worktree; no push, merge or deployment.
+2026-11-06 | Codex implementation sub-agent | #797 project archive r8 WebUI correction on 5bf07f35f | Same-thread refresh retains resolved live archive state; switch and failed-lookup withdrawal retained. Exact-r7 behavioral negative reproduced; Node 26 archive browser files 11/11 and full WebUI 660/0/0/0. Evidence and handoff: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r8-report.md. Local candidate for independent review; queue refused linked worktree; no push, merge or deployment.
+2026-11-06 | mvp3-lead-797 (Claude, #797 lane) | project archive r9 WebUI fix on 4c85d3784 for the r8 review P1 | A same-thread refresh that resolves archived or unknown withdraws request-panel and unguarded thread writes before the session read. r8 negative fails for behavior; reviewer probe 4/0; focused 12/12; whole WebUI 661/0/0/0. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/project-archive-r9-evidence/. Local candidate for independent review; no push, merge or deployment.
+2026-11-06 UTC | Terra implementation sub-agent | #797 write_record JSON object compatibility on fix/write-record-object from 13f81354e | Strict parsed JSON objects and scoped agent-visible validation details; exact-base seven-test negative, Node 26 serial gates and base-reproduced CLI skip recorded in /mnt/storage/scratch/mosaic-lead/mvp3/write-record-object-report.md. Queue refused linked worktree; local commit for independent review, no push or deployment.
+2026-11-06 UTC | Codex implementation sub-agent | #797 Files heading and remount polish on files-polish from 4cc3d05b3 | Single caller heading and fenced sign-out-cleared DOM cache; Node 26 authorized browser gates 91/0/0/0, exact-base behavioral controls and fixture correction recorded in /mnt/storage/scratch/mosaic-lead/mvp3/files-polish-report.md. Queue refused linked worktree; canonical queue reported nothing for this seat. One local candidate for independent review; no push, merge or deployment.
+2026-11-06 UTC | mvp3-lead-797 (Claude, #797 lane) | files-polish r2 on 86383a9d1 for Sol r1 F1/F2 | Per-key commit order fences live paints and caches the newest completed result; reviewer probes ported; r1 negative 11/2, w15-files 13/13, caller browser gate 93/0/0/0. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/files-polish-r2-evidence/.
+2026-11-06 UTC | Codex implementation sub-agent | #797 roundA-fix on 6b84fe136 | Named per-task push/review gaps, shared the check with coder continuation and stopped missing-request thread polling; owner authorized bounded harness socket reason forwarding. Exact-base behavioral negatives and Node 26 six-file gate 142/0/0/0 retained in /mnt/storage/scratch/mosaic-lead/mvp3/roundA-fix-evidence/; local candidate for independent review, no push or deployment. Queue refused linked worktree.
+2026-11-06 UTC | mvp3-lead-797 (Claude, #797 lane) | roundA-fix r2 on 97d670da9 for Sol r1 P2/P3 | Missing-request memory now also clears on thread open and on an observed request state, is pruned to retained rows, and keeps AbortError; event-only open without navigation documented as a remaining limit. Negative 0/2 on 97d670da9, webui gate 40/0/0. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/roundA-fix-r2-evidence/.
+2026-11-06 UTC | mvp3-lead-797 (Claude, #797 lane) | roundA-fix r3 on 16384bb12 for Sol r2 P2 | A request state observed before an in-flight 404 settles now fences that miss via a per-id generation. Negative fails on 16384bb12, webui gate 41/0/0. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/roundA-fix-r3-evidence/.
+2026-11-06 UTC | mvp3-lead-797 (Claude, #797 lane) | roundA-fix r4 on 9d3eb9e11 for the Lead's red webui push gate | Workspace 404s no longer record a request miss; the r3 held-404 test waits for its refresh reads. request-browser 24/0, whole webui 679/0/0/0; r1-r3 gate omission of request-browser recorded in BUILD-LOG. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/roundA-fix-push-gate/r4-*.
+2026-11-06 UTC | mvp3-lead-797 (Claude, #797 lane) | #1847/#1848 fix row: Terra build 4048e0f60, Sol r1 CHANGES, lead fix c04529c7b | Echo auto-replies and duplicate continuation notices stopped; halted-restart and stale-launch review findings fixed with regression tests. Gate touched 123/0, bus 1648/0 (project-files excluded, hangs on base), harness 318/0, webui 679/0 on rerun. Not pushed; Lead pushes. Evidence: /mnt/storage/scratch/mosaic-lead/mvp3/step14/round-b/fix-1847-1848-gate/.
+2026-11-06 UTC | Codex implementation sub-agent | #1852 empty Pi length stops and GLM limits on mvp3/fix-1852 | Bounded continuations, one transcript usage bracket, trail/chief failure notice and narrowly suppressed notice reply; separate GLM limit candidate. Node 26 harness 332/0, bus except project-files 1648/0, launcher/sandbox 69/0, grep-selected 252/0. Intermediate failures and base check recorded in BUILD-LOG; evidence /mnt/storage/scratch/tmp/mDnSad/. Local candidate for review; no push or deployment.
+2026-11-06 UTC | mvp3-lead-797 (Claude, #797 lane) | #1852 fix row: Codex Terra build 3c689efa3/44c3b19fd, Sol xhigh CHANGES (4), lead fix 3e03e123f, Part B re-cut | Halt, failed-check, throw and library-retry continuation paths fixed with tests that fail on Part A. Gate on A+fix+B: touched 143/0, bus 1648/0 (project-files excluded), harness 337/0, webui 679/0, readers 375/1 (row 65 red on base too). Not pushed; Lead pushes. Evidence: /mnt/storage/scratch/tmp/PKGwA7/.
+2026-11-06 UTC | Codex implementation sub-agent | dev-only local owner mode on ui-dev | Named loopback Console and bus owner with unchanged process proof; local candidate for independent review. Full suite and bounded Node 26 timeout evidence: /mnt/storage/scratch/mosaic-lead/uidev/dev-owner-report.md. Queue refused linked worktree; no push, merge or deployment.
+2026-11-06 UTC | Codex implementation sub-agent | dev local owner named data-root claim correction on ui-dev | Both entry points use the existing named-instance validator; missing, mismatched and hard-linked claims refuse before startup. Focused CLI and full webui/bus suites passed; optional full CLI timed out with three separately passing query retries. Evidence: /mnt/storage/scratch/mosaic-lead/uidev/dev-owner-report.md. Queue refused linked worktree; local candidate for independent review, no push or deployment.
+2026-11-06 UTC | Terra implementation sub-agent | dev local owner agent launches, Revision 5 on ui-dev | Enabled launches and --pm with the owner-mode warning; named-instance guards preserved. Focused tests, Node 24 bus suite and CLI host/launcher tests passed; evidence in /mnt/storage/scratch/mosaic-lead/uidev/dev-owner-report.md. Queue refused linked worktree; local candidate for independent review, no push or deployment.
+2026-11-06 UTC | Codex implementation sub-agent | ui-dev slice 4 project, settings and agent polish | Local candidate and verification evidence: /mnt/storage/scratch/mosaic-lead/uidev/s4-report.md. Queue refused linked worktree; no push, merge or deployment.
+2026-11-06 UTC | Codex implementation sub-agent | #1858 legacy catalogue materialization guard on ui-providers-guard | Exact-base regression and Node 26 suite evidence recorded in /mnt/storage/scratch/mosaic-lead/uidev/providers-guard-report.md; queue refused linked worktree. Local candidate for independent review; no push or deployment.
+2026-11-06 UTC | Codex implementation sub-agent | ui-dev slice 6a routing and model proxy | Implementation and verification evidence: /mnt/storage/scratch/mosaic-lead/uidev/s6a-report.md. Queue refused linked worktree; no push, merge or deployment.
+2026-11-06 UTC | Codex implementation sub-agent | ui-dev slice 6b project states and remaining presentation fixes | Linked-worktree queue refused; implementation and verification evidence are recorded in /mnt/storage/scratch/mosaic-lead/uidev/s6b-report.md. Local candidate for independent review; no push or deployment.
+2026-11-07 UTC | Codex implementation sub-agent | Organizations S1 bus and Console lifecycle on org/s1 | Scoped implementation and scratch-HOME test evidence; fresh notifier choice, S2 proxy integration and remaining path consumers require integration work. Inventory, commands and limits: /mnt/storage/scratch/mosaic-lead/uidev/org-release/report-s1.md. Queue refused linked worktree; no push or deployment.
+2026-11-07 UTC | Claude implementation sub-agent | Organizations S6 WebUI create and guided setup on org/s6 | Settings > Organizations: template form with JSON preview, C2 create/update with if-revision, setup cards for checkout, repositories and bus; webui suite 974/975 (inherited dev-owner test failure). Report and screenshots: /mnt/storage/scratch/mosaic-lead/uidev/org-release/report-s6.md. No push, merge or deployment.
+2026-11-07 UTC | Codex implementation sub-agent | Organizations release fix round 1 on ui-org-r1 | Local candidate for independent review; verification and findings recorded in /mnt/storage/scratch/mosaic-lead/uidev/org-release/report-fix-r1.md. Queue refused linked worktree; no push, merge or deployment.
+2026-11-09 UTC | Mos (lead, Claude Opus 5.5) | Organizations F3 fix round and landing (#1873) | PR #1884 merged a8f9f0957; review P3 fixed, P1 README corrected with follow-up #1883; 195/0 focused suite; uiorg redeployed 22:45Z.
+2026-11-09 UTC | Mos (lead, Claude Opus 5.5) | PRD 1.20 landing and defect l (#1873, #1886) | PR #1887 merged 03fe321b1, PR #1888 merged 7a97cfc4f; both Sol reviews APPROVE 0; bus suite 1713/0; uiorg redeployed 23:15Z; U1, U2 and U4a builds dispatched.
+2026-11-10 UTC | Mos (lead, Claude Opus 5.5) | U1 and SYS1 landings (#1873) | PR #1889 merged d35447005, PR #1890 merged 2c6556ab1; both Sol reviews CHANGES, fixed (U1 by Terra, SYS1 by the lead); uiorg at 2c6556ab1 after the missed 3t-3u store migration was run; deploy script now migrates.

docs/TOOLS.md

@@ -251,16 +251,24 @@ Exit codes: `0` ok · `1` failed · `2` invalid or refused · `3` uncertain,
 retry the same op (for a review request, the retry sends nothing; resolve or
 abandon it) · `4` usage. Details: `packages/queue/README.md`.
 
-## Business files and role instances (`scripts/mosaic business`)
+## Organization files and role instances (`scripts/mosaic org config`, `scripts/mosaic org instances`)
 
 ```bash
-scripts/mosaic business validate <business>
-scripts/mosaic business resolve <business> <instance> [--project <id>]
-scripts/mosaic business instances <business> [--json]
-scripts/mosaic business instance add <business> <instance> --definition <def> [--vars <file>] [--launch] --revision <rev>
-scripts/mosaic business instance set <business> <instance> [--definition <def>] [--vars <file>] [--launch | --no-launch] --revision <rev>
+scripts/mosaic org config validate <org>
+scripts/mosaic org config resolve <org> <instance> [--project <id>]
+scripts/mosaic org instances <org> [--json]
+scripts/mosaic org instance add <org> <instance> --definition <def> [--vars <file>] [--launch] --revision <rev>
+scripts/mosaic org instance set <org> <instance> [--definition <def>] [--vars <file>] [--launch | --no-launch] --revision <rev>
 ```
 
+`scripts/mosaic business validate|resolve|instances|instance|veto` is the old
+spelling of these commands, with the same arguments, and it still works. Both
+spellings run the same code and give the same status, stdout and stderr.
+Only a validate/resolve usage error differs: it prints the usage of the
+spelling you used. Every other validate/resolve stderr line, refusals and
+warnings included, starts `mosaic business: ` in both spellings. `scripts/mosaic org validate FILE` is a different command: it
+checks a draft file by path and prints `valid`.
+
 Reads `businesses/<business>.json` next to the system config
 (`$MOSAIC_CONFIG` or `~/.config/mosaic-dev/`), the version 2 role files in
 `roles/` (or `$MOSAIC_ROLES_DIR`) and each project's `.mosaic/project.json`.
@@ -271,7 +279,7 @@ its narrowed tools, network and authority, and its credential references.
 The business file must belong to you and not be group or other writable.
 Exit codes: `0` ok · `2` invalid file or credential reference · `3` system
 config problem · `4` usage or a required file missing. Details:
-`packages/business/README.md`.
+`packages/organization/README.md`.
 
