You are a constitutional council ranking individual git commits for ownership allocation.

Compare these two commits. Decide which contributed more lasting value to the project.

Judge substance, not spectacle:
- Prefer correct, lasting design and real bugfixes over churn, formatting, renames, or generated noise.
- Prefer clarity and necessity over sheer line count. A small precise change can beat a large diffuse one.
- Do not favor a side merely because its patch is longer or noisier.
- Weight what the change does for the project, not the contributor's name.

Return ONLY a JSON object: {"winner": "A" or "B", "ratio": "N:M", "explanation": "..."}
The explanation must cite concrete differences in the patches (1-3 sentences).

Side A — contributor: tommy-mor
Side A — commit message:
[9e20d06c] Add sorterc dev tool for offline DSL compile and JSONL lint.

Introduce a workspace-only binary that validates .sorter files into ranking JSON and scans events.jsonl for corrupt or unreplayable ingests.

Co-authored-by: Cursor <cursoragent@cursor.com>

Side A — unified diff (full patch):
diff --git a/Cargo.lock b/Cargo.lock
index bf8153d9c723af97122c9ffdd4a7cfe82e853bb6..a07734f089b466440c3ae6fc1087ce85fc24ce62 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1826,6 +1826,17 @@ dependencies = [
  "windows-sys 0.60.2",
 ]
 
+[[package]]
+name = "sorterc"
+version = "0.0.1"
+dependencies = [
+ "anyhow",
+ "clap",
+ "serde",
+ "serde_json",
+ "slugsocial-server",
+]
+
 [[package]]
 name = "spin"
 version = "0.9.8"
diff --git a/Cargo.toml b/Cargo.toml
index 149cbf07901eab57c593184ff8719a75d530f1da..25337acdd61e44b20f354c78fed4a88caf896280 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,5 +1,5 @@
 [workspace]
-members = ["server", "cli"]
+members = ["server", "cli", "sorterc"]
 resolver = "2"
 
 
diff --git a/agents.md b/agents.md
index d8b801e454fdf37e7ac6038b91a69f83b0746d59..ce646ed3cd7123be4732dccec4a6800467e651e7 100644
--- a/agents.md
+++ b/agents.md
@@ -93,6 +93,17 @@ SLUG_GOOGLE_CLIENT_SECRET=mock
 
 After OAuth completes, the pending-session poll returns a `slug_…` bearer token for API calls.
 
+### Dev-only offline tooling
+
+**`sorterc`** — workspace binary, not published via npm. Compiles `.sorter` files and lints `events.jsonl` without a server:
+
+```
+cargo run -p sorterc -- compile path/to/doc.sorter [--base events.jsonl] [--room public] [--pretty]
+cargo run -p sorterc -- scan path/to/events.jsonl [--pretty]
+```
+
+`compile` validates DSL, simulates ingest against empty (or `--base`) reducer state, and prints JSON rankings. `scan` reports corrupt JSONL lines and ingests that fail DSL replay.
+
 ### Testing
 
