@zerwiz/ymir 0.1.10 → 0.1.11

package/.agents/skills/galdr-ymirsystem/assets/installation.md

@@ -259,6 +259,35 @@ clone's marks already existed. `bin/desktop-place.sh entries` is the launcher ha
 alone (any Linux desktop), the installer's `marks` step calls it, and both the
 desktop database and the icon cache are refreshed after.
 
+### Every notice can be silenced — `ymir config`
+
+Some lines are information the first time and noise the tenth. A user must be able
+to say **not again**, once, and be believed. The preferences live in the operator's
+settings (`<home>/config/notices.conf`, one `key=on|off` per name) and the door is:
+
+```
+ymir config                          # what is shown, and what is not
+ymir config notice version off       # silence one; `on` restores it
+judgment[4]{key,what}:
+  "version","the line that says which version moved to which"
+  "patience","the long-hour words before a slow install or build"
+  "next","the where-to-go-from-here block at the end"
+  "hints","the one-line helpers that say how to hide a notice"
+```
+
+Every notice that can be silenced **says so once**, in the cloth's faint voice —
+`(not again: ymir config notice version off)` — so the way out is discoverable
+without a manual. Absent means on; a preference is honoured by the shell cloth
+(`notice_wanted`, `notice_hint`) and by the CLI alike. `ymir-install.sh`'s marks
+and the raise path honour it too.
+
+### Four surfaces, one raise
+
+`ymir raise` lifts the whole hall — the SPA (`:3888`), Óðrerir (`:4322`), the
+board (`:8437`), and the commit-hall Sessrúmnir rises in the same motion (it is an
+Electron app of its own, not a browser surface). `ymir-install.sh`'s desktop step
+opens **one window per surface** rather than a single "both".
+
 ### What a user went from, and to
 
 `npm install -g` prints *"changed 266 packages"* and no versions. The CLI records

package/CHANGELOG.md

@@ -1,4 +1,69 @@
 
+## 2026-09-17 — 0.1.11: four surfaces, their marks, and a door that mends
+
+- **All four surfaces rise from one npm install** — Hlidskjalf `:3888`, Óðrerir
+  `:4322`, the board `:8437`, and Sessrúmnir in its own window; the installer's
+  desktop step opens one window per surface.
+- **All four launcher marks land** — the rune glyphs ship in the package
+  (`midgard/design-system/`), the mint resolves a packaged app, the apps'
+  templates are written before the rune marks so the themed name stands, and a
+  retired name is swept from the launcher.
+- **`ymir hlidskjalf` mends the Electron runtime itself** before refusing, because
+  npm gates install scripts and a fresh user could otherwise have no window at all.
+- **Every notice can be silenced once and remembered** — `ymir config notice
+  version|patience|next|hints off`.
+- **Óðrerir serves its build** from a package, and says what failed when it cannot.
+
+## 2026-09-17 — the sweep, and the door that mends itself
+
+- **A retired name is swept from the launcher.** `ymir-visualizer.desktop` and its
+  icon pointed at a glyph nobody ships — a blank square for anyone who knew the old
+  name. `design-icon.sh install` removes retired entries now (`ymir-visualizer`,
+  and `ymir-hlidskjalf-mobile` where that app is not installed).
+- **`ymir hlidskjalf` mends the Electron runtime itself.** npm gates install
+  scripts by default, so a fresh install can build the web app perfectly and have
+  no window. The door now runs the repair it used to *describe*
+  (`npm install-scripts approve electron` + `npm rebuild electron`), and only then
+  refuses — with both the manual command and the honest alternative
+  (`ymir install --no-desktop`).
+- **Two faults are provably in the app repos, not here** (recorded so nobody hunts
+  them in Ymir again):
+  - **the fourth hall** — the landing's list is a hardcoded SPA component
+    (`HallsSwitcher`; the bundle says *"three halls of Ymir — one seat, three
+    roofs"*), not data from the gate API. Óðrerir must be added in
+    `zerwiz/hlidskjalf` and the SPA rebuilt.
+  - **the ember glow** — the seat ships `emberBootTheme` in its built renderer but
+    no themed cloth beside it; the house's framework-neutral
+    `midgard/design-system/ember.js` exists precisely so every surface can share
+    one fire, and the seat must be told to light it (`zerwiz/sessrumnir`).
+
+## 2026-09-17 — "not again", and four surfaces in one raise
+
+- **Every notice can be silenced.** A line is information once and noise the
+  tenth: the version that moved, the long-hour words, the next-steps block, the
+  hints. Each now says so **once** in the cloth's faint voice — *not again:
+  `ymir config notice version off`* — and the preference is recorded in the
+  operator's settings, honoured by the shell cloth and the CLI alike. `ymir config
+  show` is the door; four keys: `version · patience · next · hints`.
+- **The package carries the design system.** It never shipped `midgard/`, so the
+  rune glyphs — the icons themselves — were absent and every mark failed with
+  *no glyph ansuz*. `midgard/design-system/` is in `files[]` now: 30 files, 22
+  glyphs.
+- **The marks are written in the right order.** The apps' own launcher templates
+  landed *after* the rune marks and overwrote the themed name with an absolute
+  `.png`; the templates go first now and the rune marks stand over them.
+- **Óðrerir rises from a package.** Its published tarball carries `dist` and a
+  `dev` command that calls a script it does not carry, so `npm run dev` could never
+  work from a package — the hall serves its **build** (`astro preview`) where there
+  is one, exactly as the SPA does. And its dependencies' absence is no longer
+  silent: the hall says what failed and why.
+- **Four surfaces, one raise.** `ymir raise` lifts the SPA, Óðrerir, the board and
+  Sessrúmnir together; the installer's desktop step opens **one window per
+  surface**, not a single "both".
+- **A library must not end a function on a failing test.** `style_init` did, and
+  `scripts/start.sh` runs under `set -e` — so the cloth took the whole raise down
+  with it, silently. `return 0`, and the reason is written beside it.
+
 ## 2026-09-17 — 0.1.10: the hall answers on its port, and the marks land
 
 - **The SPA listens where it is asked.** A bare `npm run dev` let Vite take 5173,

package/bin/design-icon.sh

@@ -75,8 +75,18 @@ mint() {  # <app-dir> <glyph> <tint> <label>
   local path
   path="$(sed -n 's/.*<path d="\([^"]*\)".*/\1/p' "$g" | head -1)"
   [ -n "$path" ] || { printf 'error: %s carries no <path> to reuse\n' "$glyph" >&2; return 1; }
-  local outdir="$ROOT/$dir/public"
-  [ -d "$(dirname "$outdir")" ] || { printf '  "%s","SKIP (no such app)"\n' "$dir"; return 0; }
+  # A clone keeps the app at $ROOT/apps/<name>; a package keeps it under
+  # node_modules/@zerwiz/<package>. The mint resolves both, so a packaged install
+  # gets its favicon too — the same resolver every other script uses.
+  local base outdir surface
+  base="$ROOT/$dir"
+  if [ ! -d "$base" ]; then
+    surface="$(basename "$dir")"
+    case "$surface" in smidja-factory) surface=smidja ;; esac
+    app_dir "$surface" base 2>/dev/null || base=""
+  fi
+  [ -n "$base" ] && [ -d "$base" ] || { printf '  "%s","SKIP (no such app)"\n' "$dir"; return 0; }
+  outdir="$base/public"
   mkdir -p "$outdir"
   {
     printf '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" width="32" height="32" role="img" aria-label="%s">\n' "$label"
@@ -147,7 +157,12 @@ install_all() {
     printf '  "%s","%s.svg","%s.desktop"\n' "$iconname" "$iconname" "$iconname"
   done
   [ -f "$apps_dir/ymir-smidja.desktop" ] && rm -f "$apps_dir/ymir-smidja.desktop"
-  for stale in ymir-hlidskjalf-mobile; do rm -f "$apps_dir/$stale.desktop" "$icons_dir/$stale.svg"; done
+  # Names we have retired, swept on every install: a launcher entry that points at
+  # an icon nobody ships is a blank square, and the naming law does not let an old
+  # name linger beside the new one. (ymir-visualizer → ymir-smidja.)
+  for stale in ymir-hlidskjalf-mobile ymir-visualizer; do
+    rm -f "$apps_dir/$stale.desktop" "$icons_dir/$stale.svg"
+  done
   command -v update-desktop-database >/dev/null 2>&1 && update-desktop-database "$apps_dir" >/dev/null 2>&1 || true
 }
 

