<!-- ChatGPT 20260812-02: Extended horizontal MDI scroll range with a dynamic right-edge spacer. The workspace now keeps 280px of horizontal working room beyond the rightmost non-detached MDI window while leaving vertical range unchanged. Badge v31c432. -->
<!-- ChatGPT 20260812-01: Scrollable MDI workspace. #mdi-layer now scrolls horizontally/vertically when MDI windows extend beyond the visible workspace; drag math is scroll-aware and attached windows are no longer clamped to the viewport; Cascade can expand the canvas while Tile/Maximize target the visible viewport. Detached multi-window tabs share the same behavior. Badge v31c432. -->
<!-- ChatGPT 20260811-01: Trigger child-Hub lifecycle and browse harden. _triggers remains lazy-created per parent Hub and is never retired/deleted merely because triggers are deleted or the parent Hub is retired; parent retirement makes triggers operationally read-only by topology. Trigger Definitions browse now exposes Add/View/Edit/Duplicate/Soft-delete/Refresh with row-level Chain, while retaining Trigger-specific status/executor controls. All trigger deletion is normal soft-delete CU mutation. Badge v31c432. -->
<!-- ChatGPT 20260809-05: Reworked governed Trigger Definitions as records in a system-owned _triggers child Hub of the current business Hub. Trigger click now ensures that child Hub and its fixed Form Definition, stores multiple triggers through normal CU-backed record CRUD, hides the system child from Related Tables, opens record-specific chains, and cascades parent-Hub retirement to the trigger child. Badge v31c429. -->
<!-- ChatGPT 20260809-04: Synchronized visible CEE build badges and version fallback. Instance-bar badge and runtime build-version fallback now advance with the topbar build instead of remaining hard-coded at v31c425. Badge v31c429. -->
<!-- ChatGPT 20260809-03: Fixed Trigger help overlay theme mismatch. Help panel now uses CEE theme surface/text/border tokens instead of a hard-coded dark fallback that produced dark-on-dark text in light theme. Badge v31c429. -->
<!-- ChatGPT 20260809-02: Trigger is now a direct top-level browse command rather than a one-item submenu. Added pervasive contextual Trigger help for browse semantics, events, status, priority, failure policy, actions, and individual governed executors. Executor help is sourced from catalog metadata (description, allowed events, side-effect class, governance notes). Badge v31c427. -->
<!-- ChatGPT 20260809-01: Rebased the business-browse governance menus onto the current v31c424 branch. Replaced the catch-all Table menu with first-class Hub, Form, Trigger, Test, and Import/Export menus; restored the governed Trigger Definitions browse/editor and executor catalog from the earlier branch without disturbing later PDF/report, file-field, calculated-field, import, lifecycle, or detached-window work. Badge v31c425. -->
<!-- Grok 20260808-01: PDF Report layout mode — Tabular list (multi-record table) or Detail (one record per page, form-style label/value). Select all/None field toggle. Browse-column defaults. Badge v31c424. -->
<!-- Grok 20260807-05: Export/Report field list gains Select all / None toggle. Badge v31c423. -->
<!-- Grok 20260807-04: PDF/CSV export field list defaults to show_in_browse + browse_order columns. Badge v31c422. -->
<!-- Grok 20260807-03: PDF Report layout harden for wide schemas. Badge v31c421. -->
<!-- Grok 20260807-02: Reports & PDF Generation (FileMaker parity). Badge v31c420. -->
<!-- Grok 20260807-01: Import Completed defaults to Show All instead of affected-record found set (avoids "imported 2 still only see 2"). Badge v31c419. -->
<!-- Grok 20260806-26: Append Record CU spinner + disabled state; attachment-aware label; 90s timeout so hung uploads cannot spin forever. Badge v31c418. -->
<!-- Grok 20260806-25: Stale-tail on record save shows clear refresh guidance; file Download is a real link; create-after-upload tail extraction hardened. Badge v31c417. -->
<!-- Grok 20260806-24: Form Designer file-type note (one file/field, hash, limits). Switching type to File clears calculated/formula. Badge v31c416. -->
<!-- Grok 20260806-23: File attach shows read-only SHA-256 content hash on the form; hash bound into field value + upload CU for optlock. Badge v31c415. -->
<!-- Grok 20260806-22: File attach field value is JSON {filename,content_hash,size_bytes}; hash on upload CU + record field so byte changes trip record optlock (loaded_tail_hash). Badge v31c414. -->
<!-- Grok 20260806-21: Form type File attach (one file per field). Uses /api/enterprise/attachments upload/delete/download bound to record subject_id; field value stores filename. Badge v31c413. -->
<!-- Grok 20260806-20: After record save, patch only that browse row from create/update response.record (no full records/list). Badge v31c412. -->
<!-- Grok 20260806-19: Insert field dropdown excludes the calculated field itself (index + key + field_id) to prevent self-reference cycles. Badge v31c411. -->
<!-- Grok 20260806-18: Formula input is full-width (grows with window/card); horizontal scroll if needed. Badge v31c410. -->
<!-- Grok 20260806-17: Formula field refs inserted as backtick-quoted `indexed-name` so hyphens never parse as minus. Badge v31c409. -->
<!-- Grok 20260806-16: Live calculated-field preview on record form as component values change (client PEMDAS; server still authoritative on save). Badge v31c408. -->
<!-- Grok 20260806-15: Formula input always read-only; build only via Insert field and Operator (Clear for drafts). Published stays locked. Badge v31c407. -->
<!-- Grok 20260806-14: Fixed errant changelog text leak (orphan comment-close after VA-001 note left ChatGPT 20260805-20 body outside a comment). Badge v31c406. -->
<!-- Grok 20260806-13: Formula editor Operator… dropdown (+ − × ÷ parentheses) beside Insert field…. Badge v31c405. -->
<!-- Grok 20260806-12: Restored calculated field type/flag in Form Designer. Integer fields can be marked calculated=true with a formula; Insert field dropdown includes peer integer fields (including other calculated fields) for dependency graphs e.g. WSJF <- Cost of Delay. Formula locked after publish (retire+add to change). Record forms render calculated fields read-only. Backend already evaluates PEMDAS + dependency order (v34). Badge v31c405. -->
<!-- Grok 20260806-11: HTML comments sanitized (internal - - not - -) so changelog dates no longer terminate comments early and leak text onto the black pre-paint frame. Badge v31c402. -->
<!-- Grok 20260806-10: Boot pause (debugger + persistent error overlay) to catch pre-render failures. Badge v31c402. -->
<!-- Grok 20260806-09: Record add/edit form excludes fieldIsRetired fields so retired schema never appears for data entry. Badge v31c402. -->
<!-- Grok 20260806-08: Fixed Type/Show-in-browse onchange (broken '+ oc +' broke drawFormEditor). Integer Entry shows on type change. Badge v31c402. -->
<!-- Grok 20260806-07: Retire-in-place restored on top of integer Entry/Preset. retired=true stays on Form Definition. Badge v31c402. -->
<!-- Grok 20260806-06: Integer Entry (free|select) + number presets on input integers only. Visible in Form Designer between meta and browse row. Badge v31c397. -->
<!-- Grok 20260805-39: Removed in-run schema self-heal from the validation/auto-entry criterion runner. Publishing Form Definition fields during a test execution was masking a real fixture-schema gap rather than fixing it. The legitimate fix remains: fixture Reconcile/Generate must publish fixture-created-at-iso by stable field_key (hasKey), the runner must not synthesize a capability-marker field, and VA-001 correctly fails with fixture-schema-gap until Reconcile has been run. Advanced badge to v31c388. -->
<!-- Grok 20260805-38: Fixed VA-001 fixture-schema-gap for creation-timestamp after the VA-010 harden. Schema ensure/self-heal now runs from fixture source authority (base+hubId) even without a live browse/level binding, always appends fixture-created-at-iso by stable key, and the criterion form is updated from the healed artifact immediately so VA-001 sees the new capability in the same run. Advanced badge to v31c387. -->
<!-- Grok 20260805-37: Fixed VA-010 false ISO timestamp failure. (1) Fixture schema ensure now publishes fixture-created-at-iso by stable field_key even when a legacy integer fixture-created-at creation-timestamp field already exists. (2) Capability detection no longer treats bare "creation-timestamp" metadata on the legacy integer field as proof of the ISO field. (3) Field resolution no longer synthesizes a capability-marker fixture-created-at-iso when the published form lacks it — missing ISO is a schema gap. (4) Validation/auto-entry criterion runs now re-ensure and refresh the authoritative Form Definition before auto-entry checks so an already-attached fixture batch self-heals. Advanced badge to v31c386. -->
<!-- ChatGPT 20260805-36: Fixed VA-010 field resolution to prefer the append-only fixture-created-at-iso field and exclude the legacy integer fixture-created-at field from ISO timestamp verification. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-35: VA-001 now proves the creation-timestamp capability by recursively inspecting the complete authoritative Form Definition for the stable fixture-created-at-iso identity or creation-timestamp marker, independent of response envelope and field aliasing. Added diagnostic field count and marker evidence. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-34: Fixed VA-001 creation-timestamp capability detection by treating the stable append-only fixture-created-at-iso identity as authoritative and accepting persisted datetime type aliases. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-33: Embedded a 32x32 PNG favicon directly in the page so the tab icon does not depend on static-file routing at localhost:9200. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-32: Replaced ignored data-URI favicons with same-origin /favicon.ico and /chandra-favicon.svg assets. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-31: Fixed the browser-tab Chandra icon after Chrome rejected the fragment-suffixed SVG data URI. Replaced it with a clean base64-encoded SVG favicon and shortcut-icon fallback. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-30: Restored the Chandra vector browser-tab icon with an explicit sizes=any SVG favicon, shortcut-icon fallback, and cache-busting version marker. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-30: Validation/Auto-entry execution now refreshes the authoritative Form Definition from the owning worker before schema capability checks. Recovered fixture bindings are updated with the current artifact and tail, preventing stale browser-stored form snapshots from causing false VA-001 creation-timestamp gaps. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-29: Fixed Validation/Auto-entry schema capability recovery for creation timestamps. The runner and reconciler now recognize persisted auto-entry metadata in both flat and nested shapes, and explicitly recognize the append-only fixture-created-at-iso field as the creation-timestamp capability. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-28: Corrected Validation/Auto-entry creation-timestamp fixture typing. Reconcile now treats only datetime/timestamp/text creation-timestamp fields as compatible, appends fixture-created-at-iso when the legacy fixture-created-at integer field exists, and the runner selects the compatible field instead of the obsolete integer field. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-27: Test Plan fixture bindings now persist in browser storage by Test Plan subject and automatically recover when a new Run window opens. The recovered batch carries Hub/Level/authority/Form Definition source metadata and the accepted automation map, so Run no longer depends on the prior Run window or business-browse ID. Advanced badge to v31c373. -->
<!-- ChatGPT 20260805-26: Validation/Auto-entry fixture Reconcile now uses the backend append-only Form Definition endpoint. Existing published fields remain byte-for-byte unchanged and are not revalidated; only missing fixture fields are appended. Advanced badge to v31c373. -->
<!--
  ChatGPT 20260805-25: Corrected Validation/Auto-entry fixture Reconcile so it preserves every existing published Form Definition field byte-for-byte. v31c370 canonicalized legacy aliases before save, which attempted to change immutable indexed identity such as Canonical Level Label from NIL. Only newly appended fixture fields are canonicalized. Advanced visible CEE badge to v31c373.
-->
<!--
  ChatGPT 20260805-24: Fixed Validation/Auto-entry fixture Reconcile NIL indexed-name collision. Reconcile now canonicalizes every outgoing Form Definition field with explicit label/name/field_key/indexed_name aliases before publication, using existing field identity first and label derivation only as fallback. This is limited to the outgoing reconciled Form Definition copy and does not rewrite business records or run as a general data-repair pass. Advanced visible CEE badge to v31c370.
-->
<!--
  ChatGPT 20260805-13: Fixed Validation/Auto-entry fixture Reconcile failing with "No owning instance address for undefined". tpVaEnsureFixtureSchema passed the Level object to assignAuthoritativeSchemaIds, but the allocator contract requires a browse/form node carrying levelId. Reconcile now passes the originating business browse, preserving the authoritative Level-to-worker route while leaving Reuse attachment-only. Advanced visible CEE badge to v31c370.
  ChatGPT 20260805-22: Made Validation/Auto-Entry fixture source resolution durable within the browser session. Reuse/Reconcile batches now carry Hub, Level, authority, parent scope, and Form Definition snapshots; the runner no longer requires the original business browse window to remain open. Advanced visible CEE badge to v31c370.

  ChatGPT 20260805-21: Fixed silent Reuse fixture Continue path. Reuse no longer attempts Form Definition reconciliation before attaching an already-existing fixture batch; the Continue handler now remains observable, reports errors instead of closing silently, and shows a success toast/results handoff. Advanced visible CEE badge to v31c370.

  ChatGPT 20260805-14: Fixed Test Plan fixture handoff regression. Reconcile/Reuse now immediately marks the resulting browser-session fixture batch active, binds its automation map and batch id to an already-open matching Run window, and refreshes the visible fixture-status panel. The prior path only stored the batch and showed the results modal, leaving Execute Automated Tests to report no fixture until Show Fixture Applied to Test Plan reopened the plan. Advanced visible CEE badge to v31c370.
-->
<!--
  ChatGPT 20260805-20: Closed VA-001 fixture-schema gap. Validation/auto-entry
  fixture reconciliation now publishes deterministic uppercase-code, literal,
  UUID, creation-timestamp, creating-principal, and authority-sequence fields
  into the selected Hub Form Definition, with authoritative schema IDs. Advanced
  cee-validation-autoentry-fixture-runner to v2 and visible badge to v31c370.
-->
<!--
  ChatGPT 20260805-16: Restored Business Records toolbar submenus. The toolbar
  used overflow-x:auto, which made it a clipping container for the absolutely
  positioned Find, Found Set, Sort/View, Table, and Related Tables menus. Menu
  buttons still toggled .show, but the panels were clipped out of view. Toolbar
  overflow is now visible at the supported browse minimum width, and wireMenu
  is null-safe and closes sibling menus before opening the selected menu.
  Advanced visible CEE badge to v31c370.
-->
<!--
  ChatGPT 20260805-14: Fixed modeless Test Plan Save Results serialization.
  saveTestPlan previously preferred document.getElementById(winId), which is the
  originating Test Plans browse window, over the active Run MDI window. As a
  result tpSyncStepsJson found no checklist rows and persisted steps_json: []
  even though Pass/Fail, runner notes, and execution evidence were visible and
  Copy Failed Evidence worked in the live Run window. Save now treats the active
  Run window as authoritative and uses the browse/modal root only as fallback.
  Advanced visible CEE badge to v31c370.
-->
<!--
  ChatGPT 20260805-15: Corrected Test Plan run-state and fixture clarity. Historical
  CU hydration now uses the universal chain artifact decoder (artifact or
  artifact_json, including normalized detail envelopes) before merging results,
  notes, and execution evidence. Run windows now show an explicit Fixture Status
  panel: attached batch identity, session-only attachment warning, or instructions
  to return to the business-record browse and run Table > Generate Test Plan
  Fixture. Also states that automated results remain unsaved until Save Results
  appends a CU. Badge v31c370.
-->
<!--
  ChatGPT 20260805-13: Added cee-validation-autoentry-fixture-runner v1 and
  importable MVP acceptance coverage. The runner exercises authoritative
  record creation through the normal product endpoint, verifies required/type
  rejection, backend text normalization, literal/default and generated
  auto-entry behavior, serial monotonicity, and no-record-on-rejection. It
  retains request/response/record evidence, reports missing fixture schema as
  an explicit fixture gap, and soft-deletes successful probe records. Badge
  v31c370.
-->
<!--
  ChatGPT 20260805-13: Fixed Test Plan result restoration from metadata-first
  authority history. /history rows often carry CU metadata but omit artifact_json;
  the prior loader therefore saw CU identities without the steps_json that holds
  Pass/Fail, runner notes, and execution evidence, then mislabeled the newest
  non-state CU as a resumed results CU. Restoration now hydrates missing history
  artifacts through /api/enterprise/chain/detail, merges newest criterion state
  by stable criterion_id, reports inspected/state-bearing/restored counts, and
  only labels a CU as restored results when it actually contains saved execution
  state. Badge v31c370.
-->
<!--
  Grok 20260805-12: Fixed Close All ReferenceError — ceeExplicitDiscard,
  ceeDetachedTabToken, and ceeDetachChannel lived in a later script IIFE than
  ceeInstallGroupToolbar, so the Close All handler could not see them. Promoted
  all three to window.* for cross-script access. Badge v31c370.
-->
<!--
  Grok 20260805-11: Defined Close All for detached multi-window tabs:
  discard parked windows in the main CEE workspace (they stay gone), clear
  the localStorage payload, focus the opener CEE tab, then close the
  detached tab. Distinct from Return to Workspace (which restores).
  beforeunload still skips restorative "closed" when window.ceeExplicitDiscard is
  set. Badge v31c358.
-->
<!--
  Grok 20260805-10: Detached multi-window MDI was broken by CSS, not by the
  browser. html.cee-detached-tab #mdi-layer > .browse-win forced every window
  full-bleed (fixed inset !important), so tile/cascade geometry was ignored —
  groups looked like one maximized window even when DETACHED CEE WINDOWS (N)
  was correct. Full-bleed is now limited to .browse-maximized; group members
  stay position:absolute. Tile runs after double rAF so the layer has a real
  client box. Badge v31c357.
-->
<!--
  Grok 20260805-09: Removed Reset All Test DBs from the MDI command strip.
  Multi-window detach now lays out a real MDI canvas in the new tab via
  ceeTileGroupWindows (fallback cascade) instead of cascadeBrowses/maximize —
  the prior path left groups looking like a single maximized window. Clears
  browse-maximized on every member of a group. Browser APIs used (window.open
  from a click, localStorage payload, BroadcastChannel) are standard; multi-MDI
  is an app layout concern, not a browser capability gap. Badge v31c356.
-->
<!--
  Grok 20260805-08: Deleted and Archived Records are first-class MDI browses.
  Maximize (□ / double-click header) wired via toggleBusinessBrowseSize.
  ceeDetachDescriptor recognizes universalArchived; detached-tab replay reopens
  Archived Records. Explicit ceeAddDetachButton after open so Group + Detach
  appear immediately. Tagging Deleted + Archived + business browses and
  detaching from any one parks the whole mixed set. Badge v31c355.
-->
<!--
  Grok 20260805-07: Deleted Records and Archived Records browses matched to
  business-browse chrome: HAL/SAL icon speed buttons with Michroma labels,
  Diagnostics as an icon speed button (not a text chip), search flex-grows to
  the right, maximize control added to header. Badge v31c354.
-->
<!--
  Grok 20260805-06: Browse chrome clarity. (1) Search field flex-grows to the
  right edge of the tools rail. (2) Header scope no longer mirrors found/total
  (footer status already owns that). (3) Group-detach checkbox moved LEFT of
  the title as a labeled "Group" control so it is not confused with maximize;
  Detach ↗ joins Max □ and Close × in a right-side window-chrome cluster.
  Badge v31c353.
-->
<!--
  Grok 20260805-05: Business browse min-width raised to 780px (default open
  900x540) so the labeled HAL/SAL toolbar stays on one row instead of wrapping
  under the GR mark. browse-tools flex-wrap:nowrap with horizontal scroll as
  last resort. Record navigation (|◀ ◀  Record n of m  ▶ ▶|) flattened to
  text commands with wider padding and a dedicated position field — no chip
  borders. Badge v31c352.
-->
<!--
  Grok 20260805-04: Topbar + MDI strip forced to pure menubar text commands —
  no fill, no border, no chip radius; hover is color + underline only.
  Overrides generic .btn chrome with !important on background/border/shadow
  so light theme cannot resurrect tool-button appearance. Badge v31c351.
-->
<!--
  Grok 20260805-03: Topbar and MDI strip restyled as single-level command menu
  items rather than filled tool buttons. Transparent rest, steel text, quiet
  hover wash; Spine Editor remains gold-accented; Close All / Reset All Test
  DBs stay danger-colored text without chip chrome. Scoped so modal .btn and
  form buttons are unchanged. Badge v31c350.
-->
<!--
  Claude 20260804-08: Added a soft glowing halo behind the GR mark's central gold hub node, in response to a request for a "HAL/SAL" character - - one deliberate glowing focal point rather than a colorful icon set (the latter was explicitly rejected as generic/toy-like against a reference screenshot). Reuses the existing - -glow-gold LED-status-rail token rather than inventing new glow mechanics, via an SVG radialGradient fading to transparent. The gradient id is interpolated per browse window (id+"-hub-glow") since this toolbar template can render multiple times simultaneously across several open MDI browse windows - - a hardcoded shared id would have collided. Animated with a slow 3.4s breathing opacity cycle (0.55 to 1) rather than static, on the design judgment that "quietly alive" reads more deliberately machine-intelligent than a fixed glow, while staying far too slow/subtle to read as a notification or alert. Respects prefers-reduced-motion (animation disabled, fixed 0.8 opacity) per accessibility guidance. Deliberately scoped to the hub only - - every icon glyph elsewhere in the toolbar stays plain linear steel/text color, no per-icon color added, since the actual "generic" problem in the reference screenshot was arbitrary color-per-icon with no unifying idea, not absence of color as such. Advanced visible CEE badge to v31c347.
  Claude 20260804-07: Replaced the icon toolbar's thin/transparent-until-hover styling with a bolder treatment, addressing feedback that it read as "plastic," "frail," and "like a Kindle" against the intended hardcore-workstation direction. Toolbar background is now a raised gunmetal panel built from the existing - -gun/- -gun2/- -gun3/- -gun-hi/- -gun-lo chassis-frame tokens (same material as the outer app frame, reused rather than inventing a new one) - - since those tokens already have both dark and light theme values defined, the same CSS rule automatically resolves to the correct material in either theme with no separate light/dark logic needed. Deliberately did NOT carry over the chassis's corner cap-screws or its full - -brushed repeating-stripe texture: screws read as fussy/toy-like repeated across every open browse window's toolbar at this much smaller scale, and the stripe texture (designed at 0.012-0.025 opacity for a large single frame) was confirmed via side-by-side mockup to be essentially imperceptible at toolbar size - - not worth its cost. Icon buttons now have a persistent chip background/border at rest (rgba(0,0,0,.28) fill, var(- -border2) border) instead of being fully invisible until hovered, stroke width increased 1.3px to 1.9px, and default icon color brightened from - -text2 to - -text. Primary (Add) and danger (Soft delete) buttons now show their gold/red border and icon tint at rest, not only on hover, matching how Salesforce/ServiceNow-style tools visually distinguish primary/danger actions before interaction rather than after. GR mark connecting lines bumped from 1.6px/85% opacity to 2.4px/100%, node radii slightly larger, matching the approved mockup. All changes verified against a standalone mockup (dark and light) before implementation, per screenshot review, before being ported into the real toolbar the same careful way as the original icon-toolbar work - - every class name and dynamic title-attribute wiring left untouched, verified with node - -check against the extracted main script block. Advanced visible CEE badge to v31c346.
  Claude 20260804-06: Fixed two icon-toolbar tooltip bugs found in live use. (1) Add's tooltip went silent once its form-design gate cleared: addBtn.title was set from the shared gateTitle variable, which is deliberately an empty string once the button is actually ready - - exactly when a tooltip is most wanted - - and the CSS tooltip rule intentionally suppresses on empty title (to avoid a blank bubble elsewhere). editBtn had the identical bug; duplicateBtn/deleteBtn were unaffected because separate, later logic always overwrites their title with non-empty text. Both now fall back to a static default ("Add record" / "Edit selected record") when gateTitle is empty. (2) Disabled buttons' tooltips were washed-out and appeared behind neighboring buttons: .icon-toolbar-btn:disabled used opacity:.35 on the whole button element, and CSS opacity below 1 multiplies through to everything inside an element (including the ::after tooltip pseudo-element) AND creates a new stacking context, which is what pushed the tooltip out of normal z-order relative to sibling buttons. Replaced with dimming the icon svg's stroke color directly (stroke:var(- -text3)) and left the button element itself at full opacity, so the disabled-reason tooltip renders fully readable and in normal stacking order. Advanced visible CEE badge to v31c345.
  Claude 20260804-05: Fixed the Soft Delete toolbar icon - - the card+arrow+tray design (rectangle, vertical stem, separate baseline) accidentally reproduced the universal monitor/display icon silhouette rather than reading as record removal, confirmed against a live screenshot. Replaced with the same card outline Add uses, with a minus instead of a plus - - mirrors Add's visual grammar exactly (inverse of Add rather than an unrelated new shape) and carries no ambiguity. The not-yet-implemented Undelete and Archive icon designs (currently only in standalone mockup files, not yet wired into the Deleted/Archived Records toolbars) use the same flawed rect+stem+baseline composition and will need the same correction before that toolbar is actually built. Advanced visible CEE badge to v31c344.
  Claude 20260804-04: Replaced the business record browse toolbar's text buttons with a custom icon set, anchored on the left by the GR brand mark (a simplified version of the existing brand-banner SVG - - same hub-and-satellite node language, solid lines only, no background grid, since those details turn to visual mud at toolbar scale). New/updated: crud icons (Add/View/Edit/Duplicate/Soft delete), Refresh, and new icons for the four dropdown-menu triggers (Find: magnifying glass, Found Set: funnel, View: sort-lines, Table: grid) - - their existing text-based submenus are untouched, since icon-izing ~20 secondary sub-actions accessed via an explicit click-to-open menu was judged lower value than the primary always-visible row. Tooltips use a new CSS-only pattern - - .icon-toolbar-btn[title]:hover::after{content:attr(title)} - - rather than a separate hardcoded span, specifically so they keep reading the button's LIVE title attribute: several of these buttons (Add/Edit/Duplicate/Delete in particular) have their title dynamically rewritten by existing JS in response to real state (form-design readiness, mixed active/deleted selection, record-creation being disabled, current tag count) and none of that logic needed to change. One real conflict found and fixed: deleteBtn.textContent was being dynamically overwritten with "Delete N Records" / "Restore N Records" text on every selection change, which would have destroyed the icon on the next state update - - moved that messaging into deleteBtn.title instead (now surfaces through the same live-tooltip mechanism), consolidated with the pre-existing mixed-status warning so neither clobbers the other. Sizing (44px buttons, 32px icons, 54px GR mark, 15px tooltip text) was worked out interactively against a standalone mockup before implementation, specifically calibrated up in a second pass for readability. Verified via node - -check against the extracted main script block (762KB, contains this edit) - - zero syntax errors; a syntax error in a separately-extracted, much smaller script block was confirmed pre-existing in the original unedited file (an artifact of crude regex-based script splitting hitting a script-tag-like string inside a JS literal elsewhere, unrelated to this change) via the same check against the original file. Advanced visible CEE badge to v31c343.
  Claude 20260804-03: Removed the Lifecycle View filter (Active/Deleted/All dropdown) from the business-record browse entirely. Business browse is now always active-only by construction - - the dropdown, its onchange wiring, the saved-search lifecycle_scope sync that used to move the dropdown's selection, the per-row Restore (undelete) button (which could previously appear when a deleted row was shown), the row-render deleted-row class toggle, and the double-click routing to a read-only viewer for deleted rows are all removed, since none of them can ever fire anymore. This is a deliberate consolidation: the universal Deleted Records and Archived Records browses already cover deleted/archived business records across every Hub with their own dedicated restore/archive workflow, so a second, per-Hub duplicate of that capability inside the ordinary record browse was redundant. As a direct consequence, CSV Export - - which always exports from the browse's current w.records - - can now only ever export active records, matching the requirement that export requires active records. The toolbar's Delete/Restore command and its mixed-status guard, and the restoreBusinessRecord/restoreBusinessRecords functions themselves, are left in place but now permanently unreachable (deliberately deferred as a smaller, separate follow-up rather than bundled into this change). Advanced visible CEE badge to v31c342.
  Claude 20260803-09: Fixed CSV import still rejecting "canonical_label" is required even after the v31c338 fix stopped stripping the name field from values. Root cause: ieFieldKey's fallback chain (indexed_name||name||field_name||field_id||id) never checked field_key, the property that actually holds the plain string "canonical_label" on system/base fields (confirmed live via CEE_WORKSPACE_MODEL.browses['business-browse-1'].formDesign.fields in devtools - - these field objects have field_key and field_id but no .name at all). Custom TEST- - fields worked by coincidence because they do have a .name property that matches their intended key; system fields have no .name, so the chain fell all the way through to field_id - - an opaque hash - - and every row's canonical_label ended up keyed under that hash in the outgoing values payload instead of under the literal string the server validates against. Added f.field_key as the first-priority check. Advanced visible CEE badge to v31c341.
  Claude 20260803-08: Fixed CSV import always rejecting rows with "<field> is required" whenever the form design's name field was itself a required field (e.g. canonical_label). ieCommitImport cloned the preview-validated values object and then did `delete values[nameKey]`, on the assumption that records/create populates the name field from the separate top-level `name` param - - it does not; the server strictly requires the name field's value to also be present inside `values`. Preview never hit this path (it only reads r.values, never deletes from it), so rows always showed "Valid" in preview and then failed at commit 100% of the time for any form design where the name field is required. Removed the delete; values now keeps the name field's entry when sent to records/create. Advanced visible CEE badge to v31c338.
  ChatGPT 20260803-07: Fixed Deleted/Archived Records loader crash caused by calling normUrl from a scope where it is not defined. Lifecycle target normalization is now self-contained and uses trailing-slash removal directly. Advanced visible CEE badge to v31c337.
  ChatGPT 20260803-06: Corrected v31c335 lifecycle routing regression. Deleted Records again queries only Level worker authorities; Archived Records alone adds the current spine origin. Also made archived spine rows null-safe when no seed Level exists. Advanced visible CEE badge to v31c336.
  ChatGPT 20260803-05: Fixed Archived Records authority discovery. The archive browse now queries the current spine origin before Level worker instances, because Test Plan archive entries are written through the spine authority. This prevents successful Test Plan archives on 9200 from appearing as an empty Archived Records browse. Advanced visible CEE badge to v31c335.