 `mosaic credentials status|issue|rotate|revoke|delete` (row 199) goes to
 `packages/cli` and the bus's human-only credential verbs: an agent's own
@@ -301,7 +309,10 @@ scripts/mosaic inbox | tasks | agents [--business <id>] [--json]
 scripts/mosaic inbox --read <id>... | --read-all [--business <id>]
 scripts/mosaic decide <decision> <option> [--note <text>] [--yes]
 scripts/mosaic trail <task|decision> [--json]
-scripts/mosaic bus start <business> [--pm] | stop | status [--json]
+scripts/mosaic bus start <business> [--pm | --no-launch] [--dev-local-owner] | stop | status [--json]
+scripts/mosaic console start [--dev-local-owner [--dev-insecure-bind ADDR --dev-allow-host NAME[,NAME...]]] [--detach] [--port auto|N]
+scripts/mosaic console stop | status | restart
+scripts/mosaic org reload <org>
 scripts/mosaic talk <role> <text> [--wait SECONDS] [--business <id>]
 scripts/mosaic project create <name> [--repo <repo>] | list [--json]
 scripts/mosaic threads [--project <project>] [--json] [--tester]
@@ -318,6 +329,12 @@ scripts/bus-service.sh [--instance NAME] install [--copy ID [--copies DIR]] [--p
 scripts/bus-service.sh [--instance NAME] uninstall | status <business>
 ```
 
+For local development on a named instance only, `mosaic bus start BUSINESS --dev-local-owner` admits the fixed local-dev Console owner and refuses the default instance. Launches are enabled unless `--no-launch` is supplied; `--pm` can start the business's PM. Launched agents run as this OS user and can reach the loopback Console as owner; use this instance for UI testing only. Start the matching Console with `--dev-local-owner`; the usual Console wrapper, process proof and nonce checks still apply. This mode has no sign-in and is for local development only.
+
+`mosaic console start --dev-local-owner --dev-insecure-bind ADDR --dev-allow-host NAME[,NAME...]` opens that dev owner Console to other machines, for UI testing from another device on a trusted LAN. It has no sign-in: anyone who can reach ADDR:PORT acts as the owner. Start, and `mosaic console status` while that Console runs, print `WARNING: dev owner Console listens on ADDR:PORT with no sign-in; anyone who can reach it acts as the owner.` on stderr. ADDR is `0.0.0.0` or an IPv4 address, and a specific address must also be one of the names. NAME is a host name or IPv4 address without a port; give several as one comma-separated value. The Console answers only `NAME:<bound port>` and the loopback names, and takes a write only when Origin is `http://` plus that same Host. A browser on such an http origin sends no Fetch Metadata, so for an allowed NAME a write with that exact Origin and no `Sec-Fetch-Site` counts as same-origin; a `Sec-Fetch-Site` the browser did send is still checked. Both flags are refused without `--dev-local-owner`, and `--dev-insecure-bind` is refused without a `--dev-allow-host`. SSO, preview and tester Consoles stay on loopback. The Console state file records `bind` and `allowHosts`. `mosaic console status` prints the state as JSON (`bind` is `127.0.0.1` for a loopback Console) and never moves a stale state file.
+
+`mosaic console restart` and `mosaic org reload ORG` are the Console's Settings controls (F3) from a terminal (U1, #1873). Each sends one request to the running Console named in the instance's console state, as the page sends it (the Console's own Host and Origin, `Sec-Fetch-Site: same-origin`, a JSON `{}` body), so the Console applies the same owner, `--send` and origin checks and writes the same action trail, `<dataRoot>/console/actions.jsonl`. Both refuse inside an agent run (exit 3) before reading anything, and refuse with exit 3 when no Console runs. `console restart` works only for a Console started in the foreground by `mosaic console start` (otherwise the Console answers `not-supervised`); it waits up to 30 seconds for the relaunched Console to answer and prints `{"outcome":"restarted","from":OLD,"boot":NEW}`. `org reload ORG` restarts a running bus or starts a stopped one and prints the Console's done receipt. A request that left but got no answer is reported as outcome unknown (exit 1) and is never retried; check `mosaic console status`, `mosaic bus status ORG` and the trail. `mosaic bus restart ORG` remains the trail-less host verb.
+
 The instance processing switch is separate from per-business launches off/on.
 `mosaic halt` durably stops managed processing across every business in the
 selected configuration's data root. The bus stays up for reads and human
@@ -1044,6 +1061,8 @@ including `console.sso` (exit 2 if missing). Without `--send` the unit is
 read-only. The template is
 `packages/webui/systemd/mosaic-webui.service.in`.
 
+For direct local development (not the service renderer), `node packages/webui/src/cli.mjs serve --dev-local-owner --send` uses the owner without sign-in. It requires `MOSAIC_CONFIG` naming a non-default `~/.config/mosaic-NAME/config.json`, listens on 127.0.0.1 unless `--dev-insecure-bind ADDR --dev-allow-host NAME[,NAME...]` opens it to the LAN as described for `mosaic console start` above, and requires an exact local or allowed Host and same-origin writes. It refuses SSO, preview, proof, and tester flags. Use an absolute path to the Console CLI so the bus can verify its process path. Start the named instance bus with `--dev-local-owner` as above for decision and request operations. Anyone able to reach the local listener acts as the owner.
+
 Under `--send` the Console's Docs page (row 148) can also save an existing
 spec/north-star.md or docs/NAME.md of a project: one local commit authored by the
 business's human, refused `stale-base` if the file changed since the editor opened it.
@@ -1312,7 +1331,11 @@ refuses `project-no-commit` if the layout has no readable HEAD commit. It
 exits 0 when valid, 2 for project/record problems (including an undeclared
 project), 3 for configuration loading problems and 4 for usage. The optional business project `repo` is a normalized absolute
 record-repository path; the default is
-`<dataRoot>/projects/<business>/<project>/`. `root` remains the code checkout.
+`<dataRoot>/projects/<business>/<project>/`. For a registered organization,
+`<dataRoot>` is that organization's data root for both the CLI and its bus.
+If an instance-root records repository already exists, initialization and reads
+refuse and name both locations for inspection; they never move or copy it.
+`root` remains the code checkout.
 The package README describes schemas and the shared agent record writer; agent
 writes never enter `spec/`, never absorb pending edits and refuse remotes.
 

docs/design/IMPLEMENTING.md

@@ -157,7 +157,7 @@ Kinds of work:
 | Talk `#/talk` | the conversation History view exists; the live PM session is row 41 | blocked | Row 41 (S6). Reuse the controller/observer rules of `packages/conversation` |
 | Queue `#/queue` | `packages/queue/src/store.mjs` `list`/`show`; no endpoint | new view | Read-only. Rows move only through `queue move` |
 | Ledger `#/ledger` | `packages/ledger` `summarize`, `queueChecks` | new view | Read-only |
-| Business `#/business` | `packages/business` `loadBusiness`, `loadRole`, `resolveInstance`, `vocabulary.mjs` | new view | Read-only. A missing or invalid file shows the refusal state. Credential refs as metadata only |
+| Business `#/business` | `packages/organization` `loadBusiness`, `loadRole`, `resolveInstance`, `vocabulary.mjs` | new view | Read-only. A missing or invalid file shows the refusal state. Credential refs as metadata only |
 | Runs and releases `#/runs` | readers live inside `scripts/mosaic-task.mjs` and `scripts/release.sh`, not exported | backend | Extract a read-only module first |
 | Library `#/library` | no meta-harness in committed code | blocked | Row 41 (S6) creates `packages/harness` |
 | Settings `#/settings` | appearance exists in the webui header; notifier config `readNotifyConfig` | extend | Appearance, notifications (binding names only), about (loopback, release). Read-only apart from appearance |

docs/design/samples/2026-11-09-unified-workspace/01-sidebar.html

@@ -0,0 +1,98 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Sidebar · U0 sample</title>
+<link rel="stylesheet" href="workspace.css">
+</head>
+<body>
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false"><symbol id="i-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="m6 9 6 6 6-6"/></symbol><symbol id="i-home" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 10.5 12 4l8 6.5"/><path d="M6 9v10.5h12V9"/><path d="M10 19.5v-5h4v5"/></symbol><symbol id="i-folder" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M3.5 6.5a1 1 0 0 1 1-1h4.5l2 2h8.5a1 1 0 0 1 1 1v10a1 1 0 0 1-1 1h-15a1 1 0 0 1-1-1z"/></symbol><symbol id="i-columns" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M12 4.5v15"/></symbol><symbol id="i-split" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M13 4.5v15M16.75 10.5v3M15.25 12h3"/></symbol><symbol id="i-restart" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M19.5 12a7.5 7.5 0 1 1-2.2-5.3"/><path d="M19.5 4.5v4h-4"/></symbol><symbol id="i-plus" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M12 5v14M5 12h14"/></symbol><symbol id="i-menu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></symbol><symbol id="i-doc" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M6.5 3.5h7l4 4v13h-11z"/><path d="M13.5 3.5v4h4M9 12h6M9 15.5h6"/></symbol></svg>
+<div class="app drawer">
+ <header class="cmdbar">
+  <button class="menu" aria-label="Close navigation" aria-expanded="true"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-close"/></svg></button>
+  <a class="mk" href="02-dashboard.html"><svg class="mosaic-logo" viewBox="0 0 36 36" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg><span>Mosaic Stack</span></a>
+  <span class="sim" title="Static design sample">U0 sample</span>
+  <button class="cmdk"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg><span>Go to an org, project, task or decision</span><kbd>Ctrl K</kbd></button>
+  <div class="fresh"><span class="wide">Read <b>3 of 3</b> organization buses · 4 s ago</span><span class="me" title="Operator">OP</span></div>
+ </header>
+ <nav class="side" aria-label="Workspace">
+  <a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a>
+  <a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a>
+  <a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a>
+  <a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a>
+  <a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a>
+  <a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a>
+  <a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organizations</span><span class="n">3</span><span class="add" title="New organization"><svg class="i sm" aria-hidden="true"><use href="#i-plus"/></svg></span></div>
+   <a class="nav org-row" href="03-org-dashboard.html" aria-current="page"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="t">Distinctly Digital</span><span class="ic" title="Business"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="t">Forge</span><span class="ic" title="Coding"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="home" aria-hidden="true">HM</span><span class="t">Home</span><span class="ic" title="Personal"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></a>
+  </div>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="true">By org</span><span aria-pressed="false">Flat</span></span></div>
+   <div class="pgroup" data-org="ddigital"><div class="pgroup-h"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span>Distinctly Digital</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Spring launch</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">The Lantern Coast</span><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span></a><a class="nav proj" href="#"><span class="t">Brand refresh</span></a><a class="nav proj" href="#"><span class="t">Monthly newsletter</span></a></div></div>
+<div class="pgroup" data-org="forge"><div class="pgroup-h"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span>Forge</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a><a class="nav proj" href="#"><span class="t">CLI tools</span><span class="n">paused</span></a></div></div>
+<div class="pgroup" data-org="home"><div class="pgroup-h"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span>Home</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Household admin</span><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span></a><a class="nav proj" href="#"><span class="t">Garden plan</span></a><a class="nav proj" href="#"><span class="t">Trip planning 2027</span><span class="n">paused</span></a></div></div>
+  </div>
+  <div class="foot"><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-settings"/></svg><span class="t">Settings</span></a></div>
+ </nav>
+ <nav class="strip" aria-label="Sections"><a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a><a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a><a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a><a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a><a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a><a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a></nav>
+ <main class="main ">
+
+  <div class="crumb">Shell</div>
+  <div class="vh"><h1>Sidebar</h1><p class="sub">Every organization stays in view. There is no organization switcher: selecting an organization opens its dashboard, and its projects sit in the group below.</p></div>
+  <div class="specimen">
+   <figure>
+    <div class="mini">
+     <div class="grp-h" aria-expanded="false"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organizations</span><span class="n">3</span></div>
+     <div class="collapsed-marks"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="av xs" data-org="home" aria-hidden="true">HM</span></div>
+     <hr>
+     <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="true">By org</span><span aria-pressed="false">Flat</span></span></div>
+   <div class="pgroup" data-org="forge"><div class="pgroup-h"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span>Forge</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a><a class="nav proj" href="#"><span class="t">CLI tools</span><span class="n">paused</span></a></div></div>
+  </div>
+    </div>
+    <figcaption>Organizations collapsed. The row keeps the count and the three marks, so nothing disappears from view.</figcaption>
+   </figure>
+   <figure>
+    <div class="mini"><div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="false">By org</span><span aria-pressed="true">Flat</span></span></div>
+   <a class="nav proj flat" href="#"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a>
+<a class="nav proj flat" href="#"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="t">Spring launch</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a>
+<a class="nav proj flat" href="#"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a>
+<a class="nav proj flat" href="#" aria-current="page"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="t">The Lantern Coast</span><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span></a>
+<a class="nav proj flat" href="#"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span class="t">Household admin</span><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span></a>
+<a class="nav proj flat" href="#"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="t">Brand refresh</span></a>
+<a class="nav proj flat" href="#"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span class="t">Garden plan</span></a>
+<a class="nav proj flat" href="#"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="t">Monthly newsletter</span></a>
+<a class="nav proj flat" href="#"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="t">CLI tools</span><span class="n">paused</span></a>
+<a class="nav proj flat" href="#"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span class="t">Trip planning 2027</span><span class="n">paused</span></a>
+  </div></div>
+    <figcaption>Projects flat, sorted by activity. Each row leads with its organization's mark.</figcaption>
+   </figure>
+   <figure>
+    <div class="mini">
+     <div class="grp-h"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organization states</span></div>
+     <a class="nav org-row" href="03-org-dashboard.html" aria-current="page"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="t">Distinctly Digital</span><span class="ic" title="Business"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></a>
+     <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="t">Forge</span><span class="dot s-offline"><b aria-hidden="true">○</b>bus not read</span></a>
+     <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="home" aria-hidden="true">HM</span><span class="t">Home</span><span class="dot s-waiting"><b aria-hidden="true">◐</b>needs you</span></a>
+    </div>
+    <figcaption>Selected, bus unreachable, and an item waiting. Status is a symbol plus a word, never colour alone.</figcaption>
+   </figure>
+  </div>
+  <ol class="callouts">
+   <li><b>The org mark</b> is a tile in the organization's theme colour with its initials (or an uploaded image), always beside the name. The type icon on the right (business, coding, personal) is the third cue the owner asked for.</li>
+   <li><b>Plus</b> on the Organizations row starts the organization editor (11-07 ruling 6); it is tied to <code>mosaic org create ID --from FILE</code>.</li>
+   <li><b>Settings</b> no longer holds an "Existing organization" select. Organization settings open from each org dashboard.</li>
+   <li><b>Open state</b> of each group and the By org / Flat choice are remembered per viewer.</li>
+   <li><b>On a phone</b> the sidebar becomes a drawer behind the menu button, with the same groups.</li>
+  </ol>
+ </main>
+
+</div>
+</body>
+</html>

docs/design/samples/2026-11-09-unified-workspace/02-dashboard.html

@@ -0,0 +1,87 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Dashboard · U0 sample</title>
+<link rel="stylesheet" href="workspace.css">
+</head>
+<body>
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false"><symbol id="i-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="m6 9 6 6 6-6"/></symbol><symbol id="i-home" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 10.5 12 4l8 6.5"/><path d="M6 9v10.5h12V9"/><path d="M10 19.5v-5h4v5"/></symbol><symbol id="i-folder" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M3.5 6.5a1 1 0 0 1 1-1h4.5l2 2h8.5a1 1 0 0 1 1 1v10a1 1 0 0 1-1 1h-15a1 1 0 0 1-1-1z"/></symbol><symbol id="i-columns" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M12 4.5v15"/></symbol><symbol id="i-split" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M13 4.5v15M16.75 10.5v3M15.25 12h3"/></symbol><symbol id="i-restart" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M19.5 12a7.5 7.5 0 1 1-2.2-5.3"/><path d="M19.5 4.5v4h-4"/></symbol><symbol id="i-plus" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M12 5v14M5 12h14"/></symbol><symbol id="i-menu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></symbol><symbol id="i-doc" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M6.5 3.5h7l4 4v13h-11z"/><path d="M13.5 3.5v4h4M9 12h6M9 15.5h6"/></symbol></svg>
+<div class="app ">
+ <header class="cmdbar">
+  <button class="menu" aria-label="Open navigation" aria-expanded="false"><svg class="i" aria-hidden="true"><use href="#i-menu"/></svg></button>
+  <a class="mk" href="02-dashboard.html"><svg class="mosaic-logo" viewBox="0 0 36 36" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg><span>Mosaic Stack</span></a>
+  <span class="sim" title="Static design sample">U0 sample</span>
+  <button class="cmdk"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg><span>Go to an org, project, task or decision</span><kbd>Ctrl K</kbd></button>
+  <div class="fresh"><span class="wide">Read <b>3 of 3</b> organization buses · 4 s ago</span><span class="me" title="Operator">OP</span></div>
+ </header>
+ <nav class="side" aria-label="Workspace">
+  <a class="nav" href="02-dashboard.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a>
+  <a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a>
+  <a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a>
+  <a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a>
+  <a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a>
+  <a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a>
+  <a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organizations</span><span class="n">3</span><span class="add" title="New organization"><svg class="i sm" aria-hidden="true"><use href="#i-plus"/></svg></span></div>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="t">Distinctly Digital</span><span class="ic" title="Business"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="t">Forge</span><span class="ic" title="Coding"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="home" aria-hidden="true">HM</span><span class="t">Home</span><span class="ic" title="Personal"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></a>
+  </div>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="true">By org</span><span aria-pressed="false">Flat</span></span></div>
+   <div class="pgroup" data-org="ddigital"><div class="pgroup-h"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span>Distinctly Digital</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Spring launch</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">The Lantern Coast</span><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span></a><a class="nav proj" href="#"><span class="t">Brand refresh</span></a><a class="nav proj" href="#"><span class="t">Monthly newsletter</span></a></div></div>
+<div class="pgroup" data-org="forge"><div class="pgroup-h"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span>Forge</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a><a class="nav proj" href="#"><span class="t">CLI tools</span><span class="n">paused</span></a></div></div>
+<div class="pgroup" data-org="home"><div class="pgroup-h"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span>Home</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Household admin</span><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span></a><a class="nav proj" href="#"><span class="t">Garden plan</span></a><a class="nav proj" href="#"><span class="t">Trip planning 2027</span><span class="n">paused</span></a></div></div>
+  </div>
+  <div class="foot"><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-settings"/></svg><span class="t">Settings</span></a></div>
+ </nav>
+ <nav class="strip" aria-label="Sections"><a class="nav" href="02-dashboard.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a><a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a><a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a><a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a><a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a><a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a></nav>
+ <main class="main ">
+
+  <div class="vh"><h1>Dashboard</h1><div class="right"><span class="seg" role="group" aria-label="Period"><span aria-pressed="false">Today</span><span aria-pressed="true">7 days</span><span aria-pressed="false">30 days</span></span></div>
+   <p class="sub">All 3 organizations and 10 projects. Totals add up every organization you belong to; each tile breaks them down by organization.</p></div>
+  <div class="grid g5 keep2">
+   <div class="tile"><span class="label">Needs you</span><span class="big">3<small>items</small></span>
+   <div class="bar" aria-hidden="true"><i data-org="ddigital" style="flex:0.333"></i><i data-org="forge" style="flex:0.333"></i><i data-org="home" style="flex:0.333"></i></div>
+   <div class="by"><span><span class="av " data-org="ddigital" aria-hidden="true">DD</span>1</span><span><span class="av " data-org="forge" aria-hidden="true">FG</span>1</span><span><span class="av " data-org="home" aria-hidden="true">HM</span>1</span></div><span class="delta">oldest 52 min</span></div>
+   <div class="tile"><span class="label">Sessions</span><span class="big">7<small>4 working</small></span>
+   <div class="bar" aria-hidden="true"><i data-org="ddigital" style="flex:0.429"></i><i data-org="forge" style="flex:0.286"></i><i data-org="home" style="flex:0.143"></i><i style="background:var(--muted);flex:0.143"></i></div>
+   <div class="by"><span><span class="av " data-org="ddigital" aria-hidden="true">DD</span>3</span><span><span class="av " data-org="forge" aria-hidden="true">FG</span>2</span><span><span class="av " data-org="home" aria-hidden="true">HM</span>1</span><span><span class="av all " aria-hidden="true" title="Assistant, all organizations"><svg class="mosaic-logo" viewBox="0 0 36 36" style="width:70%;height:auto" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg></span>1</span></div><span class="delta">1 waiting · 1 error · 1 idle</span></div>
+   <div class="tile"><span class="label">Open tasks</span><span class="big">10</span>
+   <div class="bar" aria-hidden="true"><i data-org="ddigital" style="flex:0.500"></i><i data-org="forge" style="flex:0.300"></i><i data-org="home" style="flex:0.200"></i></div>
+   <div class="by"><span><span class="av " data-org="ddigital" aria-hidden="true">DD</span>5</span><span><span class="av " data-org="forge" aria-hidden="true">FG</span>3</span><span><span class="av " data-org="home" aria-hidden="true">HM</span>2</span></div><span class="delta"><b>2</b> done this week</span></div>
+   <div class="tile"><span class="label">Projects</span><span class="big">10<small>8 active</small></span>
+   <div class="bar" aria-hidden="true"><i data-org="ddigital" style="flex:0.400"></i><i data-org="forge" style="flex:0.300"></i><i data-org="home" style="flex:0.300"></i></div>
+   <div class="by"><span><span class="av " data-org="ddigital" aria-hidden="true">DD</span>4</span><span><span class="av " data-org="forge" aria-hidden="true">FG</span>3</span><span><span class="av " data-org="home" aria-hidden="true">HM</span>3</span></div><span class="delta">2 paused</span></div>
+   <div class="tile"><span class="label">Model spend</span><span class="big">$38.40<small>7 days</small></span>
+   <div class="bar" aria-hidden="true"><i data-org="ddigital" style="flex:0.549"></i><i data-org="forge" style="flex:0.406"></i><i data-org="home" style="flex:0.044"></i></div>
+   <div class="by"><span><span class="av " data-org="ddigital" aria-hidden="true">DD</span>$21.10</span><span><span class="av " data-org="forge" aria-hidden="true">FG</span>$15.60</span><span><span class="av " data-org="home" aria-hidden="true">HM</span>$1.70</span></div><span class="delta">of $110 in weekly limits</span></div>
+  </div>
+  <div class="split" style="margin-top:4px">
+   <section>
+    <div class="sec-h"><h2>Activity across organizations</h2><span class="note">newest first, every bus</span><a href="#">All activity</a></div>
+    <ol class="trail"><li><time>14:32</time><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="what"><b>coder</b> pushed 3 commits on #41 Rate limiter <span class="src">· Forge · API gateway</span></span></li><li><time>14:28</time><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="what"><b>copywriter</b> saved V-112 Launch email, draft 2 <span class="src">· Distinctly Digital · Spring launch</span></span></li><li><time>14:21</time><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="what"><b>reviewer</b> stopped: model provider timed out <span class="src">· Forge · Web app</span></span></li><li><time>14:15</time><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="what"><b>editor</b> asked you: keep the revised ending? <span class="src">· Distinctly Digital · The Lantern Coast</span></span></li><li><time>14:02</time><span class="av " data-org="home" aria-hidden="true">HM</span><span class="what"><b>assistant</b> flagged the insurance renewal <span class="src">· Home · Household admin</span></span></li><li><time>13:55</time><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="what"><b>montage-producer</b> rendered teaser cut 3 of 4 <span class="src">· Distinctly Digital · Spring launch</span></span></li><li><time>13:40</time><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="what"><b>chief</b> raised a gated decision: merge the rate limiter <span class="src">· Forge · API gateway</span></span></li><li><time>13:12</time><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="what"><b>chief</b> created V-120 Logo shortlist in Vikunja <span class="src">· Distinctly Digital · Brand refresh</span></span></li><li><time>12:58</time><span class="av " data-org="home" aria-hidden="true">HM</span><span class="what"><b>you</b> closed #9 Order seed potatoes <span class="src">· Home · Garden plan</span></span></li></ol>
+    <div class="sec-h"><h2>Tasks by state</h2><span class="note">all trackers</span><a href="06-tasks.html">Open tasks</a></div>
+    <div class="panel tight states">
+     <div class="srow"><span class="sl">To do</span><span class="sn tnum">5</span><div class="bar" style="width:90%" aria-hidden="true"><i data-org="ddigital" style="flex:2"></i><i data-org="forge" style="flex:1"></i><i data-org="home" style="flex:2"></i></div><span class="by"><span><span class="av " data-org="ddigital" aria-hidden="true">DD</span>2</span><span><span class="av " data-org="forge" aria-hidden="true">FG</span>1</span><span><span class="av " data-org="home" aria-hidden="true">HM</span>2</span></span></div><div class="srow"><span class="sl">In progress</span><span class="sn tnum">3</span><div class="bar" style="width:54%" aria-hidden="true"><i data-org="ddigital" style="flex:2"></i><i data-org="forge" style="flex:1"></i></div><span class="by"><span><span class="av " data-org="ddigital" aria-hidden="true">DD</span>2</span><span><span class="av " data-org="forge" aria-hidden="true">FG</span>1</span></span></div><div class="srow"><span class="sl">Review</span><span class="sn tnum">2</span><div class="bar" style="width:36%" aria-hidden="true"><i data-org="ddigital" style="flex:1"></i><i data-org="forge" style="flex:1"></i></div><span class="by"><span><span class="av " data-org="ddigital" aria-hidden="true">DD</span>1</span><span><span class="av " data-org="forge" aria-hidden="true">FG</span>1</span></span></div><div class="srow"><span class="sl">Done this week</span><span class="sn tnum">2</span><div class="bar" style="width:36%" aria-hidden="true"><i data-org="forge" style="flex:1"></i><i data-org="home" style="flex:1"></i></div><span class="by"><span><span class="av " data-org="forge" aria-hidden="true">FG</span>1</span><span><span class="av " data-org="home" aria-hidden="true">HM</span>1</span></span></div>
+    </div>
+   </section>
+   <section>
+    <div class="sec-h"><h2>Needs you</h2><a href="05-inbox.html">Inbox</a></div>
+    <ul class="needs"><li class="edge" data-org="forge"><span class="av md" data-org="forge" aria-hidden="true">FG</span><span class="q">Merge the rate limiter branch into main?</span><span class="src">Forge · API gateway · chief</span><span class="chip gated">gated</span></li><li class="edge" data-org="ddigital"><span class="av md" data-org="ddigital" aria-hidden="true">DD</span><span class="q">Chapter 7: keep the revised ending?</span><span class="src">Distinctly Digital · The Lantern Coast · editor</span><span class="chip within">within-role</span></li><li class="edge" data-org="home"><span class="av md" data-org="home" aria-hidden="true">HM</span><span class="q">Home insurance renews in 12 days. Compare the two quotes now?</span><span class="src">Home · Household admin · assistant</span><span class="chip routine">routine</span></li></ul>
+    <div class="sec-h"><h2>Sessions now</h2><a href="08-agents.html">Agents</a></div>
+    <div class="tbl"><table class="sess"><thead><tr><th>Agent and project</th><th>Status</th></tr></thead><tbody>
+     <tr><td class="who"><span class="orgref"><span class="av all xs" aria-hidden="true" title="Assistant, all organizations"><svg class="mosaic-logo" viewBox="0 0 36 36" style="width:70%;height:auto" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg></span>assistant</span><span class="muted"> · All organizations</span></td><td class="st"><span class="dot s-working"><b aria-hidden="true">●</b>working</span> <span class="muted">with you</span></td></tr><tr><td class="who"><span class="orgref"><span class="av xs" data-org="forge" aria-hidden="true">FG</span>coder</span><span class="muted"> · API gateway</span></td><td class="st"><span class="dot s-working"><b aria-hidden="true">●</b>working</span> <span class="muted">65 min</span></td></tr><tr><td class="who"><span class="orgref"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span>copywriter</span><span class="muted"> · Spring launch</span></td><td class="st"><span class="dot s-working"><b aria-hidden="true">●</b>working</span> <span class="muted">38 min</span></td></tr><tr><td class="who"><span class="orgref"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span>montage-producer</span><span class="muted"> · Spring launch</span></td><td class="st"><span class="dot s-working"><b aria-hidden="true">●</b>working</span> <span class="muted">72 min</span></td></tr><tr><td class="who"><span class="orgref"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span>editor</span><span class="muted"> · The Lantern Coast</span></td><td class="st"><span class="dot s-waiting"><b aria-hidden="true">◐</b>waiting</span> <span class="muted">on you</span></td></tr><tr><td class="who"><span class="orgref"><span class="av xs" data-org="forge" aria-hidden="true">FG</span>reviewer</span><span class="muted"> · Web app</span></td><td class="st"><span class="dot s-error"><b aria-hidden="true">▲</b>error</span> <span class="muted">timeout</span></td></tr><tr><td class="who"><span class="orgref"><span class="av xs" data-org="home" aria-hidden="true">HM</span>planner</span><span class="muted"> · Household admin</span></td><td class="st"><span class="dot s-idle"><b aria-hidden="true">–</b>idle</span> <span class="muted">since 09:10</span></td></tr>
+    </tbody></table></div>
+   </section>
+  </div>
+ </main>
+
+</div>
+</body>
+</html>

docs/design/samples/2026-11-09-unified-workspace/03-org-dashboard.html

@@ -0,0 +1,91 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Distinctly Digital · U0 sample</title>
+<link rel="stylesheet" href="workspace.css">
+</head>
+<body>
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false"><symbol id="i-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="m6 9 6 6 6-6"/></symbol><symbol id="i-home" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 10.5 12 4l8 6.5"/><path d="M6 9v10.5h12V9"/><path d="M10 19.5v-5h4v5"/></symbol><symbol id="i-folder" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M3.5 6.5a1 1 0 0 1 1-1h4.5l2 2h8.5a1 1 0 0 1 1 1v10a1 1 0 0 1-1 1h-15a1 1 0 0 1-1-1z"/></symbol><symbol id="i-columns" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M12 4.5v15"/></symbol><symbol id="i-split" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M13 4.5v15M16.75 10.5v3M15.25 12h3"/></symbol><symbol id="i-restart" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M19.5 12a7.5 7.5 0 1 1-2.2-5.3"/><path d="M19.5 4.5v4h-4"/></symbol><symbol id="i-plus" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M12 5v14M5 12h14"/></symbol><symbol id="i-menu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></symbol><symbol id="i-doc" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M6.5 3.5h7l4 4v13h-11z"/><path d="M13.5 3.5v4h4M9 12h6M9 15.5h6"/></symbol></svg>
+<div class="app ">
+ <header class="cmdbar">
+  <button class="menu" aria-label="Open navigation" aria-expanded="false"><svg class="i" aria-hidden="true"><use href="#i-menu"/></svg></button>
+  <a class="mk" href="02-dashboard.html"><svg class="mosaic-logo" viewBox="0 0 36 36" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg><span>Mosaic Stack</span></a>
+  <span class="sim" title="Static design sample">U0 sample</span>
+  <button class="cmdk"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg><span>Go to an org, project, task or decision</span><kbd>Ctrl K</kbd></button>
+  <div class="fresh"><span class="wide">Read <b>3 of 3</b> organization buses · 4 s ago</span><span class="me" title="Operator">OP</span></div>
+ </header>
+ <nav class="side" aria-label="Workspace">
+  <a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a>
+  <a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a>
+  <a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a>
+  <a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a>
+  <a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a>
+  <a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a>
+  <a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organizations</span><span class="n">3</span><span class="add" title="New organization"><svg class="i sm" aria-hidden="true"><use href="#i-plus"/></svg></span></div>
+   <a class="nav org-row" href="03-org-dashboard.html" aria-current="page"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="t">Distinctly Digital</span><span class="ic" title="Business"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="t">Forge</span><span class="ic" title="Coding"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="home" aria-hidden="true">HM</span><span class="t">Home</span><span class="ic" title="Personal"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></a>
+  </div>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="true">By org</span><span aria-pressed="false">Flat</span></span></div>
+   <div class="pgroup" data-org="ddigital"><div class="pgroup-h"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span>Distinctly Digital</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Spring launch</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">The Lantern Coast</span><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span></a><a class="nav proj" href="#"><span class="t">Brand refresh</span></a><a class="nav proj" href="#"><span class="t">Monthly newsletter</span></a></div></div>
+<div class="pgroup" data-org="forge"><div class="pgroup-h"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span>Forge</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a><a class="nav proj" href="#"><span class="t">CLI tools</span><span class="n">paused</span></a></div></div>
+<div class="pgroup" data-org="home"><div class="pgroup-h"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span>Home</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Household admin</span><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span></a><a class="nav proj" href="#"><span class="t">Garden plan</span></a><a class="nav proj" href="#"><span class="t">Trip planning 2027</span><span class="n">paused</span></a></div></div>
+  </div>
+  <div class="foot"><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-settings"/></svg><span class="t">Settings</span></a></div>
+ </nav>
+ <nav class="strip" aria-label="Sections"><a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a><a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a><a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a><a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a><a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a><a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a></nav>
+ <main class="main ">
+
+  <div class="crumb"><a href="#">Organizations</a> › Distinctly Digital</div>
+  <div class="orghead" data-org="ddigital">
+   <span class="av lg" data-org="ddigital" aria-hidden="true">DD</span>
+   <h1>Distinctly Digital <svg class="i" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></h1>
+   <div class="right">
+    <span class="btn" title="mosaic bus restart ddigital"><svg class="i" aria-hidden="true"><use href="#i-restart"/></svg>Restart bus</span>
+    <span class="btn"><svg class="i" aria-hidden="true"><use href="#i-doc"/></svg>Reload organization file</span>
+    <a class="btn pri" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-split"/></svg>Open in a pane</a>
+   </div>
+   <div class="meta"><span>Business</span><span>id <code>ddigital</code></span><span>Tracker: Vikunja</span><span><span class="dot s-working"><b aria-hidden="true">●</b>bus read 4 s ago</span></span><span>Restart and reload are trailed human actions; no agent can take them.</span></div>
+  </div>
+  <div class="typechips chips"><span class="label" style="margin-right:4px">System types</span><span class="chip outline">Coding</span><span class="chip outline">Creative writing</span><span class="chip outline">Marketing</span><span class="chip outline">Mosaic Montage</span><span class="chip outline">Business management</span><span class="note">Each project picks from these; none is required.</span></div>
+  <div class="docrow chips"><span class="label" style="margin-right:4px">Docs</span><a class="doc" href="#" title="org"><svg class="i sm" aria-hidden="true"><use href="#i-doc"/></svg>North star</a><a class="doc" href="#" title="org"><svg class="i sm" aria-hidden="true"><use href="#i-doc"/></svg>Brand voice guide</a><a class="doc" href="#" title="Spring launch"><svg class="i sm" aria-hidden="true"><use href="#i-doc"/></svg>Launch plan<small>Spring launch</small></a><a class="doc" href="#" title="The Lantern Coast"><svg class="i sm" aria-hidden="true"><use href="#i-doc"/></svg>Series bible<small>The Lantern Coast</small></a><a class="doc" href="#" title="org"><svg class="i sm" aria-hidden="true"><use href="#i-doc"/></svg>Operating notes</a><a href="#" class="more">All docs</a></div>
+  <div class="split" style="margin-top:6px">
+   <section>
+    <div class="sec-h"><h2>KPIs</h2><span class="note">defined in the organization file</span><a href="#">Edit KPIs</a></div>
+    <div class="grid g4 keep2">
+     <div class="tile"><span class="label">Subscribers</span><span class="big">2,480</span><span class="delta"><b>+6.2%</b> in 30 days · goal 3,000</span></div>
+     <div class="tile"><span class="label">Launch pieces</span><span class="big">7<small>of 12</small></span><div class="bar"><i data-org="ddigital" style="flex:7"></i><i style="flex:5;background:transparent"></i></div></div>
+     <div class="tile"><span class="label">Novel draft</span><span class="big">61,200<small>words</small></span><span class="delta">target 90,000 · 68%</span></div>
+     <div class="tile"><span class="label">Tasks closed</span><span class="big">18</span><span class="delta">30 days · <b>+4</b> on last month</span></div>
+    </div>
+    <div class="sec-h"><h2>Metrics</h2><span class="note">measured by the bus</span></div>
+    <div class="grid g4 keep2 metrics">
+     <div class="tile"><span class="label">Spend this week</span><span class="big">$21.10<small>of $60</small></span><div class="bar"><i data-org="ddigital" style="flex:21.1"></i><i style="flex:38.9;background:transparent"></i></div></div>
+     <div class="tile"><span class="label">Agent hours</span><span class="big">31.5<small>7 days</small></span></div>
+     <div class="tile"><span class="label">Decision wait</span><span class="big">22<small>min median</small></span></div>
+     <div class="tile"><span class="label">Open tasks</span><span class="big">5</span><span class="delta">2 in progress · 1 review</span></div>
+    </div>
+    <div class="sec-h"><h2>Active agent sessions</h2><span class="note">2 working, 1 waiting on you</span><a href="08-agents.html">All agents</a></div>
+    <div class="tbl"><table><thead><tr><th>Agent</th><th>Project and task</th><th class="hide-m">Model</th><th>Status</th></tr></thead><tbody>
+     <tr><td class="t1">copywriter</td><td>Spring launch<span class="t2">V-112 Launch email, draft 2</span></td><td class="hide-m mono">sonnet-5.5 <a href="#">Change</a></td><td><span class="dot s-working"><b aria-hidden="true">●</b>working</span> <span class="muted">38 min</span></td></tr>
+     <tr><td class="t1">montage-producer</td><td>Spring launch<span class="t2">V-118 Teaser reel, 30 s cut</span></td><td class="hide-m mono">sonnet-5.5 <a href="#">Change</a></td><td><span class="dot s-working"><b aria-hidden="true">●</b>working</span> <span class="muted">1 h 12 min</span></td></tr>
+     <tr><td class="t1">editor</td><td>The Lantern Coast<span class="t2">V-97 Chapter 7 revision</span></td><td class="hide-m mono">opus-5.5 <a href="#">Change</a></td><td><span class="dot s-waiting"><b aria-hidden="true">◐</b>waiting on you</span></td></tr>
+    </tbody></table></div>
+   </section>
+   <section>
+    <div class="sec-h"><h2>Settings</h2><span class="note">every setting, with where its value comes from</span></div>
+    <ul class="cfg one"><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg><span class="k">Identity</span><span class="v">Distinctly Digital · ddigital · Business</span><span class="src-tag">org file</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-flag"/></svg><span class="k">Appearance</span><span class="v">Rosewood theme · DD avatar</span><span class="src-tag">org file</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-runs"/></svg><span class="k">System types</span><span class="v">5 of 5 installed enabled</span><span class="src-tag">org file</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="k">Projects</span><span class="v">4 projects · 3 with a remote, 1 local only</span><span class="src-tag">org file</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="k">Agents and roles</span><span class="v">5 org · 2 project · 3 from your root</span><span class="src-tag">org + root</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg><span class="k">Models and providers</span><span class="v">Your shared proxy · editor runs opus-5.5</span><span class="src-tag">override</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="k">Task tracker</span><span class="v">Vikunja module · project DD</span><span class="src-tag">org file</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="k">Channels</span><span class="v">Discord off · daily email digest</span><span class="src-tag">org file</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-ledger"/></svg><span class="k">Launch limits</span><span class="v">4 sessions at once · $60 a week</span><span class="src-tag">org file</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-queue"/></svg><span class="k">Routing and arbiters</span><span class="v">chief routes · editor arbitrates copy</span><span class="src-tag">org file</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="k">Members and invites</span><span class="v">You (owner) · invites arrive in Phase M</span><span class="src-tag">not built</span><a class="go" href="#">Open</a></li><li><svg class="i" aria-hidden="true"><use href="#i-restart"/></svg><span class="k">Bus</span><span class="v">Running · local-only checkout</span><span class="src-tag">system</span><a class="go" href="#">Open</a></li><li class="danger"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-close"/></svg><span class="k">Archive or delete</span><span class="v">Removes this organization's tasks and data only</span><span class="src-tag">danger</span><a class="go" href="#">Open</a></li></ul>
+   </section>
+  </div>
+ </main>
+
+</div>
+</body>
+</html>

docs/design/samples/2026-11-09-unified-workspace/04-projects.html

@@ -0,0 +1,164 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Projects · U0 sample</title>
+<link rel="stylesheet" href="workspace.css">
+</head>
+<body>
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false"><symbol id="i-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="m6 9 6 6 6-6"/></symbol><symbol id="i-home" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 10.5 12 4l8 6.5"/><path d="M6 9v10.5h12V9"/><path d="M10 19.5v-5h4v5"/></symbol><symbol id="i-folder" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M3.5 6.5a1 1 0 0 1 1-1h4.5l2 2h8.5a1 1 0 0 1 1 1v10a1 1 0 0 1-1 1h-15a1 1 0 0 1-1-1z"/></symbol><symbol id="i-columns" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M12 4.5v15"/></symbol><symbol id="i-split" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M13 4.5v15M16.75 10.5v3M15.25 12h3"/></symbol><symbol id="i-restart" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M19.5 12a7.5 7.5 0 1 1-2.2-5.3"/><path d="M19.5 4.5v4h-4"/></symbol><symbol id="i-plus" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M12 5v14M5 12h14"/></symbol><symbol id="i-menu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></symbol><symbol id="i-doc" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M6.5 3.5h7l4 4v13h-11z"/><path d="M13.5 3.5v4h4M9 12h6M9 15.5h6"/></symbol></svg>
+<div class="app ">
+ <header class="cmdbar">
+  <button class="menu" aria-label="Open navigation" aria-expanded="false"><svg class="i" aria-hidden="true"><use href="#i-menu"/></svg></button>
+  <a class="mk" href="02-dashboard.html"><svg class="mosaic-logo" viewBox="0 0 36 36" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg><span>Mosaic Stack</span></a>
+  <span class="sim" title="Static design sample">U0 sample</span>
+  <button class="cmdk"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg><span>Go to an org, project, task or decision</span><kbd>Ctrl K</kbd></button>
+  <div class="fresh"><span class="wide">Read <b>3 of 3</b> organization buses · 4 s ago</span><span class="me" title="Operator">OP</span></div>
+ </header>
+ <nav class="side" aria-label="Workspace">
+  <a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a>
+  <a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a>
+  <a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a>
+  <a class="nav" href="04-projects.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a>
+  <a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a>
+  <a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a>
+  <a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organizations</span><span class="n">3</span><span class="add" title="New organization"><svg class="i sm" aria-hidden="true"><use href="#i-plus"/></svg></span></div>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="t">Distinctly Digital</span><span class="ic" title="Business"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="t">Forge</span><span class="ic" title="Coding"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="home" aria-hidden="true">HM</span><span class="t">Home</span><span class="ic" title="Personal"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></a>
+  </div>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="true">By org</span><span aria-pressed="false">Flat</span></span></div>
+   <div class="pgroup" data-org="ddigital"><div class="pgroup-h"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span>Distinctly Digital</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Spring launch</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">The Lantern Coast</span><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span></a><a class="nav proj" href="#"><span class="t">Brand refresh</span></a><a class="nav proj" href="#"><span class="t">Monthly newsletter</span></a></div></div>
+<div class="pgroup" data-org="forge"><div class="pgroup-h"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span>Forge</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a><a class="nav proj" href="#"><span class="t">CLI tools</span><span class="n">paused</span></a></div></div>
+<div class="pgroup" data-org="home"><div class="pgroup-h"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span>Home</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Household admin</span><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span></a><a class="nav proj" href="#"><span class="t">Garden plan</span></a><a class="nav proj" href="#"><span class="t">Trip planning 2027</span><span class="n">paused</span></a></div></div>
+  </div>
+  <div class="foot"><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-settings"/></svg><span class="t">Settings</span></a></div>
+ </nav>
+ <nav class="strip" aria-label="Sections"><a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a><a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a><a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a><a class="nav" href="04-projects.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a><a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a><a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a></nav>
+ <main class="main ">
+
+  <div class="vh"><h1>Projects</h1><div class="right"><span class="btn"><svg class="i" aria-hidden="true"><use href="#i-plus"/></svg>New project</span></div>
+   <p class="sub">10 projects in 3 organizations, sorted by latest activity. Every row names its organization by mark, colour edge and type icon.</p></div>
+  <div class="toolbar">
+   <span class="search"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg>Filter by name</span>
+   <div class="chips" role="group" aria-label="Organization"><span class="f plain" aria-pressed="true">All <span class="n">10</span></span><span class="f" aria-pressed="false"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital<span class="n">4</span></span><span class="f" aria-pressed="false"><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge<span class="n">3</span></span><span class="f" aria-pressed="false"><span class="av " data-org="home" aria-hidden="true">HM</span>Home<span class="n">3</span></span></div>
+   <span class="sel"><span class="label">Status</span>Active, paused<svg class="i sm" aria-hidden="true"><use href="#i-chevron"/></svg></span>
+   <div class="right"><span class="label hide-m">Sort</span><span class="seg" role="group" aria-label="Sort"><span aria-pressed="true">Activity</span><span aria-pressed="false">Name</span><span aria-pressed="false">Org</span><span aria-pressed="false">Status</span></span></div>
+  </div>
+  <div class="tbl"><table class="projects">
+   <thead><tr><th class="hide-m">Organization</th><th>Project</th><th>Status</th><th class="hide-m">System types</th><th class="hide-m">Sessions</th><th class="num hide-m">Open tasks</th><th class="num">Needs you</th><th class="sorted hide-m">Last activity<span class="ar">↓</span></th><th class="hide-m">Git</th></tr></thead>
+   <tbody>
+   <tr class="edge" data-org="forge">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="forge" aria-hidden="true">FG</span>API gateway</span><span class="t2 mono hide-m">api-gateway</span><span class="t2 show-m">2 min ago · coder pushed 3 commits on #41</span></td>
+    <td><span class="dot s-ok"><b aria-hidden="true">●</b>active</span></td>
+    <td class="hide-m"><span class="chip outline">Coding</span></td>
+    <td class="hide-m"><span class="dot s-working"><b aria-hidden="true">●</b>1 working</span></td>
+    <td class="num hide-m">2</td>
+    <td class="num"><span class="n hot">1</span></td>
+    <td class="hide-m">2 min ago<span class="t2">coder pushed 3 commits on #41</span></td>
+    <td class="hide-m"><span class="chip outline">remote</span></td>
+   </tr><tr class="edge" data-org="ddigital">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="ddigital" aria-hidden="true">DD</span>Spring launch</span><span class="t2 mono hide-m">spring-launch</span><span class="t2 show-m">4 min ago · copywriter saved draft 2</span></td>
+    <td><span class="dot s-ok"><b aria-hidden="true">●</b>active</span></td>
+    <td class="hide-m"><span class="chip outline">Marketing</span> <span class="chip outline">Creative writing</span> <span class="chip outline">Mosaic Montage</span></td>
+    <td class="hide-m"><span class="dot s-working"><b aria-hidden="true">●</b>2 working</span></td>
+    <td class="num hide-m">2</td>
+    <td class="num"><span class="muted">0</span></td>
+    <td class="hide-m">4 min ago<span class="t2">copywriter saved draft 2</span></td>
+    <td class="hide-m"><span class="chip outline">remote</span></td>
+   </tr><tr class="edge" data-org="forge">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="forge" aria-hidden="true">FG</span>Web app</span><span class="t2 mono hide-m">webapp</span><span class="t2 show-m">11 min ago · reviewer stopped: provider timeout</span></td>
+    <td><span class="dot s-ok"><b aria-hidden="true">●</b>active</span></td>
+    <td class="hide-m"><span class="chip outline">Coding</span></td>
+    <td class="hide-m"><span class="dot s-error"><b aria-hidden="true">▲</b>1 error</span></td>
+    <td class="num hide-m">1</td>
+    <td class="num"><span class="muted">0</span></td>
+    <td class="hide-m">11 min ago<span class="t2">reviewer stopped: provider timeout</span></td>
+    <td class="hide-m"><span class="chip outline">remote</span></td>
+   </tr><tr class="edge" data-org="ddigital">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="ddigital" aria-hidden="true">DD</span>The Lantern Coast</span><span class="t2 mono hide-m">novel-draft</span><span class="t2 show-m">17 min ago · editor asked about chapter 7</span></td>
+    <td><span class="dot s-ok"><b aria-hidden="true">●</b>active</span></td>
+    <td class="hide-m"><span class="chip outline">Creative writing</span></td>
+    <td class="hide-m"><span class="dot s-waiting"><b aria-hidden="true">◐</b>1 waiting</span></td>
+    <td class="num hide-m">1</td>
+    <td class="num"><span class="n hot">1</span></td>
+    <td class="hide-m">17 min ago<span class="t2">editor asked about chapter 7</span></td>
+    <td class="hide-m"><span class="chip outline">local only</span></td>
+   </tr><tr class="edge" data-org="home">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="home" aria-hidden="true">HM</span>Home<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="home" aria-hidden="true">HM</span>Household admin</span><span class="t2 mono hide-m">household</span><span class="t2 show-m">30 min ago · assistant flagged a renewal</span></td>
+    <td><span class="dot s-ok"><b aria-hidden="true">●</b>active</span></td>
+    <td class="hide-m"><span class="chip outline">Business management</span></td>
+    <td class="hide-m"><span class="dot s-idle"><b aria-hidden="true">–</b>1 idle</span></td>
+    <td class="num hide-m">1</td>
+    <td class="num"><span class="n hot">1</span></td>
+    <td class="hide-m">30 min ago<span class="t2">assistant flagged a renewal</span></td>
+    <td class="hide-m"><span class="chip outline">local only</span></td>
+   </tr><tr class="edge" data-org="ddigital">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="ddigital" aria-hidden="true">DD</span>Brand refresh</span><span class="t2 mono hide-m">brand-refresh</span><span class="t2 show-m">1 h ago · chief created V-120</span></td>
+    <td><span class="dot s-ok"><b aria-hidden="true">●</b>active</span></td>
+    <td class="hide-m"><span class="chip outline">Marketing</span> <span class="chip outline">Mosaic Montage</span></td>
+    <td class="hide-m"><span class="muted">none</span></td>
+    <td class="num hide-m">1</td>
+    <td class="num"><span class="muted">0</span></td>
+    <td class="hide-m">1 h ago<span class="t2">chief created V-120</span></td>
+    <td class="hide-m"><span class="chip outline">remote</span></td>
+   </tr><tr class="edge" data-org="home">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="home" aria-hidden="true">HM</span>Home<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="home" aria-hidden="true">HM</span>Garden plan</span><span class="t2 mono hide-m">garden</span><span class="t2 show-m">1 h ago · #9 marked done</span></td>
+    <td><span class="dot s-ok"><b aria-hidden="true">●</b>active</span></td>
+    <td class="hide-m"><span class="muted">none</span></td>
+    <td class="hide-m"><span class="muted">none</span></td>
+    <td class="num hide-m">0</td>
+    <td class="num"><span class="muted">0</span></td>
+    <td class="hide-m">1 h ago<span class="t2">#9 marked done</span></td>
+    <td class="hide-m"><span class="chip outline">local only</span></td>
+   </tr><tr class="edge" data-org="ddigital">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="ddigital" aria-hidden="true">DD</span>Monthly newsletter</span><span class="t2 mono hide-m">newsletter</span><span class="t2 show-m">yesterday · V-121 created</span></td>
+    <td><span class="dot s-ok"><b aria-hidden="true">●</b>active</span></td>
+    <td class="hide-m"><span class="chip outline">Marketing</span> <span class="chip outline">Creative writing</span></td>
+    <td class="hide-m"><span class="muted">none</span></td>
+    <td class="num hide-m">1</td>
+    <td class="num"><span class="muted">0</span></td>
+    <td class="hide-m">yesterday<span class="t2">V-121 created</span></td>
+    <td class="hide-m"><span class="chip outline">remote</span></td>
+   </tr><tr class="edge dim" data-org="forge">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="forge" aria-hidden="true">FG</span>CLI tools</span><span class="t2 mono hide-m">cli-tools</span><span class="t2 show-m">12 days ago · #29 done</span></td>
+    <td><span class="dot s-idle"><b aria-hidden="true">–</b>paused</span></td>
+    <td class="hide-m"><span class="chip outline">Coding</span></td>
+    <td class="hide-m"><span class="muted">none</span></td>
+    <td class="num hide-m">0</td>
+    <td class="num"><span class="muted">0</span></td>
+    <td class="hide-m">12 days ago<span class="t2">#29 done</span></td>
+    <td class="hide-m"><span class="chip outline">remote</span></td>
+   </tr><tr class="edge dim" data-org="home">
+    <td class="hide-m"><span class="orgref"><span class="av " data-org="home" aria-hidden="true">HM</span>Home<span class="ic muted"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></span></td>
+    <td><span class="t1 nm"><span class="av xs mob" data-org="home" aria-hidden="true">HM</span>Trip planning 2027</span><span class="t2 mono hide-m">travel</span><span class="t2 show-m">3 weeks ago · #14 created</span></td>
+    <td><span class="dot s-idle"><b aria-hidden="true">–</b>paused</span></td>
+    <td class="hide-m"><span class="muted">none</span></td>
+    <td class="hide-m"><span class="muted">none</span></td>
+    <td class="num hide-m">1</td>
+    <td class="num"><span class="muted">0</span></td>
+    <td class="hide-m">3 weeks ago<span class="t2">#14 created</span></td>
+    <td class="hide-m"><span class="chip outline">local only</span></td>
+   </tr>
+   </tbody></table></div>
+  <p class="note" style="margin-top:10px">Sorting by Org groups the rows under each organization's header. Paused projects stay listed, dimmed, and the Status filter hides them.</p>
+ </main>
+
+</div>
+</body>
+</html>

docs/design/samples/2026-11-09-unified-workspace/05-inbox.html

@@ -0,0 +1,83 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Inbox · U0 sample</title>
+<link rel="stylesheet" href="workspace.css">
+</head>
+<body>
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false"><symbol id="i-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="m6 9 6 6 6-6"/></symbol><symbol id="i-home" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 10.5 12 4l8 6.5"/><path d="M6 9v10.5h12V9"/><path d="M10 19.5v-5h4v5"/></symbol><symbol id="i-folder" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M3.5 6.5a1 1 0 0 1 1-1h4.5l2 2h8.5a1 1 0 0 1 1 1v10a1 1 0 0 1-1 1h-15a1 1 0 0 1-1-1z"/></symbol><symbol id="i-columns" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M12 4.5v15"/></symbol><symbol id="i-split" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M13 4.5v15M16.75 10.5v3M15.25 12h3"/></symbol><symbol id="i-restart" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M19.5 12a7.5 7.5 0 1 1-2.2-5.3"/><path d="M19.5 4.5v4h-4"/></symbol><symbol id="i-plus" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M12 5v14M5 12h14"/></symbol><symbol id="i-menu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></symbol><symbol id="i-doc" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M6.5 3.5h7l4 4v13h-11z"/><path d="M13.5 3.5v4h4M9 12h6M9 15.5h6"/></symbol></svg>
+<div class="app with-insp">
+ <header class="cmdbar">
+  <button class="menu" aria-label="Open navigation" aria-expanded="false"><svg class="i" aria-hidden="true"><use href="#i-menu"/></svg></button>
+  <a class="mk" href="02-dashboard.html"><svg class="mosaic-logo" viewBox="0 0 36 36" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg><span>Mosaic Stack</span></a>
+  <span class="sim" title="Static design sample">U0 sample</span>
+  <button class="cmdk"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg><span>Go to an org, project, task or decision</span><kbd>Ctrl K</kbd></button>
+  <div class="fresh"><span class="wide">Read <b>3 of 3</b> organization buses · 4 s ago</span><span class="me" title="Operator">OP</span></div>
+ </header>
+ <nav class="side" aria-label="Workspace">
+  <a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a>
+  <a class="nav" href="05-inbox.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a>
+  <a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a>
+  <a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a>
+  <a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a>
+  <a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a>
+  <a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organizations</span><span class="n">3</span><span class="add" title="New organization"><svg class="i sm" aria-hidden="true"><use href="#i-plus"/></svg></span></div>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="t">Distinctly Digital</span><span class="ic" title="Business"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="t">Forge</span><span class="ic" title="Coding"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="home" aria-hidden="true">HM</span><span class="t">Home</span><span class="ic" title="Personal"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></a>
+  </div>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="true">By org</span><span aria-pressed="false">Flat</span></span></div>
+   <div class="pgroup" data-org="ddigital"><div class="pgroup-h"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span>Distinctly Digital</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Spring launch</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">The Lantern Coast</span><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span></a><a class="nav proj" href="#"><span class="t">Brand refresh</span></a><a class="nav proj" href="#"><span class="t">Monthly newsletter</span></a></div></div>
+<div class="pgroup" data-org="forge"><div class="pgroup-h"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span>Forge</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a><a class="nav proj" href="#"><span class="t">CLI tools</span><span class="n">paused</span></a></div></div>
+<div class="pgroup" data-org="home"><div class="pgroup-h"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span>Home</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Household admin</span><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span></a><a class="nav proj" href="#"><span class="t">Garden plan</span></a><a class="nav proj" href="#"><span class="t">Trip planning 2027</span><span class="n">paused</span></a></div></div>
+  </div>
+  <div class="foot"><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-settings"/></svg><span class="t">Settings</span></a></div>
+ </nav>
+ <nav class="strip" aria-label="Sections"><a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a><a class="nav" href="05-inbox.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a><a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a><a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a><a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a><a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a></nav>
+ <main class="main ">
+
+  <div class="vh"><h1>Inbox</h1>
+   <p class="sub">3 items need you, from 3 organizations. Each row names where it came from. Seen is not resolution: an item leaves only when it is answered.</p></div>
+  <div class="toolbar">
+   <div class="chips" role="group" aria-label="Organization"><span class="f plain" aria-pressed="true">All <span class="n">3</span></span><span class="f" aria-pressed="false"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital<span class="n">1</span></span><span class="f" aria-pressed="false"><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge<span class="n">1</span></span><span class="f" aria-pressed="false"><span class="av " data-org="home" aria-hidden="true">HM</span>Home<span class="n">1</span></span></div>
+   <div class="right"><span class="seg" role="group" aria-label="State"><span aria-pressed="true">Needs you</span><span aria-pressed="false">Seen</span><span aria-pressed="false">Answered</span></span></div>
+  </div>
+  <div class="tbl"><table class="ibx">
+   <thead><tr><th class="hide-m">Source</th><th>Needs</th><th class="hide-m">Class</th><th class="num">Waiting</th></tr></thead>
+   <tbody>
+    <tr class="row edge" data-org="forge" aria-selected="true"><td class="src hide-m"><span class="orgref"><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge</span><span class="via">API gateway · chief</span></td><td><span class="msrc show-m"><span class="av xs" data-org="forge" aria-hidden="true">FG</span>Forge · API gateway · chief</span><span class="q">Merge the rate limiter branch into main?</span><span class="via">decision 4f2a91 · seen 14:05</span><span class="show-m"><span class="chip gated">gated</span></span></td><td class="hide-m"><span class="chip gated">gated</span></td><td class="num">52 min</td></tr><tr class="row edge" data-org="ddigital"><td class="src hide-m"><span class="orgref"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital</span><span class="via">The Lantern Coast · editor session</span></td><td><span class="msrc show-m"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital · The Lantern Coast · editor</span><span class="q">Chapter 7: keep the revised ending?</span><span class="via">decision 7c03e2 · not seen</span><span class="show-m"><span class="chip within">within-role</span></span></td><td class="hide-m"><span class="chip within">within-role</span></td><td class="num">17 min</td></tr><tr class="row edge" data-org="home"><td class="src hide-m"><span class="orgref"><span class="av " data-org="home" aria-hidden="true">HM</span>Home</span><span class="via">Household admin · assistant</span></td><td><span class="msrc show-m"><span class="av xs" data-org="home" aria-hidden="true">HM</span>Home · Household admin · assistant</span><span class="q">Home insurance renews in 12 days. Compare the two quotes now?</span><span class="via">decision b19d40 · not seen</span><span class="show-m"><span class="chip routine">routine</span></span></td><td class="hide-m"><span class="chip routine">routine</span></td><td class="num">30 min</td></tr>
+   </tbody></table></div>
+  <div class="sec-h"><h2>Answered today</h2><span class="note">kept for 24 hours, then in the trail</span></div>
+  <div class="tbl"><table class="ibx"><tbody>
+   <tr class="dim"><td class="src hide-m"><span class="orgref quiet"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital</span><span class="via">Spring launch · copywriter</span></td><td><span class="msrc show-m"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital · Spring launch</span>Use the shorter subject line?<span class="via">answered 11:40 by you · option 2</span></td><td class="num">done</td></tr>
+   <tr class="dim"><td class="src hide-m"><span class="orgref quiet"><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge</span><span class="via">Web app · reviewer session</span></td><td><span class="msrc show-m"><span class="av xs" data-org="forge" aria-hidden="true">FG</span>Forge · Web app</span>Retry with the fallback model?<span class="via">expired 10:02 · no answer needed</span></td><td class="num">expired</td></tr>
+  </tbody></table></div>
+ </main>
+<aside class="insp" aria-label="Decision" data-org="forge">
+  <header><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="label">Decision 4f2a91</span><span class="chip gated">gated</span><span class="x" aria-label="Close"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-close"/></svg></span></header>
+  <div class="body">
+   <h3>Merge the rate limiter branch into main?</h3>
+   <div class="auth">Forge · API gateway · raised by <b>chief</b> at 13:40. Only you can answer a gated decision.</div>
+   <p class="note">Branch <code>rate-limiter-41</code> passes the suite (312 tests). The review is missing: the reviewer session stopped on a provider timeout at 14:21.</p>
+   <ul class="opts">
+    <li class="rec"><div class="row"><span class="k">1</span><b>Merge after a fresh review</b><span class="chip ok">chief recommends</span></div><span class="note">Restart the reviewer on the fallback model, then merge if it passes.</span><div class="row"><span class="btn pri">Answer 1…</span></div></li>
+    <li><div class="row"><span class="k">2</span><b>Merge now</b></div><span class="note">Skips review. The trail records the waiver.</span><div class="row"><span class="btn">Answer 2…</span></div></li>
+    <li><div class="row"><span class="k">3</span><b>Hold until Monday</b></div><div class="row"><span class="btn">Answer 3…</span></div></li>
+   </ul>
+   <div><span class="label">Answer from a terminal</span>
+    <div class="cmd" style="margin-top:6px"><code>mosaic decide 4f2a91 1 --org forge</code><span class="btn" title="Copy"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-copy"/></svg></span></div>
+    <p class="note" style="margin-top:6px">The inbox mixes organizations, so the copied command always names the organization's bus.</p></div>
+   <div><span class="label">History</span>
+    <ol class="hist" style="margin-top:6px"><li><time>13:40</time>chief raised it on the Forge bus</li><li><time>13:41</time>reached your inbox</li><li><time>14:05</time>seen by you (not an answer)</li></ol></div>
+  </div>
+ </aside>
+</div>
+</body>
+</html>

docs/design/samples/2026-11-09-unified-workspace/06-tasks.html

@@ -0,0 +1,119 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Tasks · U0 sample</title>
+<link rel="stylesheet" href="workspace.css">
+</head>
+<body>
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false"><symbol id="i-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="m6 9 6 6 6-6"/></symbol><symbol id="i-home" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 10.5 12 4l8 6.5"/><path d="M6 9v10.5h12V9"/><path d="M10 19.5v-5h4v5"/></symbol><symbol id="i-folder" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M3.5 6.5a1 1 0 0 1 1-1h4.5l2 2h8.5a1 1 0 0 1 1 1v10a1 1 0 0 1-1 1h-15a1 1 0 0 1-1-1z"/></symbol><symbol id="i-columns" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M12 4.5v15"/></symbol><symbol id="i-split" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M13 4.5v15M16.75 10.5v3M15.25 12h3"/></symbol><symbol id="i-restart" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M19.5 12a7.5 7.5 0 1 1-2.2-5.3"/><path d="M19.5 4.5v4h-4"/></symbol><symbol id="i-plus" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M12 5v14M5 12h14"/></symbol><symbol id="i-menu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></symbol><symbol id="i-doc" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M6.5 3.5h7l4 4v13h-11z"/><path d="M13.5 3.5v4h4M9 12h6M9 15.5h6"/></symbol></svg>
+<div class="app ">
+ <header class="cmdbar">
+  <button class="menu" aria-label="Open navigation" aria-expanded="false"><svg class="i" aria-hidden="true"><use href="#i-menu"/></svg></button>
+  <a class="mk" href="02-dashboard.html"><svg class="mosaic-logo" viewBox="0 0 36 36" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg><span>Mosaic Stack</span></a>
+  <span class="sim" title="Static design sample">U0 sample</span>
+  <button class="cmdk"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg><span>Go to an org, project, task or decision</span><kbd>Ctrl K</kbd></button>
+  <div class="fresh"><span class="wide">Read <b>3 of 3</b> organization buses · 4 s ago</span><span class="me" title="Operator">OP</span></div>
+ </header>
+ <nav class="side" aria-label="Workspace">
+  <a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a>
+  <a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a>
+  <a class="nav" href="06-tasks.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a>
+  <a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a>
+  <a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a>
+  <a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a>
+  <a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organizations</span><span class="n">3</span><span class="add" title="New organization"><svg class="i sm" aria-hidden="true"><use href="#i-plus"/></svg></span></div>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="t">Distinctly Digital</span><span class="ic" title="Business"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="t">Forge</span><span class="ic" title="Coding"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="home" aria-hidden="true">HM</span><span class="t">Home</span><span class="ic" title="Personal"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></a>
+  </div>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="true">By org</span><span aria-pressed="false">Flat</span></span></div>
+   <div class="pgroup" data-org="ddigital"><div class="pgroup-h"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span>Distinctly Digital</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Spring launch</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">The Lantern Coast</span><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span></a><a class="nav proj" href="#"><span class="t">Brand refresh</span></a><a class="nav proj" href="#"><span class="t">Monthly newsletter</span></a></div></div>
+<div class="pgroup" data-org="forge"><div class="pgroup-h"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span>Forge</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a><a class="nav proj" href="#"><span class="t">CLI tools</span><span class="n">paused</span></a></div></div>
+<div class="pgroup" data-org="home"><div class="pgroup-h"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span>Home</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Household admin</span><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span></a><a class="nav proj" href="#"><span class="t">Garden plan</span></a><a class="nav proj" href="#"><span class="t">Trip planning 2027</span><span class="n">paused</span></a></div></div>
+  </div>
+  <div class="foot"><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-settings"/></svg><span class="t">Settings</span></a></div>
+ </nav>
+ <nav class="strip" aria-label="Sections"><a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a><a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a><a class="nav" href="06-tasks.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a><a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a><a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a><a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a></nav>
+ <main class="main ">
+
+  <div class="vh"><h1>Tasks</h1><div class="right"><span class="seg" role="group" aria-label="Layout"><span aria-pressed="true" class="kb">Kanban</span><span aria-pressed="false" class="ls">List</span></span><span class="btn"><svg class="i" aria-hidden="true"><use href="#i-plus"/></svg>New task</span></div>
+   <p class="sub">12 tasks from 3 organizations. Each organization keeps its own task store; this view reads all of them and writes each change back to the store it came from.</p></div>
+  <div class="trackers"><span class="label">Trackers</span><span><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital <span class="trk vik">Vikunja</span></span><span><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge <span class="trk">built-in</span></span><span><span class="av " data-org="home" aria-hidden="true">HM</span>Home <span class="trk">built-in</span></span><span class="note">Ids keep their tracker's form: V-112 is Vikunja, #41 is built in. Archiving an organization removes only its tasks.</span></div>
+  <div class="toolbar">
+   <div class="chips" role="group" aria-label="Organization"><span class="f plain" aria-pressed="true">All <span class="n">12</span></span><span class="f" aria-pressed="false"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital<span class="n">5</span></span><span class="f" aria-pressed="false"><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge<span class="n">4</span></span><span class="f" aria-pressed="false"><span class="av " data-org="home" aria-hidden="true">HM</span>Home<span class="n">3</span></span></div>
+   <span class="sel"><span class="label">Project</span>All 10<svg class="i sm" aria-hidden="true"><use href="#i-chevron"/></svg></span>
+   <span class="sel"><span class="label">Assignee</span>Anyone<svg class="i sm" aria-hidden="true"><use href="#i-chevron"/></svg></span>
+   <div class="right"><span class="search"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg>Find a task</span></div>
+  </div>
+  <div class="board">
+   <section class="col"><div class="col-h"><h3>To do</h3><span class="n">5</span><span class="mix" title="Organizations in this column"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="av xs" data-org="home" aria-hidden="true">HM</span></span></div><article class="kcard edge" data-org="forge">
+   <div class="top"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="id">#44</span><span class="trk">built-in</span></div>
+   <div class="tt">Settings page: model picker</div>
+   <div class="bot"><span>Web app</span></div>
+  </article><article class="kcard edge" data-org="ddigital">
+   <div class="top"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="id">V-120</span><span class="trk vik">Vikunja</span></div>
+   <div class="tt">Logo shortlist</div>
+   <div class="bot"><span>Brand refresh</span></div>
+  </article><article class="kcard edge" data-org="ddigital">
+   <div class="top"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="id">V-121</span><span class="trk vik">Vikunja</span></div>
+   <div class="tt">November issue outline</div>
+   <div class="bot"><span>Monthly newsletter</span></div>
+  </article><article class="kcard edge you" data-org="home">
+   <div class="top"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span class="id">#12</span><span class="trk">built-in</span></div>
+   <div class="tt">Insurance renewal comparison</div>
+   <div class="bot"><span>Household admin</span><span class="chip warn">needs you</span></div>
+  </article><article class="kcard edge" data-org="home">
+   <div class="top"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span class="id">#14</span><span class="trk">built-in</span></div>
+   <div class="tt">Shortlist ferry dates</div>
+   <div class="bot"><span>Trip planning 2027</span></div>
+  </article></section>
+   <section class="col"><div class="col-h"><h3>In progress</h3><span class="n">3</span><span class="mix" title="Organizations in this column"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span></span></div><article class="kcard edge" data-org="forge">
+   <div class="top"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="id">#41</span><span class="trk">built-in</span></div>
+   <div class="tt">Rate limiter: per-key buckets</div>
+   <div class="bot"><span>API gateway</span><span class="dot s-working"><b aria-hidden="true">●</b>coder</span></div>
+  </article><article class="kcard edge" data-org="ddigital">
+   <div class="top"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="id">V-112</span><span class="trk vik">Vikunja</span></div>
+   <div class="tt">Launch email, draft 2</div>
+   <div class="bot"><span>Spring launch</span><span class="dot s-working"><b aria-hidden="true">●</b>copywriter</span></div>
+  </article><article class="kcard edge" data-org="ddigital">
+   <div class="top"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="id">V-118</span><span class="trk vik">Vikunja</span></div>
+   <div class="tt">Teaser reel, 30 s cut</div>
+   <div class="bot"><span>Spring launch</span><span class="dot s-working"><b aria-hidden="true">●</b>montage-producer</span></div>
+  </article></section>
+   <section class="col"><div class="col-h"><h3>Review</h3><span class="n">2</span><span class="mix" title="Organizations in this column"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span></span></div><article class="kcard edge" data-org="forge">
+   <div class="top"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="id">#38</span><span class="trk">built-in</span></div>
+   <div class="tt">Load test at 2k rps</div>
+   <div class="bot"><span>API gateway</span><span class="dot s-idle"><b aria-hidden="true">–</b>reviewer</span></div>
+  </article><article class="kcard edge" data-org="ddigital">
+   <div class="top"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span class="id">V-97</span><span class="trk vik">Vikunja</span></div>
+   <div class="tt">Chapter 7 revision</div>
+   <div class="bot"><span>The Lantern Coast</span><span class="dot s-waiting"><b aria-hidden="true">◐</b>editor, on you</span></div>
+  </article></section>
+   <section class="col"><div class="col-h"><h3>Done</h3><span class="n">2</span><span class="mix" title="Organizations in this column"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="av xs" data-org="home" aria-hidden="true">HM</span></span></div><article class="kcard edge" data-org="forge">
+   <div class="top"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span class="id">#29</span><span class="trk">built-in</span></div>
+   <div class="tt">zsh completion</div>
+   <div class="bot"><span>CLI tools</span></div>
+  </article><article class="kcard edge" data-org="home">
+   <div class="top"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span class="id">#9</span><span class="trk">built-in</span></div>
+   <div class="tt">Order seed potatoes</div>
+   <div class="bot"><span>Garden plan</span></div>
+  </article></section>
+  </div>
+  <section class="tasklist">
+   <div class="sec-h"><h2>List layout</h2><span class="note">same filters, one row per task, grouped by state</span></div>
+   <div class="tbl"><table><thead><tr><th>Org</th><th>Id</th><th>Task</th><th class="hide-m">Project</th><th>State</th><th class="hide-m">Assignee</th></tr></thead><tbody>
+   <tr class="edge" data-org="forge"><td><span class="av " data-org="forge" aria-hidden="true">FG</span></td><td class="mono">#44<span class="t2">built-in</span></td><td><span class="t1">Settings page: model picker</span><span class="t2 show-m">Web app</span></td><td class="hide-m">Web app</td><td>To do</td><td class="hide-m"><span class="muted">nobody</span></td></tr><tr class="edge" data-org="ddigital"><td><span class="av " data-org="ddigital" aria-hidden="true">DD</span></td><td class="mono">V-120<span class="t2">Vikunja</span></td><td><span class="t1">Logo shortlist</span><span class="t2 show-m">Brand refresh</span></td><td class="hide-m">Brand refresh</td><td>To do</td><td class="hide-m"><span class="muted">nobody</span></td></tr><tr class="edge" data-org="ddigital"><td><span class="av " data-org="ddigital" aria-hidden="true">DD</span></td><td class="mono">V-121<span class="t2">Vikunja</span></td><td><span class="t1">November issue outline</span><span class="t2 show-m">Monthly newsletter</span></td><td class="hide-m">Monthly newsletter</td><td>To do</td><td class="hide-m"><span class="muted">nobody</span></td></tr><tr class="edge" data-org="home"><td><span class="av " data-org="home" aria-hidden="true">HM</span></td><td class="mono">#12<span class="t2">built-in</span></td><td><span class="t1">Insurance renewal comparison</span><span class="t2 show-m">Household admin</span></td><td class="hide-m">Household admin</td><td>To do</td><td class="hide-m"><span class="chip warn">you</span></td></tr><tr class="edge" data-org="home"><td><span class="av " data-org="home" aria-hidden="true">HM</span></td><td class="mono">#14<span class="t2">built-in</span></td><td><span class="t1">Shortlist ferry dates</span><span class="t2 show-m">Trip planning 2027</span></td><td class="hide-m">Trip planning 2027</td><td>To do</td><td class="hide-m"><span class="muted">nobody</span></td></tr><tr class="edge" data-org="forge"><td><span class="av " data-org="forge" aria-hidden="true">FG</span></td><td class="mono">#41<span class="t2">built-in</span></td><td><span class="t1">Rate limiter: per-key buckets</span><span class="t2 show-m">API gateway</span></td><td class="hide-m">API gateway</td><td>In progress</td><td class="hide-m"><span class="dot s-working"><b aria-hidden="true">●</b>coder</span></td></tr><tr class="edge" data-org="ddigital"><td><span class="av " data-org="ddigital" aria-hidden="true">DD</span></td><td class="mono">V-112<span class="t2">Vikunja</span></td><td><span class="t1">Launch email, draft 2</span><span class="t2 show-m">Spring launch</span></td><td class="hide-m">Spring launch</td><td>In progress</td><td class="hide-m"><span class="dot s-working"><b aria-hidden="true">●</b>copywriter</span></td></tr><tr class="edge" data-org="ddigital"><td><span class="av " data-org="ddigital" aria-hidden="true">DD</span></td><td class="mono">V-118<span class="t2">Vikunja</span></td><td><span class="t1">Teaser reel, 30 s cut</span><span class="t2 show-m">Spring launch</span></td><td class="hide-m">Spring launch</td><td>In progress</td><td class="hide-m"><span class="dot s-working"><b aria-hidden="true">●</b>montage-producer</span></td></tr><tr class="edge" data-org="forge"><td><span class="av " data-org="forge" aria-hidden="true">FG</span></td><td class="mono">#38<span class="t2">built-in</span></td><td><span class="t1">Load test at 2k rps</span><span class="t2 show-m">API gateway</span></td><td class="hide-m">API gateway</td><td>Review</td><td class="hide-m"><span class="dot s-idle"><b aria-hidden="true">–</b>reviewer</span></td></tr><tr class="edge" data-org="ddigital"><td><span class="av " data-org="ddigital" aria-hidden="true">DD</span></td><td class="mono">V-97<span class="t2">Vikunja</span></td><td><span class="t1">Chapter 7 revision</span><span class="t2 show-m">The Lantern Coast</span></td><td class="hide-m">The Lantern Coast</td><td>Review</td><td class="hide-m"><span class="dot s-waiting"><b aria-hidden="true">◐</b>editor</span></td></tr><tr class="edge dim" data-org="forge"><td><span class="av " data-org="forge" aria-hidden="true">FG</span></td><td class="mono">#29<span class="t2">built-in</span></td><td><span class="t1">zsh completion</span><span class="t2 show-m">CLI tools</span></td><td class="hide-m">CLI tools</td><td>Done</td><td class="hide-m"><span class="muted">nobody</span></td></tr><tr class="edge dim" data-org="home"><td><span class="av " data-org="home" aria-hidden="true">HM</span></td><td class="mono">#9<span class="t2">built-in</span></td><td><span class="t1">Order seed potatoes</span><span class="t2 show-m">Garden plan</span></td><td class="hide-m">Garden plan</td><td>Done</td><td class="hide-m"><span class="muted">nobody</span></td></tr>
+   </tbody></table></div>
+  </section>
+ </main>
+
+</div>
+</body>
+</html>

docs/design/samples/2026-11-09-unified-workspace/07-side-by-side.html

@@ -0,0 +1,88 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Side by side · U0 sample</title>
+<link rel="stylesheet" href="workspace.css">
+</head>
+<body>
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false"><symbol id="i-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="m6 9 6 6 6-6"/></symbol><symbol id="i-home" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 10.5 12 4l8 6.5"/><path d="M6 9v10.5h12V9"/><path d="M10 19.5v-5h4v5"/></symbol><symbol id="i-folder" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M3.5 6.5a1 1 0 0 1 1-1h4.5l2 2h8.5a1 1 0 0 1 1 1v10a1 1 0 0 1-1 1h-15a1 1 0 0 1-1-1z"/></symbol><symbol id="i-columns" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M12 4.5v15"/></symbol><symbol id="i-split" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M13 4.5v15M16.75 10.5v3M15.25 12h3"/></symbol><symbol id="i-restart" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M19.5 12a7.5 7.5 0 1 1-2.2-5.3"/><path d="M19.5 4.5v4h-4"/></symbol><symbol id="i-plus" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M12 5v14M5 12h14"/></symbol><symbol id="i-menu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></symbol><symbol id="i-doc" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M6.5 3.5h7l4 4v13h-11z"/><path d="M13.5 3.5v4h4M9 12h6M9 15.5h6"/></symbol></svg>
+<div class="app ">
+ <header class="cmdbar">
+  <button class="menu" aria-label="Open navigation" aria-expanded="false"><svg class="i" aria-hidden="true"><use href="#i-menu"/></svg></button>
+  <a class="mk" href="02-dashboard.html"><svg class="mosaic-logo" viewBox="0 0 36 36" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg><span>Mosaic Stack</span></a>
+  <span class="sim" title="Static design sample">U0 sample</span>
+  <button class="cmdk"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg><span>Go to an org, project, task or decision</span><kbd>Ctrl K</kbd></button>
+  <div class="fresh"><span class="wide">Read <b>3 of 3</b> organization buses · 4 s ago</span><span class="me" title="Operator">OP</span></div>
+ </header>
+ <nav class="side" aria-label="Workspace">
+  <a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a>
+  <a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a>
+  <a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a>
+  <a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a>
+  <a class="nav" href="07-side-by-side.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a>
+  <a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a>
+  <a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organizations</span><span class="n">3</span><span class="add" title="New organization"><svg class="i sm" aria-hidden="true"><use href="#i-plus"/></svg></span></div>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="t">Distinctly Digital</span><span class="ic" title="Business"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="t">Forge</span><span class="ic" title="Coding"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="home" aria-hidden="true">HM</span><span class="t">Home</span><span class="ic" title="Personal"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></a>
+  </div>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="true">By org</span><span aria-pressed="false">Flat</span></span></div>
+   <div class="pgroup" data-org="ddigital"><div class="pgroup-h"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span>Distinctly Digital</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Spring launch</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">The Lantern Coast</span><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span></a><a class="nav proj" href="#"><span class="t">Brand refresh</span></a><a class="nav proj" href="#"><span class="t">Monthly newsletter</span></a></div></div>
+<div class="pgroup" data-org="forge"><div class="pgroup-h"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span>Forge</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a><a class="nav proj" href="#"><span class="t">CLI tools</span><span class="n">paused</span></a></div></div>
+<div class="pgroup" data-org="home"><div class="pgroup-h"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span>Home</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Household admin</span><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span></a><a class="nav proj" href="#"><span class="t">Garden plan</span></a><a class="nav proj" href="#"><span class="t">Trip planning 2027</span><span class="n">paused</span></a></div></div>
+  </div>
+  <div class="foot"><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-settings"/></svg><span class="t">Settings</span></a></div>
+ </nav>
+ <nav class="strip" aria-label="Sections"><a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a><a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a><a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a><a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a><a class="nav" href="07-side-by-side.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a><a class="nav" href="08-agents.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a></nav>
+ <main class="main flush">
+
+  <div class="panebar"><h1>Side by side</h1><span class="note">2 panes · each pane reads its own organization's bus and keeps its own state</span>
+   <span class="seg pane-tabs" role="group" aria-label="Shown pane"><span aria-pressed="true"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span> Spring launch</span><span aria-pressed="false"><span class="av xs" data-org="forge" aria-hidden="true">FG</span> API gateway</span></span>
+   <span class="btn hide-m" style="margin-left:auto"><svg class="i" aria-hidden="true"><use href="#i-plus"/></svg>Add pane</span></div>
+  <div class="panes">
+  <section class="pane" data-org="ddigital">
+   <div class="pane-h"><span class="av md" data-org="ddigital" aria-hidden="true">DD</span><span class="ttl">Spring launch<small>Distinctly Digital</small></span><span class="tools"><span title="Open in full view"><svg class="i sm" aria-hidden="true"><use href="#i-split"/></svg></span><span title="Close pane"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-close"/></svg></span></span></div>
+   <div class="pane-body">
+    <div class="subtabs"><span aria-current="page">Overview</span><span>Tasks</span><span>Sessions</span><span>Docs</span></div>
+    <div class="grid g3 mini-tiles"><div class="tile"><span class="label">Open tasks</span><span class="big">2</span></div><div class="tile"><span class="label">Sessions</span><span class="big">2<small>working</small></span></div><div class="tile"><span class="label">Needs you</span><span class="big">0</span></div></div>
+    <div class="sec-h"><h3>copywriter · live</h3><span class="note">V-112 Launch email, draft 2</span></div>
+    <pre class="term"><span class="m">14:26</span> read brand-voice.md, launch-plan.md
+<span class="m">14:27</span> drafted subject lines (3), kept the shortest
+<span class="m">14:28</span> saved drafts/launch-email-v2.md  182 words
+<span class="m">14:29</span> next: tighten the call to action
+<span class="c">▍</span></pre>
+    <div class="sec-h"><h3>montage-producer · live</h3><span class="note">V-118 Teaser reel</span></div>
+    <pre class="term"><span class="m">13:55</span> rendered cut 3 of 4  00:30  1080x1920
+<span class="m">14:10</span> waiting on the music bed licence check
+<span class="c">▍</span></pre>
+    <div class="sec-h"><h3>Activity</h3></div>
+    <ol class="trail"><li><time>14:28</time><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="what"><b>copywriter</b> saved V-112 Launch email, draft 2 <span class="src">· Distinctly Digital · Spring launch</span></span></li><li><time>13:55</time><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="what"><b>montage-producer</b> rendered teaser cut 3 of 4 <span class="src">· Distinctly Digital · Spring launch</span></span></li><li><time>11:20</time><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="what"><b>chief</b> updated the launch plan <span class="src">· Distinctly Digital · Spring launch</span></span></li></ol></div>
+  </section>
+  <section class="pane alt" data-org="forge">
+   <div class="pane-h"><span class="av md" data-org="forge" aria-hidden="true">FG</span><span class="ttl">API gateway<small>Forge</small></span><span class="tools"><span title="Open in full view"><svg class="i sm" aria-hidden="true"><use href="#i-split"/></svg></span><span title="Close pane"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-close"/></svg></span></span></div>
+   <div class="pane-body">
+    <div class="subtabs"><span aria-current="page">Overview</span><span>Tasks</span><span>Sessions</span><span>Docs</span></div>
+    <div class="grid g3 mini-tiles"><div class="tile"><span class="label">Open tasks</span><span class="big">2</span></div><div class="tile"><span class="label">Sessions</span><span class="big">1<small>working</small></span></div><div class="tile"><span class="label">Needs you</span><span class="big">1<small>gated</small></span></div></div>
+    <ul class="needs" style="margin-top:12px"><li class="edge" data-org="forge"><span class="av md" data-org="forge" aria-hidden="true">FG</span><span class="q">Merge the rate limiter branch into main?</span><span class="src">chief · 52 min · <a href="05-inbox.html">Open in inbox</a></span><span class="chip gated">gated</span></li></ul>
+    <div class="sec-h"><h3>coder · live</h3><span class="note">#41 Rate limiter: per-key buckets</span></div>
+    <pre class="term"><span class="m">14:30</span> npm test  312 passed, 0 failed
+<span class="m">14:31</span> bench: 2,140 rps at p99 41 ms
+<span class="m">14:32</span> pushed 3 commits to rate-limiter-41
+<span class="m">14:32</span> waiting for review
+<span class="c">▍</span></pre>
+    <div class="sec-h"><h3>Activity</h3></div>
+    <ol class="trail"><li><time>14:32</time><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="what"><b>coder</b> pushed 3 commits on #41 Rate limiter <span class="src">· Forge · API gateway</span></span></li><li><time>13:40</time><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="what"><b>chief</b> raised a gated decision: merge the rate limiter <span class="src">· Forge · API gateway</span></span></li><li><time>12:40</time><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="what"><b>load-tester</b> finished run 7 of 7 <span class="src">· Forge · API gateway</span></span></li></ol></div>
+  </section>
+  </div>
+ </main>
+
+</div>
+</body>
+</html>

docs/design/samples/2026-11-09-unified-workspace/08-agents.html

@@ -0,0 +1,86 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Agents · U0 sample</title>
+<link rel="stylesheet" href="workspace.css">
+</head>
+<body>
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false"><symbol id="i-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="m6 9 6 6 6-6"/></symbol><symbol id="i-home" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 10.5 12 4l8 6.5"/><path d="M6 9v10.5h12V9"/><path d="M10 19.5v-5h4v5"/></symbol><symbol id="i-folder" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M3.5 6.5a1 1 0 0 1 1-1h4.5l2 2h8.5a1 1 0 0 1 1 1v10a1 1 0 0 1-1 1h-15a1 1 0 0 1-1-1z"/></symbol><symbol id="i-columns" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M12 4.5v15"/></symbol><symbol id="i-split" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><rect x="3.5" y="4.5" width="17" height="15" rx="1.5"/><path d="M13 4.5v15M16.75 10.5v3M15.25 12h3"/></symbol><symbol id="i-restart" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M19.5 12a7.5 7.5 0 1 1-2.2-5.3"/><path d="M19.5 4.5v4h-4"/></symbol><symbol id="i-plus" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M12 5v14M5 12h14"/></symbol><symbol id="i-menu" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></symbol><symbol id="i-doc" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M6.5 3.5h7l4 4v13h-11z"/><path d="M13.5 3.5v4h4M9 12h6M9 15.5h6"/></symbol></svg>
+<div class="app ">
+ <header class="cmdbar">
+  <button class="menu" aria-label="Open navigation" aria-expanded="false"><svg class="i" aria-hidden="true"><use href="#i-menu"/></svg></button>
+  <a class="mk" href="02-dashboard.html"><svg class="mosaic-logo" viewBox="0 0 36 36" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg><span>Mosaic Stack</span></a>
+  <span class="sim" title="Static design sample">U0 sample</span>
+  <button class="cmdk"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-search"/></svg><span>Go to an org, project, task or decision</span><kbd>Ctrl K</kbd></button>
+  <div class="fresh"><span class="wide">Read <b>3 of 3</b> organization buses · 4 s ago</span><span class="me" title="Operator">OP</span></div>
+ </header>
+ <nav class="side" aria-label="Workspace">
+  <a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a>
+  <a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a>
+  <a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a>
+  <a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a>
+  <a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a>
+  <a class="nav" href="08-agents.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a>
+  <a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Organizations</span><span class="n">3</span><span class="add" title="New organization"><svg class="i sm" aria-hidden="true"><use href="#i-plus"/></svg></span></div>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="t">Distinctly Digital</span><span class="ic" title="Business"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-business"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="t">Forge</span><span class="ic" title="Coding"><svg class="i sm" aria-hidden="true"><use href="../../icons.svg#i-term"/></svg></span></a>
+   <a class="nav org-row" href="03-org-dashboard.html"><span class="av " data-org="home" aria-hidden="true">HM</span><span class="t">Home</span><span class="ic" title="Personal"><svg class="i sm" aria-hidden="true"><use href="#i-home"/></svg></span></a>
+  </div>
+  <hr>
+  <div class="grp">
+   <div class="grp-h" role="button" aria-expanded="true"><svg class="i chev" aria-hidden="true"><use href="#i-chevron"/></svg><span class="label">Projects</span><span class="seg xs" role="group" aria-label="Project layout"><span aria-pressed="true">By org</span><span aria-pressed="false">Flat</span></span></div>
+   <div class="pgroup" data-org="ddigital"><div class="pgroup-h"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span><span>Distinctly Digital</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Spring launch</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">The Lantern Coast</span><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span></a><a class="nav proj" href="#"><span class="t">Brand refresh</span></a><a class="nav proj" href="#"><span class="t">Monthly newsletter</span></a></div></div>
+<div class="pgroup" data-org="forge"><div class="pgroup-h"><span class="av xs" data-org="forge" aria-hidden="true">FG</span><span>Forge</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">API gateway</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span></a><a class="nav proj" href="#"><span class="t">Web app</span><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span></a><a class="nav proj" href="#"><span class="t">CLI tools</span><span class="n">paused</span></a></div></div>
+<div class="pgroup" data-org="home"><div class="pgroup-h"><span class="av xs" data-org="home" aria-hidden="true">HM</span><span>Home</span></div><div class="projs"><a class="nav proj" href="#"><span class="t">Household admin</span><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span></a><a class="nav proj" href="#"><span class="t">Garden plan</span></a><a class="nav proj" href="#"><span class="t">Trip planning 2027</span><span class="n">paused</span></a></div></div>
+  </div>
+  <div class="foot"><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-settings"/></svg><span class="t">Settings</span></a></div>
+ </nav>
+ <nav class="strip" aria-label="Sections"><a class="nav" href="02-dashboard.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-board"/></svg><span class="t">Dashboard</span></a><a class="nav" href="05-inbox.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-inbox"/></svg><span class="t">Inbox</span><span class="n hot">3</span></a><a class="nav" href="06-tasks.html"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-tasks"/></svg><span class="t">Tasks</span><span class="n">10</span></a><a class="nav" href="04-projects.html"><svg class="i" aria-hidden="true"><use href="#i-folder"/></svg><span class="t">Projects</span><span class="n">10</span></a><a class="nav" href="07-side-by-side.html"><svg class="i" aria-hidden="true"><use href="#i-columns"/></svg><span class="t">Side by side</span></a><a class="nav" href="08-agents.html" aria-current="page"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-agents"/></svg><span class="t">Agents</span></a><a class="nav" href="#"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-talk"/></svg><span class="t">Assistant</span><span class="dot s-working" title="working"><b aria-hidden="true">●</b></span></a></nav>
+ <main class="main ">
+
+  <div class="vh"><h1>Agents</h1><div class="right"><span class="btn"><svg class="i" aria-hidden="true"><use href="../../icons.svg#i-settings"/></svg>Edit root agents</span></div>
+   <p class="sub">Agents are defined at three levels. A project can use the union of your root agents, its organization's agents and its own. Every agent except the assistant works inside one organization.</p></div>
+  <div class="span-band"><span class="av all md" aria-hidden="true" title="Assistant, all organizations"><svg class="mosaic-logo" viewBox="0 0 36 36" style="width:70%;height:auto" aria-hidden="true"><rect x="3" y="12" width="13" height="10" rx="2"/><rect x="18" y="3" width="13" height="12" rx="2"/><rect x="3" y="24" width="13" height="10" rx="2"/><rect x="18" y="17" width="13" height="12" rx="2"/></svg></span><b>assistant</b><span class="lvl root">root</span><span class="dot s-working"><b aria-hidden="true">●</b>working</span><span>Works across</span><span class="orgs"><span class="av " data-org="ddigital" aria-hidden="true">DD</span><span class="av " data-org="forge" aria-hidden="true">FG</span><span class="av " data-org="home" aria-hidden="true">HM</span></span><span class="muted">One shared memory. Talks with you and hands each organization's work to its chief; it does not direct agents, create tasks or launch sessions.</span></div>
+  <div class="levels" style="margin-top:12px">
+   <div class="lh hide-m"></div><div class="oh hide-m" data-org="ddigital"><span class="av " data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital</div><div class="oh hide-m" data-org="forge"><span class="av " data-org="forge" aria-hidden="true">FG</span>Forge</div><div class="oh hide-m" data-org="home"><span class="av " data-org="home" aria-hidden="true">HM</span>Home</div>
+   <div class="lh"><span class="lvl root">root</span><small>Your root configuration. Only you change it. Each organization runs its own copy, with memory, files and credentials kept in that organization.</small></div>
+   <div data-org="ddigital"><span class="mlabel"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital</span><span class="agent "><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>reviewer <small>copy</small></span><span class="agent "><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>researcher <small>copy</small></span></div>
+   <div data-org="forge"><span class="mlabel"><span class="av xs" data-org="forge" aria-hidden="true">FG</span>Forge</span><span class="agent "><span class="dot s-error" title="error"><b aria-hidden="true">▲</b><span class="sr">error</span></span>reviewer <small>copy</small></span><span class="agent "><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>researcher <small>copy</small></span></div>
+   <div data-org="home"><span class="mlabel"><span class="av xs" data-org="home" aria-hidden="true">HM</span>Home</span><span class="agent "><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>researcher <small>copy</small></span><span class="note" style="display:block;margin-top:4px">reviewer turned off for Home</span></div>
+   <div class="lh"><span class="lvl org">org</span><small>Defined in the organization file. The chief hires and fires here; you can override any setting.</small></div>
+   <div data-org="ddigital"><span class="mlabel"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital</span><span class="agent cos"><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>chief</span><span class="agent "><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span>copywriter</span><span class="agent "><span class="dot s-waiting" title="waiting"><b aria-hidden="true">◐</b><span class="sr">waiting</span></span>editor</span><span class="agent "><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span>montage-producer</span></div>
+   <div data-org="forge"><span class="mlabel"><span class="av xs" data-org="forge" aria-hidden="true">FG</span>Forge</span><span class="agent cos"><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>chief</span><span class="agent "><span class="dot s-working" title="working"><b aria-hidden="true">●</b><span class="sr">working</span></span>coder</span></div>
+   <div data-org="home"><span class="mlabel"><span class="av xs" data-org="home" aria-hidden="true">HM</span>Home</span><span class="agent cos"><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>chief</span><span class="agent "><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>planner</span></div>
+   <div class="lh last"><span class="lvl proj">project</span><small>Defined in one project and available only there. The chief hires and fires here too.</small></div>
+   <div class="last" data-org="ddigital"><span class="mlabel"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span>Distinctly Digital</span><span class="agent "><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>social-scheduler <small>Spring launch</small></span><span class="agent "><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>continuity-checker <small>The Lantern Coast</small></span></div>
+   <div class="last" data-org="forge"><span class="mlabel"><span class="av xs" data-org="forge" aria-hidden="true">FG</span>Forge</span><span class="agent "><span class="dot s-idle" title="idle"><b aria-hidden="true">–</b><span class="sr">idle</span></span>load-tester <small>API gateway</small></span></div>
+   <div class="last" data-org="home"><span class="mlabel"><span class="av xs" data-org="home" aria-hidden="true">HM</span>Home</span><span class="muted">none</span></div>
+  </div>
+  <div class="split" style="margin-top:4px">
+   <section>
+    <div class="sec-h"><h2>Available in a project</h2><span class="sel"><span class="av xs" data-org="ddigital" aria-hidden="true">DD</span>Spring launch<svg class="i sm" aria-hidden="true"><use href="#i-chevron"/></svg></span></div>
+    <div class="tbl"><table><thead><tr><th>Agent</th><th>Level</th><th class="hide-m">Defined in</th><th class="hide-m">Memory</th><th>Status</th><th class="hide-m">Model</th></tr></thead><tbody>
+    <tr><td class="t1">assistant</td><td><span class="lvl root">root</span></td><td class="hide-m">Your root configuration</td><td class="hide-m">Shared across all organizations</td><td><span class="dot s-working"><b aria-hidden="true">●</b>working</span></td><td class="hide-m mono">opus-5.5 <a href="#">Change</a></td></tr><tr><td class="t1">reviewer</td><td><span class="lvl root">root</span></td><td class="hide-m">Your root configuration</td><td class="hide-m">This organization only</td><td><span class="dot s-idle"><b aria-hidden="true">–</b>idle</span></td><td class="hide-m mono">sonnet-5.5 <a href="#">Change</a></td></tr><tr><td class="t1">researcher</td><td><span class="lvl root">root</span></td><td class="hide-m">Your root configuration</td><td class="hide-m">This organization only</td><td><span class="dot s-idle"><b aria-hidden="true">–</b>idle</span></td><td class="hide-m mono">sonnet-5.5 <a href="#">Change</a></td></tr><tr><td class="t1">chief</td><td><span class="lvl org">org</span></td><td class="hide-m">Distinctly Digital file</td><td class="hide-m">This organization only</td><td><span class="dot s-idle"><b aria-hidden="true">–</b>idle</span></td><td class="hide-m mono">opus-5.5 <a href="#">Change</a></td></tr><tr><td class="t1">copywriter</td><td><span class="lvl org">org</span></td><td class="hide-m">Distinctly Digital file</td><td class="hide-m">This organization only</td><td><span class="dot s-working"><b aria-hidden="true">●</b>working</span></td><td class="hide-m mono">sonnet-5.5 <a href="#">Change</a></td></tr><tr><td class="t1">editor</td><td><span class="lvl org">org</span></td><td class="hide-m">Distinctly Digital file</td><td class="hide-m">This organization only</td><td><span class="dot s-waiting"><b aria-hidden="true">◐</b>waiting</span></td><td class="hide-m mono">opus-5.5 <a href="#">Change</a></td></tr><tr><td class="t1">montage-producer</td><td><span class="lvl org">org</span></td><td class="hide-m">Distinctly Digital file</td><td class="hide-m">This organization only</td><td><span class="dot s-working"><b aria-hidden="true">●</b>working</span></td><td class="hide-m mono">sonnet-5.5 <a href="#">Change</a></td></tr><tr><td class="t1">social-scheduler</td><td><span class="lvl proj">project</span></td><td class="hide-m">Spring launch project</td><td class="hide-m">This organization only</td><td><span class="dot s-idle"><b aria-hidden="true">–</b>idle</span></td><td class="hide-m mono">haiku-5.5 <a href="#">Change</a></td></tr>
+    </tbody></table></div>
+    <p class="note" style="margin-top:8px">Not available here: continuity-checker (The Lantern Coast only) and every Forge or Home agent.</p>
+   </section>
+   <section>
+    <div class="sec-h"><h2>Who changes what</h2></div>
+    <div class="panel tight rules">
+     <p><span class="lvl root">root</span> You add, change and remove root agents. The chief cannot.</p>
+     <p><span class="lvl org">org</span> <span class="lvl proj">project</span> The chief hires and fires to meet your needs, within the role rules. Each hire lands in the trail.</p>
+     <p><span class="lvl proj">override</span> You can change any agent's settings at any level, at any time. An override shows where it was set.</p>
+     <p class="note">Changing an agent's model is a trailed human action, applied to its running session on reload.</p>
+    </div>
+   </section>
+  </div>
+ </main>
+
+</div>
+</body>
+</html>

docs/design/samples/2026-11-09-unified-workspace/render.mjs

@@ -0,0 +1,92 @@
+// Renders the U0 samples to PNG with headless Chromium: every page at 1440x900 and 390x844,
+// light and dark (prefers-color-scheme, no data-mode), 32 shots for 8 pages.
+// Usage: node render.mjs <out-dir>
+// Serves the repository over HTTP on 127.0.0.1, port 0, because Chromium refuses cross-file SVG
+// <use> under file://. Only docs/design/ and the WebUI font directory are served.
+// Checks each shot: no script error, no failed request, no sideways page scroll, fonts loaded.
+import { createServer } from 'node:http';
+import { readFile, mkdir } from 'node:fs/promises';
+import { join, normalize, extname, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { browser } from '../../../../packages/webui/tests/browser.mjs';
+
+const here = dirname(fileURLToPath(import.meta.url));
+const repo = normalize(join(here, '../../../..'));
+const out = process.argv[2];
+if (!out) { console.error('usage: node render.mjs <out-dir>'); process.exit(2); }
+await mkdir(out, { recursive: true });
+
+const ALLOW = ['docs/design/', 'packages/webui/src/public/assets/fonts/'];
+const TYPES = { '.html': 'text/html', '.css': 'text/css', '.svg': 'image/svg+xml', '.woff2': 'font/woff2', '.js': 'text/javascript' };
+const failed = [];
+const server = createServer(async (req, res) => {
+  const path = normalize(decodeURIComponent(new URL(req.url, 'http://x').pathname)).replace(/^\/+/, '');
+  if (path === 'favicon.ico') { res.writeHead(204).end(); return; }
+  if (path.includes('..') || !ALLOW.some((a) => path.startsWith(a))) { failed.push(`403 ${path}`); res.writeHead(403).end(); return; }
+  try {
+    const body = await readFile(join(repo, path));
+    res.writeHead(200, { 'content-type': TYPES[extname(path)] ?? 'application/octet-stream' }).end(body);
+  } catch { failed.push(`404 ${path}`); res.writeHead(404).end(); }
+});
+await new Promise((r) => server.listen(0, '127.0.0.1', r));
+const base = `http://127.0.0.1:${server.address().port}/docs/design/samples/2026-11-09-unified-workspace/`;
+
+const PAGES = ['01-sidebar', '02-dashboard', '03-org-dashboard', '04-projects', '05-inbox', '06-tasks', '07-side-by-side', '08-agents'];
+const SIZES = [[1440, 900], [390, 844]];
+const THEMES = ['light', 'dark'];
+const CHECK = `(() => {
+  const vw = innerWidth, wide = [];
+  for (const el of document.querySelectorAll('body *')) {
+    const r = el.getBoundingClientRect();
+    if (!r.width || r.right <= vw + 1) continue;
+    let clipped = false;
+    for (let p = el.parentElement; p && p !== document.body; p = p.parentElement) {
+      const s = getComputedStyle(p);
+      if (/(auto|hidden|scroll|clip)/.test(s.overflowX) || s.position === 'fixed' && s.display === 'none') { clipped = true; break; }
+    }
+    if (!clipped && getComputedStyle(el).visibility !== 'hidden') wide.push(el.tagName.toLowerCase() + (el.className && typeof el.className === 'string' ? '.' + el.className.trim().split(/\\s+/).join('.') : ''));
+  }
+  const faces = [...document.fonts].map((f) => f.family.replace(/"/g, '') + ' ' + f.weight + ' ' + f.status);
+  return { sw: document.documentElement.scrollWidth, cw: document.documentElement.clientWidth, wide: wide.slice(0, 8), faces,
+    manrope800: document.fonts.check('800 16px Manrope'), dark: matchMedia('(prefers-color-scheme: dark)').matches,
+    canvas: getComputedStyle(document.body).backgroundColor };
+})()`;
+
+const b = await browser({ machine: false });
+const errors = [];
+b.on('Runtime.exceptionThrown', (p) => errors.push(p.exceptionDetails?.exception?.description ?? p.exceptionDetails?.text));
+b.on('Runtime.consoleAPICalled', (p) => { if (p.type === 'error') errors.push(p.args.map((a) => a.value ?? a.description).join(' ')); });
+const report = [];
+let bad = 0;
+try {
+  for (const [w, h] of SIZES) {
+    await b.viewport(w, h);
+    for (const theme of THEMES) {
+      await b.call('Emulation.setEmulatedMedia', { features: [{ name: 'prefers-color-scheme', value: theme }] });
+      for (const name of PAGES) {
+        errors.length = 0; failed.length = 0;
+        await b.navigate(base + name + '.html');
+        await new Promise((r) => setTimeout(r, 250));
+        const info = await b.evaluate(CHECK);
+        const file = `${name}-${w}-${theme}.png`;
+        await b.screenshot(join(out, file));
+        const problems = [];
+        if (errors.length) problems.push('script: ' + errors.join(' | '));
+        if (failed.length) problems.push('requests: ' + failed.join(', '));
+        if (info.sw > info.cw) problems.push(`sideways scroll ${info.sw}>${info.cw}`);
+        if (info.wide.length) problems.push('past the edge: ' + info.wide.join(', '));
+        if (info.faces.some((f) => !f.endsWith('loaded') && !f.endsWith('unloaded'))) problems.push('fonts: ' + info.faces.join(', '));
+        if (!info.faces.some((f) => f.startsWith('Manrope') && f.endsWith('loaded') && !f.endsWith('unloaded'))) problems.push('Manrope not loaded');
+        if (info.dark !== (theme === 'dark')) problems.push('theme emulation failed');
+        if (problems.length) bad++;
+        report.push({ file, canvas: info.canvas, problems });
+      }
+    }
+  }
+} finally {
+  await b.close();
+  server.close();
+}
+for (const r of report) console.log(`${r.problems.length ? 'FAIL' : 'ok  '} ${r.file} ${r.canvas}${r.problems.length ? '\n     ' + r.problems.join('\n     ') : ''}`);
+console.log(`${report.length} shots, ${bad} with problems`);
+process.exit(bad ? 1 : 0);

docs/design/samples/2026-11-09-unified-workspace/workspace.css

@@ -0,0 +1,450 @@
+/* U0 unified workspace samples, 2026-11-09. Static mocks, not product code.
+   Colours, type, spacing and radii come from tokens.css. The few additions are marked EXT
+   and listed in the U0 design report; nothing here redefines a token. */
+@import url("../../tokens.css");
+
+/* Fonts: the WebUI's self-hosted files, so the samples render with no network. The four
+   manrope-*.woff2 files are one variable font (weights 200 to 800), so one face covers 400-800. */
+@font-face{font-family:"Manrope";font-style:normal;font-weight:200 800;font-display:swap;src:url("../../../../packages/webui/src/public/assets/fonts/manrope-400.woff2") format("woff2")}
+@font-face{font-family:"JetBrains Mono";font-style:normal;font-weight:400;font-display:swap;src:url("../../../../packages/webui/src/public/assets/fonts/jetbrains-mono-400.woff2") format("woff2")}
+@font-face{font-family:"JetBrains Mono";font-style:normal;font-weight:500;font-display:swap;src:url("../../../../packages/webui/src/public/assets/fonts/jetbrains-mono-500.woff2") format("woff2")}
+@font-face{font-family:"JetBrains Mono";font-style:normal;font-weight:700;font-display:swap;src:url("../../../../packages/webui/src/public/assets/fonts/jetbrains-mono-700.woff2") format("woff2")}
+
+/* EXT 1: org identity colours. Each organization's mark takes the action colour of the palette
+   its theme uses (11-07 ruling 7), copied from tokens.json for the three sample palettes, with
+   that palette's onAction for the initials. The shell keeps the user's own palette. */
+:root{--org-grove:#377752;--org-rosewood:#a53b72;--org-atlantic:#19719a;--org-on:#ffffff}
+@media (prefers-color-scheme:dark){:root:not([data-mode="light"]):not([data-mode="dim"]){--org-grove:#8fcca9;--org-rosewood:#d487af;--org-atlantic:#73c3e8;--org-on:#10141a}}
+:root[data-mode="dark"]{--org-grove:#8fcca9;--org-rosewood:#d487af;--org-atlantic:#73c3e8;--org-on:#10141a}
+:root[data-mode="dim"]{--org-grove:#8fcca9;--org-rosewood:#dc9ebe;--org-atlantic:#73c3e8;--org-on:#10141a}
+[data-org="home"]{--org:var(--org-grove)}
+[data-org="ddigital"]{--org:var(--org-rosewood)}
+[data-org="forge"]{--org:var(--org-atlantic)}
+
+*{box-sizing:border-box}
+html{-webkit-text-size-adjust:100%}
+html,body{height:100%}
+body{margin:0;background:var(--canvas);color:var(--text);font:400 14px/1.5 var(--font)}
+h1,h2,h3,h4{color:var(--strong);margin:0;line-height:1.2;text-wrap:balance}
+p{margin:0}
+a{color:var(--action)}
+code,kbd,.mono{font-family:var(--mono);font-size:12.5px}
+kbd{border:1px solid var(--line);border-bottom-width:2px;border-radius:4px;padding:0 .35em;background:var(--surface);color:var(--strong);white-space:nowrap;font-size:11px}
+button,select,input{font:inherit;color:inherit}
+:focus-visible{outline:2px solid var(--focus);outline-offset:2px}
+.tnum{font-variant-numeric:tabular-nums}
+.sr{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap}
+svg.i{width:18px;height:18px;flex:none;fill:none;stroke:currentColor;stroke-width:1.75;stroke-linecap:round;stroke-linejoin:round}
+svg.i.sm{width:15px;height:15px}
+.label{font-size:11px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:var(--muted)}
+.note{font-size:13px;color:var(--muted)}
+.muted{color:var(--muted)}
+.sim{display:inline-flex;align-items:center;gap:4px;font-size:11px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:var(--accent);border:1px dashed var(--accent);border-radius:4px;padding:0 5px;white-space:nowrap}
+
+/* ---------- shell: command bar, section list, main, inspector (d3 layout) ---------- */
+.app{display:grid;grid-template-columns:240px minmax(0,1fr);grid-template-rows:auto minmax(0,1fr);height:100vh}
+.app.with-insp{grid-template-columns:240px minmax(0,1fr) minmax(300px,360px)}
+.cmdbar{grid-column:1/-1;display:flex;align-items:center;gap:12px;padding:8px 14px;border-bottom:1px solid var(--line);background:var(--surface);min-width:0}
+.cmdbar .mk{display:flex;align-items:center;gap:8px;font-weight:800;color:var(--strong);letter-spacing:-.01em;white-space:nowrap;text-decoration:none}
+.cmdbar .mk svg{width:24px;height:auto}
+/* The WebUI's temporary four-tile logo (index.html, processing.css), kept by owner ruling 11-09 until a real mark is chosen. */
+.mosaic-logo{flex:none;fill:var(--action)}.mosaic-logo rect:nth-child(2){fill:color-mix(in srgb,var(--action) 75%,var(--strong))}.mosaic-logo rect:nth-child(4){fill:color-mix(in srgb,var(--action) 45%,var(--canvas))}
+.cmdbar .menu{display:none;border:1px solid var(--line);background:var(--canvas);border-radius:var(--r);padding:4px;color:var(--strong)}
+.cmdk{flex:1;max-width:520px;display:flex;align-items:center;gap:8px;border:1px solid var(--line);background:var(--canvas);border-radius:var(--r);padding:5px 10px;color:var(--muted);text-align:left;min-width:0}
+.cmdk span{flex:1;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.fresh{display:flex;align-items:center;gap:8px;margin-left:auto;font-size:12px;color:var(--muted);white-space:nowrap}
+.fresh b{color:var(--success);font-weight:600}
+.me{display:inline-grid;place-items:center;width:28px;height:28px;border-radius:50%;background:var(--raised);color:var(--strong);font-weight:700;font-size:12px;flex:none}
+
+.side{border-right:1px solid var(--line);background:var(--surface);overflow:auto;scrollbar-width:thin;scrollbar-color:var(--line) transparent;padding:10px 8px 14px;display:flex;flex-direction:column;gap:2px;min-height:0}
+.nav{display:flex;align-items:center;gap:9px;padding:5px 8px;border-radius:var(--r);color:var(--text);text-decoration:none;font-weight:600;font-size:13.5px;min-width:0}
+.nav:hover{background:var(--raised)}
+.nav[aria-current="page"]{background:color-mix(in srgb,var(--action) 13%,var(--surface));color:var(--strong)}
+.nav[aria-current="page"] svg.i{color:var(--action)}
+.nav .t{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.n{margin-left:auto;font:600 11px var(--mono);color:var(--muted);font-variant-numeric:tabular-nums}
+.n.hot{color:var(--surface);background:var(--danger);border-radius:999px;padding:0 6px}
+.side hr,.specimen .mini hr{border:0;border-top:1px solid var(--line);margin:6px 4px}
+.side .foot{margin-top:auto;padding-top:8px}
+
+/* EXT 2: collapsible sidebar group. A label row with a chevron; closed groups keep their count. */
+.grp{display:flex;flex-direction:column;gap:1px}
+.grp-h{display:flex;align-items:center;gap:6px;padding:10px 8px 4px;color:var(--muted)}
+.grp-h .label{flex:1}
+.grp-h svg.i{width:14px;height:14px;transition:transform .15s}
+.grp-h[aria-expanded="false"] svg.chev{transform:rotate(-90deg)}
+.grp-h .seg{margin-left:auto}
+.seg{display:inline-flex;border:1px solid var(--line);border-radius:var(--r);overflow:hidden;background:var(--surface)}
+.seg > span,.seg > button{border:0;background:none;padding:2px 8px;color:var(--muted);font-size:12px;font-weight:600;display:inline-flex;align-items:center;gap:5px;white-space:nowrap}
+.seg [aria-pressed="true"]{background:var(--action);color:var(--onAction)}
+.seg.xs > span{padding:0 6px;font-size:11px}
+
+/* EXT 3: org mark. Avatar tile in the org's colour with its initials (or image), always beside the
+   name or initials in text: colour is never the only cue. Sizes 16, 20, 28, 44. */
+.av{display:inline-grid;place-items:center;flex:none;width:20px;height:20px;border-radius:5px;background:var(--org,var(--muted));color:var(--org-on);font:700 9.5px/1 var(--font);letter-spacing:.02em}
+.av.xs{width:16px;height:16px;border-radius:4px;font-size:8.5px;letter-spacing:0}
+.av.md{width:28px;height:28px;border-radius:7px;font-size:12px}
+.av.lg{width:44px;height:44px;border-radius:10px;font-size:17px}
+.av.all{background:var(--raised);color:var(--strong)}
+.orgref{display:inline-flex;align-items:center;gap:6px;white-space:nowrap;color:var(--strong);font-weight:600}
+.orgref.quiet{color:var(--text);font-weight:500}
+.org-row .ic{color:var(--muted)}
+.org-row .ic svg.i{width:15px;height:15px}
+/* Org edge: a 3px stripe in the org colour on cards, rows and panes that belong to one org. */
+.edge{box-shadow:inset 3px 0 0 var(--org)}
+
+.pgroup{display:flex;flex-direction:column;gap:1px;margin-bottom:4px}
+.pgroup-h{display:flex;align-items:center;gap:7px;padding:4px 8px 2px;font-size:12px;font-weight:700;color:var(--strong)}
+.pgroup-h svg.i{width:13px;height:13px;color:var(--muted)}
+.proj{padding-left:20px;padding-top:3px;padding-bottom:3px;font-weight:500;font-size:13px}
+.proj .dot-s{font:400 12px/1 var(--glyph);width:12px;text-align:center}
+
+.main{overflow:auto;min-width:0;min-height:0;padding:18px 24px 28px}
+.crumb{font-size:12.5px;color:var(--muted);margin-bottom:4px;display:flex;gap:6px;align-items:center;flex-wrap:wrap}
+.crumb a{color:var(--muted)}
+.vh{display:flex;flex-wrap:wrap;gap:8px 14px;align-items:center;margin-bottom:14px}
+.vh h1{font-size:28px;font-weight:800;letter-spacing:-.02em}
+.vh .sub{flex-basis:100%;font-size:13.5px;color:var(--muted)}
+.vh .right{margin-left:auto;display:flex;gap:8px;align-items:center;flex-wrap:wrap}
+h2.sec{font-size:20px;font-weight:800;letter-spacing:-.015em}
+h3.q{font-size:16px;font-weight:700}
+.sec-h{display:flex;align-items:baseline;gap:10px;margin:22px 0 8px;flex-wrap:wrap}
+.sec-h h2,.sec-h h3{font-size:15px;font-weight:700}
+.sec-h .note{flex:1}
+.sec-h a{font-size:13px;font-weight:600;text-decoration:none}
+
+.panel{background:var(--surface);border:1px solid var(--line);border-radius:var(--r-lg);padding:16px;min-width:0}
+.panel.tight{padding:12px 14px}
+.grid{display:grid;gap:var(--gap)}
+.g2{grid-template-columns:repeat(2,minmax(0,1fr))}
+.g3{grid-template-columns:repeat(3,minmax(0,1fr))}
+.g4{grid-template-columns:repeat(4,minmax(0,1fr))}
+.g5{grid-template-columns:repeat(5,minmax(0,1fr))}
+.split{display:grid;gap:16px;grid-template-columns:minmax(0,1.45fr) minmax(0,1fr);align-items:start}
+
+/* status vocabulary: symbol plus word, never colour alone */
+.dot{display:inline-flex;align-items:center;gap:6px;white-space:nowrap}
+/* EXT 10, status glyph font: Manrope has no geometric shapes, and the generic fallback (Liberation Sans here)
+   draws the waiting half-circle at half the size of the dot. Name fonts that draw all five at one size. */
+:root{--glyph:"DejaVu Sans","Segoe UI Symbol","Apple Symbols","Noto Sans Symbols 2",var(--font)}
+.dot b{font:400 13px/1 var(--glyph);width:14px;text-align:center}
+.s-working b{color:var(--success)}.s-waiting b{color:var(--warning)}.s-error b{color:var(--danger)}
+.s-offline b,.s-idle b,.s-unknown b{color:var(--muted)}
+.chip{display:inline-flex;align-items:center;gap:5px;font-size:12px;font-weight:600;padding:1px 7px;border-radius:4px;background:var(--raised);color:var(--strong);white-space:nowrap}
+.chip.gated{background:color-mix(in srgb,var(--danger) 14%,var(--surface));color:var(--danger)}
+.chip.block{background:var(--danger);color:var(--surface)}
+.chip.cross{background:color-mix(in srgb,var(--accent) 16%,var(--surface));color:var(--accent)}
+.chip.within,.chip.routine{background:var(--raised);color:var(--muted)}
+.chip.warn{background:color-mix(in srgb,var(--warning) 16%,var(--surface));color:var(--warning)}
+.chip.ok{background:color-mix(in srgb,var(--success) 15%,var(--surface));color:var(--success)}
+.chip.outline{background:none;border:1px solid var(--line);color:var(--text);font-weight:500}
+.chips{display:flex;gap:6px;flex-wrap:wrap;align-items:center}
+.chips .f{display:inline-flex;align-items:center;gap:6px;border:1px solid var(--line);background:var(--surface);border-radius:999px;padding:2px 10px 2px 4px;font-size:12.5px;font-weight:600;color:var(--text);white-space:nowrap}
+.chips .f.plain{padding-left:10px}
+.chips .f[aria-pressed="true"]{background:var(--strong);color:var(--surface);border-color:var(--strong)}
+.chips .f .av{width:18px;height:18px;border-radius:999px;font-size:8.5px;letter-spacing:0}
+.chips .f .n{margin-left:2px;color:inherit;opacity:.8}
+
+.btn{display:inline-flex;align-items:center;gap:6px;border:1px solid var(--line);background:var(--surface);border-radius:var(--r);padding:4px 10px;font-size:13px;font-weight:600;color:var(--strong);white-space:nowrap;text-decoration:none}
+.btn.pri{background:var(--action);border-color:var(--action);color:var(--onAction)}
+.btn.ghost{border-color:transparent;background:none;color:var(--muted)}
+.btn svg.i{width:15px;height:15px}
+.sel{display:inline-flex;align-items:center;gap:6px;border:1px solid var(--line);background:var(--surface);border-radius:var(--r);padding:3px 8px;font-size:13px;color:var(--strong);white-space:nowrap}
+.sel .label{font-size:10px}
+.sel svg.i{width:13px;height:13px;color:var(--muted)}
+.search{display:inline-flex;align-items:center;gap:6px;border:1px solid var(--line);background:var(--surface);border-radius:var(--r);padding:3px 8px;color:var(--muted);font-size:13px;min-width:180px}
+.toolbar{display:flex;flex-wrap:wrap;gap:8px 10px;align-items:center;margin-bottom:12px}
+.toolbar .right{margin-left:auto;display:flex;gap:8px;align-items:center;flex-wrap:wrap}
+
+/* dense tables */
+.tbl{overflow-x:auto;border:1px solid var(--line);border-radius:var(--r-table);background:var(--surface)}
+table{border-collapse:collapse;width:100%;font-size:13px}
+th{font-size:11px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:var(--muted);text-align:left;padding:7px 10px;border-bottom:1px solid var(--line);white-space:nowrap;background:var(--surface)}
+th.sorted{color:var(--strong)}
+th .ar{font-family:var(--mono);margin-left:3px;color:var(--action)}
+td{padding:7px 10px;border-bottom:1px solid color-mix(in srgb,var(--line) 60%,transparent);vertical-align:middle}
+tr:last-child td{border-bottom:0}
+td.num,th.num{text-align:right;font-variant-numeric:tabular-nums}
+td.mono{font-family:var(--mono);font-size:12.5px;white-space:nowrap}
+td .t1{color:var(--strong);font-weight:600}
+td .t2{display:block;font-size:12px;color:var(--muted)}
+tbody tr.row[aria-selected="true"]{background:color-mix(in srgb,var(--action) 10%,var(--surface));box-shadow:inset 3px 0 0 var(--action)}
+tbody tr.dim td{color:var(--muted)}
+
+/* EXT 4: metric tile with a per-org breakdown. The total is the headline; the stacked bar and the
+   labelled list under it carry the same numbers by org, so the bar is never read on colour alone. */
+.tile{background:var(--surface);border:1px solid var(--line);border-radius:var(--r-table);padding:12px 14px;min-width:0;display:grid;gap:6px;align-content:start}
+.tile .big{font-size:24px;font-weight:800;color:var(--strong);letter-spacing:-.02em;font-variant-numeric:tabular-nums;line-height:1.1}
+.tile .big small{font-size:13px;font-weight:600;color:var(--muted);letter-spacing:0;margin-left:4px}
+.tile .delta{font-size:12px;color:var(--muted)}
+.tile .delta b{color:var(--success);font-weight:600}
+.tile .delta b.down{color:var(--danger)}
+.bar{display:flex;height:6px;border-radius:3px;overflow:hidden;background:var(--raised);gap:2px}
+.bar i{display:block;background:var(--org,var(--action))}
+.by{display:flex;flex-wrap:wrap;gap:4px 10px;font-size:12px;color:var(--text)}
+.by span{display:inline-flex;align-items:center;gap:4px;white-space:nowrap;font-variant-numeric:tabular-nums}
+.by .av{width:14px;height:14px;border-radius:3px;font-size:7px}
+
+/* activity trail across orgs */
+.trail{list-style:none;margin:0;padding:0;border:1px solid var(--line);border-radius:var(--r-table);background:var(--surface)}
+.trail li{display:grid;grid-template-columns:48px 20px minmax(0,1fr);gap:10px;padding:7px 12px;border-bottom:1px solid color-mix(in srgb,var(--line) 60%,transparent);font-size:13px;align-items:center}
+.trail li:last-child{border-bottom:0}
+.trail time{font-family:var(--mono);font-size:12px;color:var(--muted)}
+.trail .what{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.trail .what b{color:var(--strong);font-weight:600}
+.trail .what .src{color:var(--muted)}
+
+/* needs-you list (inbox rows on dashboards) */
+.needs{list-style:none;margin:0;padding:0;display:grid;gap:8px}
+.needs li{display:grid;grid-template-columns:auto minmax(0,1fr) auto;gap:4px 10px;align-items:center;background:var(--surface);border:1px solid var(--line);border-radius:var(--r-table);padding:9px 12px}
+.needs .q{color:var(--strong);font-weight:600;font-size:13.5px}
+.needs .src{grid-column:2;font-size:12px;color:var(--muted)}
+.needs .chip{grid-row:1/3;grid-column:3}
+
+.kv{display:grid;grid-template-columns:auto 1fr;gap:5px 12px;margin:0;font-size:13px}
+.kv dt{color:var(--muted)}
+.kv dd{margin:0;color:var(--strong);min-width:0;overflow-wrap:anywhere}
+
+/* EXT 5: settings index. Every configurable is one row: group, current value, where the value comes
+   from, and a link to its editor. The dashboard reaches every setting without showing all inline. */
+.cfg{list-style:none;margin:0;padding:0;display:grid;grid-template-columns:repeat(2,minmax(0,1fr));border:1px solid var(--line);border-radius:var(--r-table);background:var(--surface);overflow:hidden}
+.cfg li{display:grid;grid-template-columns:22px minmax(0,1fr) auto;gap:2px 10px;align-items:center;padding:9px 12px;border-bottom:1px solid color-mix(in srgb,var(--line) 60%,transparent);border-right:1px solid color-mix(in srgb,var(--line) 60%,transparent)}
+.cfg li:nth-child(2n){border-right:0}
+.cfg li:nth-last-child(-n+2){border-bottom:0}
+.cfg svg.i{color:var(--muted);width:16px;height:16px}
+.cfg .k{font-weight:600;color:var(--strong);font-size:13px}
+.cfg .v{grid-column:2;font-size:12px;color:var(--muted);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.cfg .go{grid-row:1/3;grid-column:3;font-size:12.5px;font-weight:600;text-decoration:none}
+.src-tag{font:500 11px var(--mono);color:var(--accent)}
+
+.docs{list-style:none;margin:0;padding:0;display:grid;gap:2px}
+.docs li{display:grid;grid-template-columns:18px minmax(0,1fr) auto;gap:10px;align-items:center;padding:6px 4px;border-bottom:1px solid color-mix(in srgb,var(--line) 60%,transparent);font-size:13px}
+.docs li:last-child{border-bottom:0}
+.docs svg.i{width:16px;height:16px;color:var(--muted)}
+.docs .d{color:var(--strong);font-weight:600;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.docs time{font-size:12px;color:var(--muted);white-space:nowrap}
+
+/* org header on the org dashboard */
+.orghead{display:flex;align-items:center;gap:14px;flex-wrap:wrap;margin-bottom:14px}
+.orghead h1{font-size:28px;font-weight:800;letter-spacing:-.02em;display:flex;align-items:center;gap:10px}
+.orghead h1 svg.i{width:20px;height:20px;color:var(--muted)}
+.orghead .meta{flex-basis:100%;display:flex;flex-wrap:wrap;gap:4px 14px;font-size:13px;color:var(--muted);margin-top:-6px;padding-left:58px}
+.orghead .right{margin-left:auto;display:flex;gap:8px;flex-wrap:wrap}
+.typechips{display:flex;flex-wrap:wrap;gap:6px}
+
+/* EXT 6: Kanban. Columns by state; a card carries the org mark, the task id from its tracker, the
+   project and the assignee's status. Cards from several orgs share one column. */
+.board{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:12px;align-items:start}
+.col{background:color-mix(in srgb,var(--raised) 55%,var(--canvas));border:1px solid var(--line);border-radius:var(--r-lg);padding:8px;display:grid;gap:8px;min-width:0}
+.col-h{display:flex;align-items:center;gap:8px;padding:2px 4px}
+.col-h h3{font-size:13px;font-weight:700}
+.col-h .n{margin-left:0}
+.col-h .mix{margin-left:auto;display:flex;gap:2px}
+.kcard{background:var(--surface);border:1px solid var(--line);border-radius:var(--r-table);padding:8px 10px 8px 12px;display:grid;gap:5px;min-width:0}
+.kcard .top{display:flex;align-items:center;gap:6px;font-size:12px;color:var(--muted)}
+.kcard .top .id{font:500 11.5px var(--mono);color:var(--muted)}
+.kcard .top .trk{margin-left:auto}
+.kcard .tt{color:var(--strong);font-weight:600;font-size:13px;line-height:1.35}
+.kcard .bot{display:flex;align-items:center;gap:8px;font-size:12px;color:var(--muted);flex-wrap:wrap}
+.kcard.you{border-color:color-mix(in srgb,var(--warning) 55%,var(--line))}
+/* EXT 7: tracker badge. Names the task tracker module behind an org: built-in or Vikunja. */
+.trk{display:inline-flex;align-items:center;gap:4px;font:600 10.5px var(--mono);letter-spacing:.02em;padding:0 5px;border-radius:3px;border:1px solid var(--line);color:var(--muted);white-space:nowrap}
+.trk.vik{border-style:dashed;color:var(--accent);border-color:color-mix(in srgb,var(--accent) 60%,var(--line))}
+.trackers{display:flex;flex-wrap:wrap;gap:6px 16px;align-items:center;font-size:12.5px;color:var(--text);padding:8px 12px;border:1px solid var(--line);border-radius:var(--r-table);background:var(--surface);margin-bottom:12px}
+.trackers > span{display:inline-flex;align-items:center;gap:6px}
+
+/* EXT 8: side-by-side panes. Each pane has its own header with the org mark and edge, and its own
+   scroll; panes never share state. Two panes at 1440; one pane with a pane switcher on a phone. */
+.panes{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:0;height:100%;min-height:0}
+.pane{display:flex;flex-direction:column;min-width:0;min-height:0;border-right:1px solid var(--line)}
+.pane:last-child{border-right:0}
+.pane-h{display:flex;align-items:center;gap:8px;padding:8px 14px;border-bottom:1px solid var(--line);background:var(--surface);box-shadow:inset 0 3px 0 var(--org);min-width:0}
+.pane-h .ttl{font-weight:700;color:var(--strong);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.pane-h .ttl small{font-weight:500;color:var(--muted);margin-left:6px}
+.pane-h .tools{margin-left:auto;display:flex;gap:2px}
+.pane-h .tools span{display:inline-grid;place-items:center;width:26px;height:26px;border-radius:var(--r);color:var(--muted)}
+.pane-body{overflow:auto;padding:14px;min-height:0;flex:1}
+.pane-tabs{display:none}
+.main.flush{padding:0;overflow:hidden;display:flex;flex-direction:column}
+.panebar{display:flex;align-items:center;gap:10px;padding:8px 14px;border-bottom:1px solid var(--line);background:var(--canvas);flex-wrap:wrap}
+.panebar h1{font-size:16px;font-weight:700}
+
+/* EXT 9: agent level badge and the three-level map. */
+.lvl{display:inline-flex;align-items:center;gap:4px;font:700 10.5px var(--font);letter-spacing:.06em;text-transform:uppercase;padding:1px 6px;border-radius:3px;white-space:nowrap}
+.lvl.root{background:var(--strong);color:var(--surface)}
+.lvl.org{background:color-mix(in srgb,var(--org,var(--action)) 18%,var(--surface));color:var(--strong);box-shadow:inset 0 0 0 1px color-mix(in srgb,var(--org,var(--action)) 50%,transparent)}
+.lvl.proj{background:none;color:var(--text);box-shadow:inset 0 0 0 1px var(--line)}
+.levels{display:grid;grid-template-columns:200px repeat(3,minmax(0,1fr));border:1px solid var(--line);border-radius:var(--r-lg);overflow:hidden;background:var(--surface)}
+.levels > div{padding:10px 12px;border-bottom:1px solid color-mix(in srgb,var(--line) 60%,transparent);border-right:1px solid color-mix(in srgb,var(--line) 60%,transparent);min-width:0}
+.levels > div:nth-child(4n){border-right:0}
+.levels .lh{background:color-mix(in srgb,var(--raised) 45%,var(--surface));display:grid;gap:4px;align-content:start}
+.levels .lh small{font-size:11.5px;color:var(--muted);line-height:1.35}
+.levels .lh .lvl{justify-self:start}
+.levels .oh{display:flex;align-items:center;gap:8px;font-weight:700;color:var(--strong);background:color-mix(in srgb,var(--raised) 45%,var(--surface))}
+.levels .span3{grid-column:2/5;border-right:0}
+.levels .last{border-bottom:0}
+.agent{display:inline-flex;align-items:center;gap:6px;border:1px solid var(--line);border-radius:999px;padding:2px 10px 2px 8px;font-size:12.5px;font-weight:600;color:var(--strong);background:var(--canvas);white-space:nowrap;margin:2px 4px 2px 0}
+.agent .dot b{width:auto}
+.agent.assist{border-color:var(--action);background:color-mix(in srgb,var(--action) 10%,var(--surface))}
+.agent.cos{border-style:solid}
+.agent small{font-weight:500;color:var(--muted)}
+.inst{display:flex;flex-wrap:wrap;gap:4px;margin-top:6px}
+.span-band{display:flex;align-items:center;gap:10px;flex-wrap:wrap;padding:8px 12px;border-radius:var(--r-table);border:1px solid var(--action);background:color-mix(in srgb,var(--action) 8%,var(--surface));font-size:13px;color:var(--strong)}
+.span-band .orgs{display:flex;gap:4px}
+
+/* inspector */
+.insp{border-left:1px solid var(--line);background:var(--surface);overflow:auto;min-height:0;display:flex;flex-direction:column}
+.insp header{display:flex;align-items:center;gap:8px;padding:10px 14px;border-bottom:1px solid var(--line);position:sticky;top:0;background:var(--surface);z-index:1}
+.insp header .x{margin-left:auto;color:var(--muted);display:inline-flex}
+.insp .body{padding:14px;display:grid;gap:14px}
+.insp h3{font-size:16px;font-weight:700}
+.opts{list-style:none;margin:0;padding:0;display:grid;gap:8px}
+.opts li{border:1px solid var(--line);border-radius:var(--r-table);padding:9px 10px;display:grid;gap:6px;background:var(--canvas)}
+.opts li.rec{border-color:var(--action)}
+.opts .k{font:700 13px var(--mono);color:var(--strong)}
+.opts .row{display:flex;gap:8px;align-items:center;flex-wrap:wrap}
+.cmd{display:flex;gap:6px;align-items:center;min-width:0}
+.cmd code{flex:1;min-width:0;overflow-x:auto;white-space:nowrap;background:var(--surface);border:1px solid var(--line);border-radius:4px;padding:3px 6px;font-size:12px;color:var(--strong)}
+ol.hist{list-style:none;margin:0;padding:0;display:grid;gap:6px;font-size:12.5px}
+ol.hist li{display:grid;grid-template-columns:48px 1fr;gap:8px}
+ol.hist time{font-family:var(--mono);color:var(--muted)}
+.auth{border:1px solid var(--line);border-left:3px solid var(--org,var(--action));border-radius:0 6px 6px 0;padding:8px 10px;background:var(--canvas);font-size:13px;color:var(--strong)}
+
+/* inbox list */
+.ibx td.src{white-space:nowrap}
+.ibx .q{color:var(--strong);font-weight:600}
+.ibx .via{display:block;font-size:12px;color:var(--muted)}
+
+/* sidebar details: add button, collapsed marks, project rail */
+.grp-h .add{display:inline-grid;place-items:center;width:22px;height:22px;border-radius:var(--r);color:var(--muted);border:1px solid var(--line)}
+.grp-h .n{margin-left:0}
+.collapsed-marks{display:flex;gap:4px;padding:0 8px 6px 28px}
+.pgroup .projs{margin-left:17px;border-left:2px solid var(--org);display:flex;flex-direction:column;gap:1px}
+.pgroup .proj{padding-left:10px}
+.proj.flat{padding-left:8px}
+.proj .n{font-family:var(--font);font-weight:500;font-size:11px}
+.s-ok b{color:var(--success)}
+
+/* tasks by state on the main dashboard */
+.states{display:grid;gap:8px}
+.srow{display:grid;grid-template-columns:112px 24px minmax(0,1fr) auto;gap:10px;align-items:center;font-size:13px}
+.srow .sl{color:var(--strong);font-weight:600}
+.srow .sn{font:700 13px var(--mono);color:var(--strong);text-align:right}
+.srow .bar{height:8px;max-width:100%}
+.needs li > .av{grid-row:1/3}
+
+/* settings index, one column, with the destructive row set apart */
+.cfg.one{grid-template-columns:minmax(0,1fr)}
+.cfg.one li{grid-template-columns:18px 132px minmax(0,1fr) auto auto;gap:0 10px;border-right:0;padding:7px 12px}
+.cfg.one .v{grid-column:3;grid-row:1}
+.cfg.one .src-tag{grid-column:4;grid-row:1}
+.cfg.one .go{grid-column:5;grid-row:1}
+.cfg.one li:nth-last-child(2){border-bottom:1px solid color-mix(in srgb,var(--line) 60%,transparent)}
+.cfg li.danger .k,.cfg li.danger svg.i,.cfg li.danger .go{color:var(--danger)}
+
+/* live transcript, mini tiles and sub tabs inside a pane */
+.term{margin:0;font:400 12px/1.55 var(--mono);background:var(--canvas);color:var(--text);border:1px solid var(--line);border-radius:var(--r-table);padding:8px 10px;white-space:pre-wrap;overflow-wrap:anywhere}
+.term .m{color:var(--muted)}
+.term .c{color:var(--action)}
+.mini-tiles .tile{padding:8px 10px;gap:2px}
+.mini-tiles .tile .big{font-size:20px}
+.subtabs{display:flex;gap:2px;border-bottom:1px solid var(--line);margin:-4px 0 12px}
+.subtabs span{padding:4px 10px;font-size:13px;font-weight:600;color:var(--muted);border-bottom:2px solid transparent;margin-bottom:-1px}
+.subtabs [aria-current="page"]{color:var(--strong);border-bottom-color:var(--org,var(--action))}
+.rules{display:grid;gap:10px;font-size:13px}
+.rules p{display:flex;gap:6px;flex-wrap:wrap;align-items:baseline}
+
+/* one-line session rows on the main dashboard */
+.sess td.who{white-space:nowrap;overflow:hidden;text-overflow:ellipsis;max-width:0;width:100%}
+.sess td.who .orgref{vertical-align:middle}
+.sess td.st{white-space:nowrap}
+
+/* docs row on the org dashboard */
+.docrow{margin-top:8px}
+.docrow .doc{display:inline-flex;align-items:center;gap:5px;border:1px solid var(--line);background:var(--surface);border-radius:var(--r);padding:2px 8px;font-size:12.5px;font-weight:600;color:var(--strong);text-decoration:none;white-space:nowrap}
+.docrow .doc svg.i{width:14px;height:14px;color:var(--muted)}
+.docrow .doc small{font-weight:500;color:var(--muted)}
+.docrow .more{font-size:13px;font-weight:600;text-decoration:none;margin-left:4px}
+
+/* source line inside a row, used on a phone where the source column is hidden */
+.msrc{align-items:center;gap:5px;font-size:12px;color:var(--muted);margin-bottom:2px}
+.av.mob{display:none}
+
+/* phone-only labels and rows; desktop hides them */
+.show-m,.mlabel{display:none}
+td .t2.show-m{display:none}
+
+/* mobile strip and drawer */
+.strip{display:none}
+.specimen{display:grid;gap:14px;grid-template-columns:repeat(3,minmax(0,1fr));align-items:start}
+.specimen .mini{border:1px solid var(--line);border-radius:var(--r-lg);background:var(--surface);padding:8px;display:flex;flex-direction:column;gap:2px}
+.specimen figcaption{font-size:12.5px;color:var(--muted);margin-top:6px}
+.specimen figure{margin:0}
+.callouts{margin:14px 0 0;padding:0 0 0 18px;display:grid;gap:6px;font-size:13px}
+.callouts b{color:var(--strong)}
+
+@media (max-width:1100px){
+  .app.with-insp{grid-template-columns:220px minmax(0,1fr)}
+  .app.with-insp .insp{position:fixed;right:0;top:49px;bottom:0;width:min(380px,100%);box-shadow:-12px 0 30px -12px color-mix(in srgb,#000 35%,transparent);z-index:10}
+  .g5{grid-template-columns:repeat(3,minmax(0,1fr))}
+}
+@media (max-width:760px){
+  .app,.app.with-insp{display:block;height:auto;min-height:100vh}
+  .cmdbar{position:sticky;top:0;z-index:20;gap:8px;padding:8px 12px}
+  .cmdbar .menu{display:inline-flex}
+  .cmdbar .mk span,.cmdbar .sim,.fresh .wide{display:none}
+  .cmdk{max-width:none}
+  .cmdk kbd{display:none}
+  .fresh{margin-left:0}
+  .side{display:none}
+  .strip{display:flex;gap:2px;overflow-x:auto;padding:6px 8px;border-bottom:1px solid var(--line);background:var(--surface)}
+  .strip .nav{white-space:nowrap;flex:none}
+  .app.drawer .side{display:flex;position:fixed;inset:49px 0 0 0;z-index:30;border-right:0;padding:10px 12px 20px}
+  .app.drawer .strip{display:none}
+  .main{padding:14px 16px 24px;overflow:visible}
+  .vh h1,.orghead h1{font-size:24px}
+  .g2,.g3,.g4,.g5,.split,.specimen{grid-template-columns:minmax(0,1fr)}
+  .g4.keep2,.g5.keep2{grid-template-columns:repeat(2,minmax(0,1fr))}
+  .app.with-insp .insp{position:static;display:flex;width:auto;box-shadow:none;border-left:0;border-top:1px solid var(--line);margin:0 0 24px}
+  .show-m,td .t2.show-m{display:block}
+  span.show-m{display:inline-flex}
+  span.msrc.show-m{display:flex}
+  .av.mob{display:inline-grid;margin-right:6px;vertical-align:-3px}
+  .strip{scrollbar-width:none}
+  .g5.keep2 > :last-child:nth-child(odd){grid-column:1/-1}
+  .sec-h .note{flex-basis:100%;order:3}
+  .grid.g3.mini-tiles{grid-template-columns:repeat(3,minmax(0,1fr))}
+  .mini-tiles .tile .big{font-size:18px}
+  .mini-tiles .tile .big small{display:block;margin-left:0;font-size:11.5px}
+  .cfg.one li{grid-template-columns:18px minmax(0,1fr) auto auto;gap:2px 10px}
+  .cfg.one .k{grid-column:2;grid-row:1}
+  .cfg.one .src-tag{grid-column:3;grid-row:1}
+  .cfg.one .go{grid-column:4;grid-row:1/3}
+  .cfg.one .v{grid-column:2/4;grid-row:2}
+  .mlabel{display:flex;align-items:center;gap:6px;font-size:12px;font-weight:700;color:var(--strong);margin-bottom:6px}
+  .board,.tasklist .sec-h{display:none}
+  .vh .seg .kb{background:none;color:var(--muted)}
+  .vh .seg .ls{background:var(--action);color:var(--onAction)}
+  .srow{grid-template-columns:92px 20px minmax(0,1fr)}
+  .srow .by{grid-column:1/-1}
+  .cfg{grid-template-columns:minmax(0,1fr)}
+  .cfg li{border-right:0}
+  .cfg li:nth-last-child(2){border-bottom:1px solid color-mix(in srgb,var(--line) 60%,transparent)}
+  .orghead .meta{padding-left:0;margin-top:0}
+  .orghead .right{margin-left:0}
+  .levels{grid-template-columns:minmax(0,1fr)}
+  .levels > div{border-right:0}
+  .levels .span3{grid-column:auto}
+  .levels .hide-m{display:none}
+  .panes{grid-template-columns:minmax(0,1fr);height:auto}
+  .pane{border-right:0}
+  .pane.alt{display:none}
+  .pane-tabs{display:flex}
+  .main.flush{overflow:visible}
+  .hide-m{display:none}
+  .trail li{grid-template-columns:42px 18px minmax(0,1fr);gap:8px}
+  .trail .what{white-space:normal}
+  .toolbar .right{margin-left:0}
+  .search{min-width:0;flex:1}
+}
+@media (prefers-reduced-motion:reduce){*{animation:none!important;transition:none!important}}

docs/guides/case1-business.mosaic-stack.json

@@ -15,6 +15,7 @@
     "bus.tester": true
   },
   "plugins": {
+    "channel": ["cli", "webui"],
     "harness": ["claude-code"]
   },
   "roles": {

docs/guides/host-run-sheet.md

@@ -327,7 +327,7 @@ After install, `stack-copy.sh check --units external` reads the copy the units r
 
 Before running `case2-install.sh`, check the exact file you will pass as `--business-file`. Each
 non-library `projects` key must equal the `id` in `<root>/.mosaic/project.json`, and that file must exist
-in the stack's user's clone. Library entries are skipped by validate (`packages/business/src/cli.mjs:72`).
+in the stack's user's clone. Library entries are skipped by validate (`packages/organization/src/config-command.mjs:95`).
 Run this read-only check as `mosaic` with section 2's pinned node:
 
