@homie-rocks/studio 0.14.4 → 0.16.0

package/worker/room.mjs

@@ -16,10 +16,63 @@
  *            allocated or the host changes, plus the latest checkpoint/round/
  *            roster/state at most every 30 s. That is what lets a Worker deploy
  *            (which evicts every Durable Object) keep seats, bodies and round.
+ *
+ * WATCHERS (revision 5, NETPLAY.md section 16): a screen that came to watch
+ * (`hello.watch`, or a socket the Worker opened through a game's watch door,
+ * `conn.watch`) never takes a seat, hosts only when no player can, and is told
+ * whether it may follow one player's view (`welcome.watch`, then `watch` frames).
+ *
+ * SERVERS AND AGENT SEATS (revision 6, NETPLAY.md section 17): the Worker hands
+ * every socket the room's policy (`setPolicy`) and, for an AI with a verified
+ * pass, its facts (`conn.agent`). The relay keeps the seats a hybrid server
+ * reserves for AI, names every agent "<label> · AI", rewrites the host's roster
+ * and results so they cannot hide an AI, filters speech, runs the party's vote on
+ * the skill dial, and closes agents that are left alone with no person seated.
  * =============================================================================
  */
+import { aiName, skillPreset, stripAi } from './agents.mjs';
 
 export const NET_VERSION = 1;
+/** The contract revision this relay speaks (NETPLAY.md): optional fields, frames and refusals; the wire stays `v: 1`. */
+export const NET_REVISION = 6;
+const POLICY_KINDS = ['open', 'humans-only', 'hybrid', 'beginner'];
+/**
+ * A room's policy before the Worker says anything (and the public server's with nothing set): today's behaviour.
+ * NETPLAY.md section 17: `server` null is a named room; `aiSeats + guides` seats are kept for AI (the top seats).
+ */
+export const DEFAULT_POLICY = Object.freeze({ v: 1, at: 0, server: null, kind: 'open', aiSeats: 0, guides: 0, bots: 'fill', level: 3, levelMax: 5, speech: 'game', kids: false, brain: 'script' });
+/** An agent's speech: at most one line every 4 s and 8 a minute (the relay drops the rest and counts them). */
+export const AGENT_SPEECH = Object.freeze({ gapMs: 4000, perMinute: 8 });
+/** The party's vote on the dial: open 15 s (or until every seated person voted); one opened by a player per 2 min. */
+export const VOTE = Object.freeze({ ms: 15_000, cooldownMs: 120_000, autoMs: 30 * 60_000 });
+/** Agents left with no person seated for this long are closed (`agents-alone`): an AI never keeps a room alive. */
+export const AGENTS_ALONE_MS = 60_000;
+const CAPS = ['skill', 'agents'];
+
+/** A policy as the relay keeps it: every field checked (the Worker composed it, but a bad one must not break a room). */
+export function normalizePolicy(p) {
+  if (!p || typeof p !== 'object') return null;
+  const int = (v, lo, hi, d) => { const n = Math.floor(Number(v)); return Number.isFinite(n) ? Math.max(lo, Math.min(hi, n)) : d; };
+  const kind = POLICY_KINDS.includes(p.kind) ? p.kind : 'open';
+  const kids = p.kids === true;
+  const levelMax = int(p.levelMax, 1, kids ? 3 : 5, kids ? 3 : 5);
+  const server = p.server && typeof p.server === 'object' && /^[a-z0-9][a-z0-9-]{0,19}$/.test(String(p.server.id ?? ''))
+    ? { id: String(p.server.id), name: String(p.server.name ?? p.server.id).replace(/[\u0000-\u001f\u007f]+/g, ' ').slice(0, 40) } : null;
+  const reserveOk = kind === 'hybrid' || kind === 'beginner';
+  return {
+    v: 1, at: Math.max(0, Number(p.at) || 0), server, kind,
+    aiSeats: reserveOk ? int(p.aiSeats, 0, 31, 0) : 0, guides: kind === 'beginner' ? int(p.guides, 0, 31, 0) : 0,
+    bots: p.bots === 'off' ? 'off' : 'fill', level: Math.min(levelMax, int(p.level, 1, 5, 3)), levelMax,
+    speech: ['game', 'lines', 'off'].includes(p.speech) ? p.speech : 'game', kids,
+    brain: kind === 'humans-only' ? 'off' : ['off', 'script', 'workers-ai', 'owner-key'].includes(p.brain) ? p.brain : 'script',
+  };
+}
+const policySig = (p) => JSON.stringify({ ...p, at: 0 });
+/** The lower middle of the votes (DESIGN D8: a tie is settled kindly), or null with none. */
+export function medianVote(list) {
+  const v = [...list].filter(Number.isFinite).sort((a, b) => a - b);
+  return v.length ? v[Math.floor((v.length - 1) / 2)] : null;
+}
 const PALETTE_SIZE = 12;
 const DEVICE_RANK = { desk: 0, tv: 1, phone: 2 };
 
@@ -51,6 +104,16 @@ export const STATE_CAPS = Object.freeze({ keys: 64, bytes: 65536 });
 export const CONTROL_LIMITS = Object.freeze({ minutes: 24 * 60, announce: 280, announceSeconds: 3600, bans: 200, mutes: 200, message: 200 });
 /** What a muted player cannot say: an `ev` whose kind starts with one of these (a game's chat, quick lines, emotes). */
 export const SPEECH = /^(?:say|chat|emote)/i;
+/**
+ * The contract's 12 player colours: a peer's `colour` (its seat % 12) is an index into this list. The watch page's
+ * player strip draws them; a game that colours its players the same way matches it (Gem Rush does).
+ */
+export const NET_PALETTE = Object.freeze(['#8fe36a', '#ffd166', '#ef6f6c', '#6cb4ee', '#c792ea', '#f4a261', '#2ec4b6', '#ff8fab', '#a7c957', '#e9c46a', '#90e0ef', '#f28482']);
+/**
+ * What a game lets its watchers see (game.json "watch", passed by the Worker as `conn.watchPolicy`): `follow` (any
+ * player's view, the default), `overview` (the whole room only: a game with hidden hands or hidden roles), `off`.
+ */
+export const WATCH_POLICIES = Object.freeze(['follow', 'overview', 'off']);
 const oneLine = (v, max) => String(v ?? '').replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]+/g, ' ').replace(/\s+/g, ' ').trim().slice(0, max);
 /** A short tag for a browser's room key: enough for the owner to see "the same browser", never the key itself. */
 export function browserTag(key) {
@@ -129,7 +192,23 @@ export class NetRoom {
   constructor({
     code, maxPlayers = 8, maxScreens = 16, perIp = 12, stallMs = 1500, silentMs = 2500, idleMs = 10_000,
     holdMs = 60_000, forgetMs = 60_000, persistMs = 30_000, store = null, now = Date.now, log = () => {},
+    agentsAloneMs = AGENTS_ALONE_MS, voteMs = VOTE.ms, voteCooldownMs = VOTE.cooldownMs, autoVoteMs = VOTE.autoMs,
   }) {
+    this.agentsAloneMs = agentsAloneMs;
+    this.voteMs = voteMs;
+    this.voteCooldownMs = voteCooldownMs;
+    this.autoVoteMs = autoVoteMs;
+    /** Servers and agent seats (section 17): the Worker's policy, the party's dial, what the host's game reads. */
+    this.policy = { ...DEFAULT_POLICY };
+    this.level = null;
+    this.levelBy = null;
+    this.caps = new Set();
+    this.vote = null;
+    this.lastVoteOpen = -Infinity;
+    this.lastAutoVote = -Infinity;
+    this.lastHumanAt = 0;
+    /** A policy that no longer lets AI in, waiting for the round to finish: when the agents leave. */
+    this.agentsOut = null;
     this.code = code;
     this.seatCap = maxPlayers;
     this.maxPlayers = maxPlayers;
@@ -169,6 +248,7 @@ export class NetRoom {
     this.stats = {
       snaps: 0, ins: 0, evs: 0, ckpts: 0, states: 0, rounds: 0, drops: 0, oversize: 0, stFixed: 0, reclaimed: 0, seated: 0,
       kicked: 0, refused: 0, persists: 0, restoredFrom: null, bytesIn: 0, bytesOut: 0, elections: [], promotions: 0,
+      speechDrops: 0, agentDrops: 0, labelled: 0, votes: 0,
     };
     this.snapTimes = [];
     /** The owner's controls (section 15): who is held out of this room until when, who is muted, the banner, a closed door. */
@@ -193,6 +273,10 @@ export class NetRoom {
       id: randomId(6), conn, ip: conn.ip ?? null, browser: conn.browser ?? null, player: conn.player ?? null, via: conn.via ?? null, helloed: false, seat: null, token: null, name: '', typed: '', colour: 0,
       device: 'desk', want: 'play', canHost: true, hidden: false, waiting: false, joinedAt: now, lastSeen: now, lastSnapAt: 0,
       rates: new Map(), drops: [], errAt: 0,
+      // A watcher (section 16): the Worker's word for a socket opened through a watch door, else the hello's own.
+      watch: conn.watch === true, policy: WATCH_POLICIES.includes(conn.watchPolicy) ? conn.watchPolicy : 'follow', follow: null, followWhy: null,
+      // An agent (section 17): only the Worker's word, from a verified pass, makes one; its hello cannot.
+      agentWord: conn.agent && typeof conn.agent === 'object' ? conn.agent : null, agent: null, caps: new Set(), speechAt: [],
     };
     this.clients.set(c.id, c);
     return {
@@ -202,13 +286,32 @@ export class NetRoom {
     };
   }
 