  ChatGPT 20260803-03: Corrected universal Deleted Records tagging so every displayed lifecycle object participates in the tagged set, not only Business Records. Select-all now means all visible deleted objects; Saved Search and Test Plan rows receive tags; Archive dispatch carries object kind, source identity, source subject/tail, authority route, and deleted-object snapshot into the dedicated deleted-record archive Hub contract. Archived browse now displays object Type and uses stable archive-entry identity so Restore to Deleted can return each archived object to its original deleted context. Advanced visible CEE badge to v31c334.
-->
<!--
  ChatGPT 20260803-02: Removed the dedicated Archived Records button from the global MDI toolbar. Archived Records remains reachable from the Archived button inside the universal Deleted Records browse, preserving the lifecycle workflow without consuming permanent top-level workspace real estate. Advanced visible CEE badge to v31c334.
-->
<!--
  ChatGPT 20260803-01: Added the governed Archived business-record lifecycle. The universal Deleted Records browse now has window-local tagging, select-all-visible, bulk Archive, and an Archived navigation action. Archive writes through the authoritative record instance with the deleted-records archive context; the new Archived Records browse queries the dedicated deleted-record archive context, supports tagging, Chain/read-only inspection, and bulk Restore to Deleted. Every transition carries the loaded tail and operator for CU-backed optimistic mutation. Advanced visible CEE badge to v31c330.
  Claude 20260802-18: Fixed three real bugs from James's first live test of group detach. (1) "Hub form design could not be loaded": ceeWaitFor's prerequisite check only waited for type==="business" items to have their levelId resolvable in the new tab's model.byId - - type==="view" (added in v31c328) fell through the "!==business" side of that condition and was treated as always-ready, so replay could fire before the Hub tree existed in the fresh tab. Extended the check to cover both types. (2) "I only see 1 window": ceeInstallGroupToolbar's Cascade reused window.cascadeBrowses, which forces every window up to a ~560x380 minimum tuned for the main workspace's large business-browse windows - - two compact 520x480 view windows staggered only 24px apart at that forced size, in a smaller detached-tab viewport, meant near-total overlap; combined with bug (1) making both windows show identical red error text, that reads as one window even though both exist. Added ceeCascadeGroupWindows/ceeTileGroupWindows, dedicated to the group toolbar, sized from each window's own current dimensions rather than a forced minimum - - correct for a mixed-type/compact group, and doesn't touch window.cascadeBrowses/tileBrowses, which the main workspace still uses exactly as before. (3) "Close All does the same as Return to Workspace": both ultimately called window.close(), and ceeBootDetachedTab's beforeunload listener unconditionally posts {type:"closed"} regardless of which button triggered it - - and the opener's onmessage handler treats "closed" as a safety-net RESTORE (un-parks the original windows, just without focusing them), which is correct for an accidental/crash close but wrong for a deliberate Close All, whose entire point is to discard the group. Added an explicit {type:"discard"} message posted before window.close(), a window.ceeExplicitDiscard flag so beforeunload skips the restorative "closed" message right after, and ceeDiscardParkedWindows on the opener side to actually remove (not restore) every window sharing that token. Advanced visible CEE badge to v31c330.
-->
<!--
  Claude 20260802-17: Gave View windows the full standard .browse-win header, per James - - they only had title+close before, missing the scope label and maximize/restore toggle every other window in the app carries. toggleBusinessBrowseSize was already fully generic (only touches model.browses[id] and .browse-win/.browse-max-btn DOM, both of which this window now has), so this is a straight reuse, not new maximize logic. Also closed a gap this raised: View windows had no detach checkbox/button at all, since ceeDetachDescriptor didn't recognize them - - meaning they couldn't take part in the group-detach feature just built. Fixed by embedding the record's own data in the descriptor (viewLevelId/viewParentId/viewRecord stored on the window's model entry at creation) rather than just an id, since a detached tab has no original browse window to look the record up from; replay uses the same disposable pseudo-browse-entry trick openDeletedRecordsBrowse's row click already relies on to hand openRecordViewer a levelId with nothing real behind it. The existing MutationObserver-driven button installer picks up View windows automatically now that the descriptor recognizes them - - no separate wiring needed there. Advanced visible CEE badge to v31c328.
-->
<!--
  Claude 20260802-16: Audited the bug report workflow per James - - "make sure bug reports are generated using the bug report workflow in place," specifically for open beta. autoFileBugReport (CU-backed, same save path the manual form uses) exists and works but had exactly one call site before this; everywhere else a failure relies on console-capture plus the person noticing the REPORT BUG toolbar badge and clicking it. That's fine inside the normal workspace, but html.cee-detached-tab hides .topbar entirely - - and REPORT BUG lives in .topbar - - so every failure point in the detach subsystem I just built was invisible with zero recovery path the moment it happened inside a detached tab. Wired autoFileBugReport into the five places that were console-only in that exact blind spot: ceeWaitFor's prerequisite timeout, ceeReplayDetached's missing-bridge and rethrow cases, ceeBootDetachedTab's missing-payload case, and CEE_REPLAY_DETACHED_DESCRIPTOR's per-item replay failure (the single most likely failure point of the new multi-window feature). Toasts in the opener tab (popup blocked, nothing detachable/checked) were left as toasts - - that tab's topbar and REPORT BUG button are fully reachable there, so auto-filing would just be noise for something the person can already see and manually report if it's actually wrong. Advanced visible CEE badge to v31c327.
-->
<!--
  Claude 20260802-15: Added group detach per James: a checkbox in every detachable window's header (next to close), and Detach now checks every window's checkbox before deciding what to send - - none checked detaches just the clicked window (identical to the prior single-window behavior, including the already-detached-just-focus-it shortcut), one or more checked detaches that whole set together into ONE new tab regardless of which window's Detach button was clicked. This is a real architecture change, not a small tweak: the existing replay bridge (CEE_REPLAY_DETACHED_DESCRIPTOR) deliberately forced every detached tab to hold exactly one window, maximized, with every other replayed window hidden - - there was no multi-window layout in a detached tab at all before this. Rewrote it to replay a payload.items array (was a single payload.descriptor) sequentially; exactly one item still gets the EXACT original maximize-and-hide-siblings treatment so that tested path is byte-for-byte unchanged, more than one item skips maximizing entirely, does an initial cascade, and installs Cascade/Tile/Close All in the tab's toolbar next to Return to Workspace - - all three are thin wrappers around the existing window.cascadeBrowses/tileBrowses/closeAllBrowses every ordinary workspace tab already has, since a detached tab is a fresh page load of this same app with its own independent model.browses holding only what was replayed into it, so those functions are already correctly scoped to "just this tab's windows" with nothing new to get wrong there. Close All also closes the tab (window.close()), which the tab's own beforeunload listener turns into a {type:"closed"} broadcast. Also fixed a real latent bug this surfaced: ceeReturnParkedWindow used .some(), which restores only the FIRST window matching a token - - harmless when a token could only ever belong to one window, but a group detach shares one token across the whole set, so on Return/Close the rest would have stayed stranded in detached limbo with no popup left to bring them back. Changed to restore every match. This touches the detach/popout subsystem specifically flagged elsewhere in this changelog as historically fragile (v31c252 restoration, v31c271's private-function boundary fix) - - needs real hands-on testing in an actual browser (popups, BroadcastChannel, multi-tab state) before trusting it; nothing in this sandbox can exercise that. Advanced visible CEE badge to v31c326.
-->
<!--
  Claude 20260802-14: Made View apply to the full tagged set and cascade a window per record, per James - - which first required agreeing View can no longer be a modal: #edit-modal is a shared singleton, only one can ever show, so "several windows open and cascaded as a group" was structurally impossible as a modal regardless of button wiring. Rebuilt openRecordViewer as an independent floating window using the same chrome as Browse windows (.browse-win, makeDraggable, setBrowseActive, renderBrowseChips, closeBusinessBrowse via a lightweight model.browses entry - - the same pattern openDeletedRecordsBrowse already used for a non-Browse floating window), so multiple viewers coexist, each independently draggable/focusable/closeable with its own taskbar chip. View's enablement widened from exactly one tagged record to any count (matching Delete's earlier widening); its click handler now opens one window per tagged record with a cascadeIndex offset from a shared base position (anchored near the triggering browse window, wrapping into a new column every 12). The cascade only ever positions the NEW windows this call creates - - nothing about any other already-open window is touched. Opening the same record twice focuses the existing window instead of duplicating it. Advanced visible CEE badge to v31c325.
-->
<!--
  Claude 20260802-13: Delete Record was gated to exactly one tagged record (hasSelection===selected.length===1), same as View/Edit/Duplicate/Chain - - James tagged two and it correctly, if unhelpfully, disabled. Unlike those, bulk delete on a tagged found-set is completely standard (FileMaker's Delete Found Records) and "Omit Selected" right next to it already allowed any count. Widened Delete/Restore to any tagged count >=1, added a mixed-status guard (declines rather than guessing when the tag set has both active and deleted records), and added softDeleteRecords/restoreBusinessRecords - - one confirm naming the count, one summary toast, one refresh, delegating to the existing single-record functions when there's exactly one so there's a single source of truth for the actual API calls either way. Advanced visible CEE badge to v31c324.
-->
<!--
  Claude 20260802-12: Reverted the reject/clear import policy toggle entirely, per James - - it was solving the wrong layer. The exported cell for an orphaned select is already the raw id, not a label (browseSelectOptionLabel falls back to the raw id when no current option matches, v31c315/316), so matching CSV text against current LABELS on import was never going to succeed for that case; it isn't a label to begin with. ieNormalizeImportValue now resolves a label to its current id when one matches (this also transparently heals a renamed-but-still-present option), and otherwise passes the text through unchanged as the value, trusting it's already a real id. Never rejects a row for this reason anymore. Removed the entire unresolvedSelectPolicy toggle, soft/hard error split, "Valid (cleared)" status, and cleared_fields artifact tracking from iePreviewImport/ieCommitImport - - there's nothing left to toggle. The validation surface for a value the current form design doesn't recognize is recordFieldHtml's "Unrecognized option" placeholder (v31c316), applied once when someone actually opens the record, not duplicated and second-guessed here against a CSV of unknown age. Kept: multiSelectValues() now does the multi-select split/unwrap (handles both plain "Option A, Option B" and JSON-array-wrapped raw-id text like ["id1","id2"] in one path), the Import Preview/Completed layout and raw-value-detail fixes (v31c319/320, still useful for genuine type errors on other fields), and the found-set fix (v31c322). Advanced visible CEE badge to v31c323.
-->
<!--
  Claude 20260802-11: Fixed blank browse after closing Import Completed, unrecoverable by Refresh - - James's report of "should have 450 records, gets none, refresh doesn't help." Root cause: the post-import "affected-record found set" hand-set w.records directly to the created-record filter and set w.findActive=true, but never touched w.foundBaseIds - - the field applyBusinessFindAndSort actually reads once findActive is true (see the real find-commit path, commitBusinessFindOperation). So the one-off render looked right, but findActive stayed stuck true with foundBaseIds left stale/empty afterward: every later refresh (Refresh button -> refreshBusinessBrowse -> applyBusinessFindAndSort) filtered against that stale/empty foundBaseIds and found nothing - - refresh was doing exactly what the corrupted find state told it to, which is why it couldn't fix itself. Separately, when created.length is 0 (e.g. the row(s) were rejected), the old code still switched into find mode showing an intentionally empty set, hiding the real ~450 records for no reason. Fixed both: only enter find mode when something was actually created, and do it through the real found-set fields (foundBaseIds/omittedIds/foundView/findOperation) via applyBusinessFindAndSort so a later refresh recomputes the same, correct found set instead of an orphaned one; when nothing was created, leave whatever refreshBusinessBrowse(id) already rendered (the full current found set) alone. For anyone with a browse already stuck in this state from before this fix: Find menu -> Show All Records (showAllBusinessRecords) resets findActive/foundBaseIds/omittedIds directly and recovers it immediately, no reload needed. Advanced visible CEE badge to v31c322.
-->
<!--
  Claude 20260802-10: Added "Unresolved select policy: reject/clear" to the Import Completed modal. James's next test showed 0 created / 1 rejected with plain "Unknown select label" errors, no "accepted: field cleared" suffix - - meaning that row was rejected during Preview validation, before any records/create call was attempted, not a server-side failure. Most likely cause: the unresolvedSelectPolicy toggle resets to 'reject' on every fresh Preview, so a Commit run without re-selecting "Import the row, clear that field" correctly uses strict rejection. There was no way to see which policy actually ran from the Completed modal alone, which is exactly the kind of ambiguity that led to this back-and-forth. Advanced visible CEE badge to v31c321.
-->
<!--
  Claude 20260802-09: Added failed-row detail to the "Import Completed" modal - - it previously showed only counts ("0 created / 1 rejected/failed") with no way to see why, which is a dead end specifically for a row that showed "Valid (cleared)" in Preview and only failed here: that means the rejection came from the actual records/create call (server-side), not anything the client already validated, and there was no way to see the server's message without reproducing the import. Mirrored the same per-row error detail table Preview already has. Advanced visible CEE badge to v31c320.
-->
<!--
  Claude 20260802-08: Fixed Import Preview layout. Root cause was two independent things: (1) none of .ie-preview-card, its .card-body, or .ie-preview-grid had an explicit min-width:0, so per flexbox's default intrinsic-sizing rules each ancestor refused to shrink below the Details table's natural width - - with a raw rejected value (e.g. a 64-char hex option id) making that width unbounded, the whole modal ballooned instead of scrolling internally, cutting off the policy explainer text and pushing the action row out of the visible area depending on viewport; (2) even where wrapping was allowed, a single unbroken hex string has no space to break a line on, so it forced overflow regardless. Fixed the min-width:0 chain, gave the preview table table-layout:fixed with sensible fixed column widths via <colgroup>, forced word-breaking on its cells, and added ieDisplayTruncate() to shorten very long raw values on screen only (same truncation style already used for option-id chips elsewhere; the downloadable "Export Rejected Rows" CSV still carries the untouched full value). Also turned the action row into a visually distinct pinned footer (top border, consistent spacing) so Cancel/Commit Import read clearly as the modal's confirm/cancel pair regardless of table content. Kept "Commit Import" over a generic "OK" deliberately - - it's the more honest label for an action that writes CU-backed records in a governed system, and Cancel/Commit Import were already functionally the Cancel/OK pair; the actual bug was reachability, not vocabulary. Advanced visible CEE badge to v31c319.
-->
<!--
  Claude 20260802-07: Added an explicit "accept anyway" policy to Import Preview for unresolved select/select(multiple) values, per James: a CSV's age is unknown and the form design could have been edited any number of times since export, so a label mismatch there is often staleness, not bad data, and shouldn't have to sink the whole row. Can't submit the raw label as the value though - - records/create validates option ids server-side (v31c133/134), so a fabricated id would just fail one step later. The only safe "accept anyway" is: explicitly clear that one field (null, or [] for multi_select) and still import the rest of the row - - default stays strict (reject), the person previewing has to opt in via the new per-import toggle. Required fields aren't exempt: the existing "Required value is missing" check still fires against the now-cleared value regardless of policy. ieNormalizeImportValue tags select/multi_select mismatches soft:true so they're distinguishable from real type errors (an integer field rejecting "abc" has no safe substitute and stays hard-rejected either way). Rows accepted with a cleared field show as "Valid (cleared)" in the preview with the specific field named, not silently merged into plain "Valid", and the commit artifact records unresolved_select_policy plus a full cleared_fields list per row - - same audit-trail treatment rejected_rows already got. Advanced visible CEE badge to v31c318.
-->
<!--
  Claude 20260802-06: Replaced Select/Select(multiple) option editing with a per-row identity-preserving editor per James's spec: an explicit ([display, id], [display, id], ...) map where edits to an existing option's display text never change its id ("changed"), new rows get a fresh id on publish ("added"), and removing a row from the working set only ever retires it - - it is never actually deleted from f.options. This is the constraint for the "what happens when a delete happens" question: existing records keep holding a real, resolvable id/label forever; retiring just drops the option out of the list offered for NEW selections (activeSelectOptions() already filtered retired options everywhere else - - the gap was only ever in how options got edited). Removed the destructive mechanism that made this impossible: saveForm previously rebuilt f.options from scratch every publish by diffing an optionsCsv TEXT string against the old array (selectOptionRecordsFromCsv, now deleted) - - unable to tell a rename apart from a delete+add, and silently dropping (not retiring) any option, including already-retired ones, whose current label text wasn't in the CSV box. Added normalizeFieldOptions() as the single in-place normalizer, CEE20.optionAdd/optionLabel/optionRetireToggle/optionBulkAdd as direct per-row handlers (optionBulkAdd is a non-destructive, additive-only replacement for the old CSV-paste habit), and a per-row UI in the Form Designer with an id chip and Retire/Reactivate toggle. Advanced visible CEE badge to v31c317.
-->
<!--
  Claude 20260802-05: Corrected: the 64-char hex option ids in the Import Preview raw values are canonical Chandra ids by design (assignAuthoritativeSchemaIds, see v31c134) - - not a bug, as I'd wrongly implied. The "identical value on two different fields" I flagged was almost certainly two different hashes truncated at the same pixel width by the modal, not a real collision; I don't have grounds to claim they matched. The live issue this surfaced instead: a record's stored (legitimately valid) option id can go stale relative to whichever f.options this browse session has loaded - - the option may have been retired/reallocated since, or the in-memory formDesign may simply predate a later Form Designer save. recordFieldHtml's select/multi_select rendering never gave the browser a matching `selected`/`checked` option for a stale id, so a plain <select> silently defaulted el.value to whichever option happened to be first in the DOM - - and saveBusinessRecord()/tpDuplicateFormValues() read that el.value straight off the DOM on submit. Simply opening a record like this and saving, without ever touching the field, silently rewrote it to an arbitrary option: a real integrity gap in a system where every write should be deliberate and attributable, and worse than the import rejection since it fails silently. Now an unmatched id always renders as an explicit, selected/checked "Unrecognized option (id ...)" placeholder that preserves the real id - - untouched, a re-save keeps the original value byte-for-byte; touched, it's a deliberate, visible replacement. Added a stale-option warning tint (.multi-select-option-stale). Advanced visible CEE badge to v31c316.
-->
<!--
  Claude 20260802-04: Fixed the actual cause of the "Approval Gate Type" round-trip failure that survived v31c314 (confirmed via the new Import Preview raw-value detail: the exported cell was literally the text ["19f99bbb0b6c..."], not a label). This is a different bug from v31c314's stableOptionId fix, which never touches this path. The backend can return a select-family field's stored value shaped like a multi_select value - - a real array, or a JSON-array-encoded string wrapping the true option id - - independent of whether the field's CURRENT declared type is "select" (single) or "multi_select". multiSelectValues() already unwraps that shape correctly and is used for every multi_select read, but every scalar "select" read path (recordFieldHtml's editor dropdown, browseSelectOptionLabel/export display, tpDuplicateNormalizeValues' Duplicate Record semantic comparator) called String(value) directly, which on a wrapping string returns the brackets/quotes verbatim: the editor dropdown silently failed to show the real selection, export emitted literal "[...]" text instead of a label, and re-importing that text matched no option ("Unknown select label"). Added unwrapScalarSelectValue(value), reusing multiSelectValues' parsing and taking the first element, and repointed all three scalar-select read sites at it. Advanced visible CEE badge to v31c315.
-->
<!--
  Claude 20260802-03: Fixed the actual cause of Select/Select(multiple) round-trip failures surfaced by CSV import testing ("Unknown select label" on a value that had just been exported). selectOptionId's positional fallback (used whenever an option object has no explicit .id - - the pre-v133 shape flagged in the v31c138-140 chain-viewer entries below, e.g. Test table 101) was being resolved against TWO different arrays depending on caller: browseOptionLabelMap (export) and ieNormalizeImportValue (import) always indexed the full, unfiltered f.options, while recordFieldHtml (the record editor's actual write path), floodValueFor, testValueForField, and the [CEE Select diagnostic] pre-submit check indexed activeSelectOptions(f), the retired-filtered list. Any field carrying a retired option ahead of an ID-less active one got two different fallback numbers for the same option depending which code path ran, so a value written by the editor could silently fail to resolve on export and then fail to match any label on re-import. Added stableOptionId(f,o,fallbackIndex) as the one true positional-identity source (always resolves against full f.options) and repointed every write-path/diagnostic call site at it; export/import were already correct and are unchanged. Also added the rejected raw value to each Import Preview error line ("[got: \"...\"]") so this class of mismatch is diagnosable from the UI without opening devtools. Advanced visible CEE badge to v31c314.
  ChatGPT 20260802-02: Fixed CSV round-trip for populated multi-select fields. Export renders multiple labels comma-separated, so import now accepts comma, semicolon, or pipe separators. Retains blank select normalization and vertically growing Import Preview from v31c312.
  ChatGPT 20260801-29: Fixed governed CSV Export scope. Tagged row selections are now honored; the dialog defaults to Tagged records when any are checked, also supports Current found set and Current record, and records export_scope, tagged_count, exported_count, and the actual record IDs in the export-job artifact. Advanced build to v31c312.
  ChatGPT 20260801-28: Added governed CSV Import/Export to the current v31c309 business-browse Table menu. Export preserves the current visible found set and sort order; Import is add-only through the ordinary record-create endpoint, always ignores identity columns such as record_id, assigns fresh canonical record IDs/genesis CUs, validates schema values, and CU-attests import/export jobs. Advanced build to v31c310.
-->
<!--
  ChatGPT 20260803-04: Fixed universal Deleted Records bulk Archive routing for Test Plans. testPlansApiBase() is the Test Plan API namespace, not an authority origin; concatenating the records archive route produced /api/enterprise/test-plans/api/enterprise/records/archive. Test Plan archive mutations now post to the current spine origin at /api/enterprise/records/archive. Advanced visible CEE badge to v31c334.
-->
<!--
  ChatGPT 20260803-05: Completed the per-instance Deleted Records archive contract.
  Generic archive requests now carry complete Deleted and Archived authority
  artifacts, preserving the existing Saved Search catalog/Test Plan subject as
  the authority chain. Archived restore identifies the archive entry rather than
  reusing business-record identity. Advanced visible CEE badge to v31c334.
-->
<!--
  ChatGPT 20260804-01: Added explicit Undelete to the universal Deleted Records browse. Tagged deleted objects can now be restored to Active from a window-local Undelete control; Business Record and Saved Search rows expose Undelete directly, and Test Plan rows now restore through the authoritative Test Plan save path with optimistic tail locking. The action refreshes the Deleted Records browse after completion and preserves existing Archive behavior. Advanced visible CEE badge to v31c341.
-->
<!--
  ChatGPT 20260804-02: Corrected Test Plan Undelete in the universal Deleted Records browse. The v31c341 implementation reused the authored Test Plan /save path, which revalidated historical Markdown and rejected authoritative deleted plans that predated the current '# Test Plan: <Title>' contract. Test Plan Undelete now calls the dedicated server-side /optrestore lifecycle endpoint, which restores the current authoritative snapshot without treating lifecycle restoration as an authoring edit. Advanced visible CEE badge to v31c341.
-->
<!DOCTYPE html>
<!--
  ChatGPT 20260801-24: Corrected Duplicate Record runner response identity extraction and semantic value comparison. The create endpoint response is now unwrapped from response.record; subject identity is retained for browse lookup/selection while canonical record_id is retained for 256-bit verification. Draft and persisted-value comparisons normalize booleans, integers, integer lists, selects, and multiselect JSON storage through Form Definition field types. Advanced cee-duplicate-record-fixture-runner to v3 and build to v31c309.
  ChatGPT 20260801-24: Fixed Duplicate Record Test Plan AUTO contract handoff. Fixture creation now retains the analyzed/accepted criterion automation map on the fixture batch; Show Fixture Applied and Execute Automated Tests treat that batch-scoped map as the first runtime authority, with parsed/persisted reconstruction only as fallback. Advanced build to v31c309.
-->
<!--
  ChatGPT 20260801-27: Fixed zero-AUTO recovery for explicit cee-test-plan-md/v1 contracts. Fixture/Run automation maps now reconstruct callable AUTO contracts directly from parsed Verify/Operation/Executor metadata when metadata-first Test Plan history rows omit historical artifact_json. Advanced build to v31c309.
-->
<!--
  ChatGPT 20260801-26: Fixed fixture-to-Run automation restoration at the authority layer. Show Fixture Applied and fixture creation now merge the newest accepted automation-definition contracts from Test Plan history over the latest result snapshot before building the runtime map; Execute also performs an authoritative history recovery if an already-open Run window has zero AUTO contracts. Advanced build to v31c309.
-->
<!--
  ChatGPT 20260801-25: Fixed Execute Automated Tests AUTO-contract discovery after fixture application. Runtime now resolves the canonical Test Plan Run root, recovers the window-scoped persisted automation map, hydrates checklist rows by stable criterion_id when transient data-automation-eligibility attributes are absent or stale, and executes the recovered AUTO set. Advanced build to v31c309.
  ChatGPT 20260801-24: Removed native disabled-state gating from Execute Automated Tests. The Run button now always receives clicks and reports missing AUTO/fixture state through the scoped handler; execution also recovers the newest browser-session fixture batch matching the Run plan subject when window-local binding is absent. Advanced build to v31c309.
-->
<!--
  ChatGPT 20260801-24: Fixed Test Plan Run Execute control re-disablement. Button readiness is now derived from persisted AUTO rows in the originating Run window, fixture identity and automation maps are scoped to that Run window, and AUTO-bearing plans keep Execute clickable even when the fixture is missing so the click produces an explicit corrective message instead of a dead disabled control. Advanced build to v31c309.
-->
<!--
  ChatGPT 20260801-23: Made Duplicate Record denial criteria atomic and executable. Duplicate command gating now honors CU-backed Hub Info record_creation_enabled in addition to active-record and form-readiness rules. Advanced cee-duplicate-record-fixture-runner to v2 with deleted-record and record-creation-prohibited command-state operations and retained restoration evidence. Advanced build to v31c309.
-->
<!--
  ChatGPT 20260801-22: Added the Duplicate Record acceptance harness. Registered cee-duplicate-record-fixture-runner v1 with explicit semantic capabilities and E4 retained-evidence contract; the runner verifies command gating, duplicate draft mode/value isolation, Cancel invariance, real genesis creation, fresh canonical identity, copied field values, parent preservation, active lifecycle, source non-mutation, found-set/sort reconciliation, and new-record selection. Added dispatch and persisted executor-version support. Advanced build to v31c309.
  ChatGPT 20260801-21: Added FileMaker-style Duplicate Record to every business browse. The command is enabled only for one active selected record with a published form, opens the standard new-record editor with a deep-copied field-value snapshot, retains source record/tail provenance in the draft without copying identity or CU history, creates through the normal record genesis endpoint, reapplies the current found set and sort, selects the new record when visible, and reports when the created duplicate falls outside the current found set. Advanced build to v31c309.
-->
<!--
  ChatGPT 20260801-18: Fixed Test Plan Run automation button enablement and checklist scoping. Run initialization now renders and evaluates automation within the specific Test Plan Run window instead of document-global duplicate IDs; the execution button is refreshed after asynchronous checklist initialization and after fixture application. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-20: Preserved the persisted explicit executor during automation support validation and runtime dispatch. Shared verifier names such as command.enabled and command.disabled no longer fall through to the first matching capability catalog entry. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-19: Corrected Record Navigation automation analysis and runner evidence. Explicit criterion metadata is parsed before generic bullets, explicit executor capabilities resolve by declared executor when semantic bindings are broader, atomic verifier contracts bypass prose breadth heuristics, navigation runner v2 verifies restoration and empty command state, and retains E4 execution evidence. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-18: Added FileMaker-style record navigation to every business browse. First/Previous/Next/Last operate over the current visible found-set and sort order, select exactly one canonical record, expose Record n of m position, disable at boundaries, scroll the current row into view, and share one product path with cee-record-navigation-fixture-runner v1. Added explicit automation capabilities and retained evidence. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-17: Fixed Business Records browse refresh failure introduced by the grouped-toolbar revision. updateBrowseChrome now resolves both Show All menu controls from the browse DOM before synchronizing their enabled state, rather than referencing a construction-local variable. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-16: Reorganized the Business Records browse toolbar into compact object-oriented menus. Kept Add, View, Edit, Soft Delete, and Refresh visible; grouped Find/Search/Constrain/Extend under Find, omission membership under Found Set, sort/lifecycle/chain under View, and Hub Info/Form Definition/test-data commands under Table. Preserved existing command handlers and capability gates. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-15: Wired the visible Found Set dropdown button to its menu. The command buttons and automation paths were already functional, but .browse-found-set-btn / .browse-found-set-menu had been omitted from the shared wireMenu initialization, so users could not open the menu. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-14: Corrected explicit Found-Set verifier discovery for Show All and deduplication criteria. Added found-count.equals-total and membership.unique to the registered cee-found-set-fixture-runner capability catalog so explicit criterion contracts no longer fall through to the legacy Find runner. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-13: Corrected Found-Set automation failure routing and setup. Runtime fixture maps now retain criterion verification_spec and semantic bindings; explicit verifier contracts take precedence over legacy Find dispatch. Found-Set runner v6 adds guaranteed zero-result Constrain, omit-before-refresh preservation, and a stateful workflow count verifier. Advanced build to v31c299.
  ChatGPT 20260801-12: Made the Test Plan Run Failed summary a toggle filter and added Copy Failed Evidence. Failed-only mode preserves test grouping, hides unrelated separators and assertions, survives stats refreshes, and exports criterion identity, operation/verifier bindings, parameters, retained execution evidence, and notes. Advanced build to v31c299.
  ChatGPT 20260801-11: Added criterion-level Verify/Operation/Parameters bindings to cee-test-plan-md/v1. The parser, analyzer, accepted automation contracts, capability catalog, and Found-Set runner v5 now resolve explicit atomic verification before legacy prose inference. Existing plans remain backward-compatible. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-10: Upgraded cee-found-set-fixture-runner to v4 with atomic verification capabilities. Automation analysis now binds each found-set criterion to an operation plus verifier (membership, count delta/equality, total invariance, omitted membership, view mode, command state, sort invariance, window isolation, or empty state), persists that verifier in the CU-backed automation contract, and runtime execution evaluates the declared verifier rather than treating command execution as proof. Advanced build to v31c299.
  ChatGPT 20260801-10: Clarified Test Plan automation analysis terminology. The fixture action is now reported separately from the selected minimum Evidence Grade; available evidence distribution is labeled independently; threshold comparison explicitly names the selected E-grade; and the derived AUTO/CANDIDATE/MANUAL result is separated from evidence capability. No scoring, runner execution, or persisted numeric semantics changed. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-07: Replaced prose-first Test Plan runner discovery with semantic capability discovery. The v1 Markdown parser now retains test-level Bindings, criteria inherit those bindings, Analyze Automation resolves them against a registered executor capability catalog, and accepted CU-backed automation contracts persist the semantic binding and resolved capability. Found-Set runner advanced to v3 with legacy prose recognition only as a compatibility fallback. Evidence claims were reduced to the retained evidence the runner actually emits. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-09: Aligned the Found-Set Markdown acceptance plan and upgraded cee-found-set-fixture-runner to v2. The runner now seeds Replace/Constrain/Extend through the same commitBusinessFindOperation product path used by Find, verifies visible status text and empty-found-set recovery where deterministic, and narrows AUTO support so lifecycle, authorization, refresh/persistence, failure injection, command-presentation, pagination, and CU-chain/write-evidence assertions remain CANDIDATE or MANUAL instead of being overclaimed. Advanced build to v31c299.
  ChatGPT 20260801-08: Implemented real pre-Passport FileMaker-style found-set management in every business browse. Added per-window included and omitted membership, Omit Selected, Show Omitted Only, Return to Found Set, Show All, Constrain, Extend, accurate found/total status, command enablement, refresh pruning by canonical record ID, and shared product/automation command paths. Updated cee-found-set-fixture-runner to execute the real browse commands and advanced build to v31c298.
-->
<!--
  ChatGPT 20260801-07: Added callable cee-found-set-fixture-runner v1. The runner exercises deterministic found-set state over the real authoritative browse population, verifies found/total counts, omit and omitted-only membership, Show All, Constrain intersection, Extend union/deduplication, sort membership invariance, browse-window isolation, and no-record-mutation evidence, then restores prior browse state. Automation analysis now routes supported found-set criteria to this registered executor. Advanced build to v31c299.