 ```sh
@@ -356,7 +356,7 @@ MOSAIC_PROJECT_KEYS
 For .53 expect `ok project stack: /srv/mosaic/src/mosaic-stack/.mosaic/project.json has id stack`
 (`.mosaic/project.json:3`, `docs/guides/case1-business.mosaic-stack.json:10-11`). Any STOP or nonzero exit
 stops the install. Fix a mismatched business key, not the project id (mos-1563). The install otherwise
-reaches that refusal at step 7, after making the copy (`packages/business/src/cli.mjs:80`,
+reaches that refusal at step 7, after making the copy (`packages/organization/src/config-command.mjs:103`,
 `scripts/case2-install.sh:178`, `scripts/case2-install.sh:217`).
 
 The stack's user's `scripts/case2-install.sh` (C2-13b, design 10 step 2b) makes the first copy with
@@ -365,7 +365,7 @@ harness, so the host needs to reach the npm registry during the install. The ins
 `release.sh package` or `activate`.
 
 A missing `.mosaic/project.json` only warns: `project <id>: no project file at <path>; it has no project
-variables`. Validate reports that project `absent` and continues (`packages/business/src/cli.mjs:74-78`).
+variables`. Validate reports that project `absent` and continues (`packages/organization/src/config-command.mjs:97-101`).
 An install can therefore pass step 7 without the project's variables. It captures validate's output
 and prints `business <id> validates` (`scripts/case2-install.sh:217-221`). Treat the missing-file warning as a stop,
 place the correct project file and repeat the check above before continuing (Duckworth 323 N2;

docs/plans/2026-11-04_chat-channel-recovery.md

@@ -0,0 +1,58 @@
+# MVP 3 chat-channel recovery
+
+Tracking: Vikunja #815, [Gitea #1843](https://git.mosaicstack.dev/mosaicstack/stack/issues/1843).
+Source baseline: deployed `51525a31d`, schema 3s. Owner feedback is the
+2026-11-04 `/chat` read error and refused Pomodoro Timer project creation.
+
+## Diagnosis
+
+The live business has no `plugins.channel` setting. The typed tester `plugins`
+read succeeds and returns only the existing transcript usage source and
+Claude Code harness selections. The Console logs the matching `channel-disabled`
+refusal. `createChannelCaller` refuses before project dispatch; the failed create
+did not create a project. The Case 1 starter also omits the WebUI channel.
+The browser then obscures that specific refusal and draws successful-empty
+project/thread statements despite a failed read.
+
+## Task 1: Restore the configured live channel
+
+- Use only the existing typed, revision-checked `mosaic plugins` /
+  `plugins set --tester` path against the pinned .53 copy and config. This
+  instance permits tester plugin management; use its real tester attribution.
+- Privately back up the business file with mode 0600, then read the revision
+  immediately before applying only `plugins.channel: ["cli", "webui"]`.
+- Preserve every other JSON field and plugin kind. Verify typed readback,
+  the transaction receipt and unchanged remaining configuration.
+- No owner identity/cookie, direct configuration edit fallback, role/grant,
+  credential, model route, schema, service restart, deployment, bridge or .54
+  change. A refusal stops the operation and is reported; do not bypass it.
+- Read health/service state without a signed-in request. Do not create a
+  project/thread or run the owner acceptance workflow. Reconcile an uncertain
+  outcome by readback; never blindly repeat the write.
+
+## Task 2: Prevent recurrence and explain failures correctly
+
+- In `docs/guides/case1-business.mosaic-stack.json`, explicitly enable the
+  CLI and WebUI channels. Preserve its no-tracker starter behavior and all
+  other role/routing/limit semantics; keep global channel defaults unchanged.
+- In the Console chat view, give `channel-disabled` a fixed, understandable
+  message. Keep the user's draft and distinguish definite refusal from
+  uncertain delivery. Do not invent a Settings control or require the user
+  to run a terminal command as the normal recovery flow.
+- After a failed initial read, do not claim there are no projects/threads.
+  Show unavailable/error state; retained cached data must not be presented as
+  a successful fresh read. A genuine successful empty read keeps its normal
+  creation UI. Avoid offering an enabled creation action when the known
+  channel refusal prevents it; preserve the draft for recovery.
+- Add failing then passing factory-template and real-browser regression
+  coverage for disabled reads/writes, draft retention, recovery and genuine
+  empty data. Preserve HTTP status and sent/outcome fields, authentication,
+  same-origin checks and actual channel enforcement.
+- Use the existing test harness and pinned dependencies. Run affected suites,
+  obtain an independent GPT review, then integrate and push. Do not expand
+  this into plugin-settings UI, internal identifier migration or new policy.
+
+The live configuration repair and source fix are independent and may run in
+parallel. This is a continuation of the owner-authorized MVP 3 acceptance/fix
+work. Actual signed-in project-to-artifact acceptance remains with the owner;
+these operational checks do not replace it.

docs/plans/2026-11-07_organizations-owner-rulings.md

@@ -0,0 +1,47 @@
+# Organizations: owner rulings, 2026-11-07
+
+Recorded by Mos (lead) from Jason's messages of 2026-11-07, around 16:39Z and
+16:55Z. These bind the multi-organization design (working files under
+`/mnt/storage/scratch/mosaic-lead/uidev/business-design-r*.md`). Corrections
+go in a new dated file, not edits here.
+
+## Rulings
+
+1. **Name.** "Business" becomes "Organization" in labels, routes, help and new
+   CLI verbs now. The internal rename (package `packages/business`, the
+   `businesses/` config directory, `--business` flags, schema fields) is not
+   optional. It may wait, but it is a priority follow-up, because mixed names
+   cause confusion.
+2. **Isolation.** Each organization runs its own bus. One Console switches
+   between them from Settings.
+3. **No migration.** No existing business must be migrated. The full setup is
+   tested from scratch on a fresh instance.
+4. **Test order.** An agent runs the full creation end to end with the CLI,
+   then with the WebUI, before Jason walks through it in the WebUI.
+5. **Dev instance authority.** The dragon-lin instance is throwaway and for
+   development only. Agents may use it, and act as its human for these tests,
+   without asking. That is why it needs no sign-in. A deployed system keeps
+   human sign-in and the agent restrictions on actions taken for the user.
+6. **WebUI creation.** The WebUI creates an organization with a WYSIWYG editor
+   of its JSON, starting from a template. Every WebUI action is tied to a CLI
+   command.
+7. **Theme.** Each organization can have its own theme, stored in its file.
+   Themes are plugins: the choice lists whatever themes are installed.
+8. **Proxy.** One model proxy per user by default; that user's organizations
+   share it, and an organization may opt into its own. On multi-user instances,
+   sharing between users is by explicit, revocable grant (time-limited,
+   unlimited, per key). Grants come later.
+9. **Organization git.** Each organization has its own canonical git checkout
+   for its high-level information and queue. A remote is optional when the user
+   chooses "local only" and accepts the risk.
+10. **Project git.** Every project uses git. The user chooses per project
+    whether it has a remote or is **local only** (a local repository that is
+    never pushed), for throwaway or temporary work that needs no durable
+    remote. Jason first said this on 2026-11-06; it was not recorded then.
+11. **Access.** JSON access control is acceptable for the MVP. Database-backed
+    RBAC with tighter security comes later.
+12. **Modules.** The system is modules connected through documented API calls.
+    Each function (for example the model proxy, the OpenMontage plugin, the
+    creative writing system) is a module with a declared set of calls.
+    Swapping or disabling a module must not break the core. Adding a module
+    must never require rewriting the core.

docs/plans/2026-11-09_prd-1-20-draft.md

@@ -0,0 +1,143 @@
+# PRD version 1.20, draft 2: unified workspace
+
+- Status: approved as version 1.20 on 2026-11-09; landed in docs/prd/mosaic-stack.md
+- Source: `docs/plans/2026-11-09_unified-workspace-owner-direction.md`,
+  Jason's direction and answers of 2026-11-09.
+- Drafted by Mos (lead).
+
+Version 1.20 adds the unified workspace: every organization visible at once,
+cross-organization views, three levels of agent configuration, per-org task
+stores behind the task tracker kind, system type plug-ins and self-service
+operation. It amends REQ-ASSIST-1, REQ-USER-1, REQ-TASK-1 and REQ-WEB-3.
+
+## Amended requirements
+
+Each entry gives the 1.19 text that changes and its 1.20 replacement.
+
+### REQ-ASSIST-1
+
+1.19: "Each user has one assistant role per organization."
+
+1.20: Each user has one assistant across all of the organizations they
+belong to. It knows the user's organizations, projects and sessions and
+keeps one shared memory. It talks with the user and passes each
+organization's work to that organization's chief of staff. It doesn't
+direct other agents, create or assign tasks, or launch sessions. (The rest
+of REQ-ASSIST-1 stands.)
+
+### REQ-USER-1
+
+1.19: "An agent belongs to one organization and reaches only its allowed
+projects and threads."
+
+1.20: Users and role-based access control exist at install and
+organization level. An agent other than the assistant works in one
+organization at a time. Its memory, files and credentials are scoped to that
+organization, even when its definition comes from the user's root
+configuration. It reaches only that organization's allowed projects and
+threads. The assistant is the exception in REQ-ASSIST-1, and it reaches only
+organizations its user belongs to.
+
+### REQ-TASK-1
+
+1.19: "Tasks live in Vikunja..."
+
+1.20: Each organization stores its own tasks, through the task tracker
+plug-in kind (REQ-PLUG-1). The default module is a store built into Mosaic
+Stack. Vikunja is an optional module, and when an organization selects it
+the 1.19 rules for Vikunja (bot tokens per role, one writing role per field,
+REQ-TASK-2 polling) apply to that organization. Every task tracker module
+supports create, read, update, archive and delete, ordering and grouping.
+Archiving or removing an organization removes its tasks without touching
+another organization's.
+
+### REQ-WEB-3
+
+1.19: "The Console has controls to restart the bus and to reload the
+organization file."
+
+1.20: The Console has controls to restart itself, to restart an
+organization's bus, to reload the organization file, and to change the model
+an agent instance runs on and apply it. Each control is a gated, trailed
+action that a human takes. No agent can take it. A reload applies
+`launch.instances` changes to running sessions without a manual
+`systemctl restart`. On a dev instance (`--dev-local-owner`) the controls
+need no sign-in.
+
+## New requirements
+
+### Workspace
+
+- **REQ-WS-1.** The WebUI shows every organization the user belongs to at
+  all times. A collapsible Organizations item in the sidebar lists them.
+  There is no organization switcher.
+- **REQ-WS-2.** The Console reads across the buses of the user's
+  organizations to build shared views. Each organization keeps its own bus
+  as the tenant boundary (REQ-ORG-1). A shared view shows only
+  organizations the user belongs to.
+- **REQ-WS-3.** The main dashboard sums activity, work and metrics across
+  all of the user's organizations and projects.
+- **REQ-WS-4.** Each organization has a dashboard with its docs, every
+  configurable setting, its KPIs and metrics, and its active agent
+  sessions.
+- **REQ-WS-5.** The projects list covers every organization. It sorts and
+  filters by organization, status, name and activity. Each project shows
+  its owning organization by icon, color and avatar.
+- **REQ-WS-6.** One inbox holds every item that needs the user, from every
+  organization, project and session.
+- **REQ-WS-7.** One view shows activity across all organizations and
+  projects. Organizations and projects can be open side by side.
+- **REQ-WS-8.** The tasks view aggregates every organization's tasks, with
+  Kanban and list layouts, filtered by organization and project. It works
+  the same for every task tracker module.
+
+### Agent levels
+
+- **REQ-AGENT-1.** Agents are configured at three levels: the user's root,
+  the organization and the project. A project's available agents are the
+  union of the three.
+- **REQ-AGENT-2.** The user can see and change the configuration of agents,
+  organizations, projects and sessions, and can override any setting at any
+  time, through the write path (REQ-ROLE-3).
+- **REQ-AGENT-3.** The chief of staff hires and fires agents to meet the
+  user's needs. At the organization and project levels it acts under
+  REQ-COS-3. At the root level its hire or fire changes the user's root
+  configuration, which every organization of that user sees, so it reaches
+  outside the chief's own organization. A root-level hire or fire is a
+  decision the user approves in the inbox (REQ-DEC-2) before it takes
+  effect. The user can also change root-level agents directly.
+
+### System types
+
+- **REQ-SYS-1.** System types are a plug-in kind. Its modules include
+  coding, creative writing, marketing, Mosaic Montage (the OpenMontage
+  fork) and business management. An organization enables a list of them.
+- **REQ-SYS-2.** A project may use any system type its organization
+  enables, and none is required. An agent working in a project gets the
+  toolsets of the system types that project uses.
+
+### Accounts
+
+- **REQ-ACCT-1.** A deployed system requires user sign-in (OIDC, Q203). A
+  user creates organizations and belongs to any number of them.
+- **REQ-ACCT-2.** An organization's owner invites another user into it.
+  The invited user joins with the grant the owner chose (REQ-USER-3).
+
+### Setup
+
+- **REQ-SETUP-1.** Quick Setup leaves its project with its records
+  initialized.
+- **REQ-SETUP-2.** After Quick Setup, the assistant offers an onboarding
+  interview. It asks for the project's outcome and limits and drafts the
+  north star and a first PRD. The user approves each through the existing
+  approval path.
+
+## Open questions for the approval
+
+1. The final name for the Mosaic Montage module. A council of three agents
+   is producing three suggestions for Jason to choose from.
+2. Answered 2026-11-09: "yes, the COS should be able to hire and fire
+   agents to fulfill the user's needs". REQ-AGENT-3 now lets the chief hire
+   and fire at every level. Draft 2 keeps one approval step at the root
+   level because a root change reaches every organization; Jason can drop
+   that step when he approves the text.

docs/plans/2026-11-09_unified-workspace-owner-direction.md

@@ -0,0 +1,290 @@
+# Unified workspace: owner direction, 2026-11-09
+
+Recorded by Mos (lead) from Jason's T3 message of 2026-11-09, around 17:50Z,
+and his answers to four clarifying questions at about 18:00Z. It binds the
+next phase of the organizations work. Corrections go in a new dated file, not
+edits here.
+
+## What prompted it
+
+Jason ran Quick Setup on the dragon-lin dev instance (uiorg) to create the
+`test3` organization. Two things went wrong:
+
+- The new project showed "This project has no records yet" with an
+  "Initialize project records" button. Quick Setup should have done that.
+  The setup receipts show the org, checkout, project repository and bus
+  steps at 17:19:20Z. The records repository first appears at 17:21:13Z,
+  from the button press. The fix round reproduces it.
+- After he pressed the button, the overview showed the north star template
+  as raw text: `# North star Describe the outcome this project should
+  achieve...`. The overview prints the markdown source instead of rendering
+  it.
+
+He also named a standing problem with how the dev instance is operated.
+
+## Owner text, verbatim
+
+> The Quick Setup should auto-initialize since this didn't ask any
+> questions. An onboarding interview to determine the north star and PRD
+> would be beneficial here.
+>
+> I've noticed that we have a perennial issue with needing to restart the
+> console, or requiring a sign-in (model proxy), and other limiting behaviors
+> that don't seem to make sense for the operating method. We are running
+> this as a test instance on my dev workstation (dragon-lin), auth is not
+> required for this local testing env., and we need to be capable of rapid
+> iteration without undue manual intervention by the user. I also don't see
+> where we can trigger any type of restart or relaunch with the available
+> config from within the webui. The user should be able to change the
+> running model and restart the service from within the system.
+>
+> Here is what I want:
+> - Mosaic Stack system runs
+> - Allows user to log in
+> - User can create orgs, and be invited to join another user's org
+> - User belongs to N organizations
+> - All orgs are visible in the interface for the user to see the org,
+>   project, sessions within each
+> - Tasks are overarching for all projects; a central store of tasks
+> - Agents can be configured at the root, org, and project level
+> - The user is able to see all happenings in the system from one pane
+> - Projects are sortable and filterable by org, status, name, activity
+> - Inbox contains all items needing the user; all orgs/projects/sessions
+>   with needs surface here
+> - System allows for side-by-side operation of orgs and projects all
+>   visible in single pane
+> - Rather than selecting an organization with a switch or in the settings
+>   menu, the user sees all orgs at all times.
+> - Sidebar collapsible item for Organizations; user clicks to see all info
+>   about the organzation
+> - The Docs are available on the org dashboard
+> - All configurables are visible on the org dashboard
+> - Org dashboard features KPIs/Metrics for the org
+> - Active agent sessions visible on the org dashboard
+> - Projects sidebar list indicates the organization owning the project via
+>   iconography, color, and "avatar" for org
+> - Main dashboard for user surfaces sum and cumulative data for all
+>   orgs/projects, not just one
+> - The system is configured to use plugins/modules to allow for various
+>   system types like coding, creative writing, Mosaic Montage (fork of
+>   OpenMontage) for social media production, business management
+> - Each Project within an org is capable of using multiple system types
+>   - Example: Org. Distinctly Digital
+>   - enabled plugins: coding, creative writing, marketing, Mosaic
+>     Montage/Mosaic Studio (whatever we name this...), business management,
+>   - Each project within "Distinctly Digital" has access to the plugins,
+>     but is not required to use all of them
+>   - Agents configured for the user's root config are available
+>   - Org agents are available
+>   - Project agents are available
+>   - Agents use the toolsets for the plugin/module appropriately
+>   - Configuration for the agents, orgs, projects, sessions are all
+>     available for the user to tweak as needed
+>   - Chief of Staff can hire and fire agents to meet the user's system
+>     needs
+>   - User can override settings at any time via the configuration
+>
+> I'm thinking this information needs to be recorded for durability and we
+> need to work toward this implementation.
+
+## Answers to the clarifying questions
+
+1. **Task store.** Verbatim: "We need to keep the tasks separated at an org
+   level. This allows for archive, instant removal of org tasks without
+   violating the other orgs. I'd like to see a basic config use per-org,
+   aggregated store with the option to use Vikunja. Not all users will use
+   Vikunja. Either way, we need a way to store, retrieve, archive, maintain,
+   organize, and view all the tasks. If we use Vikunja or a custom-rolled
+   solution within Mosaic Stack, they all need to surface with Kanban, etc.
+   for the user to see properly."
+2. **Agent scope across orgs.** Verbatim: "The user's main interaction agent
+   needs to be aware of all orgs, projects, etc. That one interaction agent
+   uses a shared memory. The other agents are isolated per org."
+3. **Multi-user.** Design sign-in, membership and invites now. Build them
+   in the second phase, after the single-user unified pane.
+4. **Order.** Remove the operating friction first, then build the unified
+   pane.
+
+## Rulings that follow
+
+1. **All orgs at once.** The WebUI shows every organization the user
+   belongs to at all times. A collapsible Organizations item in the sidebar
+   lists them, and selecting one opens its dashboard. There is no
+   organization switcher, in Settings or elsewhere.
+2. **Per-org isolation stays.** Each organization keeps its own bus as the
+   tenant boundary (REQ-ORG-1). The Console reads across the buses of the
+   user's organizations to build the shared views. Removing or archiving an
+   organization removes its data, tasks included, without touching another.
+3. **Tasks.** Each organization stores its own tasks. The default store is
+   built into Mosaic Stack. Vikunja is an optional alternative, selected per
+   organization through the task tracker plug-in kind (REQ-PLUG-1). Both
+   support store, retrieve, archive, maintain and organize. The WebUI
+   aggregates every organization's tasks into one view with Kanban and list
+   layouts, filterable by organization and project.
+4. **Agents.** Agents are configured at three levels: the user's root,
+   the organization and the project. A project's agents are the union of
+   all three. The user's main interaction agent (the assistant) is the one
+   exception to isolation. It knows all of the user's organizations,
+   projects and sessions, and it keeps one shared memory. Every other agent
+   is isolated to the organization it works in: its memory, files and
+   credentials are scoped to that organization, even when its definition
+   comes from the root.
+5. **One pane.** One screen shows activity across every organization and
+   project. Organizations and projects can be open side by side.
+6. **Main dashboard.** It sums across all organizations and projects, not
+   only one.
+7. **Org dashboard.** It shows the organization's docs, every configurable
+   setting, KPIs and metrics, and its active agent sessions.
+8. **Projects list.** It sorts and filters by organization, status, name
+   and activity. Each project shows its owning organization by icon, color
+   and avatar.
+9. **Inbox.** One inbox holds everything that needs the user, from every
+   organization, project and session.
+10. **System types are plug-ins.** Coding, creative writing, marketing,
+    Mosaic Montage (the OpenMontage fork; final name open) and business
+    management are modules. An organization enables a set of them. Each of
+    its projects may use any of the enabled set, and none is required.
+    Agents get the toolsets of the modules their project uses.
+11. **Configuration.** The user can see and change the configuration of
+    agents, organizations, projects and sessions, and can override any
+    setting at any time. The chief of staff hires and fires agents to meet
+    the user's needs, within the existing PRD rules (REQ-ROLE, version
+    1.7).
+12. **Accounts.** The deployed system has user sign-in. Users create
+    organizations, belong to any number of them, and can be invited into
+    another user's organization. The dev instance keeps running with no
+    sign-in (ruling 5 of 2026-11-07).
+13. **Operating the dev instance.** Routine operation needs no manual
+    intervention from the user. From the WebUI the user can restart the
+    Console and an organization's bus, and change the model an agent runs
+    on. Dev mode needs no sign-in, including for the model proxy. Agents
+    still cannot restart the Console; the user can, from the WebUI.
+14. **Quick Setup.** Quick Setup leaves a project with its records
+    initialized. An onboarding interview then helps the user write the
+    north star and a first PRD.
+
+## What this supersedes or amends
+
+- **2026-11-07 ruling 2.** "One Console switches between them from
+  Settings" is superseded by ruling 1 above. The per-org bus in the same
+  ruling stands.
+- **2026-11-07 ruling 9.** Each organization's queue lived only in its own
+  checkout. Ruling 3 above keeps tasks per organization, adds the Vikunja
+  option through the task tracker kind, and adds the aggregated view.
+- **PRD 1.19, REQ-USER-1.** "An agent belongs to one organization" gains
+  the assistant exception in ruling 4. This needs a PRD version. The draft
+  is `docs/plans/2026-11-09_prd-1-20-draft.md`, and Jason approves the
+  exact text before it enters `docs/prd/mosaic-stack.md`.
+
+## Delivery plan
+
+Each phase follows the MVP rule: build, one review round, one fix round, an
+agent E2E on a scratch instance, then a deploy to uiorg for Jason.
+
+### Phase F: operating friction (now)
+
+- **F1.** Quick Setup records: reproduce the `test3` gap on a scratch
+  instance and fix it, so a Quick Setup project opens with live Docs, Files
+  and north star. Render the north star as markdown on the project
+  overview.
+- **F2.** Onboarding interview: after Quick Setup, the assistant opens a
+  conversation that asks for the outcome and limits, then drafts
+  `spec/north-star.md` and a first PRD. The user approves each through the
+  existing approval path.
+- **F3.** Self-service operation: restart the Console and an org bus from
+  the WebUI, change an agent's model from Settings and apply it, and list
+  and remove every manual step the dev instance still needs, model proxy
+  sign-in included.
+
+### Phase U: unified pane
+
+- **U0.** Design samples first. Sample screens for the sidebar with all
+  orgs, the main dashboard, an org dashboard, the projects list, the inbox,
+  the task Kanban and side-by-side panes. Jason approves them before the
+  build (design samples are the acceptance target).
+- **U1.** Cross-org read model in the Console: one API that reads every
+  organization's bus the user belongs to, for projects, sessions, inbox
+  items, tasks and metrics.
+- **U2.** Sidebar and org dashboards. **U3.** Main dashboard, projects list
+  and inbox. **U4.** Task store: built-in per-org store behind the task
+  tracker kind, the Vikunja module, and the aggregated Kanban. **U5.**
+  Side-by-side panes.
+
+### Phase A: agent levels
+
+Root, organization and project agent configuration. The assistant spans
+organizations with shared memory, and every other agent is isolated per
+organization. The user can override settings, and the chief of staff hires
+and fires at each level.
+
+### Phase P: system type plug-ins
+
+A plug-in kind for system types. Organizations enable modules, projects opt
+in, and agents receive the modules' toolsets. First modules: coding (the
+current behavior), creative writing, then Mosaic Montage, marketing and
+business management.
+
+### Phase M: accounts (design now, build second)
+
+OIDC sign-in (OIDC-only per Q203), membership in N organizations, invites
+into another user's organization, and access checks on the cross-org read
+model. The design lands with Phase U so the read model has membership from
+the start.
+
+## U0 approval (11-09, 19:26Z)
+
+Owner text, verbatim:
+
+> The U0 screen designs look good. We need to retain the temporary logo
+> already used in the site.
+> I don't like these module names either. It isn't clicking for me. That may
+> need to be a later decision.
+
+What follows from it:
+
+1. The samples in `docs/design/samples/2026-11-09-unified-workspace/` are the
+   acceptance target for U2 to U5.
+2. The WebUI's four-tile mark stays the logo. The samples now draw it in
+   place of the design system's Relay placeholder, and the build does not
+   adopt Relay.
+3. The Montage module name stays open. Two naming rounds produced no pick.
+   The label "Mosaic Montage" stays until Jason names it; nothing in phase U
+   depends on the name.
+
+The ten open questions in the U0 report were not answered one by one. Under
+the lead's standing authority to decide routine choices, phase U takes the
+report's recommendations, and Jason can overturn any of them:
+
+- Every decide command copied from a shared view carries `--org`.
+- The chief may propose a root-level hire only as a gated inbox item the user
+  approves.
+- An org's colour is its own theme's action colour, the same for every member.
+- Side by side on a phone is a two-way switch with one pane visible.
+- Sidebar projects default to By org, remembered per viewer.
+- Tasks on a phone default to List, with Kanban one tap away.
+- The CLI verbs for the new header controls are `mosaic org reload <id>` and
+  `mosaic console restart`, added before U2 wires the buttons.
+- Members and invites shows in the settings index, labelled "not built".
+- Messages becomes Assistant. Docs live on org dashboards and in panes. Queue
+  opens from each org dashboard.
+
+## Open items
+
+- The final name for the Mosaic Montage module (deferred by Jason, 11-09).
+- Which "sign-in (model proxy)" step Jason hit. F3 inventories every manual
+  step on the dev instance and reports it.
+
+## Addendum, 2026-11-09 18:13 UTC
+
+Jason's answers to the two open questions in PRD 1.20 draft 1, verbatim:
+
+> 1. I would like you to use a council of agents to decide on 3 name
+>    suggestions for this
+> 2. yes, the COS should be able to hire and fire agents to fulfill the
+>    user's needs
+
+Effect: the chief of staff hires and fires agents at the root,
+organization and project levels (PRD 1.20 draft 2, REQ-AGENT-3). A council
+of three agents proposes three names for the Mosaic Montage module, and
+Jason picks one.
+

docs/prd/mosaic-stack.md

@@ -1,12 +1,11 @@
 # PRD: Mosaic Stack
 
-- Status: approved, version 1.19. Jason approved the exact text in Q289.
-- Version 1.19 adds disk-space governance, launch-capacity holds,
-  human-controlled retention rules, and the protected `data.delete.policy`
-  route. It preserves per-batch `data.delete` hard waits. Jason approved
-  the exact text at `e5400456` under REQ-WAIT-2: "1.18: yes" (DECISIONS
-  Q289, relayed by Mos in mos-2300). Q288 approved the recurring-rule principle.
-- Prior approval history, through version 1.18: Jason approved draft 0.4 unchanged as
+- Status: approved, version 1.20. Jason approved draft 2 on 2026-11-09.
+- Version 1.20 adds the unified workspace: every organization visible at once,
+  cross-organization views, three levels of agent configuration, per-org task
+  stores behind the task tracker kind, system type plug-ins and self-service
+  operation. It amends REQ-ASSIST-1, REQ-USER-1, REQ-TASK-1 and REQ-WEB-3.
+- Prior approval history, through version 1.19: Jason approved draft 0.4 unchanged as
   1.0 on 2026-10-05 (lead decision 61). They approved version 1.1, the
   Organization requirements, in decision 03130d08-ddce-480d-a601-e59f64744fc3
   on 2026-10-14. They approved version 1.2, the chief of staff, the
@@ -64,7 +63,18 @@
   the approved row 255 design. The stack prints the providers entry and
   never writes config.json. What the requirement allows or forbids is
   unchanged (mos-1671, sage-4418). Doc-only, so it takes the 1.11 path:
-  one seat drafts, a second reviews, Sage lands.
+  one seat drafts, a second reviews, Sage lands. Version 1.19 adds
+  disk-space governance, launch-capacity holds, human-controlled retention
+  rules, and the protected `data.delete.policy` route. It preserves per-batch
+  `data.delete` hard waits. Jason approved the exact text at `e5400456` under
+  REQ-WAIT-2: "1.18: yes" (DECISIONS Q289, relayed by Mos in mos-2300).
+  Q288 approved the recurring-rule principle. Jason approved the exact text in Q289.
+- Version 1.20 source: Mos asked Jason to approve draft 2 in
+  `docs/plans/2026-11-09_prd-1-20-draft.md`, with the Montage name deferred.
+  Jason replied on 2026-11-09 at 22:57Z: "The file looks fine other than that."
+  The exception is the module name, which he had deferred at 19:26Z: "I don't
+  like these module names either. It isn't clicking for me. That may need to be
+  a later decision."
 - Version 1.19 source, Jason's DECISIONS Q287, verbatim:
 
   > All of the learnings from this drive space issue need to be integrated into Mosaic Stack. We need watchers, cleanups, enforcement tooling and agents to check for space waste, etc.
@@ -475,9 +485,11 @@ Added in version 1.2:
   names the roles and how many of each. The chief of staff launches them
   through role.launch, within the agent limits (REQ-LIMIT-1). (Version
   1.5.)
-- **REQ-ASSIST-1.** The assistant is the user's main agent. Each user has
-  one assistant role per organization. It talks with the user, and it
-  passes work for the organization to the chief of staff. It doesn't
+- **REQ-ASSIST-1.** The assistant is the user's main agent. Each user has one
+  assistant across all of the organizations they
+  belong to. It knows the user's organizations, projects and sessions and
+  keeps one shared memory. It talks with the user and passes each
+  organization's work to that organization's chief of staff. It doesn't
   direct other agents, create or assign tasks, or launch sessions.
 - **REQ-ASSIST-2.** The broker limits the assistant's messages, not its
   contract alone:
@@ -522,6 +534,24 @@ Added in version 1.7:
   - Every hire and fire is logged with the chief's instance, its run and
     the reason.
 
+### Agent levels
+
+Added in version 1.20.
+
+- **REQ-AGENT-1.** Agents are configured at three levels: the user's root,
+  the organization and the project. A project's available agents are the
+  union of the three.
+- **REQ-AGENT-2.** The user can see and change the configuration of agents,
+  organizations, projects and sessions, and can override any setting at any
+  time, through the write path (REQ-ROLE-3).
+- **REQ-AGENT-3.** The chief of staff hires and fires agents to meet the
+  user's needs. At the organization and project levels it acts under
+  REQ-COS-3. At the root level its hire or fire changes the user's root
+  configuration, which every organization of that user sees, so it reaches
+  outside the chief's own organization. A root-level hire or fire is a
+  decision the user approves in the inbox (REQ-DEC-2) before it takes
+  effect. The user can also change root-level agents directly.
+
 ### Variables
 
 - **REQ-VAR-1.** Variables come in four layers: system, business, project
@@ -879,8 +909,15 @@ consumed ordinary decision as standing permission.
 
 ### Tasks
 
-- **REQ-TASK-1.** Tasks live in Vikunja, reached through `/api/v2` with a
-  bot token for each role. Each task cites a requirement id. Each task
+- **REQ-TASK-1.** Each organization stores its own tasks, through the task tracker
+  plug-in kind (REQ-PLUG-1). The default module is a store built into Mosaic
+  Stack. Vikunja is an optional module, and when an organization selects it
+  the 1.19 rules for Vikunja (bot tokens per role, one writing role per field,
+  REQ-TASK-2 polling) apply to that organization. Every task tracker module
+  supports create, read, update, archive and delete, ordering and grouping.
+  Archiving or removing an organization removes its tasks without touching
+  another organization's.
+  Each task cites a requirement id. Each task
   field has one writing role, listed in the slice 1 brief's field table,
   and the assigned role writes the task's state. Since version 1.19, the
   scoped disk-service principal in REQ-DISK-12 may initialize incident
@@ -1031,10 +1068,40 @@ Added in version 1.7:
   - The decision event records via=console and the (iss, sub) pair.
   - Without a signed-in session, the Console resolves nothing and shows
     the `mosaic decide` line instead.
-- **REQ-WEB-3.** The Console has controls to restart the bus and to
-  reload the organization file. Each control is a gated, trailed action.
-  A reload applies `launch.instances` changes to running sessions without
-  a manual `systemctl restart`. (Version 1.4, decision 021af0c8.)
+- **REQ-WEB-3.** The Console has controls to restart itself, to restart an
+  organization's bus, to reload the organization file, and to change the model
+  an agent instance runs on and apply it. Each control is a gated, trailed
+  action that a human takes. No agent can take it. A reload applies
+  `launch.instances` changes to running sessions without a manual
+  `systemctl restart`. On a dev instance (`--dev-local-owner`) the controls
+  need no sign-in.
+
+### Workspace
+
+Added in version 1.20.
+
+- **REQ-WS-1.** The WebUI shows every organization the user belongs to at
+  all times. A collapsible Organizations item in the sidebar lists them.
+  There is no organization switcher.
+- **REQ-WS-2.** The Console reads across the buses of the user's
+  organizations to build shared views. Each organization keeps its own bus
+  as the tenant boundary (REQ-ORG-1). A shared view shows only
+  organizations the user belongs to.
+- **REQ-WS-3.** The main dashboard sums activity, work and metrics across
+  all of the user's organizations and projects.
+- **REQ-WS-4.** Each organization has a dashboard with its docs, every
+  configurable setting, its KPIs and metrics, and its active agent
+  sessions.
+- **REQ-WS-5.** The projects list covers every organization. It sorts and
+  filters by organization, status, name and activity. Each project shows
+  its owning organization by icon, color and avatar.
+- **REQ-WS-6.** One inbox holds every item that needs the user, from every
+  organization, project and session.
+- **REQ-WS-7.** One view shows activity across all organizations and
+  projects. Organizations and projects can be open side by side.
+- **REQ-WS-8.** The tasks view aggregates every organization's tasks, with
+  Kanban and list layouts, filtered by organization and project. It works
+  the same for every task tracker module.
 
 ### Launching
 
@@ -1173,6 +1240,17 @@ Added in version 1.3 (Q155).
   changes it, not in one rewrite (Q155). Until it converts, Technical
   considerations lists where it is hard-coded.
 
+### System types
+
+Added in version 1.20.
+
+- **REQ-SYS-1.** System types are a plug-in kind. Its modules include
+  coding, creative writing, marketing, Mosaic Montage (the OpenMontage
+  fork) and business management. An organization enables a list of them.
+- **REQ-SYS-2.** A project may use any system type its organization
+  enables, and none is required. An agent working in a project gets the
+  toolsets of the system types that project uses.
+
 ### Meta-harness
 
 - **REQ-HARN-1.** The meta-harness generates each session's launch bundle
@@ -1329,9 +1407,13 @@ Added in version 1.1 (decision 03130d08).
 - **REQ-ORG-2.** The data model is install, then organization, then
   projects, then threads, so v1 doesn't lock in one human per
   organization.
-- **REQ-USER-1.** Users and role-based access control exist at install
-  and organization level. An agent belongs to one organization and
-  reaches only its allowed projects and threads.
+- **REQ-USER-1.** Users and role-based access control exist at install and
+  organization level. An agent other than the assistant works in one
+  organization at a time. Its memory, files and credentials are scoped to that
+  organization, even when its definition comes from the user's root
+  configuration. It reaches only that organization's allowed projects and
+  threads. The assistant is the exception in REQ-ASSIST-1, and it reaches only
+  organizations its user belongs to.
 - **REQ-USER-2.** Only the user who owns a thread reads it or writes to
   it, plus that user's assistant and the chief of staff's replies on work
   the thread sent. This fills in REQ-USER-1's "threads" for the chat
@@ -1462,6 +1544,15 @@ design `docs/plans/2026-10-21_t1-sessions.md`, 2c843d190 on `huey/t1-sessions-de
   with `processing-halted` and changes nothing. A clear never sets or
   clears the kill switch. (Design D8, test T6.)
 
+### Accounts
+
+Added in version 1.20.
+
+- **REQ-ACCT-1.** A deployed system requires user sign-in (OIDC, Q203). A
+  user creates organizations and belongs to any number of them.
+- **REQ-ACCT-2.** An organization's owner invites another user into it.
+  The invited user joins with the grant the owner chose (REQ-USER-3).
+
 ### Creative library
 
 Added in version 1.12 (Q176 Case 2, Q211). Drafted from the Case 2
@@ -1788,6 +1879,17 @@ Added in version 1.11 (Q187, Q189, Q211):
     monitored coverage. Install and upgrade enable no deletion policies
     (REQ-DISK-1, REQ-DISK-4, REQ-DISK-10).
 
+### Setup
+
+Added in version 1.20.
+
+- **REQ-SETUP-1.** Quick Setup leaves its project with its records
+  initialized.
+- **REQ-SETUP-2.** After Quick Setup, the assistant offers an onboarding
+  interview. It asks for the project's outcome and limits and drafts the
+  north star and a first PRD. The user approves each through the existing
+  approval path.
+
 ## Acceptance criteria and success measures
 
 v1 is done when Jason gives one-sentence requests to the assistant, in a
@@ -2367,6 +2469,10 @@ gate that slice.
 