+  /**
+   * The shell's watch socket: the room's facts, and (revision 6) the party's vote from the play page's card. A vote
+   * from it counts as the seat of the client in this room with the same browser key (`conn.browser`).
+   */
   watch(conn) {
     this.watchers.add(conn);
     this.sendText(conn, JSON.stringify(this.facts()));
     // A shell that comes back to a room it was kicked from (or that is closed) hears so at once.
     const held = this.heldNotice(conn);
     if (held) this.sendText(conn, JSON.stringify(held));
-    return { onClose: () => this.watchers.delete(conn) };
+    const rate = [];
+    return {
+      onClose: () => this.watchers.delete(conn),
+      onMessage: (text) => {
+        const now = this.now();
+        while (rate.length && rate[0] <= now - 1000) rate.shift();
+        if (rate.length >= 4 || String(text).length > 256) return;
+        rate.push(now);
+        let m = null;
+        try { m = JSON.parse(String(text)); } catch { return; }
+        if (!m || m.t !== 'vote' || !conn.browser) return;
+        const c = this.live().find((o) => o.browser === conn.browser && o.seat !== null && !o.agent && !o.watch);
+        if (c) this.onVote(c, m, conn);
+        else this.sendText(conn, JSON.stringify({ t: 'error', code: 'vote', message: 'only a seated player votes' }));
+      },
+    };
   }
 
   /* ------------------------------------------------------------ wire */
@@ -223,7 +326,29 @@ export class NetRoom {
   host() { return this.hostId ? this.clients.get(this.hostId) ?? null : null; }
   hostRef() { const h = this.host(); return h ? { id: h.id, seat: h.seat } : null; }
   roleOf(c) { return c.id === this.hostId ? 'host' : c.seat === null ? 'screen' : 'replica'; }
-  peer(c) { return { id: c.id, seat: c.seat, name: c.name, colour: c.colour, device: c.device, want: c.want, role: this.roleOf(c), ...(this.muteOf(c) ? { muted: true } : {}) }; }
+  peer(c) { return { id: c.id, seat: c.seat, name: c.name, colour: c.colour, device: c.device, want: c.want, role: this.roleOf(c), ...(c.watch ? { watch: true } : {}), ...(c.agent ? { agent: { ...c.agent } } : {}), ...(this.muteOf(c) ? { muted: true } : {}) }; }
+  /** A hands-`host` agent (section 17): no game client of its own, so no snapshots, checkpoints or state. */
+  lite(c) { return Boolean(c.agent && c.agent.hands === 'host'); }
+  seatedHumans() { return this.live().filter((c) => c.seat !== null && !c.agent); }
+  /** Seats kept for AI: the top `aiSeats + guides` (DESIGN D6), never every seat (one is always a person's). */
+  reserve() {
+    const p = this.policy;
+    const n = p.kind === 'hybrid' || p.kind === 'beginner' ? p.aiSeats + p.guides : 0;
+    return Math.max(0, Math.min(n, this.maxPlayers - 1));
+  }
+  humanCap() { return Math.max(1, this.maxPlayers - this.reserve()); }
+  agentsAllowed() { return this.policy.kind !== 'humans-only'; }
+  /** The room's dial now: the party's vote (or the owner's), else the server's level; a kids room caps it. */
+  levelNow() { return Math.max(1, Math.min(this.policy.levelMax, this.level ?? this.policy.level)); }
+  policyOut() {
+    const level = this.levelNow();
+    return { ...this.policy, skill: skillPreset(level, { kids: this.policy.kids }), ...(this.levelBy ? { by: this.levelBy } : {}) };
+  }
+  /** Send to every client in the room (a lite agent too: it hears join/leave, roster, round, policy and votes). */
+  broadcast(msg) {
+    const text = JSON.stringify(msg);
+    for (const o of this.live()) this.sendText(o.conn, text);
+  }
   peers() { return this.live().map((c) => this.peer(c)); }
   stateObject() { const o = {}; for (const [k, v] of this.state) o[k] = v.d; return o; }
 