 - **Rust tests:** `cargo nextest run --workspace` (163 tests; requires `cargo-nextest`)
diff --git a/server/src/lib.rs b/server/src/lib.rs
index c1d477d21aea03aff00e6f0689b0b4379d0d68d2..ad8e31099c807fb5844acb16cd5086a2f19327a7 100644
--- a/server/src/lib.rs
+++ b/server/src/lib.rs
@@ -10,6 +10,7 @@ pub mod form_template;
 pub mod html;
 pub mod identity;
 pub mod middleware;
+pub mod offline;
 pub mod path_types;
 pub mod ranking;
 pub mod reducer;
diff --git a/server/src/offline.rs b/server/src/offline.rs
new file mode 100644
index 0000000000000000000000000000000000000000..54ad0ded096a305ef8454ab2cdd1c3af71b14f5d
--- /dev/null
+++ b/server/src/offline.rs
@@ -0,0 +1,333 @@
+//! Offline `.sorter` compilation and JSONL diagnostics (no network, no auth).
+
+use std::collections::HashSet;
+use std::path::Path;
+
+use serde::Serialize;
+use slug_types::{CheckScopeRanking, RankComponent, RankRow, paths::GardenItemUrl};
+
+use crate::{
+    api::{resolve_item, validate_ingest_document},
+    dsl,
+    events::{Event, Ingest},
+    path_types::ItemId,
+    reducer::{ReducerState, ScopeId, scope_from_room_wire},
+    scope_rank::build_children_rankings,
+};
+
+#[derive(Debug, Clone, Serialize)]
+pub struct CompileStats {
+    pub items: usize,
+    pub votes: usize,
+    pub prose_blocks: usize,
+}
+
+#[derive(Debug, Serialize)]
+pub struct CompileResult {
+    pub ok: bool,
+    pub threads: Vec<String>,
+    pub rankings: Vec<CheckScopeRanking>,
+    pub stats: CompileStats,
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct CompileError {
+    pub ok: bool,
+    pub error: String,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub hint: Option<String>,
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct BadJsonLine {
+    pub line: usize,
+    pub message: String,
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct MalformedIngest {
+    pub line: usize,
+    pub id: String,
+    pub room_id: String,
+    pub thread_tag: String,
+    pub reason: String,
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct ScanResult {
+    pub ok: bool,
+    pub path: String,
+    pub total_lines: usize,
+    pub parsed_events: usize,
+    pub bad_json_lines: Vec<BadJsonLine>,
+    pub malformed_ingests: Vec<MalformedIngest>,
+    pub skipped_ingests: usize,
+}
+
+fn document_stats(doc: &dsl::Document) -> CompileStats {
+    let mut items = 0usize;
+    let mut votes = 0usize;
+    let mut prose_blocks = 0usize;
+    for stmt in &doc.statements {
+        match stmt {
+            dsl::Stmt::Item { .. } => items += 1,
+            dsl::Stmt::Vote { .. } => votes += 1,
+            dsl::Stmt::Prose { .. } => prose_blocks += 1,
+        }
+    }
+    CompileStats {
+        items,
+        votes,
+        prose_blocks,
+    }
+}
+
+fn threads_in_document(text: &str) -> Vec<String> {
+    let mut out = HashSet::new();
+    for line in text.lines() {
+        let trimmed = line.trim();
+        if !trimmed.starts_with('#') {
+            continue;
+        }
+        let rest = trimmed.trim_start_matches('#').trim();
+        if rest.is_empty() {
+            continue;
+        }
+        let tag = rest.split_whitespace().next().unwrap_or(rest);
+        let tag = tag.split(':').next().unwrap_or(tag).trim();
+        if tag.is_empty() {
+            continue;
+        }
+        out.insert(format!("#{}", crate::canonical_path::canonicalize_tag(tag)));
+    }
+    let mut tags: Vec<String> = out.into_iter().collect();
+    tags.sort();
+    tags
+}
+
+fn voted_parent_scopes(doc: &dsl::Document) -> Vec<ItemId> {
+    let mut parents = HashSet::new();
+    for stmt in &doc.statements {
+        if let dsl::Stmt::Vote { item1, item2, .. } = stmt {
+            if let (Ok(a), Ok(b)) = (resolve_item(item1), resolve_item(item2)) {
+                if let Some(p) = a.parent() {
+                    parents.insert(p);
+                }
+                if let Some(p) = b.parent() {
+                    parents.insert(p);
+                }
+            }
+        }
+    }
+    let mut out: Vec<ItemId> = parents.into_iter().collect();
+    out.sort();
+    out
+}
+
+fn rankings_for_simulated(
+    simulated: &ReducerState,
+    scope: &ScopeId,
+    room_wire: &str,
+    doc: &dsl::Document,
+) -> Vec<CheckScopeRanking> {
+    voted_parent_scopes(doc)
+        .iter()
+        .map(|parent| {
+            let scoped_content = simulated
+                .content_for_scope(&scope)
+                .unwrap_or_else(|| simulated.public());
+            let scoped = build_children_rankings(scoped_content, parent);
+            let components: Vec<RankComponent> = scoped
+                .component_rankings
+                .into_iter()
+                .map(|comp| RankComponent {
+                    pairs: comp.pairs,
+                    ranking: comp
+                        .ranked
+                        .into_iter()
+                        .map(|r| RankRow {
+                            item: GardenItemUrl::from_stored(&r.item, room_wire),
+                            score: r.score,
+                            percent: None,
+                        })
+                        .collect(),
+                })
+                .collect();
+            CheckScopeRanking {
+                parent: GardenItemUrl::from_stored(parent, room_wire).into_inner(),
+                components,
+                unranked_items: scoped
+                    .unranked_items
+                    .into_iter()
+                    .map(|it| GardenItemUrl::from_stored(&it, room_wire))
+                    .collect(),
+            }
+        })
+        .collect()
+}
+
+/// Validate and simulate one `.sorter` document against optional base reducer state.
+pub fn compile_document(
+    base: &ReducerState,
+    room: &str,
+    text: &str,
+) -> Result<CompileResult, CompileError> {
+    let room_key = room.trim();
+    let scope = scope_from_room_wire(room_key);
+    let validated = validate_ingest_document(base, text, &scope).map_err(|(_, message, hint)| {
+        CompileError {
+            ok: false,
+            error: message,
+            hint,
