@gamaze/hicortex 0.20.10 → 0.22.0

package/assets/dashboard.html

@@ -6,20 +6,31 @@
   visual on real endpoints, zero new write paths (Update/Remove ride the
   existing /update + /delete; identity Save rides PUT /identity).
 
+  NAMING (owner ruling 2026-09-14): this surface is "the Hicortex server
+  dashboard" — the word "console" never appears in USER-VISIBLE strings
+  (titles, tooltips, aria-labels, placeholders, toasts, empty states).
+  Historical "console" wording in these comments is internal shorthand and
+  stays.
+
   PORTED FROM mockups/409-r6-flight.html (the design of record — its banner
   documents every behavior; the engine below is that page with the seeded
   data layer replaced by fetches). Live-data substitutions:
-    /dashboard/data?range=90d  — band numbers, snapshot series, digest
+    /dashboard/data?range=Rd   — band numbers, snapshot series, digest
     /dashboard/field           — the whole field (memories + real links)
-    /dashboard/events?days=90  — the replay ledger (real nights)
+    /dashboard/events?days=R   — the replay ledger (real nights)
     /health + /health/detail   — live dot (30 s poll) + model label
     /account + /account/token  — the account menu (harvested from 0.20.4)
     /search /memory /update /delete /identity — the browser + agent rail
+    (R = the range selector's value: 30 by default, 7/90/180 opt-in — #452)
 
   PHASE 2 (#422 — operator surfaces) LANDED:
     - Capture health: real /distill accounting rows (posts · sessions · MB ·
       held per machine × harness) via /dashboard/data capture_health; the
       phase-1 counts-only rows remain as the degrade.
+      Fix round 7 (#409, owner ruling 2026-09-14 — "the normal 30 day as the
+      other cards"): the card's face is the ROLLING window (window_rows,
+      window_days), the newest night rides as a per-row secondary suffix;
+      retention == window (CAPTURE_HEALTH_WINDOW_DAYS).
     - Activity bars: five segments (added + merged + the three graduation
       deltas from snapshot stage_counts; two-segment rendering when buckets
       are absent).
@@ -87,6 +98,28 @@
       within ~2–2.5× (owner: no huge green balls, nothing barely visible);
       stage colors untouched.
 
+  FIX ROUND 6 (owner-approved proto of record mockups/progress-bar.html,
+    2026-09-14 — variant 3 + copy A): ENTRY LOADING SCREEN. Pure inline
+    HTML+CSS at the very top of the body, BEFORE the app markup and the
+    engine script — it paints on URL entry with ZERO script (the real
+    page is black for seconds while the engine parses/boots; the splash
+    must beat that). All motion is opacity/transform only, so the
+    compositor keeps it animating straight through the engine's main-
+    thread freeze. Fully opaque black in BOTH themes (the proto's light
+    "paper twin" was review chrome, not shipped behavior): a breathing
+    green dot above an indeterminate flowing line (two brand-orange
+    segments, uneven pace, looping — never a percentage, never an ETA)
+    under the copy line "Entering the Hicortex fleet brain". The engine
+    only ever fades it away: entrySplashDismiss hooks the boot REVEAL —
+    the existing single handover (data landed → world built → app
+    unhidden), NOT DOMContentLoaded — fades .4s, then removes the node.
+    Failure seams swap the copy line honestly and never loop silently:
+    both core sources rejected → "could not reach the Hicortex server…"
+    (held readable ≥2.8 s); boot() throws → same treatment + the static
+    shell; 30 s without any settlement → "still waiting…" (no dismiss —
+    data may still land). #still removes it synchronously (screenshot
+    contract); reduced motion rests on the bar's static base transform.
+
   FIX ROUND 3 (owner findings on the live console, 2026-09-14):
     - FIELD LINKS (owner: "the white lines … get very thick — they kind of
       overtake most of the image"): settled strokes are hairline-floored and
@@ -104,6 +137,30 @@
       stays marked; the visible word failed to communicate). Vocabulary
       amendment: Low / HEALTHY / Overfetching. Marker + trend stay.
 
+  REPLAY + RANGE (#452, owner directives 2026-09-16):
+    - 30-DAY DEFAULT FOR ALL VIEWS: the replay ledger, the band and the
+      snapshot series all default to 30 days (server EVENTS_DEFAULT_DAYS
+      90 → 30; the client's every fetch is selector-driven). Longer
+      ranges are OPT-IN via a compact 7 / 30 / 90 / 180 segmented control
+      in the replay foot — explicit click only, never auto-loaded
+      (SUPERSEDES the 2026-09-12 no-dropdowns ruling). No persistence:
+      every load starts at 30 (loads fast).
+    - PLAY ONCE, THEN REST: the replay auto-starts as before (~3.6 s after
+      boot), walks the ledger ONCE to today, and STOPS there — no loop
+      (SUPERSEDES the 2026-09-13 auto-loop/no-buttons ruling). Controls in
+      the replay foot, styled like "return to now": pause/resume (holds
+      position mid-cruise; hides once the playback completed — nothing is
+      playing) and "replay again" (appears once completed; restarts from
+      the range start). Drag/scrub behavior is UNCHANGED: a manual take
+      pauses the cruise and re-engages ~12 s after idle, continuing
+      toward today — where it now stops instead of looping.
+    - DATE LABEL ON THE SCRUBBER: the cursor dot carries a small mono
+      label above it (the night being viewed, "now" at the end).
+    - TRUTH-MANAGEMENT CAPTIONS: Superseded / Retracted / Rewritten ride
+      the events ledger alongside learned/enriched/merged (server-side
+      sources in dashboard.ts; superseded/retracted bloom in the fading
+      color — demoted — rewritten in the truth color).
+
   REMAINING DEGRADATIONS (planned, per the #409 phase table — not gaps):
     - Recall card: no raw shown/used counts (the per-memory adoption sums
       are not in any payload yet).
@@ -442,6 +499,22 @@
     padding:2px 11px; white-space:nowrap; width:fit-content;
   }
   #lim-ag .limit-cta:hover{ border-color:var(--amber); }
+  /* #409 fix round 4 — the Model card's configure pill: the mock of record
+     puts it at the card's BOTTOM-RIGHT, grey/muted (the neutral twin of the
+     Agents Connect pill above). margin-top:auto pins it to the card's foot
+     however tall the row stretches — row-2 siblings flex-fill, so
+     align-self:flex-end alone would leave it floating mid-card. The
+     :not([hidden]) guard keeps the degrade (old server / GET failure)
+     working: a plain display rule would override the hidden attribute. All
+     colors ride theme vars — both themes come free. */
+  #model-card .limit-cta:not([hidden]){
+    display:inline-block; align-self:flex-end; margin-top:auto;
+    color:var(--dim); border:1px solid var(--line2);
+    background:color-mix(in srgb, var(--text) 4%, transparent);
+    font-size:10.5px; font-weight:600; border-radius:999px;
+    padding:2px 11px; white-space:nowrap; width:fit-content;
+  }
+  #model-card .limit-cta:not([hidden]):hover{ border-color:var(--dim); color:var(--text); }
 