@@ -281,6 +406,7 @@ export class NetRoom {
         const out = JSON.stringify({ t: 'snap', from: c.seat, ...snap });
         this.lastSnapText = out;
         for (const o of this.others(c)) {
+          if (this.lite(o)) continue; // an agent with no game client draws nothing
           // A congested socket skips a snapshot rather than queueing a stale one.
           if (o.conn.buffered && o.conn.buffered() > 256 * 1024) { this.stats.drops += 1; continue; }
           this.sendText(o.conn, out);
@@ -288,7 +414,7 @@ export class NetRoom {
         return;
       }
       case 'in': {
-        if (isHost || c.seat === null) return;
+        if (isHost || c.seat === null || this.lite(c)) return;
         const h = this.host();
         if (!h) return;
         this.stats.ins += 1;
@@ -303,12 +429,22 @@ export class NetRoom {
         const kind = String(m.k ?? '').slice(0, 64);
         // A muted player's speech goes nowhere (a host relays everyone's, so only a non-host's own is dropped).
         if (!isHost && SPEECH.test(kind) && this.muteOf(c)) { this.stats.mutedDrops = (this.stats.mutedDrops ?? 0) + 1; return; }
+        // The server's speech (section 17): `lines` drops every free-text chat (quick lines and emotes pass), `off`
+        // drops all speech, whoever sends it (a host relaying a player's chat too).
+        if (SPEECH.test(kind) && (this.policy.speech === 'off' || (this.policy.speech === 'lines' && /^chat/i.test(kind)))) { this.stats.speechDrops += 1; return; }
+        // An agent says at most one line every 4 s and 8 a minute.
+        if (c.agent && SPEECH.test(kind)) {
+          while (c.speechAt.length && c.speechAt[0] <= now - 60_000) c.speechAt.shift();
+          if (c.speechAt.length >= AGENT_SPEECH.perMinute || (c.speechAt.length && now - c.speechAt[c.speechAt.length - 1] < AGENT_SPEECH.gapMs)) { this.stats.agentDrops += 1; return; }
+          c.speechAt.push(now);
+        }
         this.stats.evs += 1;
         const out = { t: 'ev', from: c.seat, k: kind, d: m.d ?? null };
         if (isHost) {
           if (typeof m.to === 'string') { const o = this.clients.get(m.to); if (o && o.helloed && o !== c) this.send(o, out); }
           else if (Number.isInteger(m.to)) { for (const o of this.others(c)) if (o.seat === m.to) this.send(o, out); }
-          else for (const o of this.others(c)) this.send(o, out);
+          // An agent with no game client hears only what is addressed to its seat (the lite feed).
+          else for (const o of this.others(c)) { if (!this.lite(o)) this.send(o, out); }
         } else {
           const h = this.host();
           if (h) this.send(h, { ...out, id: c.id });
@@ -343,28 +479,48 @@ export class NetRoom {
         this.stats.states += 1;
         this.persistDirty = true;
         const out = JSON.stringify({ t: 'state', k: key, d: m.d ?? null });
-        for (const o of this.others(c)) this.sendText(o.conn, out);
+        for (const o of this.others(c)) if (!this.lite(o)) this.sendText(o.conn, out);
         return;
       }
       case 'round': {
         if (!isHost || !m.round || typeof m.round !== 'object') return;
-        this.lastRound = m.round;
+        // The results name every AI as AI, whatever the host's game says (section 17).
+        const round = Array.isArray(m.round.results) ? { ...m.round, results: this.labelResults(m.round.results) } : m.round;
+        const wasLive = this.lastRound && this.lastRound.phase === 'live' ? Number(this.lastRound.n) : null;
+        this.lastRound = round;
         // The round a launch change waits for is over: everyone sees its results for a moment, then the room re-gates.
-        if (this.regate && m.round.phase === 'over' && (this.regate.roundN === null || Number(m.round.n) >= this.regate.roundN)) this.regate.until = Math.min(this.regate.until, this.now() + 5000);
+        if (this.regate && round.phase === 'over' && (this.regate.roundN === null || Number(round.n) >= this.regate.roundN)) this.regate.until = Math.min(this.regate.until, this.now() + 5000);
+        if (this.agentsOut && round.phase === 'over' && (this.agentsOut.roundN === null || Number(round.n) >= this.agentsOut.roundN)) this.agentsOut.until = Math.min(this.agentsOut.until, this.now() + 5000);
         this.stats.rounds += 1;
         this.persistDirty = true;
-        for (const o of this.others(c)) this.send(o, { t: 'round', round: m.round });
+        for (const o of this.others(c)) this.send(o, { t: 'round', round });
+        // A party's first live round with AI seats: the vote on how strong the AI should be (once per 30 minutes).
+        if (round.phase === 'live' && wasLive !== Number(round.n)) this.autoVote();
         this.tellWatchers();
         return;
       }
       case 'roster': {
         if (!isHost || !Array.isArray(m.slots)) return;
-        this.lastRoster = m.slots.slice(0, 64);
+        // A host cannot hide an AI: a seat an agent holds is named and marked so, a slot with no seat is a bot.
+        this.lastRoster = this.labelRoster(m.slots.slice(0, 64));
         this.persistDirty = true;
         for (const o of this.others(c)) this.send(o, { t: 'roster', slots: this.lastRoster });
         this.tellWatchers();
         return;
       }
+      case 'caps': {
+        // The host's game reads the dial and/or moves agents' bodies (section 17): the office and the shell say so.
+        if (!isHost || !Array.isArray(m.caps)) return;
+        for (const k of m.caps) if (CAPS.includes(k)) c.caps.add(k);
+        this.caps = new Set(c.caps);
+        this.persistDirty = true;
+        this.tellWatchers();
+        return;
+      }
+      case 'vote': {
+        this.onVote(c, m);
+        return;
+      }
       case 'ping': {
         const wasHidden = c.hidden;
         c.hidden = m.hid === true;
@@ -417,24 +573,49 @@ export class NetRoom {
     if (this.closedUntil > this.now()) return refuse('room-closed', this.closedWhy || 'The studio closed this room.', { until: this.closedUntil });
     const ban = this.banOf(c, typeof m.token === 'string' ? m.token : '');
     if (ban) return refuse('kicked', ban.message, { until: ban.until });
+    // A watcher of a game that cannot be watched (game.json "watch": false) is refused for good (section 16).
+    const watching = !c.agentWord && (c.watch || m.watch === true);
+    if (watching && c.policy === 'off') return refuse('watch-off', 'this game cannot be watched; play it instead');
+    // An AI sits only with a pass the Worker verified (section 17): a hello that says it is one, with none, is refused.
+    if (m.agent && typeof m.agent === 'object' && !c.agentWord) return refuse('agent-pass', 'an AI plays here with an agent pass from the studio');
+    const now = this.now();
+    if (c.agentWord) {
+      const a = c.agentWord;
+      if (!this.agentsAllowed()) return refuse('agents-off', 'This server is for humans only');
+      // A lite agent (hands `host`) needs a host whose game moves AI bodies (it declared `caps: ['agents']`).
+      const hostCaps = this.host() ? this.host().caps : this.caps;
+      if (a.hands === 'host' && !hostCaps.has('agents')) return refuse('agents-unsupported', 'this room\'s game cannot move an AI\'s body (its build predates agent seats); an AI that runs the game itself can still sit');
+      // An AI never keeps a room alive (DESIGN D9): with no person seated for a while, it may not come in.
+      if (!this.seatedHumans().length && now - this.lastHumanAt >= this.agentsAloneMs) return refuse('agents-alone', 'nobody is playing in this room; an AI comes back when a person is seated', { final: false });
+      c.agent = { pass: String(a.pass ?? '').slice(0, 16), role: ['party', 'guide', 'player'].includes(a.role) ? a.role : 'party', hands: a.hands === 'host' ? 'host' : 'self', by: ['studio', 'guest', 'service'].includes(a.by) ? a.by : 'studio' };
+      c.agentName = aiName(a.name ?? a.label ?? 'Agent');
+    }
     if (this.perIp && c.ip && live.filter((o) => o.ip === c.ip).length >= this.perIp) return refuse('too-many', `at most ${this.perIp} sockets per address in one room`);
     if (live.length >= this.maxPlayers + this.maxScreens) return refuse('room-full', 'this room is full; try another');
-    const now = this.now();
     c.device = m.device === 'phone' || m.device === 'tv' ? m.device : 'desk';
-    c.want = m.want === 'screen' ? 'screen' : 'play';
-    c.canHost = m.canHost !== false;
+    // A watcher is a screen that never takes a seat, whatever else its hello says. An agent always plays.
+    c.watch = watching;
+    c.want = c.agent ? 'play' : watching || m.want === 'screen' ? 'screen' : 'play';
+    // An agent with no game client never hosts; one that runs the game hosts only a room no person can (DESIGN D10).
+    c.canHost = c.agent ? c.agent.hands === 'self' && m.canHost !== false : m.canHost !== false;
     c.game = typeof m.game === 'string' ? m.game.slice(0, 64) : '';
-    c.typed = typeof m.name === 'string' ? m.name.replace(/\s+/g, ' ').trim().slice(0, 24) : '';
+    // A person's typed name never ends in an AI or bot mark; on a kids server nobody's typed name is used (handles).
+    c.typed = c.agent || this.policy.kids ? '' : typeof m.name === 'string' ? stripAi(m.name.replace(/\s+/g, ' ').trim()).slice(0, 24) : '';
+    if (Array.isArray(m.caps)) for (const k of m.caps) if (CAPS.includes(k)) c.caps.add(k);
     // The manifest's player count, from the first visitor of an empty room (the site's Table reads the manifest).
     if (Number.isInteger(m.max) && !this.seats.size && !live.length) { this.askedMax = m.max; this.maxPlayers = Math.max(1, Math.min(this.seatCap, m.max)); }
     this.reapSeats(now);
     let full = false;
-    if (c.want === 'play' && !this.seatClient(c, typeof m.token === 'string' ? m.token : '')) { full = true; c.waiting = true; }
-    if (c.seat === null) c.name = c.typed || (c.want === 'screen' ? 'Screen' : 'Watcher');
+    if (c.want === 'play' && !this.seatClient(c, typeof m.token === 'string' ? m.token : '')) {
+      if (c.agent) return refuse('agents-off', 'no AI seat is free in this room');
+      full = true; c.waiting = true;
+    }
+    if (c.seat === null) c.name = c.typed || (c.want === 'screen' && !c.watch ? 'Screen' : 'Watcher');
+    if (c.seat !== null && !c.agent) this.lastHumanAt = now;
     c.helloed = true;
     c.joinedAt = now;
     if (!this.openedAt) this.openedAt = now;
-    this.emptySince = 0;
+    if (!c.agent) this.emptySince = 0;
     this.lastJoinAt = now;
 
