@quo-systems/dock 0.2.5 → 0.2.7

package/beings/quo-dock.md

@@ -83,7 +83,7 @@ Three roles exist, and they are held by where a thing runs, not by config:
 | role      | what it can do                              | who can hold it                                     |
 | --------- | ------------------------------------------- | --------------------------------------------------- |
 | occupant  | ask a being what her gate shows this asker  | anyone, local or remote                             |
-| owner     | boot a being, invite for her, knock for her | the root, on the device; or a ward the root invited |
+| owner     | reach into a being; boot is every being's   | the root, on the device; or a ward the root invited |
 | developer | write a being class the harbor will hold    | only a process on the device                        |
 
 Whoever holds all three keeps them apart: the owner creates and places, and

package/dist/harbor/capacitor.d.ts

@@ -1,7 +1,9 @@
+import { Directory } from '@capacitor/filesystem';
 import type { BeingClass } from '@quo-systems/quo';
 import type { Kept, Store, WardRecord } from '@quo-systems/quo/harbor';
 import { BrowserHarbor } from './browser.ts';
 export declare function nativeHarbor(name?: string, classes?: Record<string, BeingClass>): Promise<BrowserHarbor>;
+export declare const directory: Directory;
 export declare class Native implements Store {
     #private;
     readonly harbor: string;

package/dist/harbor/capacitor.js

@@ -36,7 +36,7 @@ export async function nativeHarbor(name = 'quo', classes = {}) {
 const { hex, unhex } = arithmetic;
 // Where the files live: the folder iCloud does not copy on iOS, the app's
 // own files on Android, whose manifest says no backup.
-const directory = Capacitor.getPlatform() === 'ios' ? Directory.LibraryNoCloud : Directory.Data;
+export const directory = Capacitor.getPlatform() === 'ios' ? Directory.LibraryNoCloud : Directory.Data;
 async function exists(path) {
     try {
         await Filesystem.stat({ path, directory });

package/dist/harbor/disk.js

@@ -25,6 +25,7 @@ import { mkdir, readFile, writeFile, unlink, stat } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { join, resolve, isAbsolute } from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { register } from 'node:module';
 import process from 'node:process';
 import { User, Desk, Avatar } from '../beings/index.js';
 import { setup } from '../beings/setup.js';
@@ -35,12 +36,24 @@ export const BUILT_IN = { User, Desk, Avatar };
 // a second harbor in the same pid would pass that check while still being a
 // second ward with one pk.
 const HELD = new Set();
+// A class file in the harbor folder resolves its packages from where the
+// dock is installed, `resolve.ts`: the folder has no node_modules and is not
+// meant to. Registered once per process, before the first class loads.
+let hooked = false;
+function hook() {
+    if (hooked)
+        return;
+    hooked = true;
+    const self = import.meta.url;
+    register(new URL(self.endsWith('.ts') ? './resolve.ts' : './resolve.js', self), { parentURL: self, data: { parent: self } });
+}
 // The class source is a module. Every export that is a class is a class the
 // harbor holds, under its export name. The harbor never sees a body: it
 // constructs when a ward names a class, and never chooses one.
 async function loadClasses(path) {
     if (!existsSync(path))
         return {};
+    hook();
     // Keyed by the file's own time, so a source that changed on disk is read
     // again and a harbor boots on what it pins, not on what it once loaded.
     const { mtimeMs } = await stat(path);

package/dist/harbor/resolve.d.ts

@@ -0,0 +1,16 @@
+type Context = {
+    parentURL?: string;
+    conditions: string[];
+    importAttributes: Record<string, string>;
+};
+type Resolved = {
+    url: string;
+    format?: string | null;
+    shortCircuit?: boolean;
+};
+type Next = (specifier: string, context: Context) => Promise<Resolved>;
+export declare function initialize(data: {
+    parent: string;
+}): void;
+export declare function resolve(specifier: string, context: Context, next: Next): Promise<Resolved>;
+export {};

package/dist/harbor/resolve.js

@@ -0,0 +1,17 @@
+let parent = '';
+export function initialize(data) {
+    parent = data.parent;
+}
+const bare = (s) => !s.startsWith('.') && !s.startsWith('/') && !/^[a-z]+:/i.test(s);
+export async function resolve(specifier, context, next) {
+    try {
+        return await next(specifier, context);
+    }
+    catch (e) {
+        const missing = e.code === 'ERR_MODULE_NOT_FOUND';
+        const from = context.parentURL ?? '';
+        if (missing && parent && bare(specifier) && from.startsWith('file:') && !from.includes('/node_modules/'))
+            return next(specifier, { ...context, parentURL: parent });
+        throw e;
+    }
+}

