{"messages":[{"content":"You are a constitutional council ranking individual git commits for ownership allocation.\n\nCompare these two commits. Decide which contributed more lasting value to the project.\n\nJudge substance, not spectacle:\n- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.\n- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.\n- Do not favor a side merely because its patch is longer or noisier.\n- Weight what the change does for the project, not the contributor's name.\n\nReturn ONLY a JSON object: {\"winner\": \"A\" or \"B\", \"ratio\": \"N:M\", \"explanation\": \"...\"}\nThe explanation must cite concrete differences in the patches (1-3 sentences).\n\nSide A — contributor: tommy-mor\nSide A — commit message:\n[880eb778] Harden auth: fail-closed votes, mock OAuth gate, Secure cookies.\n\nAlso show the current alias in the top nav and pin durable by rev.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\nSide A — unified diff (full patch):\ndiff --git a/AGENTS.md b/AGENTS.md\nindex babb889d6fbfb1fa7176c9e6b7544ae17b61dd2e..6e0fd8ebb65d665c9c1438e3275971d62b98fd95 100644\n--- a/AGENTS.md\n+++ b/AGENTS.md\n@@ -10,11 +10,11 @@ Single Rust web app **`sorter2-server`**: pairwise voting, rank-centrality ranki\n \n - **Bootstrap script**: `./scripts/cursor-env-install.sh` (also run via `.cursor/environment.json` on Cloud Agent boot) installs Playwright Chromium, Babashka, bbin, `clj-paren-repair`, and warms the RocksDB build.\n - **Rust 1.88+** is required (`rust-toolchain.toml`). The Cloud Dockerfile and `cursor-env-install.sh` install **rustup** 1.88.0 first so `cargo` works while Playwright/Clojure bootstrap continues. Do not rely on `/usr/local/cargo` (often missing or stale).\n-- **RocksDB / `durable`**: Ubuntu’s default `c++` is often **clang** without libc++ headers. Set **`CXX=g++`** and **`RUSTFLAGS=\"-C linker=g++\"`** (or `CC=gcc`) before `cargo build` / `cargo test` — both are set in the bootstrap script and `.cursor/environment.json`.\n+- **RocksDB / `durable`**: `durable` is an external git dependency (`tommy-mor/durable`, pinned by rev in `server/Cargo.toml`). Ubuntu’s default `c++` is often **clang** without libc++ headers. Set **`CXX=g++`** and **`RUSTFLAGS=\"-C linker=g++\"`** (or `CC=gcc`) before `cargo build` / `cargo test` — both are set in the bootstrap script and `.cursor/environment.json`.\n - **System packages** for builds: `build-essential`, `g++`, `clang`, `libclang-dev`, `pkg-config`, `libssl-dev`, `openjdk-21-jre-headless` (for `reqwest` / OpenSSL, `librocksdb-sys`, `zstd-sys` / bindgen, and **bbin** / Clojure JVM). The bootstrap sets **`JAVA_HOME`** when Java is present.\n - **Clojure CLI 1.12.0.1530** (used in CI): install from https://clojure.org/guides/install_clojure — needed for `./scripts/clj-test.sh` / Kaocha tests.\n - **Babashka / bbin / clj-paren-repair**: installed by `cursor-env-install.sh` into `~/.local/bin` (bb tasks in `bb.edn`, delimiter repair for Clojure edits).\n-- **Playwright** (Spel browser tests in `test/vote_compare.clj`): Chromium via `clojure -M -e \"(com.microsoft.playwright.CLI/main ...)\"` — run once after clone or use the bootstrap script.\n+- **Playwright** (Spel browser tests in `test/vote_compare.clj` / `test/auth_login.clj`): Chromium via `clojure -M -e \"(com.microsoft.playwright.CLI/main ...)\"` — run once after clone or use the bootstrap script.\n \n ### Commands (see also `TEST.sh`)\n \n@@ -34,13 +34,17 @@ Environment variables (defaults in `server/src/state.rs`):\n - `PORT` — default `8080`\n - `SORTER2_DATA_DIR` — default `./data` (created on startup)\n - `SORTER2_EVENT_LOG` — default `{data_dir}/events.jsonl`\n+- `SORTER2_BASE_URL` — public origin (also drives Secure cookies when `https://`)\n+- `GITHUB_CLIENT_ID` / `GITHUB_CLIENT_SECRET` — GitHub OAuth (optional; login disabled if unset)\n+- `SORTER2_ALLOW_MOCK_OAUTH=1` — allow `mock_user` on `/auth/github` (tests only)\n \n Health check: `GET /healthz` → `ok`.\n \n-Core UI flow: `POST /ui` with form field `__rpc__` (JSON). Example vote:\n+Core UI flow: `POST /ui` with form field `__rpc__` (JSON). Votes require a session cookie (sign in via `/login`). Example vote:\n \n ```bash\n curl -sf -X POST http://127.0.0.1:8080/ui \\\n+  --cookie \"sorter2_session=...\" \\\n   --data-urlencode '__rpc__={\"action\":\"record_vote\",\"a\":\"alpha\",\"b\":\"beta\",\"ratio_left\":2,\"ratio_right\":1}'\n ```\n \ndiff --git a/Cargo.lock b/Cargo.lock\nindex aa02997ad85777195f135bfd9456bcee0fc9a590..1f8690f3e486d099577a32c2ece48caf57ea7160 100644\n--- a/Cargo.lock\n+++ b/Cargo.lock\n@@ -414,7 +414,7 @@ dependencies = [\n [[package]]\n name = \"durable\"\n version = \"0.2.0\"\n-source = \"git+https://github.com/tommy-mor/durable.git?branch=main#a6c14eaa809693140eea0c22b07ef24d8e74adaf\"\n+source = \"git+https://github.com/tommy-mor/durable.git?rev=a6c14eaa809693140eea0c22b07ef24d8e74adaf#a6c14eaa809693140eea0c22b07ef24d8e74adaf\"\n dependencies = [\n  \"ciborium\",\n  \"durable-derive\",\n@@ -426,7 +426,7 @@ dependencies = [\n [[package]]\n name = \"durable-derive\"\n version = \"0.2.0\"\n-source = \"git+https://github.com/tommy-mor/durable.git?branch=main#a6c14eaa809693140eea0c22b07ef24d8e74adaf\"\n+source = \"git+https://github.com/tommy-mor/durable.git?rev=a6c14eaa809693140eea0c22b07ef24d8e74adaf#a6c14eaa809693140eea0c22b07ef24d8e74adaf\"\n dependencies = [\n  \"proc-macro2\",\n  \"quote\",\ndiff --git a/server/Cargo.toml b/server/Cargo.toml\nindex dfa39beddecfa37dcdeaa602cb30f4b547528fbb..bd88687fb0ba47d68f2c08eb5e11d0e08b7c4398 100644\n--- a/server/Cargo.toml\n+++ b/server/Cargo.toml\n@@ -25,7 +25,7 @@ futures-util = { version = \"0.3\", default-features = false, features = [\"std\"] }\n rand = \"0.8\"\n urlencoding = \"2\"\n url = \"2\"\n-durable = { git = \"https://github.com/tommy-mor/durable.git\", branch = \"main\" }\n+durable = { git = \"https://github.com/tommy-mor/durable.git\", rev = \"a6c14eaa809693140eea0c22b07ef24d8e74adaf\" }\n \n [dev-dependencies]\n reqwest = { version = \"0.12\", features = [\"json\"] }\ndiff --git a/server/src/api/ui_html.rs b/server/src/api/ui_html.rs\nindex b86581b1f337650564274254d840e8a75b49524d..9da62ffbed07eb28729aa3160bf33b07ce0d7945 100644\n--- a/server/src/api/ui_html.rs\n+++ b/server/src/api/ui_html.rs\n@@ -71,10 +71,16 @@ pub async fn post_ui_html(\n                 return resp;\n             }\n             let parent = parent_from_scope(&scope);\n-            let actor = resolve_vote_actor(\n+            let actor = match resolve_vote_actor(\n                 state.projection_store.db(),\n                 session_id_from_jar(&jar).as_deref(),\n-            );\n+            ) {\n+                Ok(actor) => actor,\n+                Err(_) => {\n+                    return vote_auth_redirect(&state, &jar)\n+                        .unwrap_or_else(|| login_redirect_js().into_response());\n+                }\n+            };\n             if let Err(e) = state\n                 .record_vote(&parent, &a, &b, ratio_left, ratio_right, &actor)\n                 .await\ndiff --git a/server/src/auth/config.rs b/server/src/auth/config.rs\nindex a1f042c655bf3e5234eeb87a7d889f64592807fb..a5976af9a52ea207b35ae87bd1fe927c47a477ca 100644\n--- a/server/src/auth/config.rs\n+++ b/server/src/auth/config.rs\n@@ -1,9 +1,42 @@\n pub const AUTH_RETURN_COOKIE: &str = \"sorter2_auth_return\";\n \n+/// Allow `mock_user` on `/auth/github` (test harness only).\n+pub fn mock_oauth_allowed() -> bool {\n+    matches!(\n+        std::env::var(\"SORTER2_ALLOW_MOCK_OAUTH\").as_deref(),\n+        Ok(\"1\") | Ok(\"true\") | Ok(\"TRUE\")\n+    )\n+}\n+\n+/// Set the Secure flag on auth cookies when serving over HTTPS.\n+pub fn cookies_secure() -> bool {\n+    std::env::var(\"SORTER2_BASE_URL\")\n+        .map(|u| u.starts_with(\"https://\"))\n+        .unwrap_or(false)\n+}\n+\n pub fn sanitize_return_to(raw: &str) -> String {\n     let s = raw.trim();\n-    if s.is_empty() || !s.starts_with('/') || s.starts_with(\"//\") {\n+    if s.is_empty() || !s.starts_with('/') || s.starts_with(\"//\") || s.starts_with(\"/\\\\\") {\n+        return \"/\".to_string();\n+    }\n+    // Reject scheme-relative and protocol-smuggling forms.