   /* ---- row-2 operator cards share the .bseg base; .gh is THE card-header
      component (titles + non-numeric descriptors only) ---- */
@@ -517,11 +590,25 @@
     pointer-events:none; transition:opacity 1.4s; z-index:5;
   }
   .hint em{ font-style:normal; color:var(--dim); }
-  /* replay — inside the brain panel; drag-only (no play button anywhere) */
+  /* replay — inside the brain panel; drag to scrub, or let the cruise walk
+     the ledger ONCE to today (#452: range pills + pause / replay again) */
   .replay-foot{ border-top:1px solid var(--line); padding:7px 12px 8px; flex:none; background:color-mix(in srgb, var(--panel) 88%, transparent); }
   #replay{ display:flex; align-items:center; gap:12px; }
   #replay.off{ opacity:.45; pointer-events:none; }
+  /* the range selector stays LIVE even when the instrument is off — a wider
+     window can reveal ≥2 nights and revive the replay (#452) */
+  #replay.off #rp-range{ opacity:1; pointer-events:auto; }
   #rp-label{ font-size:10px; color:var(--faint); text-transform:uppercase; letter-spacing:.14em; white-space:nowrap; flex:none; }
+  /* #452 range selector — the .idpill.seg idiom (mono pills, active = green) */
+  #rp-range{ display:inline-flex; gap:3px; flex:none; }
+  .rp-seg{
+    font-size:9px; font-family:var(--mono); letter-spacing:.05em; color:var(--faint);
+    border:1px solid var(--line2); border-radius:999px; padding:3px 8px; white-space:nowrap;
+    transition:color .15s, border-color .15s;
+  }
+  .rp-seg:hover{ color:var(--dim); }
+  .rp-seg[aria-pressed="true"]{ color:var(--green-mid); border-color:color-mix(in srgb, var(--green) 40%, transparent); }
+  html:not([data-theme="light"]) .rp-seg[aria-pressed="true"]{ box-shadow:0 0 10px rgba(61,255,122,.12); }
   #rp-track{ flex:1; position:relative; height:26px; cursor:pointer; touch-action:none; min-width:60px; }
   #rp-rail{ position:absolute; left:0; right:0; top:11px; height:3px; border-radius:2px; background:var(--tbar-bg); }
   #rp-fill{ position:absolute; left:0; top:11px; height:3px; border-radius:2px; width:100%;
@@ -533,14 +620,23 @@
   }
   html:not([data-theme="light"]) #rp-cursor{ background:#0d1f14; box-shadow:0 0 12px rgba(61,255,122,.7); }
   html[data-theme="light"] #rp-cursor{ box-shadow:0 1px 4px rgba(56,54,42,.3); }
+  /* #452: the night being viewed, floating above the scrub dot (the
+     #rp-dates span styling; overflow is visible — it may overlap the canvas
+     bottom edge like .hint does) */
+  #rp-date{
+    position:absolute; top:-13px; transform:translateX(-50%); white-space:nowrap;
+    font-size:9px; color:var(--faint); font-family:var(--mono); pointer-events:none; z-index:3;
+    display:none;
+  }
+  #rp-date.show{ display:block; }
   .rp-dot{ position:absolute; top:9px; width:5px; height:5px; border-radius:50%; margin-left:-2.5px; background:var(--line2); }
   .rp-dot.g{ background:var(--green-mid); }
   .rp-dot.w{ background:var(--dim); }
   #rp-dates{ position:absolute; left:0; right:0; top:21px; height:12px; }
   #rp-dates span{ position:absolute; transform:translateX(-50%); font-size:9px; color:var(--faint); font-family:var(--mono); }
-  #rp-now{ display:none; font-size:10.5px; color:var(--green-mid); border:1px solid color-mix(in srgb, var(--green) 40%, transparent); border-radius:999px; padding:5px 11px; white-space:nowrap; }
-  #rp-now.show{ display:inline-block; }
-  html:not([data-theme="light"]) #rp-now{ box-shadow:0 0 12px rgba(61,255,122,.15); }
+  #rp-now,#rp-pause,#rp-again{ display:none; font-size:10.5px; color:var(--green-mid); border:1px solid color-mix(in srgb, var(--green) 40%, transparent); border-radius:999px; padding:5px 11px; white-space:nowrap; }
+  #rp-now.show,#rp-pause.show,#rp-again.show{ display:inline-block; }
+  html:not([data-theme="light"]) #rp-now,html:not([data-theme="light"]) #rp-pause,html:not([data-theme="light"]) #rp-again{ box-shadow:0 0 12px rgba(61,255,122,.15); }
 
