{"messages":[{"content":"You are a constitutional council ranking individual git commits for ownership allocation.\n\nCompare these two commits. Decide which contributed more lasting value to the project.\n\nJudge substance, not spectacle:\n- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.\n- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.\n- Do not favor a side merely because its patch is longer or noisier.\n- Weight what the change does for the project, not the contributor's name.\n\nReturn ONLY a JSON object: {\"winner\": \"A\" or \"B\", \"ratio\": \"N:M\", \"explanation\": \"...\"}\nThe explanation must cite concrete differences in the patches (1-3 sentences).\n\nSide A — contributor: tommy-mor\nSide A — commit message:\n[b7626603] Remove browser sentinel delegates so multi-user votes work.\n\nShared WEB_BROWSER_AGENT bound on first vote and blocked every later human; browser posts now use no delegate, matching forum UI.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\nSide A — unified diff (full patch):\ndiff --git a/cli/src/main.rs b/cli/src/main.rs\nindex 70435b412188a151c5e89e842a5de57f7480ddf2..a4a22724fc9e27879951f520a9241d5832982a70 100644\n--- a/cli/src/main.rs\n+++ b/cli/src/main.rs\n@@ -1645,8 +1645,8 @@ async fn run() -> Result<()> {\n                     tokio::time::sleep(std::time::Duration::from_millis(poll_interval_ms)).await;\n                     let poll: PendingSessionPollResponse =\n                         expect_json(client.get(&poll_url).send().await?).await?;\n-                    if !poll.agent.trim().is_empty() {\n-                        agent_out = Some(poll.agent.clone());\n+                    if let Some(a) = poll.agent.as_deref().map(str::trim).filter(|s| !s.is_empty()) {\n+                        agent_out = Some(a.to_string());\n                     }\n                     if poll.complete {\n                         token_out = poll.token;\ndiff --git a/server/src/api/auth.rs b/server/src/api/auth.rs\nindex bfddcce4dc1a77571d297648dd840e6c5bc194f8..01c02f50c19bcd62c7f1717f9b927f203c3164d0 100644\n--- a/server/src/api/auth.rs\n+++ b/server/src/api/auth.rs\n@@ -29,12 +29,6 @@ use crate::{\n     write_cmd::WriteCmd,\n };\n \n-/// Delegate id for browser users who land via `/join/inv_…` (no CLI agent).\n-const INVITE_BROWSER_AGENT: &str = \"00000000-0000-0000-0000-000000000000:invite:web/join\";\n-\n-/// Agent id for `/login` browser OAuth (no CLI); must pass [`parse_agent`].\n-pub const WEB_BROWSER_AGENT: &str = \"00000000-0000-0000-0000-000000000001:social:web/browser\";\n-\n /// HttpOnly cookie storing the same `slug_*` bearer string the CLI uses.\n pub const SLUG_SESSION_COOKIE: &str = \"slug_session\";\n \n@@ -282,7 +276,7 @@ pub async fn get_join_invite(\n     let session = format!(\"p_{}\", uuid::Uuid::new_v4().simple());\n     let redirect_next = safe_local_redirect(q.next.as_deref().or(q.redirect.as_deref()));\n     let s = PendingSession {\n-        agent: INVITE_BROWSER_AGENT.to_string(),\n+        agent: None,\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\n@@ -549,7 +543,7 @@ pub async fn post_choose_username(\n     };\n \n     let sessions = pending_sessions(&state);\n-    let (provider, provider_id, agent) = {\n+    let (provider, provider_id) = {\n         let sessions_read = sessions.read().await;\n         let Some(s) = sessions_read.get(&form.session) else {\n             return api_error(StatusCode::NOT_FOUND, \"unknown session\", None).into_response();\n@@ -560,14 +554,9 @@ pub async fn post_choose_username(\n         let Some(provider_id) = s.provider_id.clone() else {\n             return js_form_error_fragment(&form.session, \"oauth not completed\").into_response();\n         };\n-        (provider, provider_id, s.agent.clone())\n+        (provider, provider_id)\n     };\n \n-    if let Err(msg) = parse_agent(&agent) {\n-        return js_form_error_fragment(&form.session, &format!(\"invalid agent format — {msg}\"))\n-            .into_response();\n-    }\n-\n     let redeem_invite = {\n         let sessions_read = sessions.read().await;\n         sessions_read\n@@ -637,7 +626,8 @@ pub async fn get_web_login(\n     let redirect_next = safe_local_redirect(q.next.as_deref().or(q.redirect.as_deref()))\n         .or_else(|| Some(\"/\".to_string()));\n     let s = PendingSession {\n-        agent: WEB_BROWSER_AGENT.to_string(),\n+        // Humans sign in via the website with no AI delegate.\n+        agent: None,\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\n@@ -698,7 +688,7 @@ pub async fn post_pending_session(\n     );\n     let poll_url = format!