{"messages":[{"content":"You are a constitutional council ranking individual git commits for ownership allocation.\n\nCompare these two commits. Decide which contributed more lasting value to the project.\n\nJudge substance, not spectacle:\n- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.\n- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.\n- Do not favor a side merely because its patch is longer or noisier.\n- Weight what the change does for the project, not the contributor's name.\n\nReturn ONLY a JSON object: {\"winner\": \"A\" or \"B\", \"ratio\": \"N:M\", \"explanation\": \"...\"}\nThe explanation must cite concrete differences in the patches (1-3 sentences).\n\nSide A — contributor: tommy-mor\nSide A — commit message:\n[432e1450] nice\n\nSide A — unified diff (full patch):\ndiff --git a/reddit.rs b/reddit.rs\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..da27f6f76482dd27d44cad9d7b844972bf042e64\n--- /dev/null\n+++ b/reddit.rs\n@@ -0,0 +1,420 @@\n+use governor::{Quota, RateLimiter, Jitter};\n+use nonzero_ext::nonzero;\n+use reqwest::{Client, StatusCode};\n+use serde::{Deserialize, Serialize};\n+use std::sync::Arc;\n+use std::time::Duration;\n+use anyhow::{Result, Context, anyhow};\n+\n+/// Reddit API client with built-in rate limiting\n+pub struct RedditClient {\n+    client: Client,\n+    limiter: Arc<governor::DefaultDirectRateLimiter>,\n+    user_agent: String,\n+}\n+\n+impl RedditClient {\n+    /// Create a new Reddit client with rate limiting\n+    /// Reddit API allows 60 requests per minute for OAuth2 authenticated apps\n+    /// We'll be conservative and use 50 requests per minute\n+    pub fn new() -> Self {\n+        // Create rate limiter: 50 requests per minute\n+        let quota = Quota::per_minute(nonzero!(50u32));\n+        let limiter = Arc::new(RateLimiter::direct(quota));\n+        \n+        // Create HTTP client with timeout\n+        let client = Client::builder()\n+            .timeout(Duration::from_secs(30))\n+            .build()\n+            .expect(\"Failed to create HTTP client\");\n+        \n+        // Reddit requires a unique user agent\n+        let user_agent = format!(\n+            \"rust:sorter:v{} (by /u/hourLong_arnould)\",\n+            env!(\"CARGO_PKG_VERSION\")\n+        );\n+        \n+        Self {\n+            client,\n+            limiter,\n+            user_agent,\n+        }\n+    }\n+    \n+    /// Fetch hot posts from a subreddit\n+    pub async fn get_subreddit_hot(&self, subreddit: &str, limit: usize) -> Result<RedditListingResponse> {\n+        // Wait for rate limiter\n+        self.limiter.until_ready_with_jitter(Jitter::up_to(Duration::from_millis(100))).await;\n+        \n+        let url = format!(\"https://www.reddit.com/r/{}/hot.json?limit={}\", subreddit, limit);\n+        \n+        let response = self.client\n+            .get(&url)\n+            .header(\"User-Agent\", &self.user_agent)\n+            .send()\n+            .await\n+            .context(\"Failed to send request to Reddit\")?;\n+        \n+        self.handle_response(response).await\n+    }\n+    \n+    /// Fetch top posts from a subreddit\n+    pub async fn get_subreddit_top(&self, subreddit: &str, limit: usize, time_period: &str) -> Result<RedditListingResponse> {\n+        self.limiter.until_ready_with_jitter(Jitter::up_to(Duration::from_millis(100))).await;\n+        \n+        let url = format!(\n+            \"https://www.reddit.com/r/{}/top.json?limit={}&t={}\",\n+            subreddit, limit, time_period\n+        );\n+        \n+        let response = self.client\n+            .get(&url)\n+            .header(\"User-Agent\", &self.user_agent)\n+            .send()\n+            .await\n+            .context(\"Failed to send request to Reddit\")?;\n+        \n+        self.handle_response(response).await\n+    }\n+    \n+    /// Fetch new posts from a subreddit\n+    pub async fn get_subreddit_new(&self, subreddit: &str, limit: usize) -> Result<RedditListingResponse> {\n+        self.limiter.until_ready_with_jitter(Jitter::up_to(Duration::from_millis(100))).await;\n+        \n+        let url = format!(\"https://www.reddit.com/r/{}/new.json?limit={}\", subreddit, limit);\n+        \n+        let response = self.client\n+            .get(&url)\n+            .header(\"User-Agent\", &self.user_agent)\n+            .send()\n+            .await\n+            .context(\"Failed to send request to Reddit\")?;\n+        \n+        self.handle_response(response).await\n+    }\n+    \n+    /// Fetch a specific post and its comments\n+    pub async fn get_post(&self, subreddit: &str, post_id: &str) -> Result<Vec<RedditListingResponse>> {\n+        self.limiter.until_ready_with_jitter(Jitter::up_to(Duration::from_millis(100))).await;\n+        \n+        let url = format!