package/bin/ymir-config.sh

@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+# ymir-config.sh — the operator's own preferences, honoured and remembered.
+#
+# Some lines a script prints are information the first time and noise the tenth:
+# the version that moved, the long-hour words, the hints. A user must be able to
+# say "not again" — once — and be believed. That is what this door is for.
+#
+#   ymir-config.sh show                       # every preference and its state
+#   ymir-config.sh notice <key> off|on        # silence or restore one notice
+#   ymir-config.sh notice <key>               # what it is now
+#
+# The store is the operator's settings, in the home they chose — never the code
+# tree (Rule 04) — one `key=on|off` line per name:
+#
+#   <home>/config/notices.conf
+#
+#   keys: version   the "the tree moved x → y" line
+#         patience  the long-hour words before a slow install or build
+#         next      the "where to go from here" block
+#         hints     the one-line helpers ("hide this next time: …")
+#
+# Exit: 0 ok, 2 usage.
+set -u
+
+VERSION="1.0.0"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=bin/hoard-lib.sh
+. "$SCRIPT_DIR/hoard-lib.sh"
+hoard_settings_dir SETTINGS
+STORE="$SETTINGS/notices.conf"
+KNOWN="version patience next hints"
+
+usage() { sed -n '2,22p' "$0" | sed 's/^# \{0,1\}//'; }
+
+state_of() {  # <key> → on|off (absent = on)
+  local key="$1" line
+  [ -r "$STORE" ] || { printf 'on'; return 0; }
+  line="$(grep -m1 "^${key}=" "$STORE" 2>/dev/null || true)"
+  [ -n "$line" ] && printf '%s' "${line#*=}" || printf 'on'
+}
+
+set_state() {  # <key> <on|off>
+  local key="$1" value="$2" tmp
+  case "$value" in on|off) ;; *) printf 'error: %s is not on or off\nhelp: ymir config notice %s off\n' "$value" "$key" >&2; exit 2 ;; esac
+  mkdir -p "$SETTINGS" 2>/dev/null || { printf 'error: cannot write %s\n' "$SETTINGS" >&2; exit 1; }
+  tmp="$(mktemp)"; chmod 600 "$tmp"
+  if [ -r "$STORE" ]; then grep -v "^${key}=" "$STORE" >"$tmp" 2>/dev/null || true; fi
+  printf '%s=%s\n' "$key" "$value" >>"$tmp"
+  mv "$tmp" "$STORE"
+}
+
+case "${1-}" in
+  -v|-V|--version) printf '%s\n' "$VERSION"; exit 0 ;;
+  -h|--help|"") usage; exit 0 ;;
+  show)
+    printf 'notices[%d]{key,state,what}:\n' 4
+    printf '  "version","%s","the line that says which version moved to which"\n' "$(state_of version)"
+    printf '  "patience","%s","the long-hour words before a slow install or build"\n' "$(state_of patience)"
+    printf '  "next","%s","the where-to-go-from-here block at the end"\n' "$(state_of next)"
+    printf '  "hints","%s","the one-line helpers that say how to hide a notice"\n' "$(state_of hints)"
+    printf 'store[1]{path}:\n  "%s"\n' "$STORE"
+    ;;
+  notice)
+    key="${2-}"; value="${3-}"
+    [ -n "$key" ] || { printf 'error: which notice?\nhelp: ymir config notice <version|patience|next|hints> off\n' >&2; exit 2; }
+    case " $KNOWN " in *" $key "*) ;; *) printf 'error: unknown notice %s\nhelp: one of: %s\n' "$key" "$KNOWN" >&2; exit 2 ;; esac
+    if [ -z "$value" ]; then
+      printf 'notices[1]{key,state}:\n  "%s","%s"\n' "$key" "$(state_of "$key")"
+    else
+      set_state "$key" "$value"
+      printf 'notices[1]{key,state}:\n  "%s","%s"\n' "$key" "$value"
+      [ "$value" = off ] && printf 'this notice will not be shown again — restore it with: ymir config notice %s on\n' "$key"
+    fi
+    ;;
+  *) printf 'error: unknown action %s\nhelp: bin/ymir-config.sh [show|notice <key> on|off]\n' "$1" >&2; exit 2 ;;
+esac

package/bin/ymir-install.sh

@@ -670,15 +670,15 @@ step_marks() {
     add marks OK "$n desktop app marks installed"
     return
   fi
-  "$SCRIPT_DIR/design-icon.sh" mint --all >/dev/null 2>&1 || true
-  n=$("$SCRIPT_DIR/design-icon.sh" install 2>/dev/null | grep -c '"ymir-') || n=0
-  # The launcher entries are the freedesktop half of desktop integration, and they
-  # belong to ANY Linux desktop — not only to Omarchy's window rules. A GNOME
-  # operator gets entries and icons and no window rules; before this, both halves
-  # sat behind the Omarchy gate and a packaged install placed nothing at all.
+  # The apps' own launcher templates land first (the freedesktop half of desktop
+  # integration, for ANY Linux desktop), and the rune marks are minted and
+  # installed over them — so the themed rune name wins for the surfaces that have
+  # one, instead of a template's absolute .png.
   if [ -x "$SCRIPT_DIR/desktop-place.sh" ]; then
     "$SCRIPT_DIR/desktop-place.sh" entries >/dev/null 2>&1 || true
   fi
+  "$SCRIPT_DIR/design-icon.sh" mint --all >/dev/null 2>&1 || true
+  n=$("$SCRIPT_DIR/design-icon.sh" install 2>/dev/null | grep -c '"ymir-') || n=0
   [ -r "$HOME/.pi/agent/AGENTS.md" ] || [ -d "$HOME/.pi/agent" ] && {
     ln -sfn "$ROOT/AGENTS.md" "$HOME/.pi/agent/AGENTS.md" 2>/dev/null || true
   }
@@ -727,10 +727,16 @@ step_desktop() {
     add desktop WARN "the Electron runtime is PARTIAL for:$partial — the web surfaces stand; approve and rebuild to launch the shells"
     return 0
   fi
-  if "$ROOT/scripts/electron.sh" start --both >/dev/null 2>&1; then
-    add desktop OK "raised Hlidskjalf + Smíðja"
+  # One window per surface that is here: the halls are not one app.
+  raised=0
+  for _v in hlidskjalf smidja odrerir; do
+    "$ROOT/scripts/electron.sh" start --view "$_v" >/dev/null 2>&1 && raised=$((raised+1))
+  done
+  [ -x "$ROOT/bin/sessrumnir.sh" ] && "$ROOT/bin/sessrumnir.sh" start >/dev/null 2>&1 && raised=$((raised+1))
+  if [ "$raised" -ge 2 ]; then
+    add desktop OK "raised $raised window(s) — Hlidskjalf · Smíðja · Óðrerir · Sessrúmnir"
   else
-    add desktop WARN "could not raise the desktop apps — run scripts/electron.sh start --both"
+    add desktop WARN "could not raise the desktop apps — ymir hlidskjalf | smidja | sessrumnir"
   fi
 }
 

package/bin/ymir-style.sh

@@ -38,6 +38,10 @@ style_init() {
   fi
   C_OFF=""
   [ "$STYLE_ON" = 1 ] && C_OFF=$'\033[0m'
+  # A sourced library must never end a function on a FAILING test: callers run
+  # under `set -e` (scripts/start.sh does), and the last command's status becomes
+  # the function's — so a caller raised the whole hall and died at the cloth.
+  return 0
 }
 