(\"/api/v0/pending-session/{session}\");\n     let s = PendingSession {\n-        agent: agent_naked,\n+        agent: Some(agent_naked),\n         created_ts: now_ms(),\n         provider: None,\n         provider_id: None,\ndiff --git a/server/src/api/ui_html.rs b/server/src/api/ui_html.rs\nindex 578e5844e86f7c2666c8e37ef9fa90c01d20d134..57a0139928b09034122398f8f3362cbdbcc5862e 100644\n--- a/server/src/api/ui_html.rs\n+++ b/server/src/api/ui_html.rs\n@@ -276,7 +276,7 @@ async fn dispatch_ui_action(\n                 &session.bearer,\n                 room.clone(),\n                 thread_tag.clone(),\n-                Some(crate::api::auth::WEB_BROWSER_AGENT.to_string()),\n+                None,\n                 text,\n             )\n             .await\ndiff --git a/server/src/state.rs b/server/src/state.rs\nindex 648ab5304764a329fcabbbbcd3782b94e3e005a8..8ea84dcf9b1df8f8037e913cdd94e5908e6d5d55 100644\n--- a/server/src/state.rs\n+++ b/server/src/state.rs\n@@ -21,7 +21,8 @@ pub struct InviteState {\n \n #[derive(Debug, Clone)]\n pub struct PendingSession {\n-    pub agent: String,\n+    /// CLI `identity start` delegate (`uuid:rig:model`). `None` for browser `/login` and `/join`.\n+    pub agent: Option<String>,\n     pub created_ts: i64,\n     pub provider: Option<String>,\n     pub provider_id: Option<String>,\ndiff --git a/server/tests/integration_ui.rs b/server/tests/integration_ui.rs\nindex d242abff5769cc704b3c8070d7456e5788c31a45..22b16c87d5ecdb5272a017af70b5353d8c39c6e8 100644\n--- a/server/tests/integration_ui.rs\n+++ b/server/tests/integration_ui.rs\n@@ -418,6 +418,99 @@ async fn test_web_login_carries_vote_pair_next_into_pending_session() {\n     let sessions = state.pending_sessions.read().await;\n     let pending = sessions.get(&session).expect(\"pending session\");\n     assert_eq!(pending.redirect_next.as_deref(), Some(next));\n+    assert_eq!(\n+        pending.agent, None,\n+        \"browser /login must not invent a sentinel delegate\"\n+    );\n+}\n+\n+#[tokio::test]\n+async fn test_vote_compare_two_users_both_succeed_without_delegate() {\n+    let (addr, _tmp, _log, state, _handle) = create_test_server_with_state().await;\n+    let client = reqwest::Client::new();\n+    let alice = test_bearer();\n+    let bob = seed_user_token(&state, \"bob\", \"bobtok\", \"bobsecret\").await;\n+\n+    // Define items first (votes require existing item bodies).\n+    let seed = ui_post_ingest_rpc(\n+        \"public\",\n+        \"multi-vote\",\n+        \"~/multi-a {alpha}\\n~/multi-b {beta}\\n\",\n+    );\n+    let seed_resp = client\n+        .post(format!(\"http://{addr}/ui\"))\n+        .header(\"Authorization\", format!(\"Bearer {alice}\"))\n+        .form(&[(\"__rpc__\", seed.as_str())])\n+        .send()\n+        .await\n+        .unwrap();\n+    assert_eq!(seed_resp.status(), reqwest::StatusCode::OK);\n+    let seed_js = seed_resp.text().await.unwrap();\n+    assert!(\n+        !seed_js.contains(\"auth-error\"),\n+        \"item seed must succeed, got: {seed_js}\"\n+    );\n+\n+    for (bearer, left, right, explanation) in [\n+        (&alice, \"3\", \"1\", \"alice prefers a\"),\n+        (&bob, \"1\", \"3\", \"bob prefers b\"),\n+    ] {\n+        let rpc = ui_vote_compare_post_rpc(\n+            \"public\",\n+            \"multi-vote\",\n+            \"~/multi-a\",\n+            \"~/multi-b\",\n+            left,\n+            right,\n+            explanation,\n+        );\n+        let resp = client\n+            .post(format!(\"http://{addr}/ui\"))\n+            .header(\"Authorization\", format!(\"Bearer {bearer}\"))\n+            .form(&[(\"__rpc__\", rpc.as_str())])\n+            .send()\n+            .await\n+            .unwrap();\n+        assert_eq!(resp.status(), reqwest::StatusCode::OK);\n+        let js = resp.text().await.unwrap();\n+        assert!(\n+            !js.contains(\"delegate already bound\"),\n+            \"human vote must not hit shared-sentinel AgentBound ({explanation}), got: {js}\"\n+        );\n+        assert!(\n+            !js.contains(\"auth-error\"),\n+            \"human vote must succeed ({explanation}), got: {js}\"\n+        );\n+        assert!(\n+            js.contains(\"vote-edge-history-region\"),\n+            \"vote should morph edge history ({explanation}), got: {js}\"\n+        );\n+    }\n+\n+    let reduced = state.reduced.read().await;\n+    let human_votes: Vec<_> = reduced\n+        .ingests_ordered\n+        .iter()\n+        .filter_map(|id| reduced.ingests_by_id.get(id))\n+        .filter(|ing| ing.raw.contains(\"prefers\"))\n+        .collect();\n+    assert_eq!(human_votes.len(), 2, \"expected two vote ingests\");\n+    let mut principals: Vec<&str> = human_votes.iter().map(|i| i.principal.as_str()).collect();\n+    principals.sort();\n+    assert_eq!(principals, [\"bob\", \"testuser\"]);\n+    for ing in &human_votes {\n+        assert!(\n+            ing.delegate.is_none(),\n+            \"browser votes must have no delegate, principal={} delegate={:?}\",\n+            ing.principal,\n+            ing.delegate\n+        );\n+    }\n+    assert!(\n+        reduced.agent_bindings.is_empty(),\n+        \"human votes must not create AgentBound entries: {:?}\",\n+        reduced.agent_bindings\n+    );\n }\n \n #[tokio::test]\ndiff --git a/server/tests/support/mod.rs b/server/tests/support/mod.rs\nindex 4a620eaa875e7a1145f2a4e82cc4ff2be21d5345..a5306fa2c4c9fda47e43fc0de42407b66e23eced 100644\n--- a/server/tests/support/mod.rs\n+++ b/server/tests/support/mod.rs\n@@ -70,20 +70,25 @@ pub async fn rpc_batch(\n     response.json().await.unwrap()\n }\n \n-pub async fn seed_test_token(state: &AppState) {\n+/// Seed a user + bearer into reducer state (not appended to the event log).