package/dist/human/html.d.ts

@@ -29,6 +29,8 @@ export type Model = {
     look: Look;
     tree: Node | null;
     pages: Record<string, Node | null>;
+    focus?: string;
+    at?: string;
     notice: string;
     answers: Record<string, Word>;
     pushes: JsonObject[];

package/dist/human/html.js

@@ -192,6 +192,8 @@ export function page(m) {
         const l = look(kept);
         const prefix = `${id}-`;
         const tree = m.pages[id];
+        // where her own page is, when the world's page is known and this is not it already
+        const own = m.at !== undefined && m.focus !== id ? `<a class="open" href="${escape(`${m.at}/${encodeURIComponent(id)}`)}">open</a>` : '';
         if (tree) {
             const hers = {
                 form: (name) => {
@@ -202,11 +204,11 @@ export function page(m) {
                 standing: () => '',
                 standings: () => '',
             };
-            return `<section class="standing" data-standing="${escape(id)}"${l.style}><div class="page">${paint(tree, hers)}</div></section>`;
+            return `<section class="standing" data-standing="${escape(id)}"${l.style}><div class="page">${paint(tree, hers)}</div>${own}</section>`;
         }
         const want = (kept.order ?? []).map((n) => prefix + n);
         const inOrder = ordered(asks, { order: want });
-        return `<section class="standing" data-standing="${escape(id)}"${l.style}>${l.head || `<h2>${escape(id)}</h2>`}${inOrder.map(one(kept, prefix)).join('')}</section>`;
+        return `<section class="standing" data-standing="${escape(id)}"${l.style}>${l.head || `<h2>${escape(id)}</h2>`}${inOrder.map(one(kept, prefix)).join('')}${own}</section>`;
     };
     const far = Object.keys(groups).map(section).join('');
     // Her page, when she answered one: painted from her tree, each name it
@@ -220,13 +222,17 @@ export function page(m) {
         standing: section,
         standings: () => far,
     };
-    const own = bp ? ordered(bp.asks.filter((a) => !taken.has(a.name) && !pres.has(a.name)), m.look).map(one(m.look)).join('') : '';
-    const asks = m.tree ? `<div class="page">${paint(m.tree, painter)}</div>` : own + far;
+    const mineAsks = bp ? ordered(bp.asks.filter((a) => !taken.has(a.name) && !pres.has(a.name)), m.look).map(one(m.look)).join('') : '';
+    // A being's page: one standing she carries as the whole page, and nothing of hers around it. A key her
+    // describe does not carry paints as nothing, the way a name on a page does: the address adds no right.
+    const focused = m.focus !== undefined;
+    const asks = focused ? section(m.focus) : m.tree ? `<div class="page">${paint(m.tree, painter)}</div>` : mineAsks + far;
     const shown = bp && bp.notes !== null && typeof bp.notes === 'object' && !Array.isArray(bp.notes) ? Object.fromEntries(Object.entries(bp.notes).filter(([k]) => k !== 'standings' && k !== 'name')) : bp?.notes;
     const notes = bp && shown !== null && shown !== undefined && !(typeof shown === 'object' && !Array.isArray(shown) && !Object.keys(shown).length) ? `<aside class="notes">${view(shown)}</aside>` : '';
     const pushes = m.pushes.length ? `<section class="pushes"><h2>pushes</h2><ol>${m.pushes.map((p) => `<li>${view(p)}</li>`).join('')}</ol></section>` : '';
     const mine = look(m.look);
     // a page carries its own title, so the header keeps only the notice; a being painted as forms is headed by her name
-    const head = m.tree ? '' : `${m.look.logo ? `<img class="logo" alt="" src="${m.look.logo}">` : ''}<h1>${escape(title(bp, m.look))}</h1>`;
-    return `<header${mine.style}>${head}<p class="notice">${escape(m.notice)}</p></header>${notes}<main${mine.style}>${asks}</main>${pushes}`;
+    const back = focused && m.at !== undefined ? `<a class="back" href="${escape(m.at)}">${escape(title(bp, m.look))}</a>` : '';
+    const head = focused ? back : m.tree ? '' : `${m.look.logo ? `<img class="logo" alt="" src="${m.look.logo}">` : ''}<h1>${escape(title(bp, m.look))}</h1>`;
+    return `<header${mine.style}>${head}<p class="notice">${escape(m.notice)}</p></header>${focused ? '' : notes}<main${focused ? ' class="focus"' : ''}${mine.style}>${asks}</main>${pushes}`;
 }

