segreant 0.1.0 → 0.2.0

package/dist/dashboard/web/app/core/registry.js

@@ -17,12 +17,12 @@
  */
 export const TERRITORIES = [
     { id: 'spend', label: 'Spend', plain: 'What AI is costing you, and where it went.', icon: 'meter' },
-    { id: 'control', label: 'Control', plain: 'Budgets and alerts, so nothing surprises you.', icon: 'shield' },
-    { id: 'allocation', label: 'Allocation', plain: 'Whose cost this is — projects and cost centres.', icon: 'split' },
-    { id: 'evidence', label: 'Evidence', plain: 'Whether the numbers hold up against the provider bill.', icon: 'seal' },
+    { id: 'control', label: 'Protect', plain: 'Budgets and alerts, so nothing surprises you.', icon: 'shield' },
+    { id: 'allocation', label: 'Allocate', plain: 'Whose cost this is — projects and cost centres.', icon: 'split' },
+    { id: 'evidence', label: 'Close', plain: 'Whether the numbers hold up against the provider bill.', icon: 'seal' },
     { id: 'value', label: 'Value', plain: 'What the spend produced, with the limits stated.', icon: 'yield' },
     { id: 'data', label: 'Data', plain: 'Getting your usage in, from tools and providers.', icon: 'inflow' },
-    { id: 'system', label: 'System', plain: 'Pricing, settings, maintenance, and this table.', icon: 'gear' },
+    { id: 'system', label: 'Settings', plain: 'Pricing, settings, maintenance, and this table.', icon: 'gear' },
 ];
 export const CAPABILITIES = [
     // ---- Spend --------------------------------------------------------------
@@ -32,37 +32,64 @@ export const CAPABILITIES = [
         guiEvidence: { file: 'core/api.ts', token: "{ id: '7d', label: '7 days'", note: 'the spend range picker; the Spend view reads the same overview for the same window' },
     },
     {
-        id: 'month', label: 'This month', plain: 'The current month of spend.', territory: 'spend', consequence: 'read', coverage: 'partial', command: 'segreant month',
-        guiEvidence: { file: 'core/api.ts', token: "{ id: '30d', label: '30 days'", note: 'the picker offers the last 30 days, not the calendar month the command reports; partial, not full' },
+        id: 'month', label: 'Last 30 days', plain: 'Spend over the last 30 days, rolling. The Statement shows a calendar month.', territory: 'spend', consequence: 'read', coverage: 'full', command: 'segreant month',
+        guiEvidence: { file: 'core/api.ts', token: "{ id: '30d', label: '30 days'", note: 'the spend range picker; `segreant month` is the same rolling 30 days, and the Spend view reads the same overview for that window' },
     },
-    { id: 'usage', label: 'Usage detail', plain: 'Requests and tokens broken down.', territory: 'spend', consequence: 'read', coverage: 'full', command: 'segreant usage' },
-    { id: 'report', label: 'Period report', plain: 'A summary you can hand to someone.', territory: 'spend', consequence: 'read', coverage: 'partial', command: 'segreant report' },
-    { id: 'export', label: 'Export CSV', plain: 'Download the ledger as a spreadsheet.', territory: 'spend', consequence: 'read', coverage: 'full', command: 'segreant export' },
+    { id: 'usage', label: 'Chat and research value', plain: 'What chat and research sessions produced, from the outcomes you reported. No code needed.', territory: 'spend', consequence: 'read', coverage: 'full', command: 'segreant usage' },
+    // Was listed as "Period report: a summary you can hand to someone". The command records an
+    // outcome signal; the month summary is the Statement page.