\n+/// Returns the `slug_<token_id>_<secret>` bearer string.\n+pub async fn seed_user_token(\n+    state: &AppState,\n+    username: &str,\n+    token_id: &str,\n+    secret: &str,\n+) -> String {\n     let registered = Event::UserRegistered(UserRegistered {\n         ts: 0,\n-        username: \"testuser\".to_string(),\n+        username: username.to_string(),\n         provider: \"test\".to_string(),\n-        provider_id: \"testuser\".to_string(),\n+        provider_id: username.to_string(),\n     });\n-    let token_id = \"testtok\";\n-    let secret = \"secret\";\n     let salt = \"salt\";\n     let token_hash = sha256_hex(&format!(\"{salt}:{secret}\"));\n     let ev = Event::TokenIssued(TokenIssued {\n         ts: 0,\n-        username: \"testuser\".to_string(),\n+        username: username.to_string(),\n         token_id: token_id.to_string(),\n         token_hash,\n         salt: salt.to_string(),\n@@ -92,6 +97,11 @@ pub async fn seed_test_token(state: &AppState) {\n     let mut r = state.reduced.write().await;\n     r.apply_event(registered);\n     r.apply_event(ev);\n+    format!(\"slug_{token_id}_{secret}\")\n+}\n+\n+pub async fn seed_test_token(state: &AppState) {\n+    let _ = seed_user_token(state, \"testuser\", \"testtok\", \"secret\").await;\n }\n \n pub async fn create_test_server_with_state() -> (\ndiff --git a/test/oauth.clj b/test/oauth.clj\nindex 3cbf496005e906ad6c579d44ac8c4055ee60d063..6911ac34a55707acda9f9ce091c079964649a252 100644\n--- a/test/oauth.clj\n+++ b/test/oauth.clj\n@@ -186,8 +186,9 @@\n               (:token poll-json))))))))\n \n (defn fetch-bearer-token!\n-  \"Simulate browser OAuth + username choice; returns `slug_…` bearer token.\n-   Ingest `--delegate` must match this agent string for `AgentBound` on first write.\"\n+  \"Simulate CLI identity OAuth + username choice; returns `slug_…` bearer token.\n+   Pass `:agent` (default local/dev) when the test will CLI-ingest with `--delegate`\n+   so first write can `AgentBound`. Browser UI posts use no delegate.\"\n   [base-url & {:keys [username agent] :or {username \"intuser\" agent default-agent}}]\n   (let [token (complete-registration! base-url :username username :agent agent)]\n     (when-not (str/starts-with? token \"slug_\")\ndiff --git a/types/src/lib.rs b/types/src/lib.rs\nindex 211493935d19582607f5c87fb492faf47bdc6f53..0c4295b15908ea7a2303dac4c42015ded51e4d73 100644\n--- a/types/src/lib.rs\n+++ b/types/src/lib.rs\n@@ -535,7 +535,9 @@ pub struct PendingSessionStartResponse {\n pub struct PendingSessionPollResponse {\n     pub ok: bool,\n     pub complete: bool,\n-    pub agent: String,\n+    /// Present for CLI identity sessions; omitted for browser `/login` / `/join` (no delegate).\n+    #[serde(default, skip_serializing_if = \"Option::is_none\")]\n+    pub agent: Option<String>,\n     #[serde(skip_serializing_if = \"Option::is_none\")]\n     pub user: Option<String>,\n     #[serde(skip_serializing_if = \"Option::is_none\")]\n\n\nSide B — contributor: tommy-mor\nSide B — commit message:\n[c59951f5] fixed canonical item paths business\n\nSide B — unified diff (full patch):\ndiff --git a/server/src/html/breadcrumb_path.rs b/server/src/html/breadcrumb_path.rs\nindex 12ad2c84faf2fbb693015d4552e45b5c54d587b9..c8a3937923161a6ff248bd77e87eff0dc6fe9ab0 100644\n--- a/server/src/html/breadcrumb_path.rs\n+++ b/server/src/html/breadcrumb_path.rs\n@@ -1,4 +1,4 @@\n-use crate::path_types::CanonicalItemUrl;\n+use crate::path_types::{tilde_http_path_to_canonical, CanonicalItemUrl};\n \n /// Semantic view of an ontology path for rendering and routing decisions.\n pub(super) struct OntologyPath {\n@@ -11,16 +11,7 @@ impl OntologyPath {\n     /// Path is the `*path` segment from `/~/*path` (e.g. `topic/a`). Always treat it as under `~/`\n     /// so it canonicalizes to `https://slug.social/~/…`, not the non-tilde site path.\n     pub(super) fn from_input(path: &str) -> Self {\n-        let p = path.trim_start_matches('/');\n-        let raw = if p.starts_with(\"http://\") || p.starts_with(\"https://\") {\n-            p.to_string()\n-        } else if p.is_empty() {\n-            \"~/\".to_string()\n-        } else {\n-            format!(\"~/{}\", p)\n-        };\n-        let canonical = CanonicalItemUrl::parse(&raw)\n-            .unwrap_or_else(|| CanonicalItemUrl::parse(\"~/\").unwrap());\n+        let canonical = tilde_http_path_to_canonical(path);\n         Self::from_canonical(canonical)\n     }\n \n@@ -37,7 +28,7 @@ impl OntologyPath {\n     }\n \n     pub(super) fn root() -> Self {\n-        Self::from_canonical(CanonicalItemUrl::parse(\"~/\").unwrap())\n+        Self::from_canonical(CanonicalItemUrl::ontology_root())\n     }\n \n     pub(super) fn is_root(&self) -> bool {\ndiff --git a/server/src/html/garden.rs b/server/src/html/garden.rs\nindex d58d9b46f575eb6b7e4971086b07dda75ca2f645..319feb15a6b68d2b5df98b4289fedbc9bdd048d3 100644\n--- a/server/src/html/garden.rs\n+++ b/server/src/html/garden.rs\n@@ -459,6 +459,8 @@ struct ItemPageViewModel {\n     item: String,\n     body: Option<String>,\n     sibling_rank: Option<SiblingRank>,\n+    /// False at the tilde ontology root (`~/`): sibling-rank footnote does not apply.