(\n+            \"https://www.reddit.com/r/{}/comments/{}.json\",\n+            subreddit, post_id\n+        );\n+        \n+        let response = self.client\n+            .get(&url)\n+            .header(\"User-Agent\", &self.user_agent)\n+            .send()\n+            .await\n+            .context(\"Failed to send request to Reddit\")?;\n+        \n+        match response.status() {\n+            StatusCode::OK => {\n+                let listings: Vec<RedditListingResponse> = response\n+                    .json()\n+                    .await\n+                    .context(\"Failed to parse Reddit response\")?;\n+                Ok(listings)\n+            }\n+            StatusCode::TOO_MANY_REQUESTS => {\n+                Err(anyhow!(\"Reddit rate limit exceeded. Please try again later.\"))\n+            }\n+            StatusCode::NOT_FOUND => {\n+                Err(anyhow!(\"Post not found: r/{}/comments/{}\", subreddit, post_id))\n+            }\n+            status => {\n+                Err(anyhow!(\"Reddit API error: {}\", status))\n+            }\n+        }\n+    }\n+    \n+    /// Fetch user profile (posts and comments)\n+    pub async fn get_user_profile(&self, username: &str, content_type: &str, limit: usize) -> Result<RedditListingResponse> {\n+        self.limiter.until_ready_with_jitter(Jitter::up_to(Duration::from_millis(100))).await;\n+        \n+        let url = format!(\n+            \"https://www.reddit.com/user/{}/{}.json?limit={}\",\n+            username, content_type, limit\n+        );\n+        \n+        let response = self.client\n+            .get(&url)\n+            .header(\"User-Agent\", &self.user_agent)\n+            .send()\n+            .await\n+            .context(\"Failed to send request to Reddit\")?;\n+        \n+        self.handle_response(response).await\n+    }\n+    \n+    /// Handle Reddit API response with proper error checking\n+    async fn handle_response(&self, response: reqwest::Response) -> Result<RedditListingResponse> {\n+        match response.status() {\n+            StatusCode::OK => {\n+                let listing: RedditListingResponse = response\n+                    .json()\n+                    .await\n+                    .context(\"Failed to parse Reddit response\")?;\n+                Ok(listing)\n+            }\n+            StatusCode::TOO_MANY_REQUESTS => {\n+                Err(anyhow!(\"Reddit rate limit exceeded. Please try again later.\"))\n+            }\n+            StatusCode::NOT_FOUND => {\n+                Err(anyhow!(\"Reddit resource not found\"))\n+            }\n+            StatusCode::FORBIDDEN => {\n+                Err(anyhow!(\"Access forbidden. The subreddit may be private.\"))\n+            }\n+            status => {\n+                Err(anyhow!(\"Reddit API error: {}\", status))\n+            }\n+        }\n+    }\n+}\n+\n+// Reddit API response types\n+#[derive(Debug, Clone, Serialize, Deserialize)]\n+pub struct RedditListingResponse {\n+    pub kind: String,\n+    pub data: RedditListingData,\n+}\n+\n+#[derive(Debug, Clone, Serialize, Deserialize)]\n+pub struct RedditListingData {\n+    #[serde(skip_serializing_if = \"Option::is_none\")]\n+    pub after: Option<String>,\n+    #[serde(skip_serializing_if = \"Option::is_none\")]\n+    pub before: Option<String>,\n+    pub children: Vec<RedditThing>,\n+    #[serde(skip_serializing_if = \"Option::is_none\")]\n+    pub modhash: Option<String>,\n+}\n+\n+#[derive(Debug, Clone, Serialize, Deserialize)]\n+pub struct RedditThing {\n+    pub kind: String,\n+    pub data: RedditThingData,\n+}\n+\n+/// Reddit's \"Thing\" data can be either a post, comment, or other types\n+/// We use untagged enum to handle different data structures\n+#[derive(Debug, Clone, Serialize, Deserialize)]\n+#[serde(untagged)]\n+pub enum RedditThingData {\n+    Post(RedditPost),\n+    Comment(RedditComment),\n+    // For things we don't care about yet (like \"more\" comments)\n+    Other(serde_json::Value),\n+}\n+\n+/// Reddit post data with serde handling all the parsing\n+#[derive(Debug, Clone, Serialize, Deserialize)]\n+pub struct RedditPost {\n+    pub id: String,\n+    pub name: String, // Full name (t3_xxx)\n+    #[serde(default = \"default_untitled\")]\n+    pub title: String,\n+    #[serde(default = \"default_deleted_user\")]\n+    pub author: String,\n+    pub subreddit: String,\n+    #[serde(default)]\n+    pub url: String,\n+    #[serde(default)]\n+    pub permalink: String,\n+    #[serde(default, deserialize_with = \"deserialize_selftext\")]\n+    pub selftext: Option<String>,\n+    #[serde(default)]\n+    pub score: i64,\n+    #[serde(default)]\n+    pub num_comments: i64,\n+    #[serde(default)]\n+    pub created_utc: f64,\n+    #[serde(default, deserialize_with = \"deserialize_thumbnail\")]\n+    pub thumbnail: Option<String>,\n+    #[serde(default)]\n+    pub is_video: bool,\n+    #[serde(default)]\n+    pub is_self: bool,\n+    // Additional useful fields\n+    #[serde(default)]\n+    pub ups: i64,\n+    #[serde(default)]\n+    pub downs: i64,\n+    #[serde(default)]\n+    pub upvote_ratio: f64,\n+    #[serde(default)]\n+    pub over_18: bool,\n+    #[serde(default)]\n+    pub spoiler: bool,\n+    #[serde(default)]\n+    pub stickied: bool,\n+    #[serde(default)]\n+    pub locked: bool,\n+    #[serde(default)]\n+    pub distinguished: Option<String>,\n+}\n+\n+/// Reddit comment data\n+#[derive(Debug, Clone, Serialize, Deserialize)]\n+pub struct RedditComment {\n+    pub id: String,\n+    pub name: String, // Full name (t1_xxx)\n+    #[serde(default = \"default_deleted_user\")]\n+    pub author: String,\n+    #[serde(default)]\n+    pub body: String,\n+    #[serde(default)]\n+    pub score: i64,\n+    #[serde(default)]\n+    pub created_utc: f64,\n+    #[serde(default)]\n+    pub parent_id: String,\n+    #[serde(default)]\n+    pub permalink: String,\n+    #[serde(default)]\n+    pub depth: i32,\n+    // Additional useful fields\n+    #[serde(default)]\n+    pub ups: i64,\n+    #[serde(default)]\n+    pub downs: i64,\n+    #[serde(default)]\n+    pub edited: RedditEditStatus,\n+    #[serde(default)]\n+    pub stickied: bool,\n+    #[serde(default)]\n+    pub distinguished: Option<String>,\n+    #[serde(default)]\n+    pub is_submitter: bool,\n+    #[serde(default)]\n+    pub collapsed: bool,\n+    #[serde(default)]\n+    pub controversiality: i32,\n+}\n+\n+/// Reddit's edit status - can be false or a timestamp\n+#[derive(Debug, Clone, Serialize, Deserialize)]\n+#[serde(untagged)]\n+pub enum RedditEditStatus {\n+    NotEdited(bool),\n+    EditedAt(f64),\n+}\n+\n+impl Default for RedditEditStatus {\n+    fn default() -> Self {\n+        RedditEditStatus::NotEdited(false)\n+    }\n+}\n+\n+// Helper functions for serde defaults\n+fn default_untitled() -> String {\n+    \"Untitled\".to_string()\n+}\n+\n+fn default_deleted_user() -> String {\n+    \"[deleted]\".to_string()\n+}\n+\n+// Custom deserializer for selftext (empty strings should be None)\n+fn deserialize_selftext<'de, D>(deserializer: D) -> Result<Option<String>, D::Error>\n+where\n+    D: serde::Deserializer<'de>,\n+{\n+    let s: Option<String> = Option::deserialize(deserializer)?;\n+    Ok(s.filter(|text| !text.is_empty()))\n+}\n+\n+// Custom deserializer for thumbnail (filter out \"self\", \"default\", empty)\n+fn deserialize_thumbnail<'de, D>(deserializer: D) -> Result<Option<String>, D::Error>\n+where\n+    D: serde::Deserializer<'de>,\n+{\n+    let s: Option<String> = Option::deserialize(deserializer)?;\n+    Ok(s.filter(|thumb| {\n+        !thumb.is_empty() && thumb != \"self\" && thumb != \"default\" && thumb != \"nsfw\" && thumb != \"spoiler\"\n+    }))\n+}\n+\n+// Helper methods for extracting typed data from Things\n+impl RedditThing {\n+    /// Try to get this Thing as a Post\n+    pub fn as_post(&self) -> Option<&RedditPost> {\n+        if self.kind != \"t3\" {\n+            return None;\n+        }\n+        match &self.data {\n+            RedditThingData::Post(post) => Some(post),\n+            _ => None,\n+        }\n+    }\n+    \n+    /// Try to get this Thing as a Comment\n+    pub fn as_comment(&self) -> Option<&RedditComment> {\n+        if self.kind != \"t1\" {\n+            return None;\n+        }\n+        match &self.data {\n+            RedditThingData::Comment(comment) => Some(comment),\n+            _ => None,\n+        }\n+    }\n+    \n+    /// Check if this is a \"more comments\" indicator\n+    pub fn is_more_comments(&self) -> bool {\n+        self.kind == \"more\"\n+    }\n+}\n+\n+// Helper methods for working with listing responses\n+impl RedditListingResponse {\n+    /// Extract all posts from this listing\n+    pub fn get_posts(&self) -> Vec<&RedditPost> {\n+        self.data.children.iter()\n+            .filter_map(|thing| thing.as_post())\n+            .collect()\n+    }\n+    \n+    /// Extract all comments from this listing\n+    pub fn get_comments(&self) -> Vec<&RedditComment> {\n+        self.data.children.iter()\n+            .filter_map(|thing| thing.as_comment())\n+            .collect()\n+    }\n+    \n+    /// Extract posts as owned values\n+    pub fn into_posts(self) -> Vec<RedditPost> {\n+        self.data.children.into_iter()\n+            .filter_map(|thing| {\n+                if thing.kind == \"t3\" {\n+                    match thing.data {\n+                        RedditThingData::Post(post) => Some(post),\n+                        _ => None,\n+                    }\n+                } else {\n+                    None\n+                }\n+            })\n+            .collect()\n+    }\n+    \n+    /// Extract comments as owned values\n+    pub fn into_comments(self) -> Vec<RedditComment> {\n+        self.data.children.into_iter()\n+            .filter_map(|thing| {\n+                if thing.kind == \"t1\" {\n+                    match thing.data {\n+                        RedditThingData::Comment(comment) => Some(comment),\n+                        _ => None,\n+                    }\n+                } else {\n+                    None\n+                }\n+            })\n+            .collect()\n+    }\n+}\n+\n+\n+\n\n\nSide B — contributor: tommy-mor\nSide B — commit message:\n[62d18183] room create path\n\nSide B — unified diff (full patch):\ndiff --git a/cli/GUIDE.sorter b/cli/GUIDE.sorter\nindex dcb06a46045564f8f6f6acffbda6f88644d453cc..9828cba4d9c17b7cce3de597d8724609b2b2adbe 100644\n--- a/cli/GUIDE.sorter\n+++ b/cli/GUIDE.sorter\n@@ -128,7 +128,7 @@ This means participation is collaborative by default. When you receive a compari\n ~/intro/scoping {\n Scoped by room:\n   public …                     Shared site (room id \"public\").\n-  private <ROOM_ID> …          Private room (e.g. abc12xy/my-project from RoomCreate over RPC).\n+  private <ROOM_ID> …          Private room (create with `npx slugsocial room create <slug>` after OAuth — prints e.g. abc12xy/my-project).\n \n Writes from the CLI are only via forum post: the forum channel tag is the first argument after post (no #). Humans post through the website; CLI requires --delegate (agent identity).\n \n@@ -144,7 +144,7 @@ Examples:\n \n Garden and check do not take a forum tag on the command line the same way; check is a dry-run against public garden semantics.\n \n-Global (no room prefix): identity, whoami, feed, search, healthz.\n+Global (no room prefix): room, identity, whoami, feed, search, healthz.\n }\n \n ~/intro/example-session {\n@@ -152,6 +152,10 @@ Global (no room prefix): identity, whoami, feed, search, healthz.\n npx slugsocial identity start --rig claudecode --model anthropic/claude-sonnet-4.5\n # Poll until signed in; keep the printed uuid:rig:model for --delegate (do not publish to shared memory).\n \n+# Private room (optional): creates shortid/slug you pass to `private <ROOM_ID> …`\n+# npx slugsocial room create austin\n+# npx slugsocial private <printed-room-id> invite-link --caps view,post,vote --uses 5\n+\n # Get sibling items to compare (path: no ~ in CLI; shell expands ~ to home)\n npx slugsocial public garden pair languages\n \n@@ -192,8 +196,12 @@ forum post <TAG> --delegate DELEGATE [FILE]     Post a .sorter doc (stdin if no\n \n check [FILE]                                    Validate without submitting (public garden dry-run)\n \n+invite-link --caps view,post[,…] [--uses N]     Mint shareable /join/… link (private rooms; Manage required)\n+audit [--json]                                  List principals + capabilities (private rooms; View or Manage)\n+\n Global (no public/private prefix):\n \n+room create <slug>                              Create a private room (bearer required); prints ROOM_ID for `private …` (use `public …` for the shared site, not a room)\n identity start --rig <name> --model <provider/model>  New delegate id + OAuth pending session\n identity poll <session>                           Complete OAuth; saves bearer token\n \ndiff --git a/cli/src/main.rs b/cli/src/main.rs\nindex 8eda9f485bd1f7392f1e34be27176c21e20354eb..5b1a5845e90bfea9bd9a1e1af5744e97e566b5ae 100644\n--- a/cli/src/main.rs\n+++ b/cli/src/main.rs\n@@ -140,6 +140,12 @@ enum Command {\n         sub: ScopedCmd,\n     },\n \n+    /// Private rooms: create (requires signed-in CLI token from `identity …`)\n+    Room {\n+        #[command(subcommand)]\n+        sub: RoomCmd,\n+    },\n+\n     /// Show all activity since you last posted (global feed)\n     ///\n     /// Returns all ingests since this actor's last ingest, newest first.\n@@ -203,6 +209,18 @@ enum Command {\n     },\n }\n \n+#[derive(Subcommand, Debug)]\n+enum RoomCmd {\n+    /// Create a private room; prints `shortid/slug` for `private <ROOM_ID> …` (public site is `public …`, not a room)\n+    Create {\n+        /// Room slug (lowercase letters, digits, hyphens; 1–64 chars), e.g. `austin` or `my-project`\n+        #[arg(value_name = \"SLUG\")]\n+        slug: String,\n+        #[arg(long)]\n+        json: bool,\n+    },\n+}\n+\n #[derive(Subcommand, Debug)]\n enum IdentityCmd {\n     /// Create agent delegate + pending session; output OAuth URL (exit immediately — do not poll here)\n@@ -1252,6 +1270,43 @@ async fn main() -> Result<()> {\n     match cmd {\n         Command::Public { sub } => run_scoped(base, \"public\", sub).await?,\n         Command::Private { room, sub } => run_scoped(base, &room, sub).await?,\n+        Command::Room { sub } => match sub {\n+            RoomCmd::Create { slug, json } => {\n+                let client = http_client()?;\n+                let bearer = effective_bearer().ok_or_else(|| {\n+                    anyhow!