{"messages":[{"content":"You are a constitutional council ranking individual git commits for ownership allocation.\n\nCompare these two commits. Decide which contributed more lasting value to the project.\n\nJudge substance, not spectacle:\n- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.\n- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.\n- Do not favor a side merely because its patch is longer or noisier.\n- Weight what the change does for the project, not the contributor's name.\n\nReturn ONLY a JSON object: {\"winner\": \"A\" or \"B\", \"ratio\": \"N:M\", \"explanation\": \"...\"}\nThe explanation must cite concrete differences in the patches (1-3 sentences).\n\nSide A — contributor: tommy-mor\nSide A — commit message:\n[2fe70b0e] themes\n\nSide A — unified diff (full patch):\ndiff --git a/server/src/api/auth.rs b/server/src/api/auth.rs\nindex 559db65de14c6157690ffbf18eca0cf65b0a5202..b3631b06153d52f88348fef927e7a024b7b85ad6 100644\n--- a/server/src/api/auth.rs\n+++ b/server/src/api/auth.rs\n@@ -1,7 +1,7 @@\n use axum::{\n     body::Body,\n     extract::{Path, Query, State},\n-    http::{header, HeaderMap, HeaderValue, StatusCode},\n+    http::{header, HeaderMap, HeaderValue, StatusCode, Uri},\n     response::{IntoResponse, Redirect, Response},\n     Form, Json,\n };\n@@ -17,7 +17,7 @@ use crate::{\n     events::{Event, GrantAdded, TokenIssued, UserRegistered},\n     html::{\n         auth_complete_page, auth_signed_in_fragment, choose_username_error_fragment,\n-        choose_username_page, JsBuilder,\n+        choose_username_page, theme_cookie_header_from_jar, theme_from_jar, theme_next_from_uri, JsBuilder,\n     },\n     identity::{parse_agent, parse_username},\n     reducer::ReducerState,\n@@ -48,15 +48,17 @@ fn js_form_error_fragment(session: &str, error: &str) -> Response {\n         .into_response()\n }\n \n-fn js_signed_in_fragment(bearer: &str) -> Response {\n+fn js_signed_in_fragment(bearer: &str, jar: &CookieJar) -> Response {\n     let mut response = JsBuilder::new()\n         .id(\"choose-username-form\")\n         .morph_inner(auth_signed_in_fragment())\n         .redirect(\"/auth/complete\")\n         .into_response();\n-    response\n-        .headers_mut()\n-        .insert(header::SET_COOKIE, session_cookie_header_value(bearer));\n+    let headers = response.headers_mut();\n+    headers.append(header::SET_COOKIE, session_cookie_header_value(bearer));\n+    if let Some(theme) = theme_cookie_header_from_jar(jar) {\n+        headers.append(header::SET_COOKIE, theme);\n+    }\n     response\n }\n \n@@ -69,13 +71,18 @@ pub fn optional_principal(headers: &HeaderMap, jar: &CookieJar, reduced: &Reduce\n     verify_token(reduced, c.value()).ok()\n }\n \n-fn redirect_with_session_cookie(public_url: &str, path_and_query: &str, bearer: &str) -> Response {\n-    Response::builder()\n+fn redirect_with_session_cookie(public_url: &str, path_and_query: &str, bearer: &str, jar: &CookieJar) -> Response {\n+    let mut res = Response::builder()\n         .status(StatusCode::TEMPORARY_REDIRECT)\n         .header(header::LOCATION, format!(\"{public_url}{path_and_query}\"))\n-        .header(header::SET_COOKIE, session_cookie_header_value(bearer))\n         .body(Body::empty())\n-        .unwrap()\n+        .unwrap();\n+    let headers = res.headers_mut();\n+    headers.append(header::SET_COOKIE, session_cookie_header_value(bearer));\n+    if let Some(theme) = theme_cookie_header_from_jar(jar) {\n+        headers.append(header::SET_COOKIE, theme);\n+    }\n+    res\n }\n \n async fn apply_invite_redemption(state: &AppState, invite_token: &str, grantee_username: &str) -> Result<(), String> {\n@@ -286,7 +293,11 @@ pub struct AuthCallbackQuery {\n     pub state: String,\n }\n \n-pub async fn get_auth_callback(Query(q): Query<AuthCallbackQuery>, State(state): State<AppState>) -> impl IntoResponse {\n+pub async fn get_auth_callback(\n+    Query(q): Query<AuthCallbackQuery>,\n+    State(state): State<AppState>,\n+    jar: CookieJar,\n+) -> impl IntoResponse {\n     let sessions = pending_sessions(&state);\n     {\n         let sessions_read = sessions.read().await;\n@@ -365,7 +376,7 @@ pub async fn get_auth_callback(Query(q): Query<AuthCallbackQuery>, State(state):\n             }\n             let cookie_bearer = bearer.clone();\n             s.complete = Some((username, bearer));\n-            return redirect_with_session_cookie(&public_url, \"/\", &cookie_bearer).into_response();\n+            return redirect_with_session_cookie(&public_url, \"/\", &cookie_bearer, &jar).into_response();\n         }\n     }\n \n@@ -378,14 +389,20 @@ pub struct ChooseUsernameQuery {\n     pub error: Option<String>,\n }\n \n-pub async fn get_choose_username(Query(q): Query<ChooseUsernameQuery>, State(state): State<AppState>) -> impl IntoResponse {\n+pub async fn get_choose_username(\n+    Query(q): Query<ChooseUsernameQuery>,\n+    State(state): State<AppState>,\n+    jar: CookieJar,\n+    uri: Uri,\n+) -> impl IntoResponse {\n     let sessions = pending_sessions(&state);\n     let sessions_read = sessions.read().await;\n     if !sessions_read.contains_key(&q.session) {\n         return api_error(StatusCode::NOT_FOUND, \"unknown session\", None).into_response();\n     }\n     drop(sessions_read);\n-    choose_username_page(&q.session, q.error.as_deref()).into_response()\n+    let next = theme_next_from_uri(&uri);\n+    choose_username_page(&q.session, q.error.as_deref(), theme_from_jar(&jar), &next).into_response()\n }\n \n #[derive(Debug, Deserialize)]\n@@ -396,6 +413,7 @@ pub struct ChooseUsernameForm {\n \n pub async fn post_choose_username(\n     State(state): State<AppState>,\n+    jar: CookieJar,\n     Form(form): Form<ChooseUsernameForm>,\n ) -> impl IntoResponse {\n     let canon_user = match parse_username(&form.username) {\n@@ -477,7 +495,7 @@ pub async fn post_choose_username(\n         s.complete = Some((canon_user.clone(), bearer.clone()));\n     }\n \n-    js_signed_in_fragment(&bearer).into_response()\n+    js_signed_in_fragment(&bearer, &jar).into_response()\n }\n \n /// Start a browser-only OAuth flow (no CLI polling). Sets session cookie on success.\n@@ -569,8 +587,9 @@ pub async fn get_pending_session(\n     .into_response()\n }\n \n-pub async fn get_auth_complete() -> impl IntoResponse {\n-    auth_complete_page()\n+pub async fn get_auth_complete(jar: CookieJar, uri: Uri) -> impl IntoResponse {\n+    let next = theme_next_from_uri(&uri);\n+    auth_complete_page(theme_from_jar(&jar), &next).into_response()\n }\n \n pub async fn get_whoami(State(state): State<AppState>, headers: HeaderMap) -> impl IntoResponse {\ndiff --git a/server/src/api/helpers.rs b/server/src/api/helpers.rs\nindex 81e2a55fa3abb8609b4099f91a989480336e11eb..9b71491e9f9efc44a2a4beba09be8f64bd2ff2ee 100644\n--- a/server/src/api/helpers.rs\n+++ b/server/src/api/helpers.rs\n@@ -39,6 +39,55 @@ pub fn item_path_for_api(item: &str) -> String {\n     }\n }\n \n+/// Same as [`item_path_for_api`], but for private rooms ontology items are prefixed with\n+/// `/r/{short}/{slug}` so the URL matches the web app (`/r/…/~/…` routes).\n+pub fn item_path_for_api_in_room(item: &str, room_wire: &str) -> String {\n+    let room = room_wire.trim();\n+    if room.is_empty() || room == \"public\" {\n+        return item_path_for_api(item);\n+    }\n+    let Some((short, slug)) = room.split_once('/') else {\n+        return item_path_for_api(item);\n+    };\n+    if short.is_empty() || slug.is_empty() {\n+        return item_path_for_api(item);\n+    }\n+    let Some(c) = CanonicalItemUrl::parse(item) else {\n+        return item_path_for_api(item);\n+    };\n+    let root = CanonicalItemUrl::ontology_root();\n+    let item_norm = c.as_str().trim_end_matches('/');\n+    let root_norm = root.as_str().trim_end_matches('/');\n+    if let Some(tail) = c.tilde_tail() {\n+        return if tail.is_empty() {\n+            format!(\"https://slug.social/r/{short}/{slug}/~\")\n+        } else {\n+            format!(\"https://slug.social/r/{short}/{slug}/~/{}\", tail)\n+        };\n+    }\n+    if item_norm == root_norm {\n+        return format!(\"https://slug.social/r/{short}/{slug}/~\");\n+    }\n+    item_path_for_api(item)\n+}\n+\n+/// Absolute thread URL for forum JSON (`/t/…` vs `/r/…/t/…`).\n+pub fn forum_thread_web_url(room_wire: &str, thread_tag: &str) -> String {\n+    let room = room_wire.trim();\n+    let tag = thread_tag.trim().trim_start_matches('#');\n+    if room.is_empty() || room == \"public\" {\n+        format!(\"https://slug.social/t/{tag}\")\n+    } else if let Some((short, slug)) = room.split_once('/') {\n+        if short.is_empty() || slug.is_empty() {\n+            format!(\"https://slug.social/t/{tag}\")\n+        } else {\n+            format!(\"https://slug.social/r/{short}/{slug}/t/{tag}\")\n+        }\n+    } else {\n+        format!(\"https://slug.social/t/{tag}\")\n+    }\n+}\n+\n /// Resolve an item path as a first-class canonical path.\n pub fn resolve_item(item: &str) -> Result<String, String> {\n     let canonical = canonicalize_item(item);\n@@ -188,3 +237,52 @@ pub fn vote_touches_path(a: &str, b: &str, parent_canon: &str) -> bool {\n     let under = |item: &str| item == parent_canon || item.starts_with(&format!(\"{}/\", parent_canon));\n     under(a) || under(b)\n }\n+\n+#[cfg(test)]\n+mod wire_url_tests {\n+    use super::{forum_thread_web_url, item_path_for_api_in_room};\n+\n+    #[test]\n+    fn public_room_unchanged() {\n+        let u = \"https://slug.social/~/a/b\";\n+        assert_eq!(item_path_for_api_in_room(u, \"public\"), u);\n+    }\n+\n+    #[test]\n+    fn private_room_prefixes_ontology() {\n+        assert_eq!