\n+    if s.contains(\"://\") || s.contains('\\\\') {\n         return \"/\".to_string();\n     }\n     s.to_string()\n }\n+\n+#[cfg(test)]\n+mod tests {\n+    use super::*;\n+\n+    #[test]\n+    fn sanitize_return_to_blocks_open_redirects() {\n+        assert_eq!(sanitize_return_to(\"\"), \"/\");\n+        assert_eq!(sanitize_return_to(\"//evil.com\"), \"/\");\n+        assert_eq!(sanitize_return_to(\"/\\\\evil.com\"), \"/\");\n+        assert_eq!(sanitize_return_to(\"https://evil.com\"), \"/\");\n+        assert_eq!(sanitize_return_to(\"/vote?parent=x\"), \"/vote?parent=x\");\n+    }\n+}\ndiff --git a/server/src/auth/mod.rs b/server/src/auth/mod.rs\nindex 5ed535ba199fa736f0048c32623b14c3b1e5de2d..d4a85ef52c15dc35148e4c743f0d646cbbdb056d 100644\n--- a/server/src/auth/mod.rs\n+++ b/server/src/auth/mod.rs\n@@ -26,7 +26,7 @@ use crate::{\n     ui_action::UI_RPC_FIELD,\n };\n \n-pub use session::{resolve_vote_actor, session_id_from_jar, VoteActor};\n+pub use session::{nav_pseudonym, resolve_vote_actor, session_id_from_jar, VoteActor};\n \n pub fn base_url_from_env(port: u16) -> String {\n     std::env::var(\"SORTER2_BASE_URL\")\n@@ -168,6 +168,10 @@ pub async fn login_page(\n         \"login · sorter2\",\n         login_body(session.as_ref(), &aliases, &providers),\n         state.views.get_views(\"/login\"),\n+        session\n+            .as_ref()\n+            .filter(|s| !s.pseudonym.trim().is_empty())\n+            .map(|s| s.pseudonym.as_str()),\n     );\n     (jar, Html(markup.into_string())).into_response()\n }\n@@ -222,6 +226,7 @@ pub async fn alias_page(\n             \"choose alias · sorter2\",\n             body,\n             state.views.get_views(\"/login/alias\"),\n+            None,\n         )\n         .into_string(),\n     )\n@@ -237,7 +242,12 @@ pub async fn github_start(\n         .ok_or(StatusCode::SERVICE_UNAVAILABLE)?;\n     let return_to = return_from_query_or_jar(&jar, query.return_to.as_deref());\n     let state_token = session::new_oauth_state();\n-    let url = oauth::authorize_url(&cfg, &state_token, query.mock_user.as_deref());\n+    let mock_user = if config::mock_oauth_allowed() {\n+        query.mock_user.as_deref()\n+    } else {\n+        None\n+    };\n+    let url = oauth::authorize_url(&cfg, &state_token, mock_user);\n     let jar = jar\n         .add(session::oauth_state_cookie_value(&state_token))\n         .add(session::auth_return_cookie_value(&return_to));\ndiff --git a/server/src/auth/session.rs b/server/src/auth/session.rs\nindex 09659240b9455c6fca12db5652e1d31cf8c2acfc..41df030ded3abcafc0ab3887ab769adf103f9aa0 100644\n--- a/server/src/auth/session.rs\n+++ b/server/src/auth/session.rs\n@@ -5,7 +5,7 @@ use durable::{Db, Durability};\n use rand::Rng;\n \n use crate::{\n-    auth::config::AUTH_RETURN_COOKIE,\n+    auth::config::{self, AUTH_RETURN_COOKIE},\n     fetch::now_ms,\n     identity::{DEFAULT_ACTOR_UUID, DEFAULT_PSEUDONYM},\n     storage_dto::{SessionDataV1, SESSION_DATA_VERSION},\n@@ -37,6 +37,7 @@ pub struct VoteActor {\n }\n \n impl VoteActor {\n+    /// Test / bench helper: seed votes as the default pseudonym without a session.\n     pub fn anon() -> Self {\n         Self {\n             pseudonym: DEFAULT_PSEUDONYM.to_string(),\n@@ -70,20 +71,51 @@ fn hex_encode(bytes: &[u8]) -> String {\n     bytes.iter().map(|b| format!(\"{b:02x}\")).collect()\n }\n \n-pub fn resolve_vote_actor(db: &Db, session_id: Option<&str>) -> VoteActor {\n-    let Some(session_id) = session_id else {\n-        return VoteActor::anon();\n-    };\n-    let Ok(Some(session)) = load_session(db, session_id) else {\n-        return VoteActor::anon();\n-    };\n-    if session.expires_at <= now_ms() {\n-        return VoteActor::anon();\n+fn build_cookie(name: &'static str, value: String) -> Cookie<'static> {\n+    let mut builder = Cookie::build((name, value))\n+        .http_only(true)\n+        .same_site(SameSite::Lax)\n+        .path(\"/\");\n+    if config::cookies_secure() {\n+        builder = builder.secure(true);\n+    }\n+    builder.build()\n+}\n+\n+fn clear_cookie(name: &'static str) -> Cookie<'static> {\n+    let mut builder = Cookie::build((name, \"\"))\n+        .http_only(true)\n+        .same_site(SameSite::Lax)\n+        .path(\"/\")\n+        .removal();\n+    if config::cookies_secure() {\n+        builder = builder.secure(true);\n+    }\n+    builder.build()\n+}\n+\n+/// Resolve the vote actor from a live session. Fail-closed: never falls back to anon.\n+pub fn resolve_vote_actor(db: &Db, session_id: Option<&str>) -> Result<VoteActor, &'static str> {\n+    let session_id = session_id.ok_or(\"sign in to vote\")?;\n+    let session = load_valid_session(db, session_id).ok_or(\"session expired\")?;\n+    if !session_has_pseudonym(&session) {\n+        return Err(\"choose an alias first\");\n     }\n     let trust_weight = user_trust_weight(db, &session.uuid).unwrap_or(1.0);\n-    VoteActor {\n+    Ok(VoteActor {\n         pseudonym: session.current_pseudonym,\n         trust_weight,\n+    })\n+}\n+\n+/// Display name for the top nav, if any session is active.\n+pub fn nav_pseudonym(db: &Db, jar: &CookieJar) -> Option<String> {\n+    let session_id = session_id_from_jar(jar)?;\n+    let session = load_valid_session(db, &session_id)?;\n+    if session_has_pseudonym(&session) {\n+        Some(session.current_pseudonym)\n+    } else {\n+        None\n     }\n }\n \n@@ -151,54 +183,27 @@ pub fn destroy_session(db: &Db, session_id: &str) -> Result<(), String> {\n }\n \n pub fn session_cookie_value(session_id: &str) -> Cookie<'static> {\n-    Cookie::build((SESSION_COOKIE, session_id.to_string()))\n-        .http_only(true)\n-        .same_site(SameSite::Lax)\n-        .path(\"/\")\n-        .build()\n+    build_cookie(SESSION_COOKIE, session_id.to_string())\n }\n \n pub fn clear_session_cookie() -> Cookie<'static> {\n-    Cookie::build((SESSION_COOKIE, \"\"))\n-        .http_only(true)\n-        .same_site(SameSite::Lax)\n-        .path(\"/\")\n-        .removal()\n-        .build()\n+    clear_cookie(SESSION_COOKIE)\n }\n \n pub fn oauth_state_cookie_value(state: &str) -> Cookie<'static> {\n-    Cookie::build((OAUTH_STATE_COOKIE, state.to_string()))\n-        .http_only(true)\n-        .same_site(SameSite::Lax)\n-        .path(\"/\")\n-        .build()\n+    build_cookie(OAUTH_STATE_COOKIE, state.to_string())\n }\n \n pub fn clear_oauth_state_cookie() -> Cookie<'static> {\n-    Cookie::build((OAUTH_STATE_COOKIE, \"\"))\n-        .http_only(true)\n-        .same_site(SameSite::Lax)\n-        .path(\"/\")\n-        .removal()\n-        .build()\n+    clear_cookie(OAUTH_STATE_COOKIE)\n }\n \n pub fn auth_return_cookie_value(return_to: &str) -> Cookie<'static> {\n-    Cookie::build((AUTH_RETURN_COOKIE, return_to.to_string()))\n-        .http_only(true)\n-        .same_site(SameSite::Lax)\n-        .path(\"/\")\n-        .build()\n+    build_cookie(AUTH_RETURN_COOKIE, return_to.to_string())\n }\n \n pub fn clear_auth_return_cookie() -> Cookie<'static> {\n-    Cookie::build((AUTH_RETURN_COOKIE, \"\"))\n-        .http_only(true)\n-        .same_site(SameSite::Lax)\n-        .path(\"/\")\n-        .removal()\n-        .build()\n+    clear_cookie(AUTH_RETURN_COOKIE)\n }\n \n pub fn auth_return_from_jar(jar: &CookieJar) -> Option<String> {\n@@ -213,28 +218,35 @@ pub fn oauth_state_from_jar(jar: &CookieJar) -> Option<String> {\n     jar.get(OAUTH_STATE_COOKIE).map(|c| c.value().to_string())\n }\n \n-pub fn actor_uuid_for_vote(db: &Db, session_id: Option<&str>) -> String {\n-    let Some(session_id) = session_id else {\n-        return DEFAULT_ACTOR_UUID.to_string();\n-    };\n-    load_session(db, session_id)\n-        .ok()\n-        .flatten()\n-        .filter(|s| s.expires_at > now_ms())\n-        .map(|s| s.uuid)\n-        .unwrap_or_else(|| DEFAULT_ACTOR_UUID.to_string())\n-}\n-\n #[cfg(test)]\n mod tests {\n     use super::*;\n \n     #[test]\n-    fn missing_session_falls_back_to_anon() {\n+    fn missing_session_is_error() {\n+        let dir = tempfile::tempdir().unwrap();\n+        let db = Db::open(dir.path()).unwrap();\n+        assert_eq!(resolve_vote_actor(&db, None).unwrap_err(), \"sign in to vote\");\n+    }\n+\n+    #[test]\n+    fn session_without_pseudonym_is_error() {\n+        let dir = tempfile::tempdir().unwrap();\n+        let db = Db::open(dir.path()).unwrap();\n+        let (id, _) = create_session(&db, DEFAULT_ACTOR_UUID, \"\").unwrap();\n+        assert_eq!