(\n+                        \"no bearer token: run `slugsocial identity start --rig <rig> --model <model>` \\\n+                         then `slugsocial identity poll <session>`, or set SLUG_BEARER_TOKEN / ~/.config/slugsocial/token\"\n+                    )\n+                })?;\n+                let batch = send_rpc(\n+                    &client,\n+                    base,\n+                    Some(&bearer),\n+                    vec![RpcCommand::RoomCreate { slug }],\n+                )\n+                .await?;\n+                match rpc_line_ok(&batch.results[0])? {\n+                    RpcResult::RoomCreated { room_id } => {\n+                        if json {\n+                            println!(\n+                                \"{}\",\n+                                serde_json::to_string_pretty(&serde_json::json!({\n+                                    \"ok\": true,\n+                                    \"room_id\": room_id,\n+                                }))?\n+                            );\n+                        } else {\n+                            println!(\"{room_id}\");\n+                            println!();\n+                            println!(\"Next: npx slugsocial private {room_id} forum post <TAG> --delegate '…' …\");\n+                            println!(\"      npx slugsocial private {room_id} invite-link --caps view,post,vote\");\n+                        }\n+                    }\n+                    _ => return Err(anyhow!(\"unexpected RPC result\")),\n+                }\n+            }\n+        },\n \n         Command::Healthz { json } => {\n             let client = http_client()?;\ndiff --git a/server/src/api/rpc.rs b/server/src/api/rpc.rs\nindex f6bbc3df71909a2da7403cd46fe4ea6ca130c692..7d384e938a526bdf6aa04d1bf21a54d3fcb57d7e 100644\n--- a/server/src/api/rpc.rs\n+++ b/server/src/api/rpc.rs\n@@ -14,7 +14,7 @@ use crate::{\n     canonical_path::{canonicalize_item, canonicalize_tag},\n     dsl,\n     events::{\n-        AgentBound, Event, GrantAdded, Ingest, RoomCreated, ThreadCapability, ThreadVisibility,\n+        AgentBound, Event, GrantAdded, Ingest, RoomCreated, ThreadCapability,\n     },\n     identity::{parse_agent, parse_username},\n     path_types::CanonicalItemUrl,\n@@ -270,7 +270,7 @@ async fn rpc_post(\n     let scope = scope_from_room_wire(&room_key);\n \n     let is_private = !matches!(scope, ScopeId::Public);\n-    if is_private && !reduced.rooms.contains_key(&room_key) {\n+    if is_private && !reduced.rooms.contains(&room_key) {\n         drop(reduced);\n         return Err((\"unknown room\".into(), Some(format!(\"room `{}` does not exist\", room_key))));\n     }\n@@ -958,7 +958,7 @@ pub async fn handle_rpc_batch(\n                 let reduced = state.reduced.read().await;\n                 line_ok(RpcResult::ForumThreads(rpc_list_forum_threads(&reduced, &room)))\n             }\n-            RpcCommand::RoomCreate { slug, visibility } => {\n+            RpcCommand::RoomCreate { slug } => {\n                 // Scope the first read so its guard drops before any nested `read().await` / `write().await`.\n                 // A guard from `match verify(..., &*state.reduced.read().await)` would otherwise live for the\n                 // whole `match` and deadlock here (tokio::sync::RwLock is not reentrant).\n@@ -975,53 +975,42 @@ pub async fn handle_rpc_batch(\n                         } else if !slug.chars().all(|c| c.is_ascii_alphanumeric() || c == '-') {\n                             line_err(\"slug must be lowercase alphanumeric with hyphens\", None)\n                         } else {\n-                            match visibility.as_deref().unwrap_or(\"private\") {\n-                                \"private\" | \"public\" => {\n-                                    let vis = if visibility.as_deref() == Some(\"public\") {\n-                                        ThreadVisibility::Public\n-                                    } else {\n-                                        ThreadVisibility::Private\n-                                    };\n-                                    let short_id = loop {\n-                                        let id = gen_short_id();\n-                                        if !state.reduced.read().await.rooms.contains_key(&format!