  ChatGPT 20260801-04: Added callable cee-sort-fixture-runner v1. Automation analysis now distinguishes Sort criteria supported by the registered runner from still-planned Sort adapters. The runner applies the real browse Sort path, independently computes an ordered-record-ID oracle, verifies active sort and selected-record identity where requested, retains structured evidence, and restores prior sort/find/selection state. Advanced build to v31c299.
-->
<!--
  ChatGPT 20260801-06: Added candidate-gap decomposition to Automation Evidence analysis. Candidate criteria are now counted as executor-only, evidence-only, combined executor-and-evidence, or other gaps, with fixture-binding and broad-criterion counts shown separately. Advanced build to v31c299.
  ChatGPT 20260801-05: Added cee-automation-analysis-v6 evidence-capability contracts. Evidence maturity now combines criterion semantics, fixture compatibility, executor-declared evidence production, and Test Plan persistence rather than inferring maturity from criterion prose alone. Planned Sort/lifecycle/persistence executors retain independent maturity assessments while remaining executor-gap CANDIDATEs. Advanced build to v31c299.
  ChatGPT 20260801-04: Replaced threshold-first automation classification with capability-first cee-automation-analysis-v5. Intrinsic automability, executor state, and stable cumulative evidence maturity are now assessed independently; AUTO/CANDIDATE/MANUAL is derived afterward from the selected standard. Added explicit gap codes, capability persistence, richer summary counts, and per-criterion dimensional tooltips. Advanced build to v31c299.
  ChatGPT 20260801-03: Corrected Automation Evidence help presentation. The child overlay now uses a fully opaque theme surface, stronger backdrop isolation, and a dedicated compact evidence table that does not inherit the 640px business-browse minimum width. Text and rows no longer bleed through or overlap. Advanced build to v31c277.
  ChatGPT 20260801-02: Automation Evidence and Classification help now open as modal-child overlays above the Generate Test Plan Fixture dialog. The fixture remains visible and intact beneath the help layer; closing help restores focus to the originating help control. Advanced build to v31c277.
  ChatGPT 20260801-01: Added governed Test Plan automation analysis. The fixture dialog now selects an Automation Evidence Grade (Exploratory through Governed), scores actionability/fixtureability/observability/determinism/authority/evidence per criterion, detects broad compound criteria, produces atomic split proposals, and CU-persists the selected standard, scorecard, rationale, classifier version, and split suggestions with accepted automation contracts. Advanced build to v31c277.

  ChatGPT 20260731-18: Unified Test Plan Markdown import from Details and Test Plan tabs. A valid cee-test-plan-md/v1 file loaded from either Load .md control now replaces the authoritative Test Plan Markdown, imports metadata, and rebuilds assertions. Non-plan Markdown loaded from Details remains Description-only. Advanced to v31c272.

  ChatGPT 20260731-17: Fixed Test Plan Markdown import scoping. Load .md and Rebuild assertions now operate within the originating Test Plan form even when modeless Run windows with duplicate legacy IDs are open. Import also applies Plan ID, title, status, environment, and author from the parsed Markdown before save. Advanced to v31c272.
  ChatGPT 20260731-22: Completed the pre-Passport local Sort Records pass. Sort now edits a draft with true Apply/Cancel isolation; the browse shows the active sort; sortable field types are explicit; quick column-header sorting supports replace/add/toggle semantics; each sort key can control empty placement, natural text comparison, case sensitivity, and select-label versus defined-option order; invalid values and unresolved fields produce diagnostics; record selection remains identity-based. Passport-only bookmarks remain per-principal defaults, preference ownership, shared/private authorization, and role-governed sort persistence. Advanced build to v31c271.
  ChatGPT 20260731-21: Restored Test Plan execution state from real historical artifacts.
  Reopen now uses the Test Plan authority history endpoint instead of treating
  metadata-only chain rows as snapshots; AUTO badges, cumulative Pass/Fail,
  execution evidence, and saved run notes merge by criterion_id.

  ChatGPT 20260731-17: Corrected Test Plan Run statistics and simplified run notes.
  The summary now reports Test Points, Evaluated, Passed, Failed, Remaining,
  and Completion across the full plan instead of a misleading 100% of evaluated.
  Replaced the scrollable per-point notes textarea with a compact inline note
  field beneath the assertion text while preserving steps_json persistence.

  ChatGPT 20260731-21: Corrected Test Plan automation restoration. Run mode now inspects the CU chain instead of treating any latest automation object as authoritative, and merges the newest accepted automation definition over result snapshots by stable criterion_id. Advanced build to v31c271.

  ChatGPT 20260731-20: Preserved accepted automation badges across Test Plan result saves and reopen. Reopen now merges the newest automation-bearing criterion definition with the newest saved execution state by stable criterion_id, rather than allowing a result-only snapshot to erase AUTO/CANDIDATE/MANUAL contracts. Advanced build to v31c271.

  ChatGPT 20260731-19: Restored per-test-point Run Notes in Test Plan Run. Notes are rendered per assertion, serialized in steps_json, merged by stable criterion_id on reopen, and count as saved execution state even when the assertion remains Pending. Advanced build to v31c271.

  ChatGPT 20260731-18: Added draggable column splitters to the universal Deleted Records browse. Column widths are window-local, the table expands to the sum of explicit column widths, and horizontal scrolling preserves access to all lifecycle fields. Advanced build to v31c271.

  ChatGPT 20260731-18: Replaced serialized Test Plan latest/save deletion with one server-side optdelete request. The browser submits only the checked subject IDs as a restricted S-expression, then performs an authoritative index refresh.

  ChatGPT 20260731-17: Added Test Plan soft-delete batch timing. Each selected plan now records latest-read round trip, save round trip, backend phase timing, and total elapsed time; completion logs a console table and reports batch duration in the toast.

  ChatGPT 20260731-01: Fixed Save Results scope initialization.
  saveTestPlan now resolves its Test Plan Run root before synchronizing
  execution evidence into steps_json, eliminating the saveRoot ReferenceError.
  Restored the unrelated Bug Report save handler accidentally altered in c256.

  ChatGPT 20260731-16: Persisted automated execution evidence in Test Plan snapshots.
  Save Results now serializes criterion execution outcome/evidence into steps_json;
  reopening a Test Plan restores and renders the saved evidence beneath each AUTO row.

  ChatGPT 20260731-13: Added a persistent Chain action to the Test Plan Run footer.
  It opens the Universal Chain viewer for the current Test Plan subject,
  anchored to the Run window, so the loaded tail and all prior full-plan
  snapshots are directly inspectable during execution. Advanced to v31c271.

  ChatGPT 20260731-01: Emergency rollback of v31c253 multi-monitor Popout menu.
  Restored the stable v31c252 detach/popout implementation after Chrome could
  hang before DevTools could open. Multi-monitor targeting remains bookmarked
  for a later isolated implementation and acceptance pass.

  ChatGPT 20260731-12: Fixed Execute Automated Tests event and window scoping.
  The button now passes its own element into the runner; checklist, summary,
  result updates, and button state are resolved within that Test Plan Run
  window instead of through duplicate document-level IDs. Added explicit
  pointer-down acknowledgement and non-silent validation telemetry.

  ChatGPT 20260731-09: Fixture-bindable Find automation and fixture-dialog Chain.
  Recognizable deterministic Find criteria now persist as AUTO even when their
  concrete operand is supplied by the applied fixture rather than quoted in the
  Test Plan prose. The fixture runner derives a compatible operator and scalar
  field value, executes the found-set path, records IDs/evidence, and restores
  browse state. Added Chain to Generate Test Plan Fixture for the selected plan.

  ChatGPT 20260731-02: Replaced prose-only AUTO gating with fixture-bound Find execution.
  Accepted explicit Find assertions now persist cee-find-fixture-runner contracts.
  The runner resolves the criterion fixture record, selects a concrete searchable
  field/value, applies a real CEE Find request to the source browse, observes and
  compares the found record IDs, records evidence, and restores prior browse state.


  ChatGPT 20260730-01: Clarified executable automation states.
  Persisted candidate classifications now render as NOT AUTOMATED in the normal
  Test Plan checklist while retaining candidate metadata and explanation.
  Execute Automated Tests is enabled only when an applied fixture has at least
  one persisted AUTO criterion with a runnable fixture binding. Zero-AUTO plans
  remain disabled and explain that candidates require implementation/configuration.

  ChatGPT 20260729-07: Made automated execution observable and explicit.
  Execute Automated Tests now always acknowledges the click, dispatches through
  the persisted executor contract, records pass/fail/error evidence per row,
  and reports unsupported executors instead of silently doing nothing.

  ChatGPT 20260729-06: Persisted Test Plan automation contracts.
  Automation classification is now CU-backed in each criterion's steps_json
  entry rather than sourced from ephemeral fixture/browser state. Analyze
  Automation produces a draft; Accept Automation Analysis appends a Test Plan
  definition CU. Directly opened Test Plans therefore retain stable AUTO,
  CANDIDATE, and MANUAL badges across fixtures and repeated test runs.

  ChatGPT 20260729-05: Compact Test Plan Fixture summary dialog.
  Fixture result windows now size to their content, use a modest maximum
  height, remove the resize handle, and keep actions directly below results.