\n+    item_has_parent: bool,\n     child_rankings: ChildrenRankings,\n     rank_history: Vec<RankHistoryEntryView>,\n     /// Forum threads that mention or vote on this item.\n@@ -470,11 +472,12 @@ fn build_sibling_rank(\n     scope: &ScopeId,\n     item: &CanonicalItemUrl,\n ) -> Option<SiblingRank> {\n+    let item = item.clone().normalized_storage();\n     let content = reduced\n         .content_for_scope(scope)\n         .unwrap_or_else(|| reduced.public());\n     let group = &content.ranking_group;\n-    let parent = item.parent()?;\n+    let parent = item.parent()?.normalized_storage();\n     let siblings: Vec<CanonicalItemUrl> = content\n         .item_children\n         .get(&parent)\n@@ -492,7 +495,7 @@ fn build_sibling_rank(\n     if scoped_idxs.is_empty() {\n         return None;\n     }\n-    let current_idx = *group.item_to_idx.get(item)?;\n+    let current_idx = *group.item_to_idx.get(&item)?;\n     if !scoped_idxs.contains(&current_idx) {\n         return None;\n     }\n@@ -520,7 +523,7 @@ fn build_sibling_rank(\n         .filter_map(|li| local_to_global.get(*li).copied())\n         .collect();\n     let ranked = ranked_items_subset(group, &comp_global, 10000, 1e-8);\n-    let position = ranked.iter().position(|r| &r.item == item)? + 1;\n+    let position = ranked.iter().position(|r| r.item == item)? + 1;\n     Some(SiblingRank {\n         position,\n         component_size: ranked.len(),\n@@ -597,7 +600,9 @@ fn build_item_page_view_model(\n         .content_for_scope(scope)\n         .unwrap_or_else(|| reduced.public());\n     let item_key = CanonicalItemUrl::parse(item)\n-        .unwrap_or_else(|| CanonicalItemUrl::parse(\"~/\").unwrap());\n+        .unwrap_or_else(|| CanonicalItemUrl::parse(\"~/\").unwrap())\n+        .normalized_storage();\n+    let item_has_parent = item_key.parent().is_some();\n     let child_rankings = build_children_rankings(content, &item_key);\n \n     let rank_history = build_rank_history(reduced, scope, item_key.as_str());\n@@ -617,6 +622,7 @@ fn build_item_page_view_model(\n             .cloned()\n             .or_else(|| reduced.public().item_bodies.get(&item_key).cloned()),\n         sibling_rank: build_sibling_rank(reduced, scope, &item_key),\n+        item_has_parent,\n         child_rankings,\n         rank_history,\n         threads,\n@@ -652,7 +658,7 @@ async fn render_scope_view(\n                             (format!(\"#{} of {}\", rank.position, rank.component_size))\n                         }\n                         span class=\"muted\" { (format!(\"({} siblings)\", rank.sibling_total)) }\n-                    } @else {\n+                    } @else if model.item_has_parent {\n                         span class=\"muted\" { \"unranked among siblings\" }\n                     }\n                 }\n@@ -815,6 +821,18 @@ mod tests {\n         }));\n     }\n \n+    fn apply_ingest_room(state: &mut ReducerState, ts: i64, room_id: &str, raw: &str) {\n+        state.apply_event(Event::Ingest(Ingest {\n+            ts,\n+            id: format!(\"ing-{ts}\"),\n+            raw: raw.to_string(),\n+            principal: \"testuser\".to_string(),\n+            delegate: Some(\"00000000-0000-0000-0000-000000000000:test:local/test\".to_string()),\n+            room_id: room_id.to_string(),\n+            thread_tag: String::new(),\n+        }));\n+    }\n+\n     #[test]\n     fn item_page_model_includes_body_and_unranked_without_votes() {\n         let mut reduced = ReducerState::default();\n@@ -885,4 +903,85 @@ mod tests {\n                 || model.child_rankings.unranked_items.contains(&CanonicalItemUrl(\"https://slug.social/~/topic/kid2\".to_string()))\n         );\n     }\n+\n+    #[test]\n+    fn item_page_room_scope_root_lists_top_level_children() {\n+        let mut reduced = ReducerState::default();\n+        apply_ingest_room(\n+            &mut reduced,\n+            1,\n+            \"9ab12cd/my-room\",\n+            \"@00000000-0000-0000-0000-000000000000:test:local/test\\n~/t1 {a}\\n~/t2 {b}\\n\",\n+        );\n+        use crate::path_types::CanonicalItemUrl;\n+        let root = CanonicalItemUrl::ontology_root();\n+        let model = build_item_page_view_model(\n+            &reduced,\n+            &ScopeId::Room(\"9ab12cd/my-room\".to_string()),\n+            root.as_str(),\n+        );\n+        assert!(!model.item_has_parent);\n+        assert_eq!(model.child_rankings.unranked_items.len(), 2);\n+        let set: std::collections::HashSet<&str> = model\n+            .child_rankings\n+            .unranked_items\n+            .iter()\n+            .map(|u| u.as_str())\n+            .collect();\n+        assert!(set.contains(\"https://slug.social/~/t1\"));\n+        assert!