package/dist/human/screen.d.ts

@@ -9,6 +9,8 @@ export type Options = {
     after?: () => Promise<void>;
     notice?: string;
     admit?: (invitation: Invitation) => Promise<void>;
+    focus?: string;
+    at?: string;
 };
 export declare function screenSide(avatar: Subject, surface: Surface, options?: Options): Promise<Serving & {
     model: Model;

package/dist/human/screen.js

@@ -16,7 +16,7 @@ import { isSilence, isWord } from '@quo-systems/quo';
 export async function screenSide(avatar, surface, options = {}) {
     const after = options.after ?? (async () => { });
     const notice = options.notice ?? '';
-    const model = { blueprint: null, look: {}, tree: null, pages: {}, notice, answers: {}, pushes: [] };
+    const model = { blueprint: null, look: {}, tree: null, pages: {}, notice, answers: {}, pushes: [], ...(options.focus !== undefined ? { focus: options.focus } : {}), ...(options.at !== undefined ? { at: options.at } : {}) };
     let seen = null;
     const show = () => surface.show(page(model));
     // Her describe, again: the page follows the digest.

package/dist/human/tab.d.ts

@@ -7,6 +7,7 @@ export type Config = {
         public: boolean;
     }>;
     ward?: string;
+    being?: string;
     beings?: boolean;
 };
 export declare function start(cfg: Config, root?: HTMLElement): Promise<void>;

package/dist/human/tab.js

@@ -162,7 +162,8 @@ export async function start(cfg, root = document.body) {
         keep(AT(pk), rel.key);
         const mine = el('div', '', { class: 'far' });
         screen.append(mine);
-        const s = await screenSide(rel.avatar, domSurface(mine), { after: () => ward.save(), notice });
+        // the page's address: the world's page, or one being she carries as the whole page
+        const s = await screenSide(rel.avatar, domSurface(mine), { after: () => ward.save(), notice, at: pageOf(at.name), ...(cfg.being ? { focus: cfg.being } : {}) });
         side = s;
         const bp = s.model.blueprint;
         const notesName = typeof bp?.notes?.name === 'string' ? bp.notes.name : '';
@@ -171,7 +172,8 @@ export async function start(cfg, root = document.body) {
             keep(NAMES(pk), { ...names(), [rel.key]: called });
         switcher();
         people();
-        await boot(rel);
+        if (!cfg.being)
+            await boot(rel); // a being's page is hers alone: the world's tab beings stay on the world's page
     };
     // The way in, from any of the three: a fresh avatar joins, the ward is
     // saved, and she is the one on screen.

package/dist/human/web.js

@@ -54,8 +54,8 @@ export function webRoute(harbor, o) {
         return true;
     };
     const wards = () => Object.fromEntries([...harbor.wards].map(([n, h]) => [n, { pk: h.pk, public: publicOf(h) !== null }]));
-    const tab = (ward) => {
-        const cfg = { quo: o.at.quo, web: o.at.web, wards: wards(), beings: existsSync(beingsEntry), ...(ward ? { ward } : {}) };
+    const tab = (ward, being) => {
+        const cfg = { quo: o.at.quo, web: o.at.web, wards: wards(), beings: existsSync(beingsEntry), ...(ward ? { ward } : {}), ...(being ? { being } : {}) };
         return `<script id="quo" type="application/json">${JSON.stringify(cfg).replace(/</g, '\\u003c')}</script><script type="module" src="${o.at.web}/tab.js"></script>`;
     };
     return async (req, res, rest) => {
@@ -88,6 +88,10 @@ export function webRoute(harbor, o) {
             return html(404, res, `<h1>no such world</h1><p>no ward named ${esc(wardName)} on this harbor.</p>`);
         if (parts.length === 1 && req.method === 'GET')
             return html(200, res, tab(wardName));
+        // a being's page: one standing the user being carries, by its id, as the whole page. No router:
+        // the path is a key, and the tab paints nothing for a key her describe does not carry
+        if (parts.length === 2 && req.method === 'GET' && /^[\w.-]{1,80}$/.test(parts[1]))
+            return html(200, res, tab(wardName, parts[1]));
         return false;
     };
 }
@@ -116,8 +120,11 @@ const CSS = [
     '.page .picture{max-height:6rem}.cards{display:flex;flex-wrap:wrap;gap:.75rem}.card{border:1px solid color-mix(in srgb,currentColor 20%,transparent);border-radius:var(--radius);padding:.5rem .75rem}',
     // a row with a picture is a line about someone or something: the picture small and the words beside it, centred
     '.page .row:has(>.picture){align-items:center;flex-wrap:nowrap}.page .row>.picture{max-height:2.75rem;flex:none}.page .row>.stack{gap:0;min-width:0}.page .row>.stack>p{margin:0}',
-    // a far page inside a standing's section: her title is a section's, not the page's
+    // a far page inside a standing's section: her title is a section's, not the page's; a link to her own page
     'section.standing .page{padding:.5rem 0}section.standing .page .t-title{font-size:1.3rem;margin:.25rem 0}',
+    'a.open{display:inline-block;font-size:.85rem;color:var(--mute);margin:.25rem 0 .5rem}a.back{font-size:.9rem;color:var(--mute);text-decoration:none}a.back::before{content:"\\2190  "}',
+    // a being\'s page, the whole page: her section is the page and her title the page\'s
+    'main.focus section.standing{border:0;padding:0;margin:0}main.focus section.standing .page .t-title{font-size:2rem;margin:.5rem 0}',
     // the door page: one column, generous air, the mark, a word, a sentence
     'main.door{min-height:70vh;display:flex;flex-direction:column;justify-content:center;align-items:flex-start;max-width:32rem;margin:0 auto;padding:3rem 0;font-family:ui-serif,Georgia,"Times New Roman",serif}',
     'main.door .picture{width:3.5rem;height:3.5rem;color:var(--ink);opacity:.9;margin-bottom:1.25rem}',