  ChatGPT 20260729-04: Corrected Test Plan automation authority and footer.
  Analyze Automation now classifies the same pass criteria displayed in the
  Test Plan, keyed by stable criterion_id. The analyzed map travels with the
  fixture batch. Badges support AUTO, CANDIDATE, MANUAL, and UNANALYZED.
  Execute Automated Tests is always present in Run mode and is enabled only
  when an analyzed fixture is applied; Save Results remains separate.

  ChatGPT 20260729-03: Added Go To Instance to the Instance Diagnostics
  dialog footer. It opens the diagnosed instance's configured URL in a new
  browser tab while leaving the diagnostics dialog and CEE workspace intact.

  ChatGPT 20260729-02: Unified Test Plan fixture workflow. Fixture completion now
  offers Show Fixture Applied to Test Plan; the modeless Test Plan stays open
  beside the business-record browse, every assertion displays AUTO or MANUAL,
  Run Automated Steps lives in the Test Plan footer, results appear in-place,
  and Save Results remains the only CU-append action.

  ChatGPT 20260729-01: Test Plan <Run Automated Steps> now waits for the modeless
  Run checklist, applies automation outcomes exactly instead of invoking the
  manual Pass/Fail toggle, reports changed versus already-matching assertions,
  and displays a persistent automation summary inside the Test Plan Run window.
  Silent zero-execution runs now surface an explicit message and telemetry.

  ChatGPT 20260728-33: Fixed detachable-window scope boundary by exporting controlled workspace chip/focus hooks; detach and return no longer call private main-script functions. Advanced build to v31c271.
  ChatGPT 20260727-32: Corrected the stale instance-bar build badge and currentCeeVersion fallback. Advanced build to v31c271.
  chandra-enterprise-editor.html
  General Reasoning, Inc. - - Proprietary and Confidential
  File version: v107 (2026-07-27)
  ChatGPT 20260727-31: Removed Duplicate and Restore from the Saved Searches form. Search definitions now use New, Save, Delete, View Chain, and Close; deleted searches remain inspectable through lifecycle filters, while restoration is exclusively governed through the universal Deleted Records browse. Advanced labels to v31c218.
  File version: v100 (2026-07-27)
  ChatGPT 20260727-30: Added a row-level Chain action to every object in the universal Deleted Records browse. Business Record rows open the standard Universal Chain viewer at the record subject on its authoritative worker; Saved Search rows open the same viewer at the Hub saved-search catalog subject. Restore remains available beside Chain. Advanced labels to v31c218.
  File version: v105 (2026-07-27)
  ChatGPT 20260727-29: Added soft-deleted Saved Search definitions to the universal Deleted Records browse. Saved Searches are discovered from per-Hub CU-backed catalogs, shown with type-aware lifecycle metadata, inspectable read-only with chain access, and restorable through optimistic catalog-tail saves. Advanced labels to v31c218.
  File version: v104 (2026-07-27)
  ChatGPT 20260727-28: Saved Searches lifecycle refresh now removes a soft-deleted search immediately from the Active list and clears its detail selection; restored searches likewise disappear from Deleted view. Added lifecycle-view selection reconciliation after save and lifecycle-filter changes. Advanced labels to v31c218.
  File version: v102 (2026-07-27)
  ChatGPT 20260727-26: Moved the Saved Searches CRUD/action toolbar from the top of the manager to a fixed footer at the bottom of the right detail pane. New, Save, Duplicate, Delete, Restore, View Chain, and Close now remain adjacent to the edited search while the detail body scrolls independently. Advanced all visible, diagnostic, fallback, and debug labels to v31c218.
  File version: v101 (2026-07-27)
  ChatGPT 20260727-26: Separated Find execution claims from local planner classification. Criteria now persist only canonical field identity, operator, and semantic values; index capability is derived at render/plan time and cannot rewrite the execution claim. Added an exact execution-claim snapshot and diagnostic on Perform Find. Advanced all visible, diagnostic, fallback, and debug labels to v31c271.
  ChatGPT 20260727-25: Fixed Saved Search field restoration. Criterion resolution now tests canonical field_id, legacy id, stored field reference, and field_name independently instead of allowing a stale field_id to suppress all fallback identities. Added explicit resolver diagnostics when a saved field cannot be matched. Advanced all visible, diagnostic, fallback, and debug labels to v31c218.
  File version: v100 (2026-07-27)
  ChatGPT 20260727-25: Fixed Saved Search criterion persistence by synchronizing detail controls into the draft on every input/change rather than waiting for Save or structural rerenders. Added structured catalog load, criterion capture, pre-save, post-save, and row-reload diagnostics. Loaded searches are normalized before display so canonical field IDs/operators/values repopulate reliably. Advanced visible, diagnostic, fallback, and debug labels to v31c218.
  File version: v100 (2026-07-27)
  ChatGPT 20260727-24: Carried configurable boolean display labels into Saved Searches while preserving canonical boolean semantics. Search operators now display field-specific labels (True/False, Yes/No, On/Off, Enabled/Disabled), saved criteria normalize legacy label-shaped values, persist canonical true/false, and execute independently of display labels. Business-record submission now emits JSON booleans rather than label strings. Advanced visible, diagnostic, fallback, and debug labels to v31c218.
  File version: v99 (2026-07-27)
  ChatGPT 20260727-23: Added configurable boolean display labels to Form Designer and business-record rendering. Boolean fields now carry a display mode (True/False, Yes/No, On/Off, Enabled/Disabled) while stored values remain canonical booleans. Form Designer exposes the setting per boolean field, the type picker now reads Boolean, browse/read-only rendering honors the selected labels, and record editors render the configured labels. Advanced all visible, diagnostic, fallback, and debug labels to v31c218.
  File version: v98 (2026-07-27)
  ChatGPT 20260727-22: Fixed Saved Searches manager button-state updates after removing the toolbar Execute control. updateButtons now null-guards all optional toolbar controls, eliminating the ss-execute null dereference on open, row selection, and criterion changes. Advanced all visible, diagnostic, fallback, and debug labels to v31c218.
  ChatGPT 20260727-21: Saved Searches toolbar actions moved to the right beside Close. Removed the selected-search Execute action; saved searches execute only from their list-row Execute button, so unsaved drafts must be saved before execution. Advanced all visible, diagnostic, fallback, and debug labels to v31c218.
  ChatGPT 20260727-20: Modal-launched MDI windows may rise above the active modal and receive focus. Universal Chain opened from Saved Searches or another modal is marked as a modal child, remains above the modal backdrop while active, and returns focus to the originating modal when closed. Unrelated MDI windows remain behind the modal. Advanced all visible, diagnostic, fallback, and debug labels to v31c218.
  File version: v91 (2026-07-27)
  ChatGPT 20260727-19: Consolidated Find and Modify Find into one toolbar Find command. Find opens the active criteria when a found set exists and a fresh request otherwise; New Find now lives inside the dialog, clears requests with confirmation, and Show All remains the direct found-set reset. Advanced visible, diagnostic, fallback, and debug labels to v31c218.
  File version: v94 (2026-07-27)
  ChatGPT 20260727-18: Wired the Find Records question-mark controls to real contextual help popovers for Find Mode, request logic, field/index capability, operator semantics, and criterion values. Advanced all visible, diagnostic, fallback, and debug labels to v31c203.
  File version: v93 (2026-07-27)
  ChatGPT 20260727-17: Refined FileMaker Find usability. Added labeled Field/Operator/Value columns, wider value controls, clearer criterion spacing, plain-language index-capability guidance, and contextual help/tooltips throughout requests and actions. Advanced visible, diagnostic, fallback, and debug labels to v31c203.
  File version: v91 (2026-07-27)
  ChatGPT 20260727-16: Restored native resize grippers on tiled MDI windows while retaining bounded Tile geometry. Tiled windows keep zeroed freeform minimums, but resize remains enabled; per-window max-width/max-height are set from the window's tiled origin to the work-surface edge, preventing manual resize from escaping the right or bottom boundary. Leaving Tile clears those temporary bounds. Advanced all visible, diagnostic, fallback, and debug labels to v31c200.
  File version: v91 (2026-07-27)
  ChatGPT 20260727-15: Corrected MDI Tile geometry. Tiled windows now opt out of the normal 360px/220px freeform minimums, use bounded cells with consistent gutters, and clamp the final row/column to the actual MDI work surface so no rightmost or bottom window can extend outside the workspace. Advanced all visible, diagnostic, fallback, and debug labels to v31c199.
  File version: v91 (2026-07-27)
  ChatGPT 20260727-15: Corrected Find criteria layout after the help pass. Field capability metadata now stays beneath the field selector, criterion columns fit the modal work width without clipping, explanatory text no longer collapses into a narrow vertical strip, and remove controls remain visible. Advanced all visible, diagnostic, fallback, and debug labels to v31c203.
  File version: v91 (2026-07-27)
  ChatGPT 20260727-15: Replaced the transient Find entry with a CU-backed Saved Searches manager. The resizable split modal lists searches on the left and edits details/requests on the right; supports New, Save, Duplicate, Execute, soft Delete/Restore, View Chain, canonical field/option metadata, and optimistic-tail catalog appends. Advanced all visible, diagnostic, fallback, and debug labels to v31c218.
  File version: v91 (2026-07-27)
  ChatGPT 20260727-21: Generalized modal-authorized MDI launch inheritance. Universal Chain descendants such as CU Detail now open as modeless MDI windows above the originating modal, inherit authorization through the opener chain, receive focus, and return focus to their immediate opener when closed. Advanced all visible, diagnostic, fallback, and debug labels to v31c218.
  File version: v90 (2026-07-27)
  ChatGPT 20260727-15: Hardened Test Plan form startup. The intended Details/Plan tab is active in initial markup and selected before Markdown/checklist initialization; initialization failures are logged without blanking the form. Advanced build to v31c219.
  ChatGPT 20260727-14: Test Plan Run is now a modeless MDI child in the right/lower workspace while New/Edit remain modal. Run participates in z-order, cascade, tile, maximize, restore, resize, and drag behavior; Save Results appends without closing; close guards unsaved changes. Cascade/tile now restore maximized windows and update the Maximize/Restore icon state for business-record and Run windows. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v89 (2026-07-27)
  ChatGPT 20260727-13: Removed the inherited 280px Test Steps max-height and completed the split-pane height chain. The checklist now flexes through the full Test Plan tab and workspace height instead of stopping at its legacy browse limit. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v88 (2026-07-27)
  ChatGPT 20260727-12: Ensured the Test Steps pane and checklist surface always stretch to fill the full split-workspace height, including when only a small number of assertions are present. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v87 (2026-07-27)
  ChatGPT 20260727-11: Reorganized the Test Plan form into Details and Test Plan tabs. The Test Plan tab uses a resizable Markdown/Steps split workspace, Source navigation remains in-context, Run opens on Test Plan, Edit opens on Details, and Save/Cancel remain in a persistent footer. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v86 (2026-07-27)
  ChatGPT 20260727-10: Added Test Plan source navigation. Each test separator now has a Source button that switches the authoritative Test Plan Markdown editor to source mode, finds the matching ## Test heading in the current unsaved Markdown, selects it, and scrolls both the editor and textarea to that test. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v85 (2026-07-27)
  ChatGPT 20260727-09: Universal Chain display timestamps now derive exclusively from the UUIDv7 portion of the CU identity, including canonical routed 256-bit CU IDs. Removed reliance on separately returned published_at/created_at chronology fields. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v84 (2026-07-27)
  ChatGPT 20260727-08: Replaced Test Plan Chain eager full-artifact rendering with a metadata-only row browse. Each CU row has a Detail action that retrieves one artifact and opens a dedicated read-only Test Plan form with CU identity, plan fields, Markdown, assertion results, notes, and optional raw JSON. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v84 (2026-07-27)
  ChatGPT 20260727-08: Promoted Chain into a universal metadata-first CEE viewer. Test Plans, Bug Reports, Help Contexts, business records, Hub Info, and Form Definition now open one shared compact CU browse and fetch only the selected CU artifact for Detail. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v83 (2026-07-27)
  ChatGPT 20260727-07: Test Plan Open now uses evaluated assertion state from the authoritative latest artifact without an unconditional full-chain request; full-chain restoration is retained only as a fallback when the latest artifact has no evaluated decisions. Added separate Test Plan Chain round-trip and decode/render timing telemetry. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v82 (2026-07-27)
  ChatGPT 20260727-06: Added Test Plan server/browser performance timing instrumentation. Browser console now reports open/save preparation, HTTP round-trip, render, restore, payload, and total timings. Advanced all visible, diagnostic, fallback, and debug labels to v31c198.
  File version: v81 (2026-07-27)
  ChatGPT 20260727-05: Reduced Test Plan open work by avoiding unconditional full-chain restoration when the latest artifact already contains saved assertion state, and prepared lightweight result-CU handling. Advanced badges to v31c188.
  File version: v80 (2026-07-27)
  ChatGPT 20260727-04: Test Plan Plan-ID synchronization fix. The authoritative form Plan ID is now written into Markdown Metadata before validation/save, preventing imported or renamed plans from failing with a Markdown/submitted plan_id mismatch. Advanced badges to v31c187.
  ChatGPT 20260727-03: Test Plans responsiveness and grouping pass. Existing Test Plans windows render cached rows immediately instead of forcing an index reload; saves close and update the browse optimistically without waiting for a full index rescan; assertion rows now have a stronger separator at each test boundary. Advanced badges to v31c187.
  ChatGPT 20260727-02: Restored the Test Plans browse Run action. Run loads the authoritative plan and newest saved assertion-results CU, opens the execution form, and moves directly to the assertions panel. Advanced badges to v31c184.
  File version: v79 (2026-07-27)
  ChatGPT 20260727-01: Restored Test Plan execution state on reopen. Opening a plan now scans the CU chain for the newest saved assertion-results artifact, merges Pass/Fail state by criterion_id, and resumes prior work while retaining the authoritative latest tail for optimistic locking. Advanced badges to v31c183.
  File version: v78 (2026-07-26)
  ChatGPT 20260726-15: Corrected Test Plan terminology and run statistics. The interactive rows are Pass/Fail assertions, not procedural steps; the run panel now reports separate Test, Step, and Assertion counts plus evaluated/pass/fail metrics. Renamed the Markdown field and rebuild/load guidance accordingly. Advanced badges to v31c182.
  File version: v77 (2026-07-26)
  ChatGPT 20260726-14: Codified CEE Test Plan Markdown v1. Test Plans now parse one test per `## Test <ID>: <Title>`, numbered actions only under `### Steps`, and interactive assertions only under `### Pass Criteria`. Added deterministic validation, structured plan_json persistence, criterion identity/result preservation, and v1-only save gating. Advanced badges to v31c181.
  File version: v76 (2026-07-26)
   ChatGPT 20260726-03: Test Plans Updated timestamps now derive from the latest CU identity. The decoder accepts canonical 256-bit routed CU material ([instance 128][UUIDv7 CU 128]) and legacy/local UUIDv7 CU IDs, retains the instance portion when available, and falls back to explicit publication time only when identity decoding is unavailable. Advanced badges to v31c180.
   File version: v75 (2026-07-26)
   ChatGPT 20260726-02: Hardened Test Plan Save + Append CU post-save UX. The save button is now a single-submit type=button with a visible Saving state; successful backend appends explicitly close the shared editor, refresh the Test Plans browse, and then show the standard success toast. Advanced badges to v31c179.
   File version: v74 (2026-07-26)
  ChatGPT 20260726-02: Restored standard Test Plan save behavior. Save + Append CU
  now attempts the optimistic-tail append immediately; removed the inline confirm
  panel and its nonstandard Report Bug action. Success and failure use the normal
  CEE notification path, with failures directing the user to BUG REPORTS when
  documentation is needed. Advanced visible badges to v31c178.
  File version: v73 (2026-07-26)
  Grok 20260726-11: Test Plan Save + Append CU opens a confirm dialog with
  Confirm Save / Report Bug / Cancel before writing the CU. Advanced badges
  to v31c177.
  File version: v72 (2026-07-26)
  Grok 20260726-10: Test Plan step parser — allow optional space after numbered
  markers (1.Load as well as 1. Load); skip standalone PassFail/Pass/Fail lines
  from checklist exports. Advanced badges to v31c176.
  File version: v71 (2026-07-26)
  Grok 20260726-09: Test Plans — set Description/Steps textarea values via JS
  after modal() open. innerHTML injection was truncating multi-line Steps
  content (diagnostic: textarea length=1). Advanced badges to v31c175.
  File version: v70 (2026-07-26)
  Grok 20260726-08: Test Plans — tpGetMdValue no longer lets mdSyncFromRender
  clobber a populated Steps textarea; force source-mode on open; auto-rebuild
  checklist from seeded steps when the form opens. Advanced badges to v31c174.
  File version: v69 (2026-07-26)
  Grok 20260726-07: Test Plans — ignore markdown-editor placeholder text
  ("Write Markdown here…") so it is not copied Description→Steps or parsed as
  checklist items; seed empty Description/Steps without the ### name stub.
  Advanced badges to v31c173.
  File version: v68 (2026-07-26)
  Grok 20260726-06: Test Plan Rebuild — if Steps is empty but Description has
  content (common after Load .md into Description), auto-copy Description into
  Steps and rebuild the checklist. Advanced badges to v31c172.
  File version: v67 (2026-07-26)
  Grok 20260726-05: Fixed Test Plan Rebuild checklist — sync markdown from
  render mode before parse, broader bullet/number/fallback line matching,
  toast feedback with step count, auto-rebuild after Load .md into Steps.
  Advanced badges to v31c171.
  File version: v66 (2026-07-26)
  Grok 20260726-04: Test Plans — Description .md file picker; Steps parsed into
  an interactive Pass/Fail checklist with covered/pass-rate stats; results
  stored in steps_json on save. Advanced badges to v31c170.
  File version: v65 (2026-07-26)
  Grok 20260726-03: Fixed Test Plan editor to use the shared CEE modal() +
  .field / .br-field-row layout (same contract as Bug Reports) instead of a
  custom overlay with nested label>input markup that broke field rendering.
  Advanced badges and currentCeeVersion() fallback to v31c169.
  File version: v64 (2026-07-26)
  Grok 20260726-02: Added TEST PLANS topbar button (adjacent to BUG REPORTS) and
  CU-backed Test Plans MDI browser wired to /api/enterprise/test-plans/*
  (ent-test-plans-authority.lisp). List / New / Open / Chain / optimistic-tail
  save. Advanced both visible CEE badges and currentCeeVersion() no-badge
  fallback to v31c168.
  File version: v63 (2026-07-26)
  ChatGPT 20260726-01: Synchronized the chassis-design baseline with the completed
  Phase 1 Find/Sort and Form Designer index-contract work, advanced both visible
  CEE version badges to v31c167, and corrected currentCeeVersion()\'s stale
  no-badge fallback from v31c88 to v31c167. No backend changes.
  File version: v62 (2026-07-25)
  Claude 20260725-13: Reapplied the chassis direction visual pass to this
  functional baseline (Deleted Records, Find Mode/Sort, in-situ Restore,
  etc. through badge v31c165 - - none of that was on the fork the earlier
  v55-v61 chassis work happened on). This entry lands the FINAL converged
  design directly rather than replaying every intermediate step: gunmetal
  chassis frame (.chassis/.glass wrapper, corner cap-screws, brushed
  texture, LED rail) around the app shell; brand-banner as a raised plate
  at fixed 66px height using the same - -np-plate1/- -np-plate2 background
  and - -np-ch/- -np-ent neutral engraved-metal wordmark colors as
  chandra-worker-diagnostics.html and chandra-marshaller.html; theme-aware
  glow fixes on .brand-ch/.tree-row.sel/.tree-row.tier-hdr (a hardcoded
  warm-gold text-shadow is invisible against a light background even when
  the letter color itself switches correctly); light theme given its own
  brushed-aluminum tokens rather than the dark palette inverted; badges get
  a physical LED dot via ::before; buttons get a real pressed state on
  :active; .glass has no hard inset hairline (kept only the soft depth
  shadow). Advanced visible CEE badge to v31c166. All new CSS lives in its
  own <style id="chassis-direction-v62"> block; revert by removing that
  block and the .chassis/.glass wrapper divs at top/bottom of <body>.
  File version: v72 (2026-08-02)
  ChatGPT 20260724-14: Added Copy JSON to the selected cold-start CU evidence pane in Instance Diagnostics. The button copies the exact pretty-printed JSON currently rendered in the pane, with Clipboard API and textarea fallback support. Advanced visible CEE badge to v31c146.
  ChatGPT 20260724-12: Consolidated instance Test actions into a shared Instance Diagnostics modal. The SPINE badge is now an interactive diagnostics control; worker Test buttons open the same modal. The modal shows live health, cold-start uptime, editable CU-backed operational description, registered runtime modules, and a split cold-start chain/CU evidence viewer. Advanced visible CEE badge to v31c144.
  ChatGPT 20260724-12: Fixed Instance Diagnostics integration scope. The v31c144 diagnostics block was appended outside the main CEE closure and therefore could not access closure-private modal/model/postJson/toast/splitter helpers. Diagnostics now owns its modal/render/request helpers, while the main CEE closure passes worker descriptors directly. Advanced visible CEE badge to v31c144.
  ChatGPT 20260724-11: Artifact-history timestamps now fall back to UUIDv7 time embedded in the CU ID when no separate timestamp is returned. The CU banner identifies the timestamp source instead of incorrectly reporting that no timestamp exists. Advanced visible CEE badge to v31c142.
  Claude 20260724-10: Added a CU-specific banner (CU id, operator, published timestamp, tail) to the top of both artifact detail panes in the Hub Info / Form Definition chain viewer. form_design_id, hub_id, and every field_id are stable across all CU versions of the same form - - clicking through chain entries whose identity block never changes made it look like nothing had swapped, even once the default-selection bug (v31c138/140) was fixed. The banner surfaces what's actually version-specific instead. Advanced visible CEE badge to v31c141.
  Claude 20260724-09: Corrected the v31c138 chain-viewer default-selection fix. Live data confirmed spoke-chain returns entries newest-first (new CUs prepend at index 0); none of the observed rows carry a parseable timestamp, so the "no usable timestamp" fallback was firing on every load, and it pointed at entries.length-1 (oldest) instead of 0 (newest) - - exactly backwards, and worse than the plain index-0 behavior it replaced. This produced a real, extended false trail: Test table 101's Form Definition History appeared frozen on its genesis CU across multiple confirmed successful resaves, which read as a Hub-identity mismatch between the Form Designer's writes and the History viewer's reads. There was no mismatch - - the chain was growing correctly the entire time; the viewer was just defaulting to the wrong end of it. Fallback is now 0. Advanced visible CEE badge to v31c140.
  Claude 20260724-08: Added a Copy button above the left (artifact) pane in the Form Definition / Hub Info chain viewer. Copies the currently-selected CU's reconstructed artifact as JSON, with the CU id/operator/timestamp as a leading comment line - - the same "paste it into chat for review" workflow that surfaced the option-ID bug this session. Advanced visible CEE badge to v31c139.
  Claude 20260724-07: Fixed the Hub artifact-history (Form Definition / Hub Info chain) viewer defaulting to array index 0 regardless of chain ordering. If spoke-chain returns entries genesis-first, this silently displayed the ORIGINAL published artifact rather than the current one - - which is exactly what happened investigating Test table 101: real field IDs (field ID allocation was never broken) next to fallback 0/1/2 option IDs (the pre-v133 shape), with a second, unselected, later CU sitting in the same chain list showing the corrected state. The viewer now opens on whichever CU has the latest parseable timestamp, falling back to the last array entry (not the first) only when no CU has a usable one. Advanced visible CEE badge to v31c138.
  Claude 20260724-06: Gave each Add Test Fields (All Types) batch a random per-invocation suffix on every field label/name (test-text-a7f3, test-select-single-a7f3, ...). Every prior batch produced IDENTICAL field names across every Hub it was run on; if backend option/field validation resolves "defined options for this field" by name rather than strictly by (hub_id, field_id), one test Hub's genuinely valid option ID could be checked against a different test Hub's option set and rejected. Flagged for a server-side check regardless, since the same collision could affect any two real Hubs that happen to share a field name. Advanced visible CEE badge to v31c137.
  Claude 20260724-05: Gave the Add Test Fields (All Types) testing utility distinct option labels for its Select (single) vs Select (multiple) fields, removing a possible indexed_name collision if option-label uniqueness is scoped beyond the individual field. Advanced visible CEE badge to v31c136.
  Claude 20260724-04: Added a native date input (type="date") for Date fields in the business-record editor. They previously fell through to the generic free-text input with no format enforcement, which breaks the fixed-width lexicographic ordering a date index depends on. Added isoDateValue() to salvage legacy freeform values already stored under the old input. Advanced visible CEE badge to v31c135.
  Claude 20260724-03: Fixed Select / Select (multiple) values being silently dropped on manual record save. Option IDs are canonical 256-bit Chandra IDs (hex strings) as of v31c133's ordering fix, but saveBusinessRecord still coerced them with Number(), producing NaN, which serializes to null. Values are now kept as the ID strings the option objects actually carry. Advanced visible CEE badge to v31c134.
  Claude 20260724-02: Fixed Select / Select (multiple) option-ID allocation ordering in Form Designer save. assignAuthoritativeSchemaIds ran before optionsCsv was normalized into options[], so CSV-defined select options never received real allocated IDs and fell back to local sequential integers that records/create rejected as undefined options. optionsCsv normalization now runs first. Advanced visible CEE badge to v31c133.
  Claude 20260724-01: Added an Add Test Fields (All Types) testing utility to the Form Designer - - appends one field per supported data type in a single click, each with a default field-help entry, for exercising every render/validation/save path without hand-building fields one at a time. Advanced visible CEE badge to v31c132.
  ChatGPT 20260724-09: Routed restore by canonical 256-bit record ID; matches the record prefix to one loaded authoritative instance before POST.
  ChatGPT 20260724-07: Replaced hierarchical Deleted Records discovery with one status-based query per authoritative instance. All deleted business-record Spokes are returned regardless of table or parent depth. Advanced visible CEE badge to v31c155.
  ChatGPT 20260725-04: Fixed Deleted Records chain routing by retaining the authoritative worker base on each returned record. Added visible deletion ID and formatted deletion timestamp to the universal browse and read-only record metadata. Advanced visible CEE badge to v31c160.
  ChatGPT 20260725-05: Fixed Deleted Records restore routing to use the authoritative source worker retained on the returned row instead of re-inferring authority from record-prefix matches across repeated Level targets. Advanced visible CEE badge to v31c162.
  ChatGPT 20260725-10: Connected Phase 1 Find criteria to the Form Designer index contract without changing execution. Each criterion now persists canonical field_id, field name/type, declared index metadata, and an operator capability classification; Find Mode visibly distinguishes indexed candidates, indexed-plus-filter candidates, and scan-only predicates while continuing to report Query plan: local scan. Sort specifications now use the same canonical field references. Advanced visible CEE badge to v31c165.
  ChatGPT 20260725-09: Added Phase 1 FileMaker-style Find Mode and multi-field Sort to business browses. Criteria are schema-aware, support AND/OR/omit request semantics, operate over the authoritative lifecycle/parent-scoped list, persist through refresh and lifecycle changes, preserve selection by record_id, and honestly report Query plan: local scan. Advanced visible CEE badge to v31c165.
  ChatGPT 20260725-08: Added in-situ Restore to local table browses. Deleted rows now expose a quiet row Restore action, the selected-row lifecycle command switches between Delete and Restore, and both local and universal recovery paths share one authoritative restore function. Advanced visible CEE badge to v31c165.
  ChatGPT 20260725-03: Fixed record chain presentation to accept both spoke-chain response shapes (chain and rows), derive the visible count from the returned entries, and display the available tail token consistently. Advanced visible CEE badge to v31c159.
  ChatGPT 20260725-03: Unified record display labels across browse rows, read-only record views, and chain windows. The exact value shown in the browse Record column now titles both View Record and View Chain; structural Spoke labels remain metadata fallbacks only. Advanced visible CEE badge to v31c159.
  ChatGPT 20260725-02: Refined the read-only record presentation: stable label/value layout, lifecycle badge, collapsible Record Metadata, Latest CU terminology, and a View Chain footer action available from every record viewer. Advanced visible CEE badge to v31c159.
  ChatGPT 20260725-01: Smart browse refresh now preserves selection by canonical record_id, visibly re-highlights the surviving row, and disables every row-specific action whenever no row is visibly highlighted. Advanced visible CEE badge to v31c156.
  ChatGPT 20260724-06: Added diagnostics to the initial universal Deleted Records implementation; superseded by the instance-wide status query in v31c155.
  ChatGPT 20260724-05: Added Active/Deleted/All lifecycle views to every business browse, governed Restore, and a universal Deleted Records browse spanning loaded Levels/tables. Deleted rows open read-only and restore through the authoritative instance. Advanced visible CEE badge to v31c151.
  ChatGPT 20260723-17: Fixed Hub retirement tail resolution. The spoke-chain endpoint returns lifecycle CUs in chain/rows rather than a top-level tail_cu_id; CEE now derives the optimistic-lock token from the newest returned CU while retaining top-level compatibility. Advanced visible CEE badge to v31c131.
  ChatGPT 20260723-16: Implemented Related Tables → Retire Hub. CEE now loads the selected Hub lifecycle tail, confirms the evidence-preserving transition, posts an optimistic-tail-checked retirement request, refreshes Related Tables, and leaves the Hub browsable while the backend prohibits new records. Advanced visible CEE badge to v31c130.
  ChatGPT 20260723-15: Made duplicate-Hub identity resolution non-destructive. When the create endpoint succeeds but the sub-hub catalog does not project a canonical 256-bit Hub ID, CEE now continues with the backend-returned persisted identifier and reports the Hub-ID format as an automated acceptance failure instead of aborting after creation. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-15: Added a quiet per-record chain control to the far right of every business browse row. The control opens that record's own Spoke CU chain, stops row selection/edit propagation, and leaves the existing selected-row toolbar chain action intact. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-14: Fixed Duplicate Table Definition identity issuance. The shared authoritative schema-ID allocator now assigns routed 256-bit IDs to select options as well as forms and fields. Duplicate creation now resolves the persisted 256-bit Hub ID from the sub-hub catalog before initializing Hub Info, saving Form Definition, and running acceptance verification. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-14: Added canonical/local Hub identity compatibility for pre-fix sub-Hubs. CEE now retains local_hub_id from the sub-Hub catalog, reads a legacy local-ID form-design when the canonical 256-bit subject is empty, and republishes that definition once under the canonical HUB-ID::form-design subject before continuing. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-13: Added Copy Results to the Duplicate Table Definition acceptance-results dialog. The copied text includes source, duplicate, and every failed or inconclusive assertion with detail. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-12: Replaced the manual Duplicate Table Definition checklist with automated post-duplication acceptance verification against persisted backend state. Full success produces a brief toast; failed or inconclusive assertions open a detailed results modal. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-11: Made the Duplicate Table Definition acceptance checklist interactive. Checklist boxes are now tester-controlled, do not gate duplication, and can be cleared with Reset checks. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-10: Added a Duplicate Table Definition acceptance-test checklist to the end of the duplication modal. The checklist covers fresh Hub/form/field/option IDs, retired field and option exclusion, and confirmation that records and prior CU history are not copied. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-09: Converted the current-browse Hub Info and Form Definition toolbar actions into dropdowns with Edit and View with Chain commands. Edit remains visible but disabled when the projected edit capability is absent; read-only chain access remains independently available. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-08: Decoupled Hub Info persistence from Form Definition persistence. Saving Hub Info now appends only the hub-info control record; it no longer silently republishes or renames a form design. This prevents legacy level_form_design artifacts from being sent to /api/enterprise/hub/form-design/save during a simple Hub Info save. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-07: Hub Info name is now authoritative for the visible Level line. Saving Hub Info immediately refreshes the spine and open browse titles; tree reload hydrates the canonical Hub's hub-info name before falling back to legacy level-info. Advanced visible CEE badge to v31c129.
  ChatGPT 20260723-05: Removed redundant Level diamonds, removed the instance-row left accent, and made each instance line bold while preserving health and Test controls. Advanced visible CEE badge to v31c115.
  ChatGPT 20260723-03: Simplified the spine hierarchy presentation. Removed the heavy left rail from Level rows and the full-height vertical guides from nested Level containers; retained indentation, disclosure controls, icons, and compact horizontal branch elbows. Instance grouping rows and availability Test controls remain unchanged. Advanced visible CEE badge to v31c114.
  ChatGPT 20260723-02: Removed System Hub control spokes from normal spine navigation and moved Level Info, Table Info, and Form Definition into the active business-browse toolbar. System Hub records remain CU-backed backend artifacts; only their navigation presentation changed.
  ChatGPT 20260723-03: Consolidated Level Info and Table Info browser actions into one contextual Hub Info action. Renamed related-table Hub information and history commands consistently; retained existing backend control records and compatibility paths.
  ChatGPT 20260723-01: Replaced JSON-only Hub chain modals with dedicated split artifact-history inspectors. The left pane reconstructs the selected read-only _hub_info or form_design artifact; the right pane lists selectable CUs. Added a draggable vertical splitter, independent scrolling, field/option IDs, index and retirement evidence, and an explicit single-CU backend notice. Advanced visible CEE badge to v31c113.
  ChatGPT 20260722-07: Restored canonical stable numeric Select option IDs end-to-end. The backend validator correctly validates stored option IDs, not display labels. Form Designer now publishes {id,label,indexed_name,status} option records while preserving existing IDs; record controls display labels but submit IDs; manual Flood and batch test generation also emit IDs. Advanced visible CEE badge to v31c109.
  ChatGPT 20260722-06: Fixed Select option publication format (superseded by v31c109 after backend contract review). Advanced visible CEE badge to v31c98.
  ChatGPT 20260722-05: Surfaced Select options immediately when a field type changes to Select (single/multiple), rebuilt optionsCsv from persisted options on reload, and widened/reflowed the Related Tables pane so its title and controls no longer overlap. Advanced visible CEE badge to v31c97.
  ChatGPT 20260722-04: Increased scrollbar tracks and thumbs to 11px across tree, editor, business browse, modal, and MDI-chip scroll regions; added visible tracks and hover emphasis for easier pointer targeting. Advanced visible CEE badge to v31c96.
  ChatGPT 20260722-03: Fixed Related Tables splitter initialization. The v31c94 initializer was mistakenly called from Help Index instead of openBusinessBrowse, so business browse splitters rendered but had no pointer handlers. The initializer now runs immediately after each business browse is attached to the MDI layer. Advanced visible CEE badge to v31c95.
  ChatGPT 20260722-02: Added a draggable vertical splitter between Related Tables and the record grid. Split width is stored per browse window, clamped to usable bounds, and double-click resets it. Advanced visible CEE badge to v31c94.