 # The forge's marks, one per state a thing can be in.
@@ -64,6 +68,23 @@ style_colour() {  # <state> → the colour for it
   esac
 }
 
+# --- preferences: a user must be able to say "not again", once --------------
+# The store is the operator's settings (see bin/ymir-config.sh); absent means on.
+notice_state() {  # <key> → on|off
+  local key="$1" store line
+  if [ -n "${YMIR_SETTINGS_DIR:-}" ]; then store="$YMIR_SETTINGS_DIR/notices.conf"
+  else store="${YMIR_HOME:-$HOME/Documents/Ymir}/config/notices.conf"; fi
+  [ -r "$store" ] || { printf 'on'; return 0; }
+  line="$(grep -m1 "^${key}=" "$store" 2>/dev/null || true)"
+  [ -n "$line" ] && printf '%s' "${line#*=}" || printf 'on'
+}
+notice_wanted() { [ "$(notice_state "${1-}")" != off ]; }
+notice_hint() {  # <key> — said once, and never when the hints are silenced
+  [ "$(notice_state hints)" = off ] && return 0
+  printf '%s
+' "${C_FAINT}      (not again: ymir config notice ${1-} off)${C_OFF}" >&2
+}
+
 # --- the pieces -------------------------------------------------------------
 
 # The mark: four lines at most. The WORDS show even in a pipe — only the colour
@@ -99,18 +120,21 @@ style_heading() { printf '\n%s%s%s\n' "$C_BRONZE" "$1" "$C_OFF" >&2; }
 # knows the halls are being set right waits; a user watching a silent cursor
 # wonders whether it has broken.
 style_patience() {  # [what is being set right]
+  notice_wanted patience || return 0
   local what="${1:-the halls are being set right}"
   printf '\n' >&2
   style_line DO "much moves" "$what"
   style_hint "      this hour is long, and nothing of yours is lost in it —"
   style_hint "      roots come home, shapes are re-cut, names are set true again."
   style_hint "      Your patience is noted, and it is earned."
+  notice_hint patience
   printf '\n' >&2
 }
 
 # The ending: what stands, then exactly what to type next. Every CLI deserves
 # to leave the operator with the next step and nothing else to guess.
 style_next() {  # one command per line, as "verb — what it does"
+  notice_wanted next || return 0
   printf '\n%s\n' "${C_BOLD}Where to go from here${C_OFF}" >&2
   while [ $# -gt 0 ]; do
     local cmd="${1%% — *}" what="${1#* — }"

package/bin/ymir.js

@@ -54,8 +54,20 @@ const bold = wrap('1');
 // cannot see what moved. We can: record the version we last ran, and say the
 // transition once, on the first run after an update.
 const STATE_DIR = process.env.YMIR_STATE_DIR || path.join(process.env.YMIR_HOME || path.join(require('node:os').homedir(), 'Documents', 'Ymir'), 'state');
+function noticeState(key) {
+  try {
+    const s = process.env.YMIR_SETTINGS_DIR
+      || path.join(process.env.YMIR_HOME || path.join(require('node:os').homedir(), 'Documents', 'Ymir'), 'config');
+    const f = path.join(s, 'notices.conf');
+    if (!fs.existsSync(f)) return 'on';
+    const line = fs.readFileSync(f, 'utf8').split('\n').find((l) => l.startsWith(key + '='));
+    return line ? line.slice(key.length + 1).trim() : 'on';
+  } catch { return 'on'; }
+}
+
 function versionNotice() {
   try {
+    if (noticeState('version') === 'off') return;
     const f = path.join(STATE_DIR, 'version');
     const seen = fs.existsSync(f) ? fs.readFileSync(f, 'utf8').trim() : '';
     if (seen === pkg.version) return;
@@ -64,7 +76,9 @@ function versionNotice() {
     if (!seen) return;                       // a first install has nothing to compare
     process.stderr.write(
       bone(`  the tree moved  `) + faint(`${seen} → `) + bronze(`${pkg.version}`) + '\n' +
-      faint(`  run \`ymir eir\` to see what stands, \`ymir raise\` to lift the hall\n\n`));
+      faint(`  run \`ymir eir\` to see what stands, \`ymir raise\` to lift the hall\n`) +
+      (noticeState('hints') === 'off' ? '' : faint(`      (not again: ymir config notice version off)\n`)) +
+      '\n');
   } catch { /* a version notice must never break a door */ }
 }
 
@@ -83,6 +97,7 @@ const DOORS = {
   hlidskjalf: { script: 'scripts/electron.sh',    about: "the high seat's window", args: ['start', '--view', 'hlidskjalf'] },
   sessrumnir: { script: 'scripts/electron.sh',    about: "the seat-hall's window", args: ['start', '--view', 'sessrumnir'] },
   mimir:      { script: 'bin/mimir.sh',           about: 'the memory well' },
+  config:     { script: 'bin/ymir-config.sh',     about: 'your preferences — which notices are shown (stay silent with `notice <key> off`)' },
   sense:      { script: 'bin/host-sense.sh',      about: 'what THIS machine is' },
   plan:       { script: 'bin/ymir-plan.sh',       about: 'what an install would do here — writes nothing' },
   migrate:    { script: 'bin/ymir-migrate.sh',    about: "heal this home's structure forward (Gr\u00f3a's mend)" },

package/midgard/README.md

@@ -0,0 +1,16 @@
+# MIDGARD — Shared Design Assets
+
+Cross-tenant assets that are **public by design**: the design system and the
+shared libraries any realm may pull.
+
+**What does NOT belong here.** Company knowledge — policies, vision, specs,
+client names, wiki pages. That is tenant data, scoped per company, and lives at
+`$YMIR_HOME/hodd/identity/companies/`. This repo is public; a company wiki in it
+would publish that company's internals.
+
+## Contents
+- `design-system/` — shared UI components, design tokens, icon set
+- `shared-packages/` — internal npm/cargo/python libraries (public)
+- `infrastructure/` — shared Terraform / Docker / Kubernetes configs
+- `github_org_repos/` — central repositories
+  - `shared-core-api/` — example shared repo (with `.yggdrasil/` worktrees)

package/midgard/design-system/ember.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Type declarations for the shared hearth (ember.js).
+ *
+ * The implementation is plain JS so any surface — React, Vue, Astro, or a bare
+ * page — can import the same fire. These types keep TypeScript consumers honest
+ * without forcing the module itself into a build step.
+ */
+
+/** Start the hearth on <host> (a canvas, or an element to receive one). Returns a stop function. */
+export function startEmbers(host: Element | null): () => void;
+
+/** Light every element marked `data-ember`. Returns one stop function per hearth. */
+export function startAllEmbers(root?: ParentNode): Array<() => void>;

