T102, the staging workbench offers the editors and the chat rail by scope (plan 034)

src/opendox/web/app.js

@@ -73,7 +73,7 @@ import { mountStagingWorkbench } from "./views/staging-workbench.js";
 // resolved in `render()` below, off the `gate.workbench.session` binding, and
 // `refusalTransport` is the fallback.
 import { createModelIntakeTransports } from "./views/swb-model-intake.js";
-import { CONSOLE_TOKEN_FIELD } from "./views/staging-workbench-model.js";
+import { CONSOLE_TOKEN_FIELD, GATELESS_SAVE_REFUSAL } from "./views/staging-workbench-model.js";
 // THE TWO MODELS THE CONTRIBUTED GATE COLUMN REACHES THROUGH `ctx` — RULED
 // counterpart Q6 (opensoft/openxFactory#656 comment `5649094228`, Brett Heap,
 // 2026-09-12): "what a CONTRIBUTED view module may IMPORT from openDox's
@@ -952,14 +952,20 @@ function ensurePageOverlayHost(doc) {
 // column has no transport at all, and a Save that silently did nothing would be
 // the worst answer available. This stands in for it and REFUSES in the shape
 // `runSave` already understands, naming the layering rather than the symptom.
+//
+// SINCE T102 THIS IS EVERY STANDALONE SAVE (RULED openxFactory#656
+// `5963618568`: "only creating documents and Save stay behind the gate, so Save
+// is refused by name"). A standalone workbench now offers its editors by scope,
+// so a human really does press Save here, and the refusal is the model's one
+// sentence: what is missing and which binding would supply it. It is picked on
+// the session half alone, so the sentence names only that half. It used to end
+// "Run the CLI verb in your pinned checkout", a remedy a standalone install
+// does not have.
 function refusalTransport() {
   return async () => ({
     ok: false,
     error: "no_gate_column",
-    message: "this shell was assembled without the column that contributes the "
-      + "first-edit transport (`gate.workbench.session`), so a governed Save "
-      + "cannot be sent. Run the CLI verb in your pinned checkout, where the "
-      + "authority lives.",
+    message: GATELESS_SAVE_REFUSAL,
   });
 }
 

src/opendox/web/index.html

@@ -104,7 +104,7 @@
   </p>
   <dialog class="aboutdialog" id="aboutdialog" aria-label="About this dashboard">
     <p>
-      A read-only projection of one repository's ideation governance state,
+      A projection of one repository's Markdown files and how they group,
       rendered from a single generated <code>snapshot.json</code>. The funnel reads
       the snapshot's link tallies and readiness verbatim — it never rescans the
       repository or re-scores anything. <span id="aboutlinks"></span> Regenerate

src/opendox/web/views/doc-wheel.js

@@ -99,6 +99,13 @@
 const SAVE_CONTEXT_ONLY =
   "this document is read-only context in the opened tile, not the tile's own "
   + "material, so it is not offered to the governed Save";
+// T102 (RULED openxFactory#656 `5963618568`): where editing is offered BY
+// SCOPE, the `edit` verb is offered on exactly the documents the scope lets be
+// edited, and a document outside that set states why rather than failing when
+// pressed. Under the gate no entry carries `editable`, so this never shows.
+const LOAD_NOT_THE_TILES_OWN =
+  "this document is context in the opened tile, not one of the tile's own, "
+  + "so it is not offered for editing here";
 const SAVE_NOT_LOADED =
   "load this document for editing before saving it";
 const SAVE_NOTHING_TO_DO =
@@ -345,7 +352,13 @@
     // answer wins when one exists (design D2): a context-only document is
     // LOADABLE for grounding and conversation, and its buffer carries
     // `owned: false`, which the governed Save already withholds.
-    const owned = live && typeof live.owned === "boolean"
+    //
+    // T102: a LIVE answer is a loaded buffer's. The shell answers an unloaded
+    // path with a placeholder (`owned: true`, `loaded: false`), which used to
+    // win here, so a by-scope tile outside the scope read "load this document
+    // for editing before saving it" beside an `edit` verb it does not offer.
+    // Under the gate no entry carries `owned`, so this reads as before.
+    const owned = live && live.loaded && typeof live.owned === "boolean"
       ? live.owned
       : entry.owned !== false;
 
@@ -369,7 +382,7 @@
     // route in (design D5). Labelled with Brett's own word.
     const load = el("button", "swb-docload", loaded ? "loaded" : "edit");
     load.type = "button";
-    if (onLoad && entry.resolved) {
+    if (onLoad && entry.resolved && entry.editable !== false) {
       load.title = loaded
         ? entry.path + " is loaded for editing — selecting it here brings the "
           + "chat and the canvas back to it"
@@ -380,7 +393,9 @@
       });
     } else {
       load.disabled = true;
-      load.title = entry.resolved ? LOAD_UNAVAILABLE : NOT_CATALOGUED;
+      load.title = !entry.resolved ? NOT_CATALOGUED
+        : (onLoad && entry.editable === false
+          ? LOAD_NOT_THE_TILES_OWN : LOAD_UNAVAILABLE);
     }
     row.appendChild(load);
 

src/opendox/web/views/lens.js

@@ -26,7 +26,7 @@
 
 import {
   buildLensModel, docSummaries, railStats, termMatches,
-  savePlan, clusterPlan, WORKBENCH_DIR,
+  savePlan, clusterPlan,
 } from "./lens-model.js";
 // The SVG bullseye renderer lives in ONE place (add-workbench-bullseye-and-create
 // design D1): this view and the staging workbench's lens panel consume the same
@@ -267,9 +267,13 @@ function renderPlan(container, plan, opts) {
   if (gateLive(o.caps) && o.mountLensGate) {
     o.mountLensGate(box, { plan, caps: o.caps, fetcher: o.fetcher });
   } else {
+    // NEUTRAL WORDS (plan 034 T102, gap G8): this note used to name the engine
+    // module (`lens.py`) and "the boundary", which are the build's words and
+    // not a reader's. What it says is the same fact: here the plan is shown,
+    // and nothing carries it out.
     box.appendChild(el("div", "dc-note",
-      "The tested engine (lens.py) materialises this through the boundary; the " +
-      "read-only surface confirms the plan — nothing is written from the browser."));
+      "Shown for confirmation only: this console cannot carry the plan out "
+      + "from the browser, so nothing is written."));
   }
   container.appendChild(box);
 }
@@ -1533,9 +1537,14 @@ export function renderLens(root, snapshot, opts) {
       });
       box.appendChild(save);
       box.appendChild(cluster);
+      // NEUTRAL WORDS (plan 034 T102, gap G8): this line named a host's
+      // surfaces -- the workbench folder, "the register", "any queue" -- which
+      // a standalone install does not have. What stays true everywhere is what
+      // the two buttons do: each shows its plan first, and the pane itself
+      // writes nothing. Where the plan lands is the plan's own `lands at` line.
       box.appendChild(el("div", "lens-pending",
-        "Persisted through the interactivity boundary to " + WORKBENCH_DIR +
-        " (gitignored). Nothing enters the register or any queue from here."));
+        "Each button shows its plan below before anything is written; this "
+        + "pane itself writes nothing."));
       pane.appendChild(box);
     },
     setName() {