package/harbor/capacitor.ts

@@ -41,7 +41,7 @@ type Blob = { seed: string; partition: Record<string, unknown>; record: WardReco
 
 // Where the files live: the folder iCloud does not copy on iOS, the app's
 // own files on Android, whose manifest says no backup.
-const directory = Capacitor.getPlatform() === 'ios' ? Directory.LibraryNoCloud : Directory.Data;
+export const directory = Capacitor.getPlatform() === 'ios' ? Directory.LibraryNoCloud : Directory.Data;
 
 async function exists(path: string): Promise<boolean> {
   try {

package/harbor/disk.ts

@@ -17,6 +17,7 @@ import { mkdir, readFile, writeFile, unlink, stat } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { join, resolve, isAbsolute } from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { register } from 'node:module';
 import process from 'node:process';
 import type { BeingClass } from '@quo-systems/quo';
 import { User, Desk, Avatar } from '../beings/index.ts';
@@ -33,11 +34,23 @@ export const BUILT_IN: Record<string, BeingClass> = { User, Desk, Avatar };
 // second ward with one pk.
 const HELD = new Set<string>();
 
+// A class file in the harbor folder resolves its packages from where the
+// dock is installed, `resolve.ts`: the folder has no node_modules and is not
+// meant to. Registered once per process, before the first class loads.
+let hooked = false;
+function hook(): void {
+  if (hooked) return;
+  hooked = true;
+  const self = import.meta.url;
+  register(new URL(self.endsWith('.ts') ? './resolve.ts' : './resolve.js', self), { parentURL: self, data: { parent: self } });
+}
+
 // The class source is a module. Every export that is a class is a class the
 // harbor holds, under its export name. The harbor never sees a body: it
 // constructs when a ward names a class, and never chooses one.
 async function loadClasses(path: string): Promise<Record<string, BeingClass>> {
   if (!existsSync(path)) return {};
+  hook();
   // Keyed by the file's own time, so a source that changed on disk is read
   // again and a harbor boots on what it pins, not on what it once loaded.
   const { mtimeMs } = await stat(path);

package/harbor/quo-harbor.md

@@ -339,6 +339,15 @@ core plus files, the loader and the pid, and holds the `ws` listener's end of
 every socket dialed to it; the browser harbor, `browser.ts`, is the core plus
 IndexedDB, the built-in beings, the lock and one dialer per world.
 
+The harbor folder is the device's and not a package: it has no node_modules
+and is not meant to, and a class file in it imports the library by name like
+any code. So the disk harbor resolves a class file's packages from where the
+dock itself is installed, `resolve.ts`, a module resolution hook registered
+once before the first class loads: a bare name that does not resolve from a
+file outside any node_modules is resolved again from the dock's own place.
+A class sees the packages the daemon sees, the library and the dock's own,
+and one copy of each, so a `Being` in a class file is the daemon's `Being`.
+
 A tab's store keeps values through JSON, as a file does, because the ward
 hands its partition out through a guard that structured clone refuses.
 The daemon's `/quo` and `/health` answer any origin, with the preflight a
@@ -426,18 +435,32 @@ the App plugin's foreground event tells it `wake`, which tells every
 dialer, because a phone asleep loses its sockets silently and the wake is
 what dials them back.
 