 ## Risks and open questions
 
+- The final name for the Mosaic Montage module is deferred to a later owner
+  decision. Mosaic Montage remains a working name; the existing four-tile
+  logo stays. (Version 1.20.)
+
 - On each v1 instance, the stack runs as that instance's own OS user,
   without sudo (Q181). A managed role session runs in a sandbox
   (REQ-HARN-2): it writes only its workspace and run directory, sees no

packages/bus/README.md

@@ -241,7 +241,9 @@ a receipt with empty `changes`. A refusal is `action.refused` with its code alon
 | `state` | No args; role, human and reader sessions (row 109, #1603). `{launch:{state,at,event},tasks:{open:[{task_ref,title}],total,cap}}` for the capability's business. `launch` is the latest `launch.revoked` or `launch.restored` event: `allowed` with `at` and `event` null when none exists. `open` is the tracker snapshot's open tasks in `task_ref` order, at most `cap` (the `tasks` page size, 50); `total` counts every open task. The harness runner reads it before each turn. Writes nothing. |
 | `replies` | `{id}`: a message UUID; human and reader sessions only. The messages whose `in_reply_to` is that id, oldest first, at most 50. Writes nothing. |
 | `project.create` | `{name,repo?}`; human sessions only (row 121, #1615). `repo` must name one of the business's `projects` (`unknown-repo`); a second project with the same name refuses `project-exists`. Returns `{id}`. |
-| `project.list` | No args; human sessions only. The business's projects, oldest first. |
+| `project.list` | No args, or `{includeArchived:true}`; human, tester and user sessions. The business's projects, oldest first, with archived projects hidden unless `includeArchived` asks for them; each returned archived project carries `archived:true`. A user still lists granted projects only. |
+| `project.archive` | `{project}`; human only (#797 MVP3). Appends one `project_archives` row (the audit trail: who, when); nothing is deleted. A repeat of the current state refuses `project-already-archived`. Returns `{project,archived:true}`. While archived the project hides from the plain list and refuses new work (`project-archived` from thread create/open/send, new session clears and thread run admission, room open/send, and product-bound request/PRD/task admission). Repository/product keys resolve to the chat archive journal too: an archived chat binding fences repository admission for all chat projects naming that repository, and every archived binding must be unarchived to restore it. Queued opens and clear successors are rechecked at launch and claim. Existing results, task completion receipts, cancellation, release/end and history stay usable; metadata-only session creation cannot execute while archived. |
+| `project.unarchive` | `{project}`; human only (#797 MVP3). Restores the project completely; a project that is not archived refuses `project-not-archived`. Returns `{project,archived:false}`. |
 | `room.open` | `{project}`; human only. Creates/reuses the caller's canonical member threads, named by sorted `THREAD_DEFINITIONS` instance keys. A taken name/owner/instance refuses `room-thread-name-taken` atomically. Returns `{project,threads:[{id,instance,name}]}`. |
 | `room.send` | `{project,body}`; human only, room must be fully open (`room-not-open`). Leading whitespace and `@name` tokens (including a final EOF tag) address current display names or member keys; no tags broadcasts, repeats send once. Unknown/ambiguous members refuse `unknown-addressee`/`addressee-ambiguous`; tags-only refuses `invalid-request`. Stores the original body, one normal message/route/human.input per target in one transaction, with one shared message timestamp. Returns `{ids,to}` in member-key order. |
 | `room.read` | `{project,after?,limit?}`; human only, complete owned room. Oldest first across all sessions of member threads. Returns entries with first-message fields plus `thread`, `session`, `instance`, `ids` and `to`. Only consecutive human rows with equal at/body/class and distinct instances merge; repeated instances split identical sends. `limit` counts merged entries (default 50, 1–200). Continue after the last entry's last `ids` element; an `after` outside the room refuses `message-not-found`. No tester access or schema change. |
@@ -716,7 +718,7 @@ keys with `invalid-request` before the writer runs (sage-0918). `instances` take
 answers the business's instances, their definitions, vars and launch membership, plus the
 definitions `instances.set` accepts. `instances.set` takes `{revision,instance,op,definition?,
 vars?,launch?}`. `op` is `add` or `change`, and every other key is `invalid-request`. The
-business package's `instance-settings.mjs` writes through the organization writer, which
+organization package's `instance-settings.mjs` writes through the organization writer, which
 logs the human as the actor, or `tester` for a tester's write. Its refusals pass through as `organization-*` codes, among them
 `organization-credentials-out-of-scope` for a definition that declares credentials. The answer
 carries `restart: true` after an add or a definition change: the broker keeps the roles it
@@ -729,8 +731,8 @@ tester may send `routes.set` (row 175), logged with actor `tester`; its `routes`
 `ORGANIZATION_KEYS`, so the chief of staff's `change_organization` can't send a `routes` key.
 The chief reaches a route only through the assistant's whole vars (Q169), and that write runs
 the same route checks. `routes` takes no args and answers the routing table;
-`routes.set` takes exactly `{revision,routes}`. The business package's `launch-settings.mjs`
-writes them with the human as actor (`packages/business/README.md`, "Routes"). `harness-off`,
+`routes.set` takes exactly `{revision,routes}`. The organization package's `launch-settings.mjs`
+writes them with the human as actor (`packages/organization/README.md`, "Routes"). `harness-off`,
 `harness-refused` and `thinking-unsupported` pass through as they are, from `routes.set`,
 `instances.set` and `organization.set` alike. The runtime builds the write checks' `levels`
 from `harnessLevels()`, which loads each harness module in the tree once at start, switched on
@@ -1080,3 +1082,38 @@ TERM concurrently, then KILL after five seconds and observe for two more.
 Unknown targets remain visible and prevent resume. Existing run evidence is
 not synthesized or rewritten. First activation stops old processing before
 trusted initialization and aligns the copy and image in the human's window.
+
+### Existing product intake
+
+The request host lists only this business owner's declared, admitted code projects.
+Each picker entry carries `mapping_revision`, the current organization revision.
+The host retains the displayed inventory until the owner picks; a host restart
+requires a fresh picker read. `request.attach.console` accepts no client revision
+for the mapping: it journals the server's selected revision. `prepareExisting`
+refuses a changed mapping and builds the confirmation from its existing paths,
+source commit, tracker binding, staff and project mode. It creates no resources.
+
+After confirmation, attachment holds the organization lock and the processing
+lease through validation and its atomic receipt. It reuses an active, validated
+product snapshot when that snapshot's original request has exactly the same intent
+bytes. This is a conservative proof of fit; different intent enters discovery
+for PM assessment and PRD revision. Discovery cannot borrow the older snapshot
+for task creation. No PRD decision or historical snapshot is rewritten.
+The existing `bootstrap.completed` journal payload has optional host-validated
+attachment fields; old events retain their original meaning and schema 3s needs
+no migration.
+
+Lifecycle continuations wake a live PM when a new, complete validated push/review
+evidence set becomes available. Committed attempt receipts deduplicate unchanged
+evidence across recovery and host restarts. A normal recovery call inspects at
+most its requested batch limit. An event overlapping a recovery keeps a full
+reinspection cycle pending, in bounded batches, so retained history cannot hide
+an already-inspected request until a later timer tick.
+
+Assistant-to-chief-to-PM intake relays must link `in_reply_to` to the message
+received. The broker derives the original request header from that authorized
+recipient chain and its owner/thread/session evidence, never from a message body.
+For lifecycle tasks, the first review request includes the exact raw JSON
+verification-document and verdict-body contract; unrelated reviews retain their
+existing free-text contract. The typed record tools describe the existing closed
+requirement schema without relaxing host validation.

packages/bus/schema.sql

@@ -364,6 +364,27 @@ CREATE TRIGGER delivery_same_session BEFORE INSERT ON deliveries
 CREATE TRIGGER projects_no_update BEFORE UPDATE ON projects BEGIN SELECT RAISE(ABORT, 'projects is append-only'); END;
 CREATE TRIGGER projects_no_delete BEFORE DELETE ON projects BEGIN SELECT RAISE(ABORT, 'projects is append-only'); END;
 CREATE TRIGGER projects_no_replace BEFORE INSERT ON projects WHEN EXISTS (SELECT 1 FROM projects WHERE seq = NEW.seq OR id = NEW.id) BEGIN SELECT RAISE(ABORT, 'projects is append-only'); END;
+-- #797 MVP3: the owner's reversible project archive. A project's state is the op of its latest
+-- row, and the rows are the audit trail (who archived or restored it, and when). The projects
+-- table itself stays as written; an archived project keeps every record and is never deleted.
+CREATE TABLE project_archives (
+  seq INTEGER PRIMARY KEY AUTOINCREMENT,
+  at TEXT NOT NULL,
+  business TEXT NOT NULL,
+  project TEXT NOT NULL REFERENCES projects(id),
+  op TEXT NOT NULL CHECK (op IN ('archive','unarchive')),
+  by TEXT NOT NULL
+) STRICT;
+CREATE INDEX project_archives_project ON project_archives (business, project, seq);
+CREATE TRIGGER project_archives_no_update BEFORE UPDATE ON project_archives BEGIN SELECT RAISE(ABORT, 'project_archives is append-only'); END;
+CREATE TRIGGER project_archives_no_delete BEFORE DELETE ON project_archives BEGIN SELECT RAISE(ABORT, 'project_archives is append-only'); END;
+CREATE TRIGGER project_archives_no_replace BEFORE INSERT ON project_archives WHEN EXISTS (SELECT 1 FROM project_archives WHERE seq = NEW.seq) BEGIN SELECT RAISE(ABORT, 'project_archives is append-only'); END;
+CREATE TRIGGER project_archives_business BEFORE INSERT ON project_archives
+  WHEN (SELECT business FROM projects WHERE id = NEW.project) IS NOT NEW.business
+  BEGIN SELECT RAISE(ABORT, 'an archive row belongs to its project''s business'); END;
+CREATE TRIGGER project_archives_no_repeat BEFORE INSERT ON project_archives
+  WHEN (SELECT op FROM project_archives WHERE business = NEW.business AND project = NEW.project ORDER BY seq DESC LIMIT 1) = NEW.op
+  BEGIN SELECT RAISE(ABORT, 'a project archive row changes state'); END;
 CREATE TRIGGER threads_no_update BEFORE UPDATE ON threads BEGIN SELECT RAISE(ABORT, 'threads is append-only'); END;
 CREATE TRIGGER threads_no_delete BEFORE DELETE ON threads BEGIN SELECT RAISE(ABORT, 'threads is append-only'); END;
 CREATE TRIGGER threads_no_replace BEFORE INSERT ON threads WHEN EXISTS (SELECT 1 FROM threads WHERE seq = NEW.seq OR id = NEW.id) BEGIN SELECT RAISE(ABORT, 'threads is append-only'); END;
@@ -618,3 +639,19 @@ CREATE TRIGGER request_snapshot_events_no_replace BEFORE INSERT ON request_snaps
 CREATE TRIGGER request_project_events_no_update BEFORE UPDATE ON request_project_events BEGIN SELECT RAISE(ABORT, 'request_project_events is append-only'); END;
 CREATE TRIGGER request_project_events_no_delete BEFORE DELETE ON request_project_events BEGIN SELECT RAISE(ABORT, 'request_project_events is append-only'); END;
 CREATE TRIGGER request_project_events_no_replace BEFORE INSERT ON request_project_events WHEN EXISTS (SELECT 1 FROM request_project_events WHERE seq=NEW.seq OR (business=NEW.business AND project=NEW.project AND revision=NEW.revision)) BEGIN SELECT RAISE(ABORT, 'request_project_events is append-only'); END;
+-- Per-project selections are a human-authored append-only settings trail.
+CREATE TABLE project_system_types (
+  seq INTEGER PRIMARY KEY AUTOINCREMENT,
+  at TEXT NOT NULL,
+  business TEXT NOT NULL,
+  project TEXT NOT NULL REFERENCES projects(id),
+  types TEXT NOT NULL,
+  by TEXT NOT NULL
+) STRICT;
+CREATE INDEX project_system_types_project ON project_system_types (business, project, seq);
+CREATE TRIGGER project_system_types_no_update BEFORE UPDATE ON project_system_types BEGIN SELECT RAISE(ABORT, 'project_system_types is append-only'); END;
+CREATE TRIGGER project_system_types_no_delete BEFORE DELETE ON project_system_types BEGIN SELECT RAISE(ABORT, 'project_system_types is append-only'); END;
+CREATE TRIGGER project_system_types_no_replace BEFORE INSERT ON project_system_types WHEN EXISTS (SELECT 1 FROM project_system_types WHERE seq = NEW.seq) BEGIN SELECT RAISE(ABORT, 'project_system_types is append-only'); END;
+CREATE TRIGGER project_system_types_business BEFORE INSERT ON project_system_types
+  WHEN (SELECT business FROM projects WHERE id = NEW.project) IS NOT NEW.business
+  BEGIN SELECT RAISE(ABORT, 'a system types row belongs to its project business'); END;

packages/bus/src/broker.mjs

@@ -7,7 +7,7 @@ import { initializeControl, processingStatus } from '../../processing-control/sr
 import { NAME as HARNESS_NAME } from '../../plugins/src/kinds.mjs';
 import { loadRequirements } from '../../tasks/src/requirements.mjs';
 import { MERGE, LandingRefusal, readLanding } from './landing.mjs';
-import { ID_PATTERN, THREAD_DEFINITIONS, END_PROTECTED, forkProblem, forkUrl, credentialKind, validArgv, commandAllowed, HOST_ID, CREATIVE_DEFINITIONS, unhireableAction, giteaName, parseGiteaUrl, covers, grantScopeOf, grantInScope } from '../../business/src/vocabulary.mjs';
+import { ID_PATTERN, THREAD_DEFINITIONS, END_PROTECTED, forkProblem, forkUrl, credentialKind, validArgv, commandAllowed, HOST_ID, CREATIVE_DEFINITIONS, unhireableAction, giteaName, parseGiteaUrl, covers, grantScopeOf, grantInScope } from '../../organization/src/vocabulary.mjs';
 
 // Kept closed while S1 lands; its vocabulary is the integration authority.
 export const ACTIONS = Object.freeze([
@@ -98,6 +98,11 @@ export const STRANDED = 50;
 const TASK_ARGS = ['done', 'assignee', 'label', 'requirement', 'limit', 'after', 'task_ref', 'project_key', 'requirement_snapshot'];
 export const TASK_PAGE = 50;
 export const TASK_PAGE_MAX = 200;
+// D3 (#797): raw UTF-8 pre-bound for the approved requirement texts quoted into one coder/reviewer
+// continuation, cut at a codepoint boundary. The binding limit is the encoded budget that
+// request-continuation.mjs (QUOTE_BUDGET) applies when it renders the records; encoding never
+// shrinks bytes, so this pre-cut never removes text the encoded budget would keep.
+export const CONTINUATION_QUOTE_BUDGET = 16384;
 // Row 134 (REQ-HARN-2): the web verbs a role holding the "web" tool grant may call, and the label
 // on every reply. Fetched pages and search results are other people's text, never instructions.
 // Row 148 (#1642): the human-only verbs behind the Console's document editor. The save is the one
@@ -160,15 +165,15 @@ export const USER_VERBS = Object.freeze(['project.list', 'thread.create', 'threa
   'thread.share', 'thread.unshare', 'thread.shares']);
 // Row 252 (#1753, design sections 2-3): the only verbs a Console owner cap reaches. Every other verb
 // refuses it human-required before its own checks, and these refuse every other cap.
-export const CONSOLE_VERBS = Object.freeze(['decision.preview.console', 'decision.resolve.console', 'prd.revoke.console', 'request.mode.console', 'request.draft.console',
+export const CONSOLE_VERBS = Object.freeze(['system-types.console', 'project.remote.get.console', 'project.remote.set.console', 'request.workspace.console', 'request.artifact.console', 'decision.preview.console', 'decision.resolve.console', 'prd.revoke.console', 'request.mode.console', 'request.draft.console',
   // Task 3 (#1839): and the owner's intake controls. The reads and writes are the same lifecycle methods the PM's
   // unsuffixed verbs reach, with the owner's verified (provider, iss, sub) as the only caller; the PM-only
   // request.question and the PM's own reads keep their unsuffixed names and refuse a console cap.
   'request.get.console', 'request.projects.console', 'request.answer.console', 'request.attach.console', 'request.cancel.console']);
 // What an owner's console cap may ask of the request lifecycle (a read, the intake controls, and Task 4's mode and draft).
-const INTAKE_CONSOLE = Object.freeze(['get', 'answer', 'attach', 'cancel', 'mode', 'draft']);
+const INTAKE_CONSOLE = Object.freeze(['artifactConsole', 'get', 'answer', 'attach', 'cancel', 'mode', 'draft']);
 const REQUEST_VERBS = Object.freeze({ 'request.open': 'open', 'request.get': 'get', 'request.projects': 'projects', 'request.propose': 'propose',
-  'prd.submit': 'submit', 'request.advance': 'advance', 'request.question': 'question', 'request.get.console': 'get', 'request.projects.console': 'projects',
+  'prd.submit': 'submit', 'request.advance': 'advance', 'request.deliver': 'deliver', 'request.artifact.console': 'artifactConsole', 'request.question': 'question', 'request.get.console': 'get', 'request.projects.console': 'projects',
   'request.answer.console': 'answer', 'request.attach.console': 'attach', 'request.cancel.console': 'cancel' });
 // Row 275 (193b1b, #1780, row 193 design 4.3 and 9): the user verbs a viewer grant reaches. They
 // read, so a live grant at any level covers them. thread.create, thread.open and thread.send need a
@@ -233,7 +238,7 @@ const canonical = (x) =>
   Number.isFinite(Date.parse(x)) &&
   new Date(x).toISOString() === x;
 export class BusError extends Error {
-  // C2-06 (sage-3599): only the citation guard's refusals carry a reason, and the envelope passes it on.
+  // Only explicitly scoped refusals carry a reason; the envelope passes it on.
   constructor(code, reason) {
     super(code);
     this.code = code;
@@ -438,9 +443,27 @@ function checkBusiness(name, b) {
   }
 }
 
+// One archive journal, addressed either by chat UUID or by the repository/product key.
+// Multiple chat projects can name a repository: any archived binding fences new work.
+export function projectArchived(store, business, project) {
+  if (!project) return false;
+  return !!store.get(`SELECT 1 FROM projects p WHERE p.business=? AND (p.id=? OR p.repo=?)
+    AND (SELECT a.op FROM project_archives a WHERE a.business=p.business AND a.project=p.id ORDER BY a.seq DESC LIMIT 1)='archive' LIMIT 1`,
+  business, project, project);
+}
+
+// All bindings that can authorize new work for a request, including its original chat.
+export function requestArchived(state, services, extra = []) {
+  const plans = state.selection?.bindings ?? [];
+  return [state.project, state.chat_project, state.thread && services.threadProject?.(state.business, state.thread),
+    ...plans.flatMap(({ plan }) => [plan.project, plan.chat_project, plan.source?.project]), ...extra]
+    .some(project => project && services.projectArchived?.(state.business, project));
+}
+
 export class Broker {
   #store;
   #requests;
+  #workspaceRead;
   #requestRecoveryPending = false;
   #businesses;
   #sessions = new Map();
@@ -522,7 +545,7 @@ export class Broker {
   #clock = 0;
   #processing;
   // credentialStatus is the runtime's metadata-only Credentials.status(); the broker never gets use().
-  constructor({ store, businesses, secretCheck = () => {}, credentialStatus = () => [], organization = null, project = null, library = null, usage = null, limits = null, harnessOn = null, credentialVerbs = null, proxyInit = null, proxyPage = null, hostGrant = null, hostKeys = null, processing = null, testerOn = null, grantScope = null, roleFile = null, giteaGrant = null, giteaKeys = null, access = null, accessStamp = null, compactions = null, requestLifecycle = null, requirementsHost = null }) {
+  constructor({ store, businesses, secretCheck = () => {}, credentialStatus = () => [], organization = null, project = null, library = null, usage = null, limits = null, harnessOn = null, credentialVerbs = null, proxyInit = null, proxyPage = null, hostGrant = null, hostKeys = null, processing = null, testerOn = null, grantScope = null, roleFile = null, giteaGrant = null, giteaKeys = null, access = null, accessStamp = null, compactions = null, requestLifecycle = null, requirementsHost = null, workspaceRead = null }) {
     if (!object(businesses) || !Object.keys(businesses).length) fail('invalid-business');
     // Row 194 b15 (sage-2501): the function-argument checks come before anything reads the store.
     if (harnessOn !== null && typeof harnessOn !== 'function') throw new TypeError('harnessOn must be a function');
@@ -577,6 +600,7 @@ export class Broker {
     this.#requirements = loadRequirements();
     // These are host capabilities, like project/library; no filesystem module enters the client closure.
     this.#requestJournal = requirementsHost?.journal;
+    this.#workspaceRead = workspaceRead;
     this.#builtinBinding = requirementsHost?.binding;
     this.#builtin = requirementsHost?.builtin;
     this.#catalog = requirementsHost?.catalog;
@@ -612,7 +636,13 @@ export class Broker {
         dataRoot,
         builtinBinding: builtinFor,
         progress: state => this.#requestProgress(state),
+        deliveryEvidence: (state, args) => this.#deliveryEvidence(state, args),
         continuationContext: (state, target) => this.#continuationContext(state, target),
+        continuationProgress: state => {
+          if (!['implementation', 'review'].includes(state.phase)) return null;
+          try { return this.#requestProgress(state); }
+          catch (e) { if (e.code === 'request-evidence-required') return null; throw e; }
+        },
         continuationEffect: (state, intent, message) => {
           if (intent.step !== 'send_message' || state.phase !== 'complete' || !state.thread) return null;
           const b = this.#business(state.business);
@@ -622,15 +652,19 @@ export class Broker {
         },
         continuationRouted: (message, run) => !!this.#store.get("SELECT 1 FROM deliveries WHERE message=? AND holder_run=? AND op IN ('routed','delivered')", message, run),
         continuationRetry: (state, message, target, context) => {
-          if (context.chief && target !== context.chief) this.#notice(state.business, message, context.chief, target, NOTICE_ROLE, this.#business(state.business).launch.instances.includes(target), this.#store.get('SELECT body FROM messages WHERE id=?', message)?.body);
+          this.#processingWork();
+          if (!this.#continuationStarting(state.business, target) && context.chief && target !== context.chief) this.#notice(state.business, message, context.chief, target, NOTICE_ROLE, this.#business(state.business).launch.instances.includes(target), this.#store.get('SELECT body FROM messages WHERE id=?', message)?.body);
         },
         continuationMessage: (state, target, body, context) => this.#continuationMessage(state, target, body, context),
+        continuationQuote: (state, resolved = null) => this.#continuationQuote(state, resolved),
         origin: (identity, request) => this.#requestOrigin(identity, request),
         authorize: (identity, state, operation) => this.#requestAuthorize(identity, state, operation),
         project: (business, project) => {
           const p = this.#business(business).projects?.[project];
           return p && p.kind !== 'library' ? structuredClone(p) : null;
         },
+        projectArchived: (business, project) => this.#archived(business, project),
+        threadProject: (business, thread) => this.#store.get('SELECT project FROM threads WHERE business=? AND id=?', business, thread)?.project,
         projectPaths: business => Object.values(this.#business(business).projects ?? {}).flatMap(p => [p.root, p.repo]).filter(p => typeof p === 'string'),
         raiseDecision: (identity, args) => this.#dispatch(identity, 'decision.raise', args),
         raisePrdDecision: (identity, args, spec) => this.#dispatch(identity, 'decision.raise', args, spec),
@@ -679,12 +713,17 @@ export class Broker {
     const b = this.#business(state.business), holder = this.#holder(state.business, target);
     const chief = b.launch?.by ?? null, h = chief ? this.#holder(state.business, chief) : null;
     const run = holder?.op === 'claim' ? holder.holder_run : null;
-    const revision = this.#store.get("SELECT max(seq) n FROM events WHERE business=? AND kind IN ('session.launched','session.ended','launch.revoked','launch.restored')", state.business).n;
-    const claims = this.#store.get('SELECT max(seq) n FROM role_claims WHERE business=?', state.business).n;
+    const revision = this.#store.get("SELECT max(seq) n FROM events WHERE business=? AND (kind IN ('launch.revoked','launch.restored') OR (actor_role=? AND kind IN ('session.launched','session.ended')))", state.business, target).n;
+    const claims = this.#store.get('SELECT max(seq) n FROM role_claims WHERE business=? AND role=?', state.business, target).n;
     const revoked = this.#store.get('SELECT state FROM launch_state WHERE business=?', state.business)?.state === 'revoked';
     return { run, chief, chief_run: h?.op === 'claim' ? h.holder_run : null, revoked,
       prerequisite: digestPrd({ business: b, revision, claims, revoked, credentials: this.#credentialStatus() }) };
   }
+  #continuationStarting(business, target) {
+    // The target's latest lifecycle event is a launch without an end: it is still starting. An older
+    // launch whose end was lost (#1851) never hides a later run's end.
+    return !!this.#store.get("SELECT 1 FROM events l WHERE l.business=? AND l.actor_role=? AND l.kind='session.launched' AND l.seq=(SELECT max(seq) FROM events WHERE business=l.business AND actor_role=l.actor_role AND kind IN ('session.launched','session.ended')) AND NOT EXISTS (SELECT 1 FROM events e WHERE e.business=l.business AND e.kind='session.ended' AND e.subject=l.subject)", business, target);
+  }
   #continuationMessage(state, target, body, context) {
     this.#processingWork();
     const b = this.#business(state.business);
@@ -694,10 +733,64 @@ export class Broker {
     this.#store.run('INSERT INTO messages(id,at,business,from_role,from_run,to_role,class,body) VALUES(?,?,?,?,?,?,?,?)',
       mid, this.#now(), state.business, NOTICE_ROLE, NOTICE_RUN, target, 'RESULT', body);
     this.#route(state.business, mid, target, null);
-    if (!context.run && context.chief && target !== context.chief)
+    if (!context.run && !this.#continuationStarting(state.business, target) && context.chief && target !== context.chief)
       this.#notice(state.business, mid, context.chief, target, NOTICE_ROLE, b.launch.instances.includes(target), body);
     return mid;
   }
+  // D3 (#797): coder/reviewer sandboxes cannot read the product records repo, and list_requirements
+  // stays PM/CTO-only (row 90, #1584). The continuation itself therefore quotes the task-cited
+  // approved requirement texts. Everything is resolved host-side through the same catalog resolver
+  // behind the scoped `requirements` verb (#requirementsFor) — never from model-supplied input, and
+  // with no role or tool widened. Citations come from this request's `task.created` events for this
+  // exact product and approved snapshot (the same evidence #requestProgress admits), and an
+  // unresolvable snapshot degrades to { unavailable } so the message can say "ask the PM" without
+  // blocking the task.
+  async #continuationQuote(state, resolved = null) {
+    const unavailable = { unavailable: true };
+    if (!state || !state.business || !state.request || !state.project || !state.snapshot) return null;
+    try {
+      const cited = new Map();
+      for (const row of this.#store.all("SELECT subject,body FROM events WHERE business=? AND kind='task.created'", state.business)) {
+        let body; try { body = JSON.parse(row.body); } catch { continue; }
+        if (body?.request !== state.request || body?.project_key !== state.project ||
+            body?.requirement_snapshot !== state.snapshot || typeof body.requirement !== 'string') continue;
+        const refs = cited.get(body.requirement) ?? new Set();
+        refs.add(row.subject);
+        cited.set(body.requirement, refs);
+      }
+      if (!cited.size) return unavailable;
+      const catalog = this.#requests?.catalog ?? this.#catalog;
+      if (!catalog) return unavailable;
+      const snapshot = resolved ?? await catalog.resolve({ business: state.business, project: state.project, snapshot: state.snapshot });
+      if (!snapshot || snapshot.id !== state.snapshot || !Array.isArray(snapshot.requirements)) return unavailable;
+      const cut = (value, limit) => {
+        const bytes = Buffer.from(value, 'utf8');
+        if (bytes.length <= limit) return value;
+        let end = limit;
+        while (end > 0 && (bytes[end] & 0xc0) === 0x80) end--;
+        return bytes.subarray(0, end).toString('utf8');
+      };
+      const requirements = [];
+      let budget = CONTINUATION_QUOTE_BUDGET, truncated = false;
+      for (const [rid, refs] of [...cited].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) {
+        const record = snapshot.requirements.find(r => r?.id === rid);
+        if (!record) continue; // not in the approved snapshot: never quote it
+        let title = typeof record.title === 'string' ? record.title : '';
+        let text = typeof record.text === 'string' ? record.text : '';
+        let left = budget - Buffer.byteLength(title);
+        if (left < 0) { truncated = true; title = cut(title, budget); left = 0; }
+        if (Buffer.byteLength(text) > left) { truncated = true; text = cut(text, left); }
+        budget -= Buffer.byteLength(title) + Buffer.byteLength(text);
+        requirements.push({ id: record.id, title, text, status: record.status ?? null, tasks: [...refs].sort() });
+      }
+      if (!requirements.length) return unavailable;
+      return { snapshot: snapshot.id, project: state.project, records_commit: snapshot.records_commit ?? null, truncated, requirements };
+    } catch {
+      // Fail closed on any refusal (revoked or stale snapshot, unreadable records): the
+      // continuation still goes out, without texts, telling the agent to ask the PM.
+      return unavailable;
+    }
+  }
   // Host-only. The caller is still the real chief capability, checked for its current launch
   // grant. Release only after the runner reports its turn finished (message.read), never as an ack.
   requestChief(business) {
@@ -734,9 +827,34 @@ export class Broker {
     const created = events.filter(e => e.kind === 'task.created' && e.actor_role === state.pm && e.body.request === state.request &&
       e.body.project_key === state.project && e.body.requirement_snapshot === state.snapshot &&
       events.some(p => p.id === e.body.create_receipt && p.body.operation === 'tracker.create.prepared'));
-    if (!created.length || state.candidate.requirements.some(r => !created.some(e => e.body.requirement === r.id))) fail('request-evidence-required');
+    const uncovered = state.candidate.requirements.filter(r => !created.some(e => e.body.requirement === r.id)).map(r => r.id);
+    if (uncovered.length) {
+      const error = new BusError('request-evidence-required',
+        `Uncovered requirement ids: ${uncovered.join(', ')}. Each task_create cites exactly one requirement id from this product snapshot; prose does not count. Check existing create receipts, then create and assign tasks for the uncovered ids within the approved task limit. If coverage would exceed that limit, ask the owner to reconcile the plan before creating more tasks. A push or review cannot clear planning coverage; retry advance_request after coverage and assignment are complete.`);
+      error.planningCoverage = true;
+      throw error;
+    }
+    if (!created.length) fail('request-evidence-required');
     const tasks = [...new Set(created.map(e => e.subject))].sort(), evidence = created.map(e => e.id);
     if (state.phase !== 'planning' && digestPrd(tasks) !== digestPrd([...state.tasks].sort())) fail('request-evidence-required');
+    // The same read-only chain result also selects the next task in a coder continuation.
+    const chains = new Map();
+    if (state.phase !== 'planning') {
+      for (const task of tasks) {
+        const history = events.filter(e => e.subject === task);
+        const push = history.findLast(e => e.kind === 'action.allowed' && e.body.action === 'git.push.working');
+        const review = push && history.findLast(e => e.kind === 'review.requested' && e.seq > push.seq && e.body.commit === push.body.commit && e.body.project === state.project && e.body.to === staff.reviewer);
+        if (push && push.actor_role === staff.coder && push.body.project === state.project && review) chains.set(task, { push, review });
+      }
+      const missing = tasks.filter(task => !chains.has(task));
+      if (missing.length) {
+        const reason = `Tasks without their own push_working and matching request_review: ${missing.join(', ')}. Each task_ref needs its own push_working and request_review; a push for one task does not cover another. Push and request review for each listed task, then retry advance_request.`;
+        const error = new BusError('request-evidence-required', reason);
+        error.message = `${error.code}: ${reason}`;
+        error.missingTasks = missing;
+        throw error;
+      }
+    }
     let changes = false;
     for (const task of tasks) {
       const current = this.#store.get('SELECT fields FROM task_current WHERE business=? AND task_ref=?', state.business, task);
@@ -747,9 +865,7 @@ export class Broker {
       if (!assigned || assigned.actor_role !== state.pm || assigned.body.role !== staff.coder || !fields.assignees?.includes(b.roles[staff.coder]?.tracker?.botId)) fail('request-evidence-required');
       evidence.push(assigned.id);
       if (state.phase === 'planning') continue;
-      const push = history.findLast(e => e.kind === 'action.allowed' && e.body.action === 'git.push.working');
-      const review = push && history.findLast(e => e.kind === 'review.requested' && e.seq > push.seq && e.body.commit === push.body.commit && e.body.project === state.project && e.body.to === staff.reviewer);
-      if (!push || push.actor_role !== staff.coder || push.body.project !== state.project || !review) fail('request-evidence-required');
+      const { push, review } = chains.get(task);
       evidence.push(push.id, review.id);
       if (state.phase === 'implementation') continue;
       const verdict = history.findLast(e => e.kind === 'review.verdict' && e.body.request === review.id && e.body.commit === push.body.commit && e.actor_role === staff.reviewer);
@@ -767,6 +883,31 @@ export class Broker {
     if (!phase) fail('request-evidence-required');
     return { phase, tasks, evidence: [...new Set(evidence)] };
   }
+  #deliveryEvidence(state, args) {
+    const progress = this.#requestProgress(state);
+    if (state.phase !== 'delivery' || !state.tasks.includes(args.task_ref)) fail('request-evidence-required');
+    const rows = this.#store.all('SELECT * FROM events WHERE business=? AND subject=? ORDER BY seq', state.business, args.task_ref)
+      .map(e => ({ ...e, body: JSON.parse(e.body) }));
+    // Use the same chain that #requestProgress accepted, including the specific close receipt.
+    // A later review by another role cannot replace the verdict that actually closed this task.
+    const accepted = new Set(progress.evidence);
+    const push = rows.findLast(e => accepted.has(e.id) && e.kind === 'action.allowed' && e.body.action === 'git.push.working');
+    const review = rows.findLast(e => accepted.has(e.id) && e.kind === 'review.requested');
+    const verdict = rows.findLast(e => accepted.has(e.id) && e.kind === 'review.verdict');
+    const close = rows.findLast(e => accepted.has(e.id) && e.kind === 'task.closed');
+    if (!push || !review || !verdict || !close || verdict.id !== args.verdict || close.body.verdict !== verdict.id ||
+        verdict.body.request !== review.id || verdict.body.commit !== push.body.commit || verdict.body.verdict !== 'approve' ||
+        verdict.actor_role !== review.body.to || verdict.actor_role === push.actor_role) fail('request-evidence-required');
+    const receipt = this.#store.all("SELECT * FROM events WHERE business=? AND kind='action.allowed' AND actor_role=? AND seq<? AND json_extract(body,'$.action')='record.write' ORDER BY seq", state.business, verdict.actor_role, verdict.seq)
+      .find(e => { const b = JSON.parse(e.body); return e.seq > review.seq && b.project === state.project && b.path === args.verification_record.path && b.commit === args.verification_record.commit; });
+    if (!receipt) fail('request-verification-refused');
+    const message = this.#store.get('SELECT body FROM messages WHERE business=? AND id=?', state.business, verdict.body.message);
+    const marker = `Review verdict ${verdict.id} on ${args.task_ref}, commit ${push.body.commit}: approve. A task_close cites this verdict id.\n\n`;
+    if (!message?.body.startsWith(marker)) fail('request-verification-refused');
+    let report; try { report = JSON.parse(message.body.slice(marker.length)); } catch { fail('request-verification-refused'); }
+    if (!object(report) || Object.keys(report).sort().join(',') !== 'results,verification_record' || !object(report.verification_record) || Object.keys(report.verification_record).sort().join(',') !== 'commit,path' || report.verification_record.path !== args.verification_record.path || report.verification_record.commit !== args.verification_record.commit || typeof report.results !== 'string' || !report.results.trim()) fail('request-verification-refused');
+    return { commit: push.body.commit, review_request: review.id, verdict: verdict.id, results: report.results, evidence: progress.evidence, receipt: receipt.id };
+  }
   #requestAuthorize(s, state, operation) {
     if (!s || s.business !== state.business) fail('request-access-refused');
     if (s.reader) fail('read-only');
@@ -779,7 +920,7 @@ export class Broker {
       if (s.human !== state.owner || s.human !== this.#business(s.business).human) fail('request-access-refused');
       return;
     }
-    if (['mode', 'draft'].includes(operation)) fail('human-required');
+    if (['mode', 'draft', 'artifactConsole'].includes(operation)) fail('human-required');
     if (s.human) {
       this.#human(s);
       if (s.human !== state.owner || s.human !== this.#business(s.business).human) fail('request-access-refused');
@@ -841,12 +982,16 @@ export class Broker {
     if (state || args.project_key !== undefined || args.requirement_snapshot !== undefined) {
       if (!args.project_key || !args.requirement_snapshot || !args.op) fail('task-scope-required');
       if (!state || !state.project || state.project !== args.project_key || state.pm !== s.role) fail('request-project-refused');
+      // An attachment in discovery cannot borrow another request's still-active product
+      // approval. Its host must first adopt that snapshot or activate a new exact PRD.
+      if (state.attachment && state.snapshot !== args.requirement_snapshot) fail('requirement-snapshot-required');
       const bindings = state.selection?.bindings.filter(b => b.digest === state.plan_digest) ?? [];
       if (bindings.length !== 1 || bindings[0].plan.project !== state.project || state.phase === 'cancelled') fail('request-project-refused');
       if (state.chat_project) {
         const chat = this.#store.get('SELECT repo FROM projects WHERE id=? AND business=?', state.chat_project, s.business);
         if (!chat || chat.repo !== state.project) fail('request-project-refused');
       }
+      if (requestArchived(state, { projectArchived: (business, project) => this.#archived(business, project), threadProject: (business, thread) => this.#store.get('SELECT project FROM threads WHERE business=? AND id=?', business, thread)?.project })) fail('project-archived');
       const board = bindings[0].plan.tracker.project;
       if (args.project !== undefined && args.project !== board) fail('request-tracker-refused');
       return board;
@@ -857,6 +1002,7 @@ export class Broker {
     const origin = this.#requestOrigin(s, args.request);
     const chat = origin.thread && this.#store.get('SELECT project FROM threads WHERE id=? AND business=?', origin.thread, s.business);
     const associated = chat?.project && this.#store.get('SELECT repo FROM projects WHERE id=? AND business=?', chat.project, s.business);
+    if (this.#archived(s.business, chat?.project) || this.#archived(s.business, binding.project)) fail('project-archived');
     if (associated?.repo && associated.repo !== binding.project) fail('request-project-refused');
     if (args.project !== undefined && args.project !== binding.tracker_project) fail('request-tracker-refused');
     return binding.tracker_project;
@@ -873,12 +1019,14 @@ export class Broker {
     const project = args.project_key ?? (args.request !== undefined ? this.#builtinBinding?.project : undefined);
     if (!projectKey(project) || !this.#business(s.business).projects?.[project] || this.#business(s.business).projects[project].kind === 'library') fail('request-project-refused');
     if (args.requirement_snapshot !== undefined && !id(args.requirement_snapshot)) fail('invalid-request');
+    if (this.#archived(s.business, project)) fail('project-archived');
     const catalog = this.#requests?.catalog ?? this.#catalog;
     if (!catalog) fail('requirement-snapshot-required');
     const snapshot = args.requirement_snapshot ?? (args.project_key === undefined ? this.#builtin?.id : undefined);
     const result = await catalog.resolve({ business: s.business, project, ...(snapshot === undefined ? {} : { snapshot }) });
     this.#agent(s); this.#processingGate(s, 'requirements');
     if (args.request !== undefined) this.#createTarget(s, args);
+    if (this.#archived(s.business, project)) fail('project-archived');
     if (args.project_key !== undefined && result.origin !== 'product') fail('requirement-snapshot-required');
     if (args.requirement !== undefined && !result.requirements.some(r => r.id === args.requirement)) fail('unknown-requirement');
     return result;
@@ -893,7 +1041,10 @@ export class Broker {
     this.#store.run(
       'INSERT INTO messages(id,at,business,from_role,from_run,to_role,class,body) VALUES(?,?,?,?,?,?,?,?)',
       mid, this.#now(), s.business, 'human', 'human-console', state.pm, 'INFO', text);
-    const cancelled = this.#route(s.business, mid, state.pm, state.session);
+    // Intake can originate in the assistant's session. Its owner control goes to
+    // the PM's ordinary inbox; only a PM-owned session can contain that message.
+    const pmSession = state.session && this.#store.get('SELECT instance FROM sessions WHERE id=?', state.session)?.instance === state.pm ? state.session : null;
+    const cancelled = this.#route(s.business, mid, state.pm, pmSession);
     if (cancelled) fail(cancelled);
     return this.#event(s, 'human.input', { ...body, via: 'console', subject: s.console, message: mid }, mid);
   }
@@ -908,7 +1059,9 @@ export class Broker {
   #withdrawIntake(s, state, decision) {
     this.#intakeEdge(s, state);
     const d = this.#decision(s, decision);
-    if (d.action !== 'project.bootstrap' || d.route_to !== 'human' || d.raised_by_role !== state.pm) fail('request-selection-refused');
+    const selection = d.action === 'project.bootstrap' && d.route_to === 'human' && state.selection?.decision === d.id;
+    const prd = d.action === 'prd.approve' && state.phase === 'prd-review' && state.wait?.subject === d.id && d.project === state.project;
+    if ((!selection && !prd) || d.raised_by_role !== state.pm) fail('request-selection-refused');
     if (this.#closed(d.id)) fail('decision-closed');
     const seq = Number(this.#store.run('INSERT INTO decision_events(decision,at,op,by,choice,note,via) VALUES(?,?,?,?,?,?,?)',
       d.id, this.#now(), 'withdrawn', s.human, null, null, 'console').lastInsertRowid);
@@ -929,11 +1082,11 @@ export class Broker {
     this.#requestAuthorize(s, { business: s.business, owner: b.human, pm }, 'get');
     if (!s.human) {
       // Only direct receipt or an existing, broker-authorized reply/relay chain exposes an origin.
-      const reachable = this.#store.get(`WITH RECURSIVE reachable(id,to_role) AS (
+      const reachable = this.#store.all(`WITH RECURSIVE reachable(id,to_role) AS (
         SELECT id,to_role FROM messages WHERE business=? AND id=?
-        UNION SELECT m.id,m.to_role FROM messages m JOIN reachable r ON m.in_reply_to=r.id WHERE m.business=?
-      ) SELECT 1 FROM reachable WHERE to_role=? LIMIT 1`, s.business, m.id, s.business, pm);
-      if (!reachable) fail('request-origin-refused');
+        UNION SELECT m.id,m.to_role FROM messages m JOIN reachable r ON m.in_reply_to=r.id AND m.from_role=r.to_role WHERE m.business=?
+      ) SELECT m.* FROM reachable r JOIN messages m ON m.id=r.id WHERE r.to_role=?`, s.business, m.id, s.business, pm);
+      if (!reachable.some(message => this.#request(s.business, message) === request)) fail('request-origin-refused');
       this.#checkMessaging(s.business, pm, 'human');
       this.#checkMessaging(s.business, 'human', pm);
     }
@@ -1369,6 +1522,11 @@ export class Broker {
   #owner(s) {
     return s.tester ? 'tester' : s.user ? 'user:' + s.user : s.human;
   }
+  // #797 MVP3: a project's archive state, the op of its latest project_archives row. Archived
+  // projects keep every record and stay readable; they take no new threads or requests.
+  #archived(business, project) {
+    return projectArchived(this.#store, business, project);
+  }
   // FED R3 (design 3.5): the user's live grants in the session's business, from one read of the
   // access file. Any failure to read leaves none. Row 275: a grant at any level counts here; each
   // verb's own check asks the level it needs (#granted).
@@ -1572,7 +1730,7 @@ export class Broker {
       this.#revokeLost('access-expiry', true, doc);
       rows = this.#threadRows('t.business=?', business);
     }
-    return rows.map(({ owner, project, ...r }) => (lost(r, owner, project) ? { ...r, revoked: true } : r));
+    return rows.map(({ owner, project, ...r }) => ({ ...r, ...(this.#archived(business, project) ? { archived: true } : {}), ...(lost(r, owner, project) ? { revoked: true } : {}) }));
   }
   // Row 121 round 2 (#1615, Dewey's F3 in 28591): the launcher's idle stop. The tick decides
   // from a threadsState snapshot, and a message the run took after it would be delivered to a
@@ -1831,6 +1989,7 @@ export class Broker {
     const { key, session, old, body } = this.#launchProof(record);
     if (!old) this.#processingWork();
     if (!old && !this.#harnessOn(record.business, record.harness)) fail('invalid-harness');
+    if (!old && record.thread !== undefined && this.#archived(record.business, this.#threadRow(session, record.thread).project)) fail('project-archived');
     if (!old && record.thread !== undefined && this.#threadLost(record.business, record.thread)) fail('thread-revoked');
     if (!old) this.#store.transaction(() => this.#event(session, 'session.launched', body, record.run));
     this.#runs.set(key, session);
@@ -5386,6 +5545,54 @@ export class Broker {
         return { ended: ended.map((h) => ({ thread: h.thread, session: h.session, run: h.holder_run })) };
       }
       this.#processingGate(s, request.verb);
+      if (request.verb === 'request.workspace.console') {
+        if (!s.console || s.human !== this.#business(s.business).human) fail('human-required');
+        keys(args, ['request'], ['request']);
+        if (!this.#requests || !this.#workspaceRead) fail('request-not-configured');
+        return Promise.resolve().then(async () => {
+          const before = await this.#requests.get(s, structuredClone(args));
+          this.#requestAuthorize(s, before, 'draft');
+          const result = await this.#workspaceRead(before);
+          const after = await this.#requests.get(s, structuredClone(args));
+          this.#requestAuthorize(s, after, 'draft');
+          if (before.revision !== after.revision) fail('request-revision-conflict');
+          this.#secretCheck(result);
+          return result;
+        }).catch(e => { throw this.#refused(s, e instanceof BusError ? e : new BusError(e.code ?? 'request-failed'), request); });
+      }
+      if (request.verb === 'system-types.console') {
+        if (!s.console || s.human !== this.#business(s.business).human) fail('human-required');
+        keys(args, ['project']);
+        if (!this.#organization) fail('not-configured');
+        const enabled = this.#organization(s.business, 'system-types.current', {}, s.human);
+        if (!Array.isArray(enabled)) fail('not-configured');
+        let project = null;
+        if (args.project !== undefined) {
+          const id = identifier(args.project);
+          if (!this.#store.get('SELECT 1 FROM projects WHERE id=? AND business=?', id, s.business)) fail('project-not-found');
+          const row = this.#store.get('SELECT types FROM project_system_types WHERE business=? AND project=? ORDER BY seq DESC LIMIT 1', s.business, id);
+          const selected = row ? JSON.parse(row.types) : [];
+          project = { project: id, selected, active: selected.filter(x => enabled.includes(x)), inactive: selected.filter(x => !enabled.includes(x)) };
+        }
+        return Promise.resolve(this.#organization(s.business, 'system-types.installed', {}, s.human))
+          .then(installed => {
+            if (!Array.isArray(installed)) fail('not-configured');
+            const result = { installed, enabled, project };
+            this.#secretCheck(result);
+            return result;
+          });
+      }
+      if (request.verb === 'project.remote.get.console' || request.verb === 'project.remote.set.console') {
+        if (!s.console || s.human !== this.#business(s.business).human) fail('human-required');
+        if (!this.#organization) fail('not-configured');
+        const write = request.verb === 'project.remote.set.console';
+        keys(args, write ? ['project', 'revision', 'remote'] : ['project'], write ? ['project', 'revision', 'remote'] : ['project']);
+        try { return this.#organization(s.business, request.verb, args, s.human); }
+        catch (e) {
+          const allowed = ['project-remote-unknown', 'project-remote-library', 'project-remote-invalid', 'project-remote-configured', 'project-remote-protected', 'revision-conflict', 'organization-busy', 'human-required'];
+          fail(allowed.includes(e.code) ? e.code : 'outcome-unknown');
+        }
+      }
       if (['prd.revoke.console','request.mode.console','request.draft.console'].includes(request.verb)) {
         if (!s.console || s.human !== this.#business(s.business).human) fail('human-required');
         if (!this.#requests?.catalog) fail('request-not-configured');
@@ -5409,7 +5616,24 @@ export class Broker {
         const method = REQUEST_VERBS[request.verb];
         return Promise.resolve().then(() => this.#requests[method](s, structuredClone(args)))
           .then(result => { this.#secretCheck(result); if (request.verb === 'prd.submit') this.#scheduleRequests(); return result; })
-          .catch(e => { throw this.#refused(s, e instanceof BusError ? e : new BusError(e.code ?? 'request-failed'), request); });
+          .catch(e => {
+            // advance rolls its transaction back on refusal. Publish the actionable PM
+            // message afterwards, once per revision and coverage set, through the normal
+            // bus route: the sandbox tool socket only exposes the refusal code.
+            // The notice is diagnostic only: if any step of it fails, its transaction rolls back
+            // and the original refusal and its audit event still go out. Retry publishes it.
+            if (request.verb === 'request.advance' && e instanceof BusError && e.planningCoverage) {
+              try {
+                const state = this.#requestJournal.readRequest(s.business, args.request);
+                const body = `Planning coverage for request ${state.request}, revision ${state.revision}:\n${e.reason}`;
+                this.#store.transaction(() => {
+                  if (!this.#store.get('SELECT 1 FROM messages WHERE business=? AND from_role=? AND to_role=? AND body=?', s.business, NOTICE_ROLE, s.role, body))
+                    this.#continuationMessage(state, s.role, body, this.#continuationContext(state, s.role));
+                });
+              } catch { /* refusal below is the operation's result */ }
+            }
+            throw this.#refused(s, e instanceof BusError ? e : new BusError(e.code ?? 'request-failed'), request);
+          });
       }
       // Row 213 (C2-08, Case 2 design 5.1 M6): a creative role has no free-text decision channel. It
       // runs before the spec-cited branch below, so a cited raise refuses too.
@@ -5462,7 +5686,10 @@ export class Broker {
         if (!role && !s.human && !s.tester) fail("human-required");
         if (!this.#organization) fail("not-configured");
         if (["limits", "plugins", "instances", "routes", "organization.revision"].includes(request.verb)) keys(args, []);
-        else if (request.verb === "plugins.set") keys(args, ["revision", "plugins", "usage"], ["revision", "plugins"]);
+        else if (request.verb === "plugins.set") {
+          keys(args, ["revision", "plugins", "usage"], ["revision", "plugins"]);
+          if (s.tester && object(args.plugins) && (Object.hasOwn(args.plugins, 'model-provider') || Object.hasOwn(args.plugins, 'system-type'))) fail('human-required');
+        }
         // Row 165 (#1662): instances.set is human-only and outside ORGANIZATION_KEYS, so
         // organization.set and the chief of staff's tool never reach it (sage-0918).
         else if (request.verb === "instances.set") {
@@ -5519,10 +5746,18 @@ export class Broker {
         try {
           result = revisionRead
             ? { revision: this.#organization(s.business, "limits", {}, actor).revision }
-            : this.#organization(s.business, role ? "limits.set" : request.verb, args, actor);
+            : role
+              ? this.#organization(s.business, "limits.set", args, actor, { beforeWrite: () => this.#checkAuthority(s, "organization.change") })
+              : this.#organization(s.business, request.verb, args, actor);
         } catch (e) {
           this.#organizationFail(e, request.verb);
         }
+        if (result?.then) {
+          return result.then(value => {
+            if (role && !revisionRead) this.#store.transaction(() => this.#consumeAuthority(s, "organization.change"));
+            this.#secretCheck(value); return value;
+          }).catch(e => this.#organizationFail(e, request.verb));
+        }
         if (role && !revisionRead) this.#store.transaction(() => this.#consumeAuthority(s, "organization.change"));
         this.#secretCheck(result);
         // Row 194 (#1692, D1): the read gains each instance's running runs, from the bus claims, and
@@ -5751,7 +5986,7 @@ export class Broker {
   // outcome-unknown: the write may have committed.
   #organizationFail(e, verb) {
     // Row 333 R3 (#1831): key-quota-no-model-key passes through with the other proxy key codes.
-    if (['proxy-revoke-revision-conflict', 'proxy-key-issue-failed', 'proxy-key-revoking', 'proxy-key-refused', 'key-quota-no-model-key', 'proxy-down', 'proxy-open'].includes(e.code)) fail(e.code);
+    if (['proxy-revoke-revision-conflict', 'proxy-key-issue-failed', 'proxy-key-revoking', 'proxy-key-refused', 'key-quota-no-model-key', 'proxy-down', 'proxy-open', 'proxy-uncertain'].includes(e.code)) fail(e.code);
     // Row 239 (#1745): the writer marks an error raised after a fire's or a delete's revoke ran, so
     // the human reads that the tokens may already be revoked. Without the mark, today's code.
     if (e.revoked) fail(e.code === "revision-conflict" ? "revision-conflict-revoked" : "outcome-unknown-revoked");
@@ -5766,6 +6001,7 @@ export class Broker {
     if ((verb === "instance.fire" || verb === "instances.set") && e.code === "credential-revoke-failed") fail(e.code);
     // Row 65: the route checks every write of an instance's route vars runs.
     if (["harness-off", "harness-refused", "thinking-unsupported"].includes(e.code)) fail(e.code);
+    if (['model-key-collision', 'model-provider-unavailable', 'model-catalogue-unavailable', 'model-harness-incompatible'].includes(e.code)) fail(e.code);
     // The routing table names a model the table lacks; the older verbs keep invalid-request.
     if (verb === "routes.set" && e.code === "unknown-model") fail(e.code);
     if (e.name === "BusinessError" || e.code === "invalid-request" || e.code === "unknown-model") {
@@ -5906,7 +6142,9 @@ export class Broker {
         return result;
       });
     } catch (e) {
-      throw this.#refused(s, ProjectFailure && e instanceof ProjectFailure ? new BusError(e.code) : e, request);
+      throw this.#refused(s, ProjectFailure && e instanceof ProjectFailure
+        ? new BusError(e.code, verb === 'record.write' && e.code === 'project-record-invalid'
+          ? e.message.slice(`${e.code}: `.length) : undefined) : e, request);
     }
   }
   // Row 148 (#1642): the Console's reads and saves of the spec and docs. Human only: an agent
@@ -6367,6 +6605,7 @@ export class Broker {
         // Row 121: a thread run claims its thread, so idle threads hold nothing (REQ-THREAD-2).
         // Row 264a (#1769): the claim is the run's session's, with the session's next generation.
         if (s.thread) {
+          if (this.#archived(s.business, this.#threadRow(s, s.thread).project)) fail('project-archived');
           if (this.#store.get("SELECT 1 FROM thread_claims WHERE session=? AND holder_run=? AND op='revoke' LIMIT 1", s.session, s.run))
             fail('run-revoked');
           // FED R4 (design 3.7): no run takes a thread the access file no longer covers.
@@ -6834,7 +7073,7 @@ export class Broker {
         const cancelled = this.#route(s.business, mid, to, thread);
         const request = s.human
           ? this.#event(s, 'human.input', { kind: 'instruction', message: mid }, mid)
-          : null;
+          : this.#request(s.business, this.#store.get('SELECT * FROM messages WHERE id=? AND business=?', mid, s.business));
         // Row 271 (264d, B1): kept as evidence and cancelled at arrival, so it waits for nobody.
         if (cancelled) return { id: mid, request, cancelled };
         const waiting = this.#waiting(s, mid, to, thread);
@@ -6875,7 +7114,8 @@ export class Broker {
             s.human || s.tester ? null : this.#own(s),
             s.human || s.tester ? 'cli' : 'broker',
           );
-        return rows.map((m) => ({ ...m, request: this.#request(s.business, m) }));
+        return rows.map((m) => ({ ...m, request: this.#request(s.business, m),
+          ...(!s.human && !s.tester && m.in_reply_to ? { in_reply_to_class: this.#store.get('SELECT class FROM messages WHERE business=? AND id=?', s.business, m.in_reply_to)?.class ?? null } : {}) }));
       }
       case 'message.read': {
         keys(a, ['id'], ['id']);
@@ -6973,11 +7213,15 @@ export class Broker {
           { task_ref: a.task_ref, project: push.project, ref: push.ref, commit: a.commit, to: a.to, message: mid, held },
           a.task_ref,
         );
+        const created = this.#store.all("SELECT body FROM events WHERE business=? AND kind='task.created' AND subject=? ORDER BY seq DESC", s.business, a.task_ref)
+          .map(row => JSON.parse(row.body));
+        const scoped = created.some(c => this.#requests?.reviewScope?.(s.business, c.request, a.task_ref, push.project, c.requirement_snapshot, s.role, a.to));
+        const contract = scoped ? `\n\nFor this lifecycle review, before the verdict use write_record to write a docs/*.md verification document whose entire content is raw JSON, without Markdown fences or prose: {"version":1,"task_ref":"${a.task_ref}","review_request":"${eid}","commit":"${a.commit}","results":"nonempty results"}. Then use review_verdict with a raw JSON body containing exactly {"verification_record":{"path":"...","commit":"..."},"results":"..."}; use the write_record receipt path and commit, and the same results string. You must independently inspect and test the commit.` : '';
         this.#reviewMessage(s, mid, {
           to: a.to,
           cls: 'REVIEW-REQUEST',
           decision: withinRole ? null : (a.decision ?? null),
-          body: `Review request ${eid} for ${a.task_ref}: commit ${a.commit} on ${push.ref} in project ${push.project}. Fetch it with fetch_review, then answer with review_verdict citing this request.${a.note ? '\n\n' + a.note : ''}`,
+          body: `Review request ${eid} for ${a.task_ref}: commit ${a.commit} on ${push.ref} in project ${push.project}. Fetch it with fetch_review, then answer with review_verdict citing this request.${contract}${a.note ? '\n\n' + a.note : ''}`,
         });
         return { request: eid, message: mid, commit: a.commit, ref: push.ref, held };
       }
@@ -7329,11 +7573,62 @@ export class Broker {
       }
       case 'project.list': {
         if (!s.tester && !s.user) this.#human(s);
-        keys(a, []);
-        // FED R3 (design 3.5): a user lists granted projects only.
+        keys(a, ['includeArchived']);
+        if (a.includeArchived !== undefined && a.includeArchived !== true) fail('invalid-request');
+        // #797 MVP3: archived projects are hidden unless the caller asks for them, and then each
+        // carries `archived: true`. FED R3 (design 3.5) still trims a user to granted projects.
         return this.#store
-          .all('SELECT id,at,name,repo FROM projects WHERE business=? ORDER BY seq', s.business)
-          .filter((p) => !s.user || this.#granted(s, 'project.list', p.id, null));
+          .all(
+            `SELECT p.id,p.at,p.name,p.repo,
+              (SELECT pa.op FROM project_archives pa WHERE pa.business=p.business AND pa.project=p.id ORDER BY pa.seq DESC LIMIT 1) AS state
+             FROM projects p WHERE p.business=? ORDER BY p.seq`,
+            s.business,
+          )
+          .filter((p) => a.includeArchived === true || p.state !== 'archive')
+          .filter((p) => !s.user || this.#granted(s, 'project.list', p.id, null))
+          .map((p) => (p.state === 'archive' ? { id: p.id, at: p.at, name: p.name, repo: p.repo, archived: true } : { id: p.id, at: p.at, name: p.name, repo: p.repo }));
+      }
+      case 'project.system-types':
+      case 'project.system-types.set': {
+        this.#human(s);
+        const write = verb === 'project.system-types.set';
+        keys(a, write ? ['project', 'systemTypes'] : ['project'], write ? ['project', 'systemTypes'] : ['project']);
+        const project = identifier(a.project);
+        if (!this.#store.get('SELECT 1 FROM projects WHERE id=? AND business=?', project, s.business)) fail('project-not-found');
+        // When configured, read the trusted file each time; a stale bus snapshot must not reactivate a disabled type.
+        const enabled = this.#organization ? this.#organization(s.business, 'system-types.current', {}, s.human) : (b.plugins?.['system-type'] ?? []);
+        if (!Array.isArray(enabled)) fail('not-configured');
+        if (write) {
+          if (!Array.isArray(a.systemTypes) || a.systemTypes.some(x => typeof x !== 'string') || new Set(a.systemTypes).size !== a.systemTypes.length) fail('invalid-request');
+          if (a.systemTypes.some(x => !enabled.includes(x))) fail('system-type-not-enabled');
+          this.#store.run('INSERT INTO project_system_types(at,business,project,types,by) VALUES(?,?,?,?,?)', this.#now(), s.business, project, JSON.stringify(a.systemTypes), this.#owner(s));
+        }
+        const row = this.#store.get('SELECT types FROM project_system_types WHERE business=? AND project=? ORDER BY seq DESC LIMIT 1', s.business, project);
+        const selected = row ? JSON.parse(row.types) : [];
+        return { project, selected, active: selected.filter(x => enabled.includes(x)), inactive: selected.filter(x => !enabled.includes(x)) };
+      }
+      // #797 MVP3 (owner report 2026-11-06): the owner's reversible retirement of a project. The
+      // human gate is project.create's minus the tester carve-out: tester, user and agent sessions
+      // are refused here. Each verb appends one project_archives row (the audit trail) and deletes
+      // nothing; a repeat of the state the project already holds refuses.
+      case 'project.archive':
+      case 'project.unarchive': {
+        this.#human(s);
+        keys(a, ['project'], ['project']);
+        const project = identifier(a.project);
+        const row = this.#store.get('SELECT name FROM projects WHERE id=? AND business=?', project, s.business);
+        if (!row) fail('project-not-found');
+        const archive = verb === 'project.archive';
+        if (this.#archived(s.business, project) === archive) fail(archive ? 'project-already-archived' : 'project-not-archived');
+        this.#store.run(
+          'INSERT INTO project_archives(at,business,project,op,by) VALUES(?,?,?,?,?)',
+          this.#now(),
+          s.business,
+          project,
+          archive ? 'archive' : 'unarchive',
+          this.#owner(s),
+        );
+        return { project, archived: archive };
       }
       // C2-09b: canonical per-instance threads form one human-owned project room.
       case 'room.open':
@@ -7346,6 +7641,9 @@ export class Broker {
           sending ? ['project', 'body'] : ['project']);
         const project = identifier(a.project);
         if (!this.#store.get('SELECT 1 FROM projects WHERE id=? AND business=?', project, s.business)) fail('project-not-found');
+        // #797 MVP3: an archived project takes no new room threads and no new requests; reading it
+        // (room.read) and every existing record stay open.
+        if ((opening || sending) && this.#archived(s.business, project)) fail('project-archived');
         const members = Object.keys(b.roles).filter((instance) => this.#threaded(s.business, instance)).sort();
         if (!members.length) fail('thread-instance-missing');
         const owner = this.#owner(s);
@@ -7446,6 +7744,8 @@ export class Broker {
         }
         if (!this.#store.get('SELECT 1 FROM projects WHERE id=? AND business=?', identifier(a.project), s.business))
           fail('project-not-found');
+        // #797 MVP3: an archived project refuses new threads (and the room's requests, above).
+        if (this.#archived(s.business, identifier(a.project))) fail('project-archived');
         // The human selects an instance; omission is compatible only with one candidate.
         if (!instances.length || (a.instance !== undefined && !instances.includes(instance))) fail('thread-instance-missing');
         if (a.instance === undefined && instances.length > 1) fail('thread-instance-ambiguous');
@@ -7492,6 +7792,7 @@ export class Broker {
         if (!s.tester && !s.user) this.#human(s);
         keys(a, ['thread', 'session'], ['thread']);
         const t = this.#grantedThread(s, 'thread.open', this.#thread(s, a.thread));
+        if (this.#archived(s.business, t.project)) fail('project-archived');
         const session = this.#threadSession(t, a.session);
         // Row 271 (264d, D7 step 1): a session being cleared, or a retired one, isn't opened.
         this.#sessionFence(session);
@@ -7504,6 +7805,9 @@ export class Broker {
         if (!s.tester && !s.user) this.#human(s);
         keys(a, ['thread', 'session', 'body', 'class'], ['thread', 'body']);
         const t = this.#grantedThread(s, 'thread.send', this.#thread(s, a.thread));
+        // #797 MVP3: an archived project refuses new requests; the thread and its messages stay
+        // readable (thread.list, thread.messages).
+        if (this.#archived(s.business, t.project)) fail('project-archived');
         const session = this.#threadSession(t, a.session);
         // Row 271 (264d, D7 step 1): nor sent to, by name or as the default.
         this.#sessionFence(session);
@@ -7647,6 +7951,7 @@ export class Broker {
         identifier(a.op);
         if (!Number.isSafeInteger(a.revision) || a.revision < 0) fail('invalid-request');
         const t = this.#thread(s, a.thread);
+        if (this.#archived(s.business, t.project)) fail('project-archived');
         const session = this.#threadSession(t, a.session);
         if (a.confirm !== true) fail('confirm-required');
         const digest = this.#opDigest(s, 'session.clear', t.id, session, a.revision, a.op);
@@ -7799,7 +8104,31 @@ export class Broker {
       business,
       m.id,
     );
-    if (own || m.class !== 'DECISION' || m.from_role !== 'human' || !m.decision) return own?.id ?? null;
+    if (own) return own.id;
+    // Only a chain of actual recipient replies can carry an owner's instruction.
+    // Message bodies and unlinked role messages never confer provenance.
+    if (m.in_reply_to && m.from_role !== 'human') {
+      let child = m; const seen = new Set([m.id]), scopes = [];
+      while (child.in_reply_to && !seen.has(child.in_reply_to)) {
+        const scope = this.#store.get('SELECT thread,session FROM message_threads WHERE message=?', child.id);
+        if (scope) scopes.push(scope);
+        const parent = this.#store.get('SELECT * FROM messages WHERE business=? AND id=?', business, child.in_reply_to);
+        if (!parent || parent.to_role !== child.from_role) break;
+        const roles = this.#business(business).roles;
+        if (![parent.from_role, parent.to_role, child.from_role, child.to_role].every(role => role === 'human' || Object.hasOwn(roles, role))) break;
+        try { this.#checkMessaging(business, parent.from_role, parent.to_role); this.#checkMessaging(business, child.from_role, child.to_role); } catch { break; }
+        seen.add(parent.id);
+        if (parent.from_role === 'human') {
+          const thread = this.#store.get('SELECT mt.thread,mt.session,t.owner FROM message_threads mt JOIN threads t ON t.id=mt.thread WHERE mt.message=?', parent.id);
+          if ((thread && thread.owner !== this.#business(business).human) || scopes.some(scope => !thread || scope.thread !== thread.thread || scope.session !== thread.session)) break;
+          const source = this.#store.get("SELECT id FROM events WHERE business=? AND kind='human.input' AND actor_role IS NULL AND actor_run IS NULL AND subject=? AND json_extract(body,'$.kind')='instruction' AND json_extract(body,'$.message')=? ORDER BY seq LIMIT 1", business, parent.id, parent.id);
+          if (source) return source.id;
+          break;
+        }
+        child = parent;
+      }
+    }
+    if (m.class !== 'DECISION' || m.from_role !== 'human' || !m.decision) return null;
     return (
       this.#store.get(
         "SELECT id FROM events WHERE business=? AND kind='human.input' AND subject=? AND json_extract(body,'$.kind')='answer' AND json_extract(body,'$.op') IN ('resolved','withdrawn') ORDER BY seq LIMIT 1",
@@ -7888,8 +8217,8 @@ export class Broker {
     if (told) this.#notice(s.business, mid, by, to, sender, launchable);
     return { role: to, launcher: by, told, launcherRunning: by === null ? null : this.#recipient(s.business, by, null) !== null, launchable };
   }
-  // One notice per waiting message: only message.send calls this, once for the message it stores, so
-  // a re-route at a claim or a broker restart never sends another. Its class is RESULT: the runner
+  // Ordinary messages get one notice; continuations may retry on a target prerequisite change.
+  // Its class is RESULT: the runner
   // takes a turn on it and sends no automatic reply, which NOTICE_ROLE could not receive.
   #notice(business, mid, by, to, sender, launchable, continuation = null) {
     const nid = randomUUID();

packages/bus/src/business.mjs

@@ -1,27 +1,2 @@
-import { BusError } from './broker.mjs';
-import { isHostKind } from '../../business/src/vocabulary.mjs';
-// Adapt S1's validated loadBusiness + resolveInstance outputs, without loading or writing files.
-export function busBusiness(business, resolved) {
-  if (!business || typeof business.id !== 'string' || !business.roles || !resolved)
-    throw new BusError('invalid-business');
-  const out = structuredClone(business);
-  for (const role of Object.keys(out.roles)) {
-    const r = resolved[role];
-    if (
-      !r ||
-      r.business !== business.id ||
-      r.instance !== role ||
-      r.definition !== out.roles[role].definition ||
-      !r.limits?.authority
-    )
-      throw new BusError('invalid-resolution');
-    out.roles[role].authority = structuredClone(r.limits.authority);
-    // REQ-HARN-2: "web" in the resolved tool limit is the grant for the broker's web verbs.
-    out.roles[role].web = (r.limits.tools ?? []).includes('web');
-    // Row 210 (#1707, design D5): resolveInstance leaves host.<id> keys out of the session's
-    // credentials. The bus child uses them, so they come back here from the business entry.
-    const hostKeys = Object.entries(business.roles[role].credentials ?? {}).filter(([kind]) => isHostKind(kind));
-    out.roles[role].credentials = { ...structuredClone(r.credentials ?? {}), ...structuredClone(Object.fromEntries(hostKeys)) };
-  }
-  return out;
-}
+// Old path of organization-context.mjs (rename design r2, stage B): busBusiness is busOrganization.
+export { busOrganization as busBusiness } from './organization-context.mjs';

packages/bus/src/client.mjs

@@ -41,7 +41,7 @@ export class Client {
           const r = JSON.parse(input.toString('utf8'));
           if (r.ok === true) end(null, r.result);
           else if (r.ok === false && typeof r.error === 'string' && /^[a-z-]{1,64}$/.test(r.error))
-            // C2-06 (sage-3599): the citation guard's reason, when the envelope has one.
+            // Preserve a bounded reason when an explicitly scoped refusal has one.
             end(new BusError(r.error, typeof r.reason === 'string' ? r.reason.slice(0, 300) : undefined));
           else end(new BusError('invalid-response'));
         } catch {

packages/bus/src/credential-verbs.mjs

@@ -1,5 +1,5 @@
 import { BusError } from './broker.mjs';
-import { isHostKind } from '../../business/src/vocabulary.mjs';
+import { isHostKind } from '../../organization/src/vocabulary.mjs';
 // Row 199 (#1697, design section 6): issue, rotate, revoke and delete of one agent's credentials, for
 // the broker's human-only verbs. The broker checks the session, the keys and a running claim first.
 // Each verb leaves one receipt in the organization's changes.jsonl: the actor and a detail naming the

packages/bus/src/credentials.mjs

@@ -6,7 +6,7 @@ import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
 import { createHash } from 'node:crypto';
 import { isDeepStrictEqual } from 'node:util';
 import { BusError } from './broker.mjs';
-import { credentialKind, isHostKind, ID_PATTERN } from '../../business/src/vocabulary.mjs';
+import { credentialKind, isHostKind, ID_PATTERN } from '../../organization/src/vocabulary.mjs';
 const deny = (code) => {
   throw new BusError(code);
 };
@@ -424,7 +424,7 @@ export class Credentials {
     if (service === 'model') {
       let m;
       try { m = JSON.parse(token); } catch { deny('credential-format'); }
-      const keyOk = k => typeof k === 'string' && /^msk-[a-z0-9]+-[A-Za-z0-9_-]{43}$/.test(k);
+      const keyOk = k => typeof k === 'string' && /^(?:msk-[a-z0-9]+|mso-[a-f0-9]{12}-[a-z0-9][a-z0-9._-]{0,63}-key)-[A-Za-z0-9_-]{43}$/.test(k);
       const keyId = k => createHash('sha256').update(k).digest('hex').slice(0, 12);
       const instant = s => typeof s === 'string' && !Number.isNaN(Date.parse(s)) && new Date(s).toISOString() === s;
       // Row 333 R3 (#1831): `previous` lists the agent's earlier key ids, ids only, oldest first, at

packages/bus/src/gitea-grant.mjs

@@ -17,8 +17,8 @@ import { join } from 'node:path';
 import { BusError, GRANT_EVIDENCE } from './broker.mjs';
 import { day, privateDir } from './credentials.mjs';
 import { definitionSha256, grantTag } from './host-grant.mjs';
-import { canonicalJson } from '../../business/src/util.mjs';
-import { forkUrl, giteaName, ID_PATTERN, parseGiteaUrl, CREATIVE_DEFINITIONS } from '../../business/src/vocabulary.mjs';
+import { canonicalJson } from '../../organization/src/util.mjs';
+import { forkUrl, giteaName, ID_PATTERN, parseGiteaUrl, CREATIVE_DEFINITIONS } from '../../organization/src/vocabulary.mjs';
 
 const deny = (code) => {
   throw new BusError(code);

packages/bus/src/host-grant.mjs

@@ -17,9 +17,9 @@ import { dirname, join } from 'node:path';
 import { BusError } from './broker.mjs';
 import { day, parseHostKey, privateDir } from './credentials.mjs';
 import { runHost, HOST_LIMITS } from './host-run.mjs';
-import { checkAddress, checkCommands, HOST_KEY, USER } from '../../business/src/hosts.mjs';
-import { canonicalJson } from '../../business/src/util.mjs';
-import { HOST_ID, ID_PATTERN } from '../../business/src/vocabulary.mjs';
+import { checkAddress, checkCommands, HOST_KEY, USER } from '../../organization/src/hosts.mjs';
+import { canonicalJson } from '../../organization/src/util.mjs';
+import { HOST_ID, ID_PATTERN } from '../../organization/src/vocabulary.mjs';
 
 const deny = (code) => {
   throw new BusError(code);

packages/bus/src/index.mjs

@@ -2,5 +2,6 @@ export { Broker, BusError, ACTIONS, TASK_VERBS } from './broker.mjs';
 export { startBroker } from './runtime.mjs';
 export { Client } from './client.mjs';
 export { views } from './views.mjs';
+export { busOrganization } from './organization-context.mjs';
 export { busBusiness } from './business.mjs';
 export { parseAddress } from './address.mjs';

packages/bus/src/migrations/3s-3t.sql

@@ -0,0 +1,21 @@
+-- #797 MVP3: the owner's reversible project archive. A project's state is the op of its latest
+-- row, and the rows are the audit trail (who archived or restored it, and when). The projects
+-- table itself stays as written; an archived project keeps every record and is never deleted.
+CREATE TABLE project_archives (
+  seq INTEGER PRIMARY KEY AUTOINCREMENT,
+  at TEXT NOT NULL,
+  business TEXT NOT NULL,
+  project TEXT NOT NULL REFERENCES projects(id),
+  op TEXT NOT NULL CHECK (op IN ('archive','unarchive')),
+  by TEXT NOT NULL
+) STRICT;
+CREATE INDEX project_archives_project ON project_archives (business, project, seq);
+CREATE TRIGGER project_archives_no_update BEFORE UPDATE ON project_archives BEGIN SELECT RAISE(ABORT, 'project_archives is append-only'); END;
+CREATE TRIGGER project_archives_no_delete BEFORE DELETE ON project_archives BEGIN SELECT RAISE(ABORT, 'project_archives is append-only'); END;
+CREATE TRIGGER project_archives_no_replace BEFORE INSERT ON project_archives WHEN EXISTS (SELECT 1 FROM project_archives WHERE seq = NEW.seq) BEGIN SELECT RAISE(ABORT, 'project_archives is append-only'); END;
+CREATE TRIGGER project_archives_business BEFORE INSERT ON project_archives
+  WHEN (SELECT business FROM projects WHERE id = NEW.project) IS NOT NEW.business
+  BEGIN SELECT RAISE(ABORT, 'an archive row belongs to its project''s business'); END;
+CREATE TRIGGER project_archives_no_repeat BEFORE INSERT ON project_archives
+  WHEN (SELECT op FROM project_archives WHERE business = NEW.business AND project = NEW.project ORDER BY seq DESC LIMIT 1) = NEW.op
+  BEGIN SELECT RAISE(ABORT, 'a project archive row changes state'); END;

packages/bus/src/migrations/3t-3u.sql

@@ -0,0 +1,16 @@
+-- Per-project selections are a human-authored append-only settings trail.
+CREATE TABLE project_system_types (
+  seq INTEGER PRIMARY KEY AUTOINCREMENT,
+  at TEXT NOT NULL,
+  business TEXT NOT NULL,
+  project TEXT NOT NULL REFERENCES projects(id),
+  types TEXT NOT NULL,
+  by TEXT NOT NULL
+) STRICT;
+CREATE INDEX project_system_types_project ON project_system_types (business, project, seq);
+CREATE TRIGGER project_system_types_no_update BEFORE UPDATE ON project_system_types BEGIN SELECT RAISE(ABORT, 'project_system_types is append-only'); END;
+CREATE TRIGGER project_system_types_no_delete BEFORE DELETE ON project_system_types BEGIN SELECT RAISE(ABORT, 'project_system_types is append-only'); END;
+CREATE TRIGGER project_system_types_no_replace BEFORE INSERT ON project_system_types WHEN EXISTS (SELECT 1 FROM project_system_types WHERE seq = NEW.seq) BEGIN SELECT RAISE(ABORT, 'project_system_types is append-only'); END;
+CREATE TRIGGER project_system_types_business BEFORE INSERT ON project_system_types
+  WHEN (SELECT business FROM projects WHERE id = NEW.project) IS NOT NEW.business
+  BEGIN SELECT RAISE(ABORT, 'a system types row belongs to its project business'); END;