package/midgard/design-system/ember.js

@@ -0,0 +1,183 @@
+/**
+ * ember.js — the hearth, in one place.
+ *
+ * The fire that warms Sessrúmnir's chat came from the landing page's hero
+ * (Ginnungagap): embers rising slowly with a gentle sway, over a few drifting
+ * haze pools. Sessrúmnir carries a React port; this is the framework-neutral
+ * original, so every surface can share one fire instead of four copies.
+ *
+ *   import { startEmbers } from '.../midgard/design-system/ember.js'
+ *   const stop = startEmbers(document.querySelector('[data-ember]'))
+ *
+ * Or simply mark an element and let it find its own:
+ *
+ *   <canvas data-ember></canvas>
+ *   <script type="module" src="/ember.js"></script>
+ *
+ * It is decorative: the canvas is given `pointer-events: none` and
+ * `aria-hidden`, and a reader who has asked their machine for less motion gets a
+ * still, single-frame hearth instead of an animation.
+ */
+
+const EMBERS = 30;
+const HAZE = 6;
+const EMBER_RGB = '236,166,84';
+const HAZE_RGB = '214,138,64';
+
+/** Draw one still frame — also the whole effect under reduced motion. */
+function paint(ctx, W, H, embers, haze) {
+  ctx.clearRect(0, 0, W, H);
+  for (const ha of haze) {
+    const g = ctx.createRadialGradient(ha.x, ha.y, 0, ha.x, ha.y, ha.r);
+    g.addColorStop(0, `rgba(${HAZE_RGB},0.030)`);
+    g.addColorStop(1, 'rgba(0,0,0,0)');
+    ctx.fillStyle = g;
+    ctx.beginPath();
+    ctx.arc(ha.x, ha.y, ha.r, 0, 6.283);
+    ctx.fill();
+  }
+  for (const e of embers) {
+    ctx.fillStyle = `rgba(${EMBER_RGB},${e.a.toFixed(3)})`;
+    ctx.beginPath();
+    ctx.arc(e.x, e.y, e.r, 0, 6.283);
+    ctx.fill();
+  }
+}
+
+function seed(W, H) {
+  const embers = [];
+  for (let i = 0; i < EMBERS; i++) {
+    embers.push({
+      x: Math.random() * W,
+      y: H + Math.random() * H * 0.3 - 6,
+      r: 1.0 + Math.random() * 1.6,
+      v: 0.14 + Math.random() * 0.34,
+      ph: Math.random() * 6.28,
+      sp: 0.6 + Math.random() * 1.4,
+      a: 0.26,
+    });
+  }
+  const haze = [];
+  for (let i = 0; i < HAZE; i++) {
+    haze.push({ x: Math.random() * W, y: H * 0.3 + Math.random() * H * 0.7, r: 130 + Math.random() * 170, v: (Math.random() - 0.5) * 0.15 });
+  }
+  return { embers, haze };
+}
+
+/**
+ * Start the hearth on <host>. Returns a stop function. Safe to call on a host
+ * that has no box yet (it simply draws nothing until it has one).
+ */
+export function startEmbers(host) {
+  if (!host) return () => {};
+  const canvas = host.tagName === 'CANVAS' ? host : document.createElement('canvas');
+  if (canvas !== host) {
+    canvas.style.position = 'absolute';
+    canvas.style.inset = '0';
+    host.appendChild(canvas);
+  }
+  canvas.setAttribute('aria-hidden', 'true');
+  canvas.style.pointerEvents = 'none';
+
+  const ctx = canvas.getContext('2d');
+  if (!ctx) return () => {};
+
+  const dpr = Math.min(window.devicePixelRatio || 1, 2);
+  let W = 0;
+  let H = 0;
+  let t = 0;
+  let raf = 0;
+  let { embers, haze } = seed(1, 1);
+
+  const reduced = window.matchMedia?.('(prefers-reduced-motion: reduce)').matches === true;
+
+  function size() {
+    const rect = canvas.getBoundingClientRect();
+    W = rect.width || canvas.clientWidth || 0;
+    H = rect.height || canvas.clientHeight || 0;
+    canvas.width = Math.max(1, W * dpr);
+    canvas.height = Math.max(1, H * dpr);
+    ctx.setTransform(dpr, 0, 0, dpr, 0, 0);
+  }
+
+  function reseed() {
+    ({ embers, haze } = seed(W, H));
+    if (reduced) {
+      for (const e of embers) e.a = 0.3 + 0.4 * Math.random();
+      paint(ctx, W, H, embers, haze);
+    }
+  }
+
+  function frame() {
+    t += 0.016;
+    for (const ha of haze) {
+      ha.x += ha.v;
+      if (ha.x < -ha.r) ha.x = W + ha.r;
+      if (ha.x > W + ha.r) ha.x = -ha.r;
+    }
+    for (const e of embers) {
+      e.y -= e.v;
+      e.x += Math.sin(t * e.sp + e.ph) * 0.18;
+      if (e.y < -6) {
+        e.y = H + 6;
+        e.x = Math.random() * W;
+      }
+      e.a = 0.26 + 0.4 * (0.5 + 0.5 * Math.sin(t * e.sp * 2 + e.ph));
+    }
+    paint(ctx, W, H, embers, haze);
+  }
+
+  function loop() {
+    frame();
+    raf = requestAnimationFrame(loop);
+  }
+
+  size();
+  reseed();
+  if (!reduced) raf = requestAnimationFrame(loop);
+
+  const onResize = () => {
+    size();
+    reseed();
+  };
+  window.addEventListener('resize', onResize);
+
+  // The hearth warms a *container*, and containers change without a window
+  // resize (a split pane, a toggled sidebar). Watch the host: re-size and
+  // re-seed only when its dimensions actually changed, never per-frame.
+  let ro = null;
+  if (typeof ResizeObserver !== 'undefined' && canvas.parentElement) {
+    const host = canvas.parentElement;
+    let lastW = 0;
+    let lastH = 0;
+    ro = new ResizeObserver((entries) => {
+      const e = entries[0];
+      if (!e) return;
+      const w = e.contentRect?.width ?? e.contentBoxSize?.[0]?.inlineSize ?? 0;
+      const h = e.contentRect?.height ?? e.contentBoxSize?.[0]?.blockSize ?? 0;
+      if (Math.abs(w - lastW) > 0.5 || Math.abs(h - lastH) > 0.5) {
+        lastW = w;
+        lastH = h;
+        onResize();
+      }
+    });
+    ro.observe(host);
+  }
+
+  return () => {
+    if (raf) cancelAnimationFrame(raf);
+    window.removeEventListener('resize', onResize);
+    if (ro) ro.disconnect();
+  };
+}
+
+/** Every element marked `data-ember` lights its own hearth. */
+export function startAllEmbers(root = document) {
+  return Array.from(root.querySelectorAll('[data-ember]')).map(startEmbers);
+}
+
+if (typeof document !== 'undefined') {
+  const boot = () => startAllEmbers();
+  if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', boot, { once: true });
+  else boot();
+}

package/midgard/design-system/icons/algiz.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Algiz — Reviews / protection">
+  <title>Algiz — Reviews / protection</title>
+  <path d="M12 20V10 M12 10L5 3 M12 10L19 3" />
+</svg>

package/midgard/design-system/icons/ansuz.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Ansuz — Forge">
+  <title>Ansuz — Forge</title>
+  <path d="M12 4V20 M12 9L7 4 M12 9L17 4" />
+</svg>

package/midgard/design-system/icons/berkana.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Berkanan — Profile">
+  <title>Berkanan — Profile</title>
+  <path d="M9 4V20 M9 4L17 8V14L9 18" />
+</svg>

package/midgard/design-system/icons/dagaz.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Dagaz — Processes">
+  <title>Dagaz — Processes</title>
+  <path d="M5 5L19 19 M19 5L5 19 M5 5V19 M19 5V19" />
+</svg>