(\n+            resolve_vote_actor(&db, Some(&id)).unwrap_err(),\n+            \"choose an alias first\"\n+        );\n+    }\n+\n+    #[test]\n+    fn session_with_pseudonym_resolves() {\n         let dir = tempfile::tempdir().unwrap();\n         let db = Db::open(dir.path()).unwrap();\n-        let actor = resolve_vote_actor(&db, None);\n-        assert_eq!(actor.pseudonym, DEFAULT_PSEUDONYM);\n+        let (id, _) = create_session(&db, DEFAULT_ACTOR_UUID, \"alice\").unwrap();\n+        let actor = resolve_vote_actor(&db, Some(&id)).unwrap();\n+        assert_eq!(actor.pseudonym, \"alice\");\n         assert_eq!(actor.trust_weight, 1.0);\n     }\n }\ndiff --git a/server/src/html/mod.rs b/server/src/html/mod.rs\nindex 46d18b87f1313bf0aeb29955d18f291961057509..3cc3d7bdf55b5cb5d009600f4ade1fcd201a410b 100644\n--- a/server/src/html/mod.rs\n+++ b/server/src/html/mod.rs\n@@ -4,11 +4,13 @@ use axum::{\n     http::{header, StatusCode, Uri},\n     response::{IntoResponse, Response},\n };\n+use axum_extra::extract::cookie::CookieJar;\n use maud::{html, Markup, DOCTYPE};\n \n use std::collections::HashSet;\n \n use crate::{\n+    auth::nav_pseudonym,\n     fetch::html::entity_section,\n     form_template::template_json_compact,\n     path_types::ItemId,\n@@ -126,7 +128,7 @@ pub fn now_ms() -> i64 {\n     t.as_millis() as i64\n }\n \n-pub(crate) fn layout(title: &str, body: Markup, views: u64) -> Markup {\n+pub(crate) fn layout(title: &str, body: Markup, views: u64, nav_user: Option<&str>) -> Markup {\n     let ver = asset_version();\n     let css_href = format!(\"/static/sorter.css?v={ver}\");\n     let js_src = format!(\"/static/sorter_ui.js?v={ver}\");\n@@ -145,7 +147,15 @@ pub(crate) fn layout(title: &str, body: Markup, views: u64) -> Markup {\n                     span class=\"view-meta muted\" { (views) \" views\" }\n                 }\n                 nav class=\"top-nav\" {\n-                    a href=\"/login\" { \"login\" }\n+                    @if let Some(name) = nav_user {\n+                        span class=\"top-nav-user\" data-testid=\"nav-user\" { (name) }\n+                        a href=\"/login\" { \"account\" }\n+                        form class=\"top-nav-logout\" method=\"post\" action=\"/auth/logout\" data-navigate=\"full\" {\n+                            button type=\"submit\" data-testid=\"nav-logout\" { \"log out\" }\n+                        }\n+                    } @else {\n+                        a href=\"/login\" data-testid=\"nav-login\" { \"login\" }\n+                    }\n                 }\n                 div id=\"errors\" {}\n                 (body)\n@@ -481,10 +491,11 @@ pub fn input_panel(query: &str, error: Option<&str>) -> Markup {\n     }\n }\n \n-async fn item_page(state: AppState, uri: Uri, item: ItemId) -> Markup {\n+async fn item_page(state: AppState, uri: Uri, item: ItemId, jar: CookieJar) -> Markup {\n     let path = uri.path().to_string();\n     state.views.increment(path.clone());\n     let views = state.views.get_views(&path);\n+    let nav_user = nav_pseudonym(state.projection_store.db(), &jar);\n \n     let tree = state\n         .scope_tree(&item)\n@@ -513,16 +524,24 @@ async fn item_page(state: AppState, uri: Uri, item: ItemId) -> Markup {\n             (ranking_panel(&item, node, &tree))\n         }\n     };\n-    layout(\"sorter2\", body, views)\n+    layout(\"sorter2\", body, views, nav_user.as_deref())\n }\n \n-pub async fn home(State(state): State<AppState>, uri: Uri) -> impl IntoResponse {\n-    item_page(state, uri, ItemId::root()).await\n+pub async fn home(\n+    State(state): State<AppState>,\n+    jar: CookieJar,\n+    uri: Uri,\n+) -> impl IntoResponse {\n+    item_page(state, uri, ItemId::root(), jar).await\n }\n \n-pub async fn browse(State(state): State<AppState>, uri: Uri) -> impl IntoResponse {\n+pub async fn browse(\n+    State(state): State<AppState>,\n+    jar: CookieJar,\n+    uri: Uri,\n+) -> impl IntoResponse {\n     let item = ItemId::from_browse_uri(uri.path()).unwrap_or(ItemId::root());\n-    item_page(state, uri, item).await\n+    item_page(state, uri, item, jar).await\n }\n \n #[cfg(test)]\ndiff --git a/server/src/html/vote.rs b/server/src/html/vote.rs\nindex 3aa00c417c89a9cab3417c650b50ed7c73f08e20..cadbec188b17a48a63b269c0e2fa2ea8ffedd7ed 100644\n--- a/server/src/html/vote.rs\n+++ b/server/src/html/vote.rs\n@@ -4,11 +4,13 @@ use axum::{\n     extract::{Query, State},\n     response::{Html, IntoResponse},\n };\n+use axum_extra::extract::cookie::CookieJar;\n use maud::{html, Markup};\n use serde::Deserialize;\n use std::collections::HashSet;\n \n use crate::{\n+    auth::nav_pseudonym,\n     fetch::html::entity_section,\n     form_template::template_json_compact,\n     html::{ranking_panel_with_highlights, scope_theme_style, JsBuilder},\n@@ -262,6 +264,7 @@ fn suggest_next(\n \n pub async fn vote_page(\n     State(state): State<AppState>,\n+    jar: CookieJar,\n     Query(q): Query<VoteQuery>,\n ) -> impl IntoResponse {\n     let parent = parse_item_param(&q.parent);\n@@ -329,8 +332,9 @@ pub async fn vote_page(\n     let path = format!(\"/vote?parent={}\", urlencoding::encode(parent.as_str()));\n     state.views.increment(path.clone());\n     let views = state.views.get_views(&path);\n+    let nav_user = nav_pseudonym(state.projection_store.db(), &jar);\n \n-    Html(layout(&title, body, views).into_string()).into_response()\n+    Html(layout(&title, body, views, nav_user.as_deref()).into_string()).into_response()\n }\n \n #[cfg(test)]\ndiff --git a/server/static/sorter.css b/server/static/sorter.css\nindex e66a1e6c1acc473c8ff1ddb1e16e75a82d33741c..257280b6b490c65222e580a325b77351cac6cc6b 100644\n--- a/server/static/sorter.css\n+++ b/server/static/sorter.css\n@@ -34,6 +34,47 @@ body {\n   font-size: 0.75rem;\n }\n \n+.top-nav {\n+  display: flex;\n+  align-items: center;\n+  justify-content: flex-end;\n+  gap: 0.75rem;\n+  padding: 0.5rem 1rem;\n+  font-size: 0.875rem;\n+}\n+\n+.top-nav a {\n+  color: var(--muted);\n+  text-decoration: none;\n+}\n+\n+.top-nav a:hover {\n+  color: var(--fg);\n+}\n+\n+.top-nav-user {\n+  color: var(--fg);\n+  font-weight: 600;\n+}\n+\n+.top-nav-logout {\n+  display: inline;\n+  margin: 0;\n+}\n+\n+.top-nav-logout button {\n+  background: none;\n+  border: none;\n+  padding: 0;\n+  color: var(--muted);\n+  font: inherit;\n+  cursor: pointer;\n+}\n+\n+.top-nav-logout button:hover {\n+  color: var(--fg);\n+}\n+\n .btn-primary {\n   background: var(--accent);\n   color: var(--accent-fg, #0f1115);\ndiff --git a/test/support/harness.clj b/test/support/harness.clj\nindex 3f05951f418258642dcacb4a10ccccc8bfbe8748..4505ece5aa193e826ca61c52f1467d252080d66b 100644\n--- a/test/support/harness.clj\n+++ b/test/support/harness.clj\n@@ -43,6 +43,7 @@\n          \"SORTER2_VIEWS_LOG\" (str data-dir \"/views.jsonl\")\n          \"PORT\" (str app-port)\n          \"SORTER2_BASE_URL\" (str \"http://127.0.0.1:\" app-port)\n+         \"SORTER2_ALLOW_MOCK_OAUTH\" \"1\"\n          \"GITHUB_CLIENT_ID\" \"test-client\"\n          \"GITHUB_CLIENT_SECRET\" \"test-secret\"\n          \"GITHUB_OAUTH_BASE\" (str \"http://127.0.0.1:\" oauth-port)\n\n\nSide B — contributor: tommy-mor\nSide B — commit message:\n[88577c56] reconfigure\n\nSide B — unified diff (full patch):\ndiff --git a/server/src/api/ui_html.rs b/server/src/api/ui_html.rs\nindex c4ab9d65c7b3cd42a5b4d093ba429993c101e9a8..82b2aa51d21ada1d0d849d3ddfc3a81e4241d861 100644\n--- a/server/src/api/ui_html.rs\n+++ b/server/src/api/ui_html.rs\n@@ -9,7 +9,9 @@ use crate::{\n     html::{js_string_literal, ranking_panel, JsBuilder},\n     parser::parse_reddit_url,\n     parser_render::navigate_panel,\n-    state::AppState,\n+    path_types::ItemId,\n+    reddit::ensure_partial_tree,\n+    state::{parse_item_param, AppState},\n     ui_action::{parse_html_ui_from_form, HtmlUiAction},\n };\n \n@@ -25,6 +27,10 @@ fn ui_js_warn(msg: &str) -> Response {\n         .unwrap()\n }\n \n+fn parent_from_scope(scope: &str) -> ItemId {\n+    parse_item_param(scope)\n+}\n+\n pub async fn post_ui_html(\n     State(state): State<AppState>,\n     Form(form): Form<HashMap<String, String>>,\n@@ -42,24 +48,36 @@ pub async fn post_ui_html(\n             ratio_right,\n             scope,\n         } => {\n+            let parent = parent_from_scope(&scope);\n             if let Err(e) = state\n-                .record_vote(&scope, &a, &b, ratio_left, ratio_right)\n+                .record_vote(&parent, &a, &b, ratio_left, ratio_right)\n                 .await\n             {\n                 return ui_js_warn(&e).into_response();\n             }\n-            let scope = crate::state::normalize_scope(&scope);\n-            let groups = state.groups.read().await;\n+            let tree = state.tree.read().await;\n             let empty = crate::reducer::GroupState::new();\n-            let group = groups.get(&scope).unwrap_or(&empty);\n-            let panel = ranking_panel(&scope, group);\n+            let group = tree\n+                .get(&parent)\n+                .map(|n| &n.local_ranking)\n+                .unwrap_or(&empty);\n+            let panel = ranking_panel(&parent, group);\n             JsBuilder::new()\n                 .morph_selector(\"#ranking-panel\", panel)\n                 .into_response()\n         }\n         HtmlUiAction::ParseQuery { query } => match parse_reddit_url(&query) {\n-            Ok(subreddit) => {\n-                let dest = format!