-The proof is `packages/dock/test/terrain/ios.test.ts`, behind
-`npm run check:terrain`, inside the real app in the iOS Simulator: the
-store suite, untouched, and the custody rule against a real Keychain and
-a real folder; the whole conformance suite over two harbors on native
-stores, both dialing a daemon on the Mac's loopback through the tab's own
-probe; and the wake, the app sent behind another and brought back, its
-dialer told and its socket held again. The app is synced with the test's
-origin as its page, built with xcodebuild, installed fresh and launched
-with simctl; the page loads the bundled exercise, `native.ts`, runs it and
-posts the list back. Two things the plugins taught, held in the store:
-the secure store keeps JSON, so a value is read with the call that
-parses; and mkdir refuses a folder that exists, recursive or not.
+On Android the same store stands on the same two plugins: the key in the
+Keystore-backed secure store, the files in the app's own data folder,
+which the manifest excludes from backup with `allowBackup` false, so a
+restore finds nothing there either.
+
+The proof is two tests behind `npm run check:terrain` on one stage,
+`packages/dock/test/terrain/phone.ts`: `ios.test.ts` inside the real app
+in the iOS Simulator and `android.test.ts` inside it in the Android
+emulator. Each runs the store suite, untouched, and the custody rule
+against a real secret store and a real folder; the whole conformance
+suite over two harbors on native stores, both dialing a daemon on the
+Mac's loopback through the tab's own probe; and the wake, the app sent
+behind Settings and brought back, its dialer told and its socket held
+again. The app is synced with the stage's origin as its page, built with
+xcodebuild or gradle, installed fresh and launched with simctl or adb; the
+page loads the bundled exercise, `native.ts`, runs it and posts the list
+back. The device names the Mac `localhost`, the Simulator because it
+shares the Mac's network and the emulator because adb reverses the
+stage's two ports, and it has to be that name: a webview grants WebCrypto
+to a plain-http page only on `localhost`, the one origin it counts secure
+without TLS. Through adb's reversed port a socket that Node dropped stays
+open on the device's side, so the stage answers every request with the
+connection closed and every fetch the page makes carries a timeout. Two
+things the plugins taught, held in the store: the secure store keeps
+JSON, so a value is read with the call that parses; and mkdir refuses a
+folder that exists, recursive or not.
 
 ## The link
 

package/harbor/resolve.ts

@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: Apache-2.0
+// How a class file the harbor folder holds finds its packages. The folder
+// is the device's, not a package: it has no node_modules, and a class in it
+// that imports `@quo-systems/quo` would otherwise fail to resolve from where
+// it sits. This is a module resolution hook, registered once by the disk
+// harbor: a bare specifier that does not resolve from a file outside any
+// node_modules is resolved again from where the dock itself is installed,
+// so a class file sees exactly the packages the daemon sees, the library
+// and the dock's own, and one copy of each.
+type Context = { parentURL?: string; conditions: string[]; importAttributes: Record<string, string> };
+type Resolved = { url: string; format?: string | null; shortCircuit?: boolean };
+type Next = (specifier: string, context: Context) => Promise<Resolved>;
+
+let parent = '';
+
+export function initialize(data: { parent: string }): void {
+  parent = data.parent;
+}
+
+const bare = (s: string) => !s.startsWith('.') && !s.startsWith('/') && !/^[a-z]+:/i.test(s);
+
+export async function resolve(specifier: string, context: Context, next: Next): Promise<Resolved> {
+  try {
+    return await next(specifier, context);
+  } catch (e) {
+    const missing = (e as { code?: string }).code === 'ERR_MODULE_NOT_FOUND';
+    const from = context.parentURL ?? '';
+    if (missing && parent && bare(specifier) && from.startsWith('file:') && !from.includes('/node_modules/')) return next(specifier, { ...context, parentURL: parent });
+    throw e;
+  }
+}