     let role = c.seat === null ? 'screen' : 'replica';
@@ -442,16 +623,24 @@ export class NetRoom {
     let deposed = null;
     const h = this.host();
     const preferred = this.preferHost && now < this.preferHost.until ? this.preferHost.seat : undefined;
-    if (c.canHost && (preferred === undefined || preferred === c.seat)) {
+    // A watcher hosts only a room nobody else can host (a player who can is elected first), and never deposes one;
+    // an agent hosts only a room no person can host.
+    const lastResort = (c.watch && live.some((o) => o.canHost && !o.watch && !o.agent && !o.hidden)) || (c.agent && live.some((o) => o.canHost && !o.agent && !o.hidden));
+    if (c.canHost && !lastResort && (preferred === undefined || preferred === c.seat)) {
       if (!h) {
         role = 'host';
         why = this.lastSnap || this.lastCkpt ? 'resumed' : 'first';
         if (preferred !== undefined) this.preferHost = null;
-      } else if (h.hidden || now - h.lastSeen > this.silentMs) {
+      } else if (!c.watch && !c.agent && (h.hidden || now - h.lastSeen > this.silentMs)) {
         // The host is a frozen phone (socket open, nothing sent): the newcomer runs the round now, not after a stall.
         deposed = h;
         role = 'host';
         why = h.hidden ? 'host-hidden' : 'host-stalled';
+      } else if (!c.watch && !c.agent && h.agent) {
+        // A person arrives in a room an AI was hosting: the rules go back to a person's browser (DESIGN D10).
+        deposed = h;
+        role = 'host';
+        why = 'host-person';
       }
     }
     if (role === 'host') {
@@ -459,30 +648,40 @@ export class NetRoom {
       this.hostSince = now;
       c.lastSnapAt = 0;
       this.seatsDirty = true;
+      this.caps = new Set(c.caps);
       this.stats.elections.push({ at: now, id: c.id, seat: c.seat, why });
       if (this.stats.elections.length > 32) this.stats.elections.shift();
     }
+    const lite = this.lite(c);
     this.send(c, {
-      t: 'welcome', v: NET_VERSION, id: c.id, room: this.code, seat: c.seat, token: c.token, name: c.name, colour: c.colour,
+      t: 'welcome', v: NET_VERSION, rev: NET_REVISION, id: c.id, room: this.code, seat: c.seat, token: c.token, name: c.name, colour: c.colour,
       role, why, host: this.hostRef(), peers: this.peers(), st: now, max: this.maxPlayers,
-      round: this.lastRound, roster: this.lastRoster, snap: this.lastSnap, state: this.stateObject(),
+      round: this.lastRound, roster: this.lastRoster, snap: lite ? null : this.lastSnap, state: lite ? {} : this.stateObject(),
       ...(role === 'host' ? { ckpt: this.lastCkpt } : {}),
       ...(full ? { full: true } : {}),
       ...(this.liveAnnouncement() ? { announce: this.liveAnnouncement() } : {}),
+      ...(c.watch ? { watch: this.followFacts(c) } : {}),
+      policy: this.policyOut(),
+      ...(this.vote ? { vote: this.voteView() } : {}),
+      ...(c.agent ? { agent: { ...c.agent, name: c.name } } : {}),
     });
     for (const o of this.others(c)) this.send(o, { t: 'join', peer: this.peer(c) });
+    // A seat taken by a browser that also watches this room: its watching tab sees the overview from now on.
+    this.refreshWatchers(c);
     if (deposed) {
       this.send(deposed, { t: 'role', role: deposed.seat === null ? 'screen' : 'replica', why, host: this.hostRef(), peers: this.peers() });
       for (const o of this.others(c)) if (o !== deposed) this.send(o, { t: 'host', host: this.hostRef(), why });
     }
-    this.log({ ev: 'hello', room: this.code, id: c.id, seat: c.seat, device: c.device, want: c.want, role, why, full, resumed: typeof m.token === 'string' && m.token === c.token });
+    // A roster from before an agent sat is labelled again now (its seat is an AI's).
+    if (c.agent && Array.isArray(this.lastRoster)) this.lastRoster = this.labelRoster(this.lastRoster);
+    this.log({ ev: 'hello', room: this.code, id: c.id, seat: c.seat, device: c.device, want: c.want, role, why, full, resumed: typeof m.token === 'string' && m.token === c.token, ...(c.watch ? { watch: true } : {}), ...(c.agent ? { agent: c.agent.hands } : {}) });
     this.persist(now); // a new seat (or a new host) is written now, not on the next tick: a deploy can come any moment
     this.tellWatchers();
   }
 