(set.contains(\"https://slug.social/~/t2\"));\n+    }\n+\n+    /// Top-level `~/a` vs `~/b` votes form one ranked component under the ontology root.\n+    #[test]\n+    fn item_page_room_scope_root_shows_ranked_child_group() {\n+        let mut reduced = ReducerState::default();\n+        apply_ingest_room(\n+            &mut reduced,\n+            1,\n+            \"9ab12cd/my-room\",\n+            \"@00000000-0000-0000-0000-000000000000:test:local/test\\n\\\n+             ~/a {a}\\n~/b {b}\\n~/a 2:1 ~/b {because}\\n\",\n+        );\n+        use crate::path_types::CanonicalItemUrl;\n+        let root = CanonicalItemUrl::ontology_root();\n+        let model = build_item_page_view_model(\n+            &reduced,\n+            &ScopeId::Room(\"9ab12cd/my-room\".to_string()),\n+            root.as_str(),\n+        );\n+        assert_eq!(model.child_rankings.component_rankings.len(), 1);\n+        assert_eq!(model.child_rankings.component_rankings[0].pairs, 1);\n+        let names: Vec<&str> = model.child_rankings.component_rankings[0]\n+            .ranked\n+            .iter()\n+            .map(|r| r.item.as_str())\n+            .collect();\n+        assert_eq!(\n+            names,\n+            vec![\"https://slug.social/~/a\", \"https://slug.social/~/b\"]\n+        );\n+        assert!(model.child_rankings.unranked_items.is_empty());\n+    }\n+\n+    /// Legacy `https://slug.social/~/` spelling still resolves children under the real root key.\n+    #[test]\n+    fn item_page_model_normalizes_legacy_tilde_root_storage_url() {\n+        let mut reduced = ReducerState::default();\n+        apply_ingest(\n+            &mut reduced,\n+            1,\n+            \"@00000000-0000-0000-0000-000000000000:test:local/test\\n~/x {x}\\n\",\n+        );\n+        let model = build_item_page_view_model(\n+            &reduced,\n+            &ScopeId::Public,\n+            \"https://slug.social/~/\",\n+        );\n+        assert_eq!(model.child_rankings.unranked_items.len(), 1);\n+        assert_eq!(\n+            model.child_rankings.unranked_items[0].as_str(),\n+            \"https://slug.social/~/x\"\n+        );\n+    }\n }\ndiff --git a/server/src/path_types.rs b/server/src/path_types.rs\nindex 4c8075bbd488f1b9a5eda9e03ced83f6238c6d5e..361a9d446c9043cbdea5f060db2e8633c2fd9bf9 100644\n--- a/server/src/path_types.rs\n+++ b/server/src/path_types.rs\n@@ -1,3 +1,5 @@\n //! Re-exports — implementations live in `slug-types` (`paths` module).\n \n-pub use slug_types::paths::{CanonicalItemUrl, RelativePath, TildePath};\n+pub use slug_types::paths::{\n+    tilde_http_path_to_canonical, CanonicalItemUrl, RelativePath, TildeHttpPathTail, TildePath,\n+};\ndiff --git a/server/src/scope_rank.rs b/server/src/scope_rank.rs\nindex dc640848232b7e79142bfeeea3003c9023f84854..d656b2f0a0a3623ca6b234b746beaaca8ae6017d 100644\n--- a/server/src/scope_rank.rs\n+++ b/server/src/scope_rank.rs\n@@ -149,9 +149,10 @@ pub fn build_rankings_for_item_set(content: &ContentState, items_in_scope: &[Can\n /// Build connected-component rankings for direct children of parent_scope.\n /// Matches the HTML garden view: multiple components, isolates, no-vote items.\n pub fn build_children_rankings(content: &ContentState, parent: &CanonicalItemUrl) -> ChildrenRankings {\n+    let parent = parent.clone().normalized_storage();\n     let items: Vec<CanonicalItemUrl> = content\n         .item_children\n-        .get(parent)\n+        .get(&parent)\n         .map(|s| s.iter().cloned().collect())\n         .unwrap_or_default();\n     build_rankings_for_item_set(content, &items)\ndiff --git a/server/tests/integration.rs b/server/tests/integration.rs\nindex f9c218378f6a173e56ae1cec797b3c492986eac0..d4c5bfe9c6f1c71dc61878bd8c5e729b1b7c69ef 100644\n--- a/server/tests/integration.rs\n+++ b/server/tests/integration.rs\n@@ -704,6 +704,62 @@ async fn test_private_room_post_links_use_private_garden_routes() {\n     assert!(garden_body.contains(&format!(\"/r/{room_short}/{room_slug}/t/garden-thread\")));\n }\n \n+#[tokio::test]\n+async fn test_private_room_garden_root_lists_top_level_tilde_children() {\n+    let (addr, _tmp, _log, _handle) = create_test_server().await;\n+    let client = reqwest::Client::builder()\n+        .redirect(reqwest::redirect::Policy::none())\n+        .build()\n+        .unwrap();\n+    let bearer = test_bearer();\n+\n+    let create = rpc_batch(\n+        &client,\n+        addr,\n+        Some(&bearer),\n+        serde_json::json!([{\n+            \"RoomCreate\": { \"slug\": \"garden-root-list\" }\n+        }]),\n+    )\n+    .await;\n+    let room_id = create[\"results\"][0][\"result\"][\"RoomCreated\"][\"room_id\"]\n+        .as_str()\n+        .unwrap()\n+        .to_string();\n+    let (room_short, room_slug) = room_id.split_once('/').unwrap();\n+\n+    let rpc = ui_post_ingest_rpc(\n+        &room_id,\n+        \"ing\",\n+        \"~/test1 {wow}\\n~/test2 {wow2}\\n~/test1 2:1 ~/test2 {because}\\n\",\n+    );\n+    let post = client\n+        .post(format!(\"http://{addr}/ui\"))\n+        .header(\"Authorization\", format!