  ChatGPT 20260722-01: Completed the existing FileMaker-style related-table workflow without adding a second table abstraction. The Related Hubs + Add action is now labeled Create Table, creates the governed sub-Hub through /api/enterprise/sub-hub/create, registers the returned Hub immediately, and opens its canonical Hub-keyed Form Designer. The first successful form-design publish can then open the new table browse in the selected parent-record context so records can be added through the normal CU-backed path. Advanced visible CEE badge to v31c93.
  ChatGPT 20260721-03: Removed the synthetic /chandra-version.js dependency. CEE now uses the same /api/enterprise/self manifest request to populate the formal instance identity, read-only manifest, and backend BUILD badge. Advanced the visible CEE badge to v31c91.

  ChatGPT 20260721-01: CEE now reads the common /api/enterprise/self instance manifest before loading the spine. The formal conf-owned spine instance name is the prominent instance-bar title; purpose, immutable instance ID, environment, and spine state remain visible as separate context. Advanced the visible CEE badge to v31c90.

  ChatGPT 20260721-02: Corrected local instance identity display to use the conf-authoritative name returned by /api/enterprise/self and added a shared read-only INSTANCE MANIFEST modal. Advanced the visible CEE badge to v31c91.

  ChatGPT 20260720-21: Unified Hub Form Designer nodes are now registered in model.byId before openEditor runs. The prior descriptor route created transient nodes, so delegated field-help and redraw/save handlers looked up the node, found nothing, and returned silently.

  Note on AI-assisted entries: version-history entries marked (claude)
  below - - covering the Form Designer's field-card redesign, the
  persisted-field lock, the derive-from-label change, the Options-row
  fix for multi_select, the Case option, the form-design-read-failure
  balloon/auto-file fix, the Form-Designer/business-record subject
  unification, and the temporary debug button - - were made by an AI
  assistant (Claude, Anthropic) working directly with James over a chat
  session, not hand-written. James directed each change and reviewed the
  output; nothing here was generated autonomously or merged unreviewed.
  This is not a substitute for independent security/correctness review
  before any of it reaches production, particularly the parts touching
  save-time validation.

  ChatGPT 20260720-19: System-spoke detail headings now include the owning Level label for navigation context.

  Version history:
    v41 ChatGPT 20260720-20  Form Designer field-help buttons now use the
                     delegated event handler exclusively; removed the inline
                     onclick route so the Help Context editor opens reliably
                     for primary Hubs and same-/next-Level related Hubs.
  ChatGPT 20260720-13: Unified every _form_design entry path through one public openHubFormDesigner descriptor route. Level-tree business Hubs, next-Level child Hubs, and same-Level sub-Hubs now resolve the same canonical hub_id, owning instance, and Level context before opening the existing editor; load/save no longer infer a sub-Hub form identity from Level placement.
  ChatGPT 20260720-12: Child-Hub Edit Hub is now wired to the existing Hub-keyed _form_design editor instead of opening a placeholder modal. The selected related Hub supplies the canonical hub_id and owning instance; Hub-definition metadata editing remains a separate future operation.
    v37 ChatGPT 20260720-11  Fixed browse column resizing and horizontal scrolling.
                     The browse table now receives an explicit pixel width equal
                     to the sum of its colgroup widths, and that total is
                     recomputed whenever a splitter moves. The record pane and
                     dedicated scroll surface now constrain overflow correctly,
                     so wrapped long-text columns such as Description can be
                     narrowed and the horizontal scrollbar moves the table.
                     Advanced the visible CEE badge to v31c83.