   /* ---- agents rail — the ONLY thing beside the brain, rightmost ---- */
   #agentscol{
@@ -724,7 +820,7 @@
   /* capture health — phase 2: per machine × harness rows from /distill
      accounting (posts/sessions/MB/held); the phase-1 counts-only rows remain
      as the degrade for old servers / nothing recorded yet */
-  .cap-row2{ display:flex; align-items:center; gap:9px; padding:2.5px 0; border-bottom:1px solid color-mix(in srgb, var(--line) 60%, transparent); }
+  .cap-row2{ display:flex; flex-wrap:wrap; align-items:center; gap:1px 9px; padding:2.5px 0; border-bottom:1px solid color-mix(in srgb, var(--line) 60%, transparent); }
   .cap-row2:last-of-type{ border-bottom:none; }
   .cap-dot{ width:6px; height:6px; border-radius:50%; flex:none; background:var(--green-mid); }
   .cap-row2 .hn{ font:11px var(--mono); color:var(--text); flex:0 0 148px; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
@@ -735,6 +831,12 @@
   .cap-bar .fill{ height:100%; border-radius:2.5px; background:var(--green-mid); }
   .cap-row2 .st{ font-size:10px; color:var(--faint); font-family:var(--mono); white-space:nowrap; }
   .cap-row2 .st b{ color:var(--dim); font-weight:500; }
+  /* fix round 7: the newest-night sub-line on the rolling-window rows — a
+     full-basis child wraps under the row's primary line (the suffix does NOT
+     fit beside "N sess · X MB" without pushing past the card edge); same
+     faint mono tone, theme token only, both themes free. Rows without a
+     newest night stay single-line. */
+  .cap-row2 .cap-ton{ flex-basis:100%; text-align:right; font:10px var(--mono); color:var(--faint); line-height:1.1; }
   .cap-held{ color:var(--amber); margin-left:5px; }
   /* #423 phase 3: the capture-pause badge — the same amber family as the
      held badge (an operator state, not an error) */
@@ -919,6 +1021,7 @@
     .brow{ grid-template-columns:1fr; }
     .mrow .sn{ font-size:10px; }
     #rp-label{ display:none; }
+    #replay{ flex-wrap:wrap; }     /* #452: range pills + controls wrap rather than crush the track */
     #rp-dates span:nth-child(n+3){ display:none; }
     .acct-trigger .who{ display:none; }
     .field-head{ padding:8px 12px 7px; }
@@ -943,6 +1046,62 @@
 </script>
 </head>
 <body class="booting">
+<!-- ============ entry loading screen (#409 fix round 6 — the owner-
+     approved proto of record mockups/progress-bar.html, variant 3 + copy
+     A). Sits at the very top of the body with its OWN style block: it paints
+     on URL entry with ZERO script, fully opaque black in both themes, and
+     the engine only ever fades it away (entrySplashDismiss at the boot
+     reveal). On failure the copy line swaps to an honest error — never an
+     infinite loop. All motion is opacity/transform only: the compositor
+     keeps it animating while the engine below blocks the main thread. ============ -->
+<style>
+  #entry-load{
+    position:fixed; inset:0; z-index:1000; background:#0a0a0a;
+    display:flex; flex-direction:column; align-items:center; justify-content:center; gap:17px;
+    transition:opacity .4s ease;
+  }
+  #entry-load.gone{ opacity:0; pointer-events:none; }
+  /* variant 3's dot: the header healthy mark's look, breathing */
+  #entry-load .el-dot{
+    width:10px; height:10px; border-radius:50%;
+    background:radial-gradient(circle at 35% 35%, color-mix(in srgb, #3dff7a 95%, white), color-mix(in srgb, #3dff7a 25%, transparent) 55%, transparent 70%);
+    box-shadow:0 0 12px color-mix(in srgb, #3dff7a 55%, transparent);
+    animation:el-breathe 3.4s ease-in-out infinite;
+  }
+  @keyframes el-breathe{ 0%,100%{opacity:1} 50%{opacity:.5} }
+  #entry-load .el-line{ font-size:13.5px; color:#9a9a9a; text-align:center; padding:0 24px; }
+  /* the indeterminate line: two brand-orange segments on a faint track,
+     uneven pace, varying length, looping forever; the base transform is
+     the reduced-motion rest pose. Never a percentage, never an ETA. */
+  #entry-load .el-bar{
+    width:min(300px,72%); height:2.5px; border-radius:99px;
+    background:#1e1e1e; overflow:hidden; position:relative;
+  }
+  #entry-load .el-bar i{
+    position:absolute; top:0; bottom:0; left:0; width:100%;
+    background:#ff9f43; border-radius:99px;
+    transform-origin:0 50%; transform:translateX(32%) scaleX(.42);
+    box-shadow:0 0 8px color-mix(in srgb, #ff9f43 45%, transparent);
+  }
+  #entry-load .el-bar i.a{ animation:el-indet-a 2.2s cubic-bezier(.55,.1,.7,.5) infinite backwards; }
+  #entry-load .el-bar i.b{ opacity:.6; animation:el-indet-b 2.2s cubic-bezier(.65,.05,.75,.5) 1.15s infinite backwards; }
+  @keyframes el-indet-a{
+    0%   { transform:translateX(-38%) scaleX(.12); animation-timing-function:cubic-bezier(.6,.05,.8,.5); }
+    55%  { transform:translateX(46%)  scaleX(.62); animation-timing-function:cubic-bezier(.25,.65,.35,1); }
+    80%  { transform:translateX(84%)  scaleX(.68); animation-timing-function:cubic-bezier(.55,.05,.8,.45); }
+    100% { transform:translateX(140%) scaleX(.16); }
+  }
+  @keyframes el-indet-b{
+    0%   { transform:translateX(-24%) scaleX(.08); animation-timing-function:cubic-bezier(.65,.05,.8,.5); }
+    70%  { transform:translateX(52%)  scaleX(.30); animation-timing-function:cubic-bezier(.2,.6,.45,1); }
+    100% { transform:translateX(116%) scaleX(.10); }
+  }
+</style>
+<div id="entry-load" role="status" aria-live="polite">
+  <span class="el-dot" aria-hidden="true"></span>
+  <div class="el-line" id="entry-load-line">Entering the Hicortex fleet brain</div>
+  <div class="el-bar" aria-hidden="true"><i class="a"></i><i class="b"></i></div>
+</div>
 <header>
   <div class="h-left">
     <div class="h-search">
@@ -1045,10 +1204,11 @@
         <div id="feel-rows"></div>
       </div>
       <div class="bseg c-grey" id="model-card">
-        <div class="gh"><span class="t">Model</span><button class="chip" id="model-cfg" hidden title="edit the model knobs (config.json llm* keys)">configure</button></div>
-        <div class="big"><span class="n" id="model-provider">—</span><span class="l" id="model-tail"></span></div>
+        <div class="gh"><span class="t">Model</span></div>
+        <div class="big"><span class="n" id="model-provider">—</span></div>
         <div class="csub mono" id="model-id">&nbsp;</div>
         <div class="csub">detected from config</div>
+        <button class="limit-cta" id="model-cfg" hidden title="edit the model knobs (config.json llm* keys)">configure &#8594;</button>
       </div>
     </div>
   </div>
@@ -1079,13 +1239,17 @@
     </div>
     <div class="replay-foot">
       <div id="replay">
+        <div id="rp-range" role="group" aria-label="range"></div>
         <span id="rp-label">nights</span>
         <div id="rp-track">
           <div id="rp-rail"></div>
           <div id="rp-fill"></div>
           <div id="rp-dates"></div>
           <div id="rp-cursor"></div>
+          <span id="rp-date"></span>
         </div>
+        <button id="rp-pause">pause</button>
+        <button id="rp-again">replay again</button>
         <button id="rp-now">return to now</button>
       </div>
     </div>
@@ -1151,14 +1315,62 @@
 </div>
 <script>
 'use strict';
+/* =====================================================================
+   ENTRY SPLASH (#409 fix round 6) — the loading screen is already painted
+   by the static markup at the top of the body; the engine only ever fades it
+   away. entrySplashDismiss hooks the boot REVEAL (reveal() in boot(): the
+   single handover — data landed, world built, app unhidden — NOT
+   DOMContentLoaded). State rides the node's dataset so both functions stay
+   pure w.r.t. the DOM (extract-and-run test convention). Failure seams
+   swap the copy line honestly and NEVER loop silently: total data failure
+   holds the error line readable >= ENTRY_ERROR_HOLD before fading (even if
+   the reveal fires earlier — and on its own if the reveal never comes); a
+   boot() throw does the same and clears the booting class; a 30 s deadline
+   (below) flags a server that never answered without dismissing — data
+   may still land, and the reveal then owns the dismissal.
+   ===================================================================== */
+const ENTRY_FAIL_COPY='could not reach the Hicortex server — check that it is running, then reload';
+const ENTRY_BOOTFAIL_COPY='the dashboard failed to start — reload to retry';
+const ENTRY_SLOW_COPY='still waiting for the server — it has not answered yet';
+const ENTRY_ERROR_HOLD=2800;   /* ms the failure line stays readable */
+function entrySplashFail(msg){
+  const s=document.getElementById('entry-load'), l=document.getElementById('entry-load-line');
+  if(!s || !l || s.dataset.gone==='1') return;
+  l.textContent=msg;
+  s.dataset.failed='1'; s.dataset.failAt=String(Date.now());
+  setTimeout(entrySplashDismiss, ENTRY_ERROR_HOLD);  /* owns the beat even if the reveal never comes */
+}
+function entrySplashDismiss(){
+  const s=document.getElementById('entry-load');
+  if(!s) return;
+  if(s.dataset.failed==='1'){                        /* hold the error line readable */
+    const remain=ENTRY_ERROR_HOLD-(Date.now()-Number(s.dataset.failAt||0));
+    if(remain>0){ setTimeout(entrySplashDismiss, remain); return; }
+  }
+  if(s.dataset.gone==='1') return;                   /* idempotent */
+  s.dataset.gone='1';
+  const instant=document.body.classList.contains('instant') ||
+    (window.matchMedia && window.matchMedia('(prefers-reduced-motion: reduce)').matches);
+  if(instant){ s.remove(); return; }                 /* #still / reduced motion: no fade */
+  s.classList.add('gone');
+  s.addEventListener('transitionend', function(){ s.remove(); }, {once:true});
+  setTimeout(function(){ s.remove(); }, 900);        /* fallback — transitionend is not guaranteed */
+}
+/* honest slow-wait flag: boot fetches still unsettled 30 s in → say so on
+   the splash (no dismissal — the reveal still owns that if data lands) */
+setTimeout(function(){
+  const s=document.getElementById('entry-load'), l=document.getElementById('entry-load-line');
+  if(s && l && s.dataset.gone!=='1' && s.dataset.failed!=='1') l.textContent=ENTRY_SLOW_COPY;
+}, 30000);
+
 /* #still (or ?still): skip the boot reveal — deterministic screenshots/tests. */
 const STILL = /(?:#|[?&])still\b/.test(location.hash + ' ' + location.search);
-if(STILL){ document.body.classList.remove('booting'); document.body.classList.add('instant'); }
+if(STILL){ document.body.classList.remove('booting'); document.body.classList.add('instant'); entrySplashDismiss(); }
 