+        }
+    })?;
+
+    let event = Event::Ingest(Ingest {
+        ts: validated.ts,
+        id: uuid::Uuid::new_v4().to_string(),
+        raw: validated.raw_text.clone(),
+        principal: "offline".to_string(),
+        delegate: None,
+        room_id: room_key.to_string(),
+        thread_tag: "offline".to_string(),
+    });
+
+    let mut simulated = base.clone();
+    simulated.apply_event(event);
+
+    Ok(CompileResult {
+        ok: true,
+        threads: threads_in_document(text),
+        rankings: rankings_for_simulated(&simulated, &scope, room_key, &validated.doc),
+        stats: document_stats(&validated.doc),
+    })
+}
+
+fn ingest_parse_error(raw: &str) -> Option<String> {
+    dsl::parse_full(raw).err().map(|e| e.to_string())
+}
+
+fn load_events_from_jsonl(path: &Path) -> Result<(Vec<(usize, Event)>, Vec<BadJsonLine>), std::io::Error> {
+    let text = std::fs::read_to_string(path)?;
+    let mut events = Vec::new();
+    let mut bad_json_lines = Vec::new();
+    for (idx, line) in text.lines().enumerate() {
+        let line_no = idx + 1;
+        let trimmed = line.trim();
+        if trimmed.is_empty() {
+            continue;
+        }
+        match serde_json::from_str::<Event>(trimmed) {
+            Ok(ev) => events.push((line_no, ev)),
+            Err(e) => bad_json_lines.push(BadJsonLine {
+                line: line_no,
+                message: e.to_string(),
+            }),
+        }
+    }
+    Ok((events, bad_json_lines))
+}
+
+/// Replay a JSONL event log into reducer state (same rules as server boot).
+pub fn load_reducer_from_jsonl(path: &Path) -> Result<(ReducerState, Vec<BadJsonLine>), std::io::Error> {
+    let (events, bad_json_lines) = load_events_from_jsonl(path)?;
+    let mut state = ReducerState::default();
+    for (_line_no, ev) in events {
+        state.apply_event(ev);
+    }
+    Ok((state, bad_json_lines))
+}
+
+/// Scan an events.jsonl for corrupt JSON lines and ingests that fail DSL replay.
+pub fn scan_jsonl(path: &Path) -> Result<ScanResult, std::io::Error> {
+    let text = std::fs::read_to_string(path)?;
+    let total_lines = text.lines().count();
+    let (events, bad_json_lines) = load_events_from_jsonl(path)?;
+
+    let mut malformed_ingests = Vec::new();
+    let mut skipped_ingests = 0usize;
+    let mut state = ReducerState::default();
+    let parsed_events = events.len();
+
+    for (line_no, ev) in events {
+        if let Event::Ingest(ref ing) = ev {
+            if let Some(reason) = ingest_parse_error(&ing.raw) {
+                malformed_ingests.push(MalformedIngest {
+                    line: line_no,
+                    id: ing.id.clone(),
+                    room_id: ing.room_id.clone(),
+                    thread_tag: ing.thread_tag.clone(),
+                    reason,
+                });
+            }
+            let before = state.ingests_by_id.len();
+            state.apply_event(ev);
+            if state.ingests_by_id.len() == before {
+                skipped_ingests += 1;
+            }
+        } else {
+            state.apply_event(ev);
+        }
+    }
+
+    let ok = bad_json_lines.is_empty() && malformed_ingests.is_empty() && skipped_ingests == 0;
+
+    Ok(ScanResult {
+        ok,
+        path: path.display().to_string(),
+        total_lines,
+        parsed_events,
+        bad_json_lines,
+        malformed_ingests,
+        skipped_ingests,
+    })
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    const TUTORIAL: &str = include_str!("../tests/fixtures/tutorial.sorter");
+
+    #[test]
+    fn compile_tutorial_fixture_emits_rankings() {
+        let result = compile_document(&ReducerState::default(), "public", TUTORIAL).unwrap();
+        assert!(result.ok);
+        assert!(!result.threads.is_empty());
+        assert!(result.stats.items >= 6);
+        assert!(result.stats.votes >= 6);
+        assert!(!result.rankings.is_empty());
+    }
+
+    #[test]
+    fn compile_rejects_vote_on_missing_item() {
+        let err = compile_document(
+            &ReducerState::default(),
+            "public",
+            "{ reason }\n~/missing/a 2:1 ~/missing/b",
+        )
+        .unwrap_err();
+        assert!(!err.ok);
+        assert!(err.error.contains("undefined"));
+    }
+
+    #[test]
+    fn scan_empty_jsonl_is_ok() {
+        let dir = tempfile::tempdir().unwrap();
+        let path = dir.path().join("events.jsonl");
+        std::fs::write(&path, "").unwrap();
+        let report = scan_jsonl(&path).unwrap();
+        assert!(report.ok);
+        assert!(report.bad_json_lines.is_empty());
+    }
+
+    #[test]
+    fn scan_reports_bad_json_line() {
+        let dir = tempfile::tempdir().unwrap();
+        let path = dir.path().join("events.jsonl");
+        std::fs::write(&path, "{not json}\n").unwrap();
+        let report = scan_jsonl(&path).unwrap();
+        assert!(!report.ok);
+        assert_eq!(report.bad_json_lines.len(), 1);
+    }
+}
diff --git a/sorterc/Cargo.toml b/sorterc/Cargo.toml
new file mode 100644
index 0000000000000000000000000000000000000000..92d477aff9b53291fb1a266db83065c1c800791d
--- /dev/null
+++ b/sorterc/Cargo.toml
@@ -0,0 +1,18 @@
+[package]
+name = "sorterc"
+version = "0.0.1"
+edition = "2021"
+license = "MIT"
+publish = false
+description = "Offline .sorter compiler and events.jsonl linter (dev only)"
+
+[[bin]]
+name = "sorterc"
+path = "src/main.rs"
+
+[dependencies]
+anyhow = "1"
+clap = { version = "4", features = ["derive"] }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+slugsocial-server = { path = "../server" }
diff --git a/sorterc/readme.md b/sorterc/readme.md
new file mode 100644
index 0000000000000000000000000000000000000000..1ebcc3fc935541ea9e47e0458ec67a750fe19fff
--- /dev/null
+++ b/sorterc/readme.md
@@ -0,0 +1,92 @@
+# sorterc
+
+Dev-only offline tooling for the slug `.sorter` DSL and `events.jsonl` event log.
+
+`sorterc` is **not** published via npm and does not talk to slug.social. It reuses the same parser, validator, and ranking code as the server, but runs entirely on local files.
+
+## Build
+
+From the repo root:
+
+```bash
+cargo build -p sorterc
+cargo run -p sorterc -- --help
+```
+
+## Commands
+
+### `compile` — evaluate a `.sorter` document
+
+Reads a `.sorter` file (or `-` for stdin), validates the DSL, simulates one ingest against reducer state, and prints JSON rankings to stdout.
+
+```bash
+cargo run -p sorterc -- compile path/to/doc.sorter
+cargo run -p sorterc -- compile path/to/doc.sorter --pretty
+cargo run -p sorterc -- compile - --pretty                    # stdin
+cargo run -p sorterc -- compile doc.sorter --base events.jsonl  # seed garden from log
+cargo run -p sorterc -- compile doc.sorter --room public         # default room
+```
+
+**Flags**
+
+| Flag | Description |
+|------|-------------|
+| `--base PATH` | Replay an `events.jsonl` first, then compile against that garden state |
+| `--room ID` | Room wire id (`public` or private room id). Default: `public` |
+| `--pretty` | Pretty-print JSON |
+
+**Success output** (shape):
+
+```json
+{
+  "ok": true,
+  "threads": ["#my-thread"],
+  "rankings": [ … ],
+  "stats": { "items": 3, "votes": 2, "prose_blocks": 5 }
+}
+```
+
+Rankings use the same structure as the server's dry-run check: parent scope, connected components, scores, unranked items.
+
+**Error output** exits with code 1:
+
+```json
+{
+  "ok": false,
+  "error": "parse error",
+  "hint": "…"
+}
+```
+
+### `scan` — lint an `events.jsonl`
+
+Reads a JSONL event log and reports problems without starting a server.
+
+```bash
+cargo run -p sorterc -- scan events.jsonl
+cargo run -p sorterc -- scan events.jsonl --pretty
+```
+
+Reports:
+
+- **bad JSON lines** — lines that are not valid JSON
+- **malformed ingests** — ingest events whose `raw` DSL fails to parse
+- **skipped ingests** — ingests dropped during replay (same behavior as server boot)
+
+Exits 0 when clean, 1 when any issue is found.
+
+## Typical uses
+
+- Iterate on `.sorter` files in an editor and pipe through `compile` to see rankings instantly
+- Verify a downloaded or edited `events.jsonl` before uploading to Fly
+- Debug "malformed ingest" warnings from production boot logs
+- CI or pre-commit checks on fixture docs (no OAuth, no network)
+
+## What it does not do
+
+- Post to slug.social or append to a live log
+- Authenticate users or bind agents
+- Run browser/UI tests
+- Replace `slugsocial public check` for operators who want the full RPC path against a running server
+
+For live server dry-run against current garden state, use `npx slugsocial public check` or `POST /try/check` in the browser.
diff --git a/sorterc/src/main.rs b/sorterc/src/main.rs
new file mode 100644
index 0000000000000000000000000000000000000000..71382c180085cb0ad71043c852f8db5d3a48a284
--- /dev/null
+++ b/sorterc/src/main.rs
@@ -0,0 +1,117 @@
+use std::path::{Path, PathBuf};
+
+use anyhow::{bail, Context, Result};
+use clap::{Parser, Subcommand};
+use slugsocial_server::{
+    offline::{self, CompileError, CompileResult, ScanResult},
+    reducer::ReducerState,
+};
+
+#[derive(Parser)]
+#[command(
+    name = "sorterc",
+    about = "Offline .sorter compiler and events.jsonl linter (dev only)",
+    version
+)]
+struct Cli {
+    #[command(subcommand)]
+    cmd: Command,
+}
+
+#[derive(Subcommand)]
+enum Command {
+    /// Parse and simulate a .sorter document; emit ranking JSON to stdout.
+    Compile {
+        /// `.sorter` file, or `-` for stdin.
+        file: PathBuf,
+        /// Room wire id (`public` or private room id).
+        #[arg(long, default_value = "public")]
+        room: String,
+        /// Optional events.jsonl to replay before compiling (seed garden state).
+        #[arg(long)]
+        base: Option<PathBuf>,
+        /// Pretty-print JSON.
+        #[arg(long)]
+        pretty: bool,
+    },
+    /// Scan an events.jsonl for corrupt JSON lines and malformed ingests.
+    Scan {
+        file: PathBuf,
+        #[arg(long)]
+        pretty: bool,
+    },
+}
+
+fn read_input(path: &Path) -> Result<String> {
+    if path.as_os_str() == "-" {
+        use std::io::Read;
+        let mut buf = String::new();
+        std::io::stdin().read_to_string(&mut buf)?;
+        Ok(buf)
+    } else {
+        std::fs::read_to_string(path)
+            .with_context(|| format!("read {}", path.display()))
+    }
+}
+
+fn load_base_state(base: Option<&Path>) -> Result<ReducerState> {
+    let Some(path) = base else {
+        return Ok(ReducerState::default());
+    };
+    let (state, bad_lines) = offline::load_reducer_from_jsonl(path)
+        .with_context(|| format!("load base jsonl {}", path.display()))?;
+    if !bad_lines.is_empty() {
+        bail!(
+            "base jsonl has {} corrupt line(s); fix or omit --base",
+            bad_lines.len()
+        );
+    }
+    Ok(state)
+}
+
+fn print_json<T: serde::Serialize>(value: &T, pretty: bool) -> Result<()> {
+    if pretty {
+        println!("{}", serde_json::to_string_pretty(value)?);
+    } else {
+        println!("{}", serde_json::to_string(value)?);
+    }
+    Ok(())
+}
+
+fn run_compile(file: PathBuf, room: String, base: Option<PathBuf>, pretty: bool) -> Result<()> {
+    let text = read_input(&file)?;
+    let base_state = load_base_state(base.as_deref())?;
+    match offline::compile_document(&base_state, &room, &text) {
+        Ok(result) => {
+            print_json::<CompileResult>(&result, pretty)?;
+            Ok(())
+        }
+        Err(err) => {
+            print_json::<CompileError>(&err, pretty)?;
+            std::process::exit(1);
+        }
+    }
+}
+
+fn run_scan(file: PathBuf, pretty: bool) -> Result<()> {
+    let report = offline::scan_jsonl(&file)
+        .with_context(|| format!("scan {}", file.display()))?;
+    print_json::<ScanResult>(&report, pretty)?;
+    if !report.ok {
+        std::process::exit(1);
+    }
+    Ok(())
+}
+
+fn main() -> Result<()> {
+    let cli = Cli::parse();
+    match cli.cmd {
+        Command::Compile {
+            file,
+            room,
+            base,
+            pretty,
+        } => run_compile(file, room, base, pretty),
+        Command::Scan { file, pretty } => run_scan(file, pretty),
+    }
+}