+    { id: 'report', label: 'Report an outcome by hand', plain: 'Mark a commit or session as tested, merged, shipped or redone, so realized value can count it.', territory: 'value', consequence: 'local', coverage: 'planned', command: 'segreant report --kind <kind>' },
+    { id: 'export', label: 'Export CSV', plain: 'Download the last 30 days of requests as CSV; --all for everything.', territory: 'spend', consequence: 'read', coverage: 'full', command: 'segreant export' },
+    { id: 'quota', label: 'Quota', plain: "The vendors' usage meters, the pace to their reset, and whether they match what Segreant counted.", territory: 'spend', consequence: 'read', coverage: 'planned', command: 'segreant quota' },
+    { id: 'statusline', label: 'Claude status line', plain: "Records Claude Code's live usage meter from its status line.", territory: 'spend', consequence: 'local', coverage: 'planned', command: 'segreant statusline' },
+    { id: 'home', label: 'Home', plain: 'The last 30 days, your plans, and how much of the AI work stayed in the code.', territory: 'spend', consequence: 'read', coverage: 'planned', command: 'segreant home' },
+    { id: 'plan', label: 'Plans', plain: 'Which plan each tool is on, the monthly price you entered, and the list-price work it did.', territory: 'spend', consequence: 'local', coverage: 'planned', command: 'segreant plan' },
     // ---- Control ------------------------------------------------------------
     { id: 'budget', label: 'Budgets', plain: 'Set a spending cap and see how close you are.', territory: 'control', consequence: 'local', coverage: 'full', command: 'segreant budget' },
-    { id: 'budget-recommend', label: 'Suggest a budget', plain: 'Propose a cap from your actual history.', territory: 'control', consequence: 'read', coverage: 'partial', command: 'segreant budget --recommend' },
-    { id: 'alerts', label: 'Alerts', plain: 'Get told before a cap is hit, not after.', territory: 'control', consequence: 'local', coverage: 'partial', command: 'segreant alerts' },
-    { id: 'exec', label: 'Run under a cap', plain: 'Run a command with a hard spending limit around it.', territory: 'control', consequence: 'local', coverage: 'planned', command: 'segreant exec -- <command>' },
-    { id: 'launch', label: 'Start a tool metered', plain: 'Start an AI tool pointed at Segreant, only while Segreant is running.', territory: 'control', consequence: 'local', coverage: 'planned', command: 'segreant launch -- <command>' },
+    { id: 'budget-recommend', label: 'Suggest a budget', plain: 'Propose a daily cap from your history. With --apply it writes the cap to your config.', territory: 'control', consequence: 'read', coverage: 'partial', command: 'segreant budget --recommend' },
+    { id: 'alerts', label: 'Alerts', plain: 'Alerts as spend nears a cap. With --notify they are also posted to a webhook you set.', territory: 'control', consequence: 'local', coverage: 'partial', command: 'segreant alerts' },
+    { id: 'exec', label: 'Record a test run', plain: 'Run a command, such as your tests, and record whether it passed for that commit or session. It sets no spending limit.', territory: 'control', consequence: 'local', coverage: 'planned', command: 'segreant exec -- <command>' },
+    { id: 'launch', label: 'Start a tool metered', plain: 'Start an AI tool pointed at Segreant. If Segreant is down, it refuses when a cap is set and runs unmetered otherwise, and says so.', territory: 'control', consequence: 'local', coverage: 'planned', command: 'segreant launch -- <command>' },
     // ---- Allocation ---------------------------------------------------------
     { id: 'project', label: 'Projects', plain: 'Which project each request belongs to, and how we know.', territory: 'allocation', consequence: 'read', coverage: 'full', command: 'segreant project --coverage' },
     { id: 'project-alias', label: 'Merge project names', plain: 'Treat two names as the same project.', territory: 'allocation', consequence: 'local', coverage: 'planned', command: 'segreant project alias' },
-    { id: 'alloc-centres', label: 'Cost centres', plain: 'The teams or budgets that carry the cost.', territory: 'allocation', consequence: 'local', coverage: 'partial', command: 'segreant alloc centre' },
-    { id: 'alloc-rules', label: 'Allocation rules', plain: 'How spend is split across cost centres.', territory: 'allocation', consequence: 'local', coverage: 'partial', command: 'segreant alloc rule' },
-    { id: 'alloc-run', label: 'Run an allocation', plain: 'Apply the rules to a period and record the result.', territory: 'allocation', consequence: 'local', coverage: 'partial', command: 'segreant alloc run --apply' },