(\"{id}/{slug}\")) {\n-                                            break id;\n-                                        }\n-                                    };\n-                                    let room_id = format!(\"{short_id}/{slug}\");\n-                                    let ts = now_ms();\n-                                    let tc_ev = Event::RoomCreated(RoomCreated {\n-                                        ts,\n-                                        room_id: room_id.clone(),\n-                                        slug: slug.clone(),\n-                                        owner: principal.clone(),\n-                                        visibility: vis,\n-                                    });\n-                                    let ga_ev = Event::GrantAdded(GrantAdded {\n-                                        ts,\n-                                        room_id: room_id.clone(),\n-                                        username: principal.clone(),\n-                                        capabilities: vec![\n-                                            ThreadCapability::View,\n-                                            ThreadCapability::Post,\n-                                            ThreadCapability::Vote,\n-                                            ThreadCapability::AddItem,\n-                                            ThreadCapability::Manage,\n-                                        ],\n-                                        granted_by: principal.clone(),\n-                                    });\n-                                    if let Err(e) = state.event_log.append(&tc_ev).await {\n-                                        line_err(format!(\"{e}\"), None)\n-                                    } else if let Err(e) = state.event_log.append(&ga_ev).await {\n-                                        line_err(format!(\"{e}\"), None)\n-                                    } else {\n-                                        let mut r = state.reduced.write().await;\n-                                        r.apply_event(tc_ev);\n-                                        r.apply_event(ga_ev);\n-                                        line_ok(RpcResult::RoomCreated { room_id })\n-                                    }\n+                            let short_id = loop {\n+                                let id = gen_short_id();\n+                                if !state.reduced.read().await.rooms.contains(&format!(\"{id}/{slug}\")) {\n+                                    break id;\n                                 }\n-                                other => line_err(format!(\"unknown visibility: {other}\"), None),\n+                            };\n+                            let room_id = format!(\"{short_id}/{slug}\");\n+                            let ts = now_ms();\n+                            let tc_ev = Event::RoomCreated(RoomCreated {\n+                                ts,\n+                                room_id: room_id.clone(),\n+                                slug: slug.clone(),\n+                                owner: principal.clone(),\n+                            });\n+                            let ga_ev = Event::GrantAdded(GrantAdded {\n+                                ts,\n+                                room_id: room_id.clone(),\n+                                username: principal.clone(),\n+                                capabilities: vec![\n+                                    ThreadCapability::View,\n+                                    ThreadCapability::Post,\n+                                    ThreadCapability::Vote,\n+                                    ThreadCapability::AddItem,\n+                                    ThreadCapability::Manage,\n+                                ],\n+                                granted_by: principal.clone(),\n+                            });\n+                            if let Err(e) = state.event_log.append(&tc_ev).await {\n+                                line_err(format!(\"{e}\"), None)\n+                            } else if let Err(e) = state.event_log.append(&ga_ev).await {\n+                                line_err(format!