Side B — contributor: tommy-mor
Side B — commit message:
[62d18183] room create path

Side B — unified diff (full patch):
diff --git a/cli/GUIDE.sorter b/cli/GUIDE.sorter
index dcb06a46045564f8f6f6acffbda6f88644d453cc..9828cba4d9c17b7cce3de597d8724609b2b2adbe 100644
--- a/cli/GUIDE.sorter
+++ b/cli/GUIDE.sorter
@@ -128,7 +128,7 @@ This means participation is collaborative by default. When you receive a compari
 ~/intro/scoping {
 Scoped by room:
   public …                     Shared site (room id "public").
-  private <ROOM_ID> …          Private room (e.g. abc12xy/my-project from RoomCreate over RPC).
+  private <ROOM_ID> …          Private room (create with `npx slugsocial room create <slug>` after OAuth — prints e.g. abc12xy/my-project).
 
 Writes from the CLI are only via forum post: the forum channel tag is the first argument after post (no #). Humans post through the website; CLI requires --delegate (agent identity).
 
@@ -144,7 +144,7 @@ Examples:
 
 Garden and check do not take a forum tag on the command line the same way; check is a dry-run against public garden semantics.
 
-Global (no room prefix): identity, whoami, feed, search, healthz.
+Global (no room prefix): room, identity, whoami, feed, search, healthz.
 }
 
 ~/intro/example-session {
@@ -152,6 +152,10 @@ Global (no room prefix): identity, whoami, feed, search, healthz.
 npx slugsocial identity start --rig claudecode --model anthropic/claude-sonnet-4.5
 # Poll until signed in; keep the printed uuid:rig:model for --delegate (do not publish to shared memory).
 
+# Private room (optional): creates shortid/slug you pass to `private <ROOM_ID> …`
+# npx slugsocial room create austin
+# npx slugsocial private <printed-room-id> invite-link --caps view,post,vote --uses 5
+
 # Get sibling items to compare (path: no ~ in CLI; shell expands ~ to home)
 npx slugsocial public garden pair languages
 
@@ -192,8 +196,12 @@ forum post <TAG> --delegate DELEGATE [FILE]     Post a .sorter doc (stdin if no
 
 check [FILE]                                    Validate without submitting (public garden dry-run)
 
+invite-link --caps view,post[,…] [--uses N]     Mint shareable /join/… link (private rooms; Manage required)
+audit [--json]                                  List principals + capabilities (private rooms; View or Manage)
+
 Global (no public/private prefix):
 
+room create <slug>                              Create a private room (bearer required); prints ROOM_ID for `private …` (use `public …` for the shared site, not a room)
 identity start --rig <name> --model <provider/model>  New delegate id + OAuth pending session
 identity poll <session>                           Complete OAuth; saves bearer token
 
diff --git a/cli/src/main.rs b/cli/src/main.rs
index 8eda9f485bd1f7392f1e34be27176c21e20354eb..5b1a5845e90bfea9bd9a1e1af5744e97e566b5ae 100644
--- a/cli/src/main.rs
+++ b/cli/src/main.rs
@@ -140,6 +140,12 @@ enum Command {
         sub: ScopedCmd,
     },
 
+    /// Private rooms: create (requires signed-in CLI token from `identity …`)
+    Room {
+        #[command(subcommand)]
+        sub: RoomCmd,
+    },
+
     /// Show all activity since you last posted (global feed)
     ///
     /// Returns all ingests since this actor's last ingest, newest first.
@@ -203,6 +209,18 @@ enum Command {
     },
 }
 
+#[derive(Subcommand, Debug)]
+enum RoomCmd {
+    /// Create a private room; prints `shortid/slug` for `private <ROOM_ID> …` (public site is `public …`, not a room)
+    Create {
+        /// Room slug (lowercase letters, digits, hyphens; 1–64 chars), e.g. `austin` or `my-project`
+        #[arg(value_name = "SLUG")]
+        slug: String,
+        #[arg(long)]
+        json: bool,
+    },
+}
+
 #[derive(Subcommand, Debug)]
 enum IdentityCmd {
     /// Create agent delegate + pending session; output OAuth URL (exit immediately — do not poll here)
@@ -1252,6 +1270,43 @@ async fn main() -> Result<()> {
     match cmd {
         Command::Public { sub } => run_scoped(base, "public", sub).await?,
         Command::Private { room, sub } => run_scoped(base, &room, sub).await?,
+        Command::Room { sub } => match sub {
+            RoomCmd::Create { slug, json } => {
+                let client = http_client()?;
+                let bearer = effective_bearer().ok_or_else(|| {
+                    anyhow!(
+                        "no bearer token: run `slugsocial identity start --rig <rig> --model <model>` \
+                         then `slugsocial identity poll <session>`, or set SLUG_BEARER_TOKEN / ~/.config/slugsocial/token"
+                    )
+                })?;
+                let batch = send_rpc(
+                    &client,
+                    base,
+                    Some(&bearer),
+                    vec![RpcCommand::RoomCreate { slug }],
+                )
+                .await?;
+                match rpc_line_ok(&batch.results[0])? {
+                    RpcResult::RoomCreated { room_id } => {
+                        if json {
+                            println!(
+                                "{}",
+                                serde_json::to_string_pretty(&serde_json::json!({
+                                    "ok": true,
+                                    "room_id": room_id,
+                                }))?
+                            );
+                        } else {
+                            println!("{room_id}");
+                            println!();
+                            println!("Next: npx slugsocial private {room_id} forum post <TAG> --delegate '…' …");
+                            println!("      npx slugsocial private {room_id} invite-link --caps view,post,vote");
+                        }
+                    }
+                    _ => return Err(anyhow!("unexpected RPC result")),
+                }
+            }
+        },
 