+    {
+        id: 'alloc-centres', label: 'Cost centres', plain: 'The teams or budgets that carry the cost.', territory: 'allocation', consequence: 'local', coverage: 'full', command: 'segreant alloc centre',
+        guiEvidence: { file: 'views/allocation.ts', token: "op: 'centre'", note: 'Allocate step 1 lists, adds and archives cost centres; the drawer also renames one or changes its owner, as alloc centre <id> --name does, with a preview first' },
+    },
+    {
+        id: 'alloc-rules', label: 'Allocation rules', plain: 'How spend is split across cost centres.', territory: 'allocation', consequence: 'local', coverage: 'full', command: 'segreant alloc rule',
+        guiEvidence: { file: 'views/allocation.ts', token: "op: 'rule'", note: 'all three methods, every match field (project, model, provider, tool, user), priority, effective dates, owner and note; a GUI rule equals the CLI rule field by field; the drawer previews a rule or a revocation before saving' },
+    },
+    {
+        id: 'alloc-run', label: 'Run an allocation', plain: 'Apply the rules to a period and record the result.', territory: 'allocation', consequence: 'local', coverage: 'full', command: 'segreant alloc run --apply',
+        guiEvidence: { file: 'views/allocation.ts', token: "op: 'run'", note: 'preview then record for last month, this month or any chosen days, on the Allocate page or in its drawer; each recorded split downloads as CSV (segreant alloc export). Periods are whole days; the command also takes times of day' },
+    },
     // ---- Evidence -----------------------------------------------------------
-    { id: 'billing-scope', label: 'Declare a provider scope', plain: 'Say which provider project this machine is metering.', territory: 'evidence', consequence: 'local', coverage: 'partial', command: 'segreant billing scope set' },
-    { id: 'billing-readiness', label: 'Reconciliation readiness', plain: 'Whether a provider check would actually match anything.', territory: 'evidence', consequence: 'read', coverage: 'full', command: 'segreant billing reconcile' },
-    { id: 'billing-adopt', label: 'Adopt a provider export', plain: 'Use a costs file you exported, with no credential.', territory: 'evidence', consequence: 'local', coverage: 'partial', command: 'segreant billing openai-costs adopt --apply' },
     {
-        id: 'billing-pull', label: 'Pull provider costs', plain: 'Read your bill directly from the provider.',
+        id: 'billing-scope', label: 'Declare a provider scope', plain: 'Declare the OpenAI organisation and project your proxied traffic goes to from now on. Your declaration, not verified by the provider.', territory: 'evidence', consequence: 'local', coverage: 'full', command: 'segreant billing scope set',
+        guiEvidence: { file: 'views/evidence.ts', token: "op: 'scope'", note: 'Close step 1 names the declaration, previews and declares, and clears it with a preview first; the drawer does the same with the project optional, as the command allows' },
+    },
+    {
+        id: 'billing-readiness', label: 'Reconciliation readiness', plain: 'Whether a provider check would actually match anything.', territory: 'evidence', consequence: 'read', coverage: 'full', command: 'segreant billing reconcile',
+        guiEvidence: { file: 'views/evidence.ts', token: 'readinessPanel(d)', note: 'Close step 3 shows readiness and the steps still missing before it offers a comparison' },
+    },
+    {
+        id: 'billing-adopt', label: 'Adopt a provider export', plain: 'Use a cost export you already imported as the provider side of the comparison. No credential is used.', territory: 'evidence', consequence: 'local', coverage: 'full', command: 'segreant billing openai-costs adopt --apply',
+        guiEvidence: { file: 'views/evidence.ts', token: "op: 'adopt'", note: 'Close step 2 imports an export and adopts it, each with a preview first; the drawer adopts any imported export by id, as --import-id does' },
+    },
+    {
+        id: 'billing-pull', label: 'Pull provider costs', plain: 'Fetch the costs OpenAI reports for a period, using an Admin key. A provider observation, not yet reconciled.',
         territory: 'evidence', consequence: 'credential', coverage: 'partial', command: 'segreant billing openai-costs pull',
         warning: 'Reads an OpenAI Admin credential from your environment and makes a network request to OpenAI. Segreant never stores it. Check readiness first — on a ledger with no proxy traffic on the declared route, a pull reports your entire bill as unexplained.',