(\n+            item_path_for_api_in_room(\"https://slug.social/~/topic/x\", \"9ab12cd/my-room\"),\n+            \"https://slug.social/r/9ab12cd/my-room/~/topic/x\"\n+        );\n+    }\n+\n+    #[test]\n+    fn private_room_ontology_root() {\n+        assert_eq!(\n+            item_path_for_api_in_room(\"https://slug.social/~\", \"9ab12cd/my-room\"),\n+            \"https://slug.social/r/9ab12cd/my-room/~\"\n+        );\n+        assert_eq!(\n+            item_path_for_api_in_room(\"https://slug.social/~/\", \"9ab12cd/my-room\"),\n+            \"https://slug.social/r/9ab12cd/my-room/~\"\n+        );\n+    }\n+\n+    #[test]\n+    fn external_url_untouched_in_private_room() {\n+        let u = \"https://example.com/z\";\n+        assert_eq!(item_path_for_api_in_room(u, \"9ab12cd/my-room\"), u);\n+    }\n+\n+    #[test]\n+    fn forum_web_public_vs_room() {\n+        assert_eq!(\n+            forum_thread_web_url(\"public\", \"debate\"),\n+            \"https://slug.social/t/debate\"\n+        );\n+        assert_eq!(\n+            forum_thread_web_url(\"9ab12cd/my-room\", \"#debate\"),\n+            \"https://slug.social/r/9ab12cd/my-room/t/debate\"\n+        );\n+    }\n+}\ndiff --git a/server/src/api/rpc.rs b/server/src/api/rpc.rs\nindex 31f5fcfb4eaf4df0a9cbac532dd3dedfe3611810..5b91f5836625eedbb1cd9423168046e3fb576c17 100644\n--- a/server/src/api/rpc.rs\n+++ b/server/src/api/rpc.rs\n@@ -27,8 +27,9 @@ use crate::{\n \n use super::auth::verify_bearer_principal;\n use super::helpers::{\n-    compute_connectivity_stats, is_pair_voted, item_path_for_api, now_ms, paginate_rankings,\n-    parse_parent_specs, pick_random_distinct, resolve_item, vote_touches_path,\n+    compute_connectivity_stats, forum_thread_web_url, is_pair_voted, item_path_for_api,\n+    item_path_for_api_in_room, now_ms, paginate_rankings, parse_parent_specs, pick_random_distinct,\n+    resolve_item, vote_touches_path,\n };\n use super::validate::{normalize_room_and_thread, validate_ingest_document};\n \n@@ -148,6 +149,7 @@ fn compute_scope_rank_changes(\n     parent: &str,\n     before: &crate::scope_rank::ChildrenRankings,\n     after: &crate::scope_rank::ChildrenRankings,\n+    room_wire: &str,\n ) -> Option<ScopeRankChanges> {\n     fn build_positions(rankings: &crate::scope_rank::ChildrenRankings) -> HashMap<String, Option<RankPosition>> {\n         let mut map = HashMap::new();\n@@ -182,7 +184,7 @@ fn compute_scope_rank_changes(\n         };\n         if changed {\n             changes.push(RankChange {\n-                item: item_path_for_api(&item),\n+                item: item_path_for_api_in_room(&item, room_wire),\n                 before: b,\n                 after: a,\n             });\n@@ -204,7 +206,7 @@ fn compute_scope_rank_changes(\n         parent: if parent.is_empty() {\n             \"/\".to_string()\n         } else {\n-            item_path_for_api(parent)\n+            item_path_for_api_in_room(parent, room_wire)\n         },\n         changes,\n     })\n@@ -256,6 +258,7 @@ fn build_rank_response_for_content(\n     offset: usize,\n     limit: Option<usize>,\n     want_percent: bool,\n+    room_wire: &str,\n ) -> Result<RankResponse, RpcErr> {\n     let parent_owned = parent.map(|s| s.to_string());\n     let specs = parse_parent_specs(parent_owned.as_ref());\n@@ -299,7 +302,7 @@ fn build_rank_response_for_content(\n                     .ranked\n                     .into_iter()\n                     .map(|r| RankRow {\n-                        item: item_path_for_api(r.item.as_str()),\n+                        item: item_path_for_api_in_room(r.item.as_str(), room_wire),\n                         percent: if want_percent {\n                             Some((r.score / max_score) * 100.0)\n                         } else {\n@@ -315,7 +318,7 @@ fn build_rank_response_for_content(\n     let prefixed_unranked: Vec<String> = rankings\n         .unranked_items\n         .into_iter()\n-        .map(|s| item_path_for_api(s.as_str()))\n+        .map(|s| item_path_for_api_in_room(s.as_str(), room_wire))\n         .collect();\n \n     let (components, unranked_items) = if offset > 0 || limit.is_some() {\n@@ -522,7 +525,7 @@ async fn rpc_post(\n             .filter_map(|p| {\n                 let before = pre_rankings.get(p)?;\n                 let after = crate::scope_rank::build_children_rankings(content, p);\n-                compute_scope_rank_changes(p.as_str(), before, &after)\n+                compute_scope_rank_changes(p.as_str(), before, &after, &room_key)\n             })\n             .collect();\n         if v.is_empty() { None } else { Some(v) }\n@@ -530,14 +533,28 @@ async fn rpc_post(\n         None\n     };\n \n+    let (pair_hint, rank_hint, web_url) = if room_key == \"public\" {\n+        (\n+            \"npx slugsocial public garden pair\".to_string(),\n+            \"npx slugsocial public garden rank\".to_string(),\n+            forum_thread_web_url(\"public\", &thread_id),\n+        )\n+    } else {\n+        (\n+            format!(\"npx slugsocial private {room_key} garden pair\"),\n+            format!(\"npx slugsocial private {room_key} garden rank\"),\n+            forum_thread_web_url(&room_key, &thread_id),\n+        )\n+    };\n+\n     Ok(RpcResult::PostOk {\n         events_appended,\n         ranking_changes,\n         threads: vec![format!(\"#{}\", thread_id)],\n         next: NextMoves {\n-            pair: \"npx slugsocial public garden pair\".to_string(),\n-            rank: \"npx slugsocial public garden rank\".to_string(),\n-            web: format!(\"https://slug.social/t/{}\", thread_id),\n+            pair: pair_hint,\n+            rank: rank_hint,\n+            web: web_url,\n         },\n     })\n }\n@@ -609,7 +626,7 @@ async fn rpc_check(\n         raw: v.raw_text.clone(),\n         principal,\n         delegate,\n-        room_id: room_key,\n+        room_id: room_key.clone(),\n         thread_tag: thread_id.clone(),\n     });\n \n@@ -647,7 +664,7 @@ async fn rpc_check(\n                         .ranked\n                         .into_iter()\n                         .map(|r| RankRow {\n-                            item: item_path_for_api(r.item.as_str()),\n+                            item: item_path_for_api_in_room(r.item.as_str(), &room_key),\n                             score: r.score,\n                             percent: None,\n                         })\n@@ -655,25 +672,35 @@ async fn rpc_check(\n                 })\n                 .collect();\n             CheckScopeRanking {\n-                parent: item_path_for_api(parent.as_str()),\n+                parent: item_path_for_api_in_room(parent.as_str(), &room_key),\n                 components,\n                 unranked_items: scoped\n                     .unranked_items\n                     .into_iter()\n-                    .map(|it| item_path_for_api(it.as_str()))\n+                    .map(|it| item_path_for_api_in_room(it.as_str(), &room_key))\n                     .collect(),\n             }\n         })\n         .collect();\n \n+    let check_next = if room_key == \"public\" {\n+        vec![\n+            \"npx slugsocial public forum post <TAG> --delegate <uuid:rig:model>\".to_string(),\n+            \"npx slugsocial public forum list\".to_string(),\n+            forum_thread_web_url(\"public\", &thread_id),\n+        ]\n+    } else {\n+        vec![\n+            format!(\"npx slugsocial private {room_key} forum post <TAG> --delegate <uuid:rig:model>\"),\n+            format!(\"npx slugsocial private {room_key} forum list\"),\n+            forum_thread_web_url(&room_key, &thread_id),\n+        ]\n+    };\n+\n     Ok(RpcResult::CheckOk {\n         rankings,\n         threads: vec![format!(\"#{}\", thread_id)],\n-        next: vec![\n-            \"npx slugsocial public forum post <TAG> --delegate <uuid:rig:model>\".to_string(),\n-            \"npx slugsocial public forum list\".to_string(),\n-            format!(\"https://slug.social/t/{}\", thread_id),\n-        ],\n+        next: check_next,\n     })\n }\n \n@@ -690,7 +717,7 @@ fn rpc_list_forum_threads(reduced: &ReducerState, room: &str) -> ThreadsResponse\n         .map(|((_, tag), ts)| ThreadSummary {\n             thread: format!(\"#{tag}\"),\n             last_activity_ts: ts.last_activity_ts,\n-            web: format!(\"https://slug.social/t/{}\", tag),\n+            web: forum_thread_web_url(room, tag),\n         })\n         .collect();\n     out.sort_by(|a, b| b.last_activity_ts.cmp(&a.last_activity_ts));\n@@ -1031,8 +1058,8 @@ async fn rpc_get_pair(state: &AppState, room: String, parent_path: String) -> Re\n         .collect();\n     let cs = compute_connectivity_stats(&content.ranking_group, &pool);\n     Ok(RpcResult::Pair(PairResponse {\n-        left: item_path_for_api(&left),\n-        right: item_path_for_api(&right),\n+        left: item_path_for_api_in_room(&left, &room),\n+        right: item_path_for_api_in_room(&right, &room),\n         left_body: lb,\n         right_body: rb,\n         threads: th,\n@@ -1088,6 +1115,7 @@ pub async fn handle_rpc_batch(\n                     offset.unwrap_or(0),\n                     limit,\n                     percent.unwrap_or(false),\n+                    &room,\n                 ) {\n                     Ok(r) => line_ok(RpcResult::GardenRank(r)),\n                     Err((e, h)) => line_err(e, h),\n@@ -1109,7 +1137,7 @@ pub async fn handle_rpc_batch(\n                 if !content.items.contains(&item) {\n                     line_err(\n                         \"item not found\",\n-                        Some(format!(\"{} does not exist\", item_path_for_api(&item_str))),\n+                        Some(format!