 /* =====================================================================
    The approved #409 r6-flight engine, ported to live data. One canvas,
    three verbs (look / travel / time) plus the quiet fourth: WATCH — ambient
-   signals loop slowly along REAL stored links, never behind a play button.
+   signals loop slowly along REAL stored links, always on.
    Stages are DERIVED presentation (server-side via /dashboard/field) over
    the one numeric strength signal — never stored state.
    ===================================================================== */
@@ -1275,9 +1487,12 @@ function bubbleRadius(s){ return 6 + Math.sqrt(clamp(s??0,0,1))*3; }
 function depthSizeDivisor(dz){ return Math.pow(Math.max(.14,dz),0.35); }
 
 /* ---------- live-data state ---------- */
-let D=null;    // /dashboard/data?range=90d
+let RANGE=30;  // days — the range selector's value (#452; 30-day default for
+               // ALL views, owner directive 2026-09-16). NO persistence: every
+               // load starts at 30 — it loads fast; longer is opt-in per click.
+let D=null;    // /dashboard/data?range=RANGE d — band, series, digest
 let F=null;    // /dashboard/field
-let EV=null;   // /dashboard/events?days=90
+let EV=null;   // /dashboard/events?days=RANGE — the replay ledger
 let M=null;    // /dashboard/model (#422) — null on failure: label-only degrade, no configure pill
 let TOTAL=0, removedNow=0;
 /* the store's static LIVE count (headline.live_memories ?? total): the
@@ -1488,13 +1703,19 @@ function buildWorld(){
 
   // the flattened replay ledger (events within a night fire in cruise order);
   // added/merged reuse the staggered born/merge times so blooms and births
-  // coincide; enriched/linked carry their own salted staggers.
+  // coincide; enriched/linked carry their own salted staggers. #452 adds the
+  // truth-management captions — stagger order enriched .55 < retracted .65 <
+  // superseded .70 < rewritten .75 < learned .80 keeps the cruise sane (each
+  // new type gets its own salt, so per-id positions never collide).
   EVENTS = [];
   NIGHTS.forEach((n,i)=>{
     for(const id of n.added)    EVENTS.push({t:bornOf.get(id), type:'learned', id, cap:'Learned — “'+trunc(titleOf(id),52)+'”'});
     for(const id of n.enriched) EVENTS.push({t:i+.55+stag(id,19)*.08, type:'enriched', id, cap:'Enriched — “'+trunc(titleOf(id),52)+'”'});
     for(const mg of n.merged)   EVENTS.push({t:mergeOf.get(mg.loser).t, type:'merged', loser:mg.loser, id:mg.loser, cap:'Merged — “'+trunc(titleOf(mg.loser),40)+'”'});
     for(const lk of n.linked)   EVENTS.push({t:i+.90+stag(lk.a+lk.b,23)*.08, type:'linked', a:lk.a, b:lk.b, cap:null});
+    for(const sp of n.superseded) EVENTS.push({t:i+.70+stag(sp.old,29)*.08, type:'superseded', id:sp.old, cap:'Superseded — “'+trunc(titleOf(sp.old),52)+'”'});
+    for(const rt of n.retracted) EVENTS.push({t:i+.65+stag(rt.old,31)*.08, type:'retracted', id:rt.old, cap:'Retracted — “'+trunc(titleOf(rt.old),52)+'”'});
+    for(const id of n.rewritten) EVENTS.push({t:i+.75+stag(id,37)*.08, type:'rewritten', id, cap:'Rewritten — “'+trunc(titleOf(id),52)+'”'});
   });
   EVENTS.sort((x,y)=>x.t-y.t);
 