     },
-    { id: 'billing-reconcile', label: 'Reconcile', plain: 'Compare what we metered against what you were billed.', territory: 'evidence', consequence: 'local', coverage: 'partial', command: 'segreant billing reconcile --apply' },
-    { id: 'receipt', label: 'Receipts', plain: 'The evidence behind a single claim.', territory: 'evidence', consequence: 'read', coverage: 'planned', command: 'segreant receipt' },
-    { id: 'evidence', label: 'Evidence records', plain: 'Signed CI artifacts and verified outcomes.', territory: 'evidence', consequence: 'read', coverage: 'partial', command: 'segreant evidence' },
-    { id: 'audit', label: 'Audit', plain: 'Check the ledger against itself for inconsistencies.', territory: 'evidence', consequence: 'read', coverage: 'planned', command: 'segreant audit' },
+    {
+        id: 'billing-reconcile', label: 'Reconcile', plain: 'Compare what Segreant measured with the provider-reported total, project by day, for the declared scope only.', territory: 'evidence', consequence: 'local', coverage: 'full', command: 'segreant billing reconcile --apply',
+        guiEvidence: { file: 'views/evidence.ts', token: "op: 'reconcile'", note: 'Close step 3 previews with a materiality threshold and records under it; every recorded comparison opens to its own figures; the drawer previews and records the same comparison under the same threshold' },
+    },
+    { id: 'receipt', label: 'Receipts', plain: 'Sign and store a receipt for each matured piece of work, creating the signing key on first use; --verify checks one.', territory: 'evidence', consequence: 'local', coverage: 'planned', command: 'segreant receipt' },
+    { id: 'evidence', label: 'Evidence records', plain: 'Signed CI test evidence: emit writes a signed artifact, import records it as a verified outcome.', territory: 'evidence', consequence: 'read', coverage: 'partial', command: 'segreant evidence' },
+    { id: 'audit', label: 'Audit', plain: 'Attribute recent spend to git commits by timing, a heuristic, and show cost per hundred lines.', territory: 'evidence', consequence: 'read', coverage: 'planned', command: 'segreant audit' },
     // ---- Value --------------------------------------------------------------
     { id: 'roi', label: 'Return on Intelligence', plain: 'What the spend produced, with the limits stated.', territory: 'value', consequence: 'read', coverage: 'full', command: 'segreant roi' },
     {
@@ -74,27 +101,27 @@ export const CAPABILITIES = [
         id: 'causal', label: 'Causal studies', plain: 'Registered randomized evidence and its qualification gates.', territory: 'value', consequence: 'local', coverage: 'partial', command: 'segreant causal status',
         guiEvidence: { file: 'views/value.ts', token: 'api.causal()', note: 'the Value view reads causal status; registration and gates stay on the CLI' },
     },
-    { id: 'realize', label: 'Realized value', plain: 'Work that actually shipped, not work that was proposed.', territory: 'value', consequence: 'local', coverage: 'partial', command: 'segreant realize' },
+    { id: 'realize', label: 'Realized value', plain: 'Work that passed every required step, from commit to surviving in the code, measured from git and the signals you report.', territory: 'value', consequence: 'local', coverage: 'partial', command: 'segreant realize' },
     {
-        id: 'market', label: 'Public model market', plain: 'Compare models on public evidence of quality per dollar, before you have your own.',
+        id: 'market', label: 'Public model market', plain: 'Compare models on public evidence of quality per dollar, before you have your own. --refresh fetches the public sources over the network.',
         territory: 'value', consequence: 'read', coverage: 'partial', command: 'segreant market',
         guiEvidence: { file: 'views/value.ts', token: 'marketCard(', note: 'the Value view shows the bundled public boards; refreshing a source stays on the CLI because it needs an egress grant' },
     },
-    { id: 'frontier', label: 'Model comparison', plain: 'Whether a cheaper model would have done the same job.', territory: 'value', consequence: 'read', coverage: 'full', command: 'segreant frontier' },
-    { id: 'saved', label: 'Savings', plain: 'What routing decisions have avoided so far.', territory: 'value', consequence: 'read', coverage: 'partial', command: 'segreant saved' },
-    { id: 'yield', label: 'Yield', plain: 'Output per dollar across projects.', territory: 'value', consequence: 'read', coverage: 'planned', command: 'segreant yield' },