    v36 ChatGPT 20260720-10  Browse-column contract completion: Form Designer
                     now persists show_in_browse, browse_order, browse_width,
                     primary_display, and browse_wrap per field. Business browse
                     applies those settings, renders wrap-capable cells, and adds
                     draggable header splitters for transient column resizing.
                     Splitter widths are window-local until Passport-backed user
                     browse preferences are available. Advanced visible CEE badge
                     to v31c82.
    v35 ChatGPT 20260720-09  Codified schema-driven business-record browse columns.
                     Form-design field labels now define browse headers and
                     record values define cells; the structural Spoke label is
                     no longer presented as a generic Name column. Added
                     show_in_browse/browse_order support with deterministic
                     form-order fallback, retained explicit system columns,
                     and advanced the visible CEE badge to v31c81.
    v34 ChatGPT 20260720-08  Reworked the business-record workhorse browse: frequent
                     commands moved to a top toolbar; record Chain and Soft Delete
                     moved under More; row action clutter removed; related-Hub
                     navigation gained its own header actions; bottom converted to
                     a quiet found-set/status bar; added read-only View. CEE badge
                     advanced to v31c80.
    v33 (ChatGPT 20260720-07) 2026-07-20  Context Help title layout.
                     Kept the Help title label and editable title on one row;
                     the input now flexes across the remaining width of the
                     same content area used by the Markdown notes editor.
                     Presentation only. CEE badge advanced to v31c79.
    v32 (ChatGPT 20260720-06) 2026-07-20  Help Index canonical-topic fix.
                     Replaced title-only duplicate suppression with stable
                     semantic alias resolution. Static registry guidance for
                     a form field or Level Information field now aliases to
                     the authoritative dynamic Help Context by context type +
                     field_id; a conservative normalized-title fallback is
                     used only when registry metadata is absent and produces
                     exactly one dynamic candidate. Selection, latest-read,
                     chain, and Save all use the canonical context_id, so
                     editing a legacy/static row updates the existing field
                     Help Context instead of creating a parallel record.
                     Static default guidance may still supplement an otherwise
                     empty canonical topic. CEE badge advanced to v31c78.
    v31 (ChatGPT 20260720-05) 2026-07-20  Fixed Form Designer lookup of
                     persisted custom field help. Help Context recovery had
                     required an exact Level + Hub + field-label placement
                     match, so a valid CU visible in Help Index was ignored
                     whenever older metadata carried a missing or superseded
                     form_design_id/hub_id. Recovery now treats the persisted
                     authoritative 256-bit field_id as the primary identity;
                     strict placement matching remains only as a legacy
                     fallback when no unique field-id match exists. Advanced
                     CEE badge to v31c77.
    v30 (ChatGPT 20260720-04) 2026-07-20  Fixed Form Designer label-edit
                     handler scope. Generated inline oninput markup called the
                     closure-private deriveIndexedName function directly, so
                     editing a field Label raised "deriveIndexedName is not
                     defined" and stopped the indexed-name preview/update.
                     Added deriveIndexedName to the existing public CEE20
                     interface and routed both inline calls through
                     CEE20.deriveIndexedName. Audited the remaining generated
                     Form Designer inline handlers; they already route through
                     CEE20 or established window globals. Advanced CEE badge
                     to v31c76.
    v29 (ChatGPT 20260720-03) 2026-07-20  Fixed Level Information field help
                     integration. The generated inline buttons were calling
                     closure-private showContextHelp/levelInfoHelpMeta names,
                     causing showContextHelp is not defined at click time.
                     Added a public openLevelInfoHelp entry point and routed
                     all three buttons through it. Also pre-registers Name,
                     Status, and Description as standard dynamic Help Contexts
                     at startup, including their context metadata, so they are
                     visible and customizable in Help Index before any custom
                     Help Context CU has been written. Advanced CEE badge to
                     v31c75.
    v28 (ChatGPT 20260720-02)  Added CU-backed contextual help to the three
                     fixed _level_info fields: Name, Status, and Description.
                     Each uses a stable standard-field context identity
                     (level-info:name/status/description), carries the current
                     Level as placement metadata, and supplies useful default
                     guidance until an organization appends custom help.
                     Generalized the existing context-help presentation and
                     save path to preserve the metadata context_type instead
                     of hardcoding every help record as form_field. Updated the
                     _level_info introductory copy and bumped the visible CEE
                     build badge to v31c74.
    v27 ChatGPT 20260720-01  Fixed business-record custom Field Help lookup.
                     openRecordEditor already had the authoritative hub-keyed
                     form_design and current Level, but called recordFieldHtml
                     with only field and value. recordFieldHtml therefore
                     synthesized a temporary form_design_id and omitted Level/
                     Hub placement, producing a different Help Context subject
                     from the one saved by Form Designer. The renderer now
                     passes the exact loaded form and Level ID, preserving the
                     canonical form_design_id + field_id + level_id + hub_id
                     identity. Bumped visible CEE build badge to v31c73.
    v26 (claude) 2026-07-19  Robustness pass on the Form Designer /
                     business-record-CRUD flow, requested explicitly
                     given how much debugging it took tonight. Three
                     fixes:
                     (1) The CRUD-gate race: Add Record/Edit/Soft Delete
                     started ENABLED in the initial markup and only got
                     disabled after applyFormDesignGate's async check
                     resolved - - a real window where a fast click could
                     slip through before the check completed. Now
                     disabled="disabled" from creation, only enabled if
                     the check confirms a real form exists.
                     (2) Fail-open on read errors: applyFormDesignGate
                     used !!(await businessFormFor(...)), but
                     businessFormFor can return {_read_error:true,...}
                     on a genuine backend failure - - a truthy object,
                     so a read ERROR was incorrectly enabling the CRUD
                     buttons instead of failing closed. Now explicitly
                     checks for _read_error and treats it the same as
                     "no form" for gating purposes (buttons stay
                     disabled), with a distinct message explaining why.
                     (3) Append Form Design CU is now disabled client-
                     side when there are zero fields, matching the new
                     server-side minimum-field guard (ent-crud.lisp v18)
                     - - immediate feedback instead of a round trip to
                     discover the server rejected an empty publish.
                     Verified, not assumed: openRecordEditor already
                     correctly distinguished _read_error from null
                     (built earlier tonight); the raw-JSON "Define Form"
                     dialog already had its own client-side minimum-
                     field check and clean error surfacing - - neither
                     needed changes. Bumped visible CEE build badge to
                     v31c72.
    v25 (claude) 2026-07-19  Found the actual remaining leak, live: with
                     v24 deployed, Form Designer correctly showed empty
                     for a hub with no published _form_design - - but
                     "Add Record" for that SAME hub rendered a full
                     phantom form (Canonical Level Label, Internal/
                     Industry Term, etc. - - the Level's own personality-
                     derived METADATA, PERSONALITY_LEVEL_FORMS, never a
                     business-record schema). Root cause: businessFormFor
                     sent legacy_subject_id on every call; loadSpoke
                     (Form Designer's read) never did. Confirmed in
                     ent-crud.lisp: legacy_subject_id's presence silently
                     triggered crud-promote-legacy-form-design - - a GET
                     request quietly calling publish-cu, materializing
                     whatever sat in the legacy business_form_design_
                     subject_id subject into _form_design with zero
                     human review. Removed legacy_subject_id from this
                     call entirely - - businessFormFor and loadSpoke are
                     now symmetric, both pure reads of whatever was
                     actually, deliberately published. Matching backend
                     fix in ent-crud.lisp v17: the GET handler no longer
                     calls crud-promote-legacy-form-design at all, for
                     any caller, ever - - a read endpoint should not have
                     write side effects regardless of what triggers them.
                     Bumped visible CEE build badge to v31c71.
    v24 (claude) 2026-07-19  Per explicit design direction: the universal
                     contract for every GR product is Form Designer
                     writes _form_design, record editor reads
                     _form_design - - full stop, regardless of personality
                     files, industry context, or anything else. Any code
                     that invents fields on a person's behalf is
                     smothering the fact that no form has actually been
                     designed yet, and does not get softened with a
                     warning - - it gets removed. Two changes:
                     (1) openEditor's form-design branch no longer
                     auto-generates a name/status/description starter
                     when no real form_design exists (v23's approach - -
                     warn but still allow it - - wasn't strict enough).
                     The draft now starts genuinely empty (fields:[]),
                     using drawFormEditor's existing "No fields yet - - use
                     Add Field below" state, unchanged. Nothing can be
                     saved without a person explicitly building it field
                     by field. _is_synthetic_starter and its banner are
                     gone - - nothing left to warn about.
                     (2) Hard gate on business-record CRUD, universal for
                     every Hub: Add Record/Edit/Soft Delete are disabled
                     the moment a browse window opens (applyFormDesignGate,
                     calls businessFormFor once, before any click is
                     possible), not reactively after a click. Re-checked
                     on every Refresh too, since a form_design can be
                     published elsewhere while the window stays open.
                     Viewing the existing record list stays enabled
                     regardless - - inspection isn't blocked, mutation is.
                     openRecordEditor's own existing checks stay in place
                     as a second layer, in case the gate is ever bypassed.
                     Also fixed openEditor's stale description text, which
                     said business-record forms are "seeded from the
                     industry-personality-derived schema" - - directly
                     contradicting this design decision; corrected to
                     describe explicit, unassisted design. Bumped visible
                     CEE build badge to v31c70.
    v23 (claude) 2026-07-19  REAL ROOT CAUSE, finally: openEditor's
                     form-design branch has a fallback - - when
                     artifact.fields isn't a valid non-empty array (no
                     real form_design published yet), it silently
                     substitutes a generic starter template
                     (name/status/description, visually IDENTICAL to a
                     real published form) with zero indication to the
                     person that it's a fallback, not genuine
                     personality-derived content. Confirmed live: a
                     person can click "Append Form Design CU" on this
                     fallback with no warning, and it becomes
                     permanently published, locked, and indistinguishable
                     from real content on every later load - - which is
                     exactly what happened for at least one hub tonight.
                     This was never a case of businessFormFor vs the Form
                     Designer disagreeing (v20's read path was correct
                     the whole time) - - both were consistently reading
                     the SAME now-real-but-originally-fabricated content.
                     Added model.drafts[n.id]._is_synthetic_starter,
                     surfaced as a prominent red warning banner in
                     drawFormEditor whenever this fallback fires, so a
                     person can no longer publish a fabricated starter
                     without knowing that's what they're doing. Does NOT
                     retroactively fix any hub where this already
                     happened - - that content is now genuinely published
                     and needs a real decision (keep it, or retire the
                     fields and redesign), not a code fix. Bumped visible
                     CEE build badge to v31c69.
    v22 (claude) 2026-07-19  Removed v21's temporary "Debug: Dump Level"
                     button and debugDumpLevelFn - - the question it was
                     added to answer is resolved: the "duplicate in a
                     unique index" collision was an orphaned/inconsistent
                     index entry in the acceptance database (confirmed
                     via a temporary read-only endpoint in ent-crud.lisp,
                     since also removed, that queried the live spoke
                     index directly by both subject-id and hub-id and
                     found zero matches despite the unique-index
                     constraint insisting one existed), not a bug in the
                     Form Designer/business-record unification (v20) or
                     the rollback-and-retry fix (ch-module1.lisp,
                     spoke-record-manager.lisp). James reset the affected
                     database. Bumped visible CEE build badge to v31c68.
    v21 (claude) 2026-07-19  TEMPORARY: added a "Debug: Dump Level" button
                     to the "Define Form Required" modal (only) - -
                     debugDumpLevelFn logs the level object to console and
                     directly fetches /api/enterprise/level-system/latest
                     for the legacy business_form_design_subject_id
                     subject, to answer one specific open question:
                     whether that subject actually has content, after a
                     post-v20 test unexpectedly showed "no form design"
                     for a level instead of the crash it showed before.
                     Meant to be removed once that's answered - - not a
                     permanent feature, flagged as such in its own code
                     comment too. Bumped visible CEE build badge to
                     v31c67.
    v20 (claude) 2026-07-18  ROOT CAUSE FIX for the field-help-never-
                     loads bug (v19 only treated the symptom of a
                     related read-failure case): the Form Designer
                     (loadSpoke/save, via level-system/{latest,save}?
                     subject_id=lv.business_form_design_subject_id) and
                     businessFormFor (via hub/form-design/latest?
                     hub_id=...) were reading and writing two entirely
                     different backend subjects for what's supposed to
                     be the same hub's form design. Bridged only by
                     crud-promote-legacy-form-design's ONE-TIME copy
                     (ent-crud.lisp) - - so any edit made through the Form
                     Designer after a hub's first promotion (new fields,
                     type changes, field help associations, everything)
                     was silently invisible to actual business records
                     forever. Field help was just the first symptom
                     noticed, not the actual bug. Fixed by unifying onto
                     the hub-keyed convention: loadSpoke and save() now
                     branch on n.type==="form-design" to read/write
                     /api/enterprise/hub/form-design/{latest,save} with
                     hub_id (via hubIdForLevel) instead of subject_id - -
                     level-info nodes are untouched, still level-system.
                     This required the hub/form-design/save endpoint to
                     actually support optimistic-tail-reject first (it
                     had none at all - - see ent-crud.lisp v13); could not
                     unify onto an endpoint with weaker safety guarantees
                     than what the Form Designer UI already promises
                     ("Loaded tail" display, stale-tail handling). The
                     form-design node's displayed Subject field now shows
                     the true canonical hub-keyed id (hubId+"::form-
                     design") instead of the now-bypassed legacy one.
                     crud-promote-legacy-form-design is left in place
                     deliberately - - it's no longer a bug now that
                     nothing writes to the legacy subject going forward,
                     it's a correct one-time migration for hubs that
                     still only have pre-fix content there. NOT verified:
                     spine-editor.html was not available to check for a
                     parallel dependency on business_form_design_subject_id
                     - - flagged, not assumed clean. Bumped visible CEE
                     build badge to v31c66.
    v19 (claude) 2026-07-18  A Hub form-design read failure (e.g. a
                     backend commit rejecting a duplicate in a unique
                     index) was being swallowed to console.warn only - -
                     businessFormFor returned null on ANY failure, which
                     openRecordEditor treats identically to "this Hub
                     genuinely has no form design yet," so the person saw
                     a misleading "Define Form Required" screen with a
                     Define Form button that could create a SECOND,
                     conflicting form design on top of a hub already in a
                     broken state. Fixed two things: (1) businessFormFor
                     now returns a distinguishable {_read_error:true}
                     sentinel on failure instead of null, and
                     openRecordEditor shows a distinct "Form Design Could
                     Not Be Loaded" screen for it - - no Define Form
                     option, a Retry button instead, closing over the
                     real r via a self-cleaning window[retryFn] rather
                     than trying to serialize an object into an onclick
                     string. (2) Added autoFileBugReport: this failure now
                     shows a toast balloon immediately AND auto-files a
                     real CU-backed bug report via the same
                     bugReportsApiBase()/save endpoint the manual REPORT
                     BUG flow uses, deduped per browser session by
                     kind+context so retrying the same broken hub twice
                     doesn't file two reports. Console warnings/errors
                     were already being captured into the existing
                     CEE_DIAGNOSTICS journal (installDiagnosticCapture's
                     console.warn/error wrapper) for manual promotion via
                     REPORT BUG - - that stays as-is; this adds automatic
                     filing for failures severe enough that waiting for a
                     person to notice isn't good enough, on top of it,
                     not instead of it. Bumped visible CEE build badge to
                     v31c65.
    v18 2026-07-18  Added a Case option (None/UPPERCASE/lowercase/Title
                     Case) to the Form Designer, shown only for
                     type==="text" fields - - solves the same problem
                     srm-indexed-name solves for schema keys, but for
                     record VALUES: an indexed text field with no case
                     rule lets "ABC123"/"abc123"/"Abc123" all land as
                     different index entries for what's the same value.
                     Client (recordFieldHtml): live oninput transform via
                     applyTextCase, for immediate feedback while typing - -
                     UX only, not enforcement. Backend
                     (ent-crud.lisp: crud-coerce-fields/
                     crud-coerce-text-case) is the actual authority,
                     wired into both crud-create-spoke-record and
                     crud-update-spoke-record before validation and before
                     the artifact is built, so this applies regardless of
                     which client hits the API. Deliberately forward-only:
                     coerces values being saved now, never rewrites values
                     already stored under an earlier form-design revision.
                     Retroactive re-casing would also mean rebuilding any
                     indexes built on the old values - - a migration
                     engine, not a coercion function - - bookmarked, not
                     built here. Known rough edge: the live oninput
                     transform resets the input's cursor to the end on
                     every keystroke (rewriting .value does that in every
                     browser) - - fine for short identifier-style fields,
                     annoying for anything long; worth revisiting with
                     manual selection-range preservation if it's used on
                     longer text. Bumped visible CEE build badge to
                     v31c64.
    v17 2026-07-18  Fixed: the Options row in the Form Designer only ever
                     showed for type==="select", never "multi_select" - -
                     so picking "Select (multiple)" gave no way to define
                     its choices at all. Confirmed this wasn't cosmetic:
                     the record editor (recordFieldHtml, ~line 3224/3251)
                     already reads options for both select and
                     multi_select, but saveForm's options-build step
                     (~line 3608) only built f.options for type==="select"
                     and explicitly deleted options/optionsCsv for
                     anything else - - so even a value typed in before
                     switching type away from "select" would be silently
                     stripped on save. Both the display condition and the
                     save-time build now cover multi_select too. Bumped
                     visible CEE build badge to v31c63.
    v16 2026-07-18  HOTFIX: v15's Label field-card markup had a ternary
                     with the closing quote and the ternary colon
                     transposed - - 'rename it.":' instead of the correct
                     'rename it."':  - - which let the true-branch string
                     swallow the colon as literal text. That's a syntax
                     error, not a runtime one, so it aborted this entire
                     <script> block before any of it ran - - including
                     window.switchEnvTab's assignment, which is why the
                     browser also reported switchEnvTab as undefined; one
                     root cause, two symptoms. My prior brace-counting
                     sanity check (open/close paren and brace tally) is
                     necessary but not sufficient - - it can't catch a
                     misplaced quote/colon like this since braces stayed
                     balanced throughout. Now actually parsing each
                     <script> block with `new Function(source)` before
                     shipping, which is a real syntax check, not a proxy
                     for one. Bumped visible CEE build badge to v31c62.
    v15 2026-07-18  Form Designer: Indexed name is no longer a hand-typed
                     field. It's now a readonly, live-derived preview
                     (deriveIndexedName - - mirrors the backend's
                     srm-indexed-name char-loop normalization in
                     spoke-record-manager.lisp: lowercase, non-a-z0-9 runs
                     collapse to one hyphen, trimmed) shown next to Label.
                     The persisted-field lock (added in v14) moved from
                     Indexed name to Label accordingly, since Label is now
                     the load-bearing input that determines the schema key
                     - - editing Label on a published field would otherwise
                     silently change its derived key. CEE20.field() and
                     addField() updated to match (guards 'label' instead of
                     'name'; new fields get their name derived from their
                     default label instead of a hardcoded "new_field").
                     This preview is client-side only - - the backend
                     (ent-level-system-save.lisp) is the actual authority
                     on what gets stored; see that file's own v3 entry for
                     the corresponding server-side enforcement. Bumped
                     visible CEE build badge to v31c61.
    v14 2026-07-18  Form Designer: Indexed name is now locked (readonly,
                     with an inline explanation) once a field's field_id
                     appears in _persisted_field_ids - - i.e. once it's part
                     of a published form_design and existing business
                     records may already be keyed on that name.
                     _persisted_field_ids already existed (used by
                     removeField to decide retire-vs-delete) but nothing
                     previously stopped CEE20.field(...,'name',...) from
                     renaming a live schema key out from under existing
                     records. Locked at both layers: the rendered input is
                     readonly, and CEE20.field() itself now refuses a name
                     change on a persisted field_id regardless of call path
                     (defense in depth, not just a UI affordance). To rename
                     a published field, retire it (×) and add a new one - -
                     matches the retire/re-add pattern removeField already
                     uses, rather than inventing a new interaction. Bumped
                     visible CEE build badge to v31c60.
    v13 2026-07-18  diagnosticContext() had its own hardcoded version:'v31c50'
                     literal, independent of the visible CEE build badge and
                     already three bumps stale. It now calls the existing
                     currentCeeVersion() helper (reads #cee-build-badge live,
                     same helper bug-report submission already used) instead
                     of carrying a second literal that has to be remembered
                     on every badge bump. currentCeeVersion()'s own no-badge
                     fallback literal updated v31c50 -> v31c59 to match.
    v12 2026-07-18  Form Designer (_form_design editor / drawFormEditor):
                     replaced the 8-column .form-field-row grid + detached
                     header row with a self-labeled field-card layout (name/
                     label/type up top, required/indexed/sort in a meta strip
                     below a divider, index sub-panel and select-options row
                     nested inside the card instead of floating below it).
                     No handler/data-model changes - - presentation only.
                     Also deleted two dead <style> blocks that had never
                     applied: #chandra-form-designer-wide-style targeted
                     .form-design-grid/.modal-window/.floating-window, and
                     #chandra-form-designer-modal-hotfix-v19 targeted
                     .modal.form-designer-modal - - neither class is ever
                     emitted by modal() or drawFormEditor(), so ~163 lines of
                     CSS were dead weight, not the layout actually in effect.
                     Bumped visible CEE build badge to v31c59.
    v11 2026-07-17  Removed the [data-theme="light"] body::before{display:none}
                     rule that was suppressing the scanline overlay (the same
                     repeating-linear-gradient rgba(0,0,0,.04) texture used in
                     spine-editor.html) in light theme. The rule had it
                     backwards: the line is barely visible against the dark
                     theme's near-black background, and was fully invisible
                     in light theme - - the one background it actually shows
                     up clearly against. Dark theme is left alone for now
                     (line renders but is effectively imperceptible there;
                     acceptable per product decision, revisit if dark-theme
                     visibility is wanted later - - would need a light-colored
                     line, not black, since dark-on-dark is not fixable via
                     opacity alone). Bumped visible CEE build badge to v31c58.
    v10 2026-07-16  Added authoritative 256-bit field IDs at Form Design save,
                     immediate field-help CU appends after authoritative field save,
                     strict stale-tail refresh flows without merge semantics,
                     and rich-Markdown editors for narrative text areas.
    v9  2026-07-16  Restored the CU-backed Bug Reports browser and editor,
                     including Acceptance/Production routing and a separate
                     MDI chain-browse window. Updated the visible CEE build
                     badge for this integration.
    v8  2026-07-15  Renamed every "Cancel" button label to "Close" (7
                     instances) for consistency - - every modal across
                     the file now uses the same word, not a mix based on
                     whether it happened to be a form or a read-only
                     view.
    v7  2026-07-15  Three enhancements: (1) every modal now has an
                     explicit Close/Cancel button, not just the header X
                     - - audited all 15 modal() call sites, fixed the ones
                     missing one (an error modal with zero buttons at
                     all, the Chain modal's three states, and all three
                     transient "Loading..." placeholders, which could
                     strand a user if a request hangs). (2) markdown-type
                     fields now use the real rich editor
                     (markdownTextareaHtml) instead of a plain textarea
                     - - required fixing saveBusinessRecord and
                     floodTestData too, since the rich editor's own
                     canonical textarea doesn't carry data-record-field
                     (a shared, page-agnostic component), so those two
                     needed a separate data-md-field lookup path.
                     (3) the field-type dropdown in the older native form
                     designer was stale - - missing markdown/boolean/
                     integer/multi_select/list<integer> entirely, and had
                     number/checkbox which don't match what
                     recordFieldHtml actually checks (integer/boolean).
                     Rebuilt with the real type set and human labels,
                     "Markdown (rich text)" distinct from "Text area
                     (plain)" as asked.
    v6  2026-07-15  Found the real bug behind "no history"/gate-blocked
                     mysteries: businessFormFor built its query with
                     URLSearchParams, which percent-encodes colons
                     (":" -> "%3A") - - legacy subject-ids are full of
                     them ("acceptance::level-13-..."). loadSpoke's
                     already-working call to the same kind of subject-id
                     uses encodeURIComponent instead, which doesn't
                     encode colons. Confirmed via a real side-by-side
                     test (Open Form Designer found real content;
                     businessFormFor reported nothing, same subject-id).
                     Switched to encodeURIComponent to match the proven
                     path. Removed the temporary diagnostic console.log
                     calls added while isolating this.
    v5  2026-07-15  businessFormFor now sends legacy_subject_id
                     (lv.business_form_design_subject_id) alongside
                     hub_id, so a personality-imported form design gets
                     auto-promoted into the new convention (ent-crud.lisp
                     v6) instead of the gate staying blocked with no way
                     to see content that was actually already there.
    v4  2026-07-15  Fixed a stale top-line version label (said v2, the
                     changelog below already had a v3 entry - - caught
                     while bumping for this version). chandraCeeReset
                     AllTestDbs no longer a silent no-op - - maps to
                     chandra-dev:reset-db, a genuinely destructive
                     function; left deliberately unwired (that's a
                     safety decision, not a bug fix) but now says so
                     via toast instead of doing nothing. saveSubHub/
                     fetchChildHubOptions fixed to send real hub_ids
                     (hubIdForLevel) instead of raw tree-node ids for
                     sub-hub create/list - - was inconsistent with every
                     other call in this file and silently defeated the
                     server-side level_number verification added in
                     ent-crud.lisp v5.
    v3  2026-07-15  Frontend rewired onto the new spoke-based record
                     model (ent-crud.lisp v3): recordId/recordTail read
                     the real spoke shape (subject_id, flat tail_hash).
                     New hubIdForLevel() is the one hub_id resolution
                     used everywhere - - business_hub_id (already present
                     on the tree payload, never previously used) for a
                     Level's own Hub, the sub-hub's own .id otherwise.
                     businessFormFor no longer silently falls back to a
                     starter form - - returns null when no form design
                     has been published, and openRecordEditor now
                     prompts a real Define Form dialog
                     (openDefineFormDialog/saveFormDesign) instead of
                     ever inventing one. saveBusinessRecord/
                     softDeleteRecord call the new /api/enterprise/
                     records/* routes; old /api/crud/records/* calls
                     removed from this file entirely (routes still
                     exist server-side, superseded not deleted).
    v2  2026-07-15  Real "Add Hub" (sub-hubs - - genuinely independent
                     child-Hub types, same-Level or next-Level-down
                     placement chosen explicitly, server-enforced
                     no-skip constraint) replacing the placeholder
                     message. childHubOptions is now a real async
                     fetch against /api/enterprise/sub-hub/list,
                     merged with the existing next-Level-down
                     fallback. Added the Child Hubs Help Index topic.
    v1  2026-07-15  Instance-header tree grouping (by instance_id, name/
                     health via /api/health) with auto-fire + manual Test.
                     Environment status tabs (Acceptance/Production) with
                     live tree-swap. Real markdown editor (v3, renders by
                     default) ported in from chandra-instance-builder.html
                     - - the "v2" contenteditable version referenced in an
                     earlier comment here was never actually implemented
                     anywhere in the codebase. Working Help Index window
                     + fixed (previously no-op) openHelpById/closeHelp,
                     both reading the shared chandra-help-registry.js
                     registry. Draggable tree-splitter (CSS existed, no JS
                     ever wired it). <chain> button per business record
                     row, routed through the record's owning instance.
                     Flood Test Data button, context-aware by Level label
                     and field name/type. Fixed business-record CRUD to
                     stop depending on the never-registered schema-spoke
                     system for both write (fields were never captured)
                     and read (fields were never returned).
-->
<html lang="en">
<head>
<!-- ChatGPT 20260805-32: Fixed VA-001 authoritative Form Definition envelope handling. Validation/Auto-entry now extracts fields from direct, artifact, form_design, formDesign, definition, data, record, value, and payload response shapes before capability evaluation and fixture-binding refresh. Advanced badge to v31c385. -->
<!-- ChatGPT 20260805-31: Fixed VA-001 false creation-timestamp schema gap after authoritative refresh. Capability detection now recognizes the append-only ISO timestamp fixture field by stable key or published label when auto-entry metadata is flattened or omitted, while still requiring a compatible datetime/timestamp/text type. Advanced badge to v31c385. -->