(\"/?sub={subreddit}\");\n+            Ok(item) => {\n+                {\n+                    let mut tree = state.tree.write().await;\n+                    ensure_partial_tree(&mut tree, &item);\n+                }\n+                let _ = state.ensure_node(&item).await;\n+                let dest = if item.is_root() {\n+                    \"/\".to_string()\n+                } else {\n+                    format!(\"/?item={}\", item.as_str())\n+                };\n                 JsBuilder::new()\n                     .raw(&format!(\n                         \"window.location.href={};\",\ndiff --git a/server/src/events.rs b/server/src/events.rs\nindex a862370fc840ffe02184a11c578e18239cc9474d..ed5be6b13b9d46e838831d6ce0f96f569b401730 100644\n--- a/server/src/events.rs\n+++ b/server/src/events.rs\n@@ -5,8 +5,8 @@ use serde::{Deserialize, Serialize};\n pub enum Event {\n     /// Page view recorded (path → counter in views.json).\n     ViewRecorded { path: String, ts: i64 },\n-    /// Pairwise comparison vote (replayed into the scope's [`crate::reducer::GroupState`] on boot).\n-    /// `scope` is the ranking subject (e.g. a subreddit); empty string is the default/global scope.\n+    /// Pairwise comparison vote (replayed into the parent node's [`crate::reducer::GroupState`] on boot).\n+    /// `scope` is the parent [`crate::path_types::ItemId`] string; empty string is the tree root.\n     VoteRecorded {\n         ts: i64,\n         a: String,\n@@ -16,4 +16,6 @@ pub enum Event {\n         #[serde(default)]\n         scope: String,\n     },\n+    /// Register a node path in the fractal tree (no external fetch).\n+    NodeEnsured { id: String },\n }\ndiff --git a/server/src/html/mod.rs b/server/src/html/mod.rs\nindex 9650d333d29c4ac94ceb407aee3ee00399c7f40b..c973cb718ac74b95570dabea76e24459417790b9 100644\n--- a/server/src/html/mod.rs\n+++ b/server/src/html/mod.rs\n@@ -12,9 +12,10 @@ use serde::Deserialize;\n use crate::{\n     form_template::template_json_compact,\n     parser_render::navigate_panel,\n+    path_types::ItemId,\n     ranking::{top_bottom, RankedItem},\n-    reducer::GroupState,\n-    state::{normalize_scope, AppState},\n+    reducer::{GroupState, NodeState},\n+    state::{parse_item_param, AppState},\n     ui_action::UI_RPC_FIELD,\n };\n \n@@ -216,6 +217,48 @@ fn layout(title: &str, body: Markup, views: u64, theme: &str, theme_next: &str)\n     }\n }\n \n+fn item_href(id: &ItemId) -> String {\n+    if id.is_root() {\n+        \"/\".to_string()\n+    } else {\n+        format!(\"/?item={}\", id.as_str())\n+    }\n+}\n+\n+fn segment_label(seg: &str) -> &str {\n+    seg\n+}\n+\n+/// Generic breadcrumb trail from an [`ItemId`] path.\n+pub fn breadcrumb_path(item: &ItemId) -> Markup {\n+    html! {\n+        nav class=\"breadcrumbs\" aria-label=\"Breadcrumb\" {\n+            a href=\"/\" { \"Internet\" }\n+            @for path in item.breadcrumb_paths() {\n+                @let seg = path.segments().last().map_or(\"\", |v| *v);\n+                span class=\"separator\" { \" / \" }\n+                a href=(item_href(&path)) { (segment_label(seg)) }\n+            }\n+        }\n+    }\n+}\n+\n+fn entity_panel(node: &NodeState) -> Markup {\n+    html! {\n+        @if let Some(data) = &node.data {\n+            section id=\"entity-panel\" class=\"demo-panel entity-card\" {\n+                h2 { (data.title) }\n+                @if let Some(author) = &data.author {\n+                    p class=\"muted small\" { \"by \" (author) }\n+                }\n+                @if let Some(body) = &data.body_html {\n+                    div class=\"entity-body\" { (maud::PreEscaped(body)) }\n+                }\n+            }\n+        }\n+    }\n+}\n+\n fn rank_list(label: &str, items: &[RankedItem], start_rank: usize) -> Markup {\n     html! {\n         @if !items.is_empty() {\n@@ -224,7 +267,9 @@ fn rank_list(label: &str, items: &[RankedItem], start_rank: usize) -> Markup {\n                 @for (i, r) in items.iter().enumerate() {\n                     li {\n                         span class=\"rank-num\" { (start_rank + i) \". \" }\n-                        strong { (r.item.as_str()) }\n+                        a href=(item_href(&r.item)) {\n+                            strong { (display_label(&r.item)) }\n+                        }\n                         span class=\"muted\" {\n                             \" — \"\n                             ({ format!(\"{:.1}%\", r.score * 100.0) })\n@@ -236,23 +281,30 @@ fn rank_list(label: &str, items: &[RankedItem], start_rank: usize) -> Markup {\n     }\n }\n \n-pub fn ranking_panel(scope: &str, group: &GroupState) -> Markup {\n+fn display_label(id: &ItemId) -> String {\n+    id.segments()\n+        .last()\n+        .map_or(\"Internet\", |v| *v)\n+        .to_string()\n+}\n+\n+pub fn ranking_panel(item: &ItemId, group: &GroupState) -> Markup {\n     let total = group.idx_to_item.len();\n     let (top, bottom) = top_bottom(group, 8);\n     html! {\n         section id=\"ranking-panel\" class=\"demo-panel\" {\n             h2 {\n                 \"Ranking\"\n-                @if !scope.is_empty() {\n-                    \" — \" span class=\"scope-name\" { \"r/\" (scope) }\n+                @if !item.is_root() {\n+                    \" — \" span class=\"scope-name\" { (item.as_str()) }\n                 }\n             }\n             @if total == 0 {\n                 p class=\"muted\" {\n-                    @if scope.is_empty() {\n+                    @if item.is_root() {\n                         \"No votes yet — compare two items below.\"\n                     } @else {\n-                        \"No votes yet for r/\" (scope) \" — compare two items below to start the ranking.\"\n+                        \"No votes yet for \" (item.as_str()) \" — compare two items below to start the ranking.\"\n                     }\n                 }\n             } @else {\n@@ -266,7 +318,8 @@ pub fn ranking_panel(scope: &str, group: &GroupState) -> Markup {\n     }\n }\n \n-pub fn vote_panel(scope: &str) -> Markup {\n+pub fn vote_panel(parent: &ItemId) -> Markup {\n+    let parent_str = parent.as_str();\n     let rpc = template_json_compact(&serde_json::json!({\n         \"action\": \"record_vote\",\n         \"a\": {\"$form\": \"item_a\"},\n@@ -280,16 +333,17 @@ pub fn vote_panel(scope: &str) -> Markup {\n         section id=\"vote-panel\" class=\"demo-panel\" {\n             h2 { \"Compare\" }\n             p class=\"muted small\" {\n-                @if scope.is_empty() {\n+                @if parent.is_root() {\n                     \"Left item wins at 2:1. Votes append to the JSONL log and update rank centrality.\"\n                 } @else {\n-                    \"Ranking \" span class=\"scope-name\" { \"r/\" (scope) }\n+                    \"Ranking children of \"\n+                    span class=\"scope-name\" { (parent_str) }\n                     \". Left item wins at 2:1; each vote updates this ranking.