packages/bus/src/model-catalogue.mjs

@@ -0,0 +1,68 @@
+// In-memory only; a new loader is made for every refresh so disabled or refused
+// modules can never inherit a loader's last-good authority.
+import { createLoader } from '../../plugins/src/loader.mjs';
+const validId = s => typeof s === 'string' && /^[a-z0-9][a-z0-9._-]{0,63}$/.test(s);
+const validModel = s => typeof s === 'string' && /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,199}$/.test(s);
+const disabled = () => ({ status: 'disabled', observedAt: null, models: [], notices: [] });
+export function createModelCatalogue({ client, settings, now = Date.now, makeLoader = createLoader, proxyLock = null }) {
+  const cache = new Map(), flights = new Map(); let generation = 0, writing = 0;
+  function invalidate() { generation++; cache.clear(); }
+  function begin() { writing++; invalidate(); }
+  function end() { writing = Math.max(0, writing - 1); invalidate(); }
+  function off(id) {
+    const names = settings(id)?.['model-provider'];
+    if (names === undefined || (Array.isArray(names) && names.length === 0)) return true;
+    if (!Array.isArray(names) || names.length > 32 || names.some(n => !validId(n)) || new Set(names).size !== names.length) throw Error();
+    return false;
+  }
+  async function refresh(id, previous) {
+    try {
+      if (off(id)) return disabled();
+      const names = [...settings(id)['model-provider']];
+      const loader = makeLoader({ log: () => {} });
+      const result = await loader.load({ 'model-provider': names });
+      if (result.refused.length || loader.snapshot('model-provider').length !== names.length) throw Error();
+      const c = client(); if (!c) throw Error();
+      const answers = await Promise.all(loader.snapshot('model-provider').map(async ({ name, module }) => {
+        const answer = await module.catalogue({ listAccounts: () => c.getCredentials(), listModels: name => c.getCredentialModels(name), listGroups: () => c.getUpstreamGroups(), now: () => new Date(now()).toISOString() });
+        if (answer?.status === 'unavailable' && answer.reason === 'model-key-collision') throw Object.assign(Error(), { code: 'model-key-collision' });
+        if (answer?.status !== 'ready' || !Array.isArray(answer.models) || answer.models.length > 10000 || !Array.isArray(answer.notices) || answer.notices.length > 100) throw Error();
+        for (const m of answer.models) {
+          if (!validId(m.key) || m.module !== name || !validId(m.upstream) || !validId(m.provider) || !validModel(m.model) || typeof m.label !== 'string' || m.label.length > 300 || /[\x00-\x1f\x7f]/.test(m.label) || typeof m.available !== 'boolean' || ![null, 'unverified'].includes(m.reason) || !Array.isArray(m.harnesses) || m.harnesses.length > 32 || m.harnesses.some(h => !validId(h))) throw Error();
+        }
+        if (answer.notices.some(n => typeof n !== 'string' || n.length > 300 || /[\x00-\x1f\x7f]/.test(n))) throw Error();
+        return answer;
+      }));
+      const models = answers.flatMap(a => a.models), keys = new Set();
+      for (const m of models) { if (keys.has(m.key)) throw Object.assign(Error(), { code: 'model-key-collision' }); keys.add(m.key); }
+      return { status: 'ready', observedAt: new Date(now()).toISOString(), models, notices: [...new Set(answers.flatMap(a => a.notices))] };
+    } catch (error) {
+      return { status: 'unavailable', observedAt: previous?.observedAt ?? null, models: (previous?.models ?? []).map(m => ({ ...m, available: false, reason: 'proxy-down', harnesses: [] })), notices: [], ...(error.code === 'model-key-collision' ? { reason: error.code } : {}) };
+    }
+  }
+  async function read(id, { fresh = false } = {}) {
+    const unavailable = () => ({ status: 'unavailable', observedAt: null, models: [], notices: [] });
+    let sharedGeneration;
+    try { proxyLock?.assertCertain(); sharedGeneration = proxyLock?.generation(); } catch { return unavailable(); }
+    if (writing) return unavailable();
+    try { if (off(id)) { cache.delete(id); return disabled(); } } catch { return { status: 'unavailable', observedAt: null, models: [], notices: [] }; }
+    const existing = cache.get(id);
+    const fingerprint = JSON.stringify([settings(id)['model-provider'], sharedGeneration]);
+    if (!fresh && existing && existing.fingerprint === fingerprint && now() - existing.time < 30000) return structuredClone(existing.value);
+    const flightKey = `${id}:${fingerprint}:${generation}`;
+    let flight = flights.get(flightKey);
+    if (!flight || fresh) {
+      const at = generation;
+      flight = refresh(id, existing?.value).then(value => {
+        if (generation !== at || JSON.stringify([settings(id)?.['model-provider'], proxyLock?.generation()]) !== fingerprint) return null;
+        if (cache.size >= 128 && !cache.has(id)) cache.delete(cache.keys().next().value);
+        cache.set(id, { time: now(), fingerprint, value }); return value;
+      }).catch(() => null);
+      if (!fresh) { flights.set(flightKey, flight); flight.finally(() => { if (flights.get(flightKey) === flight) flights.delete(flightKey); }); }
+    }
+    const value = await flight;
+    try { proxyLock?.assertCertain(); if (proxyLock?.generation() !== sharedGeneration) return unavailable(); } catch { return unavailable(); }
+    return value ? structuredClone(value) : unavailable();
+  }
+  return { read, invalidate, begin, end };
+}

packages/bus/src/model-keys.mjs

@@ -19,29 +19,39 @@ const withPrevious = (record, ids, retiredAt) => {
   return previous.length ? { ...rest, previous } : rest;
 };
 export class ModelKeys {
-  #credentials; #client; #baseUrl; #prefix; #receipt; #now; #runs; #stopRuns; #grace;
+  #credentials; #client; #baseUrl; #prefix; #receipt; #lock; #org; #now; #runs; #stopRuns; #grace;
   #tail = Promise.resolve(); #ready = false; #failure = 'proxy-down'; #confirmed = new Map();
   constructor({ credentials, client, configDir, baseUrl, receipt = () => {}, now = () => Date.now(),
-    runs = () => [], stopRuns = async () => {}, rotateGraceMinutes = 120 }) {
+    runs = () => [], stopRuns = async () => {}, rotateGraceMinutes = 120, org = null, lock = null }) {
     this.#credentials = credentials; this.#client = client; this.#baseUrl = baseUrl;
-    this.#prefix = `msk-${keyId(configDir)}-`; this.#receipt = receipt; this.#now = now;
+    if ((org === null) !== (lock === null) || (org !== null && !/^[a-z0-9][a-z0-9._-]{0,63}$/.test(org))) fail('proxy-lock-invalid');
+    this.#org = org; this.#lock = lock;
+    this.#prefix = org === null ? `msk-${keyId(configDir)}-` : `mso-${keyId(configDir)}-${org}-`; this.#receipt = receipt; this.#now = now;
     this.#runs = runs; this.#stopRuns = stopRuns; this.#grace = rotateGraceMinutes * 60_000;
   }
   #exclusive(operation) {
-    const result = this.#tail.then(operation);
+    const result = this.#tail.then(async () => {
+      try { return await (this.#lock ? this.#lock.run(operation) : operation()); }
+      catch (error) { if (error.code === 'proxy-uncertain') fail('proxy-uncertain'); throw error; }
+    });
     this.#tail = result.catch(() => {});
     return result;
   }
+  #uncertain() { try { this.#lock.assertCertain(); return false; } catch { return true; } }
+  #ownKey(key) { return key.startsWith(this.#prefix + 'key-') && /^[A-Za-z0-9_-]{43}$/.test(key.slice((this.#prefix + 'key-').length)); }
   #instances() { return this.#credentials.status().filter(s => s.service === 'model').map(s => s.instance); }
   #record(instance) { return this.#credentials.modelRecord(instance); }
   hasRecord(instance) { return this.#record(instance) !== null; }
   assertLaunchable(instance) { this.#launchable(instance); }
   #sentinel(keys) {
-    if (!keys.some(k => k.startsWith(this.#prefix + 'sentinel-') && /^[A-Za-z0-9_-]{43}$/.test(k.slice((this.#prefix + 'sentinel-').length)))) {
+    const matches = keys.filter(k => k.startsWith(this.#prefix + 'sentinel-') && /^[A-Za-z0-9_-]{43}$/.test(k.slice((this.#prefix + 'sentinel-').length)));
+    const registered = this.#org === null ? null : this.#lock.registration(this.#org);
+    if (!matches.length || (this.#org !== null && (matches.length !== 1 || (registered && createHash('sha256').update(matches[0]).digest('hex') !== registered)))) {
       this.#ready = false; this.#failure = 'proxy-open'; fail('proxy-open');
     }
   }
   #launchable(instance) {
+    try { this.#lock?.assertCertain(); } catch { fail('proxy-uncertain'); }
     if (this.#record(instance)?.state === 'revoking') fail('proxy-key-revoking');
     if (!this.#ready) fail(this.#failure);
   }
@@ -58,11 +68,17 @@ export class ModelKeys {
   }
   async #replace(before, after) {
     this.#sentinel(before); this.#sentinel(after);
+    if (this.#lock) {
+      const latest = await this.#client.getKeys();
+      if (!isDeepStrictEqual(latest, before)) fail('proxy-client-response');
+      this.#lock.fence({ org: this.#org, op: 'keys.put' });
+    }
     await this.#client.putKeys(after);
     const confirmed = await this.#client.getKeys();
     this.#sentinel(confirmed);
     const removed = before.filter(k => !after.includes(k));
     if (after.some(k => !confirmed.includes(k)) || removed.some(k => confirmed.includes(k))) fail('proxy-client-response');
+    this.#lock?.confirm();
   }
   async #pollRevoked(keys) {
     const deadline = performance.now() + REVOKE_TIMEOUT_MS;
@@ -88,7 +104,7 @@ export class ModelKeys {
   }
   #captureRevocation(instance) {
     const record = this.#record(instance);
-    if (record?.state !== 'revoking' || [record.key, ...record.retiring.map(r => r.key)].some(key => !key.startsWith(this.#prefix))) fail('credential-revoke-failed');
+    if (record?.state !== 'revoking' || [record.key, ...record.retiring.map(r => r.key)].some(key => this.#org === null ? !key.startsWith(this.#prefix) : !this.#ownKey(key))) fail('credential-revoke-failed');
     return { record, snapshot: this.#credentials.captureModelRevocation(instance) };
   }
   #confirmRevocation(instance, proof) {
@@ -101,15 +117,34 @@ export class ModelKeys {
     return this.#exclusive(async () => {
       this.#ready = false;
       try {
-        const before = await this.#client.getKeys(); this.#sentinel(before);
+        let before = await this.#client.getKeys();
+        const sentinels = () => before.filter(k => k.startsWith(this.#prefix + 'sentinel-') && /^[A-Za-z0-9_-]{43}$/.test(k.slice((this.#prefix + 'sentinel-').length)));
+        const registered = this.#org === null ? null : this.#lock.registration(this.#org);
+        if (this.#org !== null && (sentinels().length > 1 || (registered && (sentinels().length !== 1 || createHash('sha256').update(sentinels()[0]).digest('hex') !== registered)))) fail('proxy-open');
+        if (this.#org !== null && sentinels().length === 0) {
+          const sentinel = this.#prefix + 'sentinel-' + randomBytes(32).toString('base64url');
+          const latest = await this.#client.getKeys();
+          if (!isDeepStrictEqual(latest, before)) fail('proxy-client-response');
+          this.#lock.fence({ org: this.#org, op: 'sentinel.register' });
+          await this.#client.putKeys([...before, sentinel]);
+          const confirmed = await this.#client.getKeys();
+          if (!confirmed.includes(sentinel) || before.some(k => !confirmed.includes(k))) fail('proxy-client-response');
+          this.#lock.register(this.#org, sentinel);
+          this.#lock.confirm();
+          this.#receipt({ action: 'proxy.sentinel.registered', org: this.#org });
+          before = confirmed;
+        }
+        this.#sentinel(before);
+        if (this.#org !== null && !registered) this.#lock.register(this.#org, sentinels()[0]);
         const records = this.#instances().map(instance => ({ instance, record: this.#record(instance) })).filter(e => e.record);
         const retained = records.filter(e => e.record.state !== 'revoking').flatMap(e => [e.record.key, ...e.record.retiring.map(r => r.key)]);
+        if (this.#org !== null && retained.some(key => !this.#ownKey(key))) fail('proxy-open');
         const revoking = records.filter(e => e.record.state === 'revoking');
         const proofs = new Map(revoking.map(({ instance }) => { this.#confirmed.delete(instance); return [instance, this.#captureRevocation(instance)]; }));
         const confirm = () => { for (const [instance, proof] of proofs) this.#confirmRevocation(instance, proof); };
         confirm();
         const intended = revoking.flatMap(e => [e.record.key, ...e.record.retiring.map(r => r.key)]);
-        const removed = before.filter(k => k.startsWith(this.#prefix) && !k.startsWith(this.#prefix + 'sentinel-') && !retained.includes(k));
+        const removed = before.filter(k => (this.#org === null ? k.startsWith(this.#prefix) && !k.startsWith(this.#prefix + 'sentinel-') : this.#ownKey(k)) && !retained.includes(k));
         const after = [...new Set([...before.filter(k => !removed.includes(k) && !intended.includes(k)), ...retained])];
         const added = after.filter(k => !before.includes(k));
         if (added.length || removed.length || intended.length) await this.#replace(before, after);
@@ -125,7 +160,7 @@ export class ModelKeys {
         const receipt = { action: 'proxy.reconcile', addedKeyIds: added.map(keyId), removedKeyIds: [...new Set([...removed, ...intended])].map(keyId) };
         this.#receipt(receipt); return receipt;
       } catch (error) {
-        this.#failure = error.code === 'proxy-open' ? 'proxy-open' : 'proxy-down';
+        this.#failure = error.code === 'proxy-uncertain' || (this.#lock && this.#uncertain()) ? 'proxy-uncertain' : error.code === 'proxy-open' ? 'proxy-open' : 'proxy-down';
         this.#receipt({ action: 'proxy.reconcile', code: this.#failure });
         fail(this.#failure);
       }
@@ -137,8 +172,9 @@ export class ModelKeys {
     let before;
     try { before = currentKeys ?? await this.#client.getKeys(); this.#sentinel(before); }
     catch (error) { if (error.code === 'proxy-open') throw error; fail('proxy-key-issue-failed'); }
+    if (this.#org !== null && old && !this.#ownKey(old.key)) fail('proxy-open');
     if (old && !rotate && before.includes(old.key)) return { baseUrl: this.#baseUrl, key: old.key };
-    const key = this.#prefix + randomBytes(32).toString('base64url');
+    const key = this.#prefix + (this.#org === null ? '' : 'key-') + randomBytes(32).toString('base64url');
     const now = this.#now(), issuedAt = new Date(now).toISOString();
     const date = new Date(now + 30 * 86400_000).toISOString().slice(0, 10);
     const keep = rotate && before.includes(old?.key);
@@ -152,7 +188,8 @@ export class ModelKeys {
       this.#receipt({ action: rotate ? 'proxy.key.rotated' : 'proxy.key.issued', keyIds: [keyId(key)], instance });
       return { baseUrl: this.#baseUrl, key };
     } catch (error) {
-      if (error.code === 'proxy-open') throw error;
+      if (error.code === 'proxy-open' || error.code === 'proxy-uncertain') throw error;
+      if (this.#lock && this.#uncertain()) fail('proxy-uncertain');
       fail('proxy-key-issue-failed');
     }
   }
@@ -205,10 +242,11 @@ export class ModelKeys {
       this.#credentials.prepareModelCompletion(instance, proof.snapshot);
       this.#confirmed.set(instance, proof);
       this.#receipt({ action: 'proxy.key.revoked', keyIds: [record.keyId, ...record.retiring.map(r => r.keyId)], remoteState: 'revoked', localState: 'kept' });
-    } catch { fail('credential-revoke-failed'); }
+    } catch (error) { if (error.code === 'proxy-uncertain' || (this.#lock && this.#uncertain())) fail('proxy-uncertain'); fail('credential-revoke-failed'); }
   }
   prepareRevoke(instance) { return this.#exclusive(() => this.#prepareRevoke(instance)); }
   completeRevoke(instance) {
+    try { this.#lock?.assertCertain(); } catch { fail('proxy-uncertain'); }
     try {
       const record = this.#record(instance), proof = this.#confirmed.get(instance);
       if (!record && !proof) return; // Ordinary no-record/no-supplied-proof idempotence.

packages/bus/src/organization-context.mjs

@@ -0,0 +1,28 @@
+import { BusError } from './broker.mjs';
+import { isHostKind } from '../../organization/src/vocabulary.mjs';
+// Adapt S1's validated loadOrganization (loadBusiness) + resolveInstance outputs, without loading
+// or writing files. The result keeps the v1 business shape and error codes (rename design r2).
+export function busOrganization(business, resolved) {
+  if (!business || typeof business.id !== 'string' || !business.roles || !resolved)
+    throw new BusError('invalid-business');
+  const out = structuredClone(business);
+  for (const role of Object.keys(out.roles)) {
+    const r = resolved[role];
+    if (
+      !r ||
+      r.business !== business.id ||
+      r.instance !== role ||
+      r.definition !== out.roles[role].definition ||
+      !r.limits?.authority
+    )
+      throw new BusError('invalid-resolution');
+    out.roles[role].authority = structuredClone(r.limits.authority);
+    // REQ-HARN-2: "web" in the resolved tool limit is the grant for the broker's web verbs.
+    out.roles[role].web = (r.limits.tools ?? []).includes('web');
+    // Row 210 (#1707, design D5): resolveInstance leaves host.<id> keys out of the session's
+    // credentials. The bus child uses them, so they come back here from the business entry.
+    const hostKeys = Object.entries(business.roles[role].credentials ?? {}).filter(([kind]) => isHostKind(kind));
+    out.roles[role].credentials = { ...structuredClone(r.credentials ?? {}), ...structuredClone(Object.fromEntries(hostKeys)) };
+  }
+  return out;
+}

packages/bus/src/process.mjs

@@ -10,6 +10,7 @@ const LAUNCH_OPS = new Set([
   'recoverLaunch',
   'credentialStatus',
   'modelPreflight',
+  'modelAdmission',
   'modelStall',
   'checkPush',
   'recordPush',
@@ -87,8 +88,9 @@ function launchOp(m) {
   if (m.op === 'request.release') return runtime.requestRelease(m.cap, m.record);
   if (m.op === 'request.manifest') return runtime.requestManifest(m.record);
   if (m.op === 'request.chief') return runtime.requestChief(m.business);
-  if (m.op === 'request.admission') return runtime.admission({ business: m.business, project: m.project });
+  if (m.op === 'request.admission') return runtime.admission({ business: m.business, project: m.project, projects: m.projects, thread: m.thread, session: m.session });
   if (m.op === 'credentialStatus') return runtime.credentialStatus(m.business, m.role);
+  if (m.op === 'modelAdmission') return runtime.modelAdmission(m);
   if (m.op === 'modelPreflight') return runtime.modelPreflight(m);
   if (m.op === 'modelStall') return runtime.modelStall(m);
   // Every LAUNCH_OPS name has its line above. A missing one used to answer as credentialStatus,

packages/bus/src/proxy-lock.mjs

@@ -0,0 +1,147 @@
+// Instance-wide serialization for a single, verified proxy state directory.
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash, randomBytes } from 'node:crypto';
+
+const fail = code => { throw Object.assign(new Error(code), { code }); };
+const pause = ms => new Promise(resolve => setTimeout(resolve, ms));
+const syncDir = dir => { const fd = fs.openSync(dir, 'r'); try { fs.fsyncSync(fd); } finally { fs.closeSync(fd); } };
+
+export function createProxyLock({ stateDir, identity, waitMs = 5000 }) {
+  if (typeof stateDir !== 'string' || !path.isAbsolute(stateDir) || typeof identity !== 'string' || !identity || !Number.isSafeInteger(waitMs) || waitMs < 0) fail('proxy-lock-invalid');
+  try {
+    const stat = fs.lstatSync(stateDir);
+    if (!stat.isDirectory() || stat.isSymbolicLink() || fs.realpathSync(stateDir) !== path.resolve(stateDir) || stat.uid !== process.getuid() || (stat.mode & 0o077)) fail('proxy-lock-invalid');
+  } catch { fail('proxy-lock-invalid'); }
+  const lockFile = path.join(stateDir, 'mosaic-keys.lock');
+  const guard = path.join(stateDir, 'mosaic-keys.reap');
+  const fenceFile = path.join(stateDir, 'mosaic-keys.uncertain');
+  const identityFile = path.join(stateDir, 'mosaic-proxy.identity');
+  const digest = createHash('sha256').update(identity).digest('hex');
+  function readSafe(file) {
+    const stat = fs.lstatSync(file);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.uid !== process.getuid() || (stat.mode & 0o077) || stat.size > 4096) fail('proxy-lock-invalid');
+    return fs.readFileSync(file, 'utf8');
+  }
+  const identityTemp = path.join(stateDir, `.identity-${randomBytes(16).toString('hex')}`);
+  try {
+    const fd = fs.openSync(identityTemp, 'wx', 0o600);
+    try { fs.writeFileSync(fd, digest + '\n'); fs.fsyncSync(fd); } finally { fs.closeSync(fd); }
+    try { fs.linkSync(identityTemp, identityFile); syncDir(stateDir); }
+    catch (error) { if (error.code !== 'EEXIST') throw error; }
+  } catch { fail('proxy-lock-invalid'); }
+  finally { try { fs.unlinkSync(identityTemp); } catch (error) { if (error.code !== 'ENOENT') fail('proxy-lock-invalid'); } }
+  try { if (readSafe(identityFile) !== digest + '\n') fail('proxy-lock-invalid'); } catch { fail('proxy-lock-invalid'); }
+  function assertCertain() {
+    try { fs.lstatSync(fenceFile); } catch (error) { if (error.code === 'ENOENT') return; fail('proxy-uncertain'); }
+    fail('proxy-uncertain');
+  }
+  function reap() {
+    // An orphaned reaper is deliberately not guessed away. It needs operator inspection.
+    try { fs.mkdirSync(guard, { mode: 0o700 }); } catch (error) { if (error.code === 'EEXIST') return false; fail('proxy-lock-uncertain'); }
+    try {
+      let before, owner;
+      try {
+        before = fs.lstatSync(lockFile);
+        owner = JSON.parse(readSafe(lockFile));
+        if (!Number.isSafeInteger(owner.pid) || owner.pid <= 0 || typeof owner.token !== 'string' || !/^[0-9a-f]{32}$/.test(owner.token)) fail('proxy-lock-uncertain');
+      } catch (error) { if (error.code === 'ENOENT') return true; fail('proxy-lock-uncertain'); }
+      try { process.kill(owner.pid, 0); return false; }
+      catch (error) { if (error.code !== 'ESRCH') fail('proxy-lock-uncertain'); }
+      const after = fs.lstatSync(lockFile);
+      if (before.dev !== after.dev || before.ino !== after.ino) fail('proxy-lock-uncertain');
+      fs.unlinkSync(lockFile); syncDir(stateDir); return true;
+    } finally { fs.rmdirSync(guard); }
+  }
+  const generationFile = path.join(stateDir, 'keys.generation');
+  const receiptFile = path.join(stateDir, 'mosaic-keys.receipts.jsonl');
+  function generation() {
+    let value;
+    try { value = readSafe(generationFile); } catch (error) { if (error.code === 'ENOENT') return 0; throw error; }
+    if (!/^(0|[1-9][0-9]*)\n$/.test(value) || !Number.isSafeInteger(Number(value))) fail('proxy-lock-invalid');
+    return Number(value);
+  }
+  function status() {
+    let value;
+    try { value = readSafe(fenceFile); } catch (error) { if (error.code === 'ENOENT') return null; fail('proxy-uncertain'); }
+    try { const entry = JSON.parse(value); return entry && typeof entry === 'object' && !Array.isArray(entry) ? entry : { invalid: true }; }
+    catch { return { invalid: true }; }
+  }
+  function registration(org) {
+    const file = path.join(stateDir, `org-${createHash('sha256').update(org).digest('hex')}.json`);
+    try {
+      const entry = JSON.parse(readSafe(file));
+      if (entry.org !== org || typeof entry.sentinel !== 'string' || !/^[a-f0-9]{64}$/.test(entry.sentinel)) fail('proxy-lock-invalid');
+      return entry.sentinel;
+    } catch (error) { if (error.code === 'ENOENT') return null; fail('proxy-lock-invalid'); }
+  }
+  function register(org, sentinel) {
+    const existing = registration(org), digest = createHash('sha256').update(sentinel).digest('hex');
+    if (existing !== null) { if (existing !== digest) fail('proxy-open'); return; }
+    const file = path.join(stateDir, `org-${createHash('sha256').update(org).digest('hex')}.json`);
+    const temp = path.join(stateDir, `.org-${randomBytes(16).toString('hex')}`);
+    const fd = fs.openSync(temp, 'wx', 0o600);
+    try { fs.writeFileSync(fd, JSON.stringify({ org, sentinel: digest, time: new Date().toISOString() }) + '\n'); fs.fsyncSync(fd); } finally { fs.closeSync(fd); }
+    try { fs.linkSync(temp, file); syncDir(stateDir); } finally { fs.unlinkSync(temp); }
+  }
+  function fence({ org = null, op = 'write' } = {}) {
+    const fd = fs.openSync(fenceFile, 'wx', 0o600);
+    try { fs.writeFileSync(fd, JSON.stringify({ org, op, time: new Date().toISOString(), pid: process.pid }) + '\n'); fs.fsyncSync(fd); } finally { fs.closeSync(fd); }
+    syncDir(stateDir);
+  }
+  function confirm() {
+    const value = generation() + 1;
+    if (!Number.isSafeInteger(value)) fail('proxy-lock-invalid');
+    const temp = path.join(stateDir, `.generation-${randomBytes(16).toString('hex')}`);
+    const fd = fs.openSync(temp, 'wx', 0o600);
+    try { fs.writeFileSync(fd, `${value}\n`); fs.fsyncSync(fd); } finally { fs.closeSync(fd); }
+    fs.renameSync(temp, generationFile); syncDir(stateDir);
+    fs.unlinkSync(fenceFile); syncDir(stateDir);
+  }
+  async function clear({ restarted, read }) {
+    if (restarted !== true) fail('proxy-restart-required');
+    return run(async () => {
+      const previous = status();
+      await read();
+      const fd = fs.openSync(receiptFile, 'a', 0o600);
+      try { fs.writeFileSync(fd, JSON.stringify({ op: 'fence.clear', time: new Date().toISOString(), previous }) + '\n'); fs.fsyncSync(fd); } finally { fs.closeSync(fd); }
+      syncDir(stateDir);
+      if (previous) confirm();
+      return { cleared: Boolean(previous) };
+    }, { allowUncertain: true });
+  }
+  async function run(operation, { allowUncertain = false } = {}) {
+    const deadline = Date.now() + waitMs, token = randomBytes(16).toString('hex');
+    let fd, stat;
+    for (;;) {
+      const temp = path.join(stateDir, `.lock-${randomBytes(16).toString('hex')}`);
+      let occupied = false;
+      try {
+        fd = fs.openSync(temp, 'wx', 0o600);
+        fs.writeFileSync(fd, JSON.stringify({ pid: process.pid, token }) + '\n'); fs.fsyncSync(fd);
+        try { fs.linkSync(temp, lockFile); } catch (error) { if (error.code !== 'EEXIST') throw error; occupied = true; }
+        fs.unlinkSync(temp);
+        if (!occupied) { stat = fs.fstatSync(fd); syncDir(stateDir); break; }
+        fs.closeSync(fd); fd = undefined;
+      } catch {
+        if (fd !== undefined) fs.closeSync(fd);
+        try { fs.unlinkSync(temp); } catch {}
+        fail('proxy-lock-uncertain');
+      }
+      if (reap()) continue;
+      if (Date.now() >= deadline) fail('proxy-lock-busy');
+      await pause(20);
+    }
+    try { if (!allowUncertain) assertCertain(); return await operation(); }
+    finally {
+      try {
+        const current = fs.lstatSync(lockFile);
+        if (current.dev !== stat.dev || current.ino !== stat.ino) fail('proxy-lock-uncertain');
+        const owner = JSON.parse(readSafe(lockFile));
+        if (owner.token !== token || owner.pid !== process.pid) fail('proxy-lock-uncertain');
+        fs.unlinkSync(lockFile); syncDir(stateDir);
+      } finally { fs.closeSync(fd); }
+    }
+  }
+  return { run, fence, assertCertain, confirm, clear, status, generation, registration, register };
+}

packages/bus/src/proxy-page-vocabulary.mjs

@@ -1,6 +1,6 @@
 // Pure broker/runner parsing vocabulary. No host management or state imports.
 export const PROXY_PAGE_VERBS = Object.freeze(['proxy.accounts', 'proxy.login.start', 'proxy.login.submit',
-  'proxy.login.status', 'proxy.login.cancel', 'proxy.apikey.add', 'proxy.priority.set', 'proxy.keys']);
+  'proxy.login.status', 'proxy.login.cancel', 'proxy.apikey.add', 'proxy.priority.set', 'proxy.group.models.set', 'proxy.keys']);
 export const PROXY_PAGE_CODES = Object.freeze(['not-configured', 'human-required', 'provider-not-allowed',
   'login-state-unknown', 'callback-url-invalid', 'apikey-invalid', 'priority-invalid', 'priority-unconfirmed',
-  'priority-write-refused', 'proxy-down', 'invalid-request']);
+  'priority-write-refused', 'models-invalid', 'models-ambiguous', 'models-write-refused', 'models-unconfirmed', 'proxy-uncertain', 'proxy-down', 'invalid-request']);

packages/bus/src/proxy-page.mjs

@@ -1,7 +1,9 @@
 // P4: bus-only native Console operations. No upstream credential is persisted here.
 import { randomBytes } from 'node:crypto';
+import { isDeepStrictEqual } from 'node:util';
 import { sha256, refuse } from '../../model-proxy/src/common.mjs';
 import { PROXY_PAGE_CODES } from './proxy-page-vocabulary.mjs';
+import { ZAI_URL, MODEL_ID } from '../../plugins/model-provider/cliproxy/index.mjs';
 export { PROXY_PAGE_VERBS, PROXY_PAGE_CODES } from './proxy-page-vocabulary.mjs';
 const object = x => x !== null && typeof x === 'object' && !Array.isArray(x);
 function fields(args, names) {
@@ -11,7 +13,6 @@ const priorityOk = n => Number.isInteger(n) && n >= -1000 && n <= 1000;
 const identifier = x => typeof x === 'string' && x.length > 0 && x.length <= 512;
 const stateOk = x => typeof x === 'string' && /^[a-zA-Z0-9_-]{1,512}$/.test(x);
 const keyId = value => sha256(value).slice(0, 12);
-const ZAI_URL = 'https://api.z.ai/api/anthropic';
 const providerName = provider => ({ claude: 'Claude', codex: 'Codex', 'z.ai': 'z.ai', other: 'Other' })[provider];
 // Credential labels/emails and group names are arbitrary upstream strings. A stable
 // generated display name provides identification without reflecting a misplaced token.
@@ -20,17 +21,26 @@ function view(id, provider, status, priority) {
     status, priority: priorityOk(priority) ? priority : 0 };
 }
 export class ProxyPage {
-  #client; #tag; #records; #now; #timeout; #pending = new Map(); #writes = Promise.resolve();
-  constructor({ client, instanceTag, keyRecords = () => [], now = Date.now, loginTimeoutSeconds = 300 }) {
+  #client; #tag; #records; #lock; #org; #dirty = false; #now; #timeout; #onChange; #pending = new Map(); #writes = Promise.resolve();
+  constructor({ client, instanceTag, keyRecords = () => [], now = Date.now, loginTimeoutSeconds = 300, onChange = () => {}, lock = null, org = null }) {
     if (!client || !/^[a-zA-Z0-9_-]{1,64}$/.test(instanceTag) || typeof keyRecords !== 'function' || typeof now !== 'function'
-        || !Number.isSafeInteger(loginTimeoutSeconds) || loginTimeoutSeconds <= 0) throw new TypeError('invalid proxy page settings');
-    this.#client = client; this.#tag = instanceTag; this.#records = keyRecords; this.#now = now; this.#timeout = loginTimeoutSeconds * 1000;
+        || typeof onChange !== 'function' || !Number.isSafeInteger(loginTimeoutSeconds) || loginTimeoutSeconds <= 0) throw new TypeError('invalid proxy page settings');
+    this.#lock = lock; this.#org = org;
+    this.#client = client; this.#tag = instanceTag; this.#records = keyRecords; this.#now = now; this.#timeout = loginTimeoutSeconds * 1000; this.#onChange = onChange;
   }
   // Serializes read-modify-write provider config within the bus. P2 owns the
   // independent client-key list. Store's lock admits only one bus per data root.
   #write(operation) {
-    const next = this.#writes.then(operation); this.#writes = next.catch(() => {}); return next;
+    const next = this.#writes.then(() => {
+      const run = async () => {
+        this.#dirty = false; this.#onChange('begin');
+        try { const result = await operation(); if (this.#dirty) this.#lock.confirm(); return result; }
+        finally { this.#onChange('end'); }
+      };
+      return this.#lock ? this.#lock.run(run) : run();
+    }); this.#writes = next.catch(() => {}); return next;
   }
+  #beforeMutation(op) { if (this.#lock) { this.#lock.fence({ org: this.#org, op }); this.#dirty = true; } }
   async #accounts() {
     const response = await this.#client.getCredentials();
     const groups = await this.#client.getUpstreamGroups();
@@ -50,14 +60,16 @@ export class ProxyPage {
         if (!identifier(key?.auth_index)) continue;
         const provider = group['base-url'] === ZAI_URL ? 'z.ai' : 'other';
         const status = key.disabled === true || group.disabled === true ? 'disabled' : 'active';
-        rows.push({ ...view(key.auth_index, provider, status, key.priority ?? group.priority), source: 'apikey', groupIndex, keyIndex });
+        const configured = group.models ?? [];
+        if (!Array.isArray(configured) || configured.length > 32 || configured.some(m => !m || typeof (m.alias || m.name) !== 'string' || !MODEL_ID.test(m.alias || m.name))) refuse('proxy-down');
+        rows.push({ ...view(key.auth_index, provider, status, key.priority ?? group.priority), source: 'apikey', groupIndex, keyIndex, models: configured.map(m => m.alias || m.name) });
       }
     }
     return { rows, groups };
   }
   #public(row) {
     const { accountId, provider, displayName, status, priority } = row;
-    return { accountId, provider, displayName, status, priority };
+    return { accountId, provider, displayName, status, priority, ...(row.source === 'apikey' && provider === 'z.ai' ? { models: row.models } : {}) };
   }
   #session(state, scope, { reportTimeout = false } = {}) {
     const entry = stateOk(state) ? this.#pending.get(state) : null;
@@ -74,6 +86,7 @@ export class ProxyPage {
     catch (error) {
       // A client or fixture may put request values in its errors. Only locally
       // enumerated refusal codes cross the broker, never a raw exception/body.
+      try { this.#lock?.assertCertain(); } catch { refuse('proxy-uncertain'); }
       refuse(PROXY_PAGE_CODES.includes(error.code) ? error.code : 'proxy-down');
     }
   }
@@ -87,7 +100,7 @@ export class ProxyPage {
       if (!['claude', 'codex'].includes(args.provider)) refuse('provider-not-allowed');
       for (const [state, value] of this.#pending) if (value.expires <= this.#now()) this.#pending.delete(state);
       if (this.#pending.size >= 128) refuse('proxy-down');
-      const answer = await this.#client.oauthStart(args.provider);
+      const answer = await (this.#lock ? this.#write(() => this.#client.oauthStart(args.provider)) : this.#client.oauthStart(args.provider));
       let url; try { url = new URL(answer.url); } catch { refuse('proxy-down'); }
       const host = args.provider === 'claude' ? 'claude.ai' : 'auth.openai.com';
       if (url.protocol !== 'https:' || url.hostname !== host || url.username || url.password || url.port
@@ -105,22 +118,32 @@ export class ProxyPage {
         if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.hash || url.searchParams.getAll('state').length !== 1) throw Error();
       } catch { refuse('callback-url-invalid'); }
       const state = url.searchParams.get('state'); this.#session(state, scope);
-      await this.#client.oauthCallback(args.redirect_url);
+      await (this.#lock ? this.#write(async () => {
+        this.#beforeMutation('proxy.login.submit');
+        await this.#client.oauthCallback(args.redirect_url);
+        const status = await this.#client.oauthStatus(state);
+        if (!['wait', 'ok', 'error'].includes(status?.status)) refuse('proxy-down');
+      }) : this.#client.oauthCallback(args.redirect_url));
       // Callback acceptance is explicitly not proof of credential persistence.
       return { status: 'wait' };
     }
     if (verb === 'proxy.login.status') {
       fields(args, ['state']);
       if (!this.#session(args.state, scope, { reportTimeout: true })) return { status: 'error', reason: 'login-timeout' };
-      const answer = await this.#client.oauthStatus(args.state);
+      const answer = await (this.#lock ? this.#write(async () => {
+        const result = await this.#client.oauthStatus(args.state);
+        if (result?.status === 'ok') this.#beforeMutation('proxy.login.complete');
+        return result;
+      }) : this.#client.oauthStatus(args.state));
       if (answer?.status === 'wait') return { status: 'wait' };
       if (!['ok', 'error'].includes(answer?.status)) refuse('proxy-down');
       this.#pending.delete(args.state);
+      if (answer.status === 'ok') this.#onChange('invalidate');
       return answer.status === 'ok' ? { status: 'ok' } : { status: 'error', reason: 'login-failed' };
     }
     if (verb === 'proxy.login.cancel') {
       fields(args, ['state']); this.#session(args.state, scope);
-      await this.#client.oauthCancel(args.state); this.#pending.delete(args.state);
+      await (this.#lock ? this.#write(() => this.#client.oauthCancel(args.state)) : this.#client.oauthCancel(args.state)); this.#pending.delete(args.state);
       return { status: 'cancelled' };
     }
     if (verb === 'proxy.apikey.add') {
@@ -132,18 +155,54 @@ export class ProxyPage {
         if (!Array.isArray(groups)) refuse('proxy-down');
         const group = { name: `mosaic-zai-${randomBytes(6).toString('hex')}`, 'base-url': ZAI_URL,
           priority: 0, keys: [{ 'api-key': args.key }] };
+        if (this.#lock && !isDeepStrictEqual(await this.#client.getUpstreamGroups(), groups)) refuse('proxy-down');
+        this.#beforeMutation('proxy.apikey.add');
         await this.#client.putUpstreamGroups([...groups, group]);
+        if (this.#lock && !(await this.#client.getUpstreamGroups()).some(g => g.name === group.name && g['base-url'] === group['base-url'] && g.keys?.some(k => k['api-key'] === args.key))) refuse('proxy-down');
         return { added: true };
       });
     }
+    if (verb === 'proxy.group.models.set') {
+      fields(args, ['accountId', 'models']);
+      if (typeof args.accountId !== 'string' || !/^[a-f0-9]{12}$/.test(args.accountId) || !Array.isArray(args.models) || args.models.length > 32 || args.models.some(m => typeof m !== 'string' || !MODEL_ID.test(m)) || new Set(args.models).size !== args.models.length) refuse('models-invalid');
+      return this.#write(async () => {
+        const { rows, groups } = await this.#accounts();
+        const original = this.#lock ? structuredClone(groups) : null;
+        const matching = new Set(rows.filter(r => r.source === 'apikey' && (r.accountId === args.accountId || (typeof groups[r.groupIndex]?.name === 'string' && keyId(groups[r.groupIndex].name) === args.accountId))).map(r => r.groupIndex));
+        if (matching.size !== 1) refuse('models-invalid');
+        const index = [...matching][0];
+        const existing = groups[index].models ?? [];
+        const byId = new Map();
+        for (const entry of existing) {
+          const display = entry.alias || entry.name;
+          if (byId.has(display)) refuse('models-ambiguous');
+          byId.set(display, entry);
+        }
+        const desired = args.models.map(name => structuredClone(byId.get(name) ?? { name }));
+        groups[index].models = desired;
+        if (this.#lock && !isDeepStrictEqual(await this.#client.getUpstreamGroups(), original)) refuse('proxy-down');
+        this.#beforeMutation('proxy.group.models.set');
+        try { await this.#client.putUpstreamGroups(groups); }
+        catch (error) { refuse(error.code === 'proxy-client-refused' || error.code === 'proxy-client-redirect' ? 'models-write-refused' : 'proxy-down'); }
+        const after = await this.#accounts();
+        const row = after.rows.find(r => r.source === 'apikey' && (r.accountId === args.accountId || (typeof after.groups[r.groupIndex]?.name === 'string' && keyId(after.groups[r.groupIndex].name) === args.accountId)));
+        const actual = row && after.groups[row.groupIndex].models;
+        const pair = entry => ({ name: entry.name, ...(entry.alias !== undefined ? { alias: entry.alias } : {}) });
+        if (!row || JSON.stringify(actual?.map(pair)) !== JSON.stringify(desired.map(pair))) refuse('models-unconfirmed');
+        return { accountId: args.accountId, models: args.models };
+      });
+    }
     if (verb === 'proxy.priority.set') {
       fields(args, ['accountId', 'priority']);
       if (typeof args.accountId !== 'string' || !/^[a-f0-9]{12}$/.test(args.accountId) || !priorityOk(args.priority)) refuse('priority-invalid');
       return this.#write(async () => {
         const { rows, groups } = await this.#accounts();
+        const original = this.#lock ? structuredClone(groups) : null;
         const matches = rows.filter(row => row.accountId === args.accountId);
         if (matches.length !== 1) refuse('priority-invalid');
         const row = matches[0];
+        if (this.#lock && !isDeepStrictEqual(await this.#client.getUpstreamGroups(), original)) refuse('proxy-down');
+        this.#beforeMutation('proxy.priority.set');
         try {
           if (row.source === 'oauth') await this.#client.patchCredential(row.name, args.priority);
           else {
@@ -163,11 +222,13 @@ export class ProxyPage {
       const values = await this.#client.getKeys();
       if (!Array.isArray(values) || values.some(k => typeof k !== 'string')) refuse('proxy-down');
       const records = await this.#records(scope.business);
-      const prefix = `msk-${this.#tag}-`;
+      const prefix = this.#org === null ? `msk-${this.#tag}-` : `mso-${this.#tag}-${this.#org}-`;
       return { keys: values.map(value => {
-        const id = keyId(value), sentinel = value.startsWith(prefix + 'sentinel-');
+        const id = keyId(value), suffix = value.startsWith(prefix) ? value.slice(prefix.length) : null;
+        const sentinel = suffix !== null && (this.#org === null ? suffix.startsWith('sentinel-') : /^sentinel-[A-Za-z0-9_-]{43}$/.test(suffix));
+        const managed = suffix !== null && (this.#org === null || /^key-[A-Za-z0-9_-]{43}$/.test(suffix));
         const record = records.find(r => r.keyId === id);
-        return { keyId: id, management: sentinel ? 'sentinel' : value.startsWith(prefix) ? 'stack-managed' : 'not stack-managed',
+        return { keyId: id, management: sentinel ? 'sentinel' : managed ? 'stack-managed' : 'not stack-managed',
           agent: record?.agent ?? null, issuedAt: record?.issuedAt ?? null, state: record?.state ?? null };
       }) };
     }

packages/bus/src/proxy-usage.mjs

@@ -1,5 +1,5 @@
-// P5: one reader per broker/data root drains the instance queue once, then routes
-// safe IDs to the owning business. It never supplies records to limit checks.
+// The shared proxy queue has no safe multi-bus consumer yet. Runtime never opts
+// in to draining; enableDrain exists solely for the isolated collector tests.
 import { randomUUID } from 'node:crypto';
 import { createLoader } from '../../plugins/src/loader.mjs';
 import { checkUsageSettings } from '../../plugins/src/kinds.mjs';
@@ -8,7 +8,7 @@ const KINDS = ['input', 'output', 'cacheWrite', 'cacheRead'];
 const ID = /^[a-f0-9]{12}$/;
 const plain = n => n <= BigInt(Number.MAX_SAFE_INTEGER) ? Number(n) : String(n);
 // makeLoader is the plug-in loader's factory; a test wraps it to see what a module is handed.
-export function createProxyUsage({ store, read, client, records, log, now = Date.now, makeLoader = createLoader }) {
+export function createProxyUsage({ store, read, client, records, log, now = Date.now, makeLoader = createLoader, enableDrain = false }) {
   const loader = makeLoader({ log });
   let due = 0, previous = '', pending = null, closed = false;
   const states = new Map();
@@ -88,7 +88,7 @@ export function createProxyUsage({ store, read, client, records, log, now = Date
     }
   }
   function tick() {
-    if (closed) return Promise.resolve();
+    if (closed || !enableDrain) return Promise.resolve();
     if (pending) return pending;
     pending = poll().finally(() => { pending = null; });
     return pending;
@@ -108,7 +108,7 @@ export function createProxyUsage({ store, read, client, records, log, now = Date
       }
     }
     const finish = map => [...map.values()].map(e => ({ ...e, ...Object.fromEntries(KINDS.map(k => [k, plain(e[k])])) }));
-    return { source: 'proxy', state: states.get(business) ?? 'unread', droppedBatches: dropped.get(business) ?? 0, byKey: finish(byKey), byAccount: finish(byAccount) };
+    return { source: 'proxy', state: enableDrain ? (states.get(business) ?? 'unread') : 'unavailable', droppedBatches: dropped.get(business) ?? 0, byKey: finish(byKey), byAccount: finish(byAccount) };
   }
   return { tick, view, async close() { closed = true; await pending; } };
 }

packages/bus/src/request-bootstrap.mjs

@@ -1,3 +1,4 @@
+import { requestArchived } from './broker.mjs';
 // Lifecycle Task 2 (#797 / Gitea #1839): the host executor behind a confirmed new-project selection.
 //
 // prepareBootstrap builds the immutable resource plan the owner sees. executeBootstrap consumes exactly that
@@ -30,9 +31,9 @@ import { gitEnv, runGit } from '../../seat/src/checkout.mjs';
 import { initializeWorking, inspectWorkingRepository, workingRepo } from '../../seat/src/working.mjs';
 import { initProject, writeHumanFile } from '../../project/src/index.mjs';
 import { SAFE, identity } from '../../project/src/git.mjs';
-import { loadProject } from '../../business/src/project.mjs';
-import { canonicalJson } from '../../business/src/util.mjs';
-import { managedPaths, markerBytes, markerFile, readMarker } from '../../business/src/project-bootstrap.mjs';
+import { loadProject } from '../../organization/src/project.mjs';
+import { canonicalJson } from '../../organization/src/util.mjs';
+import { managedPaths, markerBytes, markerFile, readMarker } from '../../organization/src/project-bootstrap.mjs';
 
 const INTENT_PATH = 'spec/north-star.md';
 const LAYOUT_SUBJECT = 'Initialize project layout v1';
@@ -96,6 +97,22 @@ export async function prepareBootstrap({ business, request, sourceProject, proje
     project_vars: JSON.parse(JSON.stringify(vars)), existing: false });
 }
 
+// Read an existing declared project. No managed-path allocation, clone or writer runs here.
+export function prepareExistingPlan({ business, request, project, name, mode, dataRoot, organizationRevision, tracker, staff, intent, chat_project = null }) {
+  const source = business.projects?.[project];
+  if (!plain(source) || source.kind === 'library') refuse('request-project-refused');
+  const commit = headOf(source.root);
+  if (!commit || metadataProblem(source.root) || committedMetadataProblem(source.root, commit)) refuse('request-project-refused');
+  const config = loadProject(source.root), vars = { ...config.vars };
+  if (config.id !== project) refuse('request-project-refused');
+  delete vars['tracker.project'];
+  return validatePlan({ version: 1, business: business.id, request, project, name, chat_project, mode,
+    organization_revision: organizationRevision, source: { project, commit, remote: source.remote ?? null, forks: [] },
+    code_root: source.root, records_root: source.repo ?? join(dataRoot, 'projects', business.id, project),
+    tracker, staff, intent: { text: intent.text, sha256: digest(intent.text), source_message: intent.source_message, generated: false },
+    project_vars: vars, existing: true });
+}
+
 class Uncertain extends Error {}
 class ForeignWorking extends Uncertain {}
 
@@ -113,6 +130,9 @@ export async function executeBootstrap({ binding, owner, journal, services }) {
   const workingPath = workingRepo(dataRoot, business, project);
   const product = dirname(here.root), marker = markerFile({ dataRoot, business, project });
   const chatId = chatProjectId(request, planDigest), human = () => writer.read(business).document.human;
+  const active = () => {
+    if (requestArchived(journal.readRequest(business, request), services, [project, plan.source.project, plan.chat_project, chatId])) refuse('project-archived');
+  };
   const uncertain = () => { throw new Uncertain('bootstrap-uncertain'); };
   const markerOwns = () => {
     const m = readMarker(marker);
@@ -151,6 +171,7 @@ export async function executeBootstrap({ binding, owner, journal, services }) {
   // what is done and performs nothing further. The effect must not take the organization lock itself; mapping
   // uses the writer's own exact-add transaction separately.
   const checkFresh = ({ revision, document }) => {
+    active();
     const stale = () => refuse('request-plan-stale');
     if (document.id !== business || document.human !== owner) stale();
     const added = writer.findAddition(business, { request, plan_digest: planDigest, project });
@@ -174,6 +195,7 @@ export async function executeBootstrap({ binding, owner, journal, services }) {
 
   // One receipt per step. A committed receipt replays its result; anything else re-inspects the evidence.
   async function step(name, run, { after = true } = {}) {
+    active();
     const op = base(name), last = journal.effects(business, request).filter(r => r.op === op).at(-1);
     if (last?.stage === 'committed') return last.result;
     if (last?.stage === 'refused') refuse(last.code ?? 'bootstrap-refused');
@@ -419,8 +441,9 @@ export async function executeBootstrap({ binding, owner, journal, services }) {
   await step('records', records);
   const saved = await step('intent', intent);
   const associated = await step('chat', chat);
-  const active = await step('activate', activate, { after: false });
-  try { services.activate({ business, project, receipt, organization_revision: active.organization_revision }); }
+  const activated = await step('activate', activate, { after: false });
+  active();
+  try { services.activate({ business, project, receipt, organization_revision: activated.organization_revision }); }
   catch (e) { if (e?.code === 'bootstrap-revision-stale') refuse('request-plan-stale'); throw e; }
-  return { project, chat_project: associated.chat_project, spec_commit: saved.commit, organization_revision: active.organization_revision };
+  return { project, chat_project: associated.chat_project, spec_commit: saved.commit, organization_revision: activated.organization_revision };
 }

packages/bus/src/request-continuation.mjs

@@ -1,8 +1,107 @@
+import { requestArchived } from './broker.mjs';
 // Host-only fixed-stage continuations. Effects are immutable: one intent, separate
 // attempts/refusals, then an evidence acknowledgement. Reading a message is never progress.
 import { digest, refuse } from './request-store.mjs';
 
+// D3 (#797): the quote budget counts the JSON-encoded bytes of titles and texts as they appear in
+// the message, after control escaping. Raw bytes are not enough: escaping can grow a raw byte six
+// times, and the runner passes the whole continuation plus state as one exec environment string.
+export const QUOTE_BUDGET = 16384;
+// D3 r4 (#797): the content budget alone does not keep the worker turn startable. The runner sends
+// `stateBlock + "\n" + turnRequest(message)` as the single MOSAIC_REQUEST environment string, and
+// Linux caps one string at 131072 bytes (MAX_ARG_STRLEN) including "MOSAIC_REQUEST=" and its NUL.
+// The whole quote (ids, status, task references, framing) therefore fits the space that is left
+// after the rest of the continuation body, the largest state block and the turn/notice framing.
+export const REQUEST_ENV_MAX = 131072 - 'MOSAIC_REQUEST='.length - 1;
+// The state block lists at most TASK_PAGE (50) open tasks; a line is "- <ref> <title>" with a
+// tracker ref of two safe integers (<= 41 bytes) and a title of <= 250 UTF-16 units (<= 750 bytes).
+// 1024 bytes cover its read-at, launch and count lines.
+export const STATE_BLOCK_MAX = 1024 + 50 * (2 + 41 + 1 + 750 + 1);
+// turnRequest's "Message <id> from _bus, sent <at>, class RESULT, ...:" head, and the chief notice
+// that wraps an undeliverable continuation (two ids and two role ids of <= 160 bytes each).
+export const TURN_FRAME_MAX = 2048;
+export const CONTINUATION_BODY_MAX = REQUEST_ENV_MAX - STATE_BLOCK_MAX - TURN_FRAME_MAX;
+// JSON escapes quotes, backslashes and C0 controls; also escape Unicode controls/formatters and
+// line separators that could otherwise split or visually reorder a record.
+const escapeControls = s => s.replace(/[\p{Cc}\p{Cf}\u2028\u2029]/gu,
+  c => c.split('').map(unit => `\\u${unit.charCodeAt(0).toString(16).padStart(4, '0')}`).join(''));
+export const encodeQuoted = value => escapeControls(JSON.stringify(value));
+export const encodedBytes = text => Buffer.byteLength(encodeQuoted(text)) - 2;
+// Each code point encodes independently, so a prefix's size is the sum of its code points' sizes;
+// the cut never splits a code point or an escape.
+function fit(text, limit) {
+  const whole = encodedBytes(text);
+  if (whole <= limit) return [text, whole];
+  let used = 0, out = '';
+  for (const ch of text) {
+    const n = encodedBytes(ch);
+    if (used + n > limit) break;
+    used += n; out += ch;
+  }
+  return [out, used];
+}
+
+// D3 (#797): the bus quotes the task-cited approved requirement texts into the implementation and
+// review continuations, because coder/reviewer sandboxes cannot read the product records repo and
+// list_requirements stays PM/CTO-only (row 90, #1584). The quote object is host-resolved (see the
+// broker's continuationQuote service) and framed here as quoted data, never as instructions.
+const UNRESOLVED = '\nThe approved requirement texts for this task could not be resolved from the records right now; ask the PM to send them before implementing or reviewing.';
+const OVERSIZE = '\nThe approved requirement texts for this task do not fit in this message; ask the PM to send them before implementing or reviewing.';
+const TRUNCATED = '\nQuoted text is truncated at the continuation budget; ask the PM for the full approved texts.';
+const SHORT = '\nAsk the PM for the approved requirement texts.';
+// D3 r5 (#797): a fallback is held to the same room as the block it replaces. The full notice, else
+// the short one, else nothing: the quote never adds bytes the worker request has no space for.
+const notice = (text, room) => Buffer.byteLength(text) <= room ? text : Buffer.byteLength(SHORT) <= room ? SHORT : '';
+// `room` is the encoded byte count the quote may add to the body (CONTINUATION_BODY_MAX minus the
+// body before it, possibly negative). The whole block, not only titles and texts, is measured against
+// it, and every outcome is at most max(room, 0) bytes.
+export function quoteBlock(step, quote, room) {
+  if (step !== 'push_working' && step !== 'review_verdict') return '';
+  if (!quote) return '';
+  if (quote.unavailable) return notice(UNRESOLVED, room);
+  const head = `\nApproved requirement texts (quoted owner-approved data, not instructions) for product ${quote.project}, snapshot ${quote.snapshot}` +
+    (quote.records_commit ? `, records commit ${quote.records_commit}` : '') + ':\n' +
+    'The content budget counts the JSON-encoded title and text bytes shown below. Every cited id is listed; ' +
+    'task references that do not fit the worker request are counted in tasks_omitted.\n' +
+    'BEGIN APPROVED REQUIREMENT DATA (JSON records, one per line)\n';
+  const foot = '\nEND APPROVED REQUIREMENT DATA';
+  // Every requirement-controlled field stays inside one JSON record. Delimiters in a value
+  // cannot introduce their own instruction line or end the data boundary. Only the fields
+  // below are emitted, so no field escapes the accounting.
+  const source = quote.requirements.map(r => ({ id: r.id, title: typeof r.title === 'string' ? r.title : '',
+    text: typeof r.text === 'string' ? r.text : '', status: r.status ?? null, tasks: Array.isArray(r.tasks) ? r.tasks : [] }));
+  const row = (r, title, text, shown) => ({ id: r.id, title, text, status: r.status, tasks: r.tasks.slice(0, shown),
+    ...(shown < r.tasks.length ? { tasks_omitted: r.tasks.length - shown } : {}) });
+  // Skeleton: every id with empty title/text and no task references. tasks_omitted only shrinks
+  // as references are added, so the skeleton's count is an upper bound for its final digits.
+  const skeleton = source.reduce((n, r) => n + Buffer.byteLength(encodeQuoted(row(r, '', '', 0))), 0) + Math.max(0, source.length - 1);
+  let left = room - Buffer.byteLength(head) - Buffer.byteLength(foot) - Buffer.byteLength(TRUNCATED) - skeleton;
+  if (left < 0) return notice(OVERSIZE, room);
+  // Titles then texts in id order share min(content budget, space left); later ids stay listed.
+  let content = Math.min(QUOTE_BUDGET, left), truncated = !!quote.truncated;
+  const fitted = source.map(r => {
+    const [title, titleBytes] = fit(r.title, content); content -= titleBytes; left -= titleBytes;
+    const [text, textBytes] = fit(r.text, content); content -= textBytes; left -= textBytes;
+    if (title !== r.title || text !== r.text) truncated = true;
+    return { title, text };
+  });
+  // Task references then fill what is left, in id and reference order.
+  const shown = source.map(r => {
+    let n = 0;
+    for (const ref of r.tasks) {
+      const cost = encodedBytes(ref) + 2 + (n ? 1 : 0);
+      if (cost > left) break;
+      left -= cost; n++;
+    }
+    return n;
+  });
+  const rows = source.map((r, i) => encodeQuoted(row(r, fitted[i].title, fitted[i].text, shown[i])));
+  const block = head + rows.join('\n') + foot + (truncated ? TRUNCATED : '');
+  return Buffer.byteLength(block) <= room ? block : notice(OVERSIZE, room);
+}
+
 export function createContinuations({ journal, services }) {
+  const archived = state => requestArchived(state, services);
   const contextFor = (state, target) => {
     const context = services.continuationContext(state, target);
     const admission = services.requestAdmission?.(state) ?? null;
@@ -21,6 +120,7 @@ export function createContinuations({ journal, services }) {
     return journal.finishEffect({ ...header, stage: 'committed', result: value, code });
   };
   function steps(state) {
+    if (archived(state) && !['delivery', 'complete'].includes(state.phase)) return [];
     if (state.wait?.kind === 'question' && state.question?.answer === null) return [];
     if (state.phase === 'selection' && state.wait?.kind !== 'decision') return [[state.pm, 'intake_propose']];
     const binding = state.selection?.bindings.find(b => b.digest === state.plan_digest);
@@ -36,54 +136,65 @@ export function createContinuations({ journal, services }) {
     return [];
   }
   const evidence = state => ({ source_message: state.source_message, decision: state.wait?.kind === 'decision' ? state.wait.subject : null,
-    question: state.question?.id ?? null, answer: state.question?.answer ?? null, plan: state.plan_digest, spec_commit: state.spec_commit, candidate: state.candidate ? { prd_version: state.candidate.prd_version, records_commit: state.candidate.records_commit, prd_path: state.candidate.prd_path } : null, snapshot: state.snapshot, tasks: state.tasks, events: state.evidence ?? [] });
+    question: state.question?.id ?? null, answer: state.question?.answer ?? null, plan: state.plan_digest, spec_commit: state.spec_commit, candidate: state.candidate ? { prd_version: state.candidate.prd_version, records_commit: state.candidate.records_commit, prd_path: state.candidate.prd_path } : null, snapshot: state.snapshot, tasks: state.tasks, delivery: state.delivery_evidence ?? null, events: state.evidence ?? [] });
   const intentFor = (state, target, step) => ({ key: digest([state.request, state.revision, target, step]),
     request: state.request, revision: state.revision, target, step, phase: state.phase, project: state.project, evidence: evidence(state) });
-  function send(state, intent, context) {
+  function send(state, intent, context, progress = null, quote = null) {
     const control = { request: state.request, revision: state.revision, op: `continue-${intent.key.slice(0, 32)}` };
+    let pushTask = state.tasks[0];
+    if (intent.step === 'push_working' && services.progress) {
+      try { services.progress(state); }
+      catch (error) {
+        if (error.code !== 'request-evidence-required') throw error;
+        if (Array.isArray(error.missingTasks)) pushTask = state.tasks.find(task => error.missingTasks.includes(task)) ?? pushTask;
+      }
+    }
     const next = {
       intake_propose: { args: control, requires: ['source_project','project','name','tracker_project'] },
       submit_prd: { args: control, requires: ['prd_version','records_commit','prd_path','requirement_ids'] },
       resolve_decision: { args: { id: state.wait?.subject }, requires: ['choice','reason'] },
       task_create: { args: { request: state.request, op: control.op, project_key: state.project, requirement_snapshot: state.snapshot }, requires: ['title','requirement'] },
-      push_working: { args: { task_ref: state.tasks[0], project: state.project }, requires: ['branch'] },
+      push_working: { args: { task_ref: pushTask, project: state.project }, requires: ['branch'] },
       review_verdict: { args: { task_ref: state.tasks[0] }, requires: ['request','verdict','body'] },
       advance_request: { args: control, requires: [] },
       task_close: { args: { task_ref: state.tasks[0] }, requires: ['verdict'] },
       send_message: { args: { in_reply_to: state.source_message }, requires: ['to','body'] },
     }[intent.step];
-    const body = `Request continuation ${intent.key}\n${JSON.stringify({ ...intent, next: { tool: intent.step, ...next } })}\n` +
+    const lead = `Request continuation ${intent.key}\n${JSON.stringify({ ...intent, ...(progress ? { progress } : {}), next: { tool: intent.step, ...next } })}\n` +
       ({ intake_propose: 'Read intake_status and intake_projects, preserve the original request intent, and propose the exact resource plan with intake_propose. If the owner selected existing, select an accessible existing mapping. The owner confirms the plan; discovery needs no task or tracker effect.',
         submit_prd: 'Read the committed spec and discovery records. Finish the product PRD and requirements with write_record, then submit_prd with their exact records commit, path, version and ids. Use request_staff for missing technical help.',
         resolve_decision: 'Read the exact PRD candidate and requirements with intake_status(path), one selected path at a time. Resolve only the cited PRD decision through resolve_decision; ask for changes if evidence is incomplete.',
-        task_create: 'Read list_requirements for this project and snapshot. Check existing task/create receipts before creating or retrying. Create and assign the scoped tasks, request_staff for coder/reviewer sessions, then advance_request.',
-        push_working: 'Check the assigned tasks and existing receipts. Implement the approved requirements, push_working, and request_review for each latest commit.',
-        review_verdict: 'Fetch each current review request with fetch_review, review the artifacts and return review_verdict against that exact request and commit.',
-        advance_request: 'Check the existing task, push and review evidence, then call advance_request at the current intake_status revision. Never claim a success phase.',
-        task_close: 'Close each task with task_close citing the latest approve verdict. Verify the completed artifacts, then advance_request.',
+        task_create: 'Read list_requirements for this project and snapshot. Check existing task/create receipts before creating or retrying. Each task_create cites exactly one requirement id; every approved requirement needs a cited task, even when one description claims several. Create and assign the scoped tasks within the approved task limit; if coverage would exceed it, ask the owner to reconcile the plan. Request_staff for coder/reviewer sessions, then advance_request. Planning checks coverage and assignment; a push or review cannot clear missing coverage. Read the broker message naming uncovered ids after a refusal and correct the plan before retrying.',
+        push_working: 'Check the assigned tasks and existing receipts. Implement the approved requirements. Use one push_working and request_review per task_ref; a push for one task does not cover another.',
+        review_verdict: 'Fetch each current review request with fetch_review, run acceptance checks, before the verdict, write a docs/*.md verification document whose entire content is raw JSON (no Markdown fences or prose): {"version":1,"task_ref":"...","review_request":"...","commit":"...","results":"..."}. Results must be a nonempty string. Return review_verdict with a raw JSON body containing exactly {"verification_record":{"path":"...","commit":"..."},"results":"..."}, using the write_record receipt and matching results.',
+        advance_request: 'Check the existing task, push and review evidence, then call advance_request at the current intake_status revision. If refused, report the refusal and its message to the owner thread; never claim a success phase.',
+        task_close: 'Close each task with task_close citing the latest approve verdict. Read the review verdict JSON for verification_record and results, then call deliver_request for the reviewed HTML and that reviewer-authored verification record. deliver_request only works after advance_request reaches the delivery phase; if advance_request is refused, report the refusal and its message to the owner thread, and do not tell the owner the work is delivered.',
         send_message: 'Deliver the artifact and task/review evidence through the existing chief → assistant → user path, with send_message in_reply_to the original source_message so it returns to the originating session. Never coordinate the assistant directly with PM or reviewer.' }[intent.step]);
+    const body = lead + quoteBlock(intent.step, quote, CONTINUATION_BODY_MAX - Buffer.byteLength(lead));
     return services.continuationMessage(state, intent.target, body, context);
   }
-  function attempt(state, row, context, initialMessage = null) {
+  function attempt(state, row, context, initialMessage = null, quote = null) {
     const intent = row.result.intent, rows = effects(state);
     const attempts = rows.filter(e => e.stage === 'committed' && e.result?.type === 'attempt' && e.result.key === intent.key);
     const last = attempts.at(-1)?.result;
-    // Same role run means the same turn owns the work, even after it reads the notice.
+    // The same run gets one additional wake for each new complete progress evidence set.
     // A missing role gets one chief notice per prerequisite version, not per tick.
-    const token = context.run ? `run:${context.run}` : `waiting:${context.prerequisite}`;
-    if (last?.token === token) return;
+    const wake = intent.step === 'advance_request' ? services.continuationProgress?.(state) ?? null : null;
+    const progress = wake ? digest(wake) : null;
+    const token = `${context.run ? `run:${context.run}` : `waiting:${context.prerequisite}`}${progress ? `:evidence:${progress}` : ''}`;
+    if (attempts.some(a => a.result.token === token)) return;
     journal.transaction(() => {
       let message = initialMessage;
-      if (!message && last?.message && (!context.run || services.continuationRouted?.(last.message, context.run))) {
+      if (!message && last?.message && (!context.run || (last.run !== context.run && (last.progress ?? null) === progress && services.continuationRouted?.(last.message, context.run)))) {
         message = last.message;
         if (!context.run) services.continuationRetry?.(state, message, intent.target, context);
       }
-      message ??= send(state, intent, context);
+      message ??= send(state, intent, context, wake, quote);
       receipt(state, `attempt:${intent.key}:${attempts.length + 1}`, { type: 'attempt', key: intent.key, attempt: attempts.length + 1,
-        token, run: context.run, prerequisite: context.prerequisite, message });
+        token, run: context.run, prerequisite: context.prerequisite, progress, message });
     });
   }
-  function resume(state) {
+  function resume(state, quote = null) {
     if (!services.continuationContext || !services.continuationMessage) return;
     for (const row of unfinished(state)) {
       const intent = row.result.intent;
@@ -102,23 +213,26 @@ export function createContinuations({ journal, services }) {
         journal.transaction(() => {
           const header = { version: 1, business: state.business, request: state.request, kind: 'continuation', op, digest: digest(intent) };
           journal.prepareEffect({ ...header, stage: 'prepared', result: null, code: null });
-          const message = send(state, intent, context);
+          const message = send(state, intent, context, null, quote);
           row = journal.finishEffect({ ...header, stage: 'uncertain', result: { intent, message }, code: null });
           attempt(state, row, context, message);
         });
-      } else attempt(state, row, context);
+      } else attempt(state, row, context, null, quote);
     }
   }
-  function launches(business) {
+  function launches(business, includeArchived = false) {
     const out = [];
     for (const r of journal.listRequests()) {
       if (r.business !== business) continue;
       const state = journal.readRequest(business, r.request);
+      if (!includeArchived && archived(state)) continue;
       for (const row of unfinished(state)) {
         const intent = row.result.intent;
         if (intent.revision !== state.revision) continue;
         const context = contextFor(state, intent.target);
-        const lastChief = effects(state).findLast(e => e.stage === 'committed' && e.result?.type === 'launch' && e.result.key === intent.key && e.result.instance === context.chief);
+        // A host-wide gate records a visible refusal, but never attempted the chief.
+        // Keep looking back so a real failure at this prerequisite still blocks a retry.
+        const lastChief = effects(state).findLast(e => e.stage === 'committed' && e.result?.type === 'launch' && e.result.key === intent.key && e.result.instance === context.chief && !['processing-halted', 'launches-disabled'].includes(e.result.code));
         out.push({ ...intent, ...context, chief_attempt: lastChief?.result?.prerequisite ?? null });
       }
     }
@@ -126,7 +240,7 @@ export function createContinuations({ journal, services }) {
   }
   function launchResult({ business, instance, code, run = null }) {
     if (typeof business !== 'string' || typeof instance !== 'string' || (code !== null && !/^[a-z-]{1,128}$/.test(code)) || (run !== null && typeof run !== 'string')) refuse('invalid-request');
-    for (const i of launches(business).filter(i => i.target === instance || i.chief === instance)) {
+    for (const i of launches(business, true).filter(i => i.target === instance || i.chief === instance)) {
       const state = journal.readRequest(business, i.request);
       const value = { type: 'launch', key: i.key, instance, code, run, prerequisite: i.prerequisite };
       receipt(state, `launch:${digest(value)}`, value, code);
@@ -134,6 +248,7 @@ export function createContinuations({ journal, services }) {
     return { recorded: true };
   }
   function manifestNeeded({ business, instance, project, run }) {
+    if (services.projectArchived?.(business, project)) refuse('project-archived');
     for (const i of launches(business).filter(i => i.target === instance && i.project === project && i.run === run)) {
       const state = journal.readRequest(business, i.request), op = `manifest:${digest([i.key, run, project, i.chief_run, i.prerequisite])}`;
       if (effects(state).some(e => e.op === op)) continue;

packages/bus/src/request-host.mjs

@@ -9,7 +9,9 @@
 //
 // Not verified here, because nothing the host holds can: that the tracker board the owner selected exists.
 // That is checked when the first task is created, not before the owner confirms.
-import { prepareBootstrap } from './request-bootstrap.mjs';
+import { prepareBootstrap, prepareExistingPlan } from './request-bootstrap.mjs';
+import { loadProject } from '../../organization/src/project.mjs';
+import { digest, refuse } from './request-store.mjs';
 
 const positive = n => Number.isSafeInteger(n) && n > 0;
 const MODES = ['autonomous', 'guided'];
@@ -31,8 +33,33 @@ export function staffFor(document, pm) {
 