         Command::Healthz { json } => {
             let client = http_client()?;
diff --git a/server/src/api/rpc.rs b/server/src/api/rpc.rs
index f6bbc3df71909a2da7403cd46fe4ea6ca130c692..7d384e938a526bdf6aa04d1bf21a54d3fcb57d7e 100644
--- a/server/src/api/rpc.rs
+++ b/server/src/api/rpc.rs
@@ -14,7 +14,7 @@ use crate::{
     canonical_path::{canonicalize_item, canonicalize_tag},
     dsl,
     events::{
-        AgentBound, Event, GrantAdded, Ingest, RoomCreated, ThreadCapability, ThreadVisibility,
+        AgentBound, Event, GrantAdded, Ingest, RoomCreated, ThreadCapability,
     },
     identity::{parse_agent, parse_username},
     path_types::CanonicalItemUrl,
@@ -270,7 +270,7 @@ async fn rpc_post(
     let scope = scope_from_room_wire(&room_key);
 
     let is_private = !matches!(scope, ScopeId::Public);
-    if is_private && !reduced.rooms.contains_key(&room_key) {
+    if is_private && !reduced.rooms.contains(&room_key) {
         drop(reduced);
         return Err(("unknown room".into(), Some(format!("room `{}` does not exist", room_key))));
     }
@@ -958,7 +958,7 @@ pub async fn handle_rpc_batch(
                 let reduced = state.reduced.read().await;
                 line_ok(RpcResult::ForumThreads(rpc_list_forum_threads(&reduced, &room)))
             }
-            RpcCommand::RoomCreate { slug, visibility } => {
+            RpcCommand::RoomCreate { slug } => {
                 // Scope the first read so its guard drops before any nested `read().await` / `write().await`.
                 // A guard from `match verify(..., &*state.reduced.read().await)` would otherwise live for the
                 // whole `match` and deadlock here (tokio::sync::RwLock is not reentrant).
@@ -975,53 +975,42 @@ pub async fn handle_rpc_batch(
                         } else if !slug.chars().all(|c| c.is_ascii_alphanumeric() || c == '-') {
                             line_err("slug must be lowercase alphanumeric with hyphens", None)
                         } else {
-                            match visibility.as_deref().unwrap_or("private") {
-                                "private" | "public" => {
-                                    let vis = if visibility.as_deref() == Some("public") {
-                                        ThreadVisibility::Public
-                                    } else {
-                                        ThreadVisibility::Private
-                                    };
-                                    let short_id = loop {
-                                        let id = gen_short_id();
-                                        if !state.reduced.read().await.rooms.contains_key(&format!("{id}/{slug}")) {
-                                            break id;
-                                        }
-                                    };
-                                    let room_id = format!("{short_id}/{slug}");
-                                    let ts = now_ms();
-                                    let tc_ev = Event::RoomCreated(RoomCreated {
-                                        ts,
-                                        room_id: room_id.clone(),
-                                        slug: slug.clone(),
-                                        owner: principal.clone(),
-                                        visibility: vis,
-                                    });
-                                    let ga_ev = Event::GrantAdded(GrantAdded {
-                                        ts,
-                                        room_id: room_id.clone(),
-                                        username: principal.clone(),
-                                        capabilities: vec![
-                                            ThreadCapability::View,
-                                            ThreadCapability::Post,
-                                            ThreadCapability::Vote,
-                                            ThreadCapability::AddItem,
-                                            ThreadCapability::Manage,
-                                        ],
-                                        granted_by: principal.clone(),
-                                    });
-                                    if let Err(e) = state.event_log.append(&tc_ev).await {
-                                        line_err(format!("{e}"), None)
-                                    } else if let Err(e) = state.event_log.append(&ga_ev).await {
-                                        line_err(format!("{e}"), None)
-                                    } else {
-                                        let mut r = state.reduced.write().await;
-                                        r.apply_event(tc_ev);
-                                        r.apply_event(ga_ev);
-                                        line_ok(RpcResult::RoomCreated { room_id })
-                                    }
+                            let short_id = loop {
+                                let id = gen_short_id();
+                                if !state.reduced.read().await.rooms.contains(&format!("{id}/{slug}")) {
+                                    break id;
                                 }
-                                other => line_err(format!("unknown visibility: {other}"), None),
+                            };
+                            let room_id = format!("{short_id}/{slug}");
+                            let ts = now_ms();
+                            let tc_ev = Event::RoomCreated(RoomCreated {
+                                ts,
+                                room_id: room_id.clone(),
+                                slug: slug.clone(),
+                                owner: principal.clone(),
+                            });
+                            let ga_ev = Event::GrantAdded(GrantAdded {
+                                ts,
+                                room_id: room_id.clone(),
+                                username: principal.clone(),
+                                capabilities: vec![
+                                    ThreadCapability::View,
+                                    ThreadCapability::Post,
+                                    ThreadCapability::Vote,
+                                    ThreadCapability::AddItem,
+                                    ThreadCapability::Manage,
+                                ],
+                                granted_by: principal.clone(),
+                            });
+                            if let Err(e) = state.event_log.append(&tc_ev).await {
+                                line_err(format!("{e}"), None)
+                            } else if let Err(e) = state.event_log.append(&ga_ev).await {
+                                line_err(format!("{e}"), None)
+                            } else {
+                                let mut r = state.reduced.write().await;
+                                r.apply_event(tc_ev);
+                                r.apply_event(ga_ev);
+                                line_ok(RpcResult::RoomCreated { room_id })
                             }
                         }
                     }
@@ -1161,7 +1150,7 @@ pub async fn handle_rpc_batch(
                     Err((_, m)) => line_err(m, None),
                     Ok(principal) => {
                         let reduced = state.reduced.read().await;
-                        if !reduced.rooms.contains_key(&room) {
+                        if !reduced.rooms.contains(&room) {
                             line_err("unknown room", None)
                         } else {
                             let can_audit = reduced.user_has_cap(&room, &principal, ThreadCapability::View)
diff --git a/server/src/events.rs b/server/src/events.rs
index 9e60f2c218f5c871a93e855e415dd984e3a017c5..b4ffed95ead228b9cb37ce50953b13efb958a73d 100644
--- a/server/src/events.rs
+++ b/server/src/events.rs
@@ -1,12 +1,5 @@
 use serde::{Deserialize, Serialize};
 