package/midgard/design-system/icons/ehwaz.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Ehwaz — Runtime">
+  <title>Ehwaz — Runtime</title>
+  <path d="M4 20V8L12 14L20 8V20" />
+</svg>

package/midgard/design-system/icons/fehu.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Fehu — Fleet">
+  <title>Fehu — Fleet</title>
+  <path d="M12 20V4 M12 8L6 4 M12 8L18 4" />
+</svg>

package/midgard/design-system/icons/gjallarhorn.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Gjallarhorn — tunnel">
+  <title>Gjallarhorn — tunnel</title>
+  <path d="M6 5L18 19 M18 5L6 19" />
+</svg>

package/midgard/design-system/icons/gungnir.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Gungnir — skills">
+  <title>Gungnir — skills</title>
+  <path d="M7 20V4 M7 6L17 12L7 18" />
+</svg>

package/midgard/design-system/icons/heimdall.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Heimdall — auth">
+  <title>Heimdall — auth</title>
+  <path d="M7 4V20 M17 4V20 M7 12H17" />
+</svg>

package/midgard/design-system/icons/ingwaz.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Ingwaz — Well">
+  <title>Ingwaz — Well</title>
+  <path d="M12 4L20 12L12 20L4 12Z" />
+</svg>

package/midgard/design-system/icons/jera.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Jera — Cron">
+  <title>Jera — Cron</title>
+  <path d="M6 20L12 12L6 4 M18 4L12 12L18 20" />
+</svg>

package/midgard/design-system/icons/kaunan.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Kaunan — OmniChat">
+  <title>Kaunan — OmniChat</title>
+  <path d="M18 4L6 12L18 20" />
+</svg>

package/midgard/design-system/icons/midgard.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Midgard — shared">
+  <title>Midgard — shared</title>
+  <path d="M4 12H20 M12 4V20 M6 6L18 18 M18 6L6 18" />
+</svg>

package/midgard/design-system/icons/mimirsbrunn.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Mimirsbrunn — memory">
+  <title>Mimirsbrunn — memory</title>
+  <path d="M12 4L20 12L12 20L4 12Z" />
+</svg>

package/midgard/design-system/icons/othala.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Othala — inheritance, the hall">
+  <title>Othala — inheritance, the hall</title>
+  <path d="M12 4L19 9L12 14L5 9Z M9 12L7 20 M15 12L17 20" />
+</svg>

package/midgard/design-system/icons/raidho.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Raidho — Runes">
+  <title>Raidho — Runes</title>
+  <path d="M8 20V4H14L18 8L14 12H8 M14 12L18 20" />
+</svg>

package/midgard/design-system/icons/ratatoskr.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Ratatoskr — A2A bus">
+  <title>Ratatoskr — A2A bus</title>
+  <path d="M9 4V20 M9 4L17 8V14L9 18" />
+</svg>

package/midgard/design-system/icons/sowilo.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Sowilo — the sun">
+  <title>Sowilo — the sun</title>
+  <path d="M16 4L8 4L16 20L8 20" />
+</svg>

package/midgard/design-system/icons/tiwaz.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Tiwaz — Tasks">
+  <title>Tiwaz — Tasks</title>
+  <path d="M12 20V4 M12 4L6 11 M12 4L18 11" />
+</svg>

package/midgard/design-system/icons/utgard.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Utgard — sandbox">
+  <title>Utgard — sandbox</title>
+  <path d="M8 20V8C8 5 16 5 16 8V20" />
+</svg>

package/midgard/design-system/icons/valhalla.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Valhalla — processes">
+  <title>Valhalla — processes</title>
+  <path d="M7 20V4 M7 4L17 8L7 12" />
+</svg>

package/midgard/design-system/icons/yggdrasil.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="square" stroke-linejoin="miter" role="img" aria-label="Yggdrasil — worktrees">
+  <title>Yggdrasil — worktrees</title>
+  <path d="M6 20L12 12L6 4 M18 4L12 12L18 20" />
+</svg>

package/midgard/design-system/icons.md

@@ -0,0 +1,59 @@
+# Rune-Glyph Icon Map
+
+**Runecoded, not emoji.** Every icon in Ymir is an Elder Futhark rune drawn as a
+24px stroke glyph, colored by `currentColor`. Emoji are never used as icons.
+
+## Set
+
+The glyphs live in `midgard/design-system/icons/*.svg` (24×24 viewBox; render at
+16px or 24px). Stroke uses `currentColor`, square caps, miter joins — the chisel
+bevel. The primary seat may add a 1px inner bevel via the `--ymir-bevel` token.
+
+```
+icons[21]{glyph,name,unicode,figure,used_for}:
+  "fehu","Fehu","ᚠ","Ymir (cattle/wealth)","Fleet — the herd of agents"
+  "tiwaz","Tiwaz","ᛏ","Týr (justice)","Tasks — the A2A lifecycle board"
+  "ingwaz","Ingwaz","ᛜ","Ing (the well)","Well — Mimirsbrunn recall"
+  "raidho","Raidho","ᚱ","ride/journey","Runes — the ledger (a road carved)"
+  "othala","Othala","ᛟ","inheritance, the hall","Sessrúmnir — the seat that holds the cloth"
+  "algiz","Algiz","ᛉ","protection","Reviews / Glitnir — the protective gate; the Ymir emblem"
+  "dagaz","Dagaz","ᛞ","day/dawn","Processes — Valhalla supervision"
+  "sowilo","Sowilo","ᛊ","sun","Files — Skrymir (light on the tree)"
+  "kaunan","Kaunan","ᚴ","torch","OmniChat — Kaia's flame"
+  "ansuz","Ansuz","ᚨ","Odin's breath","Óðrerir — the mead of poetry, the Live Hall"
+  "ehwaz","Ehwaz","ᛖ","horse/journey","Runtime — the seat and its transit"
+  "jera","Jera","ᛃ","year/harvest","Cron — the Nornir's seasons"
+  "berkana","Berkanan","ᛒ","birch","Profile — the self"
+  "midgard","Midgard","—","the shared world","shared workspace / cross-tenant assets"
+  "utgard","Utgard","ᚢ","the outer realm","Utgard — the sandbox barrier"
+  "yggdrasil","Yggdrasil","ᛃ","the world-tree","Yggdrasil — worktrees"
+  "ratatoskr","Ratatoskr","ᛒ","the squirrel","Ratatoskr — the A2A bus"
+  "mimirsbrunn","Mimirsbrunn","ᛜ","the well of wisdom","Mimirsbrunn — memory"
+  "valhalla","Wunjo","ᚹ","joy","Valhalla — process health (the glyph ᚹ is drawn here)"
+  "gungnir","Gungnir","ᚦ","Odin's spear","Gungnir — skill synthesis"
+  "heimdall","Heimdall","ᚺ","the watchman","Heimdall — auth / the gate"
+  "gjallarhorn","Gjallarhorn","ᚷ","the horn","Gjallarhorn — the tunnel and its call"
+```
+
+## Usage
+
+- Reference a glyph as an inline `<svg>` (copy the path) or `<img src>`; stroke
+  with `currentColor`, never a raw hex.
+- Render at **24px** in panels, **16px** inline in tables and chips.
+- A status glyph is always paired with **glyph + colour + text** — never
+  colour-only state.
+- The active realm/accent may tint glyphs via `--realm-tint`.
+
+## Verification
+
+```bash
+ls midgard/design-system/icons/*.svg | wc -l      # 21
+# no emoji used as icons in the UI:
+rg -n "[\x{1F300}-\x{1FAFF}\x{2600}-\x{27BF}]" apps/hlidskjalf/src || echo "no emoji icons"
+```
+
+## Maintaining this
+
+- **Owner:** Brokk. **Tokens:** `midgard/design-system/tokens.css`.
+- Add a rune here and its glyph in `icons/` in the same pass; keep the count in the
+  `icons[N]` block true (Galdr TOON check: `.agents/skills/galdr-ymirsystem/scripts/toon-check.py`).