package/human/html.ts

@@ -143,6 +143,8 @@ export type Model = {
   look: Look; // her own look, from her `look` ask, or nothing
   tree: Node | null; // her page, from her `page` ask, or nothing: then her asks are painted as forms
   pages: Record<string, Node | null>; // the page of each standing she carries, by id, from its carried `page` ask
+  focus?: string; // one standing she carries shown as the whole page, its id: the page at `web./<ward>/<being>`
+  at?: string; // the world's page path, so a section can say where its own page is and a focused page where back is
   notice: string; // one line about where the human stands: in, not in, an error before an ask
   answers: Record<string, Word>; // the last answer per ask, shown under its form
   pushes: JsonObject[]; // every push from the world, newest last
@@ -215,6 +217,8 @@ export function page(m: Model): string {
     const l = look(kept);
     const prefix = `${id}-`;
     const tree = m.pages[id];
+    // where her own page is, when the world's page is known and this is not it already
+    const own = m.at !== undefined && m.focus !== id ? `<a class="open" href="${escape(`${m.at}/${encodeURIComponent(id)}`)}">open</a>` : '';
     if (tree) {
       const hers: Painter = {
         form: (name) => {
@@ -225,11 +229,11 @@ export function page(m: Model): string {
         standing: () => '',
         standings: () => '',
       };
-      return `<section class="standing" data-standing="${escape(id)}"${l.style}><div class="page">${paint(tree, hers)}</div></section>`;
+      return `<section class="standing" data-standing="${escape(id)}"${l.style}><div class="page">${paint(tree, hers)}</div>${own}</section>`;
     }
     const want = (kept.order ?? []).map((n) => prefix + n);
     const inOrder = ordered(asks, { order: want });
-    return `<section class="standing" data-standing="${escape(id)}"${l.style}>${l.head || `<h2>${escape(id)}</h2>`}${inOrder.map(one(kept, prefix)).join('')}</section>`;
+    return `<section class="standing" data-standing="${escape(id)}"${l.style}>${l.head || `<h2>${escape(id)}</h2>`}${inOrder.map(one(kept, prefix)).join('')}${own}</section>`;
   };
   const far = Object.keys(groups).map(section).join('');
   // Her page, when she answered one: painted from her tree, each name it
@@ -243,13 +247,17 @@ export function page(m: Model): string {
     standing: section,
     standings: () => far,
   };
-  const own = bp ? ordered(bp.asks.filter((a) => !taken.has(a.name) && !pres.has(a.name)), m.look).map(one(m.look)).join('') : '';
-  const asks = m.tree ? `<div class="page">${paint(m.tree, painter)}</div>` : own + far;
+  const mineAsks = bp ? ordered(bp.asks.filter((a) => !taken.has(a.name) && !pres.has(a.name)), m.look).map(one(m.look)).join('') : '';
+  // A being's page: one standing she carries as the whole page, and nothing of hers around it. A key her
+  // describe does not carry paints as nothing, the way a name on a page does: the address adds no right.
+  const focused = m.focus !== undefined;
+  const asks = focused ? section(m.focus!) : m.tree ? `<div class="page">${paint(m.tree, painter)}</div>` : mineAsks + far;
   const shown = bp && bp.notes !== null && typeof bp.notes === 'object' && !Array.isArray(bp.notes) ? Object.fromEntries(Object.entries(bp.notes).filter(([k]) => k !== 'standings' && k !== 'name')) : bp?.notes;
   const notes = bp && shown !== null && shown !== undefined && !(typeof shown === 'object' && !Array.isArray(shown) && !Object.keys(shown).length) ? `<aside class="notes">${view(shown as Json)}</aside>` : '';
   const pushes = m.pushes.length ? `<section class="pushes"><h2>pushes</h2><ol>${m.pushes.map((p) => `<li>${view(p)}</li>`).join('')}</ol></section>` : '';
   const mine = look(m.look);
   // a page carries its own title, so the header keeps only the notice; a being painted as forms is headed by her name
-  const head = m.tree ? '' : `${m.look.logo ? `<img class="logo" alt="" src="${m.look.logo}">` : ''}<h1>${escape(title(bp, m.look))}</h1>`;
-  return `<header${mine.style}>${head}<p class="notice">${escape(m.notice)}</p></header>${notes}<main${mine.style}>${asks}</main>${pushes}`;
+  const back = focused && m.at !== undefined ? `<a class="back" href="${escape(m.at)}">${escape(title(bp, m.look))}</a>` : '';
+  const head = focused ? back : m.tree ? '' : `${m.look.logo ? `<img class="logo" alt="" src="${m.look.logo}">` : ''}<h1>${escape(title(bp, m.look))}</h1>`;
+  return `<header${mine.style}>${head}<p class="notice">${escape(m.notice)}</p></header>${focused ? '' : notes}<main${focused ? ' class="focus"' : ''}${mine.style}>${asks}</main>${pushes}`;
 }