   /** Give `c` a seat: its token's seat, a free one, or the seat absent longest. False when every seat is present. */
   seatClient(c, token) {
-    const seat = this.seatFor(token);
+    const seat = this.seatFor(token, c.agent ? 'agent' : 'human');
     if (seat === null) return false;
     const s = this.seats.get(seat);
     // Same seat open twice (two tabs, or a reload racing its own close): the newer socket wins.
@@ -497,17 +696,31 @@ export class NetRoom {
     c.token = s.token;
     c.waiting = false;
     s.present = true;
-    const name = c.typed || s.name || handleFor(s.token, new Set([...this.seats.values()].map((x) => x.name).filter(Boolean)));
+    s.agent = c.agent ? { ...c.agent } : null;
+    // An agent is always "<label> · AI" (DESIGN D7); a person keeps their seat's name, else gets a handle.
+    const name = c.agent ? c.agentName : c.typed || (s.name && !s.wasAgent ? s.name : '') || handleFor(s.token, new Set([...this.seats.values()].map((x) => x.name).filter(Boolean)));
+    s.wasAgent = Boolean(c.agent);
     if (name !== s.name) { s.name = name; this.seatsDirty = true; }
     c.name = name;
     c.colour = seat % PALETTE_SIZE;
     return true;
   }
 
-  seatFor(token) {
-    if (token) for (const [seat, s] of this.seats) if (s.token === token) return seat;
-    const fresh = () => ({ token: randomId(18), name: '', since: this.now(), present: true });
-    for (let seat = 0; seat < this.maxPlayers; seat += 1) {
+  /**
+   * A seat for a token (its own seat, whatever the range: a person seated above a new cap keeps it), else a free
+   * seat of the right kind: a person's in [0, max - reserve), an agent's in [max - reserve, max) (DESIGN D6; with no
+   * reserve, any seat, from the top). Every seat taken: the one absent longest of the same kind.
+   */
+  seatFor(token, kind = 'human') {
+    if (token) for (const [seat, s] of this.seats) if (s.token === token && Boolean(s.agent) === (kind === 'agent')) return seat;
+    const fresh = () => ({ token: randomId(18), name: '', since: this.now(), present: true, agent: null });
+    const reserve = this.reserve();
+    const order = [];
+    if (kind === 'agent') {
+      const lo = reserve ? this.maxPlayers - reserve : 0;
+      for (let seat = this.maxPlayers - 1; seat >= lo; seat -= 1) order.push(seat);
+    } else for (let seat = 0; seat < this.humanCap(); seat += 1) order.push(seat);
+    for (const seat of order) {
       if (this.seats.has(seat)) continue;
       this.seats.set(seat, fresh());
       this.seatsDirty = true;
@@ -515,7 +728,10 @@ export class NetRoom {
     }
     // Every seat is present or held. A visitor who is here beats one who left: reclaim the seat absent longest.
     let oldest = null;
-    for (const [seat, s] of this.seats) if (!s.present && seat < this.maxPlayers && (!oldest || s.since < oldest[1].since)) oldest = [seat, s];
+    for (const seat of order) {
+      const s = this.seats.get(seat);
+      if (s && !s.present && Boolean(s.agent) === (kind === 'agent') && (!oldest || s.since < oldest[1].since)) oldest = [seat, s];
+    }
     if (!oldest) return null;
     this.seats.set(oldest[0], fresh());
     this.seatsDirty = true;
@@ -539,10 +755,38 @@ export class NetRoom {
       for (const o of this.others(c)) this.send(o, { t: 'join', peer: this.peer(c) });
       this.log({ ev: 'seated', room: this.code, id: c.id, seat: c.seat });
       this.persist();
+      this.refreshWatchers();
       this.tellWatchers();
     }
   }
 
+  /* ------------------------------------------------------------ watchers (section 16) */
+
+  /**
+   * Whether this watcher may follow one player's view, and if not, why: `overview` (the game shows watchers the
+   * whole room only) or `seated-here` (the same browser holds a seat in this room: a second tab is not a way to
+   * look over an opponent's shoulder). The stream is the same either way; this decides what the watcher's page
+   * offers and its helper renders.
+   */
+  followFacts(c) {
+    if (c.policy === 'overview') return { follow: false, why: 'overview' };
+    if (c.browser && this.live().some((o) => o !== c && o.seat !== null && o.browser === c.browser)) return { follow: false, why: 'seated-here' };
+    return { follow: true };
+  }
+
+  /** Tell every watcher whose right to follow changed (a seat taken or left by its own browser). */
+  refreshWatchers(except = null) {
+    for (const c of this.live()) {
+      if (!c.watch) continue;
+      const f = this.followFacts(c);
+      const why = f.why ?? null;
+      if (c === except || (c.follow === f.follow && c.followWhy === why)) { c.follow = f.follow; c.followWhy = why; continue; }
+      c.follow = f.follow;
+      c.followWhy = why;
+      this.send(c, { t: 'watch', ...f });
+    }
+  }
+
   onClose(c, why) {
     if (this.clients.get(c.id) !== c) return;
     this.clients.delete(c.id);
@@ -558,8 +802,11 @@ export class NetRoom {
       this.hostId = null;
       this.elect(null, why === 'replaced' ? 'host-replaced' : why === 'silent' ? 'host-stalled' : 'host-left');
     }
-    if (!this.live().length) this.emptySince = now;
+    if (c.seat !== null && !c.agent) this.lastHumanAt = now;
+    // An agent never keeps a room from forgetting (DESIGN D9): the room is empty when no person is left.
+    if (!this.live().some((o) => !o.agent) && !this.emptySince) this.emptySince = now;
     this.seatWaiting();
+    if (c.seat !== null) this.refreshWatchers();
     this.tellWatchers();
   }
 
@@ -576,6 +823,9 @@ export class NetRoom {
       .filter((c) => c.canHost && c.id !== excludeId)
       .sort((a, b) => Number(a.hidden) - Number(b.hidden)
         || silent(a) - silent(b)
+        // An agent hosts only when no person can (DESIGN D10); a watcher is next to last: any player comes first.
+        || Number(Boolean(a.agent)) - Number(Boolean(b.agent))
+        || Number(a.watch) - Number(b.watch)
         || tenure(b) - tenure(a)
         || (DEVICE_RANK[a.device] ?? 3) - (DEVICE_RANK[b.device] ?? 3)
         || a.joinedAt - b.joinedAt);
@@ -589,6 +839,8 @@ export class NetRoom {
     this.hostSince = now;
     this.preferHost = null;
     this.seatsDirty = true;
+    // What the room's game reads (the dial, agent bodies) is what its new host's build says.
+    this.caps = new Set(next.caps);
     next.lastSnapAt = 0;
     this.stats.promotions += 1;
     this.stats.elections.push({ at: now, id: next.id, seat: next.seat, why });
@@ -637,21 +889,235 @@ export class NetRoom {
       if (this.live().some((c) => c.canHost)) this.elect(null, 'host-left');
     }
     if (this.regate && now >= this.regate.until) this.applyRegate(now);
+    if (this.agentsOut && now >= this.agentsOut.until) this.applyAgentsOut(now);
+    if (this.vote && this.vote.open && now >= this.vote.until) this.closeVote('time');
+    // An AI never keeps a room alive (DESIGN D9): with no person seated for agentsAloneMs, every agent is closed.
+    if (this.seatedHumans().length) this.lastHumanAt = now;
+    else if (now - this.lastHumanAt >= this.agentsAloneMs) {
+      for (const c of this.live().filter((o) => o.agent)) {
+        this.error(c, 'agents-alone', 'nobody is playing in this room; an AI comes back when a person is seated');
+        this.kick(c, 'agents-alone', 4001);
+      }
+    }
     this.reapSeats(now);
     this.seatWaiting();
-    if (!this.live().length && this.emptySince && now - this.emptySince > this.forgetMs) {
+    if (!this.live().some((c) => !c.agent) && this.emptySince && now - this.emptySince > this.forgetMs) {
+      for (const c of this.live()) this.kick(c, 'agents-alone', 4001);
       this.lastSnap = null; this.lastSnapText = null; this.lastCkpt = null; this.lastRound = null; this.lastRoster = null;
       this.state.clear(); this.stateBytes = 0; this.seats.clear(); this.preferHost = null;
       this.emptySince = 0; this.openedAt = 0; this.askedMax = null;
+      // The party's dial and vote are the room's: a new party starts from the server's level.
+      this.level = null; this.levelBy = null; this.vote = null; this.agentsOut = null;
       this.seatsDirty = false; this.persistDirty = false;
       try { this.store?.clear?.(); } catch { /* best effort */ }
     }
     this.persist(now);
   }
 