package/midgard/design-system/runes.md

@@ -0,0 +1,78 @@
+# The Rune Library
+
+**Runecoded, not emoji.** Every icon in Ymir is an Elder Futhark rune drawn as a
+24×24 stroke glyph, coloured by `currentColor` (or the app's house tint). This is
+the library: the full futhark, what each rune means, and where Ymir uses it.
+
+- **Glyphs:** `midgard/design-system/icons/*.svg` (24×24 viewBox, stroke 1.8,
+  square caps, miter joins — the chisel bevel).
+- **Names in code:** the file name is the rune's name, lower-case (`ehwaz.svg`).
+- **Usage rules:** inline `<svg>` or `<img src>`; stroke with `currentColor`,
+  never a raw hex; 24px in panels, 16px inline; a status glyph is always paired
+  with **glyph + colour + text**, never colour alone.
+- **The app runes:** five UI surfaces, five different glyphs — see the foot.
+
+## The futhark
+
+```
+runes[24]{glyph,name,sound,meaning,ymir_use,file}:
+  "ᚠ","Fehu","f","cattle, wealth","Fleet — the herd of agents","fehu"
+  "ᚢ","Uruz","u","aurochs, strength","Utgard — the sandbox barrier","utgard"
+  "ᚦ","Thurisaz","th","thorn, giant","Gungnir — skill synthesis","gungnir"
+  "ᚨ","Ansuz","a","Odin's breath","Óðrerir — the mead of poetry, the Live Hall","ansuz"
+  "ᚱ","Raido","r","ride, journey","Runes — the ledger (a road carved)","raidho"
+  "ᚲ","Kaunan","k","torch, ulcer","Smíðja's eye — the trace of the forge, OmniChat's flame","kaunan"
+  "ᚷ","Gebo","g","gift","Gjallarhorn — the tunnel and its call","gjallarhorn"
+  "ᚹ","Wunjo","w","joy","Valhalla — the hall of the supervisor","valhalla"
+  "ᚺ","Hagall","h","hail","Heimdall — auth, the gate","heimdall"
+  "ᚾ","Naudiz","n","need, constraint","(no glyph yet)","—"
+  "ᛁ","Isaz","i","ice","(no glyph yet)","—"
+  "ᛃ","Jera","j","year, harvest","Nornir — the seasons; Yggdrasil — the world-tree's cycle","jera"
+  "ᛇ","Eihwaz","ï","yew","(no glyph yet)","—"
+  "ᛈ","Perthro","p","lot, fate","(no glyph yet)","—"
+  "ᛉ","Algiz","z","protection","Glitnir's reviews — the protective gate; **the Ymir emblem**","algiz"
+  "ᛊ","Sowilo","s","sun","Skrymir — files (light on the tree)","sowilo"
+  "ᛏ","Tiwaz","t","Týr, justice","Tasks — the A2A lifecycle board","tiwaz"
+  "ᛒ","Berkanan","b","birch","Profile — the self; Ratatoskr — the messenger","berkana"
+  "ᛖ","Ehwaz","e","horse","Runtime — the seat and its transit; Hlidskjalf","ehwaz"
+  "ᛗ","Mannaz","m","man, self","(no glyph yet)","—"
+  "ᛚ","Laguz","l","water, flow","(no glyph yet)","—"
+  "ᛜ","Ingwaz","ng","Ing, the seed","Mimirsbrunn — the well of wisdom","ingwaz"
+  "ᛞ","Dagaz","d","day, dawn","Valhalla — process health","dagaz"
+  "ᛟ","Othala","o","inheritance, estate","(no glyph yet)","—"
+```
+
+**Twenty-one of the twenty-four are drawn; three are not yet:** Naudiz, Isaz,
+Eihwaz, Perthro, Mannaz, Laguz and Othala have no file — add the glyph and its
+row in `icons.md` in the same pass.
+
+**Every file is a rune.** It was not always so: eight files used to be *drawings*
+of the thing they were named after (a hall, a horn, a shield, a spear, a well, a
+squirrel, a gate, a world-tree) while `icons.md` claimed a rune for each. Corrected
+2026-09-16 — Gungnir took Thurisaz, since Gebo was already Gjallarhorn's.
+
+## The app runes
+
+Five UI surfaces, five different glyphs — no app borrows another's rune:
+
+```
+app_runes[5]{app,glyph,rune,house_tint}:
+  "Hlidskjalf","ᛖ","ehwaz — the seat","#c9973f bronze (ymirlabs)"
+  "Hlidskjalf Mobile","ᚱ","raidho — the road, the seat carried","#c9973f bronze"
+  "Óðrerir","ᚨ","ansuz — Odin's breath, the mead of poetry","#c9973f bronze (ymirlabs)"
+  "Sessrúmnir","ᛟ","othala — inheritance, the hall that holds what is kept","#c9973f bronze (ymirlabs)"
+  "Smíðja (visualizer)","ᚲ","kaunan — the torch, the forge's eye","#f59e0b amber (brokkforge)"
+```
+
+Minted and installed by `bin/design-icon.sh` (`list` · `mint --all` · `install`):
+the icon into the user's icon theme, the `.desktop` entry into their applications
+dir, so every app is dockable and carries the house mark.
+
+## Adding a rune
+
+1. Draw it in `icons/<name>.svg` — 24×24, stroke 1.8, square caps, miter joins,
+   `stroke="currentColor"`, a `<title>` naming the rune and its use.
+2. Add its row to `icons.md` **and** to the futhark table above, in the same
+   change. Keep both counts true (the TOON check counts rows).
+3. If an app should wear it, add the app to `bin/design-icon.sh`'s table and run
+   `mint --all && install`.