(\"{} does not exist\", item_path_for_api_in_room(&item_str, &room))),\n                     )\n                 } else {\n                     const MAX_ITEM_BODY: usize = 10_000;\n@@ -1132,7 +1160,7 @@ pub async fn handle_rpc_batch(\n                         .map(|s| s.iter().cloned().collect())\n                         .unwrap_or_default();\n                     line_ok(RpcResult::GardenItem(ItemResponse {\n-                        item: item_str,\n+                        item: item_path_for_api_in_room(&item_str, &room),\n                         body,\n                         truncated,\n                         body_len,\n@@ -1525,7 +1553,11 @@ pub async fn handle_rpc_batch(\n                     let range = (top - bot).max(1e-12);\n                     for r in items {\n                         let pct = want_percent.then(|| ((r.score - bot) / range * 100.0).clamp(0.0, 100.0));\n-                        ranked.push(RankRow { item: item_path_for_api(r.item.as_str()), score: r.score, percent: pct });\n+                        ranked.push(RankRow {\n+                            item: item_path_for_api_in_room(r.item.as_str(), &room),\n+                            score: r.score,\n+                            percent: pct,\n+                        });\n                     }\n                 }\n \n@@ -1542,7 +1574,7 @@ pub async fn handle_rpc_batch(\n                 let page: Vec<RankRow> = ranked\n                     .into_iter()\n                     .chain(unranked.into_iter().map(|it| RankRow {\n-                        item: item_path_for_api(&it),\n+                        item: item_path_for_api_in_room(&it, &room),\n                         score: 0.0,\n                         percent: want_percent.then_some(0.0),\n                     }))\n@@ -1586,7 +1618,7 @@ pub async fn handle_rpc_batch(\n                 if !content.items.contains(&item) {\n                     line_err(\n                         \"item not found\",\n-                        Some(format!(\"{} does not exist\", item_path_for_api(&item_str))),\n+                        Some(format!(\"{} does not exist\", item_path_for_api_in_room(&item_str, &room))),\n                     )\n                 } else {\n                     let votes: Vec<VoteRow> = content\n@@ -1597,8 +1629,8 @@ pub async fn handle_rpc_batch(\n                                 .take(limit)\n                                 .map(|v| VoteRow {\n                                     ts: v.ts,\n-                                    a: v.a.as_str().to_string(),\n-                                    b: v.b.as_str().to_string(),\n+                                    a: item_path_for_api_in_room(v.a.as_str(), &room),\n+                                    b: item_path_for_api_in_room(v.b.as_str(), &room),\n                                     ratio: format!(\"{}:{}\", v.ratio_left, v.ratio_right),\n                                     actor: Some(v.principal.clone()),\n                                     body: v.body.clone(),\n@@ -1608,7 +1640,7 @@ pub async fn handle_rpc_batch(\n                         })\n                         .unwrap_or_default();\n                     line_ok(RpcResult::Matchup(MatchupResponse {\n-                        item: item_path_for_api(&item_str),\n+                        item: item_path_for_api_in_room(&item_str, &room),\n                         votes,\n                     }))\n                 }\n@@ -1635,8 +1667,8 @@ pub async fn handle_rpc_batch(\n                                     if a == item_str || b == item_str {\n                                         Some(VoteRow {\n                                             ts: e.ts,\n-                                            a: item_path_for_api(&a),\n-                                            b: item_path_for_api(&b),\n+                                            a: item_path_for_api_in_room(&a, &room),\n+                                            b: item_path_for_api_in_room(&b, &room),\n                                             ratio: format!(\"{}:{}\", ratio_left, ratio_right),\n                                             actor: reduced.ingests_by_id.get(&e.post_id).map(|ing| ing.principal.clone()),\n                                             body: explanation,\n@@ -1672,7 +1704,7 @@ pub async fn handle_rpc_batch(\n                     }\n                 }).collect();\n                 line_ok(RpcResult::RankHistory(RankHistoryResponse {\n-                    item: item_path_for_api(&item_str),\n+                    item: item_path_for_api_in_room(&item_str, &room),\n                     history,\n                 }))\n                 }\n@@ -1691,6 +1723,10 @@ pub async fn handle_rpc_batch(\n                     .map(|p| p.as_str().to_string())\n                     .collect();\n                 paths.sort();\n+                let paths: Vec<String> = paths\n+                    .into_iter()\n+                    .map(|p| item_path_for_api_in_room(&p, &room))\n+                    .collect();\n                 line_ok(RpcResult::Leaves(LeavesResponse { paths }))\n                 }\n             },\n@@ -1707,10 +1743,21 @@ pub async fn handle_rpc_batch(\n                         let mut v: Vec<PathSummary> = roots.iter()\n                             .map(|path| {\n                                 let children = content.item_children.get(path.as_str()).map(|s| s.len()).unwrap_or(0);\n+                                let path_label = CanonicalItemUrl::parse(path.as_str())\n+                                    .and_then(|c| {\n+                                        c.tilde_tail().map(|t| {\n+                                            if t.is_empty() {\n+                                                \"~/\".to_string()\n+                                            } else {\n+                                                format!(\"~/{}\", t)\n+                                            }\n+                                        })\n+                                    })\n+                                    .unwrap_or_else(|| path.to_string());\n                                 PathSummary {\n-                                    path: format!(\"~/{}\", path),\n+                                    path: path_label,\n                                     children,\n-                                    web: format!(\"https://slug.social/~/{}\", path),\n+                                    web: item_path_for_api_in_room(path.as_str(), &room),\n                                 }\n                             }).collect();\n                         v.sort_by(|a, b| a.path.cmp(&b.path));\n@@ -1743,8 +1790,8 @@ pub async fn handle_rpc_batch(\n                     .take(limit)\n                     .map(|v| VoteRow {\n                         ts: v.ts,\n-                        a: v.a.as_str().to_string(),\n-                        b: v.b.as_str().to_string(),\n+                        a: item_path_for_api_in_room(v.a.as_str(), &room),\n+                        b: item_path_for_api_in_room(v.b.as_str(), &room),\n                         ratio: format!(\"{}:{}\", v.ratio_left, v.ratio_right),\n                         actor: Some(v.principal.clone()),\n                         body: v.body.clone(),\ndiff --git a/server/src/html/auth.rs b/server/src/html/auth.rs\nindex d57b1c725ce3e06b1d904882b9388c3da48d85cb..5df77c76b89ed2bb11d936e1dbb804d50a0e79a1 100644\n--- a/server/src/html/auth.rs\n+++ b/server/src/html/auth.rs\n@@ -23,7 +23,7 @@ fn form_inner(session: &str, error: Option<&str>) -> Markup {\n     }\n }\n \n-pub fn choose_username_page(session: &str, error: Option<&str>) -> Markup {\n+pub fn choose_username_page(session: &str, error: Option<&str>, theme: &str, theme_next: &str) -> Markup {\n     let body = html! {\n         nav.breadcrumb {\n             a href=\"/\" { \"slug.social\" }\n@@ -36,7 +36,7 @@ pub fn choose_username_page(session: &str, error: Option<&str>) -> Markup {\n             (form_inner(session, error))\n         }\n     };\n-    super::layout(\"join — slug.social\", \"view-auth\", body, None)\n+    super::layout(\"join — slug.social\", \"view-auth\", body, None, theme, theme_next)\n }\n \n /// Fragment returned to the poem JS on error — replaces the form's innerHTML.\n@@ -52,7 +52,7 @@ pub fn auth_signed_in_fragment() -> Markup {\n     }\n }\n \n-pub fn auth_complete_page() -> Markup {\n+pub fn auth_complete_page(theme: &str, theme_next: &str) -> Markup {\n     let body = html! {\n         nav.breadcrumb {\n             a href=\"/\" { \"slug.social\" }\n@@ -63,5 +63,5 @@ pub fn auth_complete_page() -> Markup {\n         p { \"Return to your terminal — your agent is polling and will collect your token automatically.\" }\n         p.auth-hint { \"You can close this tab.\" }\n     };\n-    super::layout(\"signed in — slug.social\", \"view-auth\", body, None)\n+    super::layout(\"signed in — slug.social\", \"view-auth\", body, None, theme, theme_next)\n }\ndiff --git a/server/src/html/editor.rs b/server/src/html/editor.rs\nindex 07f6ab3b778f07f60765fa3f39060ebc5f72bc1a..ecdd226b1b17d5f11d1b79f99add5759ef918281 100644\n--- a/server/src/html/editor.rs\n+++ b/server/src/html/editor.rs\n@@ -1,8 +1,10 @@\n use axum::{\n     extract::State,\n+    http::Uri,\n     response::{Html, IntoResponse},\n     Form,\n };\n+use axum_extra::extract::cookie::CookieJar;\n use maud::{html, Markup};\n use serde::Deserialize;\n \n@@ -13,7 +15,7 @@ use crate::{\n     state::AppState,\n };\n \n-use super::{bc_segment, layout};\n+use super::{bc_segment, layout, theme_from_jar, theme_next_from_uri};\n \n fn bc_try() -> Markup {\n     html! {\n@@ -23,7 +25,7 @@ fn bc_try() -> Markup {\n }\n \n /// The interactive editor page — `/try`.