+  /* ------------------------------------------------------------ servers, agents and the dial (section 17) */
+
+  /**
+   * The Worker's policy for this room (the server's, composed with the game and the office). A newer stamp replaces
+   * an older one; `force` is the owner's `policy` control. A policy that no longer lets AI in sends the agents out
+   * after the round, as a launch change does ("This server is humans-only now.").
+   */
+  setPolicy(pol, { force = false } = {}) {
+    const p = normalizePolicy(pol);
+    if (!p) return { ok: false, error: 'policy', message: 'not a policy' };
+    const before = this.policy;
+    const newer = p.at > before.at || (p.at === before.at && policySig(p) !== policySig(before));
+    if (!force && !newer) return { ok: true, same: true };
+    if (policySig(p) === policySig(before)) { this.policy = p; return { ok: true, same: true }; }
+    this.policy = p;
+    if (this.level !== null) this.level = Math.min(this.level, p.levelMax);
+    const now = this.now();
+    const agents = this.live().filter((c) => c.agent).length;
+    if (!this.agentsAllowed() && agents) {
+      const r = this.lastRound;
+      const playing = Boolean(r && r.phase === 'live' && Number(r.endsAt) > now);
+      const until = Math.min(now + 15 * 60_000, playing ? Number(r.endsAt) + 20_000 : now + 30_000);
+      this.agentsOut = { roundN: playing ? Number(r.n) : null, until, at: now, message: 'This server is humans-only now.' };
+    } else if (this.agentsAllowed()) this.agentsOut = null;
+    if (Array.isArray(this.lastRoster)) this.lastRoster = this.labelRoster(this.lastRoster);
+    this.seatsDirty = true;
+    this.officeDirty = true;
+    this.broadcast({ t: 'policy', policy: this.policyOut() });
+    this.tellWatchers();
+    return { ok: true, policy: this.policyOut(), leaving: this.agentsOut ? agents : 0, ...(this.agentsOut ? { until: this.agentsOut.until } : {}) };
+  }
+
+  /** The agents leave (a policy that no longer lets AI in, after the round): each told why, its seat freed. */
+  applyAgentsOut(now = this.now()) {
+    const g = this.agentsOut;
+    if (!g) return 0;
+    this.agentsOut = null;
+    this.officeDirty = true;
+    const out = this.agentsAllowed() ? [] : this.live().filter((c) => c.agent);
+    for (const c of out) {
+      const seat = c.seat;
+      const token = c.token;
+      this.error(c, 'agents-off', g.message);
+      this.onClose(c, 'agents-off');
+      const s = seat === null ? null : this.seats.get(seat);
+      if (s && s.token === token) { this.seats.delete(seat); this.seatsDirty = true; }
+      try { c.conn.close(1008, 'agents-off'); } catch { /* gone */ }
+    }
+    this.persist(now);
+    this.tellWatchers();
+    return out.length;
+  }
+
+  /** The seat a slot names (its own, or the one its agent sits in), and what holds it. */
+  holderOf(seat) {
+    if (!Number.isInteger(seat)) return { kind: 'none' };
+    const c = this.live().find((o) => o.seat === seat);
+    const s = this.seats.get(seat);
+    if (c && c.agent) return { kind: 'agent', agent: c.agent, name: c.name };
+    if (c) return { kind: 'human', name: c.name };
+    if (s && s.agent) return { kind: 'agent', agent: s.agent, name: s.name };
+    if (s) return { kind: 'human', name: s.name };
+    return { kind: 'none' };
+  }
+
+  /**
+   * The host's roster as everyone sees it (section 17): a slot whose seat an agent holds is named and marked AI; a
+   * slot with no seat is a bot; a slot naming a seat nobody holds is a bot; a person is never marked AI and never
+   * named with an AI mark. A host's game cannot present an AI as a person.
+   */
+  labelRoster(slots) {
+    return slots.map((raw) => this.labelOne(raw, false)).filter(Boolean);
+  }
+
+  /** A round's results, labelled the same way (`agent: true` on every AI's row). */
+  labelResults(rows) {
+    return rows.slice(0, 64).map((raw) => this.labelOne(raw, true)).filter(Boolean);
+  }
+
+  labelOne(raw, result) {
+    if (!raw || typeof raw !== 'object') return null;
+    const out = { ...raw };
+    const seat = Number.isInteger(raw.seat) ? raw.seat : null;
+    const agentSeat = !result && raw.agent && Number.isInteger(raw.agent.seat) ? raw.agent.seat : null;
+    const who = this.holderOf(seat ?? agentSeat);
+    const role = (a) => (['party', 'guide', 'player'].includes(a?.role) ? a.role : 'party');
+    if (who.kind === 'agent') {
+      out.name = who.name || aiName(raw.name);
+      if (result) out.agent = true;
+      else out.agent = { seat: seat ?? agentSeat, role: role(who.agent), hands: who.agent.hands === 'host' ? 'host' : 'self' };
+      if (who.agent.hands === 'host') out.bot = true;
+      this.stats.labelled += 1;
+    } else if (seat !== null && who.kind === 'human') {
+      delete out.agent;
+      out.bot = false;
+      out.name = stripAi(raw.name) || who.name;
+    } else {
+      // No seat, or a seat nobody holds: a body the host's own bot code moves.
+      if (seat !== null) this.stats.labelled += 1;
+      out.bot = true;
+      if (raw.agent) {
+        // A seat kept for AI with nobody in it yet (a brainless AI seat), marked so.
+        out.agent = result ? true : { seat: null, role: role(raw.agent), hands: 'host' };
+        out.name = aiName(raw.name);
+      } else delete out.agent;
+    }
+    if (out.bot && out.seat !== null && who.kind !== 'agent') out.seat = null;
+    out.name = String(out.name ?? '').slice(0, 40);
+    return out;
+  }
+
+  /** The vote as everyone sees it: the options, how many chose each, who voted (a count), the result once closed. */
+  voteView() {
+    const v = this.vote;
+    if (!v) return null;
+    const counts = {};
+    for (const n of v.options) counts[n] = 0;
+    for (const n of v.votes.values()) counts[n] = (counts[n] ?? 0) + 1;
+    return {
+      of: 'skill', id: v.id, open: v.open, until: v.until, options: v.options, counts, voters: v.votes.size,
+      of_total: this.seatedHumans().length, ...(v.result ? { result: v.result } : {}), ...(v.reason ? { reason: v.reason } : {}),
+    };
+  }
+
+  tellVote() {
+    this.broadcast({ t: 'vote', ...this.voteView() });
+    const text = JSON.stringify({ t: 'vote', ...this.voteView() });
+    for (const w of this.watchers) this.sendText(w, text);
+    this.tellWatchers();
+  }
+
+  /** Open a vote on the dial: the options are 1 to the server's ceiling. A player opens one at most every 2 minutes. */
+  openVote({ reason = null, auto = false, by = 'player' } = {}) {
+    const now = this.now();
+    if (this.vote && this.vote.open) return this.vote;
+    if (!auto && by !== 'owner' && now - this.lastVoteOpen < this.voteCooldownMs) return null;
+    const options = [];
+    for (let n = 1; n <= this.policy.levelMax; n += 1) options.push(n);
+    this.vote = { id: randomId(6), open: true, at: now, until: now + this.voteMs, options, votes: new Map(), reason: reason ? oneLine(reason, 40) : null, result: null };
+    this.lastVoteOpen = now;
+    if (auto) this.lastAutoVote = now;
+    this.stats.votes += 1;
+    this.tellVote();
+    return this.vote;
+  }
+
+  /** A party's first live round with AI seats (and a game that reads the dial): the vote opens by itself. */
+  autoVote() {
+    const now = this.now();
+    if (!this.caps.has('skill') || (this.vote && this.vote.open) || now - this.lastAutoVote < this.autoVoteMs) return;
+    const aiSeats = this.reserve() > 0 || this.live().some((c) => c.agent);
+    if (!aiSeats || !this.seatedHumans().length) return;
+    this.openVote({ auto: true, reason: 'start' });
+  }
+
+  /**
+   * A `vote` from a seated person (their game, or their play page's card through the watch socket) or the host:
+   * `open` starts one, `n` casts (or changes) this seat's vote. Agents and watchers never vote.
+   */
+  onVote(c, m, reply = null) {
+    const no = (message) => { const e = { t: 'error', code: 'vote', message }; if (reply) this.sendText(reply, JSON.stringify(e)); else this.send(c, e); };
+    if (m.of !== undefined && m.of !== 'skill') return no('only the skill dial is voted on');
+    const seated = c.seat !== null && !c.agent && !c.watch;
+    if (!seated && c.id !== this.hostId) return no('only a seated player votes');
+    const n = Math.floor(Number(m.n));
+    const casting = Number.isFinite(n) && seated;
+    if (!(this.vote && this.vote.open)) {
+      if (!m.open && !casting) return no('no vote is open');
+      if (!this.openVote({ reason: typeof m.reason === 'string' ? m.reason : null })) return no('a vote was held a moment ago; try again in a minute or two');
+    }
+    if (!casting) return;
+    const v = this.vote;
+    if (!v.options.includes(n)) return no(`vote 1 to ${this.policy.levelMax}`);
+    v.votes.set(c.seat, n);
+    // Everyone seated has voted (a lone player's tap decides at once).
+    const voters = this.seatedHumans().map((o) => o.seat);
+    if (voters.every((s) => v.votes.has(s))) this.closeVote('all');
+    else this.tellVote();
+  }
+
+  /** The middle vote wins, rounded down (DESIGN D8), capped by the server's ceiling, and applies at once. */
+  closeVote(why = 'time') {
+    const v = this.vote;
+    if (!v || !v.open) return null;
+    v.open = false;
+    const here = new Set(this.seatedHumans().map((o) => o.seat));
+    const counted = [...v.votes].filter(([seat]) => here.has(seat)).map(([, n]) => n);
+    const m = medianVote(counted);
+    if (m !== null) {
+      this.level = Math.max(1, Math.min(this.policy.levelMax, m));
+      this.levelBy = 'vote';
+      const s = skillPreset(this.level, { kids: this.policy.kids });
+      v.result = { level: this.level, name: s.name, votes: counted.length, why };
+      // Saved on the next tick, not within 30 s: a deploy right after the vote keeps the party's choice.
+      this.seatsDirty = true;
+      this.broadcast({ t: 'policy', policy: this.policyOut() });
+    } else v.result = { level: this.levelNow(), name: skillPreset(this.levelNow()).name, votes: 0, why };
+    this.tellVote();
+    return v.result;
+  }
+
   /* ------------------------------------------------------------ storage (optional) */
 