package/midgard/design-system/tokens.css

@@ -0,0 +1,109 @@
+/* ============================================================
+   YMIR — Design Tokens · Canonical (the carved cloth of the halls)
+   Source of truth: docs/design.md §4.
+   The cloth is cut from the landing page (CodeP/ymir-homepage/src/lore.html
+   :root): stone and bone, bronze and blood, and the three faces Cormorant /
+   Newsreader / IBM Plex Mono. The landing is the reference — a token change
+   here re-themes every hall (Hlidskjalf, Smíðja, and the seat).
+   House accents are heraldry, not chrome: they stay, exactly as the landing
+   keeps its house seals.
+   Consume via CSS variables — never hardcode hex in components.
+   ============================================================ */
+
+:root {
+  /* --- Canvas: the stone ------------------------------- */
+  --ymir-bg-0: #0e0c09; /* stone — the ground */
+  --ymir-bg-1: #151209; /* panel */
+  --ymir-bg-2: #1a1610; /* panel2 — elevated surface, cards */
+  --ymir-bg-3: #221d14; /* line-soft — hover, wells */
+
+  /* --- Accents: the bronze light of the forge ---------- */
+  --ymir-cyan-1: #c9973f; /* bronze — primary accent, active states, focus, links */
+  --ymir-cyan-2: #7d5f2a; /* bronze-deep — hover/darker accent */
+  --ymir-violet-1: #96a0a8; /* steel — realm identity, secondary accent */
+  --ymir-violet-2: #5f686e; /* steel-dim */
+
+  /* --- Structure: bone and brass ----------------------- */
+  --ymir-steel-1: #2b241a; /* line — borders, bevel exteriors */
+  --ymir-steel-2: #7d5f2a; /* bronze-deep — stronger rules, dividers */
+  --ymir-steel-3: #9a8f75; /* bone-dim — secondary text, muted glyphs */
+  --ymir-chisel: #c9973f; /* bronze — the lit chisel edge (emblem, focus) */
+
+  /* --- Semantics: state of the forge ------------------- */
+  --ymir-ok: #96a0a8; /* steel — the metal proved true */
+  --ymir-warn: #c9973f; /* bronze — hot, heed it */
+  --ymir-danger: #c2584a; /* blood-lit — the wound */
+  --ymir-info: #9a8f75; /* bone-dim — the note */
+  --ymir-ok-dim: rgba(150, 160, 168, 0.15);
+  --ymir-warn-dim: rgba(201, 151, 79, 0.15);
+  --ymir-danger-dim: rgba(194, 88, 74, 0.15);
+  --ymir-info-dim: rgba(154, 143, 117, 0.15);
+
+  /* --- Text on stone ----------------------------------- */
+  --ymir-text-0: #cfc3a9; /* bone — primary text */
+  --ymir-text-1: rgba(207, 195, 169, 0.82); /* bone, blunted — secondary text */
+  --ymir-text-2: #9a8f75; /* bone-dim — tertiary, disabled */
+  --ymir-text-3: #6b6250; /* bone-faint — placeholder */
+
+  /* --- House accents (structural only, never chrome) ---------- */
+  --ymir-house-ymirlabs: #c9973f; /* bronze — the platform's own house wears the forge accent (was blue) */
+  --ymir-house-brokkforge: #f59e0b;
+  --ymir-house-runestone: #f43f5e;
+  --ymir-house-muninn: #8b5cf6;
+  --ymir-house-dvalin: #94a3b8;
+  --ymir-house-utgard: #d946ef;
+  --ymir-house-askr: #34d399;
+  --ymir-house-mannheim: #64748b;
+
+  /* --- Type: the cloth's three faces --------------------------- */
+  /* Runic glyphs fall through to Noto Sans Runic inside every stack, so a rune
+     renders in the rune family wherever it is written. */
+  --ymir-font-head: 'Cormorant', 'Noto Sans Runic', Georgia, serif;
+  --ymir-font-mono: 'IBM Plex Mono', 'Noto Sans Runic', ui-monospace, 'Cascadia Mono', monospace;
+  --ymir-font-body: 'Newsreader', Georgia, 'Noto Sans Runic', serif;
+
+  --ymir-s-mono-s: 12px / 16px;
+  --ymir-s-mono-m: 14px / 20px;
+  --ymir-s-mono-l: 18px / 24px;
+  --ymir-s-display: clamp(28px, 4vw, 44px) / 1.1;
+  --ymir-s-body: 15px / 22px;
+  --ymir-s-caption: 13px / 18px;
+
+  /* --- Space & structure ----------------------------------------- */
+  --ymir-space-1: 4px;
+  --ymir-space-2: 8px;
+  --ymir-space-3: 12px;
+  --ymir-space-4: 16px;
+  --ymir-space-5: 24px;
+  --ymir-space-6: 32px;
+  --ymir-space-7: 48px;
+
+  --ymir-radius: 8px;
+  --ymir-radius-panel: 12px;
+  --ymir-border: 1px solid var(--ymir-steel-1);
+
+  /* Bevel: sell the carved edge — a brass hairline inside the stone */
+  --ymir-bevel: inset 0 0 0 1px rgba(201, 151, 79, 0.12);
+  --ymir-shadow-panel: 0 1px 2px rgba(0, 0, 0, 0.5);
+  --ymir-shadow-raise: 0 8px 24px rgba(0, 0, 0, 0.55);
+
+  /* --- Motion ------------------------------------------------------- */
+  --ymir-dur-fast: 120ms;
+  --ymir-dur-task: 180ms;
+  --ymir-dur-hop: 220ms;
+  --ymir-dur-roll: 240ms;
+  --ymir-ease: cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+/* Numeric safety for all telemetry */
+.tabular { font-variant-numeric: tabular-nums; font-family: var(--ymir-font-mono); }
+
+/* Status chips: color + rune + label — never color alone */
+.status-ok    { color: var(--ymir-ok);    background: var(--ymir-ok-dim); }
+.status-warn  { color: var(--ymir-warn);  background: var(--ymir-warn-dim); }
+.status-danger{ color: var(--ymir-danger); background: var(--ymir-danger-dim); }
+.status-info  { color: var(--ymir-info);  background: var(--ymir-info-dim); }
+
+@media (prefers-reduced-motion: reduce) {
+  * { transition-duration: 120ms !important; animation-duration: 120ms !important; }
+}

package/midgard/design-system/ymir-mark.svg

@@ -0,0 +1,62 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" width="100%" height="100%">
+  <defs>
+    <!-- Background Dark Steel Gradient -->
+    <linearGradient id="bg-grad" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="#0f172a" />
+      <stop offset="100%" stop-color="#020617" />
+    </linearGradient>
+
+    <!-- Base Metal Color for the Rune -->
+    <linearGradient id="metal-base" x1="0%" y1="0%" x2="0%" y2="100%">
+      <stop offset="0%" stop-color="#38bdf8" />
+      <stop offset="50%" stop-color="#475569" />
+      <stop offset="100%" stop-color="#1e293b" />
+    </linearGradient>
+
+    <!-- Advanced 3D Forge Filter -->
+    <filter id="heavy-metal-3d" x="-20%" y="-20%" width="140%" height="140%">
+      <!-- 1. Generate Hammered Iron Texture -->
+      <feTurbulence type="fractalNoise" baseFrequency="0.04" numOctaves="4" result="noise" />
+      <feColorMatrix type="matrix" values="1 0 0 0 0  0 1 0 0 0  0 0 1 0 0  0 0 0 0.15 0" in="noise" result="coloredNoise" />
+
+      <!-- 2. Blend Texture with Base Color -->
+      <feComposite operator="in" in="coloredNoise" in2="SourceGraphic" result="textured" />
+      <feBlend mode="multiply" in="textured" in2="SourceGraphic" result="baseTex" />
+
+      <!-- 3. Create 3D Bevel / Depth Map -->
+      <feGaussianBlur in="SourceAlpha" stdDeviation="4" result="blur" />
+
+      <!-- 4. Apply 3D Lighting (Cyan/Blue Specular Highlight) -->
+      <feSpecularLighting in="blur" surfaceScale="6" specularConstant="1.2" specularExponent="25" lighting-color="#bae6fd" result="specOut">
+        <!-- Light Source Positioned Top-Left -->
+        <fePointLight x="-100" y="-100" z="300" />
+      </feSpecularLighting>
+
+      <!-- 5. Mask Lighting to the Shape -->
+      <feComposite operator="in" in="specOut" in2="SourceAlpha" result="specularMasked" />
+
+      <!-- 6. Combine Lighting and Textured Base -->
+      <feComposite operator="arithmetic" k1="0" k2="1" k3="1" k4="0" in="specularMasked" in2="baseTex" result="litModel" />
+
+      <!-- 7. Heavy Drop Shadow for Canvas Depth -->
+      <feDropShadow in="litModel" dx="0" dy="16" stdDeviation="12" flood-opacity="0.85" flood-color="#000000" result="finalShadow" />
+    </filter>
+  </defs>
+
+  <!-- Canvas -->
+  <rect width="512" height="512" rx="40" fill="url(#bg-grad)" stroke="#1e293b" stroke-width="4"/>
+
+  <!-- Master Group with 3D Rendering Filter Applied -->
+  <g filter="url(#heavy-metal-3d)" fill="url(#metal-base)">
+
+    <!-- Algiz Y-Stem (Solid Geometric Polygon) -->
+    <polygon points="120,100 168,100 256,188 344,100 392,100 276,216 276,340 236,340 236,216" />
+
+    <!-- Top Anvil Bar -->
+    <polygon points="100,340 412,340 400,388 112,388" />
+
+    <!-- Bottom Anvil Bar (Slightly narrower base) -->
+    <polygon points="132,408 380,408 368,440 144,440" />
+
+  </g>
+</svg>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zerwiz/ymir",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "Ymir \u2014 the single-tenant agent operating system. Omarchy-first, host-aware, self-healing.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/zerwiz/ymir",
@@ -30,6 +30,7 @@
     ".agents/",
     "scripts/",
     "RULES/",
+    "midgard/design-system/",
     "docs/",
     "packaging/",
     "AGENTS.md",