\n-pub async fn editor_page() -> impl IntoResponse {\n+pub async fn editor_page(jar: CookieJar, uri: Uri) -> impl IntoResponse {\n     let page = layout(\n         \"try — slug.social\",\n         \"view-thread\",\n@@ -68,6 +70,8 @@ pub async fn editor_page() -> impl IntoResponse {\n \"#)) }\n         },\n         None,\n+        theme_from_jar(&jar),\n+        &theme_next_from_uri(&uri),\n     );\n     Html(page.into_string())\n }\ndiff --git a/server/src/html/forum.rs b/server/src/html/forum.rs\nindex 5c5f9e2ba0e5cb1d661c113117988ec80c01deca..368b1016eb43d83e9ff39464ff6164fa9a8b558a 100644\n--- a/server/src/html/forum.rs\n+++ b/server/src/html/forum.rs\n@@ -1,6 +1,6 @@\n use axum::{\n     extract::{Path, Query, State},\n-    http::{HeaderMap, StatusCode},\n+    http::{HeaderMap, StatusCode, Uri},\n     response::{Html, IntoResponse},\n };\n use axum_extra::extract::cookie::CookieJar;\n@@ -19,7 +19,7 @@ use crate::{\n \n use super::{\n     bc_segment, bc_threads, cli_panel, layout, now_ms, profile_href, recency_class,\n-    render_linkified_with_embeds_in_scope, JsBuilder,\n+    render_linkified_with_embeds_in_scope, theme_from_jar, theme_next_from_uri, JsBuilder,\n };\n \n #[derive(Clone)]\n@@ -577,6 +577,7 @@ pub async fn home(\n     State(state): State<AppState>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let now = now_ms();\n     let reduced = state.reduced.read().await;\n@@ -624,6 +625,8 @@ pub async fn home(\n             (cli_panel(\"npx slugsocial public forum list\"))\n         },\n         None,\n+        theme_from_jar(&jar),\n+        &theme_next_from_uri(&uri),\n     );\n     Html(page.into_string())\n }\n@@ -679,6 +682,7 @@ async fn thread_view_inner(\n     nav: ThreadNav,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let tag = canonicalize_tag(&tag);\n     let scope = nav.scope();\n@@ -778,6 +782,8 @@ async fn thread_view_inner(\n             (cli_panel(&cli))\n         },\n         None,\n+        theme_from_jar(&jar),\n+        &theme_next_from_uri(&uri),\n     );\n     Html(page.into_string()).into_response()\n }\n@@ -789,8 +795,9 @@ pub async fn thread_view(\n     Query(q): Query<ThreadViewQuery>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n-    thread_view_inner(state, tag, q, ThreadNav::public(), headers, jar).await\n+    thread_view_inner(state, tag, q, ThreadNav::public(), headers, jar, uri).await\n }\n \n /// Room thread — `/r/:short/:slug/t/:tag`\n@@ -800,31 +807,39 @@ pub async fn room_thread_view(\n     Query(q): Query<ThreadViewQuery>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let room_id = format!(\"{room_short}/{room_slug}\");\n     let reduced = state.reduced.read().await;\n     let user = optional_principal(&headers, &jar, &reduced);\n     if !user_can_view_room(&reduced, &room_id, user.as_deref()) {\n         drop(reduced);\n-        return room_not_found_page().into_response();\n+        return room_not_found_page(&jar, &uri).into_response();\n     }\n     drop(reduced);\n     let Some(nav) = ThreadNav::from_room_id(&room_id) else {\n         return (StatusCode::NOT_FOUND, \"bad room path\").into_response();\n     };\n-    thread_view_inner(state, tag, q, nav, headers, jar)\n+    thread_view_inner(state, tag, q, nav, headers, jar, uri)\n         .await\n         .into_response()\n }\n \n-fn room_not_found_page() -> impl IntoResponse {\n+fn room_not_found_page(jar: &CookieJar, uri: &Uri) -> impl IntoResponse {\n     let body = html! {\n         nav class=\"breadcrumb\" { a href=\"/\" { \"slug.social\" } }\n         h1 { \"not found\" }\n         p { \"The requested page could not be found.\" }\n         p { a href=\"/\" { \"home\" } }\n     };\n-    let page = layout(\"not found — slug.social\", \"view-thread\", body, None);\n+    let page = layout(\n+        \"not found — slug.social\",\n+        \"view-thread\",\n+        body,\n+        None,\n+        theme_from_jar(jar),\n+        &theme_next_from_uri(uri),\n+    );\n     (StatusCode::NOT_FOUND, Html(page.into_string()))\n }\n \n@@ -834,6 +849,7 @@ pub async fn room_page(\n     Path((room_short, room_slug)): Path<(String, String)>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let room_id = format!(\"{room_short}/{room_slug}\");\n     let now = now_ms();\n@@ -845,7 +861,7 @@ pub async fn room_page(\n     let user = optional_principal(&headers, &jar, &reduced);\n     if !user_can_view_room(&reduced, &room_id, user.as_deref()) {\n         drop(reduced);\n-        return room_not_found_page().into_response();\n+        return room_not_found_page(&jar, &uri).into_response();\n     }\n     let scope = ScopeId::Room(room_id.clone());\n     let mut rows = collect_thread_rows_for_scope(&reduced, &scope, now);\n@@ -902,6 +918,8 @@ pub async fn room_page(\n             (cli_panel(&audit_cli))\n         },\n         None,\n+        theme_from_jar(&jar),\n+        &theme_next_from_uri(&uri),\n     );\n     Html(page.into_string()).into_response()\n }\n@@ -943,6 +961,8 @@ async fn thread_post_view_inner(\n     index_str: String,\n     nav: ThreadNav,\n     viewer: Option<String>,\n+    jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let tag = canonicalize_tag(&tag);\n     let index: usize = index_str.parse().unwrap_or(0);\n@@ -987,6 +1007,8 @@ async fn thread_post_view_inner(\n             }\n         },\n         None,\n+        theme_from_jar(&jar),\n+        &theme_next_from_uri(&uri),\n     );\n     Html(page.into_string()).into_response()\n }\n@@ -996,11 +1018,12 @@ pub async fn thread_post_view(\n     Path((tag, index_str)): Path<(String, String)>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let reduced = state.reduced.read().await;\n     let viewer = optional_principal(&headers, &jar, &reduced);\n     drop(reduced);\n-    thread_post_view_inner(state, tag, index_str, ThreadNav::public(), viewer)\n+    thread_post_view_inner(state, tag, index_str, ThreadNav::public(), viewer, jar, uri)\n         .await\n }\n \n@@ -1009,19 +1032,20 @@ pub async fn room_thread_post_view(\n     Path((room_short, room_slug, tag, index_str)): Path<(String, String, String, String)>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let room_id = format!(\"{room_short}/{room_slug}\");\n     let reduced = state.reduced.read().await;\n     let user = optional_principal(&headers, &jar, &reduced);\n     if !user_can_view_room(&reduced, &room_id, user.as_deref()) {\n         drop(reduced);\n-        return room_not_found_page().into_response();\n+        return room_not_found_page(&jar, &uri).into_response();\n     }\n     drop(reduced);\n     let Some(nav) = ThreadNav::from_room_id(&room_id) else {\n         return (StatusCode::NOT_FOUND, \"bad room path\").into_response();\n     };\n-    thread_post_view_inner(state, tag, index_str, nav, user)\n+    thread_post_view_inner(state, tag, index_str, nav, user, jar, uri)\n         .await\n         .into_response()\n }\n@@ -1193,6 +1217,7 @@ pub async fn user_profile_page(\n     Path(username): Path<String>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let canon = match parse_username(&username) {\n         Ok(u) => u,\n@@ -1270,6 +1295,8 @@ pub async fn user_profile_page(\n             (cli_panel(&format!(\"npx slugsocial public forum list\")))\n         },\n         None,\n+        theme_from_jar(&jar),\n+        &theme_next_from_uri(&uri),\n     );\n     Html(page.into_string()).into_response()\n }\n@@ -1292,13 +1319,14 @@ pub async fn room_thread_post_expand(\n     Path((room_short, room_slug, tag, index_str)): Path<(String, String, String, String)>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let room_id = format!(\"{room_short}/{room_slug}\");\n     let reduced = state.reduced.read().await;\n     let user = optional_principal(&headers, &jar, &reduced);\n     if !user_can_view_room(&reduced, &room_id, user.as_deref()) {\n         drop(reduced);\n-        return room_not_found_page().into_response();\n+        return room_not_found_page(&jar, &uri).into_response();\n     }\n     let Some(nav) = ThreadNav::from_room_id(&room_id) else {\n         drop(reduced);\n@@ -1328,13 +1356,14 @@ pub async fn room_thread_post_expand_deleted(\n     Path((room_short, room_slug, tag, index_str)): Path<(String, String, String, String)>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let room_id = format!(\"{room_short}/{room_slug}\");\n     let reduced = state.reduced.read().await;\n     let user = optional_principal(&headers, &jar, &reduced);\n     if !user_can_view_room(&reduced, &room_id, user.as_deref()) {\n         drop(reduced);\n-        return room_not_found_page().into_response();\n+        return room_not_found_page(&jar, &uri).into_response();\n     }\n     let Some(nav) = ThreadNav::from_room_id(&room_id) else {\n         drop(reduced);\n@@ -1364,13 +1393,14 @@ pub async fn room_thread_post_collapse_deleted(\n     Path((room_short, room_slug, tag, index_str)): Path<(String, String, String, String)>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let room_id = format!