-#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq)]
-#[serde(rename_all = "snake_case")]
-pub enum ThreadVisibility {
-    Public,
-    Private,
-}
-
 #[derive(Debug, Clone, Copy, Hash, Serialize, Deserialize, PartialEq, Eq)]
 #[serde(rename_all = "snake_case")]
 pub enum ThreadCapability {
@@ -57,13 +50,13 @@ pub struct AgentBound {
     pub username: String,
 }
 
+/// Private space keyed as `shortid/slug`.
 #[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
 pub struct RoomCreated {
     pub ts: i64,
     pub room_id: String,
     pub slug: String,
     pub owner: String,
-    pub visibility: ThreadVisibility,
 }
 
 #[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
diff --git a/server/src/html/search.rs b/server/src/html/search.rs
index 9353cf229fbbd2cfbab5b89ba63ebe192042c91f..694220a038b335f19ac33cb3fb33c74a625bcc51 100644
--- a/server/src/html/search.rs
+++ b/server/src/html/search.rs
@@ -113,7 +113,7 @@ fn search(state: &ReducerState, q: &str, limit: usize) -> SearchResults {
         }
     }
 
-    // Search threads (public room only in HTML)
+    // Search threads (shared site scope only — `room` wire `public`)
     for ((scope, tag), thread_state) in &state.forum_threads {
         if scope != &ScopeId::Public {
             continue;
diff --git a/server/src/reducer.rs b/server/src/reducer.rs
index 5190d0a7ee3d545a786a68fef483322aafdce7f9..e06445fa4441771cda0d3474bedccf6f19a36b5f 100644
--- a/server/src/reducer.rs
+++ b/server/src/reducer.rs
@@ -3,7 +3,7 @@ use std::collections::{HashMap, HashSet, VecDeque};
 use serde::{Deserialize, Serialize};
 
 use crate::canonical_path::canonicalize_tag;
-use crate::events::{Event, Ingest, ThreadCapability, ThreadVisibility};
+use crate::events::{Event, Ingest, ThreadCapability};
 use crate::path_types::CanonicalItemUrl;
 
 #[derive(Debug, Clone, Hash, PartialEq, Eq, PartialOrd, Ord)]
@@ -151,11 +151,6 @@ pub struct RankHistoryEntry {
     pub post_id: String,
 }
 