\"\n                 }\n             }\n             form method=\"post\" action=\"/ui\" id=\"vote-form\" {\n                 input type=\"hidden\" name=(UI_RPC_FIELD) value=(rpc);\n-                input type=\"hidden\" name=\"scope\" value=(scope);\n+                input type=\"hidden\" name=\"scope\" value=(parent_str);\n                 div class=\"vote-fields\" {\n                     label {\n                         \"Left (wins) \"\n@@ -329,17 +383,30 @@ pub async fn home(\n     let views = state.views.get_views(&path);\n     let theme = theme_from_jar(&jar);\n     let theme_next = theme_next_from_uri(&uri);\n-    let scope = normalize_scope(&query_param(&uri, \"sub\").unwrap_or_default());\n \n-    let groups = state.groups.read().await;\n-    let empty = GroupState::new();\n-    let group = groups.get(&scope).unwrap_or(&empty);\n+    let item_raw = query_param(&uri, \"item\")\n+        .or_else(|| query_param(&uri, \"sub\").map(|sub| {\n+            if sub.is_empty() {\n+                String::new()\n+            } else {\n+                format!(\"reddit.com/r/{sub}\")\n+            }\n+        }))\n+        .unwrap_or_default();\n+    let item = parse_item_param(&item_raw);\n+\n+    let tree = state.tree.read().await;\n+    let empty_node = NodeState::default();\n+    let node = tree.get(&item).unwrap_or(&empty_node);\n+    let group = &node.local_ranking;\n \n     let body = html! {\n         h1 { \"sorter2\" }\n+        (breadcrumb_path(&item))\n         (navigate_panel(\"\", None))\n-        (vote_panel(&scope))\n-        (ranking_panel(&scope, group))\n+        (entity_panel(node))\n+        (vote_panel(&item))\n+        (ranking_panel(&item, group))\n     };\n     layout(\"sorter2\", body, views, theme, &theme_next)\n }\ndiff --git a/server/src/journal.rs b/server/src/journal.rs\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..b02ca025683621470ffdf8cd85cf9b85c56d024d\n--- /dev/null\n+++ b/server/src/journal.rs\n@@ -0,0 +1,89 @@\n+use std::sync::Arc;\n+\n+use tokio::sync::{mpsc, oneshot, RwLock};\n+\n+use crate::{\n+    event_log::EventLog,\n+    events::Event,\n+    path_types::ItemId,\n+    reducer::{GlobalTree, VoteData},\n+};\n+\n+pub struct JournalCommand {\n+    pub parent: ItemId,\n+    pub vote: VoteData,\n+    pub event: Event,\n+    pub reply: oneshot::Sender<Result<(), String>>,\n+}\n+\n+#[derive(Clone)]\n+pub struct JournalClient {\n+    tx: mpsc::Sender<JournalCommand>,\n+}\n+\n+impl JournalClient {\n+    pub fn spawn(tree: Arc<RwLock<GlobalTree>>, event_log: Arc<EventLog>) -> Self {\n+        let (tx, rx) = mpsc::channel(64);\n+        tokio::spawn(journal_worker(rx, tree, event_log));\n+        Self { tx }\n+    }\n+\n+    pub async fn record_vote(\n+        &self,\n+        parent: ItemId,\n+        vote: VoteData,\n+        event: Event,\n+    ) -> Result<(), String> {\n+        let (reply, rx) = oneshot::channel();\n+        self.tx\n+            .send(JournalCommand {\n+                parent,\n+                vote,\n+                event,\n+                reply,\n+            })\n+            .await\n+            .map_err(|_| \"journal worker stopped\".to_string())?;\n+        rx.await\n+            .map_err(|_| \"journal worker stopped\".to_string())?\n+    }\n+}\n+\n+async fn journal_worker(\n+    mut rx: mpsc::Receiver<JournalCommand>,\n+    tree: Arc<RwLock<GlobalTree>>,\n+    event_log: Arc<EventLog>,\n+) {\n+    while let Some(first) = rx.recv().await {\n+        let mut batch = vec![first];\n+        while let Ok(more) = rx.try_recv() {\n+            batch.push(more);\n+        }\n+\n+        let mut disk_err: Option<String> = None;\n+        for cmd in &batch {\n+            if let Err(e) = event_log.append(&cmd.event).await {\n+                disk_err = Some(e.to_string());\n+                break;\n+            }\n+        }\n+\n+        if let Some(err) = disk_err {\n+            for cmd in batch {\n+                let _ = cmd.reply.send(Err(err.clone()));\n+            }\n+            continue;\n+        }\n+\n+        {\n+            let mut w = tree.write().await;\n+            for cmd in &batch {\n+                w.apply_vote(&cmd.parent, cmd.vote.clone());\n+            }\n+        }\n+\n+        for cmd in batch {\n+            let _ = cmd.reply.send(Ok(()));\n+        }\n+    }\n+}\ndiff --git a/server/src/lib.rs b/server/src/lib.rs\nindex de8bca48cbf689cad22337883e7791966e7c4919..14e7cfbc38feb5d07aff859b64bce6e2ec45cf91 100644\n--- a/server/src/lib.rs\n+++ b/server/src/lib.rs\n@@ -7,8 +7,9 @@ pub mod parser;\n pub mod parser_render;\n pub mod path_types;\n pub mod ranking;\n+pub mod reddit;\n pub mod reducer;\n-pub mod settlement;\n+pub mod journal;\n pub mod state;\n pub mod ui_action;\n pub mod views;\ndiff --git a/server/src/parser.rs b/server/src/parser.rs\nindex 50571a59f0d3ece1e2538f88e00ef46ec40ea545..51aa0e0f982546aab68bd5e1ca0cb726e88b3f50 100644\n--- a/server/src/parser.rs\n+++ b/server/src/parser.rs\n@@ -1,47 +1,18 @@\n-//! Extract a subreddit name from a pasted Reddit URL or path.\n+//! Extract a canonical [`crate::path_types::ItemId`] from a pasted Reddit URL or path.\n \n-pub fn parse_reddit_url(query: &str) -> Result<String, String> {\n+use crate::path_types::ItemId;\n+\n+pub fn parse_reddit_url(query: &str) -> Result<ItemId, String> {\n     let q = query.trim();\n     if q.is_empty() {\n         return Err(\"Paste a Reddit URL or r/subreddit path\".into());\n     }\n \n-    if let Some(sub) = subreddit_after_prefix(q, \"r/\") {\n-        return Ok(sub);\n-    }\n-\n-    if let Some(sub) = subreddit_from_path_segment(q, \"/r/\") {\n-        return Ok(sub);\n+    if let Some(id) = ItemId::from_url(q) {\n+        return Ok(id);\n     }\n \n-    Err(\"Could not find a subreddit in that URL\".into())\n-}\n-\n-fn subreddit_after_prefix(text: &str, prefix: &str) -> Option<String> {\n-    let rest = text.strip_prefix(prefix)?;\n-    let sub = rest.split(['/', '?', '#']).next()?.trim();\n-    valid_subreddit(sub)\n-}\n-\n-fn subreddit_from_path_segment(text: &str, needle: &str) -> Option<String> {\n-    let idx = text.find(needle)?;\n-    let rest = &text[idx + needle.len()..];\n-    let sub = rest.split(['/', '?', '#']).next()?.trim();\n-    valid_subreddit(sub)\n-}\n-\n-fn valid_subreddit(name: &str) -> Option<String> {\n-    if name.is_empty() {\n-        return None;\n-    }\n-    if name\n-        .chars()\n-        .all(|c| c.is_ascii_alphanumeric() || c == '_')\n-    {\n-        Some(name.to_ascii_lowercase())\n-    } else {\n-        None\n-    }\n+    Err(\"Could not parse that Reddit URL\".into())\n }\n \n #[cfg(test)]\n@@ -50,34 +21,37 @@ mod tests {\n \n     #[test]\n     fn parses_short_path() {\n-        assert_eq!(parse_reddit_url(\"r/rust\").unwrap(), \"rust\");\n-    }\n-\n-    #[test]\n-    fn parses_path_with_trailing_slash() {\n-        assert_eq!(parse_reddit_url(\"r/rust/\").unwrap(), \"rust\");\n+        assert_eq!(\n+            parse_reddit_url(\"r/rust\").unwrap().as_str(),\n+            \"reddit.com/r/rust\"\n+        );\n     }\n \n     #[test]\n     fn parses_full_url() {\n         assert_eq!(\n-            parse_reddit_url(\"https://www.reddit.com/r/programming/hot\").unwrap(),\n-            \"programming\"\n+            parse_reddit_url(\"https://www.reddit.com/r/programming/hot\")\n+                .unwrap()\n+                .as_str(),\n+            \"reddit.com/r/programming\"\n         );\n     }\n \n     #[test]\n-    fn parses_url_without_scheme() {\n+    fn parses_post_url() {\n+        let id = parse_reddit_url(\n+            \"https://old.reddit.com/r/AmItheAsshole/comments/1trnvdl/aita_for_cancelling/\",\n+        )\n+        .unwrap();\n         assert_eq!(\n-            parse_reddit_url(\"reddit.com/r/AskReddit\").unwrap(),\n-            \"askreddit\"\n+            id.as_str(),\n+            \"reddit.com/r/amitheasshole/comments/1trnvdl\"\n         );\n     }\n \n     #[test]\n     fn rejects_empty() {\n         assert!(parse_reddit_url(\"\").is_err());\n-        assert!(parse_reddit_url(\"   \").is_err());\n     }\n \n     #[test]\ndiff --git a/server/src/parser_render.rs b/server/src/parser_render.rs\nindex f2341afe21476b689a536137798d97277211a962..acf2e7403f4238291677ef0c79d5766302ea78cf 100644\n--- a/server/src/parser_render.rs\n+++ b/server/src/parser_render.rs\n@@ -21,7 +21,7 @@ pub fn navigate_panel(query: &str, error: Option<&str>) -> Markup {\n             p class=\"muted small\" {\n                 \"Paste a Reddit URL or \"\n                 code { \"r/subreddit\" }\n-                \" path, then click Go to rank that subreddit.