(\"{room_short}/{room_slug}\");\n     let reduced = state.reduced.read().await;\n     let user = optional_principal(&headers, &jar, &reduced);\n     if !user_can_view_room(&reduced, &room_id, user.as_deref()) {\n         drop(reduced);\n-        return room_not_found_page().into_response();\n+        return room_not_found_page(&jar, &uri).into_response();\n     }\n     let Some(nav) = ThreadNav::from_room_id(&room_id) else {\n         drop(reduced);\ndiff --git a/server/src/html/garden.rs b/server/src/html/garden.rs\nindex e08f068ae04f5a2542ec2c43c240f931f87146bf..9b4789a79c3e293cbfc5f033a0eac8650320d94d 100644\n--- a/server/src/html/garden.rs\n+++ b/server/src/html/garden.rs\n@@ -1,6 +1,6 @@\n use axum::{\n     extract::{Path, State},\n-    http::{HeaderMap, StatusCode},\n+    http::{HeaderMap, StatusCode, Uri},\n     response::{Html, IntoResponse},\n };\n use axum_extra::extract::cookie::CookieJar;\n@@ -20,7 +20,8 @@ use crate::{\n \n use super::{\n     bc_path, bc_segment, cli_panel, layout, now_ms, ratio_pct,\n-    render_linkified_with_embeds_in_scope, breadcrumb_path::OntologyPath,\n+    render_linkified_with_embeds_in_scope, theme_from_jar, theme_next_from_uri,\n+    breadcrumb_path::OntologyPath,\n     forum::ThreadNav,\n };\n \n@@ -59,14 +60,21 @@ fn scoped_bc_path(path: &OntologyPath, nav: &ThreadNav) -> maud::Markup {\n     }\n }\n \n-fn room_not_found_page() -> impl IntoResponse {\n+fn room_not_found_page(jar: &CookieJar, uri: &Uri) -> impl IntoResponse {\n     let body = html! {\n         nav class=\"breadcrumb\" { a href=\"/\" { \"slug.social\" } }\n         h1 { \"not found\" }\n         p { \"The requested page could not be found.\" }\n         p { a href=\"/\" { \"home\" } }\n     };\n-    let page = layout(\"not found — slug.social\", \"view-thread\", body, None);\n+    let page = layout(\n+        \"not found — slug.social\",\n+        \"view-thread\",\n+        body,\n+        None,\n+        theme_from_jar(jar),\n+        &theme_next_from_uri(uri),\n+    );\n     (StatusCode::NOT_FOUND, Html(page.into_string()))\n }\n \n@@ -81,7 +89,11 @@ fn user_can_view_room(reduced: &ReducerState, room_id: &str, username: Option<&s\n }\n \n /// Ontology index — root-level paths. Private (UUID) roots are excluded.\n-pub async fn garden_index(State(state): State<AppState>) -> impl IntoResponse {\n+pub async fn garden_index(\n+    State(state): State<AppState>,\n+    jar: CookieJar,\n+    uri: Uri,\n+) -> impl IntoResponse {\n     let nav = ThreadNav::public();\n     let child_rankings = {\n         let reduced = state.reduced.read().await;\n@@ -130,6 +142,8 @@ pub async fn garden_index(State(state): State<AppState>) -> impl IntoResponse {\n             (cli_panel(\"npx slugsocial garden tree\"))\n         },\n         None,\n+        theme_from_jar(&jar),\n+        &theme_next_from_uri(&uri),\n     );\n     Html(page.into_string())\n }\n@@ -138,9 +152,11 @@ pub async fn garden_index(State(state): State<AppState>) -> impl IntoResponse {\n pub async fn ontology_path(\n     State(state): State<AppState>,\n     Path(path): Path<String>,\n+    jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let path = OntologyPath::from_input(&path);\n-    render_scope_view(state, path, ThreadNav::public()).await\n+    render_scope_view(state, path, ThreadNav::public(), jar, uri).await\n }\n \n pub async fn room_garden_index(\n@@ -148,19 +164,20 @@ pub async fn room_garden_index(\n     Path((room_short, room_slug)): Path<(String, String)>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let room_id = format!(\"{room_short}/{room_slug}\");\n     let reduced = state.reduced.read().await;\n     let user = optional_principal(&headers, &jar, &reduced);\n     if !user_can_view_room(&reduced, &room_id, user.as_deref()) {\n         drop(reduced);\n-        return room_not_found_page().into_response();\n+        return room_not_found_page(&jar, &uri).into_response();\n     }\n     drop(reduced);\n     let Some(nav) = ThreadNav::from_room_id(&room_id) else {\n         return (StatusCode::NOT_FOUND, \"bad room path\").into_response();\n     };\n-    render_scope_view(state, OntologyPath::root(), nav).await\n+    render_scope_view(state, OntologyPath::root(), nav, jar, uri).await\n }\n \n pub async fn room_ontology_path(\n@@ -168,20 +185,21 @@ pub async fn room_ontology_path(\n     Path((room_short, room_slug, path)): Path<(String, String, String)>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let room_id = format!(\"{room_short}/{room_slug}\");\n     let reduced = state.reduced.read().await;\n     let user = optional_principal(&headers, &jar, &reduced);\n     if !user_can_view_room(&reduced, &room_id, user.as_deref()) {\n         drop(reduced);\n-        return room_not_found_page().into_response();\n+        return room_not_found_page(&jar, &uri).into_response();\n     }\n     drop(reduced);\n     let Some(nav) = ThreadNav::from_room_id(&room_id) else {\n         return (StatusCode::NOT_FOUND, \"bad room path\").into_response();\n     };\n     let path = OntologyPath::from_input(&path);\n-    render_scope_view(state, path, nav).await\n+    render_scope_view(state, path, nav, jar, uri).await\n }\n \n #[derive(Debug, Clone)]\n@@ -375,6 +393,8 @@ async fn render_scope_view(\n     state: AppState,\n     path: OntologyPath,\n     nav: ThreadNav,\n+    jar: CookieJar,\n+    uri: Uri,\n ) -> axum::response::Response {\n     let scope = nav.scope();\n     let model = {\n@@ -525,6 +545,8 @@ async fn render_scope_view(\n             (cli_panel(&cli))\n         },\n         None,\n+        theme_from_jar(&jar),\n+        &theme_next_from_uri(&uri),\n     );\n \n     Html(page.into_string()).into_response()\ndiff --git a/server/src/html/mod.rs b/server/src/html/mod.rs\nindex a8fd73433d120b07351dd027faf0b25f8f101321..53041a0cf0b30e6f20749c92ecc15a4e9ac56e09 100644\n--- a/server/src/html/mod.rs\n+++ b/server/src/html/mod.rs\n@@ -1,10 +1,13 @@\n use axum::{\n     body::Body,\n     extract::Path,\n-    http::{header, StatusCode},\n+    http::{header, HeaderValue, StatusCode, Uri},\n     response::{IntoResponse, Response},\n+    Form,\n };\n+use axum_extra::extract::cookie::CookieJar;\n use maud::{html, Markup, DOCTYPE};\n+use serde::Deserialize;\n use std::collections::HashSet;\n \n mod auth;\n@@ -33,6 +36,75 @@ pub(crate) fn profile_href(username: &str) -> String {\n     format!(\"/u/{username}\")\n }\n \n+/// Cookie name for UI theme (must match document.cookie migration in [`layout`]).\n+pub const SLUG_THEME_COOKIE: &str = \"slug-theme\";\n+\n+/// Normalize a requested theme id to a known stylesheet key.\n+pub fn normalize_theme(raw: &str) -> &'static str {\n+    match raw {\n+        \"retro\" => \"retro\",\n+        \"retro_craft\" => \"retro_craft\",\n+        _ => \"default\",\n+    }\n+}\n+\n+/// Resolved theme for rendering and cookie re-issue.\n+pub fn theme_from_jar(jar: &CookieJar) -> &'static str {\n+    jar.get(SLUG_THEME_COOKIE)\n+        .map(|c| normalize_theme(c.value()))\n+        .unwrap_or(\"default\")\n+}\n+\n+/// `Path` + optional `?query` for round-tripping after `POST /theme`.\n+pub fn theme_next_from_uri(uri: &Uri) -> String {\n+    uri.path_and_query()\n+        .map(|pq| pq.as_str().to_string())\n+        .filter(|s| !s.is_empty())\n+        .unwrap_or_else(|| \"/\".to_string())\n+}\n+\n+/// `Set-Cookie` for a validated theme (ASCII cookie value).\n+pub fn theme_cookie_header_value(theme: &str) -> HeaderValue {\n+    let t = normalize_theme(theme);\n+    let s = format!(\"{SLUG_THEME_COOKIE}={t}; Path=/; SameSite=Lax; Max-Age=31536000\");\n+    HeaderValue::from_str(&s).expect(\"theme cookie must be ASCII\")\n+}\n+\n+/// Re-issue theme cookie on responses that also set `slug_session`, so login does not drop theme.\n+pub fn theme_cookie_header_from_jar(jar: &CookieJar) -> Option<HeaderValue> {\n+    let c = jar.get(SLUG_THEME_COOKIE)?;\n+    Some(theme_cookie_header_value(c.value()))\n+}\n+\n+fn sanitize_theme_next(next: Option<&str>) -> String {\n+    let s = next.unwrap_or(\"/\").trim();\n+    if s.starts_with('/') && !s.starts_with(\"//\") && s.len() < 8192 {\n+        s.to_string()\n+    } else {\n+        \"/\".to_string()\n+    }\n+}\n+\n+#[derive(Debug, Deserialize)]\n+pub struct ThemeForm {\n+    theme: String,\n+    next: Option<String>,\n+}\n+\n+/// `POST /theme` — set theme cookie and redirect back (full navigation, no fetch).\n+pub async fn post_theme(Form(form): Form<ThemeForm>) -> impl IntoResponse {\n+    let theme = normalize_theme(&form.theme);\n+    let next = sanitize_theme_next(form.next.as_deref());\n+    let loc = HeaderValue::try_from(next.as_str())\n+        .unwrap_or_else(|_| HeaderValue::from_static(\"/\"));\n+    Response::builder()\n+        .status(StatusCode::SEE_OTHER)\n+        .header(header::LOCATION, loc)\n+        .header(header::SET_COOKIE, theme_cookie_header_value(theme))\n+        .body(Body::empty())\n+        .expect(\"theme redirect response\")\n+}\n+\n // Embed CSS files at compile time\n const THEME_DEFAULT_CSS: &str = include_str!(\"../../static/theme_default.css\");\n const THEME_RETRO_CSS: &str = include_str!(\"../../static/theme_retro.css\");\n@@ -173,7 +245,9 @@ impl JsQueryBuilder {\n     }\n }\n \n-pub(super) fn layout(title: &str, view: &str, body: Markup, views: Option<u64>) -> Markup {\n+pub(super) fn layout(title: &str, view: &str, body: Markup, views: Option<u64>, theme: &str, theme_next: &str) -> Markup {\n+    let theme = normalize_theme(theme);\n+    let css_href = format!