-  /** Seats on change; checkpoint/round/roster/state at most every persistMs. Never per frame. */
+  /** Seats, the policy and the party's dial on change; checkpoint/round/roster/state at most every persistMs. Never per frame. */
   persist(now = this.now(), force = false) {
     if (!this.store) return;
     const due = this.seatsDirty || (this.persistDirty && now - this.lastPersistAt >= this.persistMs);
@@ -666,8 +1132,10 @@ export class NetRoom {
   saved(now = this.now()) {
     return {
       v: NET_VERSION, room: this.code, savedAt: now, maxPlayers: this.maxPlayers, hostSeat: this.host()?.seat ?? null, openedAt: this.openedAt || null,
-      seats: [...this.seats].map(([seat, s]) => [seat, s.token, s.name]),
+      seats: [...this.seats].map(([seat, s]) => (s.agent ? [seat, s.token, s.name, s.agent] : [seat, s.token, s.name])),
       ckpt: this.lastCkpt, round: this.lastRound, roster: this.lastRoster, state: this.stateObject(),
+      // Section 17: a deploy keeps the room's policy, the party's dial and what its game reads.
+      policy: this.policy, level: this.level, levelBy: this.levelBy, caps: [...this.caps],
     };
   }
 
@@ -681,7 +1149,13 @@ export class NetRoom {
     if (!saved || saved.v !== NET_VERSION || !(now - Number(saved.savedAt) < 120_000)) return false;
     if (Number.isInteger(saved.maxPlayers)) this.maxPlayers = Math.max(1, Math.min(this.seatCap, saved.maxPlayers));
     if (Number.isFinite(saved.openedAt) && saved.openedAt > 0) this.openedAt = saved.openedAt;
-    for (const [seat, token, name] of saved.seats ?? []) this.seats.set(seat, { token, name, since: now, present: false });
+    for (const [seat, token, name, agent] of saved.seats ?? []) this.seats.set(seat, { token, name, since: now, present: false, agent: agent && typeof agent === 'object' ? agent : null });
+    const pol = normalizePolicy(saved.policy);
+    if (pol) this.policy = pol;
+    if (Number.isInteger(saved.level)) { this.level = Math.max(1, Math.min(this.policy.levelMax, saved.level)); this.levelBy = saved.levelBy === 'owner' ? 'owner' : 'vote'; }
+    if (Array.isArray(saved.caps)) this.caps = new Set(saved.caps.filter((k) => CAPS.includes(k)));
+    // The people coming back get the agents' grace too (an AI is not "alone" in a room a deploy just emptied).
+    if ((saved.seats ?? []).some((s) => !s[3])) this.lastHumanAt = now;
     this.lastCkpt = saved.ckpt ?? null;
     this.lastRound = saved.round ?? null;
     this.lastRoster = saved.roster ?? null;
@@ -709,7 +1183,8 @@ export class NetRoom {
   /** The hold that keeps this client out, if any: by its seat token, its browser's room key, its account, or (only when the owner asked) its address. */
   banOf(c, token = c.token) {
     const now = this.now();
-    return this.bans.find((b) => b.until > now && ((b.token && b.token === token) || (b.browser && b.browser === c.browser) || (b.player && b.player === c.player) || (b.ip && b.ip === c.ip))) ?? null;
+    const pass = c.agent?.pass ?? c.agentWord?.pass ?? null;
+    return this.bans.find((b) => b.until > now && ((b.token && b.token === token) || (b.browser && b.browser === c.browser) || (b.player && b.player === c.player) || (b.ip && b.ip === c.ip) || (b.pass && b.pass === pass))) ?? null;
   }
 