\"\n+                \" path. Breadcrumb links drill down the tree; rankings apply to each node's children.\"\n             }\n             form method=\"post\" action=\"/ui\" id=\"parser-form\" {\n                 textarea\ndiff --git a/server/src/path_types.rs b/server/src/path_types.rs\nindex 1cdc96a25b1954f11aaf955203e2b9907b578366..b5c41444f7bcd4d8d289ed3af464bc3f14d0df99 100644\n--- a/server/src/path_types.rs\n+++ b/server/src/path_types.rs\n@@ -1,11 +1,13 @@\n use serde::{Deserialize, Serialize};\n use std::fmt;\n \n-/// Stable item key for votes and rankings (opaque string for now).\n-#[derive(Debug, Clone, Hash, PartialEq, Eq, PartialOrd, Ord, Serialize, Deserialize)]\n+/// Canonical hierarchical identity for any URL/path in the fractal tree.\n+#[derive(Debug, Clone, Hash, PartialEq, Eq, PartialOrd, Ord, Serialize, Deserialize, Default)]\n pub struct ItemId(String);\n \n impl ItemId {\n+    /// Parse an already-canonical path (no URL normalization). Empty string is invalid here;\n+    /// use [`Self::root`] for the tree root.\n     pub fn parse(s: &str) -> Option<Self> {\n         let t = s.trim();\n         if t.is_empty() {\n@@ -14,13 +16,170 @@ impl ItemId {\n         Some(Self(t.to_string()))\n     }\n \n+    /// Build an opaque item key (legacy demo votes, non-URL items).\n     pub fn opaque(s: impl Into<String>) -> Self {\n         Self(s.into())\n     }\n \n+    /// Root of the internet tree (empty path).\n+    pub fn root() -> Self {\n+        Self(String::new())\n+    }\n+\n+    pub fn is_root(&self) -> bool {\n+        self.0.is_empty()\n+    }\n+\n     pub fn as_str(&self) -> &str {\n         &self.0\n     }\n+\n+    /// Creates a canonical ID from a raw URL or path. Normalizes domains and\n+    /// trims tracking query params.\n+    pub fn from_url(raw_url: &str) -> Option<Self> {\n+        Self::canonicalize(raw_url).map(Self)\n+    }\n+\n+    /// Map legacy scope keys (`\"\"`, `\"rust\"`) to fractal parent nodes.\n+    pub fn from_legacy_scope(raw: &str) -> Self {\n+        let s = raw.trim();\n+        if s.is_empty() {\n+            return Self::root();\n+        }\n+        Self(format!(\"reddit.com/r/{s}\"))\n+    }\n+\n+    /// Extract the parent, e.g. `reddit.com/r/aww/comments/1trnvdl` →\n+    /// `reddit.com/r/aww`.\n+    pub fn parent(&self) -> Option<Self> {\n+        if self.0.is_empty() {\n+            return None;\n+        }\n+\n+        let parts: Vec<&str> = self.0.trim_end_matches('/').split('/').collect();\n+        if parts.len() <= 1 {\n+            return None;\n+        }\n+\n+        if self.0.contains(\"/comments/\") {\n+            return Some(Self(parts[..parts.len().saturating_sub(2)].join(\"/\")));\n+        }\n+\n+        Some(Self(parts[..parts.len() - 1].join(\"/\")))\n+    }\n+\n+    pub fn segments(&self) -> Vec<&str> {\n+        self.0.split('/').filter(|s| !s.is_empty()).collect()\n+    }\n+\n+    /// Cumulative paths for breadcrumb rendering, e.g.\n+    /// `reddit.com/r/movies` → `[\"reddit.com\", \"reddit.com/r\", \"reddit.com/r/movies\"]`.\n+    pub fn breadcrumb_paths(&self) -> Vec<ItemId> {\n+        let segs = self.segments();\n+        let mut paths = Vec::with_capacity(segs.len());\n+        let mut current = String::new();\n+        for seg in segs {\n+            if current.is_empty() {\n+                current = seg.to_string();\n+            } else {\n+                current.push('/');\n+                current.push_str(seg);\n+            }\n+            paths.push(ItemId(current.clone()));\n+        }\n+        paths\n+    }\n+\n+    fn canonicalize(raw: &str) -> Option<String> {\n+        let s = raw.trim();\n+        if s.is_empty() {\n+            return None;\n+        }\n+\n+        let owned = if let Some(rest) = s.strip_prefix(\"r/\") {\n+            format!(\"reddit.com/r/{rest}\")\n+        } else if let Some(rest) = s.strip_prefix(\"/r/\") {\n+            format!(\"reddit.com/r/{rest}\")\n+        } else {\n+            s.to_string()\n+        };\n+\n+        let (host_path, _query) = split_query(&owned);\n+        let host_path = host_path.trim_end_matches('/');\n+\n+        let path = if host_path.contains(\"://\") {\n+            parse_url_host_path(host_path)?\n+        } else if host_path.starts_with(\"reddit.com\") || host_path.starts_with(\"www.reddit.com\") {\n+            normalize_reddit_host_path(host_path)\n+        } else if host_path.contains('/') {\n+            host_path.to_string()\n+        } else {\n+            return None;\n+        };\n+\n+        Some(normalize_reddit_path(&path))\n+    }\n+}\n+\n+fn split_query(s: &str) -> (&str, Option<&str>) {\n+    if let Some((path, q)) = s.split_once('?') {\n+        (path, Some(q))\n+    } else {\n+        (s, None)\n+    }\n+}\n+\n+fn parse_url_host_path(url: &str) -> Option<String> {\n+    let rest = url\n+        .strip_prefix(\"https://\")\n+        .or_else(|| url.strip_prefix(\"http://\"))\n+        .unwrap_or(url);\n+    let (host, path) = rest.split_once('/').unwrap_or((rest, \"\"));\n+    let host = normalize_host(host);\n+    if path.is_empty() {\n+        Some(host)\n+    } else {\n+        Some(format!(\"{host}/{path}\"))\n+    }\n+}\n+\n+fn normalize_host(host: &str) -> String {\n+    let h = host\n+        .strip_prefix(\"www.\")\n+        .unwrap_or(host)\n+        .to_ascii_lowercase();\n+    if h == \"old.reddit.com\" || h == \"new.reddit.com\" || h == \"reddit.com\" {\n+        \"reddit.com\".to_string()\n+    } else {\n+        h\n+    }\n+}\n+\n+fn normalize_reddit_host_path(s: &str) -> String {\n+    let (host, path) = s.split_once('/').unwrap_or((s, \"\"));\n+    let host = normalize_host(host);\n+    if path.is_empty() {\n+        host\n+    } else {\n+        format!(\"{host}/{path}\")\n+    }\n+}\n+\n+/// Lowercase subreddit segment, drop listing suffixes, drop title slug after post id.\n+fn normalize_reddit_path(path: &str) -> String {\n+    let mut parts: Vec<String> = path.split('/').map(str::to_string).collect();\n+    if parts.len() >= 3 && parts[1] == \"r\" {\n+        parts[2] = parts[2].to_ascii_lowercase();\n+    }\n+    if let Some(i) = parts.iter().position(|p| p == \"comments\") {\n+        if parts.len() > i + 2 {\n+            parts.truncate(i + 2);\n+        }\n+    } else if parts.len() > 3 && parts.get(1).map(|s| s.as_str()) == Some(\"r\") {\n+        // reddit.com/r/{sub}/hot → reddit.com/r/{sub}\n+        parts.truncate(3);\n+    }\n+    parts.join(\"/\")\n }\n \n impl fmt::Display for ItemId {\n@@ -28,3 +187,69 @@ impl fmt::Display for ItemId {\n         f.write_str(&self.0)\n     }\n }\n+\n+#[cfg(test)]\n+mod tests {\n+    use super::*;\n+\n+    #[test]\n+    fn from_url_normalizes_reddit_domains() {\n+        let id = ItemId::from_url(\n+            \"https://old.reddit.com/r/AmItheAsshole/comments/1trnvdl/aita_for_cancelling/\",\n+        )\n+        .unwrap();\n+        assert_eq!(\n+            id.as_str(),\n+            \"reddit.com/r/amitheasshole/comments/1trnvdl\"\n+        );\n+    }\n+\n+    #[test]\n+    fn from_url_strips_query() {\n+        let id = ItemId::from_url(\"https://www.reddit.com/r/rust/?sort=top\").unwrap();\n+        assert_eq!(id.as_str(), \"reddit.com/r/rust\");\n+    }\n+\n+    #[test]\n+    fn from_url_short_path() {\n+        assert_eq!(\n+            ItemId::from_url(\"r/rust\").unwrap().as_str(),\n+            \"reddit.com/r/rust\"\n+        );\n+    }\n+\n+    #[test]\n+    fn parent_of_post_is_subreddit() {\n+        let id = ItemId::parse(\"reddit.com/r/aww/comments/1trnvdl\").unwrap();\n+        assert_eq!(\n+            id.parent().unwrap().as_str(),\n+            \"reddit.com/r/aww\"\n+        );\n+    }\n+\n+    #[test]\n+    fn parent_of_subreddit_is_r_segment() {\n+        let id = ItemId::parse(\"reddit.com/r/movies\").unwrap();\n+        assert_eq!(id.parent().unwrap().as_str(), \"reddit.com/r\");\n+    }\n+\n+    #[test]\n+    fn breadcrumb_paths() {\n+        let id = ItemId::parse(\"reddit.com/r/movies\").unwrap();\n+        let crumbs = id.breadcrumb_paths();\n+        let paths: Vec<_> = crumbs.iter().map(|p| p.as_str()).collect();\n+        assert_eq!(\n+            paths,\n+            vec![\"reddit.com\", \"reddit.com/r\", \"reddit.com/r/movies\"]\n+        );\n+    }\n+\n+    #[test]\n+    fn legacy_scope_maps_to_reddit_sub() {\n+        assert_eq!