package/human/quo-human.md

@@ -159,9 +159,17 @@ Read with the trunk's "Carrying" and "The look", which this applies.
   page is a knock on the public invitation, and an answer that is an
   invitation is the way in: the side hands it to `admit`, the avatar joins,
   and the page becomes hers. Nothing in the screen knows the word desk.
-- **Worlds have addresses.** `web./<ward>` is that world's page, `web./`
-  lists the worlds, and a hostname per world is one proxy line, the
-  estate's choice. `quo.` stays one per harbor, since bytes route by pk.
+- **Worlds have addresses, and so do the beings one holds.** `web./<ward>`
+  is that world's page, `web./` lists the worlds, and a hostname per world
+  is one proxy line, the estate's choice. `quo.` stays one per harbor,
+  since bytes route by pk. `web./<ward>/<being>` is the page of one
+  standing the user being carries, by its id, as the whole page: her
+  section is the page, her title the page's, the shell's own asks and the
+  world's tab beings stay on the world's page, and a line at the top leads
+  back. No router: the path is a key, the server hands it to the tab as it
+  hands the ward's name, and a key her describe does not carry for this
+  device paints as nothing, since an address adds no right. Every section
+  on the world's page says where its own page is.
 - **A link is the page with the invitation in the fragment**, under the one
   reserved key `quo`, the invitation compact as `ward.heir.secret` or
   `ward` alone: `web.acme.com/shop#quo=...`. The fragment never leaves the

package/human/screen.ts

@@ -31,12 +31,15 @@ export type Surface = {
 // would bring her back from a reload with a stale count, and the far door
 // would refuse her. `admit` is what to do
 // with an answer that is an invitation: a guest at a world's door is let in
-// by it, and a side with no `admit` shows it as any answer.
-export type Options = { after?: () => Promise<void>; notice?: string; admit?: (invitation: Invitation) => Promise<void> };
+// by it, and a side with no `admit` shows it as any answer. `focus` is one
+// standing she carries shown as the whole page, the page at
+// `web./<ward>/<being>`, and `at` the world's page path the sections and a
+// focused page link to.
+export type Options = { after?: () => Promise<void>; notice?: string; admit?: (invitation: Invitation) => Promise<void>; focus?: string; at?: string };
 export async function screenSide(avatar: Subject, surface: Surface, options: Options = {}): Promise<Serving & { model: Model; refresh(): Promise<void> }> {
   const after = options.after ?? (async () => {});
   const notice = options.notice ?? '';
-  const model: Model = { blueprint: null, look: {}, tree: null, pages: {}, notice, answers: {}, pushes: [] };
+  const model: Model = { blueprint: null, look: {}, tree: null, pages: {}, notice, answers: {}, pushes: [], ...(options.focus !== undefined ? { focus: options.focus } : {}), ...(options.at !== undefined ? { at: options.at } : {}) };
   let seen: string | null = null;
   const show = () => surface.show(page(model));
 

package/human/tab.ts

@@ -40,7 +40,7 @@ import type { BeingClass } from '@quo-systems/quo';
 // every ward on that harbor by name, its pk and whether a public being is
 // at its door, which of them this page is, if it is one's, and whether the
 // world serves code for the tab.
-export type Config = { quo: string; web: string; wards: Record<string, { pk: string; public: boolean }>; ward?: string; beings?: boolean };
+export type Config = { quo: string; web: string; wards: Record<string, { pk: string; public: boolean }>; ward?: string; being?: string; beings?: boolean };
 
 // What the tab remembers between pages, beside the harbor: the worlds it
 // has joined, by pk, where each lives and what it is called; which relation
@@ -190,7 +190,8 @@ export async function start(cfg: Config, root: HTMLElement = document.body): Pro
     keep(AT(pk), rel.key);
     const mine = el('div', '', { class: 'far' });
     screen.append(mine);
-    const s = await screenSide(rel.avatar, domSurface(mine), { after: () => ward.save(), notice });
+    // the page's address: the world's page, or one being she carries as the whole page
+    const s = await screenSide(rel.avatar, domSurface(mine), { after: () => ward.save(), notice, at: pageOf(at.name), ...(cfg.being ? { focus: cfg.being } : {}) });
     side = s;
     const bp = s.model.blueprint;
     const notesName = typeof (bp?.notes as JsonObject | null)?.name === 'string' ? ((bp!.notes as JsonObject).name as string) : '';
@@ -198,7 +199,7 @@ export async function start(cfg: Config, root: HTMLElement = document.body): Pro
     if (!names()[rel.key]) keep(NAMES(pk), { ...names(), [rel.key]: called });
     switcher();
     people();
-    await boot(rel);
+    if (!cfg.being) await boot(rel); // a being's page is hers alone: the world's tab beings stay on the world's page
   };
 