   muteOf(c) {
@@ -756,7 +1231,8 @@ export class NetRoom {
         const until = now + minutes * 60_000;
         // The message is the studio's words; `until` says when (the shell says it in the player's own time).
         const message = oneLine(a.message, CONTROL_LIMITS.message) || 'The studio removed you from this room.';
-        const ban = { token: target.token, browser: target.browser, player: target.player, ip: a.address ? target.ip : null, name: target.name, seat: target.seat, until, at: now, message };
+        // An AI is held out by its pass (its seat becomes a brainless AI seat again); a person by token, browser, account.
+        const ban = { token: target.token, browser: target.browser, player: target.player, ip: a.address ? target.ip : null, pass: target.agent?.pass ?? null, name: target.name, seat: target.seat, until, at: now, message };
         this.bans = [...this.bans, ban].slice(-CONTROL_LIMITS.bans);
         // Every socket of that player in this room: the seat itself, and its browser's or account's other tabs.
         const out = this.live().filter((o) => o === target || (ban.browser && o.browser === ban.browser) || (ban.player && o.player === ban.player));
@@ -855,6 +1331,22 @@ export class NetRoom {
         this.tellWatchers();
         return { ok: true, op, max: this.maxPlayers };
       }
+      case 'policy': {
+        // The owner changed the server (section 17): its new policy now, and AI out after the round if it is humans-only.
+        const r = this.setPolicy(a.pol, { force: true });
+        return r.ok ? { ...r, op } : { ...r, op };
+      }
+      case 'level': {
+        // The owner sets this room's dial (room_level): it applies at once, as a vote's result does.
+        const n = Math.floor(Number(a.level));
+        if (!(n >= 1 && n <= 5)) return { ok: false, error: 'level', message: 'level is 1 to 5' };
+        this.level = Math.min(this.policy.levelMax, n);
+        this.levelBy = 'owner';
+        this.seatsDirty = true;
+        this.broadcast({ t: 'policy', policy: this.policyOut() });
+        this.tellWatchers();
+        return { ok: true, op, level: this.level, name: skillPreset(this.level, { kids: this.policy.kids }).name };
+      }
       default:
         return { ok: false, error: 'op', message: `no control called ${String(op).slice(0, 24)}` };
     }
@@ -862,7 +1354,9 @@ export class NetRoom {
 
   /** Whether a client may stay once the room re-gates: one of its ticket's holders (o, i-…, p-…) is of an allowed kind. */
   allowedAfter(c, allow) {
-    return String(c.via ?? '').split('~').some((part) => (part === 'o' && allow.includes('o')) || (part.startsWith('i-') && allow.includes('i')) || (part.startsWith('p-') && allow.includes('p')));
+    // The owner's own agent passes count as the owner's (only the owner can mint one).
+    return String(c.via ?? '').split('~').some((part) => (part === 'o' && allow.includes('o')) || (part.startsWith('i-') && allow.includes('i')) || (part.startsWith('p-') && allow.includes('p'))
+      || (part.startsWith('a-') && allow.includes('o') && c.agent?.by === 'studio'));
   }
 
   /** The launch change, now: everyone it leaves out is sent out of the room with the studio's words; the rest play on. */
@@ -904,7 +1398,7 @@ export class NetRoom {
     return {
       bans: this.bans.filter((b) => b.until > now), mutes: this.mutes.filter((m) => m.until > now),
       announcement: this.liveAnnouncement(), closedUntil: this.closedUntil > now ? this.closedUntil : 0, closedWhy: this.closedWhy,
-      regate: this.regate,
+      regate: this.regate, agentsOut: this.agentsOut,
     };
   }
 
@@ -918,6 +1412,7 @@ export class NetRoom {
     this.closedWhy = this.closedUntil ? String(o.closedWhy ?? '') : '';
     // A launch change still waiting comes back; one long past is over (whoever it was for has gone).
     this.regate = o.regate && Array.isArray(o.regate.allow) && Number(o.regate.until) > now - 120_000 ? o.regate : null;
+    this.agentsOut = o.agentsOut && Number(o.agentsOut.until) > now - 120_000 ? o.agentsOut : null;
   }
 
   /** The room as its owner sees it: the facts, plus who each player is to the studio (never an address). */
@@ -931,6 +1426,7 @@ export class NetRoom {
         openedAt: this.openedAt || null,
         closedUntil: this.closedUntil > now ? this.closedUntil : null,
         regate: this.regate ? { allow: this.regate.allow, until: this.regate.until, afterRound: this.regate.roundN } : null,
+        agentsOut: this.agentsOut ? { until: this.agentsOut.until, afterRound: this.agentsOut.roundN } : null,
         clients: f.clients.map((p) => {
           const c = byId.get(p.id);
           const mute = c ? this.muteOf(c) : null;
@@ -949,8 +1445,9 @@ export class NetRoom {
     while (this.snapTimes.length && this.snapTimes[0] < now - 1000) this.snapTimes.shift();
     const slots = Array.isArray(this.lastRoster) ? this.lastRoster : [];
     const live = this.live();
+    const agents = live.filter((c) => c.agent && c.seat !== null).length;
     return {
-      t: 'net', v: NET_VERSION, room: this.code, st: now,
+      t: 'net', v: NET_VERSION, rev: NET_REVISION, room: this.code, st: now,
       host: this.hostRef(),
       openedAt: this.openedAt || null,
       announce: this.liveAnnouncement(),
@@ -960,13 +1457,22 @@ export class NetRoom {
       roster: this.lastRoster,
       snapHz: this.snapTimes.length,
       counts: {
-        players: live.filter((c) => c.seat !== null).length,
+        // Players are people (section 17): an agent is never counted as one, by the Lobby or anybody else.
+        players: live.filter((c) => c.seat !== null && !c.agent).length,
+        agents,
         screens: live.filter((c) => c.seat === null).length,
         waiting: live.filter((c) => c.waiting).length,
-        humans: slots.filter((s) => s && !s.bot).length,
-        bots: slots.filter((s) => s && s.bot).length,
+        watchers: live.filter((c) => c.watch).length,
+        humans: slots.filter((s) => s && !s.bot && !s.agent).length,
+        bots: slots.filter((s) => s && s.bot && !s.agent).length,
+        // Every AI body: a slot marked AI (an agent, or a seat kept for one), else the agents seated.
+        ai: Math.max(agents, slots.filter((s) => s && s.agent).length),
         maxPlayers: this.maxPlayers,
+        humanSeats: this.humanCap(),
       },
+      policy: this.policyOut(),
+      ...(this.vote ? { vote: this.voteView() } : {}),
+      caps: [...this.caps],
       memory: {
         snapBytes: this.lastSnapText ? this.lastSnapText.length : 0,
         ckptBytes: this.lastCkpt ? JSON.stringify(this.lastCkpt).length : 0,