(\n+            ItemId::from_legacy_scope(\"rust\").as_str(),\n+            \"reddit.com/r/rust\"\n+        );\n+        assert!(ItemId::from_legacy_scope(\"\").is_root());\n+    }\n+}\ndiff --git a/server/src/reddit.rs b/server/src/reddit.rs\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..d203dca09245daf869b3aa942898447700ae69fb\n--- /dev/null\n+++ b/server/src/reddit.rs\n@@ -0,0 +1,21 @@\n+//! Reddit API import (async, decoupled from UI request path).\n+\n+use crate::{\n+    path_types::ItemId,\n+    reducer::{EntityData, GlobalTree},\n+};\n+\n+/// Bootstrap blank nodes along a URL path so breadcrumbs and voting work before fetch.\n+pub fn ensure_partial_tree(tree: &mut GlobalTree, id: &ItemId) {\n+    tree.ensure_path(id);\n+}\n+\n+/// Placeholder for Reddit JSON import. Returns entity data when implemented.\n+pub async fn fetch_reddit_entity(_id: &ItemId) -> Option<EntityData> {\n+    None\n+}\n+\n+/// Apply fetched entity data to a node (called from async worker).\n+pub fn apply_entity(tree: &mut GlobalTree, id: &ItemId, data: EntityData) {\n+    tree.set_entity_data(id, data);\n+}\ndiff --git a/server/src/reducer.rs b/server/src/reducer.rs\nindex 8d28353e1f2a67e71b7d17a2041a0988150f3245..077f700bf00ddefe18ffd004bb5288bdc7c4adaf 100644\n--- a/server/src/reducer.rs\n+++ b/server/src/reducer.rs\n@@ -115,6 +115,96 @@ impl GroupState {\n     }\n }\n \n+/// Structured data imported from Reddit or elsewhere.\n+#[derive(Debug, Clone, Serialize, Deserialize)]\n+pub struct EntityData {\n+    pub title: String,\n+    pub author: Option<String>,\n+    pub body_html: Option<String>,\n+    pub thumb_url: Option<String>,\n+}\n+\n+/// One node in the fractal tree: entity + ranked children.\n+#[derive(Debug, Clone, Default)]\n+pub struct NodeState {\n+    pub id: ItemId,\n+    pub data: Option<EntityData>,\n+    pub children: HashSet<ItemId>,\n+    pub local_ranking: GroupState,\n+}\n+\n+impl NodeState {\n+    fn new(id: ItemId) -> Self {\n+        Self {\n+            id,\n+            ..Default::default()\n+        }\n+    }\n+}\n+\n+/// Global fractal graph: every URL is both an item and a ranking scope for its children.\n+#[derive(Default)]\n+pub struct GlobalTree {\n+    pub nodes: HashMap<ItemId, NodeState>,\n+}\n+\n+impl GlobalTree {\n+    pub fn new() -> Self {\n+        let mut tree = Self::default();\n+        tree.ensure_node(&ItemId::root());\n+        tree\n+    }\n+\n+    pub fn ensure_node(&mut self, id: &ItemId) -> &mut NodeState {\n+        if !self.nodes.contains_key(id) {\n+            self.nodes.insert(id.clone(), NodeState::new(id.clone()));\n+        }\n+        self.nodes.get_mut(id).expect(\"node just inserted\")\n+    }\n+\n+    /// Register a node and wire parent→child links along the canonical path.\n+    pub fn ensure_path(&mut self, id: &ItemId) {\n+        if id.is_root() {\n+            self.ensure_node(id);\n+            return;\n+        }\n+        self.ensure_node(&ItemId::root());\n+        for path in id.breadcrumb_paths() {\n+            self.ensure_node(&path);\n+            if let Some(parent) = path.parent() {\n+                self.ensure_node(&parent);\n+                if let Some(p) = self.nodes.get_mut(&parent) {\n+                    p.children.insert(path.clone());\n+                }\n+            } else if let Some(r) = self.nodes.get_mut(&ItemId::root()) {\n+                r.children.insert(path.clone());\n+            }\n+        }\n+    }\n+\n+    pub fn get(&self, id: &ItemId) -> Option<&NodeState> {\n+        self.nodes.get(id)\n+    }\n+\n+    pub fn apply_vote(&mut self, parent: &ItemId, vote: VoteData) {\n+        self.ensure_path(parent);\n+        self.ensure_path(&vote.a);\n+        self.ensure_path(&vote.b);\n+        if let Some(node) = self.nodes.get_mut(parent) {\n+            node.children.insert(vote.a.clone());\n+            node.children.insert(vote.b.clone());\n+            node.local_ranking.apply_vote(vote);\n+        }\n+    }\n+\n+    pub fn set_entity_data(&mut self, id: &ItemId, data: EntityData) {\n+        self.ensure_path(id);\n+        if let Some(node) = self.nodes.get_mut(id) {\n+            node.data = Some(data);\n+        }\n+    }\n+}\n+\n #[cfg(test)]\n mod from_recorded_tests {\n     use super::*;\n@@ -125,7 +215,20 @@ mod from_recorded_tests {\n     }\n \n     #[test]\n-    fn rejects_empty() {\n+    fn rejects_empty_pair() {\n         assert!(VoteData::from_recorded(1, \"\", \"b\", 2, 1).is_none());\n     }\n+\n+    #[test]\n+    fn ensure_path_wires_children() {\n+        let mut tree = GlobalTree::new();\n+        let id = ItemId::parse(\"reddit.com/r/rust\").unwrap();\n+        tree.ensure_path(&id);\n+        let root = tree.get(&ItemId::root()).unwrap();\n+        assert!(root.children.contains(&ItemId::parse(\"reddit.com\").unwrap()));\n+        let reddit = tree.get(&ItemId::parse(\"reddit.com\").unwrap()).unwrap();\n+        assert!(reddit.children.contains(&ItemId::parse(\"reddit.com/r\").unwrap()));\n+        let sub = tree.get(&id).unwrap();\n+        assert_eq!(sub.id, id);\n+    }\n }\ndiff --git a/server/src/settlement.rs b/server/src/settlement.rs\ndeleted file mode 100644\nindex 7a44495512b7f788239b8aeefbbd0a83656eeac6..0000000000000000000000000000000000000000\n--- a/server/src/settlement.rs\n+++ /dev/null\n@@ -1,94 +0,0 @@\n-use std::collections::HashMap;\n-use std::sync::Arc;\n-\n-use tokio::sync::{mpsc, oneshot, RwLock};\n-\n-use crate::{\n-    event_log::EventLog,\n-    events::Event,\n-    reducer::{GroupState, VoteData},\n-};\n-\n-/// Per-scope ranking state, keyed by scope (e.g. subreddit; \"\" is the default scope).\n-pub type GroupMap = HashMap<String, GroupState>;\n-\n-pub struct SettlementCommand {\n-    pub scope: String,\n-    pub vote: VoteData,\n-    pub event: Event,\n-    pub reply: oneshot::Sender<Result<(), String>>,\n-}\n-\n-#[derive(Clone)]\n-pub struct SettlementClient {\n-    tx: mpsc::Sender<SettlementCommand>,\n-}\n-\n-impl SettlementClient {\n-    pub fn spawn(groups: Arc<RwLock<GroupMap>>, event_log: Arc<EventLog>) -> Self {\n-        let (tx, rx) = mpsc::channel(64);\n-        tokio::spawn(settlement_worker(rx, groups, event_log));\n-        Self { tx }\n-    }\n-\n-    pub async fn record_vote(\n-        &self,\n-        scope: String,\n-        vote: VoteData,\n-        event: Event,\n-    ) -> Result<(), String> {\n-        let (reply, rx) = oneshot::channel();\n-        self.tx\n-            .send(SettlementCommand {\n-                scope,\n-                vote,\n-                event,\n-                reply,\n-            })\n-            .await\n-            .map_err(|_| \"settlement worker stopped\".to_string())?;\n-        rx.await\n-            .map_err(|_| \"settlement worker stopped\".to_string())?\n-    }\n-}\n-\n-async fn settlement_worker(\n-    mut rx: mpsc::Receiver<SettlementCommand>,\n-    groups: Arc<RwLock<GroupMap>>,\n-    event_log: Arc<EventLog>,\n-) {\n-    while let Some(first) = rx.recv().await {\n-        let mut batch = vec![first];\n-        while let Ok(more) = rx.try_recv() {\n-            batch.push(more);\n-        }\n-\n-        let mut disk_err: Option<String> = None;\n-        for cmd in &batch {\n-            if let Err(e) = event_log.append(&cmd.event).await {\n-                disk_err = Some(e.to_string());\n-                break;\n-            }\n-        }\n-\n-        if let Some(err) = disk_err {\n-            for cmd in batch {\n-                let _ = cmd.reply.send(Err(err.clone()));\n-            }\n-            continue;\n-        }\n-\n-        {\n-            let mut w = groups.write().await;\n-            for cmd in &batch {\n-                w.entry(cmd.scope.clone())\n-                    .or_default()\n-                    .apply_vote(cmd.vote.clone());\n-            }\n-        }\n-\n-        for cmd in batch {\n-            let _ = cmd.reply.send(Ok(()));\n-        }\n-    }\n-}\ndiff --git a/server/src/state.rs b/server/src/state.rs\nindex 2d9e5226057f8615897aac48bce947643a230fb4..cc1722f5a5bf4d415f2327ea585c488a15a75592 100644\n--- a/server/src/state.rs\n+++ b/server/src/state.rs\n@@ -1,4 +1,3 @@\n-use std::collections::HashMap;\n use std::sync::Arc;\n \n use tokio::sync::RwLock;\n@@ -6,14 +5,22 @@ use tokio::sync::RwLock;\n use crate::{\n     event_log::EventLog,\n     events::Event,\n-    reducer::VoteData,\n-    settlement::{GroupMap, SettlementClient},\n+    path_types::ItemId,\n+    reducer::{GlobalTree, VoteData},\n+    journal::JournalClient,\n     views::ViewStore,\n };\n \n-/// Normalize a raw ranking subject into a scope key: strip an optional `r/`\n-/// prefix, keep only `[a-z0-9_]`, lowercase, and cap the length. Empty string\n-/// is the default/global scope.