(\"/static/theme_{theme}.css\");\n     html! {\n         (DOCTYPE)\n         html {\n@@ -181,7 +255,20 @@ pub(super) fn layout(title: &str, view: &str, body: Markup, views: Option<u64>)\n                 meta charset=\"utf-8\";\n                 meta name=\"viewport\" content=\"width=device-width, initial-scale=1\";\n                 title { (title) }\n-                link rel=\"stylesheet\" href=\"/static/theme_default.css\" id=\"theme-stylesheet\";\n+                script { (maud::PreEscaped(r#\"\n+(function() {\n+  try {\n+    var ls = localStorage.getItem('slug-theme');\n+    if (!ls) return;\n+    var m = document.cookie.match(/(?:^|;\\s*)slug-theme=([^;]+)/);\n+    var c = m ? decodeURIComponent(m[1].replace(/\\+/g, ' ')) : '';\n+    if (ls === c) { localStorage.removeItem('slug-theme'); return; }\n+    document.cookie = 'slug-theme=' + encodeURIComponent(ls) + '; Path=/; SameSite=Lax; Max-Age=31536000';\n+    location.reload();\n+  } catch (e) {}\n+})();\n+\"#)) }\n+                link rel=\"stylesheet\" href=(css_href) id=\"theme-stylesheet\";\n                 script src=\"https://unpkg.com/idiomorph@0.3.0/dist/idiomorph.min.js\" {}\n             }\n             body class=(view) {\n@@ -196,32 +283,21 @@ pub(super) fn layout(title: &str, view: &str, body: Markup, views: Option<u64>)\n                         input type=\"range\" id=\"spread-slider\" min=\"0\" max=\"1\" step=\"0.05\" value=\"1\";\n                     }\n                     a id=\"search-btn\" href=\"/search\" { \"search\" }\n-                    div id=\"theme-switcher\" { \"theme\" }\n+                    form id=\"slug-theme-form\" method=\"post\" action=\"/theme\" {\n+                        input type=\"hidden\" name=\"next\" value=(theme_next);\n+                        select id=\"theme-select\" name=\"theme\" onchange=\"this.form.submit()\" aria-label=\"Theme\" {\n+                            @for (val, label) in [(\"default\", \"default\"), (\"retro\", \"retro\"), (\"retro_craft\", \"craft\")] {\n+                                @if theme == val {\n+                                    option value=(val) selected { (label) }\n+                                } @else {\n+                                    option value=(val) { (label) }\n+                                }\n+                            }\n+                        }\n+                    }\n                 }\n script { (maud::PreEscaped(r#\"\n                     (function() {\n-                        // Theme switching\n-                        const themes = ['default', 'retro', 'retro_craft'];\n-                        const themeLabel = { default: 'default', retro: 'retro', retro_craft: 'craft' };\n-                        const storedTheme = localStorage.getItem('slug-theme') || 'default';\n-                        const switcher = document.getElementById('theme-switcher');\n-                        const stylesheet = document.getElementById('theme-stylesheet');\n-\n-                        function setTheme(name) {\n-                            stylesheet.href = `/static/theme_${name}.css`;\n-                            localStorage.setItem('slug-theme', name);\n-                            switcher.textContent = themeLabel[name] || name;\n-                            setTimeout(() => setSpread(parseFloat(slider.value)), 50);\n-                        }\n-\n-                        setTheme(storedTheme);\n-\n-                        switcher.addEventListener('click', function() {\n-                            const current = themes.indexOf(localStorage.getItem('slug-theme') || 'default');\n-                            const next = (current + 1) % themes.length;\n-                            setTheme(themes[next]);\n-                        });\n-\n                         // Spread control\n                         const slider = document.getElementById('spread-slider');\n                         const storedSpread = localStorage.getItem('slug-spread');\n@@ -245,6 +321,7 @@ script { (maud::PreEscaped(r#\"\n                             const f = e.target;\n                             if (!f || f.tagName !== 'FORM') return;\n                             if ((f.method || 'get').toLowerCase() !== 'post') return;\n+                            if (f.id === 'slug-theme-form') return;\n                             e.preventDefault();\n                             const resp = await fetch(f.action, {\n                                 method: 'POST',\ndiff --git a/server/src/html/search.rs b/server/src/html/search.rs\nindex 0871ddb7a87e3153e2cb6c1f827b46de2c9f0f3b..28ceaa53c3fcac6777311535e95fb771b19438f5 100644\n--- a/server/src/html/search.rs\n+++ b/server/src/html/search.rs\n@@ -1,6 +1,6 @@\n use axum::{\n     extract::{Query, State},\n-    http::HeaderMap,\n+    http::{HeaderMap, Uri},\n     response::{Html, IntoResponse},\n };\n use axum_extra::extract::cookie::CookieJar;\n@@ -15,7 +15,7 @@ use crate::{\n     timeago,\n };\n \n-use super::{authorship_address, bc_segment, cli_panel, layout, now_ms};\n+use super::{authorship_address, bc_segment, cli_panel, layout, now_ms, theme_from_jar, theme_next_from_uri};\n \n /// Escape HTML special chars for safe injection.\n fn escape_html(s: &str) -> String {\n@@ -396,6 +396,7 @@ pub async fn search_page(\n     Query(params): Query<SearchQuery>,\n     headers: HeaderMap,\n     jar: CookieJar,\n+    uri: Uri,\n ) -> impl IntoResponse {\n     let query = params.q.clone().unwrap_or_default();\n     let results = if query.len() >= 2 {\n@@ -420,6 +421,8 @@ pub async fn search_page(\n             (cli_panel(\"npx slugsocial search <query>\"))\n         },\n         None,\n+        theme_from_jar(&jar),\n+        &theme_next_from_uri(&uri),\n     );\n     Html(page.into_string())\n }\ndiff --git a/server/src/lib.rs b/server/src/lib.rs\nindex 43b63293c2a62b9700948767c618cb0614ddf6d9..b9d4b79791ba8dd3a3c26ff777943a2548092de5 100644\n--- a/server/src/lib.rs\n+++ b/server/src/lib.rs\n@@ -33,6 +33,7 @@ pub fn create_app(state: AppState) -> Router {\n         .route(\"/post\", post(api::post_web_ingest))\n         .route(\"/post/redact\", post(api::post_web_redact))\n         .route(\"/post/check\", post(api::check_web_ingest))\n+        .route(\"/theme\", post(crate::html::post_theme))\n         .route(\"/sse\", get(api::get_html_stream))\n         .route(\"/stream\", get(api::get_stream))\n         .route(\"/search\", get(crate::html::search_page))\ndiff --git a/server/src/path_types.rs b/server/src/path_types.rs\nindex 997597f6659c1ba2092bc5348e393bf7a8fa7ae0..cad58cac7da948f92d6ea2a5587d917ab21d57ea 100644\n--- a/server/src/path_types.rs\n+++ b/server/src/path_types.rs\n@@ -8,6 +8,12 @@\n //!\n //! This module adds lightweight newtypes so code can be explicit about what it\n //! expects without changing core storage formats.\n+//!\n+//! **Storage vs wire:** [`CanonicalItemUrl`] values are shared across scopes\n+//! (`https://slug.social/~/…`); which [`crate::reducer::ContentState`] they live in\n+//! is determined by scope, not by embedding the room id in the string. For JSON/RPC\n+//! and browser links in a private room, use [`crate::api::helpers::item_path_for_api_in_room`]\n+//! so ontology items become `https://slug.social/r/{short}/{slug}/~/…`.\n \n use std::borrow::Borrow;\n use std::fmt;\ndiff --git a/server/static/theme_default.css b/server/static/theme_default.css\nindex 2b06b12f3e77c9ed305272fe3ab47a8ad08504df..5e6304bcc36caed8aeda913fd241fc8fb9cf6d25 100644\n--- a/server/static/theme_default.css\n+++ b/server/static/theme_default.css\n@@ -678,7 +678,10 @@ details > summary::-webkit-details-marker { display: none; }\n   gap: 6px;\n }\n #spread-slider { accent-color: var(--ui); width: 80px; }\n-#theme-switcher {\n+#slug-theme-form {\n+  display: contents;\n+}\n+#theme-select {\n   background: var(--g4);\n   border: var(--bv) solid;\n   border-color: var(--hi) var(--lo) var(--lo) var(--hi);\n@@ -688,8 +691,8 @@ details > summary::-webkit-details-marker { display: none; }\n   padding: 2px 10px;\n   user-select: none;\n }\n-#theme-switcher:hover  { color: var(--signal); }\n-#theme-switcher:active {\n+#theme-select:hover  { color: var(--signal); }\n+#theme-select:active {\n   border-color: var(--lo) var(--hi) var(--hi) var(--lo);\n   transform: translate(1px, 1px);\n }\ndiff --git a/server/static/theme_retro_craft.css b/server/static/theme_retro_craft.css\nindex 508222443a3bb2f16d3034a07af53a7df37a0314..3fde7e2b77fa4e4f46418927eb0fb0e5cd195c75 100644\n--- a/server/static/theme_retro_craft.css\n+++ b/server/static/theme_retro_craft.css\n@@ -35,7 +35,6 @@ h1, h2, h3 {\n   font-weight: 600;\n   letter-spacing: 0.14em;\n   margin: 1.5rem 0 0.5rem;\n-  text-transform: uppercase;\n }\n \n a {\n@@ -354,7 +353,10 @@ div.cli-panel {\n   accent-color: var(--accent);\n   width: 72px;\n }\n-#theme-switcher,\n+#slug-theme-form {\n+  display: contents;\n+}\n+#theme-select,\n #search-btn,\n a#src-link {\n   border: 1px solid var(--line);\n@@ -365,7 +367,7 @@ a#src-link {\n   padding: 0.25rem 0.6rem;\n   text-decoration: none;\n }\n-#theme-switcher:hover,\n+#theme-select:hover,\n #search-btn:hover,\n a#src-link:hover {\n   border-color: var(--accent);\n\n\nSide B — contributor: tommy-mor\nSide B — commit message:\n[9e20d06c] Add sorterc dev tool for offline DSL compile and JSONL lint.\n\nIntroduce a workspace-only binary that validates .sorter files into ranking JSON and scans events.jsonl for corrupt or unreplayable ingests.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\nSide B — unified diff (full patch):\ndiff --git a/Cargo.lock b/Cargo.lock\nindex bf8153d9c723af97122c9ffdd4a7cfe82e853bb6..a07734f089b466440c3ae6fc1087ce85fc24ce62 100644\n--- a/Cargo.lock\n+++ b/Cargo.lock\n@@ -1826,6 +1826,17 @@ dependencies = [\n  \"windows-sys 0.60.2\",\n ]\n \n+[[package]]\n+name = \"sorterc\"\n+version = \"0.0.1\"\n+dependencies = [\n+ \"anyhow\",\n+ \"clap\",\n+ \"serde\",\n+ \"serde_json\",\n+ \"slugsocial-server\",\n+]\n+\n [[package]]\n name = \"spin\"\n version = \"0.9.8\"\ndiff --git a/Cargo.toml b/Cargo.toml\nindex 149cbf07901eab57c593184ff8719a75d530f1da..25337acdd61e44b20f354c78fed4a88caf896280 100644\n--- a/Cargo.toml\n+++ b/Cargo.toml\n@@ -1,5 +1,5 @@\n [workspace]\n-members = [\"server\", \"cli\"]\n+members = [\"server\", \"cli\", \"sorterc\"]\n resolver = \"2\"\n \n \ndiff --git a/agents.md b/agents.md\nindex d8b801e454fdf37e7ac6038b91a69f83b0746d59..ce646ed3cd7123be4732dccec4a6800467e651e7 100644\n--- a/agents.md\n+++ b/agents.md\n@@ -93,6 +93,17 @@ SLUG_GOOGLE_CLIENT_SECRET=mock\n \n After OAuth completes, the pending-session poll returns a `slug_…` bearer token for API calls.