-    { id: 'judge', label: 'Judge', plain: 'Score a change on quality, not just cost.', territory: 'value', consequence: 'local', coverage: 'partial', command: 'segreant judge' },
-    { id: 'team', label: 'Team view', plain: 'Per-person value on this machine, anonymized.', territory: 'value', consequence: 'read', coverage: 'planned', command: 'segreant team' },
+    { id: 'frontier', label: 'Model comparison', plain: 'How models compare on realized return within similar work, with cheaper-model trials to review. Routing is never changed.', territory: 'value', consequence: 'read', coverage: 'full', command: 'segreant frontier' },
+    { id: 'saved', label: 'Time reclaimed', plain: 'The manual work-weeks your realized work would have taken, against the AI time measured.', territory: 'value', consequence: 'read', coverage: 'partial', command: 'segreant saved' },
+    { id: 'yield', label: 'Yield', plain: 'Code lines still in one repository per AI dollar. Not a measure of quality.', territory: 'value', consequence: 'read', coverage: 'planned', command: 'segreant yield' },
+    { id: 'judge', label: 'Judge', plain: 'Score one session\'s efficiency from its structure. A hosted judge, if you configure one, receives session data.', territory: 'value', consequence: 'local', coverage: 'partial', command: 'segreant judge' },
+    { id: 'team', label: 'Team view', plain: 'Team value as a distribution. Per-person figures stay off unless you enable them.', territory: 'value', consequence: 'read', coverage: 'planned', command: 'segreant team' },
     // ---- Data ---------------------------------------------------------------
     { id: 'sources', label: 'Sources', plain: 'Which tools are feeding data in.', territory: 'data', consequence: 'read', coverage: 'full', command: 'segreant sources' },
     // `core/api.ts` binds POST /api/discover and no view calls it (D-239): an
     // API binding is not a screen.
-    { id: 'discover', label: 'Find tools', plain: 'Look for AI tools installed on this machine.', territory: 'data', consequence: 'read', coverage: 'planned', command: 'segreant discover' },
+    { id: 'discover', label: 'Match projects to repositories', plain: 'Match imported projects to their git repositories and measure each one.', territory: 'data', consequence: 'read', coverage: 'planned', command: 'segreant discover' },
     { id: 'connect', label: 'Connect a tool', plain: 'Point a tool at Segreant so its spend is metered.', territory: 'data', consequence: 'local', coverage: 'partial', command: 'segreant connect <tool>' },
     { id: 'import', label: 'Import history', plain: 'Read past usage out of tool logs on this machine.', territory: 'data', consequence: 'local', coverage: 'full', command: 'segreant import all' },
-    { id: 'scan', label: 'Scan', plain: 'Check what is available to import before importing.', territory: 'data', consequence: 'read', coverage: 'full', command: 'segreant scan' },
-    { id: 'baseline', label: 'Baselines', plain: 'The before-AI reference this compares against.', territory: 'data', consequence: 'local', coverage: 'partial', command: 'segreant baseline' },
-    { id: 'demo', label: 'Demo data', plain: 'Load labelled sample data to see how it works.', territory: 'data', consequence: 'local', coverage: 'partial', command: 'segreant demo' },
+    { id: 'scan', label: 'Scan', plain: 'Find AI tools and repositories on this machine before importing. It remembers the scan to report changes; --setup also imports.', territory: 'data', consequence: 'read', coverage: 'full', command: 'segreant scan' },
+    { id: 'baseline', label: 'Baselines', plain: 'The before-AI reference this compares against. --refresh fetches a baseline from a URL you give.', territory: 'data', consequence: 'local', coverage: 'partial', command: 'segreant baseline' },
+    { id: 'demo', label: 'Demo data', plain: 'Load labelled sample data to see how it works, replacing any earlier sample data. Your own ledger is untouched.', territory: 'data', consequence: 'local', coverage: 'partial', command: 'segreant demo' },
     // ---- System -------------------------------------------------------------
     {
         id: 'features', label: 'Optional features', plain: 'Switch optional parts of Segreant on or off. Budget caps are not one of them.',
@@ -107,14 +134,20 @@ export const CAPABILITIES = [
         guiEvidence: { file: 'core/actions.ts', token: 'settings.egress.receipts', note: 'the Settings drawer renders egress mode and receipt-chain health; plan/apply stay on the CLI' },