<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>CHANDRA · Enterprise — Acceptance</title>
<!-- v18: single A-cache-backed read, hierarchical render, zero polling timers. -->
<link id="chandra-favicon" rel="icon" type="image/png" sizes="32x32" href="data:image/png;base64,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">
<link rel="shortcut icon" type="image/png" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAH0ElEQVR4nMVWa3BV1RX+1trn3HNvuI8khIdEQAhKTAQJmqFR6kB56kBGhTKtg1rFOj4QO9YpM63VjkVbO60tHXF81HEKWgpt5dliQQsKNYOAkVqiOEaSCKZBCMm9yT33nnP2Xv1xkyshRKrO1DWz/+yzz/6+c9a3vrWIVIHgKwz+KsH/vwSIcut/IjDA4S8MDEACH6I1iPtC9iNAzBCtIYHf54Ivhs2A0RCjEU4Uw44UwPjp3H5PWGe+YPw07IJCKDuETPIUiAhgBcjn1CoRjPbBTLjmoVUYNakGgZ/F9l8sR/ObO8BWFCIG1FsFxArGT2F09SzMXv4YLNtBS30dtq1YCjHoR4IIQkT5DTFCAlDvQ4jAdmzMWv44yr8xD25HO1TIgYjgrz+5E017d4IsJ5cCYoYJXIy8bDpqVzyNcKwQxIzyGbW4+oEnwFYPOBGYYEQAExjSfsC9y2ihXmLMCqLTmFB7My6ZswBdJ9oAIgQZF0yEmfc/BrsgDhMEuRQQMSABzp9Ug1BkELpOtkFZNjKd7Rg5uQZ2OIZsVycEgNaGHYe9i8cmmq6oKjqSzWgr64va8trxyzuTflQgZIdJNEDMDD/j5oVHrBD4WVghB8wWIKavBrKpJFQoBBEDEwRQjgO/OwWdTYsYlywnIYvmlrx+56LRDXUHT5X8+/1kkRDBUgi2/OayF95pTMVXrWupafigawwAo0IhZisHYYIAIgbRkmF479Ut8DMpkLJ6NJDPWQizlv8SlXMWQntZZLqTCEfjaNr/Bva/uFJum3B43ciy0f6Sh96+TmuKKotz+QBBtO9VTyhpXLti/Lb53z9YW/rtx8dNnDFTkm2t5MQSCMcSUHYIDds34G8P35XXVV6EIIIEHth2ULXgFoQKomg9dACFI8fK1CX3B4tH1f1l5c9fqFi7Zs/EmktjuO/mMkwujxvPF/iBwfObjvKvVzciNqw0vf6peRsOl95atX1HQ8Urj9whwyuq6fxLpyDblUL9S8/DBD5I2cDpVXC6ekWne3cMAFo4Y8Tue368pOX3+geL428+It+r2EOJIcORTLlg0gA7GJoAXtrVbraUruKLhrgts5vv3jhz2eHb0ulsAeAD6PlOVZDHyUH2a0YEViqHbgwsi/XfV1Y+U/vDj25ddNeNoV/Nb6Jkeyc8LwPLDoGtQQjc49Acw5CowSFTpecsPahuLG94ucNVg/647djXLcc2AmIIYLTOkwHOasUCowOI0SJBgMqxkcYD7/slXSf/o6bzJmi3C57noqB4PIZXP4rzp61GcfltCLFGu8sY5+/li/Vu2VnfXTZlYmGrZVNgAk0mCGB00Ad8AAL5bAggmDqp6MN9h9qHsOVYU68ok3TWwLJsDK68B+HBVWCrAIUX3oTI0CkIvG5Ei4ppxlVj6PCRjjE1E4pOhELKN0YG9PNzdkM3o23HZi0icF0fBA2247BjYwAxMEEGABAqLAeMj95zAAduVisRfGYzOSeBrC9KMQsRjBGAVBiB24bOxnUAMdgKQ2fbkWreCLajAAA/EFiKAjejFc7RQgYkYIwwiLHptbbLb64tbTSBxlN/eJcLQ2lojqGzcS2OH3gQHY0v4uM9d8LPJBFxFFqOfGye/XMT5k077+D2vSdGZFw/rCw2X+gPMJO46SDybpMbn3RR5PDGpgoc9KtMSdTAwELnsd04/s6TyLodcGxCJJbAc03TJTQo5l9zZfGRnftPXSg5MQ2YhrOUIdBbisQk2tc0qkRa9qyeuv5n/m/vTWXEvrrpu2ZOdYKcsEM9RojmIx+b55qn4dTUR/mqjmde/WTDA63Lf9e9mFhEjCZSVp/67w2rP3bukPaSOSaABBfMH/Wst+zauye+vf6+H23+2g0v/LPsystG4IpLC5HNavgaeGr9ERbrA6zePOaV8y4Yml5/3iM3KGuZYTvCygkj09kOIgKxBRFzGtwZTthrx5O/uQTMDGJG9bduN9qO89Fnb3nv3ur3d2z+V8G4rbtayz78KDUaIAEoWDR3xP4Z1UXHuts+0tuHrlhcteAmbnj5T4gPLUVseCma9+/GtoeXwhgBKessTnhGQ7pk7kL4GRcggtedwtYH75Cmfa9SLFGcufaqwrpJ5YlPpk0e/EkyrS03o9XLdSdKd9efGlvf0DGeFaH2p09L2dTZlO1KwmiNSKII7/1jK3Y8dh/8rJ/Hy6eAWUF7SVwy71ZUzlmAU8eawKygLBtuqgMt9XuJOSKpVCa8Zsux6Wu2tmJQgXKNgERAGdd3AAYxYIXCiA4rpWxXEtr3QKzQdaINlXOuR+uhery1/gmoUBxGB/014MTi0J4HIgYrCyDAicbhDIrB7TxJZNlgZRljhLvTOtL7nrItIwAZ3ye2QogPK4XR+tMBlADteXBi8T54+TIUMQBZOPp2HTy3G6GCnKmE48VoOfAGPLczlztIziMAEFN+GSMsRoiUBd9Nomnf64gkiqADH9r3YIXC8NxuHK2vA+hTIfYR4ecdTM8aRIDRIAKueehJVMy+Dtrz4Lnd2PzA7Wje9wrYjkGMPksVoGc0D77kaE4M0T7YslF1/XfgRONoeesNHK3fBWXHYUxwGt5ZjCg3JQe5iWUAAzk3iTOHGwLb0fyXfyaB/AXA5wfue0luuCFAjIGY/i2hvxP2xpcCzl/SM4QMHP8FYQXNqvUzCKwAAAAASUVORK5CYII=">
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Michroma&family=JetBrains+Mono:wght@400;500;700&family=DM+Sans:wght@300;400;500;600&display=swap">
<style>
:root{--bg:#01030a;--bg2:#040c18;--bg3:#071220;--bg4:#0d1c30;--border:#0f2035;--border2:#1a3350;--gold:#e0b84a;--gold2:#f5d070;--gold-bg:rgba(224,184,74,.06);--steel:#6ab4d8;--steel-bg:rgba(106,180,216,.06);--steel2:#9dd0ee;--text:#d0dff2;--text2:#4a7098;--text3:#253a55;--green:#3dd68c;--green-bg:rgba(61,214,140,.07);--amber:#e8a020;--amber-bg:rgba(232,160,32,.09);--red:#e85b5b;--red-bg:rgba(232,91,91,.07);--teal:#30c8b0;--teal-bg:rgba(48,200,176,.09);--mono:'JetBrains Mono',monospace;--sans:'DM Sans',sans-serif;--fs:13px;
/* v62 (claude): chassis direction pass, reapplied to this newer functional
   baseline (previous chassis work — v55 through v61 — was done on an
   older fork that didn't have the Deleted Records / Find Mode / Sort work
   below). See chandra-worker-diagnostics.html v6-v9 for the originating
   design, chandra-marshaller.html v14-v16 for the most recent refinements
   (raised nameplate plate, unified 66px height, no hard inset hairline).
   This block reflects the FINAL converged design directly, not the
   intermediate steps it took to get there. */
--gun:#14171d;--gun2:#1c2028;--gun3:#0e1116;--gun-hi:rgba(255,255,255,.07);--gun-lo:rgba(0,0,0,.6);--screw:#0a0c10;--screw-hi:rgba(255,255,255,.14);--brushed:repeating-linear-gradient(100deg,rgba(255,255,255,.012) 0px,rgba(255,255,255,.012) 1px,transparent 1px,transparent 3px);
--led-label:#5b6478;--led-idle:#262c38;
--glow-green:rgba(61,214,140,.65);--glow-green2:rgba(61,214,140,.22);
--glow-gold:rgba(224,184,74,.65);--glow-gold2:rgba(224,184,74,.22);
--glow-steel:rgba(106,180,216,.55);--glow-steel2:rgba(106,180,216,.2);
--glow-amber:rgba(232,160,32,.55);--glow-red:rgba(232,91,91,.55);
--glow-selrow:0 0 12px rgba(224,184,74,.35);--glow-tier:0 0 18px rgba(224,184,74,.25);
--np-ch:#c7d0dc;--np-ch-shadow:0 1px 0 rgba(255,255,255,.05),0 -1px 1px rgba(0,0,0,.55);--np-ent:#5b6478;
--np-plate1:#1a1e26;--np-plate2:#12151b;--np-shadow2:rgba(0,0,0,.5);--np-shadow3:rgba(0,0,0,.4)}
[data-theme="light"]{--bg:#f4f6fa;--bg2:#fff;--bg3:#eef1f7;--bg4:#e2e8f0;--border:#d0d8e8;--border2:#b0bcd0;--gold:#001542;--gold2:#002875;--gold-bg:rgba(0,21,66,.06);--steel:#0a5a8a;--steel-bg:rgba(10,90,138,.07);--text:#0d1a30;--text2:#4a6080;--text3:#8898b4;--green:#1a7a50;--green-bg:rgba(26,122,80,.08);--amber:#8a5200;--amber-bg:rgba(138,82,0,.08);--red:#b03030;--red-bg:rgba(176,48,48,.08);--teal:#0a7060;--teal-bg:rgba(10,112,96,.08);
/* v62: light theme is its own brushed-aluminum material, not the dark
   gunmetal frame inverted — see chandra-worker-diagnostics.html v7 notes,
   and its own bug/fix history for why a straight inversion doesn't work. */
--gun:#cdd3db;--gun2:#e2e6ec;--gun3:#b7bec8;--gun-hi:rgba(255,255,255,.65);--gun-lo:rgba(0,0,0,.16);--screw:#8b93a0;--screw-hi:rgba(255,255,255,.75);--brushed:repeating-linear-gradient(100deg,rgba(0,0,0,.025) 0px,rgba(0,0,0,.025) 1px,transparent 1px,transparent 3px);
--led-label:#4a5468;--led-idle:#aab2bf;
--glow-green:rgba(26,122,80,.55);--glow-green2:rgba(26,122,80,.16);
--glow-gold:rgba(0,21,66,.4);--glow-gold2:rgba(0,21,66,.12);
--glow-steel:rgba(10,90,138,.45);--glow-steel2:rgba(10,90,138,.14);
--glow-amber:rgba(138,82,0,.4);--glow-red:rgba(176,48,48,.4);
--glow-selrow:0 1px 1px rgba(0,0,0,.12);--glow-tier:0 1px 1px rgba(0,0,0,.1);
--np-ch:#20242c;--np-ch-shadow:0 1px 0 rgba(255,255,255,.8),0 -1px 1px rgba(0,0,0,.14);--np-ent:#5a6478;
--np-plate1:#eef1f6;--np-plate2:#dbe1ea;--np-shadow2:rgba(0,0,0,.14);--np-shadow3:rgba(0,0,0,.1)}
/* v31c58 (claude): removed [data-theme="light"] body::before{display:none} --
   was suppressing the scanline overlay in exactly the theme (light) where it's
   actually visible against the background; dark theme left alone for now. */
*,*::before,*::after{box-sizing:border-box;margin:0;padding:0}html,body{height:100%;overflow:hidden}body{font-family:var(--sans);font-size:var(--fs);color:var(--text);background:var(--bg);display:flex;flex-direction:column}body::before{content:'';position:fixed;inset:0;background:repeating-linear-gradient(0deg,rgba(0,0,0,.04) 0,rgba(0,0,0,.04) 1px,transparent 1px,transparent 3px);pointer-events:none;z-index:9000}
.topbar{height:38px;background:var(--bg2);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 14px;gap:0;flex-shrink:0;box-shadow:0 1px 0 rgba(224,184,74,.18),0 2px 12px rgba(0,0,0,.6)}.tb-logo{font-family:var(--mono);font-size:10px;font-weight:700;color:var(--gold);letter-spacing:3px;padding-right:16px;border-right:1px solid var(--border);white-space:nowrap}.tb-center{flex:1;padding:0 16px;font-family:var(--mono);font-size:10px;color:var(--text3);letter-spacing:.5px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.tb-right{display:flex;align-items:center;gap:6px}.tb-action-btn{
  font-family:var(--mono);font-size:10px;font-weight:600;letter-spacing:.7px;
  color:var(--text2);background:transparent !important;border:none !important;border-radius:0;
  box-shadow:none !important;padding:8px 9px;cursor:pointer;white-space:nowrap;
  transition:color .1s ease;position:relative
}
.tb-action-btn::after{
  content:"";position:absolute;left:9px;right:9px;bottom:4px;height:1px;
  background:transparent;transition:background .1s ease
}
.tb-action-btn:hover{color:var(--text);background:transparent !important}
.tb-action-btn:hover::after{background:var(--steel)}
.tb-action-btn:active{color:var(--gold)}
.tb-action-btn:active::after{background:var(--gold)}
.tb-action-btn[onclick*="openSpineEditor"]{color:var(--gold)}
.tb-action-btn[onclick*="openSpineEditor"]:hover{color:var(--gold2)}
.tb-action-btn[onclick*="openSpineEditor"]:hover::after{background:var(--gold)}
.tb-sep{width:1px;height:18px;background:var(--border);margin:0 2px}.icon-btn{background:none;border:1px solid var(--border);border-radius:2px;color:var(--text2);width:24px;height:22px;cursor:pointer;display:flex;align-items:center;justify-content:center;font-size:12px}.icon-btn:hover{border-color:var(--gold);color:var(--gold)}.font-ctrl{display:flex;align-items:center;gap:3px}.fs-disp{font-family:var(--mono);font-size:9px;color:var(--text3);min-width:26px;text-align:center}
.instance-bar{height:44px;background:var(--bg2);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 14px;gap:10px;flex-shrink:0}.instance-title{font-family:var(--mono);font-weight:700;font-size:12px;color:var(--text);letter-spacing:.5px}.instance-meta{font-family:var(--mono);font-size:10px;color:var(--text3);flex:1;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.badge{font-family:var(--mono);font-size:9px;font-weight:700;letter-spacing:.6px;padding:2px 7px;border-radius:2px;display:inline-flex;align-items:center;gap:4px;white-space:nowrap;border:1px solid transparent}.badge.attested{cursor:pointer;background:var(--green-bg);color:var(--green);border-color:rgba(61,214,140,.25)}
.mdi-strip{height:34px;background:var(--bg2);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 10px;gap:2px;flex-shrink:0}.mdi-title{font-family:var(--mono);font-size:10px;color:var(--text3);letter-spacing:.6px;text-transform:uppercase;margin-right:8px;padding-right:10px;border-right:1px solid var(--border)}
/* MDI commands: single-level menu items, not tool chips */
.mdi-strip > .btn{
  font-family:var(--mono);font-size:10px;font-weight:600;letter-spacing:.5px;
  border:none !important;border-radius:0;box-shadow:none !important;
  padding:8px 9px;background:transparent !important;color:var(--text2);
  cursor:pointer;transition:color .1s ease;white-space:nowrap;position:relative
}
.mdi-strip > .btn::after{
  content:"";position:absolute;left:9px;right:9px;bottom:4px;height:1px;
  background:transparent;transition:background .1s ease
}
.mdi-strip > .btn:hover:not(:disabled){color:var(--text);background:transparent !important;border:none !important}
.mdi-strip > .btn:hover:not(:disabled)::after{background:var(--steel)}
.mdi-strip > .btn:active:not(:disabled){color:var(--gold)}
.mdi-strip > .btn:active:not(:disabled)::after{background:var(--gold)}
.mdi-strip > .btn.danger{color:var(--red);background:transparent !important;border:none !important}
.mdi-strip > .btn.danger:hover:not(:disabled){color:var(--red);background:transparent !important}
.mdi-strip > .btn.danger:hover:not(:disabled)::after{background:var(--red)}
.mdi-strip > .btn:disabled{opacity:.4;cursor:default}
.mdi-strip > .btn:disabled::after{display:none}
.mdi-strip .mdi-chips{margin-left:8px;padding-left:10px;border-left:1px solid var(--border)}
.btn{font-family:var(--mono);font-size:10px;border:1px solid var(--border);border-radius:2px;padding:5px 9px;background:var(--bg3);color:var(--text2);cursor:pointer;transition:all .1s;white-space:nowrap;display:inline-flex;align-items:center;gap:.4em}.btn:hover:not(:disabled){border-color:var(--border2);color:var(--text);background:var(--bg4)}.btn.primary{border-color:rgba(201,168,76,.42);color:var(--gold);background:var(--gold-bg)}.btn.danger{border-color:rgba(232,91,91,.35);color:var(--red);background:var(--red-bg)}.btn:disabled{opacity:.75;cursor:not-allowed}.btn .lb-spinner{width:12px;height:12px;border:2px solid currentColor;border-right-color:transparent;border-radius:50%;animation:lb-spin .65s linear infinite;flex-shrink:0}.btn[aria-busy="true"]{pointer-events:none}@keyframes lb-spin{to{transform:rotate(360deg)}}.mdi-chips{display:flex;align-items:center;gap:5px;overflow-x:auto;flex:1;height:100%;padding:4px 0}.mdi-chip{font-family:var(--mono);font-size:10px;max-width:260px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--text2);background:var(--bg3);border:1px solid var(--border);border-radius:2px;padding:3px 8px;cursor:pointer}.mdi-chip:hover,.mdi-chip.active{color:var(--gold);border-color:rgba(201,168,76,.45);background:var(--gold-bg)}
.workspace{flex:1;display:grid;grid-template-columns:minmax(220px,34%) 5px minmax(360px,1fr);overflow:hidden}.left-pane,.right-pane{display:flex;flex-direction:column;overflow:hidden}.left-pane{border-right:1px solid var(--border2)}.brand-banner{margin:10px 10px 12px;height:66px;padding:0 14px;border-radius:6px;display:flex;align-items:center;background:linear-gradient(180deg,var(--np-plate1),var(--np-plate2));box-shadow:inset 0 1px 0 var(--gun-hi),inset 0 -2px 3px var(--np-shadow2),inset 0 0 0 1px var(--np-shadow3);flex-shrink:0}.brand-row{display:flex;align-items:center;gap:12px}.brand-text{display:flex;flex-direction:column;gap:2px}.brand-ch{font-family:'Michroma','JetBrains Mono',monospace;font-size:22px;font-weight:400;letter-spacing:5px;color:var(--np-ch);text-shadow:var(--np-ch-shadow);text-transform:uppercase}.brand-ent{font-family:'Michroma','JetBrains Mono',monospace;font-size:10px;font-weight:400;letter-spacing:8px;color:var(--np-ent);text-transform:uppercase;padding-left:2px}.tree-splitter{width:5px;background:var(--border);cursor:col-resize;position:relative;z-index:20;transition:background .1s}.tree-splitter:hover,.tree-splitter.dragging{background:var(--gold);box-shadow:0 0 8px rgba(224,184,74,.4)}.tree-splitter::after{content:"";position:absolute;top:0;bottom:0;left:2px;width:1px;background:rgba(255,255,255,.06)}.right-pane{position:relative;background:var(--bg)}.pane-hdr{height:30px;background:var(--bg3);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 10px;gap:8px;flex-shrink:0}.pane-tag{font-family:var(--mono);font-size:9px;font-weight:700;letter-spacing:1px;color:var(--teal);background:var(--teal-bg);border:1px solid rgba(48,200,176,.25);padding:2px 6px;border-radius:2px;white-space:nowrap}.pane-title{font-family:var(--mono);font-size:11px;color:var(--text);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;flex:1}.pane-sub{font-family:var(--mono);font-size:10px;color:var(--text3);white-space:nowrap}
.env-tabs{display:flex;border-bottom:1px solid var(--border);background:var(--bg2)}.env-tab{flex:1;font-family:var(--mono);font-weight:700;font-size:10px;letter-spacing:.5px;text-transform:uppercase;color:var(--text3);background:var(--bg3);border:none;border-bottom:2px solid transparent;padding:8px 6px;cursor:pointer;display:flex;align-items:center;justify-content:center;gap:6px}.env-tab:hover{color:var(--text)}.env-tab.active{color:var(--gold);background:var(--bg2);border-bottom-color:var(--gold)}.env-status-pill{font-family:var(--mono);font-size:9px;font-weight:700;letter-spacing:.5px;padding:1px 6px;border-radius:2px;white-space:nowrap}.env-status-pill.yes{background:var(--green-bg);color:var(--green)}.env-status-pill.no{background:var(--bg4);color:var(--text3)}.env-status-body{padding:8px 10px;font-family:var(--mono);font-size:10px;background:var(--bg2);border-bottom:1px solid var(--border);word-break:break-all}
.tree-wrap,.editor-scroll{flex:1;overflow:auto;padding:10px;background:var(--bg)}.tree-wrap,.editor-scroll,.browse-body,.modal-body,.mdi-chips{scrollbar-width:auto;scrollbar-color:var(--border2) var(--bg3)}.tree-wrap::-webkit-scrollbar,.editor-scroll::-webkit-scrollbar,.browse-body::-webkit-scrollbar,.modal-body::-webkit-scrollbar,.mdi-chips::-webkit-scrollbar{width:11px;height:11px}.tree-wrap::-webkit-scrollbar-track,.editor-scroll::-webkit-scrollbar-track,.browse-body::-webkit-scrollbar-track,.modal-body::-webkit-scrollbar-track,.mdi-chips::-webkit-scrollbar-track{background:var(--bg3);border:1px solid var(--border)}.tree-wrap::-webkit-scrollbar-thumb,.editor-scroll::-webkit-scrollbar-thumb,.browse-body::-webkit-scrollbar-thumb,.modal-body::-webkit-scrollbar-thumb,.mdi-chips::-webkit-scrollbar-thumb{background:var(--border2);border:2px solid var(--bg3);border-radius:6px;min-width:28px;min-height:28px}.tree-wrap::-webkit-scrollbar-thumb:hover,.editor-scroll::-webkit-scrollbar-thumb:hover,.browse-body::-webkit-scrollbar-thumb:hover,.modal-body::-webkit-scrollbar-thumb:hover,.mdi-chips::-webkit-scrollbar-thumb:hover{background:var(--steel)}.tree-node{font-family:var(--mono);font-size:inherit;line-height:1.55;user-select:none}.tree-row{display:flex;align-items:center;gap:5px;min-height:24px;border-radius:2px;padding:1px 5px;cursor:pointer;color:var(--text2)}.tree-row:hover{background:var(--bg3);color:var(--text)}.tree-row.sel{background:rgba(224,184,74,.05);color:var(--gold);box-shadow:inset 3px 0 0 var(--gold),inset 0 0 20px rgba(224,184,74,.04);text-shadow:var(--glow-selrow)}.tree-row.tier-hdr{background:linear-gradient(90deg,rgba(224,184,74,.08) 0%,transparent 70%);border-left:2px solid var(--gold);padding-left:7px;color:var(--text);text-shadow:var(--glow-tier)}.tree-row.tier-hdr:hover{background:linear-gradient(90deg,rgba(224,184,74,.13) 0%,transparent 70%)}.twisty{width:12px;color:var(--text3);text-align:center;font-size:10px;flex-shrink:0}.twisty-tier{width:20px;flex-shrink:0;display:inline-flex;align-items:center;justify-content:center}.twisty-tier span{display:inline-block;width:14px;height:14px;line-height:13px;text-align:center;font-size:13px;font-weight:700;border:1px solid var(--border2);border-radius:2px;color:var(--text);background:var(--bg3);cursor:pointer}.tree-icon{width:15px;text-align:center;color:var(--text3);flex-shrink:0}.tree-label{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.tree-count{margin-left:auto;font-size:9px;color:var(--text3);background:var(--bg3);border:1px solid var(--border);border-radius:2px;padding:0 5px}.tree-children{margin-left:20px;border-left:1px solid rgba(106,138,176,.18);padding-left:5px;display:none}.tree-node.open>.tree-children{display:block}.system-spoke .tree-row{color:var(--text3)}.record-group .tree-row{color:var(--gold)}