   // The way in, from any of the three: a fresh avatar joins, the ward is

package/human/web.ts

@@ -84,8 +84,8 @@ export function webRoute(harbor: DiskHarbor, o: WebOptions): (req: IncomingMessa
     return true;
   };
   const wards = () => Object.fromEntries([...harbor.wards].map(([n, h]) => [n, { pk: h.pk, public: publicOf(h) !== null }]));
-  const tab = (ward?: string) => {
-    const cfg = { quo: o.at.quo, web: o.at.web, wards: wards(), beings: existsSync(beingsEntry), ...(ward ? { ward } : {}) };
+  const tab = (ward?: string, being?: string) => {
+    const cfg = { quo: o.at.quo, web: o.at.web, wards: wards(), beings: existsSync(beingsEntry), ...(ward ? { ward } : {}), ...(being ? { being } : {}) };
     return `<script id="quo" type="application/json">${JSON.stringify(cfg).replace(/</g, '\\u003c')}</script><script type="module" src="${o.at.web}/tab.js"></script>`;
   };
   return async (req, res, rest) => {
@@ -114,6 +114,9 @@ export function webRoute(harbor: DiskHarbor, o: WebOptions): (req: IncomingMessa
     const hosted = harbor.wards.get(wardName);
     if (!hosted) return html(404, res, `<h1>no such world</h1><p>no ward named ${esc(wardName)} on this harbor.</p>`);
     if (parts.length === 1 && req.method === 'GET') return html(200, res, tab(wardName));
+    // a being's page: one standing the user being carries, by its id, as the whole page. No router:
+    // the path is a key, and the tab paints nothing for a key her describe does not carry
+    if (parts.length === 2 && req.method === 'GET' && /^[\w.-]{1,80}$/.test(parts[1]!)) return html(200, res, tab(wardName, parts[1]!));
     return false;
   };
 }
@@ -143,8 +146,11 @@ const CSS = [
   '.page .picture{max-height:6rem}.cards{display:flex;flex-wrap:wrap;gap:.75rem}.card{border:1px solid color-mix(in srgb,currentColor 20%,transparent);border-radius:var(--radius);padding:.5rem .75rem}',
   // a row with a picture is a line about someone or something: the picture small and the words beside it, centred
   '.page .row:has(>.picture){align-items:center;flex-wrap:nowrap}.page .row>.picture{max-height:2.75rem;flex:none}.page .row>.stack{gap:0;min-width:0}.page .row>.stack>p{margin:0}',
-  // a far page inside a standing's section: her title is a section's, not the page's
+  // a far page inside a standing's section: her title is a section's, not the page's; a link to her own page
   'section.standing .page{padding:.5rem 0}section.standing .page .t-title{font-size:1.3rem;margin:.25rem 0}',
+  'a.open{display:inline-block;font-size:.85rem;color:var(--mute);margin:.25rem 0 .5rem}a.back{font-size:.9rem;color:var(--mute);text-decoration:none}a.back::before{content:"\\2190  "}',
+  // a being\'s page, the whole page: her section is the page and her title the page\'s
+  'main.focus section.standing{border:0;padding:0;margin:0}main.focus section.standing .page .t-title{font-size:2rem;margin:.5rem 0}',
   // the door page: one column, generous air, the mark, a word, a sentence
   'main.door{min-height:70vh;display:flex;flex-direction:column;justify-content:center;align-items:flex-start;max-width:32rem;margin:0 auto;padding:3rem 0;font-family:ui-serif,Georgia,"Times New Roman",serif}',
   'main.door .picture{width:3.5rem;height:3.5rem;color:var(--ink);opacity:.9;margin-bottom:1.25rem}',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quo-systems/dock",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "The dock: what every estate on Quo needs and nobody writes twice. A daemon and the quo command, the front desk, the user being and the avatar, harbors on disk, in a tab and on the edge, the model sides and the screen.",
   "keywords": [
     "quo",
@@ -72,7 +72,7 @@
     "build": "rm -rf dist && tsc -p tsconfig.build.json && cp harbor/edge/platform.d.ts dist/harbor/edge/ && cp -R cli/estate dist/cli/",
     "test": "node --test \"test/*.test.ts\"",
     "check:terrain": "node --test \"test/terrain/*.test.ts\"",
-    "prepublishOnly": "cd ../.. && npm run check && npm run check:terrain"
+    "prepublishOnly": "test \"$QUO_GATED\" = 1 || { echo 'publish from the root, gated once: npm run release' >&2; exit 1; }"
   },
   "dependencies": {
     "@aparajita/capacitor-secure-storage": "^8.0.0",
@@ -80,7 +80,7 @@
     "@capacitor/core": "^8.5.1",
     "@capacitor/filesystem": "^8.1.3",
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@quo-systems/quo": "^0.2.5",
+    "@quo-systems/quo": "^0.2.7",
     "esbuild": "^0.28.2",
     "ws": "^8.21.3"
   },