         warning: 'The dashboard shows Segreant-process status and receipt-chain health. Use the CLI to plan or apply an exact cloud permission. This is not a machine-wide firewall or a provider-retention guarantee.',
     },
-    { id: 'settings', label: 'Settings', plain: 'How Segreant behaves on this machine.', territory: 'system', consequence: 'local', coverage: 'partial', command: 'segreant config' },
+    { id: 'settings', label: 'Settings', plain: 'Show how Segreant is configured on this machine and where that is stored.', territory: 'system', consequence: 'local', coverage: 'partial', command: 'segreant config' },
     {
-        id: 'pricing', label: 'Pricing', plain: 'The rate cards used to estimate cost.', territory: 'system', consequence: 'read', coverage: 'partial', command: 'segreant pricing --coverage',
+        id: 'pricing', label: 'Pricing', plain: 'The rate cards used to estimate cost. --refresh fetches a price file over the network.', territory: 'system', consequence: 'read', coverage: 'partial', command: 'segreant pricing --coverage',
         guiEvidence: { file: 'core/claimLayers.ts', token: 'pricing.estimatedSpendShare', note: 'the claim layers show the estimated-spend share the rate cards imply; the cards themselves are CLI only' },
     },
+    {
+        id: 'pricing-unknown', label: 'Unpriced models', plain: 'Find models that still use guessed prices. Set your price, price like an exact model on the card, mark a local model free, or skip.',
+        territory: 'system', consequence: 'local', coverage: 'full', command: 'segreant pricing unknown',
+        guiEvidence: { file: 'core/pricingActions.ts', token: 'pricingUnknownAction', note: 'lists current guesses and declares one model at a time, then refreshes and offers re-pricing' },
+    },
     {
         id: 'reprice', label: 'Reprice history', plain: 'Recalculate past costs against a corrected rate card.',
-        territory: 'system', consequence: 'destructive', coverage: 'planned', command: 'segreant reprice --apply',
+        territory: 'system', consequence: 'destructive', coverage: 'full', command: 'segreant reprice --apply',
+        guiEvidence: { file: 'core/pricingActions.ts', token: 'repriceAction', note: 'previews before and after by model, requires typed confirmation, and shows the applied result' },
         warning: 'Rewrites the recorded cost of past requests. Value snapshots are re-attributed on their own basis, and outcomes are never moved — but the money figures you have already reported will change.',
     },
     { id: 'doctor', label: 'Doctor', plain: 'Check that everything is wired up correctly.', territory: 'system', consequence: 'read', coverage: 'partial', command: 'segreant doctor' },
@@ -147,13 +180,13 @@ export const CAPABILITIES = [
     // compared this list with `src/cli.ts`'s dispatch, so a verb could be added
     // without a row and the parity denominator would simply not count it.
     {
-        id: 'start', label: 'Start Segreant', plain: 'Run the metering proxy and open this dashboard.',
+        id: 'start', label: 'Start Segreant', plain: 'Run the metering proxy and this dashboard. Each start also deletes proposals past retention, and refreshes prices if you turned that on.',
         territory: 'system', consequence: 'local', coverage: 'not_applicable', command: 'segreant start',
         coverageNote: 'this command is what serves the GUI, so there is no page to click until it has already run; '
             + 'a GUI surface for it is not planned because it cannot exist',
     },
     {
-        // `local` rather than `read` because `cmdInit` calls `saveConfig` and the
+        // `local` rather than `read` because `cmdInit` calls `mutateConfig` and the
         // file is on disk afterwards. Worth stating plainly: it persists with no
         // preview and no `--apply`, which is the one command in this list that does
         // -- the tier recorded here is what any future GUI surface must honour, not
@@ -162,16 +195,16 @@ export const CAPABILITIES = [
         territory: 'system', consequence: 'local', coverage: 'planned', command: 'segreant init',
     },
     {
-        id: 'economic', label: 'Exact economic ledger', plain: 'The exact-money ledger behind the rounded figures, by period.',
+        id: 'economic', label: 'Exact economic ledger', plain: 'The exact-money ledger behind the rounded figures, by period. --finalize and --reopen record a period close.',
         territory: 'evidence', consequence: 'read', coverage: 'partial', command: 'segreant economic',
         guiEvidence: { file: 'views/value.ts', token: 'matured?.economic', note: 'the Value view renders exact/partial/legacy coverage of matured spend; the period ledger itself is CLI only' },