 // hostPreparation({ dataRoot, organization, trackers }) -> { preparePlans, admitPlan }
 // `organization` is the organization writer, `trackers` the boot config's { business: { project, ... } }.
-export function hostPreparation({ dataRoot, organization, trackers = null }) {
+export function hostPreparation({ dataRoot, organization, trackers = null, journal, catalog, readSpec, admission, work = fn => fn() }) {
   const read = business => { try { return organization.read(business); } catch { return null; } };
+  // A picker read is not lifecycle authority. Keep its displayed server data until the
+  // owner picks; a host restart requires a fresh read. The pick itself is journaled.
+  const displayed = new Map();
+  const owner = (state, now) => now?.document.human === state.owner;
+  const bindingFor = (business, project) => {
+    const origin = journal?.projectState(business, project);
+    const state = origin && journal.stateForRequest(origin.request);
+    return state?.selection?.bindings.find(b => b.digest === state.plan_digest)?.plan;
+  };
+  const inventory = state => {
+    const now = read(state.business);
+    if (!owner(state, now)) return [];
+    const found = resources(now.document, state.pm);
+    if (found.code) return [];
+    return Object.entries(now.document.projects).flatMap(([project, mapping]) => {
+      if (mapping.kind === 'library' || (admission && !admission({ business: state.business, project }).ready)) return [];
+      let config; try { config = loadProject(mapping.root); } catch { return []; }
+      if (config.id !== project) return [];
+      const previous = bindingFor(state.business, project);
+      const board = previous?.tracker.project ?? config.vars['tracker.project'];
+      if (!positive(board)) return [];
+      return [{ business: state.business, project, name: previous?.name ?? project,
+        tracker: { root: found.root, project: board }, mapping_revision: now.revision }];
+    });
+  };
   // The tracker root board and the staff for one business, or the setup wait code that names what is missing.
   const resources = (document, pm) => {
     const root = trackers?.[document.id]?.project;
@@ -41,6 +68,53 @@ export function hostPreparation({ dataRoot, organization, trackers = null }) {
     return staff ? { root, staff } : { code: 'request-staff-unavailable' };
   };
   return {
+    listProjects(state, identity, { remember = true } = {}) {
+      const rows = inventory(state);
+      if (remember && identity?.human === state.owner) displayed.set(state.business + '/' + state.request, structuredClone(rows));
+      return rows;
+    },
+    pickExisting(state, project) {
+      const row = displayed.get(state.business + '/' + state.request)?.find(row => row.project === project);
+      if (!row) refuse('request-existing-project-changed');
+      const now = inventory(state).find(row => row.project === project);
+      if (!now || digest(now) !== digest(row)) refuse('request-existing-project-changed');
+      return row;
+    },
+    prepareExisting(state, args, from) {
+      const now = read(state.business);
+      if (!owner(state, now)) return { ready: false, code: 'request-organization-unavailable' };
+      if (state.attachment?.mapping_revision !== now.revision) return { ready: false, code: 'request-existing-project-changed' };
+      const row = inventory(state).find(row => row.project === args.project);
+      if (!row) return { ready: false, code: 'request-project-refused' };
+      const mode = journal.projectState(state.business, args.project)?.mode ?? 'guided';
+      return prepareExistingPlan({ business: now.document, request: state.request, project: args.project, name: row.name, mode,
+        dataRoot, organizationRevision: now.revision, tracker: row.tracker, staff: resources(now.document, state.pm).staff,
+        intent: { text: from.text, source_message: from.source_message } });
+    },
+    withExisting(state, fn) { return work(() => organization.holdAsync(state.business, fn)); },
+    async attachExisting(state, plan) {
+      const checked = this.admitPlan(plan);
+      if (!checked.ready) refuse(checked.code);
+      const mode = journal.projectState(state.business, state.project);
+      const spec = await readSpec({ business: state.business, project: state.project });
+      if (!spec.confirmed) refuse('stale-spec');
+      let snapshot = null, candidate = null;
+      try {
+        const current = await catalog.resolve({ business: state.business, project: state.project });
+        const source = current.origin === 'product' && journal.snapshotRequest(current.id);
+        // Exact prior intent is a provable fit. New intent needs PM discovery/revision,
+        // never guessed semantic equivalence or authority from a bare requirement id.
+        if (source && journal.intent(state.business, source)?.text === plan.intent.text) {
+          const original = journal.stateForRequest(source);
+          const submitted = journal.submission(state.business, source, current.approval.decision);
+          if (original?.project === state.project && submitted) { snapshot = current.id; candidate = submitted.candidate; }
+        }
+      } catch (e) {
+        if (!['requirement-snapshot-required','requirement-snapshot-revoked','prd-candidate-stale'].includes(e.code)) throw e;
+      }
+      const late = this.admitPlan(plan); if (!late.ready) refuse(late.code);
+      return { spec_commit: spec.commit, mode_revision: mode?.revision ?? 1, snapshot, candidate };
+    },
     async preparePlans(state, args, from) {
       const now = read(state.business);
       if (!now) return { ready: false, code: 'request-organization-unavailable' };
@@ -60,6 +134,14 @@ export function hostPreparation({ dataRoot, organization, trackers = null }) {
       if (found.code) return { ready: false, code: found.code };
       if (plan.tracker.root !== found.root) return { ready: false, code: 'request-tracker-unavailable' };
       if (Object.keys(found.staff).some(k => plan.staff[k] !== found.staff[k])) return { ready: false, code: 'request-staff-unavailable' };
+      if (plan.existing) {
+        const row = inventory({ business: plan.business, owner: now.document.human, pm: plan.staff.pm }).find(row => row.project === plan.project);
+        if (!row || digest(row.tracker) !== digest(plan.tracker)) return { ready: false, code: 'request-existing-project-changed' };
+        const mode = journal.projectState(plan.business, plan.project)?.mode ?? 'guided';
+        const current = prepareExistingPlan({ business: now.document, request: plan.request, project: plan.project, name: row.name, mode,
+          dataRoot, organizationRevision: now.revision, tracker: row.tracker, staff: found.staff, intent: plan.intent, chat_project: plan.chat_project });
+        if (digest(current) !== digest(plan)) return { ready: false, code: 'request-existing-project-changed' };
+      }
       return { ready: true };
     },
   };

packages/bus/src/request-lifecycle.mjs

@@ -1,16 +1,19 @@
+import { requestArchived } from './broker.mjs';
 // Host controller for pre-task intake. Task 1 prepares and records selections only. Task 3 (#1839) adds the
 // PM's question and the owner's Console answer, existing-project pick and cancellation. The owner's mode change is Task 4's
 // modeConsole, which moves the project's mode revision and every request attached to it.
 // Later executors must consume these exact immutable bindings, never approvalChoice.
 import { createContinuations } from './request-continuation.mjs';
 import { lstatSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { basename } from 'node:path';
 import { join, dirname } from 'node:path';
 import { exact, object, id, key, text, digest, validatePlan, refuse, positive, optionList, QUESTION_PHASES, PICKER_CODES } from './request-store.mjs';
 
 export function createRequestLifecycle({ journal, services }) {
   if (!journal || !services || !['origin','authorize','raiseDecision','readDecision','project'].every(k => typeof services[k] === 'function')) refuse('request-services-unavailable');
   const continuations = createContinuations({ journal, services });
-  let closing = false, recovery = null, cursor = 0;
+  let closing = false, recovery = null, recoveryAgain = false, cursor = 0;
   const pending = new Map();
   const serial = (business, request, fn) => {
     const k = business + '/' + request;
@@ -18,6 +21,9 @@ export function createRequestLifecycle({ journal, services }) {
     pending.set(k, job);
     return job.finally(() => { if (pending.get(k) === job) pending.delete(k); });
   };
+  const active = (state, ...projects) => {
+    if (requestArchived(state, services, projects)) refuse('project-archived');
+  };
   const stateOf = (business, request) => journal.readRequest(business, request) ?? refuse('request-not-found');
   const actor = identity => ({ role: identity?.role ?? null, run: identity?.run ?? null });
   const authorize = (identity, state, operation) => services.authorize(identity, state, operation);
@@ -36,6 +42,7 @@ export function createRequestLifecycle({ journal, services }) {
       if (old) { authorize(identity, old, 'get'); return old; }
       const state = { business: identity.business, request: args.request, owner: source.owner, pm: source.pm };
       authorize(identity, state, 'open');
+      active({ ...state, thread: source.thread });
       return journal.transaction(tx => {
         const result = tx.appendRequest({ business: state.business, request: state.request, expectedRevision: 0, kind: 'opened', actor: actor(identity),
           body: { source_message: source.source_message, thread: source.thread, session: source.session, owner: source.owner, pm: source.pm,
@@ -59,18 +66,19 @@ export function createRequestLifecycle({ journal, services }) {
       content: args.path === state.candidate.prd_path ? material.prd : material.requirements.find(r => r.id === selected.id) };
 
   }
-  async function projects(identity, args) {
+  async function projects(identity, args, remember = true) {
     exact(args, ['request']);
     const state = await get(identity, args);
-    const rows = await services.listProjects?.(structuredClone(state), identity) ?? [];
+    const rows = await services.listProjects?.(structuredClone(state), identity, { remember }) ?? [];
     authorize(identity, stateOf(state.business, state.request), 'get');
     if (!Array.isArray(rows)) refuse('invalid-request-projects');
-    return rows.filter(p => object(p) && p.business === state.business && key(p.project) && services.project(state.business, p.project) &&
+    return rows.filter(p => object(p) && p.business === state.business && key(p.project) && !services.projectArchived?.(state.business, p.project) && services.project(state.business, p.project) &&
       text(p.name, 200) && object(p.tracker) && Number.isSafeInteger(p.tracker.root) && p.tracker.root > 0 && Number.isSafeInteger(p.tracker.project) && p.tracker.project > 0)
-      .map(p => ({ business: state.business, project: p.project, name: p.name, tracker: { root: p.tracker.root, project: p.tracker.project } }));
+      .map(p => ({ business: state.business, project: p.project, name: p.name, tracker: { root: p.tracker.root, project: p.tracker.project }, ...(p.mapping_revision ? { mapping_revision: p.mapping_revision } : {}) }));
   }
   function localPlan(p, state, args, source) {
     validatePlan(p);
+    active(state, p.project, p.source.project, p.chat_project);
     if (p.business !== state.business || p.request !== state.request || p.project !== args.project || p.name !== args.name ||
         p.source.project !== args.source_project || p.tracker.project !== args.tracker_project || p.staff.pm !== state.pm ||
         p.intent.text !== source.text || p.intent.source_message !== source.source_message || p.intent.generated !== false) refuse('request-plan-binding-refused');
@@ -105,6 +113,8 @@ export function createRequestLifecycle({ journal, services }) {
   const associated = (rows, p) => Array.isArray(rows) && rows.some(m => object(m) && m.business === p.business && m.project === p.project &&
     m.name === p.name && m.tracker?.root === p.tracker.root && m.tracker?.project === p.tracker.project);
   function staleCode(plan, state, args, source, rows) {
+    try { active(state, plan.project, plan.source.project, plan.chat_project); }
+    catch (e) { if (e.code === 'project-archived') return e.code; throw e; }
     if (plan.existing && !associated(rows, plan)) return 'request-existing-project-changed';
     try { localPlan(plan, state, args, source); } catch (e) {
       if (!e.code?.startsWith('request-')) throw e;
@@ -129,6 +139,7 @@ export function createRequestLifecycle({ journal, services }) {
       if (old) { if (old.proposal_digest !== proposal_digest) refuse('request-operation-conflict'); return state; }
       if (state.revision !== args.revision) refuse('request-revision-conflict');
       if (state.phase !== 'selection' || state.wait?.kind === 'decision') refuse('request-phase-refused');
+      active(state, args.source_project, args.project);
       const source = services.origin(identity, args.request);
       if (!services.project(state.business, args.source_project)) refuse('request-project-refused');
       // The route is journaled when the owner stages it; no setup wait code can erase or imply it.
@@ -138,12 +149,13 @@ export function createRequestLifecycle({ journal, services }) {
       if (!existing && services.project(state.business, args.project)) refuse('request-project-collision');
       let candidate = null;
       if (existing) {
-        candidate = (await projects(identity, { request: args.request })).find(p => p.project === args.project && p.tracker.project === args.tracker_project && p.name === args.name);
+        candidate = (await projects(identity, { request: args.request }, false)).find(p => p.project === args.project && p.tracker.project === args.tracker_project && p.name === args.name);
         if (!candidate || args.source_project !== args.project) refuse('request-project-refused');
       }
       const prepare = existing ? services.prepareExisting : services.preparePlans;
       const recheck = () => {
         const current = stateOf(state.business, state.request); authorize(identity, current, 'propose');
+        active(current, args.source_project, args.project);
         if (current.revision !== args.revision) refuse('request-revision-conflict');
         return current;
       };
@@ -178,7 +190,7 @@ export function createRequestLifecycle({ journal, services }) {
       if (question.length > 4096) return pendingWait('request-plan-display-too-large');
       // Last await. Preparation and admission may have outlived the association they bound, so read
       // it again and let the synchronous guard in the transaction decide before any decision exists.
-      const rows = existing ? await projects(identity, { request: args.request }) : null;
+      const rows = existing ? await projects(identity, { request: args.request }, false) : null;
       return journal.transaction(tx => {
         state = recheck();
         for (const plan of plans) {
@@ -201,12 +213,38 @@ export function createRequestLifecycle({ journal, services }) {
   // to selection so the owner gets a fresh preview; one found stale after an effect waits with its evidence kept.
   // Anything else waits as uncertain until recovery drives it again.
   async function runBootstrap(state) {
-    if (!services.bootstrap || state.phase !== 'bootstrap' || !state.plan_digest) return state;
+    if (!state.plan_digest) return state;
     const binding = state.selection?.bindings.find(b => b.digest === state.plan_digest);
-    if (!binding || binding.plan.existing) return state;
+    if (!binding) return state;
+    const executing = binding.plan.existing
+      ? services.attachExisting && state.phase === 'discovery' && !state.attachment?.completed
+      : services.bootstrap && state.phase === 'bootstrap';
+    if (!executing) return state;
+    try { active(state, binding.plan.project, binding.plan.source?.project, binding.plan.chat_project); }
+    catch (e) { if (e.code !== 'project-archived') throw e; return wait(state, e.code); }
+    if (binding.plan.existing) {
+      const execute = async () => {
+        const missing = await admission(binding.plan, state); if (missing) return wait(state, missing);
+        active(state, binding.plan.project);
+        const outcome = await services.attachExisting(state, binding.plan);
+        return journal.transaction(tx => {
+          const now = stateOf(state.business, state.request);
+          active(now, binding.plan.project);
+          if (now.revision !== state.revision) refuse('request-revision-conflict');
+          const header = { version: 1, business: state.business, request: state.request, op: `bootstrap:${binding.digest}:attach`, kind: 'bootstrap', digest: binding.digest };
+          journal.prepareEffect({ ...header, stage: 'prepared', result: null, code: null });
+          journal.finishEffect({ ...header, stage: 'committed', result: { project: state.project, ...outcome }, code: null });
+          return append(now, 'bootstrap.completed', { digest: binding.digest, project: state.project, chat_project: state.chat_project,
+            organization_revision: binding.plan.organization_revision, ...outcome }, null, tx.appendRequest);
+        });
+      };
+      try { return await (services.withExisting ? services.withExisting(state, execute) : execute()); }
+      catch (e) { return wait(stateOf(state.business, state.request), e.code ?? 'request-attachment-unavailable'); }
+    }
     let done;
     try { done = await services.bootstrap({ binding: structuredClone(binding), state: structuredClone(state) }); }
     catch (e) {
+      if (e?.code === 'project-archived') return wait(state, e.code);
       if (e?.code === 'request-plan-stale') {
         // Before any effect the plan is only stale and the owner gets a fresh preview. Once an effect has a committed receipt
         // (#800 is checked before every effect, not only the first), what is done stays where it is and the request waits, so no
@@ -232,10 +270,12 @@ export function createRequestLifecycle({ journal, services }) {
       }
       if (state.revision !== args.revision) refuse('request-revision-conflict');
       if (!['discovery','prd-review','planning'].includes(state.phase) || state.wait?.code === 'prd-approval') refuse('request-phase-refused');
+      active(state);
       const { revision, op, ...input } = args;
       const material = await services.readCandidate({ ...input, project: state.project, mode_revision: state.mode_revision }, state.business);
       const recheck = () => {
         const now = stateOf(state.business, state.request); authorize(identity, now, 'prd.submit');
+        active(now);
         if (now.revision !== args.revision) refuse('request-revision-conflict');
         if (journal.projectState(state.business, state.project)?.revision !== state.mode_revision) refuse('prd-admission-revoked');
         return now;
@@ -271,13 +311,14 @@ export function createRequestLifecycle({ journal, services }) {
       const proposal_digest = digest(args), old = journal.proposal(state.business, state.request, args.op);
       if (old) { if (old.proposal_digest !== proposal_digest) refuse('request-operation-conflict'); return state; }
       if (state.revision !== args.revision) refuse('request-revision-conflict');
+      if (['cancelled','delivered','complete'].includes(state.phase)) refuse('request-phase-refused');
       if (!state.project || args.mode_revision !== state.mode_revision) refuse('request-mode-revision-conflict');
       const mode_revision = journal.changeMode({ business: state.business, project: state.project, revision: args.mode_revision, mode: args.mode, op: args.op, request: args.request });
       services.catalog.invalidate(state.business, state.project, 'request-mode-changed');
       for (const row of journal.listRequests()) {
         if (row.business !== state.business) continue;
         const attached = stateOf(row.business, row.request);
-        if (attached.project === state.project && attached.phase !== 'cancelled') append(attached, 'mode.changed', { mode: args.mode, mode_revision, op: args.op, proposal_digest });
+        if (attached.project === state.project && !['cancelled','delivered','complete'].includes(attached.phase)) append(attached, 'mode.changed', { mode: args.mode, mode_revision, op: args.op, proposal_digest });
       }
       return stateOf(state.business, state.request);
     }));
@@ -300,6 +341,8 @@ export function createRequestLifecycle({ journal, services }) {
       const binding = state.selection.bindings.find(b => b.choice === close.choice);
       if (!binding) refuse('request-selection-refused');
       const p = binding.plan;
+      try { active(state, p.project, p.source.project, p.chat_project); }
+      catch (e) { return wait(state, e.code); }
       const planArgs = { project: p.project, name: p.name, source_project: p.source.project, tracker_project: p.tracker.project };
       const planSource = { text: p.intent.text, source_message: state.source_message };
       const inventory = async () => p.existing ? await services.listProjects?.(structuredClone(state)) ?? [] : null;
@@ -320,11 +363,27 @@ export function createRequestLifecycle({ journal, services }) {
   }
   async function resume(business, request) {
     return serial(business, request, async () => {
-      const state = await settle(business, request);
-      continuations.resume(state);
-      return stateOf(business, request);
+      for (;;) {
+        const state = await settle(business, request);
+        const quote = await quoteFor(state);
+        // Resolving the catalog can revoke approval and append prd.invalidated. Never
+        // dispatch the pre-lookup state: discard its quote and re-settle current bindings.
+        const current = stateOf(business, request);
+        if (current.revision !== state.revision || current.phase !== state.phase || current.snapshot !== state.snapshot) continue;
+        // No await between this journal read and the synchronous continuation writes.
+        continuations.resume(current, quote);
+        return stateOf(business, request);
+      }
     });
   }
+  // D3 (#797): implementation/review continuations quote the task-cited approved requirement texts.
+  // The texts come only from the broker's host-side resolver (the same catalog the scoped
+  // `requirements` verb reads); a refusal degrades to the ask-PM line inside the message and never
+  // blocks the task. Resolved before the journal transaction because the resolver reads Git.
+  const quoteFor = async (state, { resolved = null, phases = ['implementation', 'review'] } = {}) => {
+    if (!services.continuationQuote || !state?.snapshot || !phases.includes(state.phase)) return null;
+    try { return await services.continuationQuote(state, resolved); } catch { return { unavailable: true }; }
+  };
   // The Task 3 verbs share one shape: validate, authorize, replay a recorded op, then check revision and phase in
   // that order, so a lost response can be retried and a stale client always learns the revision moved.
   const need = name => typeof services[name] === 'function' ? services[name] : refuse('request-services-unavailable');
@@ -333,7 +392,7 @@ export function createRequestLifecycle({ journal, services }) {
     if (old && old.proposal_digest !== proposal_digest) refuse('request-operation-conflict');
     return old !== null;
   };
-  const ended = state => { if (['cancelled', 'delivered'].includes(state.phase)) refuse('request-phase-refused'); };
+  const ended = state => { if (['cancelled', 'delivered', 'complete'].includes(state.phase)) refuse('request-phase-refused'); };
   // The PM's one outstanding question. It is a journal event, not a decision: an answer is text and approves nothing.
   async function question(identity, args) {
     exact(args, ['request','revision','op','text'], ['options']);
@@ -381,14 +440,19 @@ export function createRequestLifecycle({ journal, services }) {
       if (replay(state, args.op, proposal_digest)) return state;
       if (state.revision !== args.revision) refuse('request-revision-conflict');
       if (state.phase !== 'selection' || state.route !== 'existing' || state.wait?.kind !== 'setup' || !PICKER_CODES.includes(state.wait.code)) refuse('request-phase-refused');
+      active(state, args.project);
       // The inventory is asynchronous; the transaction below rereads the journal and the check is repeated there.
-      if (!(await projects(identity, { request: args.request })).some(p => p.project === args.project)) refuse('request-project-refused');
+      const picked = await services.pickExisting?.(structuredClone(state), args.project, identity);
+      const rows = await projects(identity, { request: args.request }, false);
+      active(state, args.project);
+      if (!rows.some(p => p.project === args.project)) refuse('request-project-refused');
       return journal.transaction(tx => {
         const current = tx.readRequest(state.business, state.request) ?? refuse('request-not-found');
         authorize(identity, current, 'attach');
+        active(current, args.project);
         if (current.revision !== args.revision) refuse('request-revision-conflict');
         need('recordAttach')(identity, structuredClone(current), { project: args.project, op: args.op });
-        return append(current, 'attach.selected', { op: args.op, proposal_digest, project: args.project }, identity, tx.appendRequest);
+        return append(current, 'attach.selected', { op: args.op, proposal_digest, project: args.project, ...(picked ? { mapping_revision: picked.mapping_revision } : {}) }, identity, tx.appendRequest);
       });
     });
   }
@@ -404,7 +468,7 @@ export function createRequestLifecycle({ journal, services }) {
       if (replay(state, args.op, proposal_digest)) return state;
       if (state.revision !== args.revision) refuse('request-revision-conflict');
       ended(state);
-      const decision = state.wait?.kind === 'decision' ? state.selection?.decision ?? refuse('invalid-request-event') : null;
+      const decision = state.wait?.kind === 'decision' ? state.wait.subject : null;
       return journal.transaction(tx => {
         if (decision !== null) need('withdrawDecision')(identity, structuredClone(state), decision);
         need('recordCancel')(identity, structuredClone(state), { op: args.op, decision });
@@ -420,20 +484,96 @@ export function createRequestLifecycle({ journal, services }) {
       const proposal_digest = digest(args), old = journal.proposal(state.business, state.request, args.op);
       if (old) { if (old.proposal_digest !== proposal_digest) refuse('request-operation-conflict'); return state; }
       if (state.revision !== args.revision) refuse('request-revision-conflict');
+      if (state.phase === 'delivery') { services.progress(state); refuse('request-delivery-required'); }
       if (!state.snapshot || !services.progress) refuse('request-evidence-required');
-      await services.catalog.resolve({ business: state.business, project: state.project, snapshot: state.snapshot });
+      const resolved = await services.catalog.resolve({ business: state.business, project: state.project, snapshot: state.snapshot });
+      // The post-advance coder/review continuation quotes the approved texts; resolve it here (Git
+      // reads) and hand it into the transaction-built message. planning→implementation and
+      // implementation→review dispatch those steps, and a review phase can loop back to
+      // implementation on a changes verdict, so every advance out of those three phases resolves.
+      // The pre-append state carries the same product, snapshot and task citations as the next one.
+      const quote = await quoteFor(state, { resolved, phases: ['planning', 'implementation', 'review'] });
       return journal.transaction(tx => {
         state = stateOf(state.business, state.request); authorize(identity, state, 'advance');
         if (state.revision !== args.revision) refuse('request-revision-conflict');
         const progress = services.progress(state);
         const result = append(state, 'advanced', { op: args.op, proposal_digest, from: state.phase, ...progress }, identity, tx.appendRequest);
         services.record?.(identity, 'request.advance', result);
-        continuations.resume(result);
+        continuations.resume(result, quote);
         return result;
       });
     });
   }
-  return Object.freeze({ open, get, projects, propose, submit, question, answer, attach, cancel, advance, modeConsole,
+  async function deliver(identity, args) {
+    exact(args, ['request','revision','op','task_ref','verdict','path','verification_record']);
+    exact(args.verification_record, ['path','commit']);
+    if (!id(args.request) || !id(args.op) || !id(args.verdict) || !text(args.task_ref, 160) || !text(args.path, 4096) ||
+        !text(args.verification_record.path, 256) || !/^[a-f0-9]{40}$/.test(args.verification_record.commit) || !Number.isSafeInteger(args.revision) || args.revision < 1) refuse('invalid-request');
+    return serial(identity.business, args.request, async () => {
+      let state = stateOf(identity.business, args.request); authorize(identity, state, 'deliver');
+      const proposal = digest(args), old = journal.effects(state.business, state.request).filter(e => e.kind === 'delivery');
+      const committed = old.find(e => e.stage === 'committed');
+      if (committed) {
+        if (committed.op === args.op && committed.digest !== proposal) refuse('request-operation-conflict');
+        const d = committed.result;
+        if (d.task_ref !== args.task_ref || d.verdict !== args.verdict || d.artifact.path !== args.path || d.verification.record_path !== args.verification_record.path || d.verification.record_commit !== args.verification_record.commit) refuse('request-operation-conflict');
+        return d;
+      }
+      if (state.revision !== args.revision) refuse('request-revision-conflict');
+      if (state.phase !== 'delivery') refuse('request-phase-refused');
+      const header = { version: 1, business: state.business, request: state.request, op: args.op, kind: 'delivery', digest: proposal };
+      journal.prepareEffect({ ...header, stage: 'prepared', result: null, code: null });
+      const evidence = services.deliveryEvidence(state, args);
+      const [verification, artifact] = await Promise.all([services.readVerification(state, args.verification_record), services.readReviewedArtifact(state, evidence.commit, args.path)]);
+      let record; try { record = JSON.parse(verification.content); } catch { refuse('request-verification-refused'); }
+      exact(record, ['version','task_ref','review_request','commit','results'], [], 'request-verification-refused');
+      if (verification.commit !== args.verification_record.commit || record.version !== 1 || record.task_ref !== args.task_ref || record.review_request !== evidence.review_request || record.commit !== evidence.commit || record.results !== evidence.results || !text(record.results)) refuse('request-verification-refused');
+      if (artifact.mime !== 'text/html') refuse('artifact-type-refused');
+      await services.catalog.resolve({ business: state.business, project: state.project, snapshot: state.snapshot });
+      const filename = basename(args.path);
+      if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(filename)) refuse('artifact-path-invalid');
+      return journal.transaction(tx => {
+        state = stateOf(state.business, state.request); authorize(identity, state, 'deliver');
+        if (state.revision !== args.revision || state.phase !== 'delivery') refuse('request-revision-conflict');
+        const again = services.deliveryEvidence(state, args);
+        if (digest(again) !== digest(evidence)) refuse('request-evidence-required');
+        const value = { version: 1, id: randomUUID(), business: state.business, request: state.request, project: state.project, snapshot: state.snapshot,
+          task_ref: args.task_ref, commit: evidence.commit, review_request: evidence.review_request, verdict: evidence.verdict,
+          artifact: { path: args.path, blob: artifact.blob, sha256: artifact.sha256, bytes: artifact.bytes.length, mime: artifact.mime },
+          verification: { record_path: args.verification_record.path, record_commit: args.verification_record.commit }, message: null };
+        const result = append(state, 'advanced', { op: args.op, proposal_digest: proposal, from: 'delivery', phase: 'complete', tasks: state.tasks, evidence: evidence.evidence }, identity, tx.appendRequest);
+        continuations.resume({ ...result, delivery: value.id, delivery_evidence: value });
+        const notice = journal.effects(state.business, state.request).find(e => e.kind === 'continuation' && e.stage === 'uncertain' && e.result?.intent?.phase === 'complete' && e.result.intent.revision === result.revision && e.result.intent.step === 'send_message');
+        if (!notice?.result?.message) refuse('request-notification-unavailable');
+        value.message = notice.result.message;
+        services.record?.(identity, 'request.deliver', result);
+        journal.finishEffect({ ...header, stage: 'committed', result: value, code: null });
+        return value;
+      });
+    });
+  }
+  async function artifactConsole(identity, args) {
+    exact(args, ['request','delivery']);
+    if (!id(args.request) || !id(args.delivery)) refuse('invalid-request');
+    const state = stateOf(identity.business, args.request); authorize(identity, state, 'artifactConsole');
+    const d = state.delivery_evidence;
+    if (!d || d.id !== args.delivery) refuse('request-not-found');
+    const artifact = await services.readReviewedArtifact(state, d.commit, d.artifact.path);
+    const current = stateOf(identity.business, args.request); authorize(identity, current, 'artifactConsole');
+    if (current.delivery !== d.id || artifact.sha256 !== d.artifact.sha256 || artifact.blob !== d.artifact.blob || artifact.bytes.length !== d.artifact.bytes) refuse('request-evidence-required');
+    return { mime: d.artifact.mime, filename: basename(d.artifact.path), base64: artifact.bytes.toString('base64'), sha256: artifact.sha256 };
+  }
+  return Object.freeze({ open, get, projects, propose, submit, question, answer, attach, cancel, advance, deliver, artifactConsole, modeConsole,
+    reviewScope: (business, request, task, project, snapshot, coder, reviewer) => {
+      if (typeof request !== 'string') return false;
+      const row = journal.listRequests().find(r => r.business === business && r.request === request);
+      if (!row) return false;
+      const state = journal.readRequest(business, request);
+      const staff = state.selection?.bindings.find(b => b.digest === state.plan_digest)?.plan.staff;
+      return ['planning', 'implementation', 'review', 'delivery'].includes(state.phase) && state.project === project &&
+        state.snapshot === snapshot && !!snapshot && staff?.coder === coder && staff?.reviewer === reviewer &&
+        (state.phase === 'planning' || state.tasks.includes(task));
+    },
     hasWork: () => journal.listRequests().length > 0, launches: continuations.launches, launchResult: continuations.launchResult, manifestNeeded: continuations.manifestNeeded,
     draftConsole: async (identity, args) => {
       exact(args, ['request']); if (!id(args.request)) refuse('invalid-request');
@@ -454,16 +594,25 @@ export function createRequestLifecycle({ journal, services }) {
     close: async () => { closing = true; await recovery; await Promise.allSettled([...pending.values()]); await services.catalog?.drain(); },
     recover: ({ limit = Infinity } = {}) => {
       if (closing) return Promise.resolve([]);
-      if (recovery) return recovery;
+      // An overlapping event may concern any already-inspected request. Keep a
+      // full reinspection cycle pending, using the same per-batch limit.
+      if (recovery) { recoveryAgain = true; return recovery; }
       recovery = (async () => {
-        const states = [], rows = journal.listRequests();
-        const count = Math.min(rows.length, limit), start = cursor % (rows.length || 1);
-        for (let n = 0; n < count; n++) {
-          if (closing) break;
-          const { business, request } = rows[(start + n) % rows.length];
-          states.push(await resume(business, request));
-        }
-        cursor = (start + count) % (rows.length || 1);
+        const states = [];
+        let remaining = Math.min(journal.listRequests().length, limit);
+        do {
+          recoveryAgain = false;
+          const rows = journal.listRequests();
+          const count = Math.min(rows.length, limit, remaining), start = cursor % (rows.length || 1);
+          for (let n = 0; n < count; n++) {
+            if (closing) break;
+            const { business, request } = rows[(start + n) % rows.length];
+            states.push(await resume(business, request));
+          }
+          cursor = (start + count) % (rows.length || 1);
+          remaining = recoveryAgain ? journal.listRequests().length : Math.max(0, remaining - count);
+          if (count === 0) break;
+        } while (remaining > 0 && !closing);
         return states;
       })().finally(() => { recovery = null; });
       return recovery;

packages/bus/src/request-store.mjs

@@ -1,8 +1,8 @@
 // Trusted host journal. No SQL, transition or effect interface is exposed to workers.
 import { createHash } from 'node:crypto';
 import { isAbsolute, normalize } from 'node:path';
-import { ID_PATTERN, parseGiteaUrl } from '../../business/src/vocabulary.mjs';
-import { checkVars } from '../../business/src/vars.mjs';
+import { ID_PATTERN, parseGiteaUrl } from '../../organization/src/vocabulary.mjs';
+import { checkVars } from '../../organization/src/vars.mjs';
 
 export class RequestError extends Error {
   constructor(code) { super(code); this.code = code; }
@@ -123,10 +123,23 @@ function reduce(state, e) {
     s.project = null; s.chat_project = null; s.mode = null; s.mode_revision = 0; s.plan_digest = null; s.selection = null; s.phase = 'selection';
     s.wait = { kind: 'setup', code: b.code, subject: s.request, resume_phase: 'selection', observed_revision: s.revision };
   } else if (e.kind === 'bootstrap.completed') {
-    exact(b, ['digest','project','chat_project','spec_commit','organization_revision'], [], code);
-    if (s.phase !== 'bootstrap' || s.plan_digest !== b.digest || b.project !== s.project || !id(b.chat_project) || !oid(b.spec_commit) || !text(b.organization_revision, 256)) refuse(code);
+    exact(b, ['digest','project','chat_project','spec_commit','organization_revision'], ['mode_revision','snapshot','candidate'], code);
+    const existing = s.selection?.bindings.find(p => p.digest === s.plan_digest)?.plan.existing;
+    if ((existing ? s.phase !== 'discovery' || s.attachment?.completed : s.phase !== 'bootstrap') ||
+        s.plan_digest !== b.digest || b.project !== s.project || !(existing ? nullableId(b.chat_project) : id(b.chat_project)) || !oid(b.spec_commit) || !text(b.organization_revision, 256)) refuse(code);
     s.chat_project = b.chat_project; s.spec_commit = b.spec_commit; s.phase = 'discovery';
     s.wait = { kind: 'setup', code: 'request-discovery-unavailable', subject: s.request, resume_phase: 'discovery', observed_revision: s.revision };
+    if (existing) {
+      if (!positive(b.mode_revision) || !nullableId(b.snapshot) || (b.snapshot === null) !== (b.candidate === null)) refuse(code);
+      s.mode_revision = b.mode_revision;
+      if (s.attachment) s.attachment.completed = true;
+      if (b.snapshot) {
+        validateCandidate(b.candidate);
+        if (b.candidate.project !== s.project || b.candidate.mode_revision !== s.mode_revision || b.candidate.spec_commit !== s.spec_commit) refuse(code);
+        s.candidate = structuredClone(b.candidate); s.snapshot = b.snapshot; s.phase = 'planning';
+        s.wait = { kind: 'setup', code: 'request-planning-unavailable', subject: s.request, resume_phase: 'planning', observed_revision: s.revision };
+      }
+    } else if (['mode_revision','snapshot','candidate'].some(k => k in b)) refuse(code);
   } else if (e.kind === 'question.asked') {
     // The PM's one outstanding question. The id is part of the body so a reader never recomputes it.
     exact(b, ['op','proposal_digest','id','text','options'], [], code);
@@ -144,10 +157,14 @@ function reduce(state, e) {
   } else if (e.kind === 'attach.selected') {
     // The owner's pick of an existing project. It is a pick only: no mapping, effect or decision exists until the
     // PM proposes exactly this project and the owner confirms the decision that proposal raises.
-    exact(b, ['op','proposal_digest','project'], [], code);
+    exact(b, ['op','proposal_digest','project'], ['mapping_revision'], code);
     if (!id(b.op) || !hash(b.proposal_digest) || !key(b.project)) refuse(code);
     if (s.phase !== 'selection' || s.route !== 'existing' || s.wait?.kind !== 'setup' || !PICKER_CODES.includes(s.wait.code)) refuse(code);
     s.wait = { kind: 'setup', code: 'request-attachment-selected', subject: b.project, resume_phase: 'selection', observed_revision: s.revision };
+    if (b.mapping_revision !== undefined) {
+      if (!hash(b.mapping_revision)) refuse(code);
+      s.attachment = { project: b.project, mapping_revision: b.mapping_revision };
+    }
   } else if (e.kind === 'prd.submitted') {
     exact(b, ['candidate','decision','op','proposal_digest','authors','route'], [], code);
     validateCandidate(b.candidate);
@@ -187,7 +204,7 @@ function reduce(state, e) {
     exact(b, ['decision'], ['op','proposal_digest'], code);
     if (('op' in b) !== ('proposal_digest' in b) || ('op' in b && (!id(b.op) || !hash(b.proposal_digest)))) refuse(code);
     if (s.phase === 'delivered') refuse(code);
-    if (s.wait?.kind === 'decision' ? s.selection?.decision !== b.decision || s.wait.subject !== b.decision : b.decision !== null) refuse(code);
+    if (s.wait?.kind === 'decision' ? s.wait.subject !== b.decision : b.decision !== null) refuse(code);
     s.phase = 'cancelled'; s.wait = null; s.selection = null;
   } else refuse(code);
   return s;
@@ -214,6 +231,8 @@ export function createRequestStore(store) {
     const latest = new Map();
     for (const launch of launches) if (active.has(launch.key)) latest.set(launch.instance, launch);
     const last = launches.findLast(launch => launch.code && latest.get(launch.instance) === launch);
+    const delivery = store.get("SELECT result FROM request_effects WHERE business=? AND request=? AND kind='delivery' AND stage='committed' ORDER BY seq LIMIT 1", business, request);
+    if (delivery && state.phase === 'complete') { const value = JSON.parse(delivery.result); state.delivery = value.id; state.delivery_evidence = value; }
     state.launch_refusal = last ? { instance: last.instance, code: last.code, key: last.key } : null;
     return state;
   };
@@ -270,8 +289,17 @@ export function createRequestStore(store) {
       const op = step => store.get("SELECT result FROM request_effects WHERE business=? AND request=? AND op=? AND kind='bootstrap' AND stage='committed'",
         e.business, e.request, `bootstrap:${e.body.digest}:${step}`);
       if (e.kind === 'bootstrap.completed') {
-        const done = op('activate');
+        const existing = state.selection?.bindings.find(b => b.digest === state.plan_digest)?.plan.existing;
+        const done = op(existing ? 'attach' : 'activate');
         if (!done || JSON.parse(done.result).project !== e.body.project) refuse('invalid-request-event');
+        if (existing) {
+          const { project, ...outcome } = JSON.parse(done.result);
+          if (!equal(outcome, Object.fromEntries(['spec_commit','mode_revision','snapshot','candidate'].map(k => [k, e.body[k]])))) refuse('invalid-request-event');
+          if (e.body.snapshot) {
+            const snap = store.get('SELECT body FROM request_snapshots WHERE business=? AND project=? AND id=?', e.business, project, e.body.snapshot);
+            if (!snap || JSON.parse(snap.body).records_commit !== e.body.candidate.records_commit) refuse('invalid-request-event');
+          }
+        }
       } else if (op('mapping')) refuse('invalid-request-event');
     }
     store.run('INSERT INTO request_events(business,request,revision,kind,actor_role,actor_run,at,body) VALUES(?,?,?,?,?,?,?,?)',
@@ -334,6 +362,10 @@ export function createRequestStore(store) {
       return row ? JSON.parse(row.body) : null;
     },
     projectState,
+    intent: (business, request) => {
+      const row = store.get("SELECT body FROM request_events WHERE business=? AND request=? AND kind='opened'", business, request);
+      return row ? JSON.parse(row.body).intent : null;
+    },
     changeMode: ({ business, project, revision, mode, op, request }) => atomic(() => {
       const last = projectState(business, project);
       if ((last?.revision ?? 0) !== revision) refuse('request-mode-revision-conflict');

packages/bus/src/request-workspace.mjs

@@ -0,0 +1,63 @@
+// Resolve only a confirmed request's assigned coder and a host-recorded checkout.
+import { constants, openSync, closeSync, fstatSync, readFileSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { isAbsolute, join } from 'node:path';
+import { workspaceDir } from '../../seat/src/session.mjs';
+import { workspaceFiles } from '../../seat/src/workspace-files.mjs';
+
+const id = s => typeof s === 'string' && /^[A-Za-z0-9][A-Za-z0-9._-]{0,159}$/.test(s) && s !== '..';
+const unavailable = () => ({ available: false, entries: [], truncated: false, contentAvailable: false, observedAt: new Date().toISOString() });
+const flags = constants.O_RDONLY | constants.O_NOFOLLOW;
+function proofFile(path) {
+  // Evidence directories are host-owned, but do not let a substituted ancestor redirect a read.
+  const fds = [];
+  try {
+    let dir = openSync('/', flags | constants.O_DIRECTORY); fds.push(dir);
+    const parts = path.split('/').filter(Boolean), file = parts.pop();
+    if (!file || parts.some(p => p === '.' || p === '..') || file === '.' || file === '..') throw new Error('unsafe proof');
+    for (const part of parts) { dir = openSync(`/proc/self/fd/${dir}/${part}`, flags | constants.O_DIRECTORY); fds.push(dir); }
+    const fd = openSync(`/proc/self/fd/${dir}/${file}`, flags); fds.push(fd);
+    const st = fstatSync(fd); if (!st.isFile() || st.size > 1024 * 1024 || st.nlink !== 1) throw new Error('unsafe proof');
+    return readFileSync(fd, 'utf8');
+  } finally { for (const fd of fds.reverse()) closeSync(fd); }
+}
+
+export function requestWorkspace({ dataRoot, state, events }) {
+  if (typeof dataRoot !== 'string' || !isAbsolute(dataRoot) || dataRoot.split('/').includes('..')) return unavailable();
+  if (!state || !id(state.business) || !id(state.request) || !id(state.project) || !id(state.pm) || !state.snapshot || !Array.isArray(state.tasks) || !state.tasks.length) return unavailable();
+  const binding = state.selection?.bindings?.filter(b => b.digest === state.plan_digest) ?? [];
+  if (binding.length !== 1 || binding[0].plan.business !== state.business || binding[0].plan.request !== state.request || binding[0].plan.project !== state.project || binding[0].plan.staff?.pm !== state.pm || !id(binding[0].plan.staff?.coder)) return unavailable();
+  const coder = binding[0].plan.staff.coder;
+  if (!Array.isArray(events) || events.length > 10000) return unavailable();
+  const rows = events.map(e => { try { return { ...e, body: typeof e.body === 'string' ? JSON.parse(e.body) : e.body }; } catch { return null; } }).filter(Boolean);
+  for (const task of state.tasks) {
+    if (typeof task !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_.:/-]{0,159}$/.test(task)) return unavailable();
+    const created = rows.find(e => e.kind === 'task.created' && e.actor_role === state.pm && e.subject === task && e.body?.request === state.request && e.body?.project_key === state.project && e.body?.requirement_snapshot === state.snapshot);
+    const assigned = rows.findLast(e => e.kind === 'task.assigned' && e.subject === task);
+    if (!created || assigned?.actor_role !== state.pm || assigned.body?.role !== coder) return unavailable();
+  }
+  const root = workspaceDir(dataRoot, state.business, coder), checkout = join(root, state.project);
+  if (/[\n\r;,]/.test(checkout)) return unavailable();
+  const launches = rows.filter(e => e.kind === 'session.launched' && e.actor_role === coder);
+  if (launches.some(e => e.body?.thread)) return unavailable();
+  let proven = false;
+  for (const e of launches.slice(-32)) {
+    if (!id(e.subject)) continue;
+    try {
+      const bundle = join(dataRoot, 'launches', state.business, e.subject, 'bundle');
+      const manifest = JSON.parse(proofFile(join(bundle, 'manifest.json')));
+      if (manifest.business !== state.business || manifest.instance !== coder || manifest.run !== e.subject || !Array.isArray(manifest.projects) || !manifest.projects.includes(state.project)) continue;
+      // The manifest projects field includes unsafe, kept entries. The host prompt records that
+      // outcome; do not treat a kept entry as a verified checkout.
+      const prompt = proofFile(join(bundle, 'prompt.md'));
+      if (createHash('sha256').update(prompt).digest('hex') !== manifest.files?.['prompt.md']) continue;
+      const lines = prompt.split('\n').filter(x => x.startsWith('- Project clones: '));
+      if (lines.length !== 1) continue;
+      const items = lines[0].slice('- Project clones: '.length).split('; ');
+      const item = items.find(x => x.startsWith(`${state.project} at ${checkout}, `));
+      if (item && (item.startsWith(`${state.project} at ${checkout}, on branch `) || item.startsWith(`${state.project} at ${checkout}, on no branch `))) proven = true;
+    } catch { /* missing or unsafe evidence never selects a workspace */ }
+  }
+  if (!proven) return unavailable();
+  try { return workspaceFiles(checkout); } catch { return unavailable(); }
+}

packages/bus/src/requirement-catalog.mjs

@@ -1,6 +1,7 @@
+import { requestArchived } from './broker.mjs';
 // Host-only admission. The journal's readCandidate/authority/approval adapters read current host state.
 import { exact, id, key, text, digest, refuse } from './request-store.mjs';
-export function createRequirementCatalog({ journal, readSpec, builtinBinding }) {
+export function createRequirementCatalog({ journal, readSpec, builtinBinding, projectArchived, threadProject }) {
   const append = (state, kind, body) => journal.appendRequest({ business: state.business, request: state.request,
     expectedRevision: state.revision, kind, body, actor: { role: null, run: null } });
   const eventFor = snap => journal.snapshotEvents(snap.business, snap.project).filter(e => e.snapshot === snap.id).at(-1);
@@ -11,7 +12,7 @@ export function createRequirementCatalog({ journal, readSpec, builtinBinding })
       for (const row of journal.listRequests()) {
         if (row.business !== business) continue;
         const state = journal.readRequest(business, row.request);
-        if (state.project === project && (state.candidate || state.snapshot)) append(state, 'prd.invalidated', { code });
+        if (state.project === project && !['complete','delivered','cancelled'].includes(state.phase) && (state.candidate || state.snapshot)) append(state, 'prd.invalidated', { code });
       }
     });
   }
@@ -52,6 +53,7 @@ export function createRequirementCatalog({ journal, readSpec, builtinBinding })
     const binding = journal.submission(state.business, state.request, args.decision) ?? refuse('prd-candidate-required');
     const old = journal.committed(state.business, 'prd-activate').find(e => e.request === state.request && e.result?.decision === args.decision);
     if (old) return structuredClone(journal.snapshot(old.result.snapshot));
+    if (requestArchived(state, { projectArchived, threadProject })) refuse('project-archived');
     if (state.phase !== 'prd-review' || state.wait?.subject !== args.decision || digest(state.candidate) !== digest(binding.candidate)) refuse('prd-admission-revoked');
     const authority = journal.authority(state, binding), approval = journal.approval(state, binding);
     const material = await journal.readCandidate(binding.candidate, state.business);
@@ -61,6 +63,7 @@ export function createRequirementCatalog({ journal, readSpec, builtinBinding })
     return journal.transaction(() => {
       const prior = journal.committed(state.business, 'prd-activate').find(e => e.request === state.request && e.result?.decision === args.decision);
       if (prior) return structuredClone(journal.snapshot(prior.result.snapshot));
+      if (requestArchived(state, { projectArchived, threadProject })) refuse('project-archived');
       const current = journal.readRequest(state.business, state.request);
       if (current.revision !== state.revision || current.wait?.subject !== args.decision || journal.projectState(state.business, state.project)?.revision !== binding.candidate.mode_revision) refuse('prd-admission-revoked');
       if (digest(journal.authority(current, binding)) !== digest(authority) || digest(journal.approval(current, binding)) !== digest(approval)) refuse('prd-admission-revoked');
@@ -91,7 +94,7 @@ export function createRequirementCatalog({ journal, readSpec, builtinBinding })
       const result = journal.snapshotEvent({ business: identity.business, project: args.project, snapshot: snap.id, kind: 'revoked', cause });
       for (const row of journal.listRequests()) {
         const state = journal.readRequest(row.business, row.request);
-        if (row.business === identity.business && state.project === args.project && state.snapshot === snap.id) append(state, 'prd.invalidated', { code: 'requirement-snapshot-revoked' });
+        if (row.business === identity.business && state.project === args.project && !['complete','delivered','cancelled'].includes(state.phase) && state.snapshot === snap.id) append(state, 'prd.invalidated', { code: 'requirement-snapshot-revoked' });
       }
       return result;
     });

packages/bus/src/runtime.mjs

@@ -1,45 +1,52 @@
 import { createRequirementsHost } from '../../tasks/src/builtin.mjs';
 import { createRequirementCatalog } from './requirement-catalog.mjs';
 import { readPrdMaterial } from '../../project/src/prd.mjs';
-import { lstatSync, readdirSync, readFileSync } from 'node:fs';
+import { lstatSync, mkdirSync, readdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { Store } from './store.mjs';
 import { createRequestStore } from './request-store.mjs';
 import { createRequestLifecycle } from './request-lifecycle.mjs';
+import { requestWorkspace } from './request-workspace.mjs';
+import { readReviewedArtifact } from '../../seat/src/artifact.mjs';
 import { executeBootstrap } from './request-bootstrap.mjs';
 import { hostPreparation } from './request-host.mjs';
-import { managedPaths, managedState } from '../../business/src/project-bootstrap.mjs';
+import { managedPaths, managedState } from '../../organization/src/project-bootstrap.mjs';
 import * as projectModule from '../../project/src/index.mjs';
 import * as libraryModule from '../../library/src/index.mjs';
-import { Broker, BusError, LIBRARY_FETCH_FIX } from './broker.mjs';
+import { Broker, projectArchived, BusError, LIBRARY_FETCH_FIX } from './broker.mjs';
 import { Credentials } from './credentials.mjs';
 import { serve } from './server.mjs';
-import { launchSettings } from '../../business/src/launch-settings.mjs';
+import { launchSettings } from '../../organization/src/launch-settings.mjs';
 import { readSessions, sessionsFile, stopSession } from '../../seat/src/session.mjs';
 import { compactionCount, storeDir } from '../../seat/src/compactions.mjs';
 import { publishRemote, workingRepo, WorkingError } from '../../seat/src/working.mjs';
 import { createLoader, hasModule } from '../../plugins/src/loader.mjs';
-import { pluginSettings } from '../../business/src/plugin-settings.mjs';
+import { installedSystemTypes } from '../../plugins/src/system-types.mjs';
+import { pluginSettings } from '../../organization/src/plugin-settings.mjs';
 import { loadManagementClient } from '../../model-proxy/src/client.mjs';
 import { ProxyPage } from './proxy-page.mjs';
+import { createModelCatalogue } from './model-catalogue.mjs';
 import { sha256 } from '../../model-proxy/src/common.mjs';
 import { initializeProxy } from '../../model-proxy/src/settings.mjs';
+import { createProxyLock } from './proxy-lock.mjs';
 import { ModelKeys, modelOrganization, stopModelRuns, MODEL_STOP_TIMEOUT_MS } from './model-keys.mjs';
-import { instanceSettings } from '../../business/src/instance-settings.mjs';
-import { organizationWriter, OrganizationError, setReplyLimits } from '../../business/src/organization.mjs';
+import { instanceSettings } from '../../organization/src/instance-settings.mjs';
+import { organizationWriter, OrganizationError, setReplyLimits } from '../../organization/src/organization.mjs';
+import { getProjectRemote } from '../../organization/src/project-remotes.mjs';
 import { credentialVerbs } from './credential-verbs.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { loadRole } from '../../business/src/role.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
-import { canonicalJson } from '../../business/src/util.mjs';
-import { busBusiness } from './business.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { loadRole } from '../../organization/src/role.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
+import { canonicalJson } from '../../organization/src/util.mjs';
+import { selectModelProvider } from '../../plugins/src/model-provider-selection.mjs';
+import { busOrganization } from './organization-context.mjs';
 import { webService } from './web.mjs';
 import { hostExecutor, sweepRunDir } from './host-run.mjs';
 import { grantKeys, hostGrant, hostReference, sweepHostKeys } from './host-grant.mjs';
 import { giteaGrant, giteaKeys, giteaStart, giteaReference } from './gitea-grant.mjs';
 import { verifyPrincipal } from './principal.mjs';
-import { loadAccess } from '../../business/src/access.mjs';
+import { loadAccess } from '../../organization/src/access.mjs';
 import { inspectInterpreter, recordInterpreterStart } from './interpreter.mjs';
 import { createPeerReader } from './peercred.mjs';
 import { createUsage } from './usage.mjs';
@@ -99,7 +106,9 @@ export async function harnessLevels({ log = (e) => process.stderr.write(`plugins
       log({ event: 'harness-levels-failed', name, message: e.message });
     }
   }
-  return (name) => levels.get(name) ?? null;
+  const lookup = (name) => levels.get(name) ?? null;
+  lookup.names = [...levels.keys()].sort();
+  return lookup;
 }
 // Row 224 C2-05b: a host-only adapter. A failed fetch keeps serving immutable old
 // objects, as C2-03a requires; no caller may select a repo, commit or sync --accept.
@@ -239,6 +248,7 @@ function modelRunInventory(dataRoot, bound, credentials) {
 
 export async function startBroker({
   dataRoot,
+  instanceRoot = null,
   businesses,
   launches = [],
   readers = [],
@@ -262,6 +272,7 @@ export async function startBroker({
   consoleOwners = [],
   // P1 validated sidecar from the trusted host; never a socket request setting.
   proxy = null,
+  org = null, instanceDataRoot = null, instanceConfigDir = null,
   // Host-only preparation/admission capabilities. The host builds its own from the organization writer and `trackers`
   // (request-host.mjs); anything given here replaces the host's, and a capability nothing supplies leaves a setup wait.
   requestServices = {},
@@ -269,6 +280,8 @@ export async function startBroker({
   // the host's new-project preparation reads each business's tracker root board from this one.
   trackers = null,
   builtinBinding = null,
+  modelCatalogue = null, // in-process fixture seam; boot JSON cannot supply a service
+  makeProviderLoader = createLoader, // in-process fixture seam; boot JSON cannot supply a function
 }) {
   if (!Array.isArray(consoleOwners) || consoleOwners.length > 512 || consoleOwners.some((o) => o === null || typeof o !== 'object' || Array.isArray(o) ||
       Object.keys(o).length !== 3 || ['provider', 'iss', 'sub'].some((k) => typeof o[k] !== 'string' || !o[k] || o[k].length > 512)))
@@ -281,8 +294,8 @@ export async function startBroker({
       || (Object.hasOwn(librarySync, 'intervalMs') && !(Number.isSafeInteger(librarySync.intervalMs) && librarySync.intervalMs > 0))
       || (Object.hasOwn(librarySync, 'configDir') && typeof librarySync.configDir !== 'string')))
     throw new BusError('invalid-host-request');
-  let modelProxyClient = null, proxyPage = null, proxyUsage = null, usageTimer = null;
-  let modelKeys = null, modelTimer = null, modelSweep = null;
+  let modelProxyClient = null, proxyPage = null, proxyUsage = null, usageTimer = null, proxyLock = null;
+  let modelKeys = null, modelTimer = null, modelSweep = null, modelCatalogues = null;
   const modelRuns = new Map();
   let store, credentials, server, adapter, processing, syncTimer = null, syncPass = null, accessTimer = null, requestTimer = null;
   try {
@@ -325,7 +338,11 @@ export async function startBroker({
     // Store's writer lock admits one bus per data root before it holds the management client.
     if (proxy) {
       if (!organization) throw new BusError('not-configured');
-      modelProxyClient = await loadManagementClient({ configDir: organization.dir, proxy, receipt: proxyReceipt });
+      if (org !== null) {
+        if (!org || typeof org.id !== 'string' || !/^[a-z0-9][a-z0-9._-]{0,63}$/.test(org.id) || typeof instanceDataRoot !== 'string' || typeof instanceConfigDir !== 'string') throw new BusError('invalid-host-request');
+        proxyLock = createProxyLock({ stateDir: join(instanceDataRoot, 'proxy'), identity: `${instanceConfigDir}:${proxy.port}` });
+      }
+      modelProxyClient = await loadManagementClient({ configDir: org ? instanceConfigDir : organization.dir, proxy, receipt: proxyReceipt });
     }
 