\n+/// Parse `?item=` query value into a canonical node id.\n+pub fn parse_item_param(raw: &str) -> ItemId {\n+    let s = raw.trim();\n+    if s.is_empty() {\n+        return ItemId::root();\n+    }\n+    ItemId::from_url(s).or_else(|| ItemId::parse(s)).unwrap_or_else(|| ItemId::opaque(s))\n+}\n+\n+/// Legacy: normalize raw ranking subject into a scope key for old event replay.\n pub fn normalize_scope(raw: &str) -> String {\n     let s = raw.trim();\n     let s = s\n@@ -27,6 +34,14 @@ pub fn normalize_scope(raw: &str) -> String {\n         .collect()\n }\n \n+fn parent_from_event_scope(scope: &str) -> ItemId {\n+    if scope.contains('/') {\n+        ItemId::parse(scope).unwrap_or_else(|| ItemId::from_legacy_scope(scope))\n+    } else {\n+        ItemId::from_legacy_scope(scope)\n+    }\n+}\n+\n #[derive(Clone)]\n pub struct AppConfig {\n     pub data_dir: String,\n@@ -56,8 +71,8 @@ pub struct AppState {\n     pub cfg: Arc<AppConfig>,\n     pub event_log: Arc<EventLog>,\n     pub views: ViewStore,\n-    pub groups: Arc<RwLock<GroupMap>>,\n-    settlement: SettlementClient,\n+    pub tree: Arc<RwLock<GlobalTree>>,\n+    journal: JournalClient,\n }\n \n impl AppState {\n@@ -66,7 +81,7 @@ impl AppState {\n         let views_path = format!(\"{}/views.json\", cfg.data_dir);\n         let views = ViewStore::new(&views_path);\n \n-        let mut groups: GroupMap = HashMap::new();\n+        let mut tree = GlobalTree::new();\n         if let Ok((events, _)) = event_log.load_all().await {\n             for ev in events {\n                 match ev {\n@@ -81,29 +96,45 @@ impl AppState {\n                         if let Some(vote) =\n                             VoteData::from_recorded(ts, &a, &b, ratio_left, ratio_right)\n                         {\n-                            groups.entry(scope).or_default().apply_vote(vote);\n+                            let parent = parent_from_event_scope(&scope);\n+                            tree.apply_vote(&parent, vote);\n                         }\n                     }\n                     Event::ViewRecorded { .. } => {}\n+                    Event::NodeEnsured { id } => {\n+                        if let Some(parsed) = ItemId::parse(&id).or_else(|| ItemId::from_url(&id)) {\n+                            tree.ensure_path(&parsed);\n+                        }\n+                    }\n                 }\n             }\n         }\n \n-        let groups = Arc::new(RwLock::new(groups));\n-        let settlement = SettlementClient::spawn(groups.clone(), event_log.clone());\n+        let tree = Arc::new(RwLock::new(tree));\n+        let journal = JournalClient::spawn(tree.clone(), event_log.clone());\n \n         Self {\n             cfg: Arc::new(cfg),\n             event_log,\n             views,\n-            groups,\n-            settlement,\n+            tree,\n+            journal,\n         }\n     }\n \n+    pub async fn ensure_node(&self, id: &ItemId) -> Result<(), String> {\n+        let event = Event::NodeEnsured {\n+            id: id.as_str().to_string(),\n+        };\n+        self.event_log.append(&event).await.map_err(|e| e.to_string())?;\n+        let mut w = self.tree.write().await;\n+        w.ensure_path(id);\n+        Ok(())\n+    }\n+\n     pub async fn record_vote(\n         &self,\n-        scope: &str,\n+        parent: &ItemId,\n         a: &str,\n         b: &str,\n         ratio_left: i32,\n@@ -113,23 +144,24 @@ impl AppState {\n         let vote = VoteData::from_recorded(ts, a, b, ratio_left, ratio_right)\n             .ok_or_else(|| \"invalid vote: need two distinct non-empty items\".to_string())?;\n \n-        let scope = normalize_scope(scope);\n         let event = Event::VoteRecorded {\n             ts,\n             a: vote.a.as_str().to_string(),\n             b: vote.b.as_str().to_string(),\n             ratio_left: vote.ratio_left,\n             ratio_right: vote.ratio_right,\n-            scope: scope.clone(),\n+            scope: parent.as_str().to_string(),\n         };\n \n-        self.settlement.record_vote(scope, vote, event).await\n+        self.journal\n+            .record_vote(parent.clone(), vote, event)\n+            .await\n     }\n }\n \n #[cfg(test)]\n mod tests {\n-    use super::normalize_scope;\n+    use super::{normalize_scope, parse_item_param};\n \n     #[test]\n     fn normalize_scope_strips_prefix_and_lowercases() {\n@@ -138,4 +170,15 @@ mod tests {\n         assert_eq!(normalize_scope(\"r/web_dev!!\"), \"web_dev\");\n         assert_eq!(normalize_scope(\"\"), \"\");\n     }\n+\n+    #[test]\n+    fn parse_item_param_from_url() {\n+        let id = parse_item_param(\"https://reddit.com/r/rust\");\n+        assert_eq!(id.as_str(), \"reddit.com/r/rust\");\n+    }\n+\n+    #[test]\n+    fn parse_item_param_empty_is_root() {\n+        assert!(parse_item_param(\"\").is_root());\n+    }\n }\ndiff --git a/server/src/ui_action.rs b/server/src/ui_action.rs\nindex 0e030b3448b8e45acbe49d2de47ea26372445c54..d798874d1d94c0dfee59ec1ff703f9ee6ef432c0 100644\n--- a/server/src/ui_action.rs\n+++ b/server/src/ui_action.rs\n@@ -18,7 +18,7 @@ pub enum HtmlUiAction {\n         b: String,\n         ratio_left: i32,\n         ratio_right: i32,\n-        /// Ranking subject (e.g. a subreddit). Empty string = default/global scope.\n+        /// Parent node [`ItemId`] string; empty = tree root.\n         #[serde(default)]\n         scope: String,\n     },\ndiff --git a/server/static/theme_default.css b/server/static/theme_default.css\nindex 6ad0ac712bbc840bedee60f613794de9385fbbd1..1bf8ac7a25207336c019f93cd4119bd0e06229f0 100644\n--- a/server/static/theme_default.css\n+++ b/server/static/theme_default.css\n@@ -137,6 +137,38 @@ code {\n   margin-top: 0.5rem;\n }\n \n+.breadcrumbs {\n+  font-size: 0.875rem;\n+  margin-bottom: 1rem;\n+  color: var(--muted);\n+}\n+\n+.breadcrumbs a {\n+  color: var(--accent);\n+  text-decoration: none;\n+}\n+\n+.breadcrumbs a:hover {\n+  text-decoration: underline;\n+}\n+\n+.breadcrumbs .separator {\n+  color: var(--muted);\n+}\n+\n+.rank-list a {\n+  color: var(--accent);\n+  text-decoration: none;\n+}\n+\n+.rank-list a:hover {\n+  text-decoration: underline;\n+}\n+\n+.entity-card h2 {\n+  margin-top: 0;\n+}\n+\n .scope-name {\n   color: var(--accent);\n   font-weight: 600;\ndiff --git a/server/tests/integration_ui.rs b/server/tests/integration_ui.rs\nindex afeeee24e32f2d7f1d852ca96ac799fac8bce665..f7ac9c26bf9f9277ad5f5708603224c095165fb8 100644\n--- a/server/tests/integration_ui.rs\n+++ b/server/tests/integration_ui.rs\n@@ -2,7 +2,7 @@ use std::collections::HashMap;\n use std::net::SocketAddr;\n \n use axum::Router;\n-use sorter2_server::{create_app, create_app_state, state::AppConfig, ui_action::UI_RPC_FIELD};\n+use sorter2_server::{create_app, create_app_state, path_types::ItemId, state::AppConfig, ui_action::UI_RPC_FIELD};\n use tempfile::TempDir;\n use tokio::net::TcpListener;\n \n@@ -63,9 +63,9 @@ async fn post_ui_record_vote_morphs_ranking_and_persists() {\n         port: 0,\n     };\n     let state = create_app_state(cfg).await;\n-    let groups = state.groups.read().await;\n-    let group = groups.get(\"\").expect(\"default scope group after replay\");\n-    let ranked = sorter2_server::ranking::ranked_items(group);\n+    let tree = state.tree.read().await;\n+    let root = tree.get(&ItemId::root()).expect(\"root node after replay\");\n+    let ranked = sorter2_server::ranking::ranked_items(&root.local_ranking);\n     assert_eq!(ranked.len(), 2);\n     assert_eq!(ranked[0].item.as_str(), \"alpha\");\n }\n@@ -93,5 +93,5 @@ async fn post_ui_parse_query_redirects_to_subreddit() {\n         .unwrap();\n \n     assert!(body.contains(\"window.location.href\"));\n-    assert!(body.contains(\"/?sub=rust\"));\n+    assert!(body.contains(\"/?item=reddit.com/r/rust\"));\n }\n","role":"user"}],"model":"openai/gpt-chat-latest"}