package/scripts/electron.sh

@@ -184,9 +184,25 @@ ensure_electron_binary() {
   return 1
 }
 
+# npm gates install scripts by default (11.16+ warns, 12 refuses), and Electron's
+# postinstall is what downloads the runtime — so a fresh install can build the web
+# app perfectly and still have no window. Before refusing, do the mending a user
+# would otherwise be told to do by hand: approve the script and rebuild.
+repair_electron() {  # <app-dir>
+  local dir="$1"
+  command -v npm >/dev/null 2>&1 || return 1
+  ( cd "$dir" && npm install-scripts approve electron >/dev/null 2>&1 || true
+    cd "$dir" && npm rebuild electron >/dev/null 2>&1 )
+}
 if ! ensure_electron_binary; then
-  printf 'error: the Electron binary is missing (the package installed but its postinstall was blocked)\nhelp: cd apps/hlidskjalf && node node_modules/electron/install.js\nhelp: if npm blocks install scripts, run: npm install --foreground-scripts\n' >&2
-  exit 1
+  # Try the mending ourselves before telling the user to do it by hand: npm's
+  # gating is the cause, and the cure is one command we can run.
+  echo "the Electron runtime is partial — mending it (npm rebuild electron)…" >&2
+  repair_electron "$APP" >/dev/null 2>&1 || true
+  ensure_electron_binary || {
+    printf 'error: the Electron runtime could not be mended\nhelp: cd <the app> && npm install-scripts approve electron && npm rebuild electron\nhelp: or run the web surfaces only: ymir install --no-desktop\n' >&2
+    exit 1
+  }
 fi
 
 app_dir() { case "$1" in odrerir) printf '%s' "$Odrerir_app" ;; *) printf '%s' "$APP" ;; esac; }

package/scripts/start.sh

@@ -98,7 +98,21 @@ fi
 if [[ ! -d "$APP/node_modules" ]]; then
   style_patience "the seat's own dependencies are being fetched, then the hall is raised"
 echo "Installing dependencies…"
-  (cd "$APP" && npm install --no-audit --no-fund)
+  (# Sessrúmnir — the seat-hall. Its own Electron app (not a browser surface), so it
+# rises here rather than with the SPA: four surfaces, one raise.
+if [ -x "$ROOT/bin/sessrumnir.sh" ]; then
+  if app_dir sessrumnir APP_SESSRUMNIR; then
+    if "$ROOT/bin/sessrumnir.sh" start >/dev/null 2>&1; then
+      echo "Sessrúmnir — the seat-hall raised → (its own window)"
+    else
+      echo "Sessrúmnir — the seat-hall did not rise (run: bin/sessrumnir.sh start)" >&2
+    fi
+  else
+    echo "Sessrúmnir — skipped (the sessrumnir surface is not present)" >&2
+  fi
+fi
+
+cd "$APP" && npm install --no-audit --no-fund)
 fi
 
 # NOTE: when the SPA is already up we still raise the API and the services
@@ -201,15 +215,45 @@ app_dir odrerir HALL_DIR || HALL_DIR=""
 HALL_PORT="${ODRERIR_PORT:-4322}"
 HALL_PID_FILE="$RUN/odrerir.pid"
 HALL_LOG="$RUN/odrerir.log"
-if [ -d "$HALL_DIR" ]; then
-  [ -d "$HALL_DIR/node_modules" ] || (cd "$HALL_DIR" && npm install --no-audit --no-fund >/dev/null 2>&1 || true)
+if [ -d "$HALL_DIR" ] && [ -n "$HALL_DIR" ]; then
+  # Its dependencies are not optional and their absence is not silent: an Astro
+  # dev server without them dies with MODULE_NOT_FOUND while the raise claims it
+  # was "raised" — the failure the truth-telling above exists to prevent.
+  if [ ! -d "$HALL_DIR/node_modules" ]; then
+    echo "Óðrerir — fetching its dependencies…"
+    if ! (cd "$HALL_DIR" && npm install --no-audit --no-fund >/dev/null 2>&1); then
+      echo "Óðrerir — Live Hall NOT raised: its dependencies could not be installed" >&2
+      echo "help: (cd ${HALL_DIR#"$ROOT"/} && npm install)" >&2
+      HALL_DIR=""
+    fi
+  fi
+fi
+if [ -n "$HALL_DIR" ] && [ -d "$HALL_DIR" ]; then
   if [ -f "$HALL_PID_FILE" ] && kill -0 "$(cat "$HALL_PID_FILE")" 2>/dev/null; then
     echo "Óðrerir — Live Hall already running (pid $(cat "$HALL_PID_FILE")) → http://127.0.0.1:${HALL_PORT}/"
   else
-    ymir_detach bash -c "cd '$HALL_DIR' && exec npm run dev -- --port '$HALL_PORT' --host" >"$HALL_LOG" 2>&1
+    # A packaged app ships a BUILD (odrerir's tarball carries dist/, and its dev
+    # command calls a script the tarball does not carry — so `npm run dev` could
+    # never work from a package). Serve the build where there is one; develop
+    # where there is not.
+    if [ -d "$HALL_DIR/dist" ]; then
+      ymir_detach bash -c "cd '$HALL_DIR' && exec npx --no-install astro preview --port '$HALL_PORT' --host" >"$HALL_LOG" 2>&1
+    else
+      ymir_detach bash -c "cd '$HALL_DIR' && exec npm run dev -- --port '$HALL_PORT' --host" >"$HALL_LOG" 2>&1
+    fi
     echo $! > "$HALL_PID_FILE"
-    for _ in $(seq 1 30); do curl -s -o /dev/null "http://127.0.0.1:${HALL_PORT}/" && break; sleep 0.5; done
-    echo "Óðrerir — Live Hall raised (pid $(cat "$HALL_PID_FILE")) → http://127.0.0.1:${HALL_PORT}/"
+    _hall_up=0
+    for _ in $(seq 1 40); do
+      curl -s -o /dev/null "http://127.0.0.1:${HALL_PORT}/" && { _hall_up=1; break; }
+      kill -0 "$(cat "$HALL_PID_FILE")" 2>/dev/null || break
+      sleep 0.5
+    done
+    if [ "$_hall_up" = 1 ]; then
+      echo "Óðrerir — Live Hall raised (pid $(cat "$HALL_PID_FILE")) → http://127.0.0.1:${HALL_PORT}/"
+    else
+      echo "Óðrerir — Live Hall started (pid $(cat "$HALL_PID_FILE")) but :${HALL_PORT} did not answer — see $HALL_LOG" >&2
+      tail -5 "$HALL_LOG" >&2 2>/dev/null || true
+    fi
   fi
 else
   echo "Óðrerir — Live Hall skipped (the odrerir surface is not present)." >&2