     // Row 234 (#1740, r6 X4 third bullet): each host grant record gives its agent a store reference to
@@ -344,11 +361,16 @@ export async function startBroker({
     // Row 236 (#1742, #436b r5 section 5): each gitea grant record gives its agent a store reference to
     // gitea, and `held` names the files memory must not load until reconcile or a revoke.
     const { held } = storeRoot ? giteaStart(store, storeRoot, businesses, references) : { held: [] };
+    // #1886 (F3 defect l): a store reference with no file yet reads as no key (design D3a), but Credentials
+    // refuses a missing store root, and only issue() made it. Start makes it the same way issue() does when
+    // any reference names the store. A root that exists with loose modes or as a symlink still refuses.
+    if (storeRoot && Object.values(references).some(refs => Object.values(refs ?? {}).some(ref => ref?.store === true)))
+      mkdirSync(storeRoot, { recursive: true, mode: 0o700 });
     credentials = new Credentials({ references, repoRoots: protectedRoots, dataRoot, storeRoot, held,
       modelAgents: proxy ? Object.entries(businesses).flatMap(([id, b]) => Object.keys(b.roles).map(role => id + '/' + role)) : [] });
     if (proxy) {
       const inventory = modelRunInventory(dataRoot, modelRuns, credentials);
-      modelKeys = new ModelKeys({ credentials, client: modelProxyClient, configDir: organization.dir,
+      modelKeys = new ModelKeys({ credentials, client: modelProxyClient, configDir: org ? instanceConfigDir : organization.dir, org: org?.id ?? null, lock: proxyLock,
         baseUrl: `http://127.0.0.1:${proxy.port}`, receipt: proxyReceipt, rotateGraceMinutes: proxy.rotateGraceMinutes ?? 120,
         runs: inventory.runs,
         stopRuns: async runs => {
@@ -363,9 +385,10 @@ export async function startBroker({
       try { await modelKeys.reconcile(); } catch (error) { proxyReceipt({ action: 'proxy.boot-refused', code: error.code }); }
     }
     const configureProxyPage = () => {
-      proxyPage = new ProxyPage({ client: modelProxyClient, instanceTag: sha256(organization.dir).slice(0, 12),
+      proxyPage = new ProxyPage({ client: modelProxyClient, instanceTag: sha256(org ? instanceConfigDir : organization.dir).slice(0, 12), org: org?.id ?? null, lock: proxyLock,
         // P2 supplies the model metadata; only the matching business's record
         // participates in this owner view. No credential value is read here.
+        onChange: phase => { if (phase === 'begin') modelCatalogues?.begin?.(); else if (phase === 'end') modelCatalogues?.end?.(); else modelCatalogues?.invalidate(); },
         keyRecords: business => credentials.status().filter(r => r.service === 'model' && r.instance?.startsWith(business + '/'))
           .map(r => ({ keyId: r.keyId, agent: r.instance.slice(business.length + 1), issuedAt: r.issuedAt, state: r.state })),
       });
@@ -380,6 +403,37 @@ export async function startBroker({
     // records. A daily key quota moved within one agent's lineage keeps its since and its count.
     const keyLineage=(business,keyId)=>modelKeyLineage(credentials.status(),business,keyId);
     const settings=organization?launchSettings({...organization,sessions:()=>readSessions(dataRoot),levels,keyLineage}):null;
+    modelCatalogues = modelCatalogue ?? (settings ? createModelCatalogue({ client: () => modelProxyClient, settings: id => settings.current(id).plugins ?? {}, proxyLock }) : null);
+    // Resolve legacy table entries with the enabled modules' declarations. A
+    // missing or ambiguous mapping never becomes an available route.
+    async function catalogueFor(id, options = {}) {
+      const snapshot = settings.writer.read(id);
+      const current = settings.current(id);
+      const names = current.plugins?.['model-provider'] ?? [];
+      const loader = makeProviderLoader({log:()=>{}});
+      const loaded = await loader.load({'model-provider': names});
+      const catalogue = await modelCatalogues.read(id, options);
+      if (loaded.refused.length || settings.writer.read(id).revision !== snapshot.revision) return {...catalogue, status:'unavailable', legacy:{}};
+      const modules = loader.snapshot('model-provider');
+      const resolveLegacy = entry => {
+        const selected = selectModelProvider(modules, entry);
+        if (!selected) return null;
+        let result; try { result = selected.module.route({selection:entry,harness:null}); } catch { return null; }
+        return typeof result?.upstream === 'string' && /^[a-z0-9][a-z0-9._-]{0,63}$/.test(result.upstream)
+          ? {module:selected.name,upstream:result.upstream,model:entry.model} : null;
+      };
+      const legacy = {};
+      for (const [key, entry] of Object.entries(current.launch?.models ?? {})) {
+        if (!entry.module) {
+          const mapping = resolveLegacy(entry);
+          if (mapping) legacy[key] = mapping;
+        }
+      }
+      const result = {...catalogue, legacy};
+      // This trusted in-process helper is never serialized into the client view.
+      Object.defineProperty(result, 'resolveLegacy', {value:resolveLegacy});
+      return result;
+    }
     // Row 194 (#1692, brief item 8, row 199 D13): a fire or a delete revokes the agent's credentials
     // after the writer's checks and before its write, under the writer's lock (row 239). Fire revokes
     // each service of the entry and keeps the store directory, delete calls remove (sage-1593). A
@@ -443,6 +497,7 @@ export async function startBroker({
     const withTokens = (id, result) => ({ ...result, tokens: limits.report(id) });
     // Row 210 (#1707, design D7 step 6) and row 234 (#1740, r6 E2): the run dir and the host enrollment half.
     const runRoot = organization ? join(organization.dir, 'secrets', 'run') : null;
+    const recordArgs = context => ({ ...context, ...projectModule.recordContext({ ...context, dataRoot: instanceDataRoot ?? dataRoot, orgRoot: org ? dataRoot : null }) });
     let broker;
     processing = createProcessing({ dataRoot, ...discordProcessingHooks(dataRoot), containerStop: createContainerStopper({ dataRoot }),
       onTransition: () => broker.reconcileProcessing(),
@@ -510,7 +565,7 @@ export async function startBroker({
         const b = loadBusiness(id, { dir: organization.dir, rolesDir: organization.rolesDir });
         const resolved = {};
         for (const instance of Object.keys(b.roles)) resolved[instance] = resolveInstance({ system: organization.system, business: b, instance });
-        const next = withoutPending(id, busBusiness(b, resolved));
+        const next = withoutPending(id, busOrganization(b, resolved));
         if (!sameFixed(booted.get(id), next)) {
           reloadLog({ event: 'reload-needs-restart', business: id });
           return false;
@@ -541,7 +596,7 @@ export async function startBroker({
         const b = loadBusiness(id, { dir: organization.dir, rolesDir: organization.rolesDir });
         const resolved = {};
         for (const instance of Object.keys(b.roles)) resolved[instance] = resolveInstance({ system: organization.system, business: b, instance });
-        const full = busBusiness(b, resolved);
+        const full = busOrganization(b, resolved);
         const entry = full.projects?.[project];
         const here = managedPaths({ dataRoot, business: id, project });
         if (!entry || entry.kind === 'library' || entry.root !== here.root || entry.repo !== here.repo
@@ -565,9 +620,24 @@ export async function startBroker({
     // product the broker holds is ready only while it has a complete marker and a committed activate receipt: the
     // answer is read from both on every call, so a marker removed after the activation closes it again, and the
     // broker's reload now follows both readiness records (#802).
-    function admission({ business: id, project }) {
+    function admission({ business: id, project, projects, thread, session }) {
+      if (projects !== undefined) {
+        const no = code => ({ ready: false, revision: null, code });
+        if (typeof id !== 'string' || !Object.hasOwn(businesses, id) || !Array.isArray(projects) || projects.some(p => typeof p !== 'string')) return no('project-unknown');
+        if (thread != null) {
+          const row = broker.threadsState(id).find(r => r.thread === thread && r.session === session);
+          if (!row) return no('session-not-found');
+          if (row.archived) return no('project-archived');
+        }
+        for (const p of projects) {
+          const result = admission({ business: id, project: p });
+          if (!result.ready) return result;
+        }
+        return { ready: true, revision: null, code: null };
+      }
       const no = code => ({ ready: false, revision: null, code });
       if (typeof id !== 'string' || typeof project !== 'string' || !Object.hasOwn(businesses, id)) return no('project-unknown');
+      if (projectArchived(store, id, project)) return no('project-archived');
       let revision = null, declared = false;
       try {
         if (writer) {
@@ -584,20 +654,23 @@ export async function startBroker({
     }
     const requirementsHost = createRequirementsHost({ store, businesses, builtinBinding, journal: requestJournal });
     broker = new Broker({
+      workspaceRead: state => requestWorkspace({ dataRoot, state, events: store.all("SELECT kind,actor_role,subject,body FROM events WHERE business=? AND kind IN ('task.created','task.assigned','session.launched') ORDER BY seq LIMIT 10001", state.business) }),
       requirementsHost,
       requestLifecycle: services => {
-        const readCandidate = (candidate, business) => {
+        // The PRD reader goes through the same record resolver as the file adapters, so both roots present refuses here too.
+        const readCandidate = async (candidate, business) => {
           const { request, project, prd_version, records_commit, prd_path, mode_revision } = candidate;
-          return readPrdMaterial({ business: services.prdBusiness(business), dataRoot, request, project, prd_version, records_commit, prd_path, mode_revision,
+          const records = recordArgs({ business: services.prdBusiness(business), project });
+          return readPrdMaterial({ business: records.business, dataRoot: records.dataRoot, request, project, prd_version, records_commit, prd_path, mode_revision,
             requirement_ids: candidate.requirement_ids ?? candidate.requirements.map(r => r.id) });
         };
         const catalog = createRequirementCatalog({ journal: { ...requestJournal, readCandidate, authority: services.prdAuthority, approval: services.prdApproval },
-          readSpec: ({ business, project }) => projectModule.readSpec({ business: services.prdBusiness(business), project, dataRoot }),
-          builtinBinding: services.builtinBinding });
-        return (requestLifecycle = createRequestLifecycle({ journal: requestJournal, services: { catalog, readCandidate, requestAdmission: state => admission({ business: state.business, project: state.project }), ...(writer ? hostPreparation({ dataRoot, organization: writer, trackers }) : {}), ...requestServices, ...services,
+          readSpec: ({ business, project }) => projectModule.readSpec(recordArgs({ business: services.prdBusiness(business), project })),
+          builtinBinding: services.builtinBinding, projectArchived: services.projectArchived, threadProject: services.threadProject });
+        return (requestLifecycle = createRequestLifecycle({ journal: requestJournal, services: { catalog, readCandidate, readReviewedArtifact: (state, commit, path) => readReviewedArtifact({ repo: workingRepo(dataRoot, state.business, state.project), commit, path }), readVerification: (state, record) => projectModule.readProjectFile(recordArgs({ business: services.prdBusiness(state.business), project: state.project, path: record.path, commit: record.commit })), requestAdmission: state => admission({ business: state.business, project: state.project }), ...(writer ? hostPreparation({ dataRoot, organization: writer, trackers, journal: requestJournal, catalog, admission, work: fn => processing.work(fn), readSpec: ({ business, project }) => projectModule.readSpec(recordArgs({ business: services.prdBusiness(business), project })) }) : {}), ...requestServices, ...services,
         // The new-project executor needs the organization writer; without one a confirmed selection stays at its setup wait.
         ...(writer ? { bootstrap: ({ binding, state }) => processing.work(() => executeBootstrap({ binding, owner: state.owner, journal: requestJournal, services: {
-          dataRoot, organization: writer, activate: activateManagedProject, barrier: requestServices.barrier,
+          dataRoot, organization: writer, activate: activateManagedProject, barrier: requestServices.barrier, projectArchived: services.projectArchived, threadProject: services.threadProject,
           chat: { state: args => broker.chatProjectState(args), associate: args => broker.associateChat(args) } } })) } : {}) } }));
       },
       // FED R3: the access file is read per user request; a refusal leaves the user no grant.
@@ -653,22 +726,44 @@ export async function startBroker({
         GuardError: libraryModule.GuardError,
       },
       project: {
-        readSpec: context => projectModule.readSpec({ ...context, dataRoot }),
-        writeRecord: context => processing.work(() => projectModule.writeRecord({ ...context, dataRoot })),
-        listFiles: context => projectModule.listProjectFiles({ ...context, dataRoot }),
-        readFile: context => projectModule.readProjectFile({ ...context, dataRoot }),
-        writeFile: context => projectModule.writeHumanFile({ ...context, dataRoot }),
+        readSpec: context => projectModule.readSpec(recordArgs(context)),
+        writeRecord: context => processing.work(() => projectModule.writeRecord(recordArgs(context))),
+        listFiles: context => projectModule.listProjectFiles(recordArgs(context)),
+        readFile: context => projectModule.readProjectFile(recordArgs(context)),
+        writeFile: context => projectModule.writeHumanFile(recordArgs(context)),
         ProjectError: projectModule.ProjectError,
       },
       // limits and limits.set (organization.set is limits.set) carry each token limit's count; a
       // plugins.set reloads the business's limit checks in the background.
       organization:settings?(proxyOrganization?.wrap ?? (operation => operation))((id,verb,args,actor,context)=>{
+        if (verb === 'project.remote.get.console' || verb === 'project.remote.set.console') {
+          const current = loadBusiness(id, { dir: organization.dir, rolesDir: organization.rolesDir });
+          const resolved = {};
+          for (const instance of Object.keys(current.roles)) resolved[instance] = resolveInstance({ system: organization.system, business: current, instance });
+          const live = withoutPending(id, busOrganization(current, resolved));
+          if (!sameFixed(booted.get(id), live) || canonicalJson(live.projects) !== known.get(id)) throw new BusError('project-remote-protected');
+          if (!Object.hasOwn(live.projects, args.project)) throw new BusError('project-remote-unknown');
+          if (verb === 'project.remote.get.console') return getProjectRemote(writer, id, args.project);
+          writer.setProjectRemote(id, args, actor);
+          const next = structuredClone(live);
+          next.projects[args.project].remote = args.remote;
+          broker.reloadBusiness(id, next);
+          businesses[id] = next;
+          known.set(id, canonicalJson(next.projects));
+          return getProjectRemote(writer, id, args.project);
+        }
+        if (verb === 'system-types.installed') return installedSystemTypes();
+        if (verb === 'system-types.current') return settings.current(id).plugins?.['system-type'] ?? [];
         if(verb==='limits')return withTokens(id,settings.read(id));
-        if(verb==='plugins')return plugins.read(id);
+        if(verb==='plugins')return {...plugins.read(id), available:{harness:levels.names ?? []}};
         // Row 256 (#1761): the actor is the reader, so endProtected is the delete check for that reader.
         if(verb==='instances')return instances.read(id,actor);
         // Row 65 (mos-0840): the Console's routing table.
-        if(verb==='routes')return settings.routes(id);
+        if(verb==='routes') {
+          const view = settings.routes(id);
+          if (!settings.current(id).plugins?.['model-provider']?.length) return { ...view, catalogue: { status: 'disabled', observedAt: null, models: [], notices: [] } };
+          return catalogueFor(id).then(catalogue => ({ ...settings.routes(id), catalogue }));
+        }
         // Row 298 (#1804, Q228): the chief's grant scope as the file stands, the fallback shown.
         if(verb==='grants.scope')return instances.grantScopeRead(id);
         // Row 194 (#1692, V5): a delete's checks at the verb, with no write and no reload.
@@ -678,10 +773,27 @@ export async function startBroker({
         // Internal read-only path: no reload, journal, credential or publication.
         if(verb==='instance.hireCheck')return instances.checkHire(id,args);
         let result;
+        if (['limits.set', 'instances.set'].includes(verb) && settings.current(id).plugins?.['model-provider']?.length) {
+          return catalogueFor(id, { fresh: true }).then(catalogue => {
+            context?.beforeWrite?.();
+            const result = verb === 'limits.set' ? withTokens(id, settings.set(id,args,actor,catalogue)) : instances.set(id,args,actor,catalogue);
+            const live=reload(id);
+            limits.refresh(id).catch(e=>limitLog({event:'limit-refresh-failed',business:id,message:e.message}));
+            return INSTANCE_VERBS.has(verb) ? {...result,restart:!live} : result;
+          });
+        }
         if(verb==='limits.set')result=withTokens(id,settings.set(id,args,actor));
         else if(verb==='instances.set')result=instances.set(id,args,actor);
-        else if(verb==='routes.set')result=settings.setRoutes(id,args,actor);
-        else if(verb==='plugins.set')result=plugins.set(id,args,actor);
+        else if(verb==='routes.set') {
+          const current = settings.current(id);
+          if (current.plugins?.['model-provider']?.length) return catalogueFor(id, { fresh: true }).then(catalogue => {
+            const result = settings.setRoutes(id,args,actor,catalogue);
+            reload(id); limits.refresh(id).catch(e=>limitLog({event:'limit-refresh-failed',business:id,message:e.message}));
+            return { ...result, catalogue };
+          });
+          result=settings.setRoutes(id,args,actor);
+        }
+        else if(verb==='plugins.set'){result=plugins.set(id,args,actor);modelCatalogues?.invalidate();}
         // Row 194 (#1692, V6): the human's keep and noHire lists, through the instance writer.
         else if(verb==='veto.set')result=instances.veto(id,args,actor);
         // Row 298: the human's grant scope, through the instance writer.
@@ -711,7 +823,7 @@ export async function startBroker({
         return proxyPage.request(verb, args, scope);
       },
       proxyInit: organization ? async args => {
-        const settings = await initializeProxy({ configDir: organization.dir, dataRoot, ...args });
+        const settings = await initializeProxy({ configDir: organization.dir, dataRoot: instanceRoot ?? dataRoot, ...args });
         modelProxyClient = await loadManagementClient({ configDir: organization.dir, proxy: settings, receipt: proxyReceipt });
         configureProxyPage();
         return settings;
@@ -986,11 +1098,16 @@ export async function startBroker({
     }
     // One bounded queue read at a time. The service applies the configured
     // 1..59 second poll deadline; this tick only checks whether a read is due.
-    const usageTick = () => { proxyUsage.tick().catch(() => usageLog({ action: 'proxy.usage', code: 'proxy-usage-read-failed' })); };
-    usageTimer = setInterval(usageTick, 1000);
-    usageTimer.unref();
-    usageTick(); // Optional telemetry never blocks the native ready answer.
-    await requestLifecycle.recover();
+    if (instanceRoot === null) {
+      const usageTick = () => { proxyUsage.tick().catch(() => usageLog({ action: 'proxy.usage', code: 'proxy-usage-read-failed' })); };
+      usageTimer = setInterval(usageTick, 1000);
+      usageTimer.unref();
+      usageTick(); // Optional telemetry never blocks the native ready answer.
+    }
+    // Startup recovery waits while processing is halted or invalid, like the periodic pass below;
+    // processing.resume schedules it again.
+    const startState = processing.read();
+    if (!startState.halted && !startState.invalid) await requestLifecycle.recover();
     requestTimer = setInterval(() => {
       const state = processing.read();
       if (state.halted || state.invalid) return;
@@ -1014,6 +1131,43 @@ export async function startBroker({
       bindLaunch,
       recoverLaunch: ({ modelKeyId, ...record }) => broker.recoverLaunch(record),
       endLaunch: (r) => { const out = broker.endLaunch(r); modelRuns.delete(r.business + ':' + r.run); return out; },
+      modelAdmission: async ({ business, instance, modelKey, harness, revision, entry: expected, provider, model, account, route, transport }) => {
+        const refused = code => ({ allow: false, code });
+        if (!settings || !modelCatalogues) return refused('model-catalogue-unavailable');
+        try { proxyLock?.assertCertain(); } catch { return refused('proxy-uncertain'); }
+        const snapshot = settings.writer.read(business);
+        if (snapshot.revision !== revision) return refused('model-provider-unavailable');
+        const current = settings.current(business), role = current.roles?.[instance];
+        if (!role) return refused('model-provider-unavailable');
+        const resolved = resolveInstance({ system: organization.system, business: current, instance });
+        const vars = resolved.vars;
+        if (!['primary', 'fallback'].includes(route)) return refused('model-provider-unavailable');
+        const prefix = route === 'primary' ? '' : 'fallback.';
+        if (vars[prefix + 'model'] !== modelKey || vars[prefix + 'harness'] !== harness) return refused('model-provider-unavailable');
+        const entry = current.launch?.models?.[modelKey];
+        if (!entry || canonicalJson(entry) !== canonicalJson(expected ?? null) || entry.provider !== provider || entry.model !== model) return refused('model-provider-unavailable');
+        const harnessLoader = createLoader({log:()=>{}});
+        if ((await harnessLoader.load({harness:[harness]})).refused.length) return refused('model-provider-unavailable');
+        const countsAccount = harnessLoader.modules('harness')[0].countsAccount();
+        if (typeof countsAccount !== 'boolean' || account !== (countsAccount ? current.launch?.account?.name ?? null : null)) return refused('model-provider-unavailable');
+        const names = current.plugins?.['model-provider'];
+        if (!Array.isArray(names) || !names.length || (entry.module && !names.includes(entry.module))) return refused('model-provider-unavailable');
+        const loader = makeProviderLoader({log:()=>{}}), loaded = await loader.load({'model-provider':entry.module ? [entry.module] : names});
+        if (loaded.refused.length) return refused('model-provider-unavailable');
+        const selected = selectModelProvider(loader.snapshot('model-provider'), entry);
+        if (!selected) return refused('model-provider-unavailable');
+        const {name:moduleName,module} = selected;
+        const descriptor = module.route({selection:entry,harness});
+        if (descriptor?.code) return refused(descriptor.code === 'model-harness-incompatible' ? descriptor.code : 'model-provider-unavailable');
+        const expectedTransport = (({routeId, endpoint, api, piProvider, compat}) => ({routeId, endpoint, api, piProvider, compat}))(descriptor);
+        if (canonicalJson(expectedTransport) !== canonicalJson(transport ?? null)) return refused('model-provider-unavailable');
+        const catalogue = await modelCatalogues.read(business,{fresh:true});
+        if (settings.writer.read(business).revision !== snapshot.revision) return refused('model-provider-unavailable');
+        const selection = {upstream:entry.upstream ?? descriptor.upstream,model:entry.model};
+        const answer = module.preflight({selection,harness,catalogue:{...catalogue,models:(catalogue.models ?? []).filter(m => m.module === moduleName)}});
+        if (answer?.allow === true) return {allow:true};
+        return refused(['model-provider-unavailable','model-catalogue-unavailable','model-harness-incompatible'].includes(answer?.code) ? answer.code : 'model-provider-unavailable');
+      },
       modelPreflight: async ({ business, role }) => {
         const current = settings ? settings.current(business) : businesses[business];
         if (!Object.hasOwn(current?.roles ?? {}, role)) throw new BusError('unknown-role');

packages/bus/src/server.mjs

@@ -10,7 +10,7 @@ const PROJECT_SAVE_AT_START = new RegExp(`"verb":"${PROJECT_SAVE_VERB.replaceAll
 const LIBRARY_SAVE_AT_START = /"verb":"library\.file\.save"/;
 const SAVE_VERB_AT_START = { test: text => PROJECT_SAVE_AT_START.test(text) || LIBRARY_SAVE_AT_START.test(text) };
 // The refusal envelope. C2-06 (sage-3599): `reason` is added only when the error carries one, which
-// only the citation guard's refusals do, so every other envelope is byte-identical to before.
+// only explicitly scoped refusals do, so every other envelope is byte-identical to before.
 const refusal = (e, other) => e instanceof BusError
   ? { ok: false, error: e.code, ...(typeof e.reason === 'string' ? { reason: e.reason } : {}) }
   : { ok: false, error: other };

packages/bus/src/store.mjs

@@ -13,8 +13,8 @@ import { join, isAbsolute } from 'node:path';
 import { createHash } from 'node:crypto';
 
 const ddl = readFileSync(new URL('../schema.sql', import.meta.url), 'utf8');
-export const SCHEMA_SHA256 = 'fde7a46505a964d0e3802aaee96a1e2d9fb8c7163fbafc2f86aca914ecc50f03';
-export const SCHEMA_VERSION = '3s';
+export const SCHEMA_SHA256 = '6f6f0c0fd471b7895648a71aa9f320a769b145da792c4152ee8282006eff30c7';
+export const SCHEMA_VERSION = '3u';
 // Ordered, named offline steps. New schema changes append a step and keep prior DDL pinned.
 const legacyDDL = readFileSync(new URL('./migrations/3b.sql', import.meta.url), 'utf8');
 const LEGACY_SHA256 = '179ffe356d4ff19a49b5ebad39b6c6bfd7771deb8e1b7c55b5e746f039d69e65';
@@ -107,6 +107,14 @@ const migrations = [{
   // Task 6b: checked advancement after Task 3's complete fifteen-kind union.
   from: '3r', to: '3s',
   sql: readFileSync(new URL('./migrations/3r-3s.sql', import.meta.url), 'utf8'),
+}, {
+  // #797 MVP3: the owner's reversible project archive. Only a new append-only table, its index
+  // and its guards; no existing row changes and nothing is deleted.
+  from: '3s', to: '3t',
+  sql: readFileSync(new URL('./migrations/3s-3t.sql', import.meta.url), 'utf8'),
+}, {
+  from: '3t', to: '3u',
+  sql: readFileSync(new URL('./migrations/3t-3u.sql', import.meta.url), 'utf8'),
 }];
 const timedTables = [
   'events',
@@ -132,6 +140,8 @@ const timedTables = [
   'request_snapshots',
   'request_snapshot_events',
   'request_project_events',
+  'project_archives',
+  'project_system_types',
 ];
 const hex = (value) => createHash('sha256').update(value).digest('hex');
 if (hex(ddl) !== SCHEMA_SHA256) throw Error('schema-source-mismatch');

packages/bus/src/tester-cli.mjs

@@ -4,8 +4,6 @@ import { randomBytes } from 'node:crypto';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { readFileSync } from 'node:fs';
-import { Client } from './client.mjs';
-import { readProcess } from './human.mjs';
 const file = fileURLToPath(import.meta.url);
 if (!process.env.MOSAIC_BUS_TESTER_NONCE) {
   const child = spawnSync(process.execPath, [file, ...process.argv.slice(2)], {
@@ -14,6 +12,11 @@ if (!process.env.MOSAIC_BUS_TESTER_NONCE) {
   });
   process.exit(child.status ?? 2);
 }
+// P19 #876: only the re-executed child, whose initial environment holds the nonce, talks to the
+// bus. Loading the client (and the broker module graph behind it) here instead of at the top
+// keeps the re-exec parent to a bare node start.
+const { Client } = await import('./client.mjs');
+const { readProcess } = await import('./human.mjs');
 try {
   const request = JSON.parse(readFileSync(0, 'utf8'));
   if (

packages/bus/tests/account-migration.test.mjs

@@ -19,7 +19,7 @@ const here = (p) => new URL(p, import.meta.url);
 const SESSIONS_3L = ['sessions', 'session_defaults', 'thread_claims', 'message_threads', 'thread_opens'];
 // Row 206 (#1704): and the 3l→3m step's thread_shares. thread-shares.test.mjs tests it.
 // Row 271 (#1776): and the 3m→3n step's session_ops and message_cancels. session-clear.test.mjs tests them.
-const later3l = (r) => [...SESSIONS_3L, 'thread_shares', 'session_ops', 'message_cancels', 'request_events', 'request_effects', 'request_snapshots', 'request_snapshot_events', 'request_project_events'].includes(r.tbl_name) || ['delivery_same_thread', 'delivery_same_session', 'threads_id_not_session'].includes(r.name);
+const later3l = (r) => [...SESSIONS_3L, 'thread_shares', 'session_ops', 'message_cancels', 'project_archives', 'project_system_types', 'request_events', 'request_effects', 'request_snapshots', 'request_snapshot_events', 'request_project_events'].includes(r.tbl_name) || ['delivery_same_thread', 'delivery_same_session', 'threads_id_not_session'].includes(r.name);
 function source3h(t) {
   const root = mkdtempSync(join(tmpdir(), 'account-migrate-'));
   t.after(() => rmSync(root, { recursive: true, force: true }));
@@ -93,6 +93,8 @@ async function engine(root, name, { store, schema, step = (s) => s }) {
   copyFileSync(here('../src/migrations/3p-3q.sql'), join(moduleRoot, 'src/migrations/3p-3q.sql'));
   copyFileSync(here('../src/migrations/3q-3r.sql'), join(moduleRoot, 'src/migrations/3q-3r.sql'));
   copyFileSync(here('../src/migrations/3r-3s.sql'), join(moduleRoot, 'src/migrations/3r-3s.sql'));
+  copyFileSync(here('../src/migrations/3s-3t.sql'), join(moduleRoot, 'src/migrations/3s-3t.sql'));
+  copyFileSync(here('../src/migrations/3t-3u.sql'), join(moduleRoot, 'src/migrations/3t-3u.sql'));
   return (await import(pathToFileURL(join(moduleRoot, 'src/store.mjs')))).Store;
 }
 
@@ -100,7 +102,7 @@ test('REQ-LIMIT-4 3h copy migrates to 3i: every row keeps its seq, the sequence
   const { root, path } = source3h(t), before = snapshot(path), was = master(path);
   assert.throws(() => new Store(root), /schema-mismatch/);
   new Store(root, { migrateSchema: true }).close();
-  assert.equal(version(path), '3s');
+  assert.equal(version(path), '3u');
   // Every table's rows as they were, usage_records with its seq values and sqlite_sequence with 50.
   assert.deepEqual(migrated3l(snapshot(path, before.columns).rows), before.rows);
   assert.deepEqual(before.rows.usage_records.map(r => r.seq), [1, 2, 3]);
@@ -150,7 +152,7 @@ test('REQ-LIMIT-4 a 3h→3i step that fails partway leaves the store at 3h with
   assert.deepEqual(snapshot(path, before.columns).rows, before.rows);
   // Still a whole 3h store: the real step migrates it.
   new Store(root, { migrateSchema: true }).close();
-  assert.equal(version(path), '3s');
+  assert.equal(version(path), '3u');
   assert.deepEqual(migrated3l(snapshot(path, before.columns).rows), before.rows);
 });
 
@@ -162,14 +164,14 @@ test('REQ-LIMIT-4 the 3h engine refuses a migrated store, migrating or not, and
     schema: ddl3h,
     store: (source) => source
       .replace(/export const SCHEMA_SHA256 = '[a-f0-9]+';/, `export const SCHEMA_SHA256 = '${createHash('sha256').update(ddl3h).digest('hex')}';`)
-      .replace("export const SCHEMA_VERSION = '3s';", "export const SCHEMA_VERSION = '3h';")
+      .replace("export const SCHEMA_VERSION = '3u';", "export const SCHEMA_VERSION = '3h';")
       .replace(/\}, \{\n {2}\/\/ Row 126 \(#1620\)[\s\S]*?\}\];\nconst timedTables/, '}];\nconst timedTables'),
   });
   const pinned = readFileSync(join(root, 'engine-3h/src/store.mjs'), 'utf8');
   assert.ok(pinned.includes("export const SCHEMA_VERSION = '3h';") && !pinned.includes('3h-3i'), 'the 3h engine has no 3h→3i step');
   assert.throws(() => new Store3h(root), /schema-mismatch/);
   assert.throws(() => new Store3h(root, { migrateSchema: true }), /schema-mismatch/);
-  assert.equal(version(path), '3s');
+  assert.equal(version(path), '3u');
   assert.deepEqual(master(path), was);
   assert.deepEqual(snapshot(path, after.columns).rows, after.rows);
 });

packages/bus/tests/bootstrap-origin-probe.test.mjs

@@ -0,0 +1,104 @@
+// Lifecycle Task 2 (#797 / Gitea #1839): a confirmed new-project selection becomes a usable project.
+// Real startBroker over a real organization file, a real git factory repo and a fixture data root.
+// The test barrier stands in for a kill: it throws after a step's effect and before its receipt.
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import cp, { execFileSync } from 'node:child_process';
+import fs, { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { syncBuiltinESMExports } from 'node:module';
+import { DatabaseSync } from 'node:sqlite';
+import { join } from 'node:path';
+import { startBroker } from '../src/runtime.mjs';
+import { prepareBootstrap } from '../src/request-bootstrap.mjs';
+import { hostPreparation, staffFor } from '../src/request-host.mjs';
+import { bootConfig, loadSystem } from '../../cli/src/config.mjs';
+import { fixture, tmp } from '../../cli/tests/helpers.mjs';
+import { organizationWriter } from '../../organization/src/organization.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { managedState } from '../../organization/src/project-bootstrap.mjs';
+import { workingRepo } from '../../seat/src/working.mjs';
+
+const INTENT = 'Build a single-file timer.\nKeep these exact bytes.\n';
+const GIT_ENV = { ...process.env, GIT_CONFIG_GLOBAL: '/dev/null', GIT_CONFIG_SYSTEM: '/dev/null', GIT_AUTHOR_NAME: 'Factory', GIT_AUTHOR_EMAIL: '[email protected]',
+  GIT_COMMITTER_NAME: 'Factory', GIT_COMMITTER_EMAIL: '[email protected]' };
+const git = (cwd, ...args) => execFileSync('git', args, { cwd, env: GIT_ENV, encoding: 'utf8' }).trim();
+const PROJECT_FILE = { projectVersion: 1, id: 'stack', vars: { 'tracker.project': 1, 'git.workingBranch': 'main' } };
+
+// The factory: the declared `stack` project is a git repository with a project file.
+function factory(root) {
+  const dir = join(root, 'project');
+  mkdirSync(join(dir, '.mosaic'), { recursive: true });
+  writeFileSync(join(dir, '.mosaic/project.json'), JSON.stringify(PROJECT_FILE, null, 2) + '\n');
+  writeFileSync(join(dir, 'README.md'), 'factory\n');
+  git(dir, 'init', '-q', '-b', 'main'); git(dir, 'add', '-A'); git(dir, 'commit', '-q', '-m', 'factory');
+  return dir;
+}
+
+// `defaultServices` boots with nothing injected, so the host builds its own preparation and admission; `withTrackers` forwards the
+// boot config's tracker settings as process.mjs does (the adapter itself is not built).
+async function setup(t, { barrier, configureFactory = () => {}, beforePropose = () => {}, defaultServices = false, withTrackers = defaultServices } = {}) {
+  const root = tmp(t, 'bootstrap-'), f = fixture(root, 'demo',d=>{d.roles.assistant={definition:'assistant'};return d;}), source = factory(root);
+  configureFactory({ root, f, source });
+  const hooks = { barrier };
+  const system = loadSystem({ env: f.env });
+  const writer = organizationWriter({ dir: join(root, 'config'), rolesDir: f.roles });
+  const plans = (dataRoot, ready = () => true) => ({
+    preparePlans: (state, args, from) => Promise.all(['autonomous', 'guided'].map(mode => prepareBootstrap({
+      business: writer.read('demo').document, request: state.request, sourceProject: args.source_project, project: args.project, name: args.name,
+      mode, dataRoot, organizationRevision: writer.read('demo').revision, tracker: { root: 1, project: args.tracker_project },
+      staff: { pm: state.pm, technical_reviewer: 'cto', coder: 'coder', reviewer: 'reviewer', chief: 'chief' },
+      intent: { text: from.text, source_message: from.source_message } }))),
+    admitPlan: plan => plan.organization_revision === writer.read('demo').revision && ready() ? { ready: true } : { ready: false, code: 'organization-stale' },
+    barrier: step => hooks.barrier?.(step),
+  });
+  const boot = async () => {
+    const warnings = [];
+    const { trackers, ...config } = JSON.parse(JSON.stringify(bootConfig({ system, businessId: 'demo', env: f.env, warn: w => warnings.push(w) })));
+    const bus = await startBroker({ ...config, ...(withTrackers ? { trackers } : {}), requestServices: defaultServices ? {} : plans(f.dataRoot) });
+    t.after(() => bus.close().catch(() => {}));
+    return { bus, config, trackers, warnings };
+  };
+  const first = await boot();
+  const caps = { human: first.bus.broker.bindHuman({ business: 'demo', human: 'jason', via: 'cli', outsideAgent: true }) };
+  for (const role of ['pm', 'cto', 'coder', 'chief']) {
+    caps[role] = first.bus.broker.bindLaunch({ business: 'demo', role, run: role + '-run', harness: 'pi' });
+    first.bus.broker.request(caps[role], { verb: 'role.claim' });
+  }
+  const call = (who, verb, args = {}) => first.bus.broker.request(caps[who], { verb, args });
+  const originProject=call('human','project.create',{name:'Origin intake'}).id;
+  const thread=call('human','thread.create',{project:originProject,name:'Intake'}).id;
+  caps.assistant=first.bus.broker.bindLaunch({business:'demo',role:'assistant',run:'assistant-run',harness:'pi',thread});
+  call('assistant','role.claim');
+  const sent=call('human','thread.send',{thread,body:INTENT});
+  const relay=call('assistant','message.send',{to:'chief',in_reply_to:sent.id,body:'Original request '+sent.request});
+  call('chief','message.send',{to:'pm',in_reply_to:relay.id,body:'Open original request '+sent.request});
+  const opened = await call('pm', 'request.open', { request: sent.request });
+  // A source the preparation refuses never reaches a decision; the refusal is the outcome, so setup hands it back.
+  let proposed = null, proposeError = null;
+  beforePropose({ root, f, source });
+  try {
+    proposed = await call('pm', 'request.propose', { request: sent.request, revision: opened.revision, op: 'plan-1', source_project: 'stack',
+      project: 'timer', name: 'Timer', tracker_project: 2 });
+  } catch (e) { proposeError = e; }
+  const choose = async (choice = 'guided') => {
+    call('human', 'decision.resolve', { id: proposed.selection.decision, choice });
+    return first.bus.requestLifecycle.resume('demo', sent.request);
+  };
+  const paths = { code: join(f.dataRoot, 'products/demo/timer/code'), records: join(f.dataRoot, 'projects/demo/timer'), product: join(f.dataRoot, 'products/demo/timer') };
+  const changes = () => { try { return readFileSync(writer.logFile('demo'), 'utf8').trim().split('\n').map(l => JSON.parse(l)); } catch { return []; } };
+  const additions = () => changes().filter(c => c.state === 'committed' && c.detail?.verb === 'project.add');
+  return { originProject, thread, root, f, system, source, writer, hooks, boot, bus: first.bus, first, call, caps, request: sent.request, proposed, proposeError, choose, paths, changes, additions,
+    rows: () => first.bus.broker.request(caps.human, { verb: 'project.list', args: {} }) };
+}
+
+
+test('archiving the originating chat during bootstrap must fence the next effect',async t=>{
+ const f=await setup(t,{barrier: step=>{
+  if(step==='reserve')f.call('human','project.archive',{project:f.originProject});
+ }});
+ const state=await f.choose();
+ console.log('ORIGIN_BOOTSTRAP',JSON.stringify({phase:state.phase,wait:state.wait,codeExists:existsSync(f.paths.code),additions:f.additions().length}));
+ assert.equal(state.wait?.code,'project-archived');
+ assert.equal(existsSync(f.paths.code),false);
+ assert.equal(f.additions().length,0);
+});

packages/bus/tests/broker.test.mjs

@@ -4,9 +4,9 @@ import { mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { Store } from '../src/store.mjs';
-import { busBusiness } from '../src/business.mjs';
-import { resolveInstance, validateBusinessDocument } from '../../business/src/index.mjs';
-import { businessDoc, REPO_ROLES, systemFor } from '../../business/tests/helpers.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
+import { resolveInstance, validateBusinessDocument } from '../../organization/src/index.mjs';
+import { businessDoc, REPO_ROLES, systemFor } from '../../organization/tests/helpers.mjs';
 const { Broker } = await import('../src/broker.mjs').catch((e) => {
   if (e.code === 'ERR_MODULE_NOT_FOUND') return {};
   throw e;
@@ -399,7 +399,7 @@ test('the shipped coder role raises task.reassign as gated to the human; task.sc
   const resolved = {};
   for (const instance of Object.keys(business.roles))
     resolved[instance] = resolveInstance({ system: systemFor(root), business, instance });
-  const { b, agent, human } = setup(t, { demo: busBusiness(business, resolved) });
+  const { b, agent, human } = setup(t, { demo: busOrganization(business, resolved) });
   const c = agent('coder');
   call(b, c, 'role.claim');
   const reassign = raise(b, c, 'task.reassign', { target: 'vikunja:3/7' });

packages/bus/tests/channel-proof.test.mjs

@@ -34,7 +34,10 @@ const baselines = {
  // Row 301 (#1808, mos-1449): the user transport moved from user-bus.mjs into bus.mjs; humanCall unchanged.
  // Row 239 (#1745): outcome-unknown-revoked joins OPEN (duckworth-0165 C1), and STATUS gets
  // revision-conflict-revoked 409 and outcome-unknown-revoked 503; no proof or transport change.
- "packages/webui/src/bus.mjs": "4ebf6c2b5d71c23d85cbde83f69aa671058dc2195c9ae4bdda624f6940729d1b",
+ // #1839: artifact Console replies alone may use 2 MiB; the proof and other limits are unchanged.
+ // #1873 U1: humanCall, busCaller, userCall and userCaller take an optional signal and absolute
+ // deadline; userCall shares transport(). Nonces, argv and limits are unchanged.
+ "packages/webui/src/bus.mjs": "3ef8064dd7911f9eee4475b52c74a1d551583a065474b1bcee968cd45f722747",
 };
 const repoFile = path => new URL("../../../" + path, import.meta.url);
 

packages/bus/tests/chief-of-staff.test.mjs

@@ -8,12 +8,12 @@ import { DatabaseSync } from 'node:sqlite';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { Store, schemaDigest } from '../src/store.mjs';
 import { Broker, ACTIONS } from '../src/broker.mjs';
-import { HIRE_ALLOWED } from '../../business/src/vocabulary.mjs';
+import { HIRE_ALLOWED } from '../../organization/src/vocabulary.mjs';
 import { startBroker } from '../src/runtime.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
-import { busBusiness } from '../src/business.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
+import { businessDoc, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
 
 // Row 123 (#1617): the chief of staff ends runs without a decision and changes the organization
 // file through the shared write path. REQ-ROLE-2 (one holder; revoke), REQ-ROLE-3 (the
@@ -211,13 +211,15 @@ test('REQ-LIMIT-1, REQ-COS-1: organization.set from the chief of staff reaches t
   const done = call('chief', 'organization.set', PATCH);
   assert.deepEqual(done, { revision: 'b'.repeat(64) });
   // Same callback verb as a human's limits.set; only the actor differs.
-  assert.deepEqual(organization, [['demo', 'limits.set', PATCH, 'chief-of-staff.chief']]);
+  assert.deepEqual(organization[0].slice(0,4), ['demo', 'limits.set', PATCH, 'chief-of-staff.chief']);
+  assert.equal(typeof organization[0][4].beforeWrite, 'function');
   call('human', 'limits.set', PATCH);
   assert.deepEqual(organization.at(-1), ['demo', 'limits.set', PATCH, 'jason']);
   // Row 155 (#1649, Q169): the assistant's configuration takes the same path, for both actors.
   const assistants = { revision: 'a'.repeat(64), assistants: { assistant: { vars: { thinking: 'high' } } } };
   call('chief', 'organization.set', assistants);
-  assert.deepEqual(organization.at(-1), ['demo', 'limits.set', assistants, 'chief-of-staff.chief']);
+  assert.deepEqual(organization.at(-1).slice(0,4), ['demo', 'limits.set', assistants, 'chief-of-staff.chief']);
+  assert.equal(typeof organization.at(-1)[4].beforeWrite, 'function');
   call('human', 'limits.set', assistants);
   assert.deepEqual(organization.at(-1), ['demo', 'limits.set', assistants, 'jason']);
 });
@@ -614,7 +616,7 @@ async function database3c(t) {
   let source = readFileSync(here('../src/store.mjs'), 'utf8');
   const pinned = source
     .replace(/export const SCHEMA_SHA256 = '[a-f0-9]+';/, `export const SCHEMA_SHA256 = '${createHash('sha256').update(ddl3c).digest('hex')}';`)
-    .replace("export const SCHEMA_VERSION = '3s';", "export const SCHEMA_VERSION = '3c';")
+    .replace("export const SCHEMA_VERSION = '3u';", "export const SCHEMA_VERSION = '3c';")
     .replace(/\}, \{\n {2}from: '3c',[\s\S]*?\}\];\nconst timedTables/, '}];\nconst timedTables');
   assert.notEqual(pinned, source);
   assert.ok(!pinned.includes('3c-3d'), 'the 3c engine has no 3c→3d step');
@@ -638,7 +640,7 @@ test('REQ-ROLE-2, REQ-COS-1: the 3c→3d migration lets the chief of staff end a
   assert.throws(() => new Store(root), /schema-mismatch/);
   const store = new Store(root, { migrateSchema: true });
   t.after(() => store.close());
-  assert.equal(store.get("SELECT value FROM meta WHERE key='schema_version'").value, '3s');
+  assert.equal(store.get("SELECT value FROM meta WHERE key='schema_version'").value, '3u');
   assert.equal(store.get("SELECT body FROM events WHERE id='preserved'").body, '{"fixture":true}');
   assert.equal(store.get("SELECT holder_run FROM role_claims WHERE role='coder'").holder_run, 'coder-run');
   const b = new Broker({ store, businesses: demo(), organization: null });
@@ -1039,7 +1041,7 @@ test('row 194 T8, T9, T18: through the runtime the chief hires and fires with th
     const b = loadBusiness('demo', { dir, rolesDir: roles });
     const resolved = {};
     for (const instance of Object.keys(b.roles)) resolved[instance] = resolveInstance({ system: systemFor(dir), business: b, instance });
-    return busBusiness(b, resolved);
+    return busOrganization(b, resolved);
   };
   const bus = await startBroker({
     dataRoot: join(root, 'data'),

packages/bus/tests/citation-guard.test.mjs

@@ -7,8 +7,8 @@ import { Client } from '../src/client.mjs';
 import { serve } from '../src/server.mjs';
 import { FIXED_TEXTS, GuardError } from '../../library/src/guard.mjs';
 import { git } from '../../library/tests/helpers.mjs';
-import { organizationWriter, setReplyLimits } from '../../business/src/organization.mjs';
-import { businessDoc, rolesCopy, writeJson } from '../../business/tests/helpers.mjs';
+import { organizationWriter, setReplyLimits } from '../../organization/src/organization.mjs';
+import { businessDoc, rolesCopy, writeJson } from '../../organization/tests/helpers.mjs';
 import { resolveReplyLimits } from '../../library/src/limits.mjs';
 import { citationWorld, citedBody, fixtureCite, guardCases } from './citation-helpers.mjs';
 

packages/bus/tests/citation-helpers.mjs

@@ -4,7 +4,7 @@ import { join } from 'node:path';
 import { Store } from '../src/store.mjs';
 import { Broker } from '../src/broker.mjs';
 import { checkReply, GuardError, libraryReader } from '../../library/src/guard.mjs';
-import { THREAD_DEFINITIONS } from '../../business/src/vocabulary.mjs';
+import { THREAD_DEFINITIONS } from '../../organization/src/vocabulary.mjs';
 import { resolveReplyLimits } from '../../library/src/limits.mjs';
 import { mapping, repo, MARKER } from '../../library/tests/helpers.mjs';
 

packages/bus/tests/citation-runtime.test.mjs

@@ -5,8 +5,8 @@ import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { startBroker } from '../src/runtime.mjs';
-import { validateBusinessDocument } from '../../business/src/business.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
+import { validateBusinessDocument } from '../../organization/src/organization-config.mjs';
+import { businessDoc, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
 import { mappingEntry } from '../../library/tests/helpers.mjs';
 
 test('C2-06 runtime reads changed and unreadable reply limits without restarting', async t => {

packages/bus/tests/comment-migration.test.mjs

@@ -33,7 +33,7 @@ test('explicit 3b copy migration preserves evidence and opens as 3g; normal star
   const original = readFileSync(source);
   assert.throws(() => new Store(root), /schema-mismatch/);
   const store = new Store(root, { migrateSchema: true });
-  assert.equal(store.get("SELECT value FROM meta WHERE key='schema_version'").value, '3s');
+  assert.equal(store.get("SELECT value FROM meta WHERE key='schema_version'").value, '3u');
   assert.equal(store.get("SELECT body FROM events WHERE id='preserved'").body, '{"fixture":true}');
   assert.equal(store.get('SELECT count(*) n FROM task_comment_cursors').n, 0);
   const epoch = store.get("SELECT value FROM meta WHERE key='comment_cursor_epoch'").value;
@@ -75,15 +75,15 @@ test('named migration registry chains 3b through 3g to a fixture-only future ver
   const sha = createHash('sha256').update(futureDDL).digest('hex');
   let source = readFileSync(new URL('../src/store.mjs', import.meta.url), 'utf8');
   source = source.replace(/export const SCHEMA_SHA256 = '[a-f0-9]+';/, `export const SCHEMA_SHA256 = '${sha}';`)
-    .replace("export const SCHEMA_VERSION = '3s';", "export const SCHEMA_VERSION = '3t';")
-    .replace('}];\nconst timedTables', `}, { from: '3s', to: '3t', sql: ${JSON.stringify(futureSQL)} }];\nconst timedTables`);
+    .replace("export const SCHEMA_VERSION = '3u';", "export const SCHEMA_VERSION = '3v';")
+    .replace('}];\nconst timedTables', `}, { from: '3u', to: '3v', sql: ${JSON.stringify(futureSQL)} }];\nconst timedTables`);
   writeFileSync(join(moduleRoot, 'src/store.mjs'), source);
   writeFileSync(join(moduleRoot, 'schema.sql'), futureDDL);
-  for (const name of ['3b.sql', '3b-3c.sql', '3c-3d.sql', '3d-3e.sql', '3e-3f.sql', '3f-3g.sql', '3g-3h.sql', '3h-3i.sql', '3i-3j.sql', '3j-3k.sql', '3k-3l.sql', '3l-3m.sql', '3m-3n.sql', '3n-3o.sql', '3o-3p.sql', '3p-3q.sql', '3q-3r.sql', '3r-3s.sql'])
+  for (const name of ['3b.sql', '3b-3c.sql', '3c-3d.sql', '3d-3e.sql', '3e-3f.sql', '3f-3g.sql', '3g-3h.sql', '3h-3i.sql', '3i-3j.sql', '3j-3k.sql', '3k-3l.sql', '3l-3m.sql', '3m-3n.sql', '3n-3o.sql', '3o-3p.sql', '3p-3q.sql', '3q-3r.sql', '3r-3s.sql', '3s-3t.sql', '3t-3u.sql'])
     copyFileSync(new URL('../src/migrations/' + name, import.meta.url), join(moduleRoot, 'src/migrations', name));
   const { Store: FutureStore } = await import(pathToFileURL(join(moduleRoot, 'src/store.mjs')));
   const future = new FutureStore(root, { migrateSchema: true });
-  assert.equal(future.get("SELECT value FROM meta WHERE key='schema_version'").value, '3t');
+  assert.equal(future.get("SELECT value FROM meta WHERE key='schema_version'").value, '3v');
   assert.equal(future.get("SELECT name FROM sqlite_master WHERE name='future_fixture'").name, 'future_fixture');
   assert.equal(future.get("SELECT count(*) n FROM task_comment_cursors").n, 0);
   assert.equal(future.get("SELECT id FROM events").id, 'preserved');
@@ -109,7 +109,7 @@ test('offline command migrates only the supplied fixture root and reports usage
   const command = new URL('../src/migrate-schema.mjs', import.meta.url).pathname;
   const migrated = spawnSync(process.execPath, [command, root], { encoding: 'utf8' });
   assert.equal(migrated.status, 0, migrated.stderr);
-  assert.match(migrated.stdout, /bus schema 3s ready/);
+  assert.match(migrated.stdout, /bus schema 3u ready/);
   new Store(root).close();
   const usage = spawnSync(process.execPath, [command], { encoding: 'utf8' });
   assert.equal(usage.status, 2);

packages/bus/tests/console-decide.test.mjs

@@ -86,10 +86,10 @@ function setup(t) {
   return { store, broker, make, caps, call, raise, events, grantEvents, settle, closes, enrolls, grant };
 }
 
-// #797 / #1839 Task 3 appends the five request-intake console verbs to Task 4's five and only those: the decision
-// pair stays first and unchanged, and no unsuffixed verb is ever a console verb.
+// #797 / #1839 adds the owner-only artifact read to the existing decision and request controls;
+// no unsuffixed verb is ever a console verb.
 test('N4: owner Console verbs have an explicit immutable whitelist and exclude decision.resolve', () => {
-  assert.deepEqual([...CONSOLE_VERBS], ['decision.preview.console', 'decision.resolve.console', 'prd.revoke.console', 'request.mode.console', 'request.draft.console',
+  assert.deepEqual([...CONSOLE_VERBS], ['system-types.console', 'project.remote.get.console', 'project.remote.set.console', 'request.workspace.console', 'request.artifact.console', 'decision.preview.console', 'decision.resolve.console', 'prd.revoke.console', 'request.mode.console', 'request.draft.console',
     'request.get.console', 'request.projects.console', 'request.answer.console', 'request.attach.console', 'request.cancel.console']);
   assert.ok(CONSOLE_VERBS.every(verb => verb.endsWith('.console')));
   assert.equal(CONSOLE_VERBS.includes('decision.resolve'), false);

packages/bus/tests/creative.test.mjs

@@ -7,7 +7,7 @@ import { fileURLToPath } from 'node:url';
 import { Store } from '../src/store.mjs';
 import { Broker } from '../src/broker.mjs';
 import { startBroker } from '../src/runtime.mjs';
-import { businessDoc, FAR_DATE, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
+import { businessDoc, FAR_DATE, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
 
 // Row 213 (C2-08, #1714, Case 2 design 5.1): a creative instance talks with the user only, and it has
 // no decision channel (M6). The messaging lists are read from the shipped role files.

packages/bus/tests/credential-verbs.test.mjs

@@ -4,13 +4,13 @@
 // scratch root only.
 import test from 'node:test';
 import assert from 'node:assert/strict';
-import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync } from 'node:fs';
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { startBroker } from '../src/runtime.mjs';
 import { Broker, CREDENTIAL_VERBS } from '../src/broker.mjs';
 import { Store } from '../src/store.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
+import { businessDoc, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
 
 const TOKEN = 'fake_issued_token_0123456789';
 const ROTATED = 'fake_rotated_token_9876543210';
@@ -18,7 +18,7 @@ const OTHER = 'fake_other_token_5555555555';
 const DATE = '2099-01-01';
 const role = { authority: { withinRole: ['message.send'], crossRole: [] } };
 
-async function setup(t) {
+async function setup(t, { storeRoot = true } = {}) {
   const root = mkdtempSync(join(tmpdir(), 'bus-cred-verbs-'));
   t.after(() => rmSync(root, { recursive: true, force: true }));
   const rolesDir = rolesCopy(root);
@@ -26,7 +26,7 @@ async function setup(t) {
   doc.roles.coder.credentials.gitea = { store: true, rotateBy: DATE };
   writeJson(join(root, 'businesses/demo.json'), doc);
   mkdirSync(join(root, 'data'), { mode: 0o700 });
-  mkdirSync(join(root, 'secrets', 'agents'), { mode: 0o700 });
+  if (storeRoot) mkdirSync(join(root, 'secrets', 'agents'), { mode: 0o700 });
   const store = (agent, service) => join(root, 'secrets', 'agents', 'demo', agent, service);
   // The bus's resolved business carries the same references; a store one names its derived file.
   const demo = {
@@ -161,3 +161,29 @@ test('T5: issue, rotate, revoke and delete are live, rewrite the business file a
   for (const path of walk(c.root))
     for (const token of [TOKEN, ROTATED, OTHER]) assert.equal(readFileSync(path).includes(token), false, path);
 });
+
+test('#1886: a store reference with no store root yet starts the bus, makes the root private and issues', async (t) => {
+  const c = await setup(t, { storeRoot: false });
+  const dir = join(c.root, 'secrets', 'agents');
+  assert.equal(statSync(dir).mode & 0o777, 0o700);
+  assert.equal(statSync(join(c.root, 'secrets')).mode & 0o077, 0);
+  assert.deepEqual(c.status('coder'), { gitea: 'not-issued', vikunja: 'valid' });
+  const issued = c.ask(c.human, 'credentials.issue', { agent: 'coder', service: 'gitea', token: TOKEN + '\n', date: DATE });
+  assert.deepEqual(issued, { agent: 'coder', verb: 'issue', service: 'gitea', date: DATE, state: 'valid' });
+  assert.equal(statSync(c.store('coder', 'gitea')).mode & 0o777, 0o600);
+});
+
+test('#1886: a store root that exists with loose modes still refuses start', async (t) => {
+  const root = mkdtempSync(join(tmpdir(), 'bus-cred-loose-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const rolesDir = rolesCopy(root);
+  writeJson(join(root, 'businesses/demo.json'), { ...businessDoc(root, 'demo'), plugins: { harness: ['pi'] } });
+  mkdirSync(join(root, 'data'), { mode: 0o700 });
+  mkdirSync(join(root, 'secrets', 'agents'), { recursive: true, mode: 0o750 });
+  chmodSync(join(root, 'secrets', 'agents'), 0o750);
+  const demo = {
+    id: 'demo', human: 'jason', arbiters: { technical: 'coder', delivery: 'coder' }, vars: {},
+    roles: { coder: { ...role, credentials: { gitea: { store: true, file: join(root, 'secrets', 'agents', 'demo', 'coder', 'gitea'), rotateBy: DATE } } } },
+  };
+  await assert.rejects(startBroker({ dataRoot: join(root, 'data'), businesses: { demo }, organization: { dir: root, rolesDir, system: systemFor(root) } }), /credential-file/);
+});

packages/bus/tests/daily-quota-runtime.test.mjs

@@ -15,7 +15,7 @@ const ROLES = { coder: { definition: 'coder', authority: { withinRole: [], cross
 
 async function setup(t, limit = 0) {
   const { startBroker } = await import('../src/runtime.mjs');
-  const { businessDoc, rolesCopy, systemFor, writeJson } = await import('../../business/tests/helpers.mjs');
+  const { businessDoc, rolesCopy, systemFor, writeJson } = await import('../../organization/tests/helpers.mjs');
   const root = mkdtempSync(join(tmpdir(), 'mosaic-daily-quota-')), rolesDir = rolesCopy(root), doc = businessDoc(root, 'demo');
   doc.plugins = { 'limit-check': ['daily-quota'], harness: ['pi', 'claude-code'] };
   doc.launch.account = { name: 'jason-max', credential: 'CLAUDE_CODE_OAUTH_TOKEN' };

packages/bus/tests/delivery-fixture.mjs

@@ -0,0 +1,91 @@
+import { createGitSocket } from '../../cli/src/git-socket.mjs';
+import { pushWorking, fetchReview } from '../../harness/src/git-tools.mjs';
+import { mkdirSync, symlinkSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { git } from '../../project/tests/prd-fixture.mjs';
+import assert from 'node:assert/strict';
+import { requestFixture } from './request-fixture.mjs';
+import { scopedFixture } from '../../tasks/tests/scoped-fixture.mjs';
+import { DatabaseSync } from 'node:sqlite';
+import { createRequestStore } from '../src/request-store.mjs';
+const advance = async (f, op = 'next') => { const s = f.journal.readRequest('demo', f.request); return f.call('pm', 'request.advance', { request: f.request, revision: s.revision, op }); };
+
+export async function planned(t, threaded = false) {
+  const f = await requestFixture(t, 'autonomous', null, threaded), sub = await f.submit(); f.approve(sub); await f.activate(sub);
+  const { createDigest, createMarker } = await import('../src/broker.mjs');
+  const s = f.journal.readRequest('demo', f.request), task_ref = 'vikunja:2/41';
+  const prepared = { op: 'timer-task', request: f.request, requirement: 'REQ-POMO-1', project_key: 'timer', requirement_snapshot: s.snapshot,
+    project: 2, creator: 3, decision: null, view: { ids: { todo: 1, review: 2, done: 3 } }, labels: [], relations: [] };
+  prepared.body = { title: 'Timer', description: createMarker(prepared) };
+  prepared.body_digest = createDigest(prepared.body);
+  const { receipt } = f.bus.broker.prepareTaskCreate(f.caps.pm, prepared);
+  let fields = { ...prepared.body, project_id: 2, bucket: 1, done: false, assignees: [], due_date: null, priority: 0 };
+  const snapshot = () => ({ task_ref, fields, digest: createDigest(fields), updated: new Date().toISOString() });
+  f.bus.broker.recordRecoveredCreate({ receipt, task_ref, snapshot: { ...snapshot(), creator: 3 } });
+  f.bus.broker.recordTask({ cap: f.caps.pm, business: 'demo', snapshots: [snapshot()], events: [] });
+  await assert.rejects(advance(f), /request-evidence-required/);
+  fields = { ...fields, assignees: [5] };
+  f.bus.broker.recordTask({ cap: f.caps.pm, business: 'demo', snapshots: [snapshot()], events: [{ kind: 'task.assigned', subject: task_ref, body: { role: 'coder', previous: [] } }] });
+  const push = commit => f.bus.broker.recordPush(f.caps.coder, { task_ref, project: 'timer', branch: 'timer', ref: 'work/vikunja-2-41', commit, previous: null });
+  const review = commit => f.call('coder', 'review.request', { task_ref, commit, to: 'reviewer' });
+  // Lightweight continuation tests simulate the tracker receipt; plannedWithRealClose uses the actual adapter.
+  return { ...f, task_ref, push, review, closeTask: verdict => {
+    fields = { ...fields, done: true, bucket: 3 };
+    f.bus.broker.recordTask({ cap: f.caps.pm, business: 'demo', snapshots: [snapshot()], events: [{ kind: 'task.closed', subject: task_ref, body: { verdict } }] });
+  } };
+}
+
+
+async function plannedWithRealClose(t) {
+  const f = await scopedFixture(t), product = await f.product('timer');
+  const task = await f.create(product.args), task_ref = task.task_ref;
+  await f.bus.broker.requestTask(f.caps.pm, { verb: 'task.assign', args: { task_ref, role: 'coder' } }, f.adapter.handle);
+  const db = new DatabaseSync(join(f.f.dataRoot, 'bus/bus.sqlite'), { readOnly: true }); t.after(() => db.close());
+  const store = { get: (sql, ...a) => db.prepare(sql).get(...a), all: (sql, ...a) => db.prepare(sql).all(...a) };
+  return { ...f, request: product.request, task_ref, store, journal: createRequestStore(store),
+    push: commit => f.bus.broker.recordPush(f.caps.coder, { task_ref, project: 'timer', branch: 'timer', ref: 'work/vikunja-2-41', commit, previous: null }),
+    review: commit => f.call('coder', 'review.request', { task_ref, commit, to: 'reviewer' }),
+    closeTask: verdict => f.bus.broker.requestTask(f.caps.pm, { verb: 'task.close', args: { task_ref, verdict } }, f.adapter.handle) };
+}
+
+export async function ready(t, options = {}) {
+  const f = options.realClose ? await plannedWithRealClose(t) : await planned(t, true);
+  const advance = async op => { const s = f.journal.readRequest('demo', f.request); return f.call('pm', 'request.advance', { request: f.request, revision: s.revision, op }); };
+  await advance('start');
+  const code = join(f.f.dataRoot, 'products/demo/timer/code');
+  const sandbox = join(f.f.dataRoot, 'test-workspaces');
+  const coder = join(sandbox, 'coder'), reviewer = join(sandbox, 'reviewer'), temp = join(sandbox, 'tmp');
+  for (const dir of [coder, reviewer, temp, join(f.f.dataRoot, 'bus-host')]) mkdirSync(dir, { recursive: true });
+  git(coder, 'clone', '-q', code, 'timer'); git(reviewer, 'clone', '-q', code, 'timer');
+  const clone = join(coder, 'timer'); git(clone, 'checkout', '-qb', 'feat');
+  const bytes = Buffer.from(`<!doctype html><title>Timer</title><output id="clock">Ready</output><button id="start">Start</button><script>document.querySelector('#start').onclick=()=>{document.querySelector('#clock').textContent='Running';};</script>`);
+  writeFileSync(join(clone, 'timer.html'), bytes);
+  if (options.invalidPaths) { symlinkSync('timer.html', join(clone, 'link.html')); writeFileSync(join(clone, 'large.html'), Buffer.alloc(1024 * 1024 + 1, 65)); }
+  git(clone, 'add', '-A'); git(clone, 'commit', '-qm', 'Build timer');
+  const commit = git(clone, 'rev-parse', 'HEAD');
+  const host = { op: async r => {
+    if (r.op === 'identity') return f.bus.identity(r.cap);
+    if (r.op === 'checkPush') return f.bus.checkPush(r.cap, r.task_ref, r.project);
+    if (r.op === 'recordPush') return f.bus.recordPush(r.cap, r.push);
+    if (r.op === 'reviewFetch') return f.bus.reviewFetch(r.cap, r.args);
+    if (r.op === 'refuse') return;
+    throw new Error('unexpected socket operation');
+  } };
+  const socket = createGitSocket({ host, business: { id: 'demo', projects: { timer: { root: code } } }, dataRoot: f.f.dataRoot, env: f.f.env });
+  await socket.listen(); t.after(() => socket.close());
+  const pushed = await pushWorking({ path: socket.path, cap: f.caps.coder, workspace: coder, task_ref: f.task_ref, project: 'timer', branch: 'feat', tmp: temp, env: f.f.env });
+  assert.equal(pushed.commit, commit);
+  const review = f.review(commit); await advance('review');
+  const fetched = await fetchReview({ path: socket.path, cap: f.caps.reviewer, workspace: reviewer, task_ref: f.task_ref, request: review.request, tmp: temp, env: f.f.env });
+  assert.equal(fetched.commit, commit);
+  assert.equal(git(fetched.clone, 'show', `${fetched.commit}:timer.html`), bytes.toString());
+  const results = 'Acceptance: timer starts and stops offline; passed.';
+  const record = JSON.stringify({ version: 1, task_ref: f.task_ref, review_request: review.request, commit, results });
+  const verification = await f.call('reviewer', 'record.write', { project: 'timer', path: 'docs/verification.md', record });
+  const verdictBody = JSON.stringify({ verification_record: { path: verification.path, commit: verification.commit }, results: options.results ?? results });
+  const verdict = f.call('reviewer', 'review.verdict', { task_ref: f.task_ref, request: review.request, verdict: 'approve', body: verdictBody });
+  await advance('delivery'); await f.closeTask(verdict.verdict);
+  const s = f.journal.readRequest('demo', f.request);
+  const args = { request: f.request, revision: s.revision, op: 'deliver-1', task_ref: f.task_ref, verdict: verdict.verdict, path: 'timer.html', verification_record: { path: verification.path, commit: verification.commit } };
+  return { ...f, advance, bytes, commit, review, verdict, verification, args };
+}

packages/bus/tests/dev-local-owner.test.mjs

@@ -0,0 +1,75 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { spawn, spawnSync } from 'node:child_process';
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { once } from 'node:events';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { DEV_OWNER } from '../../cli/src/dev-local-owner.mjs';
+import { fixture, notifyConfig } from '../../cli/tests/helpers.mjs';
+import { initializeControl, transition } from '../../processing-control/src/state.mjs';
+import { verifyPrincipal } from '../src/principal.mjs';
+import { checkConsole } from '../../webui/src/sso-config.mjs';
+import { reserveOrg, activateOrg } from '../../organization/src/org-registry.mjs';
+
+const uid=process.getuid(), nonce='a'.repeat(64);
+const paths={ console:'/tree/cli.mjs', consoleCli:'/tree/console-cli.mjs' };
+function context(subject=DEV_OWNER, owners=[]) {
+ const table=new Map([[50,{pid:50,ppid:40,startTime:'100',uid,argv:['node',paths.consoleCli],env:{MOSAIC_BUS_CONSOLE_NONCE:nonce,MOSAIC_BUS_CONSOLE_BUSINESS:'demo',MOSAIC_BUS_CONSOLE_PROVIDER:subject.provider,MOSAIC_BUS_CONSOLE_ISS:subject.iss,MOSAIC_BUS_CONSOLE_SUB:subject.sub}}], [40,{pid:40,ppid:1,startTime:'90',uid,argv:['node',paths.console,'serve'],env:{}}]]);
+ return {peer:{pid:50,uid,gid:uid},paths,businesses:{demo:{human:'owner'}},consoleOwners:owners,readProcess:pid=>({...table.get(pid)}),table};
+}
+const proof = subject => ({console:{pid:50,startTime:'100',nonce,business:'demo',...subject}});
+test('dev principal requires enabled owner membership and the Console wrapper, nonce and serve parent',()=>{
+ assert.throws(()=>verifyPrincipal(proof(DEV_OWNER),context()),/human-required/);
+ const c=context(DEV_OWNER,[DEV_OWNER]);
+ assert.deepEqual(verifyPrincipal(proof(DEV_OWNER),c).subject,DEV_OWNER);
+ for(const mutation of [t=>{t.get(50).argv=['node','/other'];},t=>{t.get(40).argv=['node',paths.console,'other'];},t=>{t.get(50).env.MOSAIC_BUS_CONSOLE_NONCE='bad';}]) {
+  const d=context(DEV_OWNER,[DEV_OWNER]); mutation(d.table); assert.throws(()=>verifyPrincipal(proof(DEV_OWNER),d),/human-required/);
+ }
+ const forged={...DEV_OWNER,sub:'another'};
+ assert.throws(()=>verifyPrincipal(proof(forged),context(forged,[DEV_OWNER])),/human-required/);
+});
+test('dev issuer cannot be a configured SSO issuer',()=>{
+ const sso={sso:{publicOrigin:'https://console.example',providers:[{id:DEV_OWNER.provider,issuer:DEV_OWNER.iss,clientId:'fake',clientSecret:{slot:'fake'},algs:['RS256'],subjects:[{sub:DEV_OWNER.sub,name:'operator'}]}]}};
+ assert.throws(()=>checkConsole(sso),/issuer.*https URL/);
+});
+test('bus dev flag refuses the default instance with or without --pm before config access',()=>{
+ for(const args of [['bus','start','demo','--dev-local-owner'], ['bus','start','demo','--dev-local-owner','--pm']]) {
+  const r=spawnSync(process.execPath,['packages/cli/src/cli.mjs',...args],{encoding:'utf8',env:{...process.env,MOSAIC_CONFIG:''}});
+  assert.notEqual(r.status,0); assert.match(r.stderr,/--dev-local-owner requires a named instance/);
+ }
+});
+
+for (const pm of [false, true]) {
+ test(`bus dev owner enables launches ${pm ? 'with --pm and prints the warning' : 'without --pm'}`, { timeout: 30000 }, async t => {
+  const root=mkdtempSync(join(tmpdir(),'dev-owner-launch-'));
+  const f=fixture(root), home=join(root,'home'), base=join(home,'.config');
+  mkdirSync(base,{recursive:true}); renameSync(join(root,'config'),join(base,'mosaic-test'));
+  chmodSync(join(base,'mosaic-test'),0o700);
+  writeFileSync(join(f.dataRoot,'instance.json'),JSON.stringify({instanceVersion:1,name:'test'}));
+  const ctx={ configDir:join(base,'mosaic-test'), dataRoot:f.dataRoot, instance:'test' };
+  const org=await reserveOrg(ctx,'acme'); await activateOrg(ctx,'acme');
+  notifyConfig(org.root,'acme',null);
+  // A halted instance exercises the real --pm path without launching a harness.
+  initializeControl(org.root);
+  transition(org.root,{business:'acme',human:'jason',halted:true});
+  const env={...f.env,HOME:home,MOSAIC_CONFIG:join(base,'mosaic-test','config.json')};
+  const child=spawn(process.execPath,['packages/cli/src/cli.mjs','bus','start','acme','--dev-local-owner',...(pm ? ['--pm'] : [])],{env,stdio:['ignore','pipe','pipe']});
+  const exited=once(child,'exit'); let stdout='', stderr='';
+  child.stdout.on('data',b=>stdout+=b); child.stderr.on('data',b=>stderr+=b);
+  t.after(async()=>{if(child.exitCode===null && child.signalCode===null){const stop=spawn(process.execPath,['packages/cli/src/cli.mjs','bus','stop','acme'],{env,stdio:'ignore'}); const [[code]]=await Promise.all([once(stop,'exit'),exited]); assert.equal(code,0,'bus stops cleanly');} rmSync(root,{recursive:true,force:true});});
+  const log=join(org.root,'bus-host','host.log');
+  const hostOutput=()=>existsSync(log)?readFileSync(log,'utf8'):'';
+  const deadline=Date.now()+15000;
+  while(Date.now()<deadline && child.exitCode===null && !(pm ? hostOutput().includes('processing halted: chief launch skipped') : hostOutput().includes('bus host up:'))) await new Promise(r=>setTimeout(r,50));
+  stdout=hostOutput();
+  assert.match(stdout,/DEV LOCAL OWNER MODE: console owner local-dev accepted \(named instance test\)\n/,stderr);
+  const warning='DEV LOCAL OWNER MODE: launched agents run as this OS user and can reach the loopback Console as owner; use this instance for UI testing only';
+  if(pm) {
+   assert.ok(stdout.includes(`DEV LOCAL OWNER MODE: console owner local-dev accepted (named instance test)\n${warning}\n`),stdout);
+   assert.match(stdout,/processing halted: chief launch skipped/);
+  } else assert.ok(!stdout.includes(warning));
+  assert.match(stdout,/bus host up: business acme, socket \S+, notifier off\n/);
+  assert.equal(child.exitCode,null,stderr);
+ });
+}

packages/bus/tests/gitea-migration.test.mjs

@@ -36,11 +36,11 @@ function source3j(t) {
 const SESSIONS_3L = ['sessions', 'session_defaults', 'thread_claims', 'message_threads', 'thread_opens'];
 // Row 206 (#1704): and the 3l→3m step's thread_shares. thread-shares.test.mjs tests it.
 // Row 271 (#1776): and the 3m→3n step's session_ops and message_cancels. session-clear.test.mjs tests them.
-const later3l = (r) => [...SESSIONS_3L, 'thread_shares', 'session_ops', 'message_cancels', 'request_events', 'request_effects', 'request_snapshots', 'request_snapshot_events', 'request_project_events'].includes(r.tbl_name) || ['delivery_same_thread', 'delivery_same_session', 'threads_id_not_session'].includes(r.name);
+const later3l = (r) => [...SESSIONS_3L, 'thread_shares', 'session_ops', 'message_cancels', 'project_archives', 'project_system_types', 'request_events', 'request_effects', 'request_snapshots', 'request_snapshot_events', 'request_project_events'].includes(r.tbl_name) || ['delivery_same_thread', 'delivery_same_session', 'threads_id_not_session'].includes(r.name);
 function rows(path) {
   const db = new DatabaseSync(path, { readOnly: true });
   try {
-    return Object.fromEntries(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name NOT IN ('gitea_users','gitea_grants','sessions','session_defaults','thread_shares','session_ops','message_cancels','request_events','request_effects','request_snapshots','request_snapshot_events','request_project_events')").all()
+    return Object.fromEntries(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name NOT IN ('gitea_users','gitea_grants','sessions','session_defaults','thread_shares','session_ops','message_cancels','request_events','request_effects','request_snapshots','request_snapshot_events','request_project_events','project_archives','project_system_types')").all()
       .map(({ name }) => [name, db.prepare(`SELECT * FROM ${name} ORDER BY rowid`).all()
         .filter(r => name !== 'meta' || !['schema_version', 'schema_digest'].includes(r.key)).map(r => ({ ...r }))]));
   } finally { db.close(); }
@@ -83,6 +83,8 @@ async function engine(root, name, { store, schema, step = (s) => s }) {
   copyFileSync(here('../src/migrations/3p-3q.sql'), join(moduleRoot, 'src/migrations/3p-3q.sql'));
   copyFileSync(here('../src/migrations/3q-3r.sql'), join(moduleRoot, 'src/migrations/3q-3r.sql'));
   copyFileSync(here('../src/migrations/3r-3s.sql'), join(moduleRoot, 'src/migrations/3r-3s.sql'));
+  copyFileSync(here('../src/migrations/3s-3t.sql'), join(moduleRoot, 'src/migrations/3s-3t.sql'));
+  copyFileSync(here('../src/migrations/3t-3u.sql'), join(moduleRoot, 'src/migrations/3t-3u.sql'));
   return (await import(pathToFileURL(join(moduleRoot, 'src/store.mjs')))).Store;
 }
 function fresh(t) {
@@ -104,7 +106,7 @@ test('3j copy migrates to 3k: every row kept, and sqlite_master gains only the t
   const { root, path } = source3j(t), before = rows(path), was = master(path);
   assert.throws(() => new Store(root), /schema-mismatch/);
   new Store(root, { migrateSchema: true }).close();
-  assert.equal(version(path), '3s');
+  assert.equal(version(path), '3u');
   assert.deepEqual(migrated3l(rows(path)), before);
   const now = master(path);
   assert.deepEqual(now.filter(r => !NEW.includes(r.name) && !later3l(r)), was.filter(r => !later3l(r)));
@@ -130,7 +132,7 @@ test('a 3j→3k step that fails partway leaves the store at 3j with every row an
   assert.deepEqual(master(path), was);
   assert.deepEqual(rows(path), before);
   new Store(root, { migrateSchema: true }).close();
-  assert.equal(version(path), '3s');
+  assert.equal(version(path), '3u');
 });
 
 test('the 3j engine refuses a migrated store, migrating or not, and leaves it as it was', async t => {
@@ -141,14 +143,14 @@ test('the 3j engine refuses a migrated store, migrating or not, and leaves it as
     schema: ddl3j,
     store: (source) => source
       .replace(/export const SCHEMA_SHA256 = '[a-f0-9]+';/, `export const SCHEMA_SHA256 = '${createHash('sha256').update(ddl3j).digest('hex')}';`)
-      .replace("export const SCHEMA_VERSION = '3s';", "export const SCHEMA_VERSION = '3j';")
+      .replace("export const SCHEMA_VERSION = '3u';", "export const SCHEMA_VERSION = '3j';")
       .replace(/\}, \{\n {2}\/\/ Row 236 \(#1742[\s\S]*?\}\];\nconst timedTables/, '}];\nconst timedTables'),
   });
   const pinned = readFileSync(join(root, 'engine-3j/src/store.mjs'), 'utf8');
   assert.ok(pinned.includes("export const SCHEMA_VERSION = '3j';") && !pinned.includes('3j-3k'), 'the 3j engine has no 3j→3k step');
   assert.throws(() => new Store3j(root), /schema-mismatch/);
   assert.throws(() => new Store3j(root, { migrateSchema: true }), /schema-mismatch/);
-  assert.equal(version(path), '3s');
+  assert.equal(version(path), '3u');
   assert.deepEqual(master(path), was);
   assert.deepEqual(rows(path), after);
 });

packages/bus/tests/grant-host.test.mjs

@@ -11,7 +11,7 @@ import { Broker, registrySha256 } from '../src/broker.mjs';
 import { Store } from '../src/store.mjs';
 import { hostGrant, definitionSha256 } from '../src/host-grant.mjs';
 import { hostRecord, hostGrantRecord } from './host-fixtures.mjs';
-import { canonicalJson } from '../../business/src/util.mjs';
+import { canonicalJson } from '../../organization/src/util.mjs';
 
 const options = [{ key: 'yes', text: 'Yes' }, { key: 'no', text: 'No' }];
 const refusesWith = async (p, code) => assert.rejects(Promise.resolve().then(() => p), (e) => (assert.equal(e.code, code), true));

packages/bus/tests/grant-migration.test.mjs

@@ -22,7 +22,7 @@ const LATER = ['gitea_users', 'gitea_grants', 'sqlite_autoindex_gitea_users_1',
 const SESSIONS_3L = ['sessions', 'session_defaults', 'thread_claims', 'message_threads', 'thread_opens'];
 // Row 206 (#1704): and the 3l→3m step's thread_shares. thread-shares.test.mjs tests it.
 // Row 271 (#1776): and the 3m→3n step's session_ops and message_cancels. session-clear.test.mjs tests them.
-const later3l = (r) => [...SESSIONS_3L, 'thread_shares', 'session_ops', 'message_cancels', 'request_events', 'request_effects', 'request_snapshots', 'request_snapshot_events', 'request_project_events'].includes(r.tbl_name) || ['delivery_same_thread', 'delivery_same_session', 'threads_id_not_session'].includes(r.name);
+const later3l = (r) => [...SESSIONS_3L, 'thread_shares', 'session_ops', 'message_cancels', 'project_archives', 'project_system_types', 'request_events', 'request_effects', 'request_snapshots', 'request_snapshot_events', 'request_project_events'].includes(r.tbl_name) || ['delivery_same_thread', 'delivery_same_session', 'threads_id_not_session'].includes(r.name);
 function source3i(t) {
   const root = mkdtempSync(join(tmpdir(), 'grant-migrate-'));
   t.after(() => rmSync(root, { recursive: true, force: true }));
@@ -42,7 +42,7 @@ function source3i(t) {
 function rows(path) {
   const db = new DatabaseSync(path, { readOnly: true });
   try {
-    return Object.fromEntries(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name NOT IN ('hosts','host_grants','gitea_users','gitea_grants','sessions','session_defaults','thread_shares','session_ops','message_cancels','request_events','request_effects','request_snapshots','request_snapshot_events','request_project_events')").all()
+    return Object.fromEntries(db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name NOT IN ('hosts','host_grants','gitea_users','gitea_grants','sessions','session_defaults','thread_shares','session_ops','message_cancels','request_events','request_effects','request_snapshots','request_snapshot_events','request_project_events','project_archives','project_system_types')").all()
       .map(({ name }) => [name, db.prepare(`SELECT * FROM ${name} ORDER BY rowid`).all()
         .filter(r => name !== 'meta' || !['schema_version', 'schema_digest'].includes(r.key)).map(r => ({ ...r }))]));
   } finally { db.close(); }
@@ -86,6 +86,8 @@ async function engine(root, name, { store, schema, step = (s) => s }) {
   copyFileSync(here('../src/migrations/3p-3q.sql'), join(moduleRoot, 'src/migrations/3p-3q.sql'));
   copyFileSync(here('../src/migrations/3q-3r.sql'), join(moduleRoot, 'src/migrations/3q-3r.sql'));
   copyFileSync(here('../src/migrations/3r-3s.sql'), join(moduleRoot, 'src/migrations/3r-3s.sql'));
+  copyFileSync(here('../src/migrations/3s-3t.sql'), join(moduleRoot, 'src/migrations/3s-3t.sql'));
+  copyFileSync(here('../src/migrations/3t-3u.sql'), join(moduleRoot, 'src/migrations/3t-3u.sql'));
   return (await import(pathToFileURL(join(moduleRoot, 'src/store.mjs')))).Store;
 }
 function fresh(t) {
@@ -109,7 +111,7 @@ test('3i copy migrates to 3j: every row kept, and sqlite_master gains only the t
   const { root, path } = source3i(t), before = rows(path), was = master(path);
   assert.throws(() => new Store(root), /schema-mismatch/);
   new Store(root, { migrateSchema: true }).close();
-  assert.equal(version(path), '3s');
+  assert.equal(version(path), '3u');
   assert.deepEqual(migrated3l(rows(path)), before);
   const now = master(path).filter(r => !LATER.includes(r.name));
   assert.deepEqual(now.filter(r => !NEW.includes(r.name) && !later3l(r)), was.filter(r => !later3l(r)));
@@ -134,7 +136,7 @@ test('a 3i→3j step that fails partway leaves the store at 3i with every row an
   assert.deepEqual(master(path), was);
   assert.deepEqual(rows(path), before);
   new Store(root, { migrateSchema: true }).close();
-  assert.equal(version(path), '3s');
+  assert.equal(version(path), '3u');
 });
 
 test('the 3i engine refuses a migrated store, migrating or not, and leaves it as it was', async t => {
@@ -145,14 +147,14 @@ test('the 3i engine refuses a migrated store, migrating or not, and leaves it as
     schema: ddl3i,
     store: (source) => source
       .replace(/export const SCHEMA_SHA256 = '[a-f0-9]+';/, `export const SCHEMA_SHA256 = '${createHash('sha256').update(ddl3i).digest('hex')}';`)
-      .replace("export const SCHEMA_VERSION = '3s';", "export const SCHEMA_VERSION = '3i';")
+      .replace("export const SCHEMA_VERSION = '3u';", "export const SCHEMA_VERSION = '3i';")
       .replace(/\}, \{\n {2}\/\/ Row 234 \(#1740\)[\s\S]*?\}\];\nconst timedTables/, '}];\nconst timedTables'),
   });
   const pinned = readFileSync(join(root, 'engine-3i/src/store.mjs'), 'utf8');
   assert.ok(pinned.includes("export const SCHEMA_VERSION = '3i';") && !pinned.includes('3i-3j'), 'the 3i engine has no 3i→3j step');
   assert.throws(() => new Store3i(root), /schema-mismatch/);
   assert.throws(() => new Store3i(root, { migrateSchema: true }), /schema-mismatch/);
-  assert.equal(version(path), '3s');
+  assert.equal(version(path), '3u');
   assert.deepEqual(master(path), was);
   assert.deepEqual(rows(path), after);
 });

packages/bus/tests/grant-scope-runtime.test.mjs

@@ -6,7 +6,7 @@ import { mkdirSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { startBroker } from '../src/runtime.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
+import { businessDoc, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
 
 // Break caught: missing runtime setter routing or losing the organization receipt.
 test('row 298 runtime: human scope approval writes the file and organization history at the supplied revision', async t => {

packages/bus/tests/grant-scope.test.mjs

@@ -4,7 +4,7 @@
 // Gitea grants run against the fake Gitea in fake-gitea-api.mjs on 127.0.0.1; host grants stop at the
 // spend, as no host key store is configured, and nothing connects to a host. Every token is a fake the
 // fake made and none is printed. The organization writer is a fake here; the real one is
-// packages/business/tests/grant-scope.test.mjs.
+// packages/organization/tests/grant-scope.test.mjs.
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { createHash } from 'node:crypto';
@@ -16,7 +16,7 @@ import { Credentials } from '../src/credentials.mjs';
 import { giteaGrant, giteaKeys } from '../src/gitea-grant.mjs';
 import { hostGrant, grantKeys, fingerprint } from '../src/host-grant.mjs';
 import { Store } from '../src/store.mjs';
-import { checkGrantScope, grantScopeOf } from '../../business/src/vocabulary.mjs';
+import { checkGrantScope, grantScopeOf } from '../../organization/src/vocabulary.mjs';
 import { fakeGiteaApi } from './fake-gitea-api.mjs';
 import { hostRecord, grantDecision } from './host-fixtures.mjs';
 

packages/bus/tests/hard-waits.test.mjs

@@ -5,7 +5,7 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { Store } from '../src/store.mjs';
 import { Broker, ACTIONS, HARD_WAITS } from '../src/broker.mjs';
-import { ACTIONS as VOCABULARY, GATED_ONLY } from '../../business/src/vocabulary.mjs';
+import { ACTIONS as VOCABULARY, GATED_ONLY } from '../../organization/src/vocabulary.mjs';
 import { fixture } from './spec-fixtures.mjs';
 import { hostGrantRecord, hostRecord } from './host-fixtures.mjs';
 

packages/bus/tests/host-run.test.mjs

@@ -17,7 +17,7 @@ import { Broker, ORGANIZATION_KEYS } from '../src/broker.mjs';
 import { Store } from '../src/store.mjs';
 import { hostGrant } from '../src/host-grant.mjs';
 import { startBroker } from '../src/runtime.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
+import { businessDoc, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
 
 import { ephemeralRange, installSleepStub, pickPort, startScratchSshd } from './scratch-sshd.mjs';
 
@@ -422,7 +422,7 @@ test('T24: no literal gitea and vikunja kind list outside vocabulary.mjs, and th
     return existsSync(src) ? readdirSync(src).filter((n) => n.endsWith('.mjs')).map((n) => `packages/${pkg}/src/${n}`) : [];
   });
   const code = (file) => readFileSync(join(REPO, file), 'utf8').split('\n').filter((l) => !/^\s*(\/\/|\*)/.test(l)).join('\n');
-  const lists = files.filter((file) => !file.endsWith('business/src/vocabulary.mjs') &&
+  const lists = files.filter((file) => !file.endsWith('organization/src/vocabulary.mjs') &&
     /\[\s*['"]gitea['"]\s*,\s*['"]vikunja['"]\s*\]/.test(code(file)));
   assert.deepEqual(lists, []);
   const uses = files.filter((file) => /credentials\.(use|useFor)\(/.test(code(file))).sort();

packages/bus/tests/instances-verb.test.mjs

@@ -60,7 +60,7 @@ test('row 165: instances and instances.set refuse every non-human session but th
 
 test('row 165 runtime: an add and a change reach the organization file with the human as actor; each refusal keeps the bytes and logs nothing', async (t) => {
   const { startBroker } = await import('../src/runtime.mjs');
-  const { businessDoc, rolesCopy, systemFor, writeJson } = await import('../../business/tests/helpers.mjs');
+  const { businessDoc, rolesCopy, systemFor, writeJson } = await import('../../organization/tests/helpers.mjs');
   const root = mkdtempSync(join(tmpdir(), 'instances-runtime-'));
   const rolesDir = rolesCopy(root);
   writeJson(join(root, 'businesses/demo.json'), businessDoc(root, 'demo'));

packages/bus/tests/launch-notice.test.mjs

@@ -6,7 +6,8 @@ import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { Store } from '../src/store.mjs';
 import { Broker } from '../src/broker.mjs';
-import { ID_PATTERN } from '../../business/src/vocabulary.mjs';
+import { createContinuations } from '../src/request-continuation.mjs';
+import { ID_PATTERN } from '../../organization/src/vocabulary.mjs';
 
 // Row 146 (#1640): a message.send to a role nobody holds tells the business's launch.by
 // instance once, and the result says so. The assistant's lists are the shipped ones, as in
@@ -35,6 +36,72 @@ const demo = (extra = {}) => ({
   },
 });
 
+test('continuation notices ignore unrelated lifecycle events, halts, and unclaimed launches', async t => {
+  const root = mkdtempSync(join(tmpdir(), 'continuation-notice-'));
+  const store = new Store(root);
+  t.after(() => { store.close(); rmSync(root, { recursive: true, force: true }); });
+  const extraRoles = { ...roles, reviewer: { definition: 'reviewer', authority: { withinRole: ['message.send'], crossRole: [] } }, helper: { definition: 'coder', authority: { withinRole: ['message.send'], crossRole: [] } } };
+  const businesses = demo({ roles: extraRoles, definitions: { ...definitions, reviewer: {} }, launch: { by: 'chief', instances: ['pm', 'coder', 'reviewer'], models: {}, limits: {} } });
+  const states = ['pm', 'coder', 'reviewer'].map((role, i) => ({ business: 'demo', request: `request-${i}`, revision: 1, phase: 'selection', pm: role, source_message: `source-${i}`, tasks: [] }));
+  const rows = [];
+  const journal = {
+    effects: (business, request) => rows.filter(r => r.business === business && r.request === request),
+    transaction: fn => fn(),
+    prepareEffect: e => { rows.push(structuredClone(e)); return e; },
+    finishEffect: e => { rows.push(structuredClone(e)); return e; },
+  };
+  let halted = false, continuations;
+  const processing = { read: () => ({ version: 1, generation: '00000000-0000-4000-8000-000000000000', halted }) };
+  const b = new Broker({ store, businesses, processing, requestLifecycle: services => {
+    continuations = createContinuations({ journal, services });
+    const noop = () => {};
+    return { open: noop, get: noop, projects: noop, propose: noop, question: noop, answer: noop, attach: noop, cancel: noop, modeConsole: noop, draftConsole: noop, resume: noop, recover: noop };
+  } });
+  const resume = () => { for (const state of states) { try { continuations.resume(state); } catch (e) { if (e.code !== 'processing-halted') throw e; } } };
+  const notices = id => store.get("SELECT count(*) n FROM messages WHERE from_role='_bus' AND to_role='chief' AND in_reply_to=?", id).n;
+  const launch = (role, run) => b.bindLaunch({ business: 'demo', role, run, harness: 'pi' });
+  launch('helper', 'helper-old');
+  resume();
+  const waiting = store.all("SELECT id,to_role FROM messages WHERE from_role='_bus' AND body LIKE 'Request continuation %' ORDER BY seq");
+  assert.equal(waiting.length, 3);
+  for (const m of waiting) assert.equal(notices(m.id), 1);
+
+  halted = true;
+  b.endLaunch({ business: 'demo', run: 'helper-old', reason: 'exit' });
+  resume();
+  for (const m of waiting) assert.equal(notices(m.id), 1, 'halt sends no notices');
+  halted = false;
+  launch('helper', 'helper-new');
+  resume();
+  for (const m of waiting) assert.equal(notices(m.id), 1, 'unrelated launch sends no notices');
+
+  const pm = launch('pm', 'pm-new');
+  resume();
+  for (const m of waiting) assert.equal(notices(m.id), 1, 'unclaimed target launch sends no notices');
+  b.request(pm, { verb: 'role.claim', args: {} });
+  resume();
+  const pmMessage = waiting.find(m => m.to_role === 'pm');
+  assert.equal(store.get("SELECT holder_run FROM deliveries WHERE message=? AND op='routed' ORDER BY seq DESC LIMIT 1", pmMessage.id).holder_run, 'pm-new');
+  launch('coder', 'coder-new');
+  resume();
+  for (const m of waiting) assert.equal(notices(m.id), 1, 'staggered launches do not duplicate notices');
+  states.push({ business: 'demo', request: 'request-starting', revision: 1, phase: 'selection', pm: 'coder', source_message: 'source-starting', tasks: [] });
+  resume();
+  const starting = store.get("SELECT id FROM messages WHERE to_role='coder' AND body LIKE '%request-starting%'");
+  assert.equal(notices(starting.id), 0, 'a new continuation does not announce an unclaimed launch');
+  halted = true;
+  b.endLaunch({ business: 'demo', run: 'coder-new', reason: 'exit' });
+  resume();
+  assert.equal(notices(starting.id), 0, 'target end while halted sends no notice');
+  halted = false;
+  resume();
+  assert.equal(notices(starting.id), 1, 'target end is noticed after processing resumes');
+  const replacement = launch('coder', 'coder-replacement');
+  b.request(replacement, { verb: 'role.claim', args: {} });
+  resume();
+  assert.equal(store.get("SELECT holder_run FROM deliveries WHERE message=? AND op='routed' ORDER BY seq DESC LIMIT 1", starting.id).holder_run, 'coder-replacement');
+});
+
 function setup(t, businesses = demo()) {
   const root = mkdtempSync(join(tmpdir(), 'bus-notice-'));
   let store = new Store(root);

packages/bus/tests/library-credential.test.mjs

@@ -22,7 +22,7 @@ import { mappingEntry, repo } from '../../library/tests/helpers.mjs';
 import * as library from '../../library/src/index.mjs';
 import { fakeGiteaApi } from './fake-gitea-api.mjs';
 import { grantDecision } from './host-fixtures.mjs';
-import { systemFor } from '../../business/tests/helpers.mjs';
+import { systemFor } from '../../organization/tests/helpers.mjs';
 
 const AT = '2026-10-22T00:00:00.000Z';
 const REV = 'b'.repeat(64);

packages/bus/tests/lifecycle-revoke.test.mjs

@@ -7,13 +7,13 @@ import assert from 'node:assert/strict';
 import { chmodSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import { busBusiness } from '../src/business.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
 import { startBroker } from '../src/runtime.mjs';
 import { Store } from '../src/store.mjs';
 import { hostGrantRecord, hostRecord } from './host-fixtures.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
-import { businessDoc, FAR_DATE, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
+import { businessDoc, FAR_DATE, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
 
 const TOKEN = 'fake_issued_token_0123456789';
 const store = (agent, service) => ({ store: true, [service === 'gitea' ? 'rotateBy' : 'expires']: FAR_DATE });
@@ -42,7 +42,7 @@ async function setup(t, { drop = [], seed = null } = {}) {
   const b = loadBusiness('demo', { dir: root, rolesDir });
   const resolved = {};
   for (const i of Object.keys(b.roles)) resolved[i] = resolveInstance({ system: systemFor(root), business: b, instance: i });
-  const boot = busBusiness(b, resolved);
+  const boot = busOrganization(b, resolved);
   for (const name of drop) delete boot.roles[name].credentials;
   const bus = await startBroker({ dataRoot: join(root, 'data'), businesses: { demo: boot }, organization: { dir: root, rolesDir, system: systemFor(root) } });
   t.after(async () => {

packages/bus/tests/lifecycle-verbs.test.mjs

@@ -366,10 +366,10 @@ test('row 194 V5 retry: a retired name deletes again only after workspace-rename
 
 test('row 194 V5 runtime: a delete request, the take and lifecycleDelete commit the file with retired, log the human and reload so the name no longer binds', async (t) => {
   const { startBroker } = await import('../src/runtime.mjs');
-  const { busBusiness } = await import('../src/business.mjs');
-  const { loadBusiness } = await import('../../business/src/business.mjs');
-  const { resolveInstance } = await import('../../business/src/resolve.mjs');
-  const { businessDoc, rolesCopy, systemFor, writeJson } = await import('../../business/tests/helpers.mjs');
+  const { busOrganization } = await import('../src/organization-context.mjs');
+  const { loadBusiness } = await import('../../organization/src/organization-config.mjs');
+  const { resolveInstance } = await import('../../organization/src/resolve.mjs');
+  const { businessDoc, rolesCopy, systemFor, writeJson } = await import('../../organization/tests/helpers.mjs');
   const root = mkdtempSync(join(tmpdir(), 'lifecycle-runtime-'));
   const rolesDir = rolesCopy(root);
   const file = writeJson(join(root, 'businesses/demo.json'), { ...businessDoc(root, 'demo'), plugins: { harness: ['pi'] } });
@@ -377,7 +377,7 @@ test('row 194 V5 runtime: a delete request, the take and lifecycleDelete commit
   const b = loadBusiness('demo', { dir: root, rolesDir });
   const resolved = {};
   for (const i of Object.keys(b.roles)) resolved[i] = resolveInstance({ system: systemFor(root), business: b, instance: i });
-  const bus = await startBroker({ dataRoot: join(root, 'data'), businesses: { demo: busBusiness(b, resolved) }, organization: { dir: root, rolesDir, system: systemFor(root) } });
+  const bus = await startBroker({ dataRoot: join(root, 'data'), businesses: { demo: busOrganization(b, resolved) }, organization: { dir: root, rolesDir, system: systemFor(root) } });
   t.after(async () => { await bus.close(); rmSync(root, { recursive: true, force: true }); });
   const human = bus.broker.bindHuman({ business: 'demo', human: 'jason', via: 'cli', outsideAgent: true });
   const ask = (verb, args) => bus.broker.request(human, { verb, args });

packages/bus/tests/limits-runtime.test.mjs

@@ -13,7 +13,7 @@ const CODER = ['tokens', 'instances', 'coder'];
 
 async function setup(t, plugins, limit = 0) {
   const { startBroker } = await import('../src/runtime.mjs');
-  const { businessDoc, rolesCopy, systemFor, writeJson } = await import('../../business/tests/helpers.mjs');
+  const { businessDoc, rolesCopy, systemFor, writeJson } = await import('../../organization/tests/helpers.mjs');
   const root = mkdtempSync(join(tmpdir(), 'mosaic-limits-tokens-')), rolesDir = rolesCopy(root), doc = businessDoc(root, 'demo');
   doc.plugins = { 'limit-check': plugins, harness: ['pi'] };
   doc.launch.limits = { ...doc.launch.limits, tokens: { instances: { coder: { limit, since: SINCE } } } };

packages/bus/tests/limits.test.mjs

@@ -17,14 +17,14 @@ test('limits binds actor from human proof and rejects role, reader, a tester set
  b.request(human,{verb:'limits'});b.request(human,{verb:'limits.set',args:patch});b.request(tester,{verb:'limits'});assert.deepEqual(calls,[['demo','limits',{},'jason'],['demo','limits.set',patch,'jason'],['demo','limits',{},'tester']]);
 });
 test('runtime wires verified human settings to the actual shared file writer and actor receipt',async t=>{
- const {startBroker}=await import('../src/runtime.mjs');const {businessDoc,rolesCopy,systemFor,writeJson}=await import('../../business/tests/helpers.mjs');const {readFileSync}=await import('node:fs');
+ const {startBroker}=await import('../src/runtime.mjs');const {businessDoc,rolesCopy,systemFor,writeJson}=await import('../../organization/tests/helpers.mjs');const {readFileSync}=await import('node:fs');
  const root=mkdtempSync(join(tmpdir(),'mosaic-limits-runtime-')),rolesDir=rolesCopy(root),doc=businessDoc(root,'demo');writeJson(join(root,'businesses/demo.json'),doc);mkdirSync(join(root,'data'),{mode:0o700});
  const bus=await startBroker({dataRoot:join(root,'data'),businesses:{demo:{id:'demo',human:'jason',arbiters:{technical:'coder',delivery:'coder'},roles:{coder:{authority:{withinRole:[],crossRole:[]}}}}},organization:{dir:root,rolesDir,system:systemFor(root)}});
  t.after(async()=>{await bus.close();rmSync(root,{recursive:true,force:true});});const human=bus.broker.bindHuman({business:'demo',human:'jason',via:'cli',outsideAgent:true});
  const view=bus.broker.request(human,{verb:'limits'});const done=bus.broker.request(human,{verb:'limits.set',args:{revision:view.revision,limits:{total:0}}});assert.equal(done.limits.total,0);assert.equal(JSON.parse(readFileSync(join(root,'businesses/demo.json'),'utf8')).launch.limits.total,0);const receipt=JSON.parse(readFileSync(join(root,'businesses/.history/demo/changes.jsonl'),'utf8').trim().split('\n').at(-1));assert.equal(receipt.actor,'jason');assert.equal(receipt.state,'committed');
 });
 test('uncertain organization receipts leave bus startup and reads alone but refuse writes until reconciled',async t=>{
- const {startBroker}=await import('../src/runtime.mjs');const {businessDoc,rolesCopy,systemFor,writeJson}=await import('../../business/tests/helpers.mjs');const {organizationWriter}=await import('../../business/src/organization.mjs');const {readFileSync}=await import('node:fs');
+ const {startBroker}=await import('../src/runtime.mjs');const {businessDoc,rolesCopy,systemFor,writeJson}=await import('../../organization/tests/helpers.mjs');const {organizationWriter}=await import('../../organization/src/organization.mjs');const {readFileSync}=await import('node:fs');
  const root=mkdtempSync(join(tmpdir(),'mosaic-limits-recovery-')),rolesDir=rolesCopy(root),doc=businessDoc(root,'demo'),file=writeJson(join(root,'businesses/demo.json'),doc);mkdirSync(join(root,'data'),{mode:0o700});
  const writer=organizationWriter({dir:root,rolesDir}),original=readFileSync(file,'utf8'),revision=writer.read('demo').revision,next=structuredClone(doc);next.launch.limits.total=7;
  const interrupted=organizationWriter({dir:root,rolesDir,barrier:()=>{throw Error('fixture interruption');}});assert.throws(()=>interrupted.write('demo',next,{revision,actor:'jason'}));const external=structuredClone(doc);external.launch.limits.total=12;writeJson(file,external);const bytes=readFileSync(file,'utf8');

packages/bus/tests/model-catalogue.test.mjs

@@ -0,0 +1,97 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createModelCatalogue } from '../src/model-catalogue.mjs';
+
+test('catalogue caches per business, refreshes on expiry and invalidation, and forces a fresh launch read', async () => {
+  let clock = 1000, calls = 0;
+  const client = {
+    getCredentials: async () => ({ files: [] }),
+    getCredentialModels: async () => ({ models: [] }),
+    getUpstreamGroups: async () => { calls++; return [{ 'base-url': 'https://api.z.ai/api/anthropic', keys: [{}], models: [{ name: 'fixture-id' }] }]; },
+  };
+  const service = createModelCatalogue({ client: () => client, settings: () => ({ 'model-provider': ['cliproxy'] }), now: () => clock });
+  const [first, second] = await Promise.all([service.read('one'), service.read('one')]);
+  assert.equal(calls, 1); assert.deepEqual(first, second);
+  assert.equal(first.models[0].key, 'zai-fixture-id');
+  await service.read('one'); assert.equal(calls, 1);
+  await service.read('two'); assert.equal(calls, 2);
+  await service.read('one', { fresh: true }); assert.equal(calls, 3);
+  clock += 30001; await service.read('one'); assert.equal(calls, 4);
+  service.invalidate(); await service.read('one'); assert.equal(calls, 5);
+});
+
+test('disabled, refused, and failed providers never retain authorization', async () => {
+  let enabled = true, failed = false;
+  const client = { getCredentials: async () => ({ files: [] }), getCredentialModels: async () => ({ models: [] }),
+    getUpstreamGroups: async () => { if (failed) throw Error('fixture secret'); return [{ 'base-url': 'https://api.z.ai/api/anthropic', keys: [{}], models: [{ name: 'fixture-id' }] }]; } };
+  const service = createModelCatalogue({ client: () => client, settings: () => ({ 'model-provider': enabled ? ['cliproxy'] : [] }) });
+  assert.equal((await service.read('one')).models[0].available, true);
+  enabled = false; assert.equal((await service.read('one')).status, 'disabled');
+  enabled = true; failed = true;
+  const out = await service.read('one', { fresh: true });
+  assert.equal(out.status, 'unavailable');
+  assert.ok(out.models.every(m => !m.available));
+  assert.equal(JSON.stringify(out).includes('fixture secret'), false);
+});
+
+test('launch admission refreshes selection and refuses a removed model and incompatible harness', async t => {
+  const { startBroker } = await import('../src/runtime.mjs');
+  const { businessDoc, rolesCopy, systemFor, writeJson } = await import('../../organization/tests/helpers.mjs');
+  const { mkdtempSync, mkdirSync, rmSync } = await import('node:fs');
+  const { tmpdir } = await import('node:os'); const { join } = await import('node:path');
+  const root=mkdtempSync(join(tmpdir(),'model-admission-')); t.after(()=>rmSync(root,{recursive:true,force:true}));
+  const rolesDir=rolesCopy(root), doc=businessDoc(root,'demo'); doc.plugins={...doc.plugins,harness:['pi'],'model-provider':['cliproxy']};
+  doc.launch.models['zai-fixture-id']={provider:'zai',model:'fixture-id',module:'cliproxy',upstream:'zai'};
+  doc.roles.coder.vars={...doc.roles.coder.vars,harness:'pi',model:'zai-fixture-id',thinking:'low'};
+  writeJson(join(root,'businesses/demo.json'),doc); mkdirSync(join(root,'data'),{mode:0o700});
+  let present=true, reads=0;
+  const service={invalidate(){},read:async(_,{fresh})=>{assert.equal(fresh,true);reads++;return {status:'ready',models:present?[{module:'cliproxy',upstream:'zai',model:'fixture-id',available:true,harnesses:['pi']}]:[]};}};
+  const bus=await startBroker({dataRoot:join(root,'data'),businesses:{demo:{id:'demo',human:'jason',arbiters:{technical:'coder',delivery:'coder'},roles:{coder:{authority:{withinRole:[],crossRole:[]}}}}},organization:{dir:root,rolesDir,system:systemFor(root)},modelCatalogue:service});t.after(()=>bus.close());
+  const human=bus.broker.bindHuman({business:'demo',human:'jason',via:'cli',outsideAgent:true});
+  const revision=bus.broker.request(human,{verb:'limits'}).revision;
+  const {checkedTransport}=await import('../../harness/src/bundle.mjs');
+  const entry=doc.launch.models['zai-fixture-id'];
+  const request={business:'demo',instance:'coder',modelKey:'zai-fixture-id',harness:'pi',revision,entry,provider:entry.provider,model:entry.model,account:null,route:'primary',transport:checkedTransport(entry)};
+  assert.deepEqual(await bus.modelAdmission(request),{allow:true});
+  present=false;
+  assert.deepEqual(await bus.modelAdmission(request),{allow:false,code:'model-provider-unavailable'});
+  assert.equal(reads,2);
+});
+test('an account mutation fences reads begun before or during the write', async () => {
+ let release;const gate=new Promise(r=>{release=r;});
+ const client={getCredentials:async()=>({files:[]}),getCredentialModels:async()=>({models:[]}),getUpstreamGroups:async()=>{await gate;return [{'base-url':'https://api.z.ai/api/anthropic',keys:[{}],models:[{name:'fixture-id'}]}];}};
+ const service=createModelCatalogue({client:()=>client,settings:()=>({'model-provider':['cliproxy']})});
+ const read=service.read('one',{fresh:true});service.begin();
+ assert.equal((await service.read('one',{fresh:true})).status,'unavailable');
+ release();assert.equal((await read).status,'unavailable');service.end();
+ assert.equal((await service.read('one',{fresh:true})).status,'ready');
+});
+
+test('a different enabled fixture provider supplies legacy mapping and admission without a core case', async t => {
+ const {startBroker}=await import('../src/runtime.mjs');const {businessDoc,rolesCopy,systemFor,writeJson}=await import('../../organization/tests/helpers.mjs');
+ const {mkdtempSync,mkdirSync,rmSync}=await import('node:fs');const {tmpdir}=await import('node:os');const {join}=await import('node:path');
+ const root=mkdtempSync(join(tmpdir(),'second-provider-'));t.after(()=>rmSync(root,{recursive:true,force:true}));const rolesDir=rolesCopy(root),doc=businessDoc(root,'demo');
+ doc.plugins={...doc.plugins,harness:['pi'],'model-provider':['second-fixture']};doc.launch.models['fixture-legacy']={provider:'fixture',model:'fixture-model'};doc.roles.coder.vars={...doc.roles.coder.vars,harness:'pi',model:'fixture-legacy',thinking:'low'};
+ writeJson(join(root,'businesses/demo.json'),doc);mkdirSync(join(root,'data'),{mode:0o700});
+ const transport={routeId:'fixture',endpoint:'v1',api:'openai-completions',piProvider:'fixture',compat:{thinkingFormat:'openai',zaiToolStream:false}};
+ const module={route:({selection})=>selection.provider==='fixture'?{provider:selection.provider,model:selection.model,upstream:'fixture',...transport}:{code:'unsupported'},preflight:({selection,catalogue})=>({allow:catalogue.models.some(m=>m.upstream===selection.upstream&&m.model===selection.model)})};
+ const makeProviderLoader=()=>({load:async()=>({refused:[]}),snapshot:()=>[{name:'second-fixture',module}]});
+ const offered={key:'fixture-model',module:'second-fixture',upstream:'fixture',provider:'fixture',model:'fixture-model',label:'Fixture',available:true,reason:null,harnesses:['pi']};
+ const modelCatalogue={read:async()=>({status:'ready',models:[offered],notices:[]}),invalidate(){}};
+ const bus=await startBroker({dataRoot:join(root,'data'),businesses:{demo:{id:'demo',human:'jason',arbiters:{technical:'coder',delivery:'coder'},roles:{coder:{authority:{withinRole:[],crossRole:[]}}}}},organization:{dir:root,rolesDir,system:systemFor(root)},modelCatalogue,makeProviderLoader});t.after(()=>bus.close());
+ const human=bus.broker.bindHuman({business:'demo',human:'jason',via:'cli',outsideAgent:true});const view=await bus.broker.request(human,{verb:'routes'});
+ assert.equal(view.catalogue.legacy['fixture-legacy'].module,'second-fixture');
+ const answer=await bus.modelAdmission({business:'demo',instance:'coder',modelKey:'fixture-legacy',harness:'pi',revision:view.revision,entry:doc.launch.models['fixture-legacy'],provider:'fixture',model:'fixture-model',account:null,route:'primary',transport});
+ assert.deepEqual(answer,{allow:true});
+});
+
+test('shared generation invalidates cached catalogues and an uncertain fence makes them unavailable', async () => {
+ let version = 0, uncertain = false, calls = 0;
+ const lock = { generation: () => version, assertCertain: () => { if (uncertain) throw Error('uncertain'); } };
+ const client = { getCredentials: async () => ({ files: [] }), getCredentialModels: async () => ({ models: [] }),
+   getUpstreamGroups: async () => { calls++; return [{ 'base-url': 'https://api.z.ai/api/anthropic', keys: [{}], models: [{ name: 'fixture-id' }] }]; } };
+ const service = createModelCatalogue({ client: () => client, settings: () => ({ 'model-provider': ['cliproxy'] }), proxyLock: lock });
+ assert.equal((await service.read('one')).status, 'ready');
+ version++; assert.equal((await service.read('one')).status, 'ready'); assert.equal(calls, 2);
+ uncertain = true; assert.equal((await service.read('one')).status, 'unavailable');
+});

packages/bus/tests/model-hire-ownership-fixture.mjs

@@ -11,8 +11,8 @@ import { loadSystem, bootConfig } from '../../cli/src/config.mjs';
 import { createLauncher } from '../../cli/src/launcher.mjs';
 import { startBroker } from '../../bus/src/runtime.mjs';
 import { gitEnv } from '../../seat/src/checkout.mjs';
-import { organizationWriter } from '../../business/src/organization.mjs';
-import { writeJson } from '../../business/tests/helpers.mjs';
+import { organizationWriter } from '../../organization/src/organization.mjs';
+import { writeJson } from '../../organization/tests/helpers.mjs';
 import { readSessions, runsDir, sessionsFile, SESSIONS_VERSION, launchLogFile } from '../../seat/src/session.mjs';
 export const waitFor = async (read, message, ms=15000) => { const end=Date.now()+ms;while(Date.now()<end){const value=await read();if(value)return value;await new Promise(r=>setTimeout(r,20));}throw Error(message); };
 export const pause = ms => new Promise(r=>setTimeout(r,ms));

packages/bus/tests/model-historical-ipc.test.mjs

@@ -7,9 +7,9 @@ import { DatabaseSync } from 'node:sqlite';
 import { createHash } from 'node:crypto';
 import { startHost } from '../../cli/src/host.mjs';
 import { createLauncher } from '../../cli/src/launcher.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
-import { busBusiness } from '../src/business.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
 import { sessionsFile, launchLogFile } from '../../seat/src/session.mjs';
 import { reviewFixture } from './model-review-fixtures.mjs';
 const id = key => createHash('sha256').update(key).digest('hex').slice(0, 12);
@@ -42,7 +42,7 @@ async function ipcFixture(t, { down = true, ended = false, live = false } = {})
   for (const instance of Object.keys(business.roles)) resolved[instance] = resolveInstance({ system: f.system, business, instance });
   const logs = [];
   host = await startHost({ business: 'demo', log: line => logs.push(line), boot: {
-    dataRoot: f.dataRoot, readers: ['demo'], businesses: { demo: busBusiness(business, resolved) },
+    dataRoot: f.dataRoot, readers: ['demo'], businesses: { demo: busOrganization(business, resolved) },
     organization: { dir: f.configDir, rolesDir: f.rolesDir, system: f.system },
     proxy: { port: Number(new URL(proxy.baseUrl).port), binary: '/fixture-unused' },
   } });

packages/bus/tests/model-keys.test.mjs

@@ -10,11 +10,11 @@ import { Credentials } from '../src/credentials.mjs';
 import { ManagementClient } from '../../model-proxy/src/client.mjs';
 import { ModelKeys, REVOKE_TIMEOUT_MS, REVOKE_POLL_MS } from '../src/model-keys.mjs';
 import { startBroker } from '../src/runtime.mjs';
-import { busBusiness } from '../src/business.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
 import { Registry } from '../../seat/src/session.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
+import { businessDoc, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
 const hash = s => createHash('sha256').update(s).digest('hex').slice(0, 12);
 const failCode = code => e => e.code === code;
 async function fixture(t, { delayed = 0 } = {}) {
@@ -173,7 +173,7 @@ test('proxy-stop-failed: old proxy key and retiring record survive a failed grac
   stopped = true; await overdue.sweep(); assert.equal(f.state.keys.includes(first.key), false);
 });
 
-async function bootBusiness(f) {
+async function bootBusiness(f, binding = {}) {
   const rolesDir = rolesCopy(f.root), system = systemFor(f.root), doc = businessDoc(f.root, 'demo');
   // Aide is needed because shipped chief hireable:[] and security-reviewer has review.verdict outside HIRE_ALLOWED.
   fs.writeFileSync(join(rolesDir, 'aide.md'), '# Aide\n');
@@ -192,14 +192,14 @@ async function bootBusiness(f) {
   fs.mkdirSync(join(f.root, 'data'), { mode: 0o700 });
   // Fresh mkdtemp fixture + exclusive mkdir above: no prior session registry can exist.
   new Registry(join(f.root, 'data'));
-  const bus = await startBroker({ dataRoot: join(f.root, 'data'), businesses: { demo: busBusiness(business, resolved) },
-    organization: { dir: f.configDir, rolesDir, system }, proxy: { port: Number(new URL(f.baseUrl).port), binary: '/fixture-unused' } });
+  const bus = await startBroker({ dataRoot: join(f.root, 'data'), businesses: { demo: busOrganization(business, resolved) },
+    organization: { dir: f.configDir, rolesDir, system }, proxy: { port: Number(new URL(f.baseUrl).port), binary: '/fixture-unused' }, ...binding });
   f.closers.push(() => bus.close());
   const chief = bus.broker.bindLaunch({ business: 'demo', role: 'chief', run: 'chief-run', harness: 'pi' });
   bus.broker.request(chief, { verb: 'role.claim' });
   const fire = () => bus.broker.request(chief, { verb: 'instance.fire', args: { name: 'sec-1', reason: 'fixture fire' } });
   const listed = () => JSON.parse(fs.readFileSync(file, 'utf8')).launch.instances.includes('sec-1');
-  return { bus, chief, fire, listed, file };
+  return { bus, chief, fire, listed, file, rolesDir, system };
 }
 test('bus fire proves remote 401 before delisting the agent and deleting model file', async t => {
   const f = await fixture(t, { delayed: 105 }); await f.manager.reconcile(); const issued = await f.manager.ensure('demo/sec-1');
@@ -270,3 +270,61 @@ test('thirty-day rotation due automatically replaces and retires an unused old k
   const current = await f.manager.ensure('demo/coder'); assert.equal(current.key === first.key, false);
   assert.equal(f.state.keys.includes(first.key), false); assert.equal(f.state.keys.includes(current.key), true);
 });
+
+test('org registration preserves a running sibling and fences admission on uncertainty', async t => {
+  const f = await fixture(t);
+  const { createProxyLock } = await import('../src/proxy-lock.mjs');
+  const stateDir = join(f.root, 'proxy'); fs.mkdirSync(stateDir, { mode: 0o700 });
+  const lock = createProxyLock({ stateDir, identity: f.baseUrl });
+  const betaRoot = join(f.root, 'beta-secrets'); fs.mkdirSync(betaRoot, { mode: 0o700 });
+  const betaCredentials = new Credentials({ storeRoot: betaRoot, dataRoot: join(f.root, 'beta-data'), modelAgents: ['demo/other'] });
+  t.after(() => betaCredentials.close());
+  const orgManager = (org, credentials) => new ModelKeys({ credentials, client: f.client, configDir: f.configDir,
+    baseUrl: f.baseUrl, org, lock });
+  const alpha = orgManager('alpha', f.credentials), beta = orgManager('beta', betaCredentials);
+  await alpha.reconcile();
+  const first = await alpha.ensure('demo/coder');
+  await beta.reconcile();
+  assert.equal(await f.client.probeKey(first.key), 200);
+  assert.ok(first.key.startsWith(`mso-${hash(f.configDir)}-alpha-`));
+  assert.equal(f.state.keys.filter(k => k.startsWith(`mso-${hash(f.configDir)}-beta-sentinel-`)).length, 1);
+  await beta.reconcile();
+  assert.equal(f.state.keys.filter(k => k.startsWith(`mso-${hash(f.configDir)}-beta-sentinel-`)).length, 1);
+  await lock.run(async () => lock.fence({ org: 'beta', op: 'test' }));
+  assert.throws(() => alpha.assertLaunchable('demo/coder'), failCode('proxy-uncertain'));
+  await assert.rejects(beta.ensure('demo/other'), failCode('proxy-uncertain'));
+});
+
+
+test('synthetic trusted org boot registers an org sentinel and issues an org key', async t => {
+  const f = await fixture(t);
+  fs.mkdirSync(join(f.root, 'proxy'), { mode: 0o700 });
+  const b = await bootBusiness(f, { org: { id: 'demo' }, instanceDataRoot: f.root, instanceConfigDir: f.configDir });
+  const answer = await b.bus.modelPreflight({ business: 'demo', role: 'sec-1' });
+  assert.ok(answer.key.startsWith(`mso-${hash(f.configDir)}-demo-`));
+  assert.equal(f.state.keys.filter(key => key.startsWith(`mso-${hash(f.configDir)}-demo-sentinel-`)).length, 1);
+  const { createProxyLock } = await import('../src/proxy-lock.mjs');
+  const lock = createProxyLock({ stateDir: join(f.root, 'proxy'), identity: `${f.configDir}:${new URL(f.baseUrl).port}` });
+  await lock.run(async () => lock.fence({ org: 'demo', op: 'fixture' }));
+  await assert.rejects(b.bus.modelPreflight({ business: 'demo', role: 'sec-1' }), failCode('proxy-uncertain'));
+});
+
+
+test('beta bus registers while alpha bus runs and alpha key stays accepted', async t => {
+  const f = await fixture(t); fs.mkdirSync(join(f.root, 'proxy'), { mode: 0o700 });
+  const binding = { instanceDataRoot: f.root, instanceConfigDir: f.configDir };
+  const alpha = await bootBusiness(f, { ...binding, org: { id: 'alpha' } });
+  const key = (await alpha.bus.modelPreflight({ business: 'demo', role: 'sec-1' })).key;
+  const doc = businessDoc(f.root, 'beta'); doc.plugins = { ...doc.plugins, harness: ['pi'] };
+  writeJson(join(f.configDir, 'businesses', 'beta.json'), doc);
+  const business = loadBusiness('beta', { dir: f.configDir, rolesDir: alpha.rolesDir }), resolved = {};
+  for (const instance of Object.keys(business.roles)) resolved[instance] = resolveInstance({ system: alpha.system, business, instance });
+  const betaRoot = join(f.root, 'beta-bus'); fs.mkdirSync(betaRoot, { mode: 0o700 }); new Registry(betaRoot);
+  const beta = await startBroker({ dataRoot: betaRoot, businesses: { beta: busOrganization(business, resolved) },
+    organization: { dir: f.configDir, rolesDir: alpha.rolesDir, system: alpha.system },
+    proxy: { port: Number(new URL(f.baseUrl).port), binary: '/fixture-unused' }, ...binding, org: { id: 'beta' } });
+  f.closers.push(() => beta.close());
+  assert.equal(await f.client.probeKey(key), 200);
+  assert.ok(f.state.keys.some(value => value.startsWith(`mso-${hash(f.configDir)}-beta-sentinel-`)));
+  assert.equal((await alpha.bus.modelPreflight({ business: 'demo', role: 'sec-1' })).key, key);
+});

packages/bus/tests/model-orphan-hire.test.mjs

@@ -5,10 +5,10 @@ import assert from 'node:assert/strict';
 import fs from 'node:fs';
 import { join } from 'node:path';
 import { startBroker } from '../src/runtime.mjs';
-import { busBusiness } from '../src/business.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
+import { businessDoc, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
 import { lifecycleFixture } from './model-lifecycle-fixtures.mjs';
 async function hireFixture(t,{revoking=false}={}){
  const f=await lifecycleFixture(t),old=f.create(['demo/orphan']);await old.manager.reconcile();const issued=await old.manager.ensure('demo/orphan');
@@ -22,7 +22,7 @@ async function hireFixture(t,{revoking=false}={}){
  const dataRoot=join(f.root,'data');fs.mkdirSync(dataRoot,{mode:0o700});
  // Capture only value-free runtime proxy receipts; never print a leaked value.
  const log=[],original=process.stderr.write;process.stderr.write=function(chunk,...args){if(String(chunk).startsWith('model-proxy: ')){log.push(String(chunk));const callback=args.find(a=>typeof a==='function');callback?.();return true;}return original.call(this,chunk,...args);};f.own(()=>{process.stderr.write=original;});
- const bus=await startBroker({dataRoot,businesses:{demo:busBusiness(business,resolved)},organization:{dir:f.configDir,rolesDir,system},proxy:{port:Number(new URL(f.baseUrl).port),binary:'/fixture-unused'}});
+ const bus=await startBroker({dataRoot,businesses:{demo:busOrganization(business,resolved)},organization:{dir:f.configDir,rolesDir,system},proxy:{port:Number(new URL(f.baseUrl).port),binary:'/fixture-unused'}});
  f.own(()=>bus.close());
  assert.equal(f.state.keys.includes(issued.key),false,'runtime boot reconciled omitted orphan');assert.equal(bus.credentials.modelRecord('demo/orphan')===null,true,'orphan remains unregistered before hire');
  const cap=bus.broker.bindLaunch({business:'demo',role:'chief',run:'orphan-hire-chief',harness:'pi'});bus.broker.request(cap,{verb:'role.claim'});

packages/bus/tests/model-pending-fixture.mjs

@@ -6,10 +6,10 @@ import { createHash, randomBytes } from 'node:crypto';
 import { join } from 'node:path';
 import { tmpdir } from 'node:os';
 import { startBroker } from '../src/runtime.mjs';
-import { busBusiness } from '../src/business.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
+import { businessDoc, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
 import { sessionsFile, SESSIONS_VERSION } from '../../seat/src/session.mjs';
 const hash = value => createHash('sha256').update(value).digest('hex');
 const deferred = () => {let resolve;const promise=new Promise(r=>{resolve=r;});return {promise,resolve};};
@@ -23,7 +23,7 @@ export async function pendingFixture(t,{twoBusinesses=false}={}){
  const doc=businessDoc(root,'demo');doc.plugins={...doc.plugins,harness:['pi']};
  // Existing row331 scratch aide pattern only; repository role authority unchanged.
  fs.writeFileSync(join(rolesDir,'aide.md'),'# Aide\n');writeJson(join(rolesDir,'aide.json'),{roleVersion:2,name:'aide',title:'Aide',contract:'aide.md',tools:['read'],network:'api-only',authority:{withinRole:['message.send'],crossRole:[]},credentials:[]});const chiefFile=join(rolesDir,'chief-of-staff.json');writeJson(chiefFile,{...JSON.parse(fs.readFileSync(chiefFile,'utf8')),hireable:['aide']});
- const ids=twoBusinesses?['demo','other']:['demo'],files={},businesses={};for(const name of ids){const document={...structuredClone(doc),id:name};files[name]=writeJson(join(configDir,'businesses',name+'.json'),document);const business=loadBusiness(name,{dir:configDir,rolesDir}),resolved={};for(const instance of Object.keys(business.roles))resolved[instance]=resolveInstance({system,business,instance});businesses[name]=busBusiness(business,resolved);}
+ const ids=twoBusinesses?['demo','other']:['demo'],files={},businesses={};for(const name of ids){const document={...structuredClone(doc),id:name};files[name]=writeJson(join(configDir,'businesses',name+'.json'),document);const business=loadBusiness(name,{dir:configDir,rolesDir}),resolved={};for(const instance of Object.keys(business.roles))resolved[instance]=resolveInstance({system,business,instance});businesses[name]=busOrganization(business,resolved);}
  fs.mkdirSync(join(configDir,'secrets'),{recursive:true,mode:0o700});fs.writeFileSync(join(configDir,'secrets','proxy-management.key'),'fx654-manage',{mode:0o600});fs.mkdirSync(join(dataRoot,'bus-host'),{recursive:true,mode:0o700});writeJson(sessionsFile(dataRoot),{sessionsVersion:SESSIONS_VERSION,sessions:[]});
  const sentinel=`msk-${hash(configDir).slice(0,12)}-sentinel-${randomBytes(32).toString('base64url')}`;state.keys.push(sentinel);history.add(sentinel);
  server=http.createServer(async(req,res)=>{try{

packages/bus/tests/model-restart.test.mjs

@@ -13,10 +13,10 @@ import { startBroker } from '../src/runtime.mjs';
 import { Credentials } from '../src/credentials.mjs';
 import { ModelKeys } from '../src/model-keys.mjs';
 import { ManagementClient } from '../../model-proxy/src/client.mjs';
-import { busBusiness } from '../src/business.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
-import { businessDoc, rolesCopy, systemFor, systemConfig, writeJson } from '../../business/tests/helpers.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
+import { businessDoc, rolesCopy, systemFor, systemConfig, writeJson } from '../../organization/tests/helpers.mjs';
 import { startTimeOf } from '../../seat/src/proc.mjs';
 import { Registry, SESSIONS_VERSION, sessionsFile } from '../../seat/src/session.mjs';
 import { createLauncher } from '../../cli/src/launcher.mjs';
@@ -97,7 +97,7 @@ async function fixture(t, { overdue = false, exited = false } = {}) {
   writeSessions([entry]);
   if (exited) await exit();
   const boot = async () => {
-    bus = await startBroker({ dataRoot, businesses: { demo: busBusiness(business, resolved) }, organization: { dir: configDir, rolesDir, system },
+    bus = await startBroker({ dataRoot, businesses: { demo: busOrganization(business, resolved) }, organization: { dir: configDir, rolesDir, system },
       proxy: { port: server.address().port, binary: '/fixture-unused' } });
     return bus;
   };

packages/bus/tests/model-review-fixtures.mjs

@@ -12,10 +12,10 @@ import { startBroker } from '../src/runtime.mjs';
 import { Credentials } from '../src/credentials.mjs';
 import { ModelKeys } from '../src/model-keys.mjs';
 import { ManagementClient } from '../../model-proxy/src/client.mjs';
-import { busBusiness } from '../src/business.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
-import { businessDoc, rolesCopy, systemFor, systemConfig, writeJson } from '../../business/tests/helpers.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
+import { businessDoc, rolesCopy, systemFor, systemConfig, writeJson } from '../../organization/tests/helpers.mjs';
 import { startTimeOf } from '../../seat/src/proc.mjs';
 import { Registry, SESSIONS_VERSION, sessionsFile } from '../../seat/src/session.mjs';
 import { createLauncher } from '../../cli/src/launcher.mjs';
@@ -116,7 +116,7 @@ export async function reviewFixture(t, { overdue = false, exited = false } = {})
   writeSessions([entry]);
   if (exited) await exit();
   const boot = async ({ proxyMode = true } = {}) => {
-    bus = await startBroker({ dataRoot, businesses: { demo: busBusiness(business, resolved) }, organization: { dir: configDir, rolesDir, system },
+    bus = await startBroker({ dataRoot, businesses: { demo: busOrganization(business, resolved) }, organization: { dir: configDir, rolesDir, system },
       proxy: proxyMode ? { port: server.address().port, binary: '/fixture-unused' } : null });
     return bus;
   };

packages/bus/tests/model-revocation-fixture.mjs

@@ -12,11 +12,11 @@ import { Credentials } from '../src/credentials.mjs';
 import { ModelKeys } from '../src/model-keys.mjs';
 import { ManagementClient } from '../../model-proxy/src/client.mjs';
 import { startBroker } from '../src/runtime.mjs';
-import { busBusiness } from '../src/business.mjs';
-import { businessDoc, rolesCopy, systemFor, writeJson } from '../../business/tests/helpers.mjs';
-import { loadBusiness } from '../../business/src/business.mjs';
-import { resolveInstance } from '../../business/src/resolve.mjs';
-import { organizationWriter } from '../../business/src/organization.mjs';
+import { busOrganization } from '../src/organization-context.mjs';
+import { businessDoc, rolesCopy, systemFor, writeJson } from '../../organization/tests/helpers.mjs';
+import { loadBusiness } from '../../organization/src/organization-config.mjs';
+import { resolveInstance } from '../../organization/src/resolve.mjs';
+import { organizationWriter } from '../../organization/src/organization.mjs';
 import { startTimeOf } from '../../seat/src/proc.mjs';
 import { sessionsFile, SESSIONS_VERSION, Registry } from '../../seat/src/session.mjs';
 export const id = value => createHash('sha256').update(value).digest('hex').slice(0,12);
@@ -53,7 +53,7 @@ export async function revocationFixture(t,{runtime=false,onRoot=()=>{},missingBo
   const rolesDir=rolesCopy(root),system=systemFor(root),doc=businessDoc(root,'demo');doc.plugins={...doc.plugins,harness:['pi']};doc.roles.aide={definition:'aide',vars:{harness:'pi',model:'claude-opus-5-5',thinking:'high'}};doc.launch.instances.push('aide');
   fs.writeFileSync(join(rolesDir,'aide.md'),'# Aide\n');writeJson(join(rolesDir,'aide.json'),{roleVersion:2,name:'aide',title:'Aide',contract:'aide.md',tools:['read'],network:'api-only',authority:{withinRole:['message.send'],crossRole:[]},credentials:[]});writeJson(join(configDir,'businesses','demo.json'),doc);
   const business=loadBusiness('demo',{dir:configDir,rolesDir}),resolved={};for(const name of Object.keys(business.roles))resolved[name]=resolveInstance({system,business,instance:name});
-  boot={dataRoot,businesses:{demo:busBusiness(business,resolved)},organization:{dir:configDir,rolesDir,system},proxy:{port,binary:'/fixture-unused'}};writer=organizationWriter({dir:configDir,rolesDir});
+  boot={dataRoot,businesses:{demo:busOrganization(business,resolved)},organization:{dir:configDir,rolesDir,system},proxy:{port,binary:'/fixture-unused'}};writer=organizationWriter({dir:configDir,rolesDir});
   stderr=process.stderr.write;process.stderr.write=function(chunk,...args){if(String(chunk).startsWith('model-proxy: ')){receipts.push(String(chunk));args.find(a=>typeof a==='function')?.();return true;}return stderr.call(this,chunk,...args);};
   const openBus=async()=>{bus=await startBroker(boot);const ownedBus=bus,run='tmp-chief-'+(++busBoots);let closed=false,bound=false;currentBusClose=async()=>{if(closed)return;closed=true;const errors=[];if(bound){try{ownedBus.endLaunch({business:'demo',run,reason:'host-lost',exitCode:null});}catch{errors.push('owned-chief-end');}}try{await ownedBus.close();}catch{errors.push('owned-bus-close');}if(errors.length)throw new AggregateError(errors.map(code=>Error(code)),'owned bus cleanup failed');};closers.push(currentBusClose);c=bus.credentials;chief=bus.broker.bindLaunch({business:'demo',role:'chief',run,harness:'pi'});bound=true;bus.broker.request(chief,{verb:'role.claim'});human=bus.broker.bindHuman({business:'demo',human:'jason',via:'cli',outsideAgent:true});};
   await openBus();boot.openBus=openBus;

packages/bus/tests/name-migration.test.mjs

@@ -65,7 +65,7 @@ test('3f copy migrates to 3g preserving every old column/row, with an empty inst
   assert.throws(() => new Store(root), /schema-mismatch/);
   const store = new Store(root, { migrateSchema: true });
   try {
-    assert.equal(store.get("SELECT value FROM meta WHERE key='schema_version'").value, '3s');
+    assert.equal(store.get("SELECT value FROM meta WHERE key='schema_version'").value, '3u');
     assert.deepEqual({ ...store.get('SELECT to_name FROM messages') }, { to_name: null });
     assert.equal(store.get('SELECT count(*) AS n FROM instance_names').n, 0);
     assert.deepEqual({ ...store.get('SELECT spec_path,spec_commit FROM decisions') }, { spec_path: 'docs/spec.md', spec_commit: 'c'.repeat(40) });

packages/bus/tests/north-star-approval.test.mjs

@@ -0,0 +1,76 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { fixture, git } from './spec-fixtures.mjs';
+import { readSpec } from '../../project/src/index.mjs';
+import { approveNorthStarDraft, isTemplateNorthStar, loadInterviewTemplate, SPEC_PATH } from '../../project/src/onboarding.mjs';
+// F2 (REQ-SETUP-2): the north star through the bus. The assistant proposes with the record.write grant
+// the shipped roles/assistant.json already gives it; only the human's project.file.save writes the spec.
+// The assistant runs under the shipped authority and messaging, so this is the grant the stack runs.
+const shipped = name => JSON.parse(readFileSync(fileURLToPath(new URL(`../../../roles/${name}.json`, import.meta.url)), 'utf8'));
+const within = { authority: { withinRole: ['message.send'], crossRole: [] } };
+const { drafts } = loadInterviewTemplate();
+
+async function setup(t) {
+  const f = await fixture(t, { roles: {
+    pm: { definition: 'pm', ...within }, cto: { definition: 'cto', ...within },
+    assistant: { definition: 'assistant', authority: shipped('assistant').authority },
+  } });
+  f.business.definitions = { assistant: { messaging: shipped('assistant').messaging } };
+  const project = f.call(f.human, 'project.create', { name: 'stack work', repo: 'stack' }).id;
+  const thread = f.call(f.human, 'thread.create', { project, name: 'Onboarding interview', instance: 'assistant' }).id;
+  f.assistant = f.broker.bindLaunch({ business: 'demo', role: 'assistant', run: 'assistant-run', harness: 'pi', thread });
+  f.broker.request(f.assistant, { verb: 'role.claim' });
+  f.notices = () => f.store.all("SELECT to_role, body FROM messages WHERE from_role='_bus' ORDER BY seq");
+  f.approver = {
+    read: args => f.call(f.human, 'project.file', args),
+    save: args => f.call(f.human, 'project.file.save', args),
+  };
+  return f;
+}
+const refusals = f => f.store.all("SELECT body FROM events WHERE kind='action.refused'").map(r => JSON.parse(r.body).code);
+
+test('the assistant cannot write the north star by any verb; it proposes a draft doc instead', async t => {
+  const f = await setup(t);
+  await assert.rejects(f.call(f.assistant, 'record.write', { project: 'stack', path: SPEC_PATH, record: '# Mine\n' }), { code: 'project-spec-human-only' });
+  await assert.rejects(f.call(f.assistant, 'project.file.save', { project: 'stack', path: SPEC_PATH, base: f.commit, content: '# Mine\n' }), { code: 'human-required' });
+  assert.equal(git(f.repo, 'rev-parse', 'HEAD'), f.commit);
+  assert.ok(refusals(f).includes('project-spec-human-only') && refusals(f).includes('human-required'));
+  const draft = await f.call(f.assistant, 'record.write', { project: 'stack', path: drafts.northStar, record: '# North star\n\nOnboard new organizations.\n' });
+  assert.equal(git(f.repo, 'show', '-s', '--format=%an', draft.commit), 'assistant.assistant');
+  // The draft alone changes nothing: the spec is still the template, unconfirmed, and no notice went out.
+  const spec = await f.call(f.human, 'project.file', { project: 'stack', path: SPEC_PATH });
+  assert.equal(spec.commit, f.commit); assert.equal(isTemplateNorthStar(spec.content), true);
+  assert.deepEqual(f.notices(), []);
+});
+
+test('the human approval copies the reviewed draft into the spec as the human, confirms it and notifies pm and cto', async t => {
+  const f = await setup(t);
+  const text = '# North star\n\nOnboard new organizations in one sitting.\n';
+  const draft = await f.call(f.assistant, 'record.write', { project: 'stack', path: drafts.northStar, record: text });
+  const spec = await f.call(f.human, 'project.file', { project: 'stack', path: SPEC_PATH });
+  const done = await approveNorthStarDraft({ ...f.approver, project: 'stack', draft: draft.commit, base: spec.commit, drafts });
+  assert.equal(git(f.repo, 'rev-parse', 'HEAD'), done.commit);
+  assert.equal(git(f.repo, 'show', '-s', '--format=%an|%s', done.commit), 'jason|Edit spec/north-star.md');
+  const after = await readSpec({ business: f.business, project: 'stack', dataRoot: f.root });
+  assert.equal(after.content, text); assert.equal(after.confirmed, true); assert.equal(after.commit, done.commit);
+  const sent = f.notices();
+  assert.deepEqual(sent.map(n => n.to_role).sort(), ['cto', 'pm']);
+  for (const n of sent) assert.ok(n.body.includes(`commit ${done.commit}, from the editor's base ${spec.commit}`));
+});
+
+test('an approval of a draft the assistant rewrote, or over a spec that moved, writes nothing and sends no notice', async t => {
+  const f = await setup(t);
+  const first = await f.call(f.assistant, 'record.write', { project: 'stack', path: drafts.northStar, record: '# First\n' });
+  const spec = await f.call(f.human, 'project.file', { project: 'stack', path: SPEC_PATH });
+  const second = await f.call(f.assistant, 'record.write', { project: 'stack', path: drafts.northStar, record: '# Second\n' });
+  await assert.rejects(approveNorthStarDraft({ ...f.approver, project: 'stack', draft: first.commit, base: spec.commit, drafts }), { code: 'draft-stale' });
+  const moved = await f.call(f.human, 'project.file.save', { project: 'stack', path: SPEC_PATH, base: spec.commit, content: '# Typed by hand\n' });
+  const head = git(f.repo, 'rev-parse', 'HEAD'), notices = f.notices().length;
+  await assert.rejects(approveNorthStarDraft({ ...f.approver, project: 'stack', draft: second.commit, base: spec.commit, drafts }), { code: 'stale-base', stage: 'save' });
+  assert.equal(git(f.repo, 'rev-parse', 'HEAD'), head);
+  assert.equal(f.notices().length, notices);
+  assert.equal(git(f.repo, 'show', `HEAD:${SPEC_PATH}`), '# Typed by hand');
+  assert.equal(moved.commit, head);
+});

packages/bus/tests/org-prd-conflict.test.mjs

@@ -0,0 +1,70 @@
+import test from 'node:test';
+import { DatabaseSync } from 'node:sqlite';
+import assert from 'node:assert/strict';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { startBroker } from '../src/runtime.mjs';
+import { bootConfig, loadSystem } from '../../cli/src/config.mjs';
+import { fixture, tmp } from '../../cli/tests/helpers.mjs';
+import { prdFixture, git } from '../../project/tests/prd-fixture.mjs';
+import { createRequestStore } from '../src/request-store.mjs';
+
+async function setup(t, mode = 'autonomous') {
+  const root = tmp(t, 'activation-'), f = fixture(root, 'demo');
+  const instanceRoot=join(root,'instance');mkdirSync(instanceRoot);
+  const source = join(root, 'project'); mkdirSync(join(source, '.mosaic'), { recursive: true });
+  writeFileSync(join(source, '.mosaic/project.json'), JSON.stringify({ projectVersion: 1, id: 'stack', vars: { 'tracker.project': 1 } }));
+  git(source, 'init', '-qb', 'main'); git(source, 'add', '-A'); git(source, 'commit', '-qm', 'Factory');
+  const system = loadSystem({ env: f.env });
+  const boot = async () => {
+    const config = bootConfig({ system, businessId: 'demo', env: f.env, warn: () => {} });
+    const bus = await startBroker({...config,org:{id:'demo'},instanceDataRoot:instanceRoot,instanceConfigDir:join(root,'config')}); t.after(() => bus.close().catch(() => {})); return bus;
+  };
+  const bus = await boot(), caps = {};
+  const db = new DatabaseSync(join(f.dataRoot, 'bus/bus.sqlite'), { readOnly: true }); t.after(() => db.close());
+  const store = { get: (sql, ...a) => db.prepare(sql).get(...a), all: (sql, ...a) => db.prepare(sql).all(...a) };
+  const bind = b => {
+    caps.human = b.bindHuman({ business: 'demo', human: 'jason', via: 'cli', outsideAgent: true });
+    caps.console = b.bindConsole({ business: 'demo', human: 'jason', subject: { provider: 'test', iss: 'test', sub: 'owner' } });
+    caps.reader = b.bindReader({ business: 'demo' });
+    for (const role of ['pm','cto','coder']) { caps[role] = b.bindLaunch({ business: 'demo', role, run: role + '-run', harness: 'pi' }); b.request(caps[role], { verb: 'role.claim' }); }
+  };
+  bind(bus.broker);
+  const call = (who, verb, args = {}) => bus.broker.request(caps[who], { verb, args });
+  const sent = call('human', 'message.send', { to: 'pm', body: 'Build a timer.\n' });
+  let state = await call('pm', 'request.open', { request: sent.request });
+  state = await call('pm', 'request.propose', { request: sent.request, revision: state.revision, op: 'plan', source_project: 'stack', project: 'timer', name: 'Timer', tracker_project: 2 });
+  call('human', 'decision.resolve', { id: state.selection.decision, choice: mode });
+  state = await bus.requestLifecycle.resume('demo', sent.request);
+  const context = { business: { id: 'demo', human: 'jason', projects: { timer: { root: join(f.dataRoot, 'products/demo/timer/code') } } }, project: 'timer', dataRoot: f.dataRoot };
+  const p = await prdFixture(t, context);
+  const args = { request: sent.request, revision: state.revision, op: 'prd1', prd_version: '1.0', records_commit: p.args.records_commit, prd_path: p.args.prd_path, requirement_ids: p.args.requirement_ids };
+  const submit = () => call('pm', 'prd.submit', args);
+  const approve = (submission, who = mode === 'guided' ? 'human' : 'cto') => call(who, 'decision.resolve', { id: submission.decision.id, choice: 'yes' });
+  const activate = submission => bus.requirementCatalog.activate({ request: sent.request, decision: submission.decision.id });
+  return { ...p, f, bus, caps, call, state, instanceRoot, request: sent.request, args, submit, approve, activate, boot, bind, config: bootConfig({ system, businessId: 'demo', env: f.env, warn: () => {} }), store, journal: createRequestStore(store) };
+}
+
+
+// E2E4 review P2: in an organization runtime the PRD reader resolves records through the same
+// conflict guard as project.files, so records at both roots refuse and neither root changes.
+test('org PRD submit refuses when records exist at both roots', async t => {
+  const f = await setup(t, 'guided');
+  const legacy = join(f.instanceRoot, 'projects/demo/timer');
+  mkdirSync(legacy, { recursive: true }); writeFileSync(join(legacy, 'keep'), 'legacy record evidence');
+  await assert.rejects(f.call('human', 'project.files', { project: 'timer' }), { code: 'project-records-conflict' });
+  const before = git(f.repo, 'rev-parse', 'HEAD');
+  const decisions = f.store.get("SELECT count(*) n FROM decisions").n;
+  await assert.rejects(f.submit(), { code: 'project-records-conflict' });
+  assert.equal(f.store.get("SELECT count(*) n FROM decisions").n, decisions, 'no approval decision is raised');
+  assert.equal(git(f.repo, 'rev-parse', 'HEAD'), before);
+  assert.equal(readFileSync(join(legacy, 'keep'), 'utf8'), 'legacy record evidence');
+});
+
+test('org Console PRD draft refuses when records exist at both roots', async t => {
+  const f = await setup(t, 'guided'); await f.submit();
+  const legacy = join(f.instanceRoot, 'projects/demo/timer');
+  mkdirSync(legacy, { recursive: true }); writeFileSync(join(legacy, 'keep'), 'legacy');
+  await assert.rejects(f.call('console', 'request.draft.console', { request: f.request }), { code: 'project-records-conflict' });
+  assert.equal(readFileSync(join(legacy, 'keep'), 'utf8'), 'legacy');
+});