/* v31c114: hierarchy remains readable through indentation, disclosure arrows,
   icons, and short branch elbows. Avoid full-height rails that visually extend
   through the viewport and make each Level look like a separate lane. */
.tree-row.tier-hdr{
  border-left:0;
  padding-left:5px;
  background:transparent;
  text-shadow:none;
}
.tree-row.tier-hdr:hover{background:var(--bg3)}
.tree-children{
  margin-left:20px;
  border-left:0;
  padding-left:10px;
}
.tree-children>.tree-node>.tree-row{position:relative}
.tree-children>.tree-node>.tree-row::before{
  content:"";
  position:absolute;
  left:-10px;
  top:50%;
  width:8px;
  border-top:1px solid rgba(106,138,176,.24);
  transform:translateY(-.5px);
  pointer-events:none;
}
.card{background:var(--bg2);border:1px solid var(--border);border-radius:4px;margin-bottom:10px;overflow:hidden}.card-hdr{height:30px;background:var(--bg3);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 10px;gap:8px}.card-title{font-family:var(--mono);font-weight:700;font-size:10px;letter-spacing:.7px;text-transform:uppercase;color:var(--gold);flex:1}.card-body{padding:10px}.kv{display:grid;grid-template-columns:145px 1fr;gap:5px 10px;font-family:var(--mono);font-size:inherit;color:var(--text2)}.kv .k{color:var(--text3)}.tail-hash{color:var(--gold);word-break:break-all}.small-muted{font-family:var(--mono);font-size:10px;color:var(--text3);line-height:1.45}.record-view-shell{display:flex;flex-direction:column;gap:10px;min-height:0}.record-view-summary{display:flex;align-items:center;gap:10px;padding:9px 11px;background:var(--bg3);border:1px solid var(--border);border-radius:4px}.record-view-name{font-family:var(--mono);font-weight:700;color:var(--text1);min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.record-lifecycle{font-family:var(--mono);font-size:10px;letter-spacing:.5px;text-transform:uppercase;border:1px solid var(--border);border-radius:999px;padding:3px 8px;color:var(--text2);white-space:nowrap}.record-lifecycle.active{border-color:rgba(84,184,128,.45);color:#63c78f}.record-lifecycle.deleted,.record-lifecycle.deactivated{border-color:rgba(222,101,101,.45);color:#df7777}.record-view-fields{display:grid;grid-template-columns:minmax(150px,190px) minmax(0,1fr);column-gap:18px;row-gap:0;border:1px solid var(--border);border-radius:4px;overflow:hidden;background:var(--bg2)}.record-view-label,.record-view-value{padding:7px 10px;border-bottom:1px solid rgba(120,135,155,.16);font-family:var(--mono);line-height:1.35}.record-view-label{color:var(--text3);background:rgba(255,255,255,.015)}.record-view-value{color:var(--text2);white-space:pre-wrap;overflow-wrap:anywhere}.record-view-fields>*:nth-last-child(-n+2){border-bottom:0}.record-metadata{border:1px solid var(--border);border-radius:4px;background:var(--bg2)}.record-metadata summary{cursor:pointer;padding:8px 10px;font-family:var(--mono);font-size:10px;font-weight:700;letter-spacing:.6px;text-transform:uppercase;color:var(--steel);user-select:none}.record-metadata-grid{display:grid;grid-template-columns:125px minmax(0,1fr);gap:7px 12px;padding:0 10px 10px;font-family:var(--mono);font-size:11px}.record-metadata-key{color:var(--text3)}.record-metadata-value{color:var(--gold);overflow-wrap:anywhere}.record-view-footer{display:flex;justify-content:flex-end;gap:7px;padding-top:2px}@media(max-width:700px){.record-view-fields{grid-template-columns:1fr}.record-view-label{padding-bottom:2px;border-bottom:0}.record-view-value{padding-top:2px}.record-view-fields>*:nth-last-child(-n+2){border-bottom:1px solid rgba(120,135,155,.16)}.record-view-fields>*:last-child{border-bottom:0}}.action-row{display:flex;flex-wrap:wrap;gap:6px;margin-top:10px}
input,select,textarea{font-family:var(--sans);font-size:var(--fs);background:var(--bg3);border:1px solid var(--border);color:var(--text);border-radius:2px;padding:6px 8px;outline:none;min-width:0}
input:focus,select:focus,textarea:focus{border-color:var(--gold)}textarea{min-height:86px;resize:vertical}.form-grid{display:grid;grid-template-columns:1fr 1fr;gap:10px}.field{display:flex;flex-direction:column;gap:4px;min-width:0}.field.full{grid-column:1 / -1}label{font-family:var(--mono);font-size:10px;color:var(--text2);display:flex;align-items:center;gap:5px}.help-dot{font-family:var(--mono);font-size:9px;font-weight:700;border:1px solid rgba(201,168,76,.35);background:var(--gold-bg);color:var(--gold);border-radius:50%;width:16px;height:16px;display:inline-flex;align-items:center;justify-content:center;cursor:pointer;line-height:1;flex-shrink:0}.help-dot:hover{border-color:var(--gold2);color:var(--gold2)}
.mdi-layer{position:absolute;left:0;right:0;top:30px;bottom:0;overflow:auto;pointer-events:none;scrollbar-gutter:stable;overscroll-behavior:contain}.browse-win{position:absolute;background:var(--bg2);border:1px solid var(--border2);border-radius:4px;box-shadow:0 12px 30px rgba(0,0,0,.45);min-width:780px;min-height:280px;width:900px;height:540px;display:flex;flex-direction:column;resize:both;overflow:hidden;pointer-events:auto}.browse-win.active{border-color:rgba(224,184,74,.6);box-shadow:0 16px 52px rgba(0,0,0,.8),0 0 0 1px rgba(224,184,74,.15),0 0 30px rgba(224,184,74,.06)}.browse-hdr{height:32px;background:var(--bg3);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 8px;gap:7px;cursor:move;user-select:none;flex-shrink:0}.browse-title{font-family:var(--mono);font-size:10px;font-weight:700;color:var(--gold);letter-spacing:.4px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;flex:1}.browse-scope{font-family:var(--mono);font-size:9px;color:var(--text3);white-space:nowrap}.browse-close{border:none;background:none;color:var(--text3);font-size:16px;cursor:pointer;padding:1px 4px}.browse-close:hover{color:var(--red)}.browse-tools{height:auto;min-height:56px;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:2px;padding:4px 8px;background:linear-gradient(180deg,var(--gun2) 0%,var(--gun) 55%,var(--gun3) 100%);box-shadow:inset 0 1px 0 var(--gun-hi),inset 0 -2px 0 var(--gun-lo);flex-shrink:0;flex-wrap:wrap}.browse-tools input{height:32px;font-size:12px;flex:1}.browse-body{flex:1;overflow:auto;background:var(--bg);padding:6px}.browse-table{width:100%;border-collapse:collapse;font-family:var(--mono);font-size:inherit;min-width:640px}.browse-table th{position:sticky;top:0;background:var(--bg3);color:var(--text3);font-size:9px;text-transform:uppercase;letter-spacing:.6px;text-align:left;padding:5px;border-bottom:1px solid var(--border);z-index:1}.browse-table td{padding:5px;border-bottom:1px solid rgba(106,138,176,.08);color:var(--text2);white-space:nowrap}.browse-table tr:hover td{background:var(--bg3);color:var(--text)}.row-expander{width:18px;color:var(--gold);cursor:pointer;text-align:center}.status-badge{font-family:var(--mono);font-size:9px;font-weight:700;letter-spacing:.5px;padding:1px 5px;border-radius:2px;display:inline-block}.status-badge.active{background:var(--green-bg);color:var(--green)}.status-badge.suspended{background:var(--amber-bg);color:var(--amber)}.status-badge.retired{background:var(--red-bg);color:var(--red)}.gr-toolbar-mark{width:48px;height:48px;margin-right:8px;flex-shrink:0}.gr-hub-glow{animation:cee-hub-breathe 3.4s ease-in-out infinite}@keyframes cee-hub-breathe{0%,100%{opacity:.55}50%{opacity:1}}@media (prefers-reduced-motion:reduce){.gr-hub-glow{animation:none;opacity:.8}}.toolbar-sep{width:1px;align-self:stretch;background:var(--border2);margin:6px 7px;flex-shrink:0;opacity:.85}
/* v31c350: HAL/SAL speed buttons + dark Michroma labels; sans tooltips for state only */
.icon-toolbar-btn{position:relative;min-width:48px;height:50px;display:inline-flex;flex-direction:column;align-items:center;justify-content:center;gap:2px;background:transparent;border:1px solid transparent;border-radius:3px;cursor:pointer;transition:background .12s ease,border-color .12s ease,box-shadow .12s ease;padding:3px 4px 2px;flex-shrink:0}
.icon-toolbar-btn svg{width:20px;height:20px;stroke:var(--text);fill:none;stroke-width:1.7;stroke-linecap:round;stroke-linejoin:round;transition:stroke .12s ease,filter .12s ease;flex-shrink:0}
.icon-toolbar-btn .icon-toolbar-label{font-family:'Michroma','JetBrains Mono',monospace;font-size:6px;font-weight:400;letter-spacing:.4px;line-height:1.1;text-transform:uppercase;color:var(--text);white-space:nowrap;max-width:70px;overflow:hidden;text-overflow:ellipsis;pointer-events:none}
.icon-toolbar-btn.primary{background:var(--gold-bg);border-color:rgba(224,184,74,.4)}
.icon-toolbar-btn.primary svg{stroke:var(--gold2)}
.icon-toolbar-btn.primary .icon-toolbar-label{color:var(--gold2)}
.icon-toolbar-btn.danger{background:var(--red-bg);border-color:rgba(232,91,91,.35)}
.icon-toolbar-btn.danger svg{stroke:var(--red)}
.icon-toolbar-btn.danger .icon-toolbar-label{color:var(--red)}
.icon-toolbar-btn:hover:not(:disabled){background:var(--steel-bg);border-color:var(--steel)}
.icon-toolbar-btn:hover:not(:disabled) svg{stroke:var(--steel2,var(--steel));filter:drop-shadow(0 0 3px rgba(106,180,216,.45))}
.icon-toolbar-btn:hover:not(:disabled) .icon-toolbar-label{color:var(--text)}
.icon-toolbar-btn.primary:hover:not(:disabled){background:var(--gold-bg);border-color:var(--gold)}
.icon-toolbar-btn.primary:hover:not(:disabled) svg{stroke:var(--gold2);filter:drop-shadow(0 0 3px rgba(224,184,74,.45))}
.icon-toolbar-btn.primary:hover:not(:disabled) .icon-toolbar-label{color:var(--gold2)}
.icon-toolbar-btn.danger:hover:not(:disabled){background:var(--red-bg);border-color:var(--red)}
.icon-toolbar-btn.danger:hover:not(:disabled) svg{stroke:var(--red);filter:drop-shadow(0 0 3px rgba(232,91,91,.45))}
.icon-toolbar-btn.danger:hover:not(:disabled) .icon-toolbar-label{color:var(--red)}
.icon-toolbar-btn:active:not(:disabled){box-shadow:inset 0 1px 3px rgba(0,0,0,.35)}
.icon-toolbar-btn:disabled{cursor:default}
.icon-toolbar-btn:disabled svg{stroke:var(--text3)}
.icon-toolbar-btn:disabled .icon-toolbar-label{color:var(--text3)}
.icon-toolbar-btn:disabled:hover{background:transparent;border-color:transparent}
.icon-toolbar-btn.primary:disabled:hover{background:var(--gold-bg);border-color:rgba(224,184,74,.25)}
.icon-toolbar-btn.danger:disabled:hover{background:var(--red-bg);border-color:rgba(232,91,91,.22)}
.icon-toolbar-btn:disabled:hover svg{stroke:var(--text3);filter:none}
.icon-toolbar-btn:disabled:hover .icon-toolbar-label{color:var(--text3)}
.icon-toolbar-btn[title]:not([title=""]):hover::after,.icon-toolbar-btn[title]:not([title=""]):focus-visible::after{content:attr(title);position:absolute;top:calc(100% + 8px);left:50%;transform:translateX(-50%);background:var(--bg2);border:1px solid var(--border2);color:var(--text);font-family:var(--sans);font-size:12px;font-weight:400;letter-spacing:.02em;text-transform:none;white-space:pre-line;padding:7px 12px;border-radius:3px;box-shadow:0 8px 22px rgba(0,0,0,.45);z-index:60;pointer-events:none}

.modal-backdrop{position:fixed;inset:0;background:rgba(0,0,0,.55);z-index:7000;display:none;align-items:center;justify-content:center}.modal-backdrop.show{display:flex}.modal{background:var(--bg2);border:1px solid var(--border2);border-radius:4px;box-shadow:0 16px 52px rgba(0,0,0,.7);width:720px;max-width:95vw;max-height:90vh;display:flex;flex-direction:column;resize:both;overflow:hidden}.modal-hdr{height:36px;background:var(--bg3);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 12px;gap:8px;cursor:move;user-select:none;touch-action:none}
.modal.modal-positioned{position:fixed;margin:0;transform:none}.modal-title{font-family:var(--mono);font-size:inherit;font-weight:700;color:var(--gold);letter-spacing:.5px;flex:1}.modal.import-preview-modal{min-width:720px;min-height:360px;height:min(680px,90vh)}.modal.import-preview-modal .modal-body{display:flex;flex:1 1 auto;min-height:0;overflow:hidden}.ie-preview-card{display:flex;flex:1 1 auto;min-height:0;min-width:0;width:100%;margin:0}.ie-preview-card>.card-body{display:flex;flex-direction:column;flex:1 1 auto;min-height:0;min-width:0}.ie-preview-grid{flex:1 1 auto;min-height:0;min-width:0;overflow:auto;margin-top:10px;border:1px solid var(--border);border-radius:3px}
/* v31c319 (claude): the wide, un-wrapped Details column (raw import values,
   sometimes a 64-char hex option id with no spaces to break on) was
   ballooning this table past the modal's width. None of ie-preview-card,
   its card-body, or ie-preview-grid had an explicit min-width:0, so per
   flexbox's default intrinsic-sizing rules each ancestor refused to
   shrink below the table's natural (unbounded) width -- the whole modal
   grew to fit it instead of scrolling internally, cutting off the policy
   explainer text and, depending on viewport, pushing the action row out
   of the visible area entirely. Fixed at the chain (min-width:0 on every
   flex ancestor above) and at the source (fixed column widths, wrapped
   text, and forced word-breaking so a single unbroken hex string can't
   force overflow even inside a wrapping cell). */
.ie-preview-grid table{table-layout:fixed;width:100%}
.ie-preview-grid col.ie-col-row{width:44px}.ie-preview-grid col.ie-col-status{width:110px}.ie-preview-grid col.ie-col-name{width:160px}
.ie-preview-grid td,.ie-preview-grid th{white-space:normal;overflow-wrap:break-word;word-break:break-word}
.ie-preview-actions{flex:0 0 auto;justify-content:flex-end;gap:8px;padding-top:10px;margin-top:10px;border-top:1px solid var(--border)}.modal-close{border:none;background:none;color:var(--text3);font-size:16px;cursor:pointer}.modal-close:hover{color:var(--red)}.modal-body{padding:12px;overflow:auto}.toast{position:fixed;bottom:18px;right:18px;z-index:9999;font-family:var(--mono);font-size:11px;padding:8px 14px;border-radius:3px;background:var(--bg2);border:1px solid var(--border2);color:var(--text);transform:translateY(16px);opacity:0;transition:all .2s;pointer-events:none;max-width:380px}.toast.show{transform:none;opacity:1}.toast.ok{border-color:rgba(61,214,140,.5);color:var(--green)}.toast.err{border-color:rgba(232,91,91,.5);color:var(--red)}.context-help-backdrop{position:fixed;inset:0;background:rgba(0,0,0,.38);z-index:9100;display:none;align-items:center;justify-content:center}.context-help-backdrop.show{display:flex}.context-help-modal{width:620px;max-width:94vw;max-height:86vh;background:var(--bg2);border:1px solid var(--border2);border-radius:4px;box-shadow:0 18px 60px rgba(0,0,0,.78);display:flex;flex-direction:column;resize:both;overflow:hidden}.context-help-hdr{height:36px;flex-shrink:0;background:var(--bg3);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 12px;gap:8px;cursor:move}.context-help-title{font-family:var(--mono);font-size:11px;font-weight:700;color:var(--gold);letter-spacing:.4px;flex:1}.context-help-body{padding:12px;overflow:auto;min-height:170px}.context-help-meta{font-family:var(--mono);font-size:9px;color:var(--text3);margin-bottom:10px}.context-help-read{line-height:1.55;color:var(--text2)}.context-help-empty{font-style:italic;color:var(--text3)}.context-help-actions{display:flex;justify-content:flex-end;gap:8px;margin-top:12px}.context-help-field{margin-bottom:10px}.context-help-field>label{display:block;font-family:var(--mono);font-size:9px;color:var(--text2);margin-bottom:4px}.context-help-inline-field{display:flex;align-items:center;gap:8px}.context-help-inline-field>label{display:block;flex:0 0 auto;margin:0;font-family:var(--mono);font-size:9px;color:var(--text2)}.context-help-inline-field>input{flex:1 1 auto;width:0;min-width:0}.help-pop{position:fixed;width:360px;background:var(--bg2);border:1px solid var(--border2);border-radius:4px;box-shadow:0 10px 30px rgba(0,0,0,.55);z-index:8500;display:none}.help-pop.show{display:block}.help-pop-hdr{height:30px;background:var(--bg3);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 10px}.help-pop-title{font-family:var(--mono);font-size:10px;font-weight:700;color:var(--gold);flex:1}.help-close{background:none;border:none;color:var(--text3);cursor:pointer}.help-pop-body{padding:10px;color:var(--text2);line-height:1.45;font-size:12px}.help-ref{font-family:var(--mono);font-size:9px;color:var(--text3);background:var(--bg4);border:1px solid var(--border);border-radius:2px;padding:1px 5px;margin:3px 3px 0 0;display:inline-block}.fw-popup{position:fixed;width:400px;max-height:420px;background:var(--bg2);border:1px solid var(--steel);border-radius:3px;box-shadow:0 12px 40px rgba(0,0,0,.7),0 0 0 1px rgba(122,184,212,.08);z-index:8600;display:none;flex-direction:column}.fw-popup.show{display:flex}.fw-popup-hdr{height:32px;background:var(--bg3);border-bottom:1px solid var(--border);display:flex;align-items:center;padding:0 10px;gap:8px;flex-shrink:0}.fw-popup-title{font-family:var(--mono);font-size:10px;font-weight:700;color:var(--steel);letter-spacing:.5px;flex:1}.fw-popup-close{background:none;border:none;color:var(--text3);cursor:pointer;font-size:14px;line-height:1}.fw-popup-close:hover{color:var(--red)}.fw-popup-body{overflow:auto;padding:10px;flex:1}.fw-ref-row{padding:7px 0;border-bottom:1px solid var(--border);display:flex;flex-direction:column;gap:3px}.fw-ref-row:last-child{border:none}.fw-ref-label{font-family:var(--mono);font-size:10px;font-weight:700;color:var(--steel2)}.fw-ref-note{font-family:var(--mono);font-size:9px;color:var(--text2);line-height:1.45}.fw-ref-link{font-family:var(--mono);font-size:9px;color:var(--steel);text-decoration:none;opacity:.7}.fw-ref-link:hover{opacity:1}.fw-ref-tags{display:flex;flex-wrap:wrap;gap:4px;margin-top:3px}.fw-ref-tag{font-family:var(--mono);font-size:8px;font-weight:700;letter-spacing:.4px;padding:1px 5px;border-radius:2px;background:var(--steel-bg);color:var(--steel);border:1px solid rgba(122,184,212,.2)}

/* v11 level-system spoke rows/forms */
.system-spoke .tree-row{color:var(--teal)}
.system-spoke .tree-icon{color:var(--teal)}
.system-spoke .tree-label{font-style:normal}
.system-spoke .tree-row.sel{background:var(--teal-bg);color:var(--teal);outline:1px solid rgba(48,200,176,.20)}
.system-spoke .tree-count{border-color:rgba(48,200,176,.25);color:var(--teal)}
/* Field designer: one card per field. Each field is a self-labeled unit instead of
   a slot in an 8-column grid, so nothing depends on eyeballing a header row above. */


.field-card.field-card-retired{opacity:.78;border-color:rgba(232,91,91,.28);background:rgba(0,0,0,.12)}
.field-card .fc-retired-badge{display:inline-block;font:9px/1 var(--mono);font-weight:700;letter-spacing:.6px;text-transform:uppercase;color:var(--red);background:var(--red-bg);border:1px solid rgba(232,91,91,.35);border-radius:2px;padding:2px 6px;margin-right:6px}
.field-card .fc-calculated-badge{display:inline-block;font:9px/1 var(--mono);font-weight:700;letter-spacing:.6px;text-transform:uppercase;color:var(--gold);background:rgba(212,175,55,.12);border:1px solid rgba(212,175,55,.35);border-radius:2px;padding:2px 6px;margin-right:6px}
.field-card .fc-formula-row{margin-top:8px;padding-top:8px;border-top:1px solid var(--border);width:100%;min-width:0}
.field-card .fc-formula-row label{display:block;font-family:var(--mono);font-size:9px;color:var(--text3);text-transform:uppercase;letter-spacing:.5px;margin-bottom:4px}
.field-card .fc-formula-row .fc-formula-tools{display:flex;gap:6px;align-items:center;margin-top:6px;flex-wrap:wrap}
.field-card .fc-formula-row input[type=text],
.field-card .fc-formula-row input.fc-formula-input{
  display:block;width:100%;max-width:100%;box-sizing:border-box;
  font-family:var(--mono);font-size:12px;min-width:0;
  overflow-x:auto;white-space:nowrap;
}
.field-card .fc-formula-row select.fc-insert-field{width:auto;min-width:140px;max-width:min(260px,100%)}
.field-card .fc-file-note{margin-top:8px;padding:8px 10px;border:1px dashed var(--border);border-radius:4px;background:var(--bg3)}
.field-card .fc-file-note .small-muted{margin:0 0 4px}
.field-card .fc-file-note .small-muted:last-child{margin-bottom:0}

.fc-integer-entry{margin-top:8px;padding:8px;border:1px solid var(--border);border-left:2px solid var(--steel);border-radius:3px;background:var(--bg4)}
.fc-integer-entry label{display:block;font:9px/1 var(--mono);color:var(--text3);text-transform:uppercase;letter-spacing:.5px;margin-bottom:4px}
.fc-integer-entry .fc-integer-row{display:flex;flex-wrap:wrap;gap:8px;align-items:flex-end;margin-bottom:6px}
.fc-integer-entry .fc-integer-row select,.fc-integer-entry .fc-integer-row input{font:11px var(--mono);min-width:120px}
.fc-integer-entry .small-muted{font:9px/1.35 var(--mono);color:var(--text3);margin-top:4px}
.field-card{border:1px solid var(--border);border-radius:4px;background:var(--bg3);padding:9px 10px;margin-bottom:8px}
.field-card.is-empty-name{border-color:rgba(232,91,91,.35)}
.form-field-row{display:flex;flex-wrap:wrap;gap:10px;align-items:flex-end}
.form-field-row .fc-field{display:flex;flex-direction:column;gap:3px;min-width:0}
.form-field-row .fc-field label{font-family:var(--mono);font-size:9px;color:var(--text3);text-transform:uppercase;letter-spacing:.5px}
.form-field-row .fc-name{flex:1 1 170px}
.form-field-row .fc-name input{color:var(--text2);background:var(--bg4);cursor:default}
.fc-lock-note{font-family:var(--mono);font-size:9px;color:var(--text3);margin-top:3px;line-height:1.3}
.form-field-row .fc-label{flex:1 1 220px}
.form-field-row .fc-label.is-locked input{color:var(--text2);background:var(--bg4);cursor:not-allowed}
.form-field-row .fc-label.is-locked label{color:var(--gold)}
.form-field-row .fc-type{flex:1 1 190px}
.form-field-row .fc-actions{display:flex;gap:6px;margin-left:auto;align-self:center}
.field-card-meta{display:flex;flex-wrap:wrap;gap:16px;align-items:center;margin-top:8px;padding-top:8px;border-top:1px solid var(--border)}
.field-card-meta .fc-toggle{display:flex;align-items:center;gap:6px}
.field-card-meta .fc-toggle label{font-family:var(--mono);font-size:9px;color:var(--text3);text-transform:uppercase;letter-spacing:.5px;white-space:nowrap}
.field-card-meta .fc-toggle select{width:auto;min-width:64px;padding:3px 6px}
.field-card-meta .fc-toggle.on label{color:var(--gold)}
.field-designer-legend{display:flex;gap:16px;font-family:var(--mono);font-size:9px;color:var(--text3);text-transform:uppercase;letter-spacing:.5px;margin:2px 0 8px 2px}
.select-options-row{display:grid;grid-template-columns:105px 1fr;gap:6px;align-items:start;margin-top:8px;padding:6px;background:var(--bg4);border:1px solid var(--border);border-left:2px solid var(--steel);border-radius:3px}
.select-options-row .opt-label{font-family:var(--mono);font-size:10px;color:var(--text2);padding-top:5px}
.select-options-row .opt-meta{font-family:var(--mono);font-size:10px;color:var(--text3);margin-top:4px;line-height:1.45}
.select-options-row .opt-warn{color:var(--red)}
.select-options-list{display:flex;flex-direction:column;gap:4px}
.select-option-editrow{display:grid;grid-template-columns:1fr auto auto;gap:6px;align-items:center}
.select-option-editrow.retired{opacity:.6}
.select-option-editrow .opt-label-input{min-width:0}
.select-option-editrow .opt-id-chip{font-family:var(--mono);font-size:9px;color:var(--text3);white-space:nowrap;padding:0 4px}
.select-option-editrow .opt-retired-badge{font-family:var(--mono);font-size:9px;color:var(--amber,#b8860b);white-space:nowrap}
.select-options-list-actions{display:flex;gap:6px;margin-top:2px}
.form-field-row .btn{padding:4px 7px}
.field-help-btn{min-width:32px;padding:3px 7px!important;border-color:rgba(106,180,216,.45)!important;color:var(--steel)!important}
.field-label-help{display:flex;align-items:center;gap:6px}.field-label-help .help-dot{width:18px;height:18px;line-height:16px;font-size:10px;flex:0 0 auto}
.form-preview-box{border:1px solid var(--border);background:var(--bg);padding:8px;border-radius:3px;max-height:240px;overflow:auto}

/* ChatGPT 20260720-08: workhorse browse layout. */
.browse-tools{height:auto;min-height:58px;flex-wrap:nowrap;align-items:center;padding:5px 8px;gap:2px;overflow:visible}.browse-tools .browse-command-group{flex-shrink:0}.browse-tools .browse-search{min-width:160px;flex:1 1 auto;width:auto;height:32px;align-self:center;margin-left:10px}.browse-command-group{display:flex;align-items:center;gap:2px}.browse-menu-wrap{position:relative;display:inline-flex}.browse-menu{display:none;position:absolute;top:calc(100% + 3px);right:0;z-index:40;min-width:165px;padding:4px;background:var(--bg2);border:1px solid var(--border2);border-radius:3px;box-shadow:0 10px 28px rgba(0,0,0,.55)}.browse-menu.show{display:block}.browse-menu .btn{display:block;width:100%;text-align:left;border-color:transparent;background:transparent}.browse-menu-label{display:block;padding:5px 7px 2px;color:var(--text3);font-family:var(--mono);font-size:8px;text-transform:uppercase;letter-spacing:.6px}.child-hub-pane-hdr{display:flex;align-items:center;align-content:flex-start;flex-wrap:wrap;gap:5px}.child-hub-pane-title{flex:1 0 100%;min-width:0;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.child-hub-pane-hdr .btn{padding:3px 6px;font-size:9px}.child-hub-pane-hdr .browse-menu{left:0;right:auto;min-width:180px}.child-hub-list{flex:1;overflow:auto;padding:6px}.child-hub-guidance{padding:6px 8px;border-top:1px solid var(--border);font-family:var(--mono);font-size:9px;line-height:1.35;color:var(--text3)}.browse-statusbar{min-height:30px;padding:4px 10px;border-top:1px solid var(--border);background:var(--bg2);display:flex;gap:12px;align-items:center;font-family:var(--mono);font-size:9px;color:var(--text3);flex-shrink:0}
/* v31c352: flat record nav — not chip buttons; breathing room between glyphs */
.browse-record-navigation{display:inline