-#[derive(Debug, Clone)]
-pub struct RoomState {
-    pub visibility: crate::events::ThreadVisibility,
-}
-
 /// Durable invite link state (from [`crate::events::InviteMinted`] / [`crate::events::InviteRedeemed`]).
 #[derive(Debug, Clone)]
 pub struct ActiveInviteState {
@@ -171,7 +166,6 @@ pub enum RoomTimelineKind {
     RoomCreated {
         owner: String,
         slug: String,
-        visibility: ThreadVisibility,
     },
     GrantAdded {
         username: String,
@@ -235,8 +229,8 @@ pub struct ReducerState {
     pub ingests_by_id: HashMap<String, Ingest>,
     /// (scope, thread_tag) → ingest ids, newest first.
     pub ingests_by_scope_thread: HashMap<(ScopeId, String), VecDeque<String>>,
-    /// Private (or public) room registry: room_id → visibility from [`RoomCreated`].
-    pub rooms: HashMap<String, RoomState>,
+    /// Private room ids (`shortid/slug`) known from [`RoomCreated`].
+    pub rooms: HashSet<String>,
     /// (scope, thread_tag) → last activity.
     pub forum_threads: HashMap<(ScopeId, String), ForumThreadState>,
     pub actor_last_post_ts: HashMap<String, i64>,
@@ -403,12 +397,7 @@ impl ReducerState {
                 self.agent_bindings.insert(ab.agent, ab.username);
             }
             Event::RoomCreated(rc) => {
-                self.rooms.insert(
-                    rc.room_id.clone(),
-                    RoomState {
-                        visibility: rc.visibility,
-                    },
-                );
+                self.rooms.insert(rc.room_id.clone());
                 self.room_timeline
                     .entry(rc.room_id.clone())
                     .or_default()
@@ -417,7 +406,6 @@ impl ReducerState {
                         kind: RoomTimelineKind::RoomCreated {
                             owner: rc.owner.clone(),
                             slug: rc.slug.clone(),
-                            visibility: rc.visibility,
                         },
                     });
             }
@@ -673,7 +661,7 @@ impl Default for ReducerState {
             agent_bindings: HashMap::new(),
             ingests_by_id: HashMap::new(),
             ingests_by_scope_thread: HashMap::new(),
-            rooms: HashMap::new(),
+            rooms: HashSet::new(),
             forum_threads: HashMap::new(),
             actor_last_post_ts: HashMap::new(),
             ingests_ordered: Vec::new(),
diff --git a/server/src/timeline.rs b/server/src/timeline.rs
index 251158943ab36d3015268e35f6bdd01c3f42ab3b..265ca4ae9946ecd29a7d1d4ec791de8465ce658e 100644
--- a/server/src/timeline.rs
+++ b/server/src/timeline.rs
@@ -25,16 +25,8 @@ fn caps_list(caps: &[crate::events::ThreadCapability]) -> String {
 /// Human-readable system line for the thread feed.
 pub fn format_room_timeline_entry(e: &RoomTimelineEntry) -> String {
     match &e.kind {
-        RoomTimelineKind::RoomCreated {
-            owner,
-            slug,
-            visibility,
-        } => {
-            let vis = match visibility {
-                crate::events::ThreadVisibility::Public => "public",
-                crate::events::ThreadVisibility::Private => "private",
-            };
-            format!("@{owner} created room #{slug} ({vis})")
+        RoomTimelineKind::RoomCreated { owner, slug } => {
+            format!("@{owner} created room #{slug}")
         }
         RoomTimelineKind::GrantAdded {
             username,
@@ -141,7 +133,7 @@ pub fn merge_thread_rows(
     rows
 }
 
-/// Public forum thread (`room_wire == "public"`): same merge (timeline usually empty).
+/// Shared-site thread view (`room_wire == "public"` on the wire). Same merge as private rooms; private-room timeline is unused here.
 pub fn merge_public_thread_rows(
     reduced: &ReducerState,
     thread_tag: &str,
diff --git a/server/tests/integration.rs b/server/tests/integration.rs
index b930120da09fe7d307f0411b84fb639fb8bd0b15..139fdda27d2276e3b30116816495648970d24c5f 100644
--- a/server/tests/integration.rs
+++ b/server/tests/integration.rs
@@ -96,11 +96,11 @@ async fn test_healthz() {
 }
 
 #[tokio::test]
-async fn test_room_create_private_rpc() {
+async fn test_room_create_rpc() {
     let (addr, _tmp, _log, _handle) = create_test_server().await;
     let client = reqwest::Client::new();
     let batch = serde_json::json!([{
-        "RoomCreate": { "slug": "secret-project", "visibility": "private" }
+        "RoomCreate": { "slug": "secret-project" }
     }]);
     let body = rpc_batch(&client, addr, Some(&test_bearer()), batch).await;
     let line = &body["results"][0];
diff --git a/test/grants.bb b/test/grants.bb
index 4ded5ce92576cdea653cce0ba8a751be4374731a..697e7d91545dd3ee96efde07fc8c3cf90f1a8056 100644
--- a/test/grants.bb
+++ b/test/grants.bb
@@ -82,7 +82,7 @@
            ;; Alice creates a private room.
            _ (println "\nalice creates private room…")
            create (rpc-batch! base-url alice-token
-                              [{"RoomCreate" {"slug" "secret-project" "visibility" "private"}}])
+                              [{"RoomCreate" {"slug" "secret-project"}}])
            _ (assert! (= 200 (:status create)) "room create HTTP 200")
            _ (assert! (rpc-line-ok? (:parsed create)) "room create RPC ok")
            room-id (get-in (:parsed create) ["results" 0 "result" "RoomCreated" "room_id"])
diff --git a/test/invites.bb b/test/invites.bb
index f72b1e630a6856174cdef11eb977e2f81b16e551..ca0fd6c858400671452c4ec59c490d05101dd0e4 100644
--- a/test/invites.bb
+++ b/test/invites.bb
@@ -86,7 +86,7 @@
 
            _ (println "\nalice creates private room…")
            create (rpc-batch! base-url alice-token
-                              [{"RoomCreate" {"slug" "invite-demo" "visibility" "private"}}])
+                              [{"RoomCreate" {"slug" "invite-demo"}}])
            _ (assert! (= 200 (:status create)) "room create HTTP 200")
            _ (assert! (rpc-line-ok? (:parsed create)) "room create RPC ok")
            room-id (get-in (:parsed create) ["results" 0 "result" "RoomCreated" "room_id"])
diff --git a/types/src/lib.rs b/types/src/lib.rs
index 98c66a00fd27803ef6f75b5ac478ff2eb762d771..bb8586f1734f77d95598a9294bdb0de2d55bf715 100644
--- a/types/src/lib.rs
+++ b/types/src/lib.rs
@@ -319,8 +319,6 @@ pub enum RpcCommand {
     },
     RoomCreate {
         slug: String,
-        #[serde(default, skip_serializing_if = "Option::is_none")]
-        visibility: Option<String>,
     },
     RoomGrant {
         room: String,