     },
     {
-        id: 'capital', label: 'AI-capital review', plain: 'Review committed capacity, consumption, showback, and declared gaps.',
+        id: 'capital', label: 'AI-capital review', plain: 'Review a JSON snapshot you supply: committed capacity, consumption, showback, and declared gaps.',
         territory: 'evidence', consequence: 'read', coverage: 'planned', command: 'segreant capital evaluate --options <file>',
     },
     {
-        id: 'backup', label: 'Back up the ledger', plain: 'Copy the local ledger somewhere safe, with a manifest that proves the copy.',
+        id: 'backup', label: 'Back up the ledger', plain: 'Copy the whole ledger to a file, with a checksum manifest. The copy is not encrypted; keep it as private as the ledger.',
         territory: 'data', consequence: 'local', coverage: 'planned', command: 'segreant backup --out <file>',
     },
     {
@@ -185,11 +218,11 @@ export const CAPABILITIES = [
         territory: 'system', consequence: 'read', coverage: 'planned', command: 'segreant diagnostics',
     },
     {
-        id: 'pack', label: 'Export a verifiable record bundle', plain: 'Write the kernel records as a signed, digest-bound file another machine can check without trusting this one. Truth is never evaluated.',
+        id: 'pack', label: 'Export a verifiable record bundle', plain: 'Write the kernel records as a digest-bound file another machine can check without trusting this one, signed with --sign. Truth is never evaluated.',
         territory: 'data', consequence: 'local', coverage: 'planned', command: 'segreant pack export --out <file>',
     },
     {
-        id: 'plugin', label: 'Run a plugin exchange', plain: 'One bounded exchange with a plugin process; what it reports is recorded as what it said, never as more.',
+        id: 'plugin', label: 'Run a plugin exchange', plain: 'Run a plugin program you name, with your permissions and no sandbox, for one bounded exchange. What it reports is recorded as what it said, never as more.',
         territory: 'data', consequence: 'local', coverage: 'planned', command: 'segreant plugin run --manifest <file> --request <file> --exec <path> --scope <key=value>',
     },
 ];
@@ -208,7 +241,7 @@ const API_BINDINGS = Object.freeze({
     roi: ['/api/value'], market: ['/api/market'], outcome: ['/api/outcome/record', '/api/value'], causal: ['/api/causal'], realize: ['/api/value'], frontier: ['/api/value'], saved: ['/api/value'], yield: ['/api/value'], judge: ['/api/judge'], team: ['/api/value'],
     sources: ['/api/overview'], discover: ['/api/importers'], connect: ['/api/importers'], import: ['/api/import'], scan: ['/api/scan'], baseline: ['/api/value'], demo: ['/api/overview'],
     economic: ['/api/economic'],
-    features: ['/api/settings', '/api/settings/update'], egress: ['/api/settings'], settings: ['/api/settings', '/api/settings/update'], pricing: ['/api/overview'], reprice: ['/api/value'], doctor: ['/api/guide'], guide: ['/api/guide'], 'team-push': [], prune: ['/api/settings'], 'clear-proposals': ['/api/settings/clear-proposals'],
+    features: ['/api/settings', '/api/settings/update'], egress: ['/api/settings'], settings: ['/api/settings', '/api/settings/update'], pricing: ['/api/overview'], 'pricing-unknown': ['/api/pricing/unknown', '/api/pricing/declare', '/api/pricing/unset'], reprice: ['/api/reprice'], doctor: ['/api/guide'], guide: ['/api/guide'], 'team-push': [], prune: ['/api/settings'], 'clear-proposals': ['/api/settings/clear-proposals'],
 });
 const DOC_BINDINGS = Object.freeze({
     spend: ['docs/GETTING-STARTED.md', 'docs/ARCHITECTURE.md'],

package/dist/dashboard/web/app/core/slug.js

@@ -0,0 +1,9 @@
+/**
+ * The allocation engine's id format (src/alloc/rules.ts: lowercase letters,
+ * digits and . _ -, at most 64 characters), derived from a typed name. One
+ * copy, so the Allocate page and the cost-centre drawer cannot derive different
+ * ids from the same name.
+ */
+export function slug(name) {
+    return name.toLowerCase().trim().replace(/[^a-z0-9._-]+/g, '-').replace(/^[^a-z0-9]+/, '').replace(/-+$/, '').slice(0, 64);
+}

package/dist/dashboard/web/app/core/theme.js

@@ -0,0 +1,48 @@
+/**
+ * Appearance: follow the operating system, or a fixed light or dark choice.
+ *
+ * The stylesheet keys every light-theme rule on `:root[data-theme='light']`, so
+ * the theme is resolved here and written to that attribute, rather than
+ * repeating the token block under a media query. "System" is the default and
+ * tracks the OS live; an explicit choice is kept in this browser only.