(\"Bearer {bearer}\"))\n+        .form(&[(\"__rpc__\", rpc.as_str())])\n+        .send()\n+        .await\n+        .unwrap();\n+    assert_eq!(post.status(), reqwest::StatusCode::OK);\n+\n+    let root_page = client\n+        .get(format!(\"http://{addr}/r/{room_short}/{room_slug}/~\"))\n+        .header(\"Authorization\", format!(\"Bearer {bearer}\"))\n+        .send()\n+        .await\n+        .unwrap();\n+    assert!(root_page.status().is_success());\n+    let body = root_page.text().await.unwrap();\n+    assert!(\n+        body.contains(\"ranked child groups\"),\n+        \"expected garden child panel: {}\",\n+        body.len()\n+    );\n+    assert!(body.contains(\"~/test1\"));\n+    assert!(body.contains(\"~/test2\"));\n+    assert!(body.contains(\"ordering 1\"));\n+}\n+\n #[tokio::test]\n async fn test_post_check_returns_targeted_js_error_for_missing_thread_tag() {\n     let (addr, _tmp, _log, _handle) = create_test_server().await;\ndiff --git a/test/browser_public_garden.clj b/test/browser_public_garden.clj\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..7bea08e1cf2c8f5b1a94b0640a46e9ba5607b19b\n--- /dev/null\n+++ b/test/browser_public_garden.clj\n@@ -0,0 +1,100 @@\n+(ns test.browser-public-garden\n+  \"Regression: ingest ontology items in the public room via RPC, then open /~ in the browser\n+   and assert ranked + unranked paths appear (HTML garden index — not JSON API).\"\n+  (:require [babashka.fs :as fs]\n+            [cheshire.core :as json]\n+            [clojure.string :as str]\n+            [clojure.test :refer [deftest is]]\n+            [com.blockether.spel.core :as core]\n+            [com.blockether.spel.locator :as locator]\n+            [com.blockether.spel.page :as page]\n+            [test.common :as common]\n+            [test.oauth :as oauth]))\n+\n+(defn- wait-for-text [pg selector expected timeout-ms]\n+  (let [deadline (+ (System/currentTimeMillis) timeout-ms)]\n+    (loop []\n+      (let [text (locator/text-content (page/locator pg selector))]\n+        (if (and (string? text) (str/includes? text expected))\n+          true\n+          (if (< (System/currentTimeMillis) deadline)\n+            (do (Thread/sleep 200) (recur))\n+            false))))))\n+\n+(defn public-garden-flow! []\n+  (println \"\\n━━━ browser public room garden index (RPC seed + GET /~) ━━━\\n\")\n+\n+  (common/letlocals\n+   (bind build (common/run-cargo-build-release! [\"slugsocial-server\"]))\n+   (is (zero? (:exit build)) \"cargo build succeeds\")\n+   (bind server-bin \"target/release/slugsocial-server\")\n+\n+   (bind tmp-dir (str (fs/create-temp-dir {:prefix \"slug-browser-pub-garden-\"})))\n+   (bind slug-port (common/pick-port))\n+   (bind google-port (common/pick-port))\n+   (bind base-url (str \"http://127.0.0.1:\" slug-port))\n+   (bind google-url (str \"http://127.0.0.1:\" google-port))\n+\n+   (bind !server (atom nil))\n+   (bind !google (atom nil))\n+   (bind server-env (common/slug-server-env tmp-dir base-url google-url slug-port))\n+   (try\n+     (reset! !google (oauth/start-mock-google google-port\n+                                              :google-users [\"google-user-alice\"]))\n+     (reset! !server (common/start-server server-bin server-env))\n+     (is (common/wait-for-server base-url 10000) \"server responds to /healthz\")\n+\n+     (let [alice-token (oauth/fetch-bearer-token! base-url :username \"alice\")\n+           thread-tag \"browser-pub-garden\"\n+           ;; Ranked pair at root + one isolate so both panels are exercised.\n+           raw (str \"# \" thread-tag \"\\n\\n\"\n+                    \"~/br-pub-a {alpha}\\n\"\n+                    \"~/br-pub-b {beta}\\n\"\n+                    \"~/br-pub-c {gamma}\\n\"\n+                    \"~/br-pub-a 2:1 ~/br-pub-b {browser regression vote}\\n\")\n+           post-resp (oauth/http-post-json\n+                      (str base-url \"/api/v0/rpc\")\n+                      [{\"Post\" {\"room\" \"public\"\n+                                \"thread_tag\" thread-tag\n+                                \"text\" raw\n+                                \"return_rank_diff\" false}}]\n+                      :headers {\"Authorization\" (str \"Bearer \" alice-token)})\n+           post-json (json/parse-string (:body post-resp) false)\n+           _ (is (true? (get-in post-json [\"results\" 0 \"ok\"])) \"seed public post via rpc\")\n+           rank-resp (oauth/http-post-json\n+                      (str base-url \"/api/v0/rpc\")\n+                      [{\"GetGardenRank\" {\"room\" \"public\"\n+                                         \"parent_path\" \"~\"\n+                                         \"depth\" 1}}])\n+           rank-json (json/parse-string (:body rank-resp) false)\n+           _ (is (true? (get-in rank-json [\"results\" 0 \"ok\"])) \"GetGardenRank ok\")\n+           comps (get-in rank-json [\"results\" 0 \"result\" \"GardenRank\" \"components\"])\n+           _ (is (pos? (count comps)) \"rank API reports at least one component\")]\n+       (core/with-playwright [pw]\n+         (core/with-browser [browser (core/launch-chromium pw {:headless true :channel \"chrome\"})]\n+           (core/with-context [ctx (core/new-context browser)]\n+             (core/with-page [pg (core/new-page-from-context ctx)]\n+               (page/navigate pg (str base-url \"/login\"))\n+               (is (wait-for-text pg \"body\" \"@alice\" 15000) \"alice session after login\")\n+               (page/navigate pg (str base-url \"/~\"))\n+               (is (wait-for-text pg \"body\" \"paths\" 15000) \"public garden index shows paths heading\")\n+               (is (wait-for-text pg \"body\" \"ordering\" 10000)\n+                   \"ranked child group meta visible\")\n+               (is (wait-for-text pg \"body\" \"~/br-pub-a\" 10000) \"ranked list shows ~/br-pub-a\")\n+               (is (wait-for-text pg \"body\" \"~/br-pub-b\" 10000) \"ranked list shows ~/br-pub-b\")\n+               (is (wait-for-text pg \"body\" \"unranked\" 10000) \"unranked section present\")\n+               (is (wait-for-text pg \"body\" \"~/br-pub-c\" 10000)\n+                   \"unranked list shows ~/br-pub-c\"))))))\n+\n+     (finally\n+       (when-some [s @!server] (common/kill-server s))\n+       (when-some [g @!google] ((:stop-fn g)))\n+       (fs/delete-tree tmp-dir)))\n+\n+   nil))\n+\n+(defn public-garden-browser-test [& _args]\n+  (public-garden-flow!))\n+\n+(deftest browser-public-garden-index-check\n+  (public-garden-flow!))\ndiff --git a/tests.edn b/tests.edn\nindex 56fdfa4f29383ad305fd8068783e4efe2ed334a0..6e96432ba766461b4233c75dc48db2633483e5e0 100644\n--- a/tests.edn\n+++ b/tests.edn\n@@ -16,7 +16,8 @@\n    :ns-patterns [\"^test\\\\.browser-sse$\"\n                  \"^test\\\\.browser-ui-morph$\"\n                  \"^test\\\\.browser-post-redact$\"\n-                 \"^test\\\\.browser-room-delete$\"]\n+                 \"^test\\\\.browser-room-delete$\"\n+                 \"^test\\\\.browser-public-garden$\"]\n    :kaocha.filter/skip-meta [:skip]\n    :parallel? false}]\n  :plugins [:kaocha.plugin/junit-xml]\ndiff --git a/types/src/lib.rs b/types/src/lib.rs\nindex 8cea90238ef6207d65ecdb2903b8958fafb213d2..edbb923e4d7d41ad82dfc254c3bd697562383527 100644\n--- a/types/src/lib.rs\n+++ b/types/src/lib.rs\n@@ -4,8 +4,9 @@ pub mod paths;\n pub mod timeago;\n \n pub use paths::{\n-    canonicalize_item, canonicalize_tag, item_parent_path, item_path_segments, CanonicalItemUrl,\n-    ForumThreadUrl, GardenItemUrl, RelativePath, TildeOntologyPath, TildePath,\n+    canonicalize_item, canonicalize_tag, item_parent_path, item_path_segments, normalize_slug_ontology_storage_url,\n+    CanonicalItemUrl, ForumThreadUrl, GardenItemUrl, RelativePath, SLUG_TILDE_ONTOLOGY_ROOT,\n+    TildeHttpPathTail, TildeOntologyPath, TildePath, tilde_http_path_to_canonical,\n };\n \n /// Max characters returned for a garden item body unless `full=true` / `--full` (API + CLI).\ndiff --git a/types/src/paths.rs b/types/src/paths.rs\nindex 668323ed777f360f2838a0dfe6eae68905d1183b..8971f599a7ebcf399f60c306d35ee28d0f581194 100644\n--- a/types/src/paths.rs\n+++ b/types/src/paths.rs\n@@ -1,5 +1,13 @@\n //! Canonical paths, storage ids, and JSON href newtypes. All normalization and\n //! room-aware URL rules for items live here.\n+//!\n+//! ## String kinds (parse in this module only)\n+//!\n+//! - **[`canonicalize_item`] / [`CanonicalItemUrl`]** — graph storage key and DSL form; tilde\n+//!   ontology root is always [`SLUG_TILDE_ONTOLOGY_ROOT`] (no `…/~/` trailing slash only).\n+//! - **[`TildeHttpPathTail`]** — capture from `GET /~/*path` or `…/r/…/~/…` (the `*path` segment).\n+//! - **`-/…` wire form** — external items; see [`canonicalize_item`] dash branch.\n+//! - **[`GardenItemUrl`], [`ForumThreadUrl`]** — JSON / browser href surfaces.\n \n use std::borrow::Borrow;\n use std::fmt;\n@@ -7,6 +15,23 @@ use std::ops::Deref;\n \n use serde::{Deserialize, Serialize};\n \n+// ---------------------------------------------------------------------------\n+// Slug tilde ontology (single storage form for `~/`)\n+// ---------------------------------------------------------------------------\n+\n+/// Canonical absolute URL for the tilde ontology **root** (`~/` in UI). Used as the\n+/// `item_children` parent key for top-level items and must match [`CanonicalItemUrl::ontology_root`].\n+pub const SLUG_TILDE_ONTOLOGY_ROOT: &str = \"https://slug.social/~\";\n+\n+/// Collapse legacy or parser variants of the ontology root to [`SLUG_TILDE_ONTOLOGY_ROOT`].\n+pub fn normalize_slug_ontology_storage_url(s: &str) -> String {\n+    if s == \"https://slug.social/~/\" {\n+        SLUG_TILDE_ONTOLOGY_ROOT.to_string()\n+    } else {\n+        s.to_string()\n+    }\n+}\n+\n // ---------------------------------------------------------------------------\n // Normalization (moved from server `canonical_path`)\n // ---------------------------------------------------------------------------\n@@ -89,6 +114,9 @@ pub fn canonicalize_item(input: &str) -> String {\n         .join(\"/\");\n \n     if is_tilde {\n+        if tail.is_empty() {\n+            return SLUG_TILDE_ONTOLOGY_ROOT.to_string();\n+        }\n         format!