\n \n+### Dev-only offline tooling\n+\n+**`sorterc`** — workspace binary, not published via npm. Compiles `.sorter` files and lints `events.jsonl` without a server:\n+\n+```\n+cargo run -p sorterc -- compile path/to/doc.sorter [--base events.jsonl] [--room public] [--pretty]\n+cargo run -p sorterc -- scan path/to/events.jsonl [--pretty]\n+```\n+\n+`compile` validates DSL, simulates ingest against empty (or `--base`) reducer state, and prints JSON rankings. `scan` reports corrupt JSONL lines and ingests that fail DSL replay.\n+\n ### Testing\n \n - **Rust tests:** `cargo nextest run --workspace` (163 tests; requires `cargo-nextest`)\ndiff --git a/server/src/lib.rs b/server/src/lib.rs\nindex c1d477d21aea03aff00e6f0689b0b4379d0d68d2..ad8e31099c807fb5844acb16cd5086a2f19327a7 100644\n--- a/server/src/lib.rs\n+++ b/server/src/lib.rs\n@@ -10,6 +10,7 @@ pub mod form_template;\n pub mod html;\n pub mod identity;\n pub mod middleware;\n+pub mod offline;\n pub mod path_types;\n pub mod ranking;\n pub mod reducer;\ndiff --git a/server/src/offline.rs b/server/src/offline.rs\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..54ad0ded096a305ef8454ab2cdd1c3af71b14f5d\n--- /dev/null\n+++ b/server/src/offline.rs\n@@ -0,0 +1,333 @@\n+//! Offline `.sorter` compilation and JSONL diagnostics (no network, no auth).\n+\n+use std::collections::HashSet;\n+use std::path::Path;\n+\n+use serde::Serialize;\n+use slug_types::{CheckScopeRanking, RankComponent, RankRow, paths::GardenItemUrl};\n+\n+use crate::{\n+    api::{resolve_item, validate_ingest_document},\n+    dsl,\n+    events::{Event, Ingest},\n+    path_types::ItemId,\n+    reducer::{ReducerState, ScopeId, scope_from_room_wire},\n+    scope_rank::build_children_rankings,\n+};\n+\n+#[derive(Debug, Clone, Serialize)]\n+pub struct CompileStats {\n+    pub items: usize,\n+    pub votes: usize,\n+    pub prose_blocks: usize,\n+}\n+\n+#[derive(Debug, Serialize)]\n+pub struct CompileResult {\n+    pub ok: bool,\n+    pub threads: Vec<String>,\n+    pub rankings: Vec<CheckScopeRanking>,\n+    pub stats: CompileStats,\n+}\n+\n+#[derive(Debug, Clone, Serialize)]\n+pub struct CompileError {\n+    pub ok: bool,\n+    pub error: String,\n+    #[serde(skip_serializing_if = \"Option::is_none\")]\n+    pub hint: Option<String>,\n+}\n+\n+#[derive(Debug, Clone, Serialize)]\n+pub struct BadJsonLine {\n+    pub line: usize,\n+    pub message: String,\n+}\n+\n+#[derive(Debug, Clone, Serialize)]\n+pub struct MalformedIngest {\n+    pub line: usize,\n+    pub id: String,\n+    pub room_id: String,\n+    pub thread_tag: String,\n+    pub reason: String,\n+}\n+\n+#[derive(Debug, Clone, Serialize)]\n+pub struct ScanResult {\n+    pub ok: bool,\n+    pub path: String,\n+    pub total_lines: usize,\n+    pub parsed_events: usize,\n+    pub bad_json_lines: Vec<BadJsonLine>,\n+    pub malformed_ingests: Vec<MalformedIngest>,\n+    pub skipped_ingests: usize,\n+}\n+\n+fn document_stats(doc: &dsl::Document) -> CompileStats {\n+    let mut items = 0usize;\n+    let mut votes = 0usize;\n+    let mut prose_blocks = 0usize;\n+    for stmt in &doc.statements {\n+        match stmt {\n+            dsl::Stmt::Item { .. } => items += 1,\n+            dsl::Stmt::Vote { .. } => votes += 1,\n+            dsl::Stmt::Prose { .. } => prose_blocks += 1,\n+        }\n+    }\n+    CompileStats {\n+        items,\n+        votes,\n+        prose_blocks,\n+    }\n+}\n+\n+fn threads_in_document(text: &str) -> Vec<String> {\n+    let mut out = HashSet::new();\n+    for line in text.lines() {\n+        let trimmed = line.trim();\n+        if !trimmed.starts_with('#') {\n+            continue;\n+        }\n+        let rest = trimmed.trim_start_matches('#').trim();\n+        if rest.is_empty() {\n+            continue;\n+        }\n+        let tag = rest.split_whitespace().next().unwrap_or(rest);\n+        let tag = tag.split(':').next().unwrap_or(tag).trim();\n+        if tag.is_empty() {\n+            continue;\n+        }\n+        out.insert(format!(\"#{}\", crate::canonical_path::canonicalize_tag(tag)));\n+    }\n+    let mut tags: Vec<String> = out.into_iter().collect();\n+    tags.sort();\n+    tags\n+}\n+\n+fn voted_parent_scopes(doc: &dsl::Document) -> Vec<ItemId> {\n+    let mut parents = HashSet::new();\n+    for stmt in &doc.statements {\n+        if let dsl::Stmt::Vote { item1, item2, .. } = stmt {\n+            if let (Ok(a), Ok(b)) = (resolve_item(item1), resolve_item(item2)) {\n+                if let Some(p) = a.parent() {\n+                    parents.insert(p);\n+                }\n+                if let Some(p) = b.parent() {\n+                    parents.insert(p);\n+                }\n+            }\n+        }\n+    }\n+    let mut out: Vec<ItemId> = parents.into_iter().collect();\n+    out.sort();\n+    out\n+}\n+\n+fn rankings_for_simulated(\n+    simulated: &ReducerState,\n+    scope: &ScopeId,\n+    room_wire: &str,\n+    doc: &dsl::Document,\n+) -> Vec<CheckScopeRanking> {\n+    voted_parent_scopes(doc)\n+        .iter()\n+        .map(|parent| {\n+            let scoped_content = simulated\n+                .content_for_scope(&scope)\n+                .unwrap_or_else(|| simulated.public());\n+            let scoped = build_children_rankings(scoped_content, parent);\n+            let components: Vec<RankComponent> = scoped\n+                .component_rankings\n+                .into_iter()\n+                .map(|comp| RankComponent {\n+                    pairs: comp.pairs,\n+                    ranking: comp\n+                        .ranked\n+                        .into_iter()\n+                        .map(|r| RankRow {\n+                            item: GardenItemUrl::from_stored(&r.item, room_wire),\n+                            score: r.score,\n+                            percent: None,\n+                        })\n+                        .collect(),\n+                })\n+                .collect();\n+            CheckScopeRanking {\n+                parent: GardenItemUrl::from_stored(parent, room_wire).into_inner(),\n+                components,\n+                unranked_items: scoped\n+                    .unranked_items\n+                    .into_iter()\n+                    .map(|it| GardenItemUrl::from_stored(&it, room_wire))\n+                    .collect(),\n+            }\n+        })\n+        .collect()\n+}\n+\n+/// Validate and simulate one `.sorter` document against optional base reducer state.\n+pub fn compile_document(\n+    base: &ReducerState,\n+    room: &str,\n+    text: &str,\n+) -> Result<CompileResult, CompileError> {\n+    let room_key = room.trim();\n+    let scope = scope_from_room_wire(room_key);\n+    let validated = validate_ingest_document(base, text, &scope).map_err(|(_, message, hint)| {\n+        CompileError {\n+            ok: false,\n+            error: message,\n+            hint,\n+        }\n+    })?;\n+\n+    let event = Event::Ingest(Ingest {\n+        ts: validated.ts,\n+        id: uuid::Uuid::new_v4().to_string(),\n+        raw: validated.raw_text.clone(),\n+        principal: \"offline\".to_string(),\n+        delegate: None,\n+        room_id: room_key.to_string(),\n+        thread_tag: \"offline\".to_string(),\n+    });\n+\n+    let mut simulated = base.clone();\n+    simulated.apply_event(event);\n+\n+    Ok(CompileResult {\n+        ok: true,\n+        threads: threads_in_document(text),\n+        rankings: rankings_for_simulated(&simulated, &scope, room_key, &validated.doc),\n+        stats: document_stats(&validated.doc),\n+    })\n+}\n+\n+fn ingest_parse_error(raw: &str) -> Option<String> {\n+    dsl::parse_full(raw).err().map(|e| e.to_string())\n+}\n+\n+fn load_events_from_jsonl(path: &Path) -> Result<(Vec<(usize, Event)>, Vec<BadJsonLine>), std::io::Error> {\n+    let text = std::fs::read_to_string(path)?;\n+    let mut events = Vec::new();\n+    let mut bad_json_lines = Vec::new();\n+    for (idx, line) in text.lines().enumerate() {\n+        let line_no = idx + 1;\n+        let trimmed = line.trim();\n+        if trimmed.is_empty() {\n+            continue;\n+        }\n+        match serde_json::from_str::<Event>(trimmed) {\n+            Ok(ev) => events.push((line_no, ev)),\n+            Err(e) => bad_json_lines.push(BadJsonLine {\n+                line: line_no,\n+                message: e.to_string(),\n+            }),\n+        }\n+    }\n+    Ok((events, bad_json_lines))\n+}\n+\n+/// Replay a JSONL event log into reducer state (same rules as server boot).\n+pub fn load_reducer_from_jsonl(path: &Path) -> Result<(ReducerState, Vec<BadJsonLine>), std::io::Error> {\n+    let (events, bad_json_lines) = load_events_from_jsonl(path)?;\n+    let mut state = ReducerState::default();\n+    for (_line_no, ev) in events {\n+        state.apply_event(ev);\n+    }\n+    Ok((state, bad_json_lines))\n+}\n+\n+/// Scan an events.jsonl for corrupt JSON lines and ingests that fail DSL replay.\n+pub fn scan_jsonl(path: &Path) -> Result<ScanResult, std::io::Error> {\n+    let text = std::fs::read_to_string(path)?;\n+    let total_lines = text.lines().count();\n+    let (events, bad_json_lines) = load_events_from_jsonl(path)?;\n+\n+    let mut malformed_ingests = Vec::new();\n+    let mut skipped_ingests = 0usize;\n+    let mut state = ReducerState::default();\n+    let parsed_events = events.len();\n+\n+    for (line_no, ev) in events {\n+        if let Event::Ingest(ref ing) = ev {\n+            if let Some(reason) = ingest_parse_error(&ing.raw) {\n+                malformed_ingests.push(MalformedIngest {\n+                    line: line_no,\n+                    id: ing.id.clone(),\n+                    room_id: ing.room_id.clone(),\n+                    thread_tag: ing.thread_tag.clone(),\n+                    reason,\n+                });\n+            }\n+            let before = state.ingests_by_id.len();\n+            state.apply_event(ev);\n+            if state.ingests_by_id.len() == before {\n+                skipped_ingests += 1;\n+            }\n+        } else {\n+            state.apply_event(ev);\n+        }\n+    }\n+\n+    let ok = bad_json_lines.is_empty() && malformed_ingests.is_empty() && skipped_ingests == 0;\n+\n+    Ok(ScanResult {\n+        ok,\n+        path: path.display().to_string(),\n+        total_lines,\n+        parsed_events,\n+        bad_json_lines,\n+        malformed_ingests,\n+        skipped_ingests,\n+    })\n+}\n+\n+#[cfg(test)]\n+mod tests {\n+    use super::*;\n+\n+    const TUTORIAL: &str = include_str!