+ */
+import { signal } from './signal.js';
+const STORAGE_KEY = 'segreant.theme';
+function storedChoice() {
+    try {
+        const value = localStorage.getItem(STORAGE_KEY);
+        return value === 'light' || value === 'dark' ? value : 'system';
+    }
+    catch {
+        return 'system';
+    }
+}
+export const themeChoice = signal(storedChoice());
+const prefersLight = typeof matchMedia === 'function' ? matchMedia('(prefers-color-scheme: light)') : null;
+function apply() {
+    const choice = themeChoice();
+    const resolved = choice === 'system' ? (prefersLight?.matches ? 'light' : 'dark') : choice;
+    document.documentElement.dataset.theme = resolved;
+    // Native controls, scrollbars and autofill follow the page, not the OS.
+    document.documentElement.style.colorScheme = resolved;
+}
+export function setTheme(choice) {
+    themeChoice.set(choice);
+    try {
+        if (choice === 'system')
+            localStorage.removeItem(STORAGE_KEY);
+        else
+            localStorage.setItem(STORAGE_KEY, choice);
+    }
+    catch {
+        // Storage can be unavailable (private windows, blocked site data). The
+        // choice still applies for this visit.
+    }
+    apply();
+}
+/** Run once before the first render, so the page never paints in the wrong theme. */
+export function initTheme() {
+    apply();
+    prefersLight?.addEventListener('change', () => { if (themeChoice() === 'system')
+        apply(); });
+}

package/dist/dashboard/web/app/core/view.js

@@ -0,0 +1,69 @@
+/**
+ * What you see: density, and which parts of the page are shown.
+ *
+ * The same screens serve a finance reader who wants the four figures and the
+ * explanations, and a developer who lives in two jobs and wants them dense.
+ * These are display choices only: hiding a part never changes a figure, and
+ * everything hidden stays reachable from Settings and by its address. Kept in
+ * this browser only, like the theme.
+ */
+import { signal } from './signal.js';
+const STORAGE_KEY = 'segreant.view';
+export const VIEW_DEFAULTS = { density: 'comfortable', strip: true, intros: true, hiddenJobs: [] };
+/** Anything unreadable or out of range falls back to the default, field by field. */
+export function parseViewPrefs(raw) {
+    if (!raw)
+        return { ...VIEW_DEFAULTS, hiddenJobs: [] };
+    try {
+        const v = JSON.parse(raw);
+        return {
+            density: v.density === 'compact' ? 'compact' : 'comfortable',
+            strip: v.strip !== false,
+            intros: v.intros !== false,
+            hiddenJobs: Array.isArray(v.hiddenJobs) ? v.hiddenJobs.filter((j) => typeof j === 'string') : [],
+        };
+    }
+    catch {
+        return { ...VIEW_DEFAULTS, hiddenJobs: [] };
+    }
+}
+function stored() {
+    try {
+        return parseViewPrefs(localStorage.getItem(STORAGE_KEY));
+    }
+    catch {
+        return { ...VIEW_DEFAULTS, hiddenJobs: [] };
+    }
+}
+export const viewPrefs = signal(stored());
+function apply() {
+    const p = viewPrefs();
+    // Reached through globalThis so the parsing rules can be unit-tested under Node, which has no document.
+    const doc = globalThis.document;
+    if (!doc)
+        return;
+    const root = doc.documentElement.dataset;
+    root.density = p.density;
+    root.intros = p.intros ? 'on' : 'off';
+}
+export function setView(patch) {
+    viewPrefs.set({ ...viewPrefs(), ...patch });
+    try {
+        localStorage.setItem(STORAGE_KEY, JSON.stringify(viewPrefs()));
+    }
+    catch {
+        // Storage can be unavailable; the choice still applies for this visit.
+    }
+    apply();
+}
+export function setJobShown(id, shown) {
+    const rest = viewPrefs().hiddenJobs.filter((j) => j !== id);
+    setView({ hiddenJobs: shown ? rest : [...rest, id] });
+}
+export function jobShown(id) {
+    return !viewPrefs().hiddenJobs.includes(id);
+}
+/** Run once before the first render, so the page never paints at the wrong density. */
+export function initView() {
+    apply();
+}