(\"https://slug.social/~/{}\", tail)\n     } else if tail.is_empty() {\n         \"https://slug.social\".to_string()\n@@ -173,7 +201,7 @@ impl CanonicalItemUrl {\n         if c.is_empty() {\n             None\n         } else {\n-            Some(Self(c))\n+            Some(Self(normalize_slug_ontology_storage_url(&c)))\n         }\n     }\n \n@@ -181,8 +209,19 @@ impl CanonicalItemUrl {\n         &self.0\n     }\n \n+    /// Collapses legacy slug ontology root spellings so [`HashMap`] keys match the reducer graph.\n+    pub fn normalized_storage(self) -> Self {\n+        Self(normalize_slug_ontology_storage_url(self.as_str()))\n+    }\n+\n     pub fn tilde_tail(&self) -> Option<&str> {\n-        self.0.strip_prefix(\"https://slug.social/~/\")\n+        if let Some(tail) = self.0.strip_prefix(\"https://slug.social/~/\") {\n+            return Some(tail);\n+        }\n+        if self.0 == SLUG_TILDE_ONTOLOGY_ROOT || self.0 == \"https://slug.social/~/\" {\n+            return Some(\"\");\n+        }\n+        None\n     }\n \n     pub fn last_segment(&self) -> &str {\n@@ -193,7 +232,7 @@ impl CanonicalItemUrl {\n     }\n \n     pub fn ontology_root() -> Self {\n-        Self(\"https://slug.social/~\".to_string())\n+        Self(SLUG_TILDE_ONTOLOGY_ROOT.to_string())\n     }\n \n     pub fn parent(&self) -> Option<Self> {\n@@ -234,9 +273,13 @@ impl CanonicalItemUrl {\n \n     /// `-/` representation for external `https://…` items, `~/…` for slug ontology, else unchanged.\n     pub fn display_path(&self) -> String {\n-        if let Some(tail) = self.0.strip_prefix(\"https://slug.social/~/\") {\n-            format!(\"~/{}\", tail)\n-        } else if let Some(tail) = self.0.strip_prefix(\"https://\") {\n+        if let Some(tail) = self.tilde_tail() {\n+            if tail.is_empty() {\n+                return \"~/\".to_string();\n+            }\n+            return format!(\"~/{}\", tail);\n+        }\n+        if let Some(tail) = self.0.strip_prefix(\"https://\") {\n             if tail.starts_with(\"slug.social\") {\n                 self.0.clone()\n             } else {\n@@ -276,6 +319,37 @@ impl CanonicalItemUrl {\n     }\n }\n \n+/// HTTP route capture: path segment after `~/` in `GET /~/*path` or `…/r/…/~/…` (empty = ontology root).\n+#[derive(Debug, Clone, PartialEq, Eq, Hash)]\n+pub struct TildeHttpPathTail(pub String);\n+\n+impl TildeHttpPathTail {\n+    pub fn new(path_segment: &str) -> Self {\n+        Self(path_segment.trim_start_matches('/').to_string())\n+    }\n+\n+    pub fn as_str(&self) -> &str {\n+        &self.0\n+    }\n+\n+    pub fn to_canonical(&self) -> CanonicalItemUrl {\n+        tilde_http_path_to_canonical(self.as_str())\n+    }\n+}\n+\n+/// Map the router's tilde tail (e.g. `topic/a`, or empty for root) to a [`CanonicalItemUrl`].\n+pub fn tilde_http_path_to_canonical(path_segment: &str) -> CanonicalItemUrl {\n+    let p = path_segment.trim_start_matches('/');\n+    let raw = if p.starts_with(\"http://\") || p.starts_with(\"https://\") {\n+        p.to_string()\n+    } else if p.is_empty() {\n+        \"~/\".to_string()\n+    } else {\n+        format!(\"~/{}\", p)\n+    };\n+    CanonicalItemUrl::parse(&raw).unwrap_or_else(|| CanonicalItemUrl::ontology_root())\n+}\n+\n impl fmt::Display for CanonicalItemUrl {\n     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {\n         self.0.fmt(f)\n@@ -557,6 +631,44 @@ mod tests {\n     fn canonical_parent_root_is_none() {\n         let root = CanonicalItemUrl::parse(\"~/\").unwrap();\n         assert!(root.parent().is_none());\n+        assert_eq!(root.as_str(), SLUG_TILDE_ONTOLOGY_ROOT);\n+        assert_eq!(root, CanonicalItemUrl::ontology_root());\n+    }\n+\n+    #[test]\n+    fn tilde_ontology_root_unifies_forms() {\n+        assert_eq!(canonicalize_item(\"~/\"), SLUG_TILDE_ONTOLOGY_ROOT);\n+        assert_eq!(\n+            normalize_slug_ontology_storage_url(\"https://slug.social/~/\"),\n+            SLUG_TILDE_ONTOLOGY_ROOT.to_string()\n+        );\n+        assert_eq!(\n+            CanonicalItemUrl::parse(\"https://slug.social/~/\")\n+                .unwrap()\n+                .as_str(),\n+            SLUG_TILDE_ONTOLOGY_ROOT\n+        );\n+        let legacy = CanonicalItemUrl(\"https://slug.social/~/\".to_string());\n+        assert_eq!(legacy.normalized_storage().as_str(), SLUG_TILDE_ONTOLOGY_ROOT);\n+    }\n+\n+    #[test]\n+    fn tilde_http_path_tail_maps_router_segment() {\n+        assert_eq!(\n+            TildeHttpPathTail::new(\"\").to_canonical(),\n+            CanonicalItemUrl::ontology_root()\n+        );\n+        assert_eq!(\n+            tilde_http_path_to_canonical(\"topic/x\").as_str(),\n+            \"https://slug.social/~/topic/x\"\n+        );\n+    }\n+\n+    #[test]\n+    fn display_path_slug_ontology_root() {\n+        let r = CanonicalItemUrl::ontology_root();\n+        assert_eq!(r.display_path(), \"~/\");\n+        assert_eq!(r.tilde_tail(), Some(\"\"));\n     }\n \n     #[test]\n","role":"user"}],"model":"~x-ai/grok-latest"}