@@ -2338,14 +2559,21 @@ function toast(msg, ms){
 function wake(){ lastActivity=performance.now(); }
 
 /* ---------- replay — time travel: drag to take the helm, else the G1
-   auto-cruise walks the REAL event ledger (one memory action at a time,
-   looping; still NO play button — cruising is the ambient default).
+   auto-cruise walks the REAL event ledger (one memory action at a time)
+   ONCE to today, then rests there (#452, owner ruling 2026-09-16 —
+   supersedes the 2026-09-13 auto-loop). Pause/resume + "replay again" sit
+   in the foot beside "return to now"; a manual take still pauses the
+   cruise and re-engages ~12 s after idle, continuing toward today — where
+   it now stops instead of looping.
    With fewer than 2 nights the instrument renders its "now" state and
    disables itself (degrade quietly). ---------- */
 const track=el('rp-track');
 function trackFrac(e){ const r=track.getBoundingClientRect(); return clamp((e.clientX-r.left)/r.width,0,1); }
 let autoPlay=false, autoEvIdx=0, autoNextAt=0, manualUntil=3600, pendingApply=null;
+let paused=false;   /* #452: pause holds the cruise position; resume continues */
+let played=false;   /* #452: a full playback completed → rest at today, never loop */
 function manualTake(){ autoPlay=false; pendingApply=null; manualUntil=performance.now()+12000; wake(); }
+function setPaused(v){ paused=v; el('rp-pause').textContent=paused?'resume':'pause'; }
 /* HERALD — before each cruise step's change, a bright pulse flies in along
    a REAL link touching the target (else from its nearest same-domain
    neighbor) and LANDS: the update we see is the arrival */
@@ -2369,18 +2597,25 @@ function heraldTo(id){
   signals.push({ path:p, i:0, s:0, dur:.45, tail:[], showcase:true, herald:true });   /* dur is seconds */
 }
 function autoTick(now){
-  if(REDUCED||booting||!REPLAY_OK) return;
+  if(REDUCED||booting||!REPLAY_OK||paused) return;
   if(!autoPlay){ if(now>manualUntil && !scrubbing) autoPlay=true; else return; }
   if(pendingApply){
     if(now>=pendingApply.at){ seek(pendingApply.t); pendingApply=null; autoNextAt=now+820; }
     return;                                   /* the herald is in flight */
   }
   if(now<autoNextAt) return;
-  if(T>=NOW_T-.001){           /* a beat at "now", then loop from the start */
+  if(T>=NOW_T-.001){
+    /* a beat at "now": re-kick to the range start ONLY before the first
+       full playback; after it, REST here — plays once, never loops (#452) */
+    if(played){ autoPlay=false; autoNextAt=now+3200; return; }
     autoEvIdx=0; autoNextAt=now+3200; seek(.001); return;
   }
   while(autoEvIdx<EVENTS.length && EVENTS[autoEvIdx].t<=T+.0001) autoEvIdx++;
-  if(autoEvIdx>=EVENTS.length){ autoNextAt=now+3200; seek(WINDOW); return; }
+  if(autoEvIdx>=EVENTS.length){
+    /* ledger exhausted: arrive at today and complete the playback (the
+       flags go BEFORE the seek so onTChanged's control swap sees them) */
+    autoNextAt=now+3200; played=true; autoPlay=false; seek(WINDOW); return;
+  }
   const ev=EVENTS[autoEvIdx++];
   if(ev.id && signals.length<8){ heraldTo(ev.id); pendingApply={t:ev.t+.001, at:now+430}; }
   else { seek(ev.t+.001); autoNextAt=now+820; }
@@ -2401,7 +2636,10 @@ function onTChanged(fromSeek){
       const b=mems.get(ev.id);
       if(!b||!aliveAt(b,ev.t)||b._sx===undefined) continue;
       if(blooms.length>=6) break;
-      const rgb= ev.type==='merged'? PAL.stages.fading.rgb : (ev.type==='learned'? PAL.stages.forming.rgb : PAL.stages.truth.rgb);
+      /* #452: superseded/retracted bloom in the FADING color (demoted
+         claims); rewritten falls to the default truth color (a rewrite is
+         the claim surviving, corrected) */
+      const rgb= ev.type==='merged'||ev.type==='superseded'||ev.type==='retracted'? PAL.stages.fading.rgb : (ev.type==='learned'? PAL.stages.forming.rgb : PAL.stages.truth.rgb);
       blooms.push({x:b._sx,y:b._sy,r0:2,r1:24+b._sr,t0:performance.now(),dur:1400,cap:ev.cap,rgb});
     }
   }
@@ -2410,6 +2648,18 @@ function onTChanged(fromSeek){
   el('rp-cursor').style.left=(T/WINDOW*100)+'%';
   const isNow=T>=NOW_T-.001;
   el('rp-now').classList.toggle('show',!isNow&&REPLAY_OK);
+  /* #452 date label above the scrub dot — same left % as the cursor, the
+     night being viewed ("now" at the end); hidden when there is no ledger */
+  const dlab=el('rp-date');
+  if(REPLAY_OK&&NIGHTS.length){
+    dlab.style.left=(T/WINDOW*100)+'%';
+    dlab.textContent=isNow?'now':fmtDay(NIGHTS[Math.min(Math.floor(T),NIGHTS.length-1)].date);
+    dlab.classList.add('show');
+  }else dlab.classList.remove('show');
+  /* #452 lifecycle pills: pause while a playback is live, "replay again"
+     once it completed — at most ONE of them beside "return to now" */
+  el('rp-pause').classList.toggle('show',REPLAY_OK&&!played);
+  el('rp-again').classList.toggle('show',REPLAY_OK&&played);
   updateMeasures();
   /* #422 owner ruling: the overview counter is STATIC (the store's live
      count, set once at boot + after writes) — scrubbing the replay no longer
@@ -2417,10 +2667,13 @@ function onTChanged(fromSeek){
   dirty=true;
 }
 /* warp-to-now — accelerates through every remaining event, blooms firing,
-   and arrives ~2.4 s later (ease in-out) */
+   and arrives ~2.4 s later (ease in-out). #452: arriving at now by hand
+   completes the playback too — the cruise rests instead of looping after */
 let warpUntil=0, warpFrom=0;
 function warpToNow(){
   manualTake();
+  setPaused(false);
+  played=true;
   if(REDUCED||T>=NOW_T-.001||!REPLAY_OK){ seek(WINDOW); return; }
   warpFrom=T; warpUntil=performance.now()+2400;
 }
@@ -2433,6 +2686,72 @@ function warpTick(now){
 }
 el('rp-now').onclick=warpToNow;
 