(\"{e}\"), None)\n+                            } else {\n+                                let mut r = state.reduced.write().await;\n+                                r.apply_event(tc_ev);\n+                                r.apply_event(ga_ev);\n+                                line_ok(RpcResult::RoomCreated { room_id })\n                             }\n                         }\n                     }\n@@ -1161,7 +1150,7 @@ pub async fn handle_rpc_batch(\n                     Err((_, m)) => line_err(m, None),\n                     Ok(principal) => {\n                         let reduced = state.reduced.read().await;\n-                        if !reduced.rooms.contains_key(&room) {\n+                        if !reduced.rooms.contains(&room) {\n                             line_err(\"unknown room\", None)\n                         } else {\n                             let can_audit = reduced.user_has_cap(&room, &principal, ThreadCapability::View)\ndiff --git a/server/src/events.rs b/server/src/events.rs\nindex 9e60f2c218f5c871a93e855e415dd984e3a017c5..b4ffed95ead228b9cb37ce50953b13efb958a73d 100644\n--- a/server/src/events.rs\n+++ b/server/src/events.rs\n@@ -1,12 +1,5 @@\n use serde::{Deserialize, Serialize};\n \n-#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq)]\n-#[serde(rename_all = \"snake_case\")]\n-pub enum ThreadVisibility {\n-    Public,\n-    Private,\n-}\n-\n #[derive(Debug, Clone, Copy, Hash, Serialize, Deserialize, PartialEq, Eq)]\n #[serde(rename_all = \"snake_case\")]\n pub enum ThreadCapability {\n@@ -57,13 +50,13 @@ pub struct AgentBound {\n     pub username: String,\n }\n \n+/// Private space keyed as `shortid/slug`.\n #[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]\n pub struct RoomCreated {\n     pub ts: i64,\n     pub room_id: String,\n     pub slug: String,\n     pub owner: String,\n-    pub visibility: ThreadVisibility,\n }\n \n #[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]\ndiff --git a/server/src/html/search.rs b/server/src/html/search.rs\nindex 9353cf229fbbd2cfbab5b89ba63ebe192042c91f..694220a038b335f19ac33cb3fb33c74a625bcc51 100644\n--- a/server/src/html/search.rs\n+++ b/server/src/html/search.rs\n@@ -113,7 +113,7 @@ fn search(state: &ReducerState, q: &str, limit: usize) -> SearchResults {\n         }\n     }\n \n-    // Search threads (public room only in HTML)\n+    // Search threads (shared site scope only — `room` wire `public`)\n     for ((scope, tag), thread_state) in &state.forum_threads {\n         if scope != &ScopeId::Public {\n             continue;\ndiff --git a/server/src/reducer.rs b/server/src/reducer.rs\nindex 5190d0a7ee3d545a786a68fef483322aafdce7f9..e06445fa4441771cda0d3474bedccf6f19a36b5f 100644\n--- a/server/src/reducer.rs\n+++ b/server/src/reducer.rs\n@@ -3,7 +3,7 @@ use std::collections::{HashMap, HashSet, VecDeque};\n use serde::{Deserialize, Serialize};\n \n use crate::canonical_path::canonicalize_tag;\n-use crate::events::{Event, Ingest, ThreadCapability, ThreadVisibility};\n+use crate::events::{Event, Ingest, ThreadCapability};\n use crate::path_types::CanonicalItemUrl;\n \n #[derive(Debug, Clone, Hash, PartialEq, Eq, PartialOrd, Ord)]\n@@ -151,11 +151,6 @@ pub struct RankHistoryEntry {\n     pub post_id: String,\n }\n \n-#[derive(Debug, Clone)]\n-pub struct RoomState {\n-    pub visibility: crate::events::ThreadVisibility,\n-}\n-\n /// Durable invite link state (from [`crate::events::InviteMinted`] / [`crate::events::InviteRedeemed`]).\n #[derive(Debug, Clone)]\n pub struct ActiveInviteState {\n@@ -171,7 +166,6 @@ pub enum RoomTimelineKind {\n     RoomCreated {\n         owner: String,\n         slug: String,\n-        visibility: ThreadVisibility,\n     },\n     GrantAdded {\n         username: String,\n@@ -235,8 +229,8 @@ pub struct ReducerState {\n     pub ingests_by_id: HashMap<String, Ingest>,\n     /// (scope, thread_tag) → ingest ids, newest first.\n     pub ingests_by_scope_thread: HashMap<(ScopeId, String), VecDeque<String>>,\n-    /// Private (or public) room registry: room_id → visibility from [`RoomCreated`].\n-    pub rooms: HashMap<String, RoomState>,\n+    /// Private room ids (`shortid/slug`) known from [`RoomCreated`].\n+    pub rooms: HashSet<String>,\n     /// (scope, thread_tag) → last activity.\n     pub forum_threads: HashMap<(ScopeId, String), ForumThreadState>,\n     pub actor_last_post_ts: HashMap<String, i64>,\n@@ -403,12 +397,7 @@ impl ReducerState {\n                 self.agent_bindings.insert(ab.agent, ab.username);\n             }\n             Event::RoomCreated(rc) => {\n-                self.rooms.insert(\n-                    rc.room_id.clone(),\n-                    RoomState {\n-                        visibility: rc.visibility,\n-                    },\n-                );\n+                self.rooms.insert(rc.room_id.clone());\n                 self.room_timeline\n                     .entry(rc.room_id.clone())\n                     .or_default()\n@@ -417,7 +406,6 @@ impl ReducerState {\n                         kind: RoomTimelineKind::RoomCreated {\n                             owner: rc.owner.clone(),\n                             slug: rc.slug.clone(),\n-                            visibility: rc.visibility,\n                         },\n                     });\n             }\n@@ -673,7 +661,7 @@ impl Default for ReducerState {\n             agent_bindings: HashMap::new(),\n             ingests_by_id: HashMap::new(),\n             ingests_by_scope_thread: HashMap::new(),\n-            rooms: HashMap::new(),\n+            rooms: HashSet::new(),\n             forum_threads: HashMap::new(),\n             actor_last_post_ts: HashMap::new(),\n             ingests_ordered: Vec::new(),\ndiff --git a/server/src/timeline.rs b/server/src/timeline.rs\nindex 251158943ab36d3015268e35f6bdd01c3f42ab3b..265ca4ae9946ecd29a7d1d4ec791de8465ce658e 100644\n--- a/server/src/timeline.rs\n+++ b/server/src/timeline.rs\n@@ -25,16 +25,8 @@ fn caps_list(caps: &[crate::events::ThreadCapability]) -> String {\n /// Human-readable system line for the thread feed.\n pub fn format_room_timeline_entry(e: &RoomTimelineEntry) -> String {\n     match &e.kind {\n-        RoomTimelineKind::RoomCreated {\n-            owner,\n-            slug,\n-            visibility,\n-        } => {\n-            let vis = match visibility {\n-                crate::events::ThreadVisibility::Public => \"public\",\n-                crate::events::ThreadVisibility::Private => \"private\",\n-            };\n-            format!(\"@{owner} created room #{slug} ({vis})\")\n+        RoomTimelineKind::RoomCreated { owner, slug } => {\n+            format!(\"@{owner} created room #{slug}\")\n         }\n         RoomTimelineKind::GrantAdded {\n             username,\n@@ -141,7 +133,7 @@ pub fn merge_thread_rows(\n     rows\n }\n \n-/// Public forum thread (`room_wire == \"public\"`): same merge (timeline usually empty).\n+/// Shared-site thread view (`room_wire == \"public\"` on the wire). Same merge as private rooms; private-room timeline is unused here.\n pub fn merge_public_thread_rows(\n     reduced: &ReducerState,\n     thread_tag: &str,\ndiff --git a/server/tests/integration.rs b/server/tests/integration.rs\nindex b930120da09fe7d307f0411b84fb639fb8bd0b15..139fdda27d2276e3b30116816495648970d24c5f 100644\n--- a/server/tests/integration.rs\n+++ b/server/tests/integration.rs\n@@ -96,11 +96,11 @@ async fn test_healthz() {\n }\n \n #[tokio::test]\n-async fn test_room_create_private_rpc() {\n+async fn test_room_create_rpc() {\n     let (addr, _tmp, _log, _handle) = create_test_server().await;\n     let client = reqwest::Client::new();\n     let batch = serde_json::json!([{\n-        \"RoomCreate\": { \"slug\": \"secret-project\", \"visibility\": \"private\" }\n+        \"RoomCreate\": { \"slug\": \"secret-project\" }\n     }]);\n     let body = rpc_batch(&client, addr, Some(&test_bearer()), batch).await;\n     let line = &body[\"results\"][0];\ndiff --git a/test/grants.bb b/test/grants.bb\nindex 4ded5ce92576cdea653cce0ba8a751be4374731a..697e7d91545dd3ee96efde07fc8c3cf90f1a8056 100644\n--- a/test/grants.bb\n+++ b/test/grants.bb\n@@ -82,7 +82,7 @@\n            ;; Alice creates a private room.\n            _ (println \"\\nalice creates private room…\")\n            create (rpc-batch! base-url alice-token\n-                              [{\"RoomCreate\" {\"slug\" \"secret-project\" \"visibility\" \"private\"}}])\n+                              [{\"RoomCreate\" {\"slug\" \"secret-project\"}}])\n            _ (assert! (= 200 (:status create)) \"room create HTTP 200\")\n            _ (assert! (rpc-line-ok? (:parsed create)) \"room create RPC ok\")\n            room-id (get-in (:parsed create) [\"results\" 0 \"result\" \"RoomCreated\" \"room_id\"])\ndiff --git a/test/invites.bb b/test/invites.bb\nindex f72b1e630a6856174cdef11eb977e2f81b16e551..ca0fd6c858400671452c4ec59c490d05101dd0e4 100644\n--- a/test/invites.bb\n+++ b/test/invites.bb\n@@ -86,7 +86,7 @@\n \n            _ (println \"\\nalice creates private room…\")\n            create (rpc-batch! base-url alice-token\n-                              [{\"RoomCreate\" {\"slug\" \"invite-demo\" \"visibility\" \"private\"}}])\n+                              [{\"RoomCreate\" {\"slug\" \"invite-demo\"}}])\n            _ (assert! (= 200 (:status create)) \"room create HTTP 200\")\n            _ (assert! (rpc-line-ok? (:parsed create)) \"room create RPC ok\")\n            room-id (get-in (:parsed create) [\"results\" 0 \"result\" \"RoomCreated\" \"room_id\"])\ndiff --git a/types/src/lib.rs b/types/src/lib.rs\nindex 98c66a00fd27803ef6f75b5ac478ff2eb762d771..bb8586f1734f77d95598a9294bdb0de2d55bf715 100644\n--- a/types/src/lib.rs\n+++ b/types/src/lib.rs\n@@ -319,8 +319,6 @@ pub enum RpcCommand {\n     },\n     RoomCreate {\n         slug: String,\n-        #[serde(default, skip_serializing_if = \"Option::is_none\")]\n-        visibility: Option<String>,\n     },\n     RoomGrant {\n         room: String,\n","role":"user"}],"model":"~anthropic/claude-sonnet-latest"}