(\"../tests/fixtures/tutorial.sorter\");\n+\n+    #[test]\n+    fn compile_tutorial_fixture_emits_rankings() {\n+        let result = compile_document(&ReducerState::default(), \"public\", TUTORIAL).unwrap();\n+        assert!(result.ok);\n+        assert!(!result.threads.is_empty());\n+        assert!(result.stats.items >= 6);\n+        assert!(result.stats.votes >= 6);\n+        assert!(!result.rankings.is_empty());\n+    }\n+\n+    #[test]\n+    fn compile_rejects_vote_on_missing_item() {\n+        let err = compile_document(\n+            &ReducerState::default(),\n+            \"public\",\n+            \"{ reason }\\n~/missing/a 2:1 ~/missing/b\",\n+        )\n+        .unwrap_err();\n+        assert!(!err.ok);\n+        assert!(err.error.contains(\"undefined\"));\n+    }\n+\n+    #[test]\n+    fn scan_empty_jsonl_is_ok() {\n+        let dir = tempfile::tempdir().unwrap();\n+        let path = dir.path().join(\"events.jsonl\");\n+        std::fs::write(&path, \"\").unwrap();\n+        let report = scan_jsonl(&path).unwrap();\n+        assert!(report.ok);\n+        assert!(report.bad_json_lines.is_empty());\n+    }\n+\n+    #[test]\n+    fn scan_reports_bad_json_line() {\n+        let dir = tempfile::tempdir().unwrap();\n+        let path = dir.path().join(\"events.jsonl\");\n+        std::fs::write(&path, \"{not json}\\n\").unwrap();\n+        let report = scan_jsonl(&path).unwrap();\n+        assert!(!report.ok);\n+        assert_eq!(report.bad_json_lines.len(), 1);\n+    }\n+}\ndiff --git a/sorterc/Cargo.toml b/sorterc/Cargo.toml\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..92d477aff9b53291fb1a266db83065c1c800791d\n--- /dev/null\n+++ b/sorterc/Cargo.toml\n@@ -0,0 +1,18 @@\n+[package]\n+name = \"sorterc\"\n+version = \"0.0.1\"\n+edition = \"2021\"\n+license = \"MIT\"\n+publish = false\n+description = \"Offline .sorter compiler and events.jsonl linter (dev only)\"\n+\n+[[bin]]\n+name = \"sorterc\"\n+path = \"src/main.rs\"\n+\n+[dependencies]\n+anyhow = \"1\"\n+clap = { version = \"4\", features = [\"derive\"] }\n+serde = { version = \"1\", features = [\"derive\"] }\n+serde_json = \"1\"\n+slugsocial-server = { path = \"../server\" }\ndiff --git a/sorterc/readme.md b/sorterc/readme.md\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..1ebcc3fc935541ea9e47e0458ec67a750fe19fff\n--- /dev/null\n+++ b/sorterc/readme.md\n@@ -0,0 +1,92 @@\n+# sorterc\n+\n+Dev-only offline tooling for the slug `.sorter` DSL and `events.jsonl` event log.\n+\n+`sorterc` is **not** published via npm and does not talk to slug.social. It reuses the same parser, validator, and ranking code as the server, but runs entirely on local files.\n+\n+## Build\n+\n+From the repo root:\n+\n+```bash\n+cargo build -p sorterc\n+cargo run -p sorterc -- --help\n+```\n+\n+## Commands\n+\n+### `compile` — evaluate a `.sorter` document\n+\n+Reads a `.sorter` file (or `-` for stdin), validates the DSL, simulates one ingest against reducer state, and prints JSON rankings to stdout.\n+\n+```bash\n+cargo run -p sorterc -- compile path/to/doc.sorter\n+cargo run -p sorterc -- compile path/to/doc.sorter --pretty\n+cargo run -p sorterc -- compile - --pretty                    # stdin\n+cargo run -p sorterc -- compile doc.sorter --base events.jsonl  # seed garden from log\n+cargo run -p sorterc -- compile doc.sorter --room public         # default room\n+```\n+\n+**Flags**\n+\n+| Flag | Description |\n+|------|-------------|\n+| `--base PATH` | Replay an `events.jsonl` first, then compile against that garden state |\n+| `--room ID` | Room wire id (`public` or private room id). Default: `public` |\n+| `--pretty` | Pretty-print JSON |\n+\n+**Success output** (shape):\n+\n+```json\n+{\n+  \"ok\": true,\n+  \"threads\": [\"#my-thread\"],\n+  \"rankings\": [ … ],\n+  \"stats\": { \"items\": 3, \"votes\": 2, \"prose_blocks\": 5 }\n+}\n+```\n+\n+Rankings use the same structure as the server's dry-run check: parent scope, connected components, scores, unranked items.\n+\n+**Error output** exits with code 1:\n+\n+```json\n+{\n+  \"ok\": false,\n+  \"error\": \"parse error\",\n+  \"hint\": \"…\"\n+}\n+```\n+\n+### `scan` — lint an `events.jsonl`\n+\n+Reads a JSONL event log and reports problems without starting a server.\n+\n+```bash\n+cargo run -p sorterc -- scan events.jsonl\n+cargo run -p sorterc -- scan events.jsonl --pretty\n+```\n+\n+Reports:\n+\n+- **bad JSON lines** — lines that are not valid JSON\n+- **malformed ingests** — ingest events whose `raw` DSL fails to parse\n+- **skipped ingests** — ingests dropped during replay (same behavior as server boot)\n+\n+Exits 0 when clean, 1 when any issue is found.\n+\n+## Typical uses\n+\n+- Iterate on `.sorter` files in an editor and pipe through `compile` to see rankings instantly\n+- Verify a downloaded or edited `events.jsonl` before uploading to Fly\n+- Debug \"malformed ingest\" warnings from production boot logs\n+- CI or pre-commit checks on fixture docs (no OAuth, no network)\n+\n+## What it does not do\n+\n+- Post to slug.social or append to a live log\n+- Authenticate users or bind agents\n+- Run browser/UI tests\n+- Replace `slugsocial public check` for operators who want the full RPC path against a running server\n+\n+For live server dry-run against current garden state, use `npx slugsocial public check` or `POST /try/check` in the browser.\ndiff --git a/sorterc/src/main.rs b/sorterc/src/main.rs\nnew file mode 100644\nindex 0000000000000000000000000000000000000000..71382c180085cb0ad71043c852f8db5d3a48a284\n--- /dev/null\n+++ b/sorterc/src/main.rs\n@@ -0,0 +1,117 @@\n+use std::path::{Path, PathBuf};\n+\n+use anyhow::{bail, Context, Result};\n+use clap::{Parser, Subcommand};\n+use slugsocial_server::{\n+    offline::{self, CompileError, CompileResult, ScanResult},\n+    reducer::ReducerState,\n+};\n+\n+#[derive(Parser)]\n+#[command(\n+    name = \"sorterc\",\n+    about = \"Offline .sorter compiler and events.jsonl linter (dev only)\",\n+    version\n+)]\n+struct Cli {\n+    #[command(subcommand)]\n+    cmd: Command,\n+}\n+\n+#[derive(Subcommand)]\n+enum Command {\n+    /// Parse and simulate a .sorter document; emit ranking JSON to stdout.\n+    Compile {\n+        /// `.sorter` file, or `-` for stdin.\n+        file: PathBuf,\n+        /// Room wire id (`public` or private room id).\n+        #[arg(long, default_value = \"public\")]\n+        room: String,\n+        /// Optional events.jsonl to replay before compiling (seed garden state).\n+        #[arg(long)]\n+        base: Option<PathBuf>,\n+        /// Pretty-print JSON.\n+        #[arg(long)]\n+        pretty: bool,\n+    },\n+    /// Scan an events.jsonl for corrupt JSON lines and malformed ingests.\n+    Scan {\n+        file: PathBuf,\n+        #[arg(long)]\n+        pretty: bool,\n+    },\n+}\n+\n+fn read_input(path: &Path) -> Result<String> {\n+    if path.as_os_str() == \"-\" {\n+        use std::io::Read;\n+        let mut buf = String::new();\n+        std::io::stdin().read_to_string(&mut buf)?;\n+        Ok(buf)\n+    } else {\n+        std::fs::read_to_string(path)\n+            .with_context(|| format!(\"read {}\", path.display()))\n+    }\n+}\n+\n+fn load_base_state(base: Option<&Path>) -> Result<ReducerState> {\n+    let Some(path) = base else {\n+        return Ok(ReducerState::default());\n+    };\n+    let (state, bad_lines) = offline::load_reducer_from_jsonl(path)\n+        .with_context(|| format!(\"load base jsonl {}\", path.display()))?;\n+    if !bad_lines.is_empty() {\n+        bail!(\n+            \"base jsonl has {} corrupt line(s); fix or omit --base\",\n+            bad_lines.len()\n+        );\n+    }\n+    Ok(state)\n+}\n+\n+fn print_json<T: serde::Serialize>(value: &T, pretty: bool) -> Result<()> {\n+    if pretty {\n+        println!(\"{}\", serde_json::to_string_pretty(value)?);\n+    } else {\n+        println!(\"{}\", serde_json::to_string(value)?);\n+    }\n+    Ok(())\n+}\n+\n+fn run_compile(file: PathBuf, room: String, base: Option<PathBuf>, pretty: bool) -> Result<()> {\n+    let text = read_input(&file)?;\n+    let base_state = load_base_state(base.as_deref())?;\n+    match offline::compile_document(&base_state, &room, &text) {\n+        Ok(result) => {\n+            print_json::<CompileResult>(&result, pretty)?;\n+            Ok(())\n+        }\n+        Err(err) => {\n+            print_json::<CompileError>(&err, pretty)?;\n+            std::process::exit(1);\n+        }\n+    }\n+}\n+\n+fn run_scan(file: PathBuf, pretty: bool) -> Result<()> {\n+    let report = offline::scan_jsonl(&file)\n+        .with_context(|| format!(\"scan {}\", file.display()))?;\n+    print_json::<ScanResult>(&report, pretty)?;\n+    if !report.ok {\n+        std::process::exit(1);\n+    }\n+    Ok(())\n+}\n+\n+fn main() -> Result<()> {\n+    let cli = Cli::parse();\n+    match cli.cmd {\n+        Command::Compile {\n+            file,\n+            room,\n+            base,\n+            pretty,\n+        } => run_compile(file, room, base, pretty),\n+        Command::Scan { file, pretty } => run_scan(file, pretty),\n+    }\n+}\n","role":"user"}],"model":"~anthropic/claude-sonnet-latest"}