+/* #452 — pause/resume + replay again. Pause holds the cruise position
+   (autoTick returns early, pending heralds included); resume continues
+   toward today. Replay again restarts from the range start and plays once.
+   Visibility is onTChanged's job: pause renders only while a playback is
+   live, "replay again" only once one completed — least clutter. */
+el('rp-pause').onclick=()=>{
+  setPaused(!paused);
+  if(!paused) autoPlay=true;   /* resume continues the cruise immediately */
+  wake();
+};
+el('rp-again').onclick=()=>{
+  manualTake(); setPaused(false);
+  played=false; autoEvIdx=0; pendingApply=null; autoPlay=true;
+  seek(.001); wake();
+};
+
+/* #452 — the range selector: 7/30/90/180 days (the owner-fixed option
+   set), default 30, NO persistence — every load starts at 30 (loads fast).
+   A click refetches BOTH range-scoped sources and rebuilds the world
+   exactly like boot — the agents rail included (its "last night" line
+   reads NIGHTS, so it must follow the new window); the replay then
+   auto-starts on the new range via the idle re-engage (mirrors boot).
+   Fail-soft: a failed fetch toasts, keeps the OLD data and the OLD pills
+   — never a half-switched view. One switch at a time (refreshAfterWrite's
+   refreshInFlight pattern): a click while a switch is in flight is
+   IGNORED — a racing second fetch could resolve out of order and leave
+   pills and data disagreeing. */
+const RANGE_OPTIONS=[7,30,90,180];
+function renderRangePills(){
+  const host=el('rp-range'); host.innerHTML='';
+  for(const n of RANGE_OPTIONS){
+    const b=document.createElement('button');
+    b.type='button'; b.className='rp-seg'; b.textContent=n+'d';
+    b.title='last '+n+' days';
+    b.setAttribute('aria-pressed', String(n===RANGE));
+    b.onclick=()=>{ if(n!==RANGE) switchRange(n); };
+    host.appendChild(b);
+  }
+}
+let rangeSwitchInFlight=false;
+async function switchRange(n){
+  if(rangeSwitchInFlight) return; rangeSwitchInFlight=true;
+  const prev=RANGE; RANGE=n; renderRangePills();
+  try{
+    const [dd,ee]=await Promise.all([
+      api('/dashboard/data?range='+RANGE+'d'),
+      api('/dashboard/events?days='+RANGE),
+    ]);
+    D=dd;
+    if(ee&&Array.isArray(ee.nights)){ EV=ee; NIGHTS=EV.nights; } else { NIGHTS=[]; }
+  }catch(e){
+    RANGE=prev; renderRangePills();
+    toast('Range switch failed: '+e.message);
+    return;
+  }finally{
+    rangeSwitchInFlight=false;
+  }
+  buildWorld(); buildPaths(); buildTimeline(); renderBand(); buildRoll(); buildCapture(); buildAgents();
+  /* reset the replay over the new window (boot's pattern): rest at "now"
+     first, the idle re-engage then walks the new range once from the start */
+  T=WINDOW; lastT=WINDOW; played=false; autoEvIdx=0; pendingApply=null; autoPlay=false;
+  setPaused(false);
+  onTChanged(true);
+}
+renderRangePills();
+
 /* the timeline: dots per night (green when busy adding, grey when the
    night merged ≥3 — the prototype's thresholds), date labels at the ends */
 function buildTimeline(){
@@ -2445,6 +2764,7 @@ function buildTimeline(){
   dots.style.cssText='position:absolute;inset:0;pointer-events:none;';
   if(REPLAY_OK){
     label.textContent=NIGHTS.length+' nights';
+    el('replay').classList.remove('off');   /* a range switch can revive the instrument (#452) */
     const s1=document.createElement('span'); s1.style.left='0%'; s1.style.transform='none';
     s1.textContent=fmtDay(NIGHTS[0].date); dates.appendChild(s1);
     const s2=document.createElement('span'); s2.style.left='100%'; s2.style.transform='translateX(-100%)';
@@ -2454,7 +2774,10 @@ function buildTimeline(){
       d.style.left=((i+.5)/WINDOW*100)+'%';
       if(mergedL[i]>=3) d.classList.add('w');
       else if(learnedL[i]>=8) d.classList.add('g');
-      d.title=fmtDay(n.date)+' — learned '+(learnedL[i]||0)+(enrichedL[i]?' · enriched '+enrichedL[i]:'')+(mergedL[i]?' · merged '+mergedL[i]:'');
+      d.title=fmtDay(n.date)+' — learned '+(learnedL[i]||0)+(enrichedL[i]?' · enriched '+enrichedL[i]:'')+(mergedL[i]?' · merged '+mergedL[i]:'')
+        +(n.superseded.length?' · superseded '+n.superseded.length:'')
+        +(n.retracted.length?' · retracted '+n.retracted.length:'')
+        +(n.rewritten.length?' · rewritten '+n.rewritten.length:'');
       frag.appendChild(d);
     });
   }else{
@@ -2904,26 +3227,49 @@ function renderRecBand(ups){
 }
 
 let MODEL_LABEL='';
+/* #409 fix round 5 — owner ruling 2026-09-14 (verbatim): "I do NOT want to
+   know what it is compatible with, I want to know the fucking model." The
+   card face shows THE MODEL, nothing else: hero = the namespace-stripped
+   model name (fit-scaled, floor 20px), mono line = the raw config id,
+   caption "detected from config", configure pill. NO protocol line, NO
+   provider line — local and cloud endpoints render identically. (The
+   configure modal keeps its technical fields: that is the operator surface.)
+   The degrade fires ONLY when there is no model AT ALL — neither the config
+   echo (M.model) nor the runtime label (/health/detail) carries one. A
+   configured model with null provider/backend still renders: the daemon may
+   legitimately run no LLM (resolveExplicitLlmConfig requires llmApiKey
+   alongside llmBaseUrl; a keyless local endpoint is recall-only) while the
+   config declares the model — the card keys on the MODEL, not the runtime. */
 function renderModelCard(){
   /* configure pill only when GET /dashboard/model succeeded (M truthy) —
      an old server / load error degrades to the phase-1 label-only card */
   el('model-cfg').hidden=!M;
-  if(!MODEL_LABEL||MODEL_LABEL==='not configured'){
+  const hero=el('model-provider');
+  hero.style.fontSize='';   // undo a previous hero fit (below)
+  /* The config echo is the display truth (the RAW config id, never a
+     provider-prefixed composition); the runtime label is only the fallback
+     for pre-#422 servers without /dashboard/model. */
+  const raw=(M&&M.model)||(MODEL_LABEL&&MODEL_LABEL!=='not configured'?MODEL_LABEL:'');
+  if(!raw){
     /* #409 fix round — the no-LLM state says so ON THE FACE (a muted hint),
        not a bare dash: correct degraded state, self-explanatory rendering */
-    el('model-provider').textContent='no model configured';
-    el('model-provider').classList.add('noconf');
-    el('model-tail').textContent='';
+    hero.textContent='no model configured';
+    hero.classList.add('noconf');
     el('model-id').textContent='';
     return;
   }
-  el('model-provider').classList.remove('noconf');
-  const slash=MODEL_LABEL.indexOf('/');
-  const provider=slash>0?MODEL_LABEL.slice(0,slash):MODEL_LABEL;
-  const model=slash>0?MODEL_LABEL.slice(slash+1):'';
-  el('model-provider').textContent=provider;
-  el('model-tail').textContent=model?trunc(model,18):'';
-  el('model-id').textContent=MODEL_LABEL;
+  hero.classList.remove('noconf');
+  const ns=raw.lastIndexOf('/');
+  hero.textContent=ns>=0?raw.slice(ns+1):raw;   // the model name = hero
+  /* Long ids are the norm (mlx-community/Qwen3.8-27B-4bit et al); the hero
+     NEVER clips — it scales down to the slot (floor 20px) while the full id
+     rides the mono line. One pass is exact: text width is linear in
+     font-size. */
+  if(hero.scrollWidth>hero.clientWidth){
+    const fs=parseFloat(getComputedStyle(hero).fontSize);
+    hero.style.fontSize=Math.max(20,Math.floor(fs*hero.clientWidth/hero.scrollWidth))+'px';
+  }
+  el('model-id').textContent=raw;
 }
 
 /* ---------- model settings modal (#422 phase 2) — the configure pill's
@@ -3059,7 +3405,14 @@ function buildRoll(){
 
 /* ---------- capture health — phase 2: per machine × harness rows from the
      /dashboard/data capture_health accounting; the counts-only rows remain
-     the degrade for old servers / nothing recorded yet ---------- */
+     the degrade for old servers / nothing recorded yet.
+     Fix round 7 (owner ruling 2026-09-14 — "the normal 30 day as the other
+     cards"): the card's face is the ROLLING window (capture_health
+     window_rows, summed over the last window_days calendar days); the newest
+     night rides as a per-row secondary suffix ("tonight: N sess" / the
+     night's date when it is not today). Degradation ladder: pre-round-7
+     server (no window_rows) → the newest-night view below; no activity rows
+     at all → the counts-only rows. ---------- */
 /* ---------- machine × harness grouping (#424 review fixes 4+5 + the owner's
    model-B direction): source_agent is "harness/profile" and each context may
    carry a source_machine stamp (migration v15+). The rows a stats card and
@@ -3171,6 +3524,72 @@ function buildCapture(){
   host.innerHTML='';
   const sub=el('cap-sub');
   const ch=D&&D.capture_health?D.capture_health:null;
+  /* fix round 7: the rolling-window view — the card shows the normal 30 day
+     like the band's other cards. window_rows is ABSENT on a pre-round-7
+     server (and empty when nothing is recorded) → fall through to the
+     newest-night view / counts degrade below. */
+  if(ch&&Array.isArray(ch.window_rows)&&ch.window_rows.length){
+    const wd=ch.window_days||30;
+    if(sub) sub.textContent='last '+wd+' days';
+    /* group the window's machine × agent rows into machine × harness
+       bundles — same grouping as every other card surface */
+    const groups=new Map();
+    for(const r of ch.window_rows){
+      const agent=String(r.agent||'unknown');
+      const harness=agent.split('/')[0]||agent;
+      const key=(r.machine||'')+'|'+harness;
+      let g=groups.get(key);
+      if(!g){ g={machine:r.machine||null, harness, posts:0, sessions:0, bytes:0, held:0, retried:0, agents:[]}; groups.set(key,g); }
+      g.posts+=r.posts||0; g.sessions+=r.sessions||0; g.bytes+=r.bytes||0;
+      g.held+=r.held||0; g.retried+=r.retried||0;
+      g.agents.push(agent+' — '+r.posts+' post'+(r.posts===1?'':'s')+' · '+r.sessions+' sess · '+mbFmt(r.bytes||0)
+        +(r.held?' · '+r.held+' held':'')+(r.retried?' · '+r.retried+' retried':''));
+    }
+    /* newest-night secondary: per-bundle sessions + held off capture_health
+       rows (the newest day with rows). held keys the badge — a held post is
+       actionable NOW (the client retries it next run); the window's own
+       held/retried live in the row tooltip. */
+    const night=new Map();
+    if(ch.day&&Array.isArray(ch.rows)) for(const r of ch.rows){
+      const agent=String(r.agent||'unknown');
+      const harness=agent.split('/')[0]||agent;
+      const key=(r.machine||'')+'|'+harness;
+      const prev=night.get(key)||{sessions:0,held:0};
+      prev.sessions+=r.sessions||0; prev.held+=r.held||0;
+      night.set(key,prev);
+    }
+    const today=new Date().toISOString().slice(0,10);
+    const nightLabel=ch.day===today?'tonight':fmtDay(ch.day);
+    const gs2=[...groups.values()].sort((a,b)=>b.bytes-a.bytes);
+    const maxB=gs2[0].bytes;
+    const pausedKeys=fleetPausesByKey();
+    for(const g of gs2){
+      const n=night.get((g.machine||'')+'|'+g.harness);
+      const row=document.createElement('div');
+      row.className='cap-row2';
+      const label=g.machine?g.machine+' · '+g.harness:g.harness;
+      const paused=pausedKeys.has((g.machine||'')+'|'+g.harness);
+      row.title=label+' — last '+wd+' days: '+fmt(g.sessions)+' sessions · '+mbFmt(g.bytes)+' posted'
+        +(g.held>0?' · '+g.held+' held in window':'')
+        +(g.retried>0?' · '+g.retried+' retried in window':'')
+        +(n?' · '+nightLabel+': '+n.sessions+' sess'+(n.held>0?' ('+n.held+' held)':''):'')
+        +(paused?' · CAPTURE PAUSED (posts are skipped — sessions are not backfilled)':'')
+        +':\n'+g.agents.join('\n');
+      row.innerHTML='<span class="cap-dot"></span>'+
+        '<span class="hn" title="'+esc(label)+'">'+esc(label)+'</span>'+
+        '<span class="cap-bar"><span class="fill" style="width:'+(g.bytes/Math.max(maxB,1)*100)+'%"></span></span>'+
+        '<span class="st"><b>'+fmt(g.sessions)+'</b> sess · '+mbFmt(g.bytes)
+        +(paused?'<span class="cap-paused" title="capture paused — posts are skipped (200) and sessions are not backfilled">PAUSED</span>':'')
+        +(n&&n.held>0?'<span class="cap-held" title="'+nightLabel+' — failed posts the client will retry — cursor held">&#9888; '+n.held+' held</span>':'')
+        +'</span>'
+        /* the newest-night sub-line — a full-basis flex child, so it wraps
+           UNDER the primary line (the suffix never fits beside it; see the
+           .cap-ton rule) and only exists for bundles with newest-night rows */
+        +(n?'<span class="cap-ton" title="newest capture night ('+nightLabel+') — '+n.sessions+' session'+(n.sessions===1?'':'s')+' posted that night">'+nightLabel+': '+n.sessions+' sess</span>':'');
+      host.appendChild(row);
+    }
+    return;
+  }
   if(ch&&Array.isArray(ch.rows)&&ch.rows.length){
     /* phase-2 live view: the /distill accounting rows, grouped machine ×
        harness — width encodes capture volume (each bundle's byte share of
@@ -3249,7 +3668,9 @@ function buildCapture(){
 function lastNightByAgent(){
   for(let i=NIGHTS.length-1;i>=0;i--){
     const n=NIGHTS[i];
-    if(n.added.length+n.enriched.length+n.merged.length+n.linked.length>0) return {date:n.date,by:n.by_agent};
+    /* #452: the truth-management events count too — a superseded-only night
+       is a real night */
+    if(n.added.length+n.enriched.length+n.merged.length+n.linked.length+n.superseded.length+n.retracted.length+n.rewritten.length>0) return {date:n.date,by:n.by_agent};
   }
   return null;
 }
@@ -3487,7 +3908,7 @@ function buildAgents(){
  *  counts — the paused state and dots re-derive from the fresh payload. */
 async function refreshFleet(){
   try{
-    const dd=await api('/dashboard/data?range=90d');
+    const dd=await api('/dashboard/data?range='+RANGE+'d');
     D=dd;
     buildAgents();
     buildCapture();
@@ -3868,7 +4289,7 @@ let refreshInFlight=false;
 async function refreshAfterWrite(){
   if(refreshInFlight) return; refreshInFlight=true;
   try{
-    const [ff,dd]=await Promise.all([api('/dashboard/field'),api('/dashboard/data?range=90d').catch(()=>null)]);
+    const [ff,dd]=await Promise.all([api('/dashboard/field'),api('/dashboard/data?range='+RANGE+'d').catch(()=>null)]);
     if(ff){ F=ff; buildWorld(); }
     if(dd){ D=dd; }
     renderBand(); buildRoll(); buildCapture(); renderLegend(); renderFeel();
@@ -4179,9 +4600,9 @@ async function pollHealth(){
    ===================================================================== */
 async function boot(){
   const [dd,ff,ee,hh,hd,mm]=await Promise.allSettled([
-    api('/dashboard/data?range=90d'),
+    api('/dashboard/data?range='+RANGE+'d'),
     api('/dashboard/field'),
-    api('/dashboard/events?days=90'),
+    api('/dashboard/events?days='+RANGE),
     fetch('/health'),
     api('/health/detail'),
     api('/dashboard/model'),
@@ -4194,6 +4615,12 @@ async function boot(){
   if(hd.status==='fulfilled'&&hd.value&&typeof hd.value.llm==='string') MODEL_LABEL=hd.value.llm;
   else if(hd.status==='fulfilled'&&hd.value&&hd.value.model) MODEL_LABEL=String(hd.value.model);
   if(hh.status==='fulfilled'&&hh.value&&hh.value.status) { /* health body shape varies; the poll handles the dot */ }
+  /* entry splash (#409 fix round 6): BOTH core sources rejected = total
+     failure — swap the splash line to the honest error (the dismissal holds
+     it readable, then fades into this degraded page, whose own error
+     surfaces — the toast above, the unreachable dot — carry the detail). */
+  if(dd.status==='rejected' && ff.status==='rejected')
+    entrySplashFail(ENTRY_FAIL_COPY);
 
   buildWorld();          // no-op when F failed — the empty field still renders
   buildPaths();
@@ -4219,13 +4646,21 @@ async function boot(){
   loadAccount();
   pollHealth();
 
-  const reveal=()=>{ booting=false; document.body.classList.remove('booting'); dirty=true; };
+  const reveal=()=>{ booting=false; document.body.classList.remove('booting'); dirty=true; entrySplashDismiss(); };
   if(REDUCED||STILL) reveal();
   else setTimeout(reveal, 1400);
   setTimeout(()=>{ const h=el('hint'); if(h) h.style.opacity='0'; }, 9500);
   setTimeout(()=>{ if(!REDUCED&&!STILL){ spawnSignal(true); nextSpawnAt=performance.now()+4200; } }, (REDUCED||STILL)?0:2650);
 }
-boot();
+boot().catch(err=>{
+  /* a thrown boot must never leave the splash looping: honest line on the
+     splash, the static shell visible after the readable hold, toast per the
+     page's error pattern (the catch mirrors reveal minus the redraw). */
+  try{ console.error('dashboard boot failed', err); }catch(e2){}
+  booting=false; document.body.classList.remove('booting');
+  toast('Boot failed — '+(err && err.message ? err.message : 'unknown error'));
+  entrySplashFail(ENTRY_BOOTFAIL_COPY);
+});
 rafId=requestAnimationFrame(frame);
 resize();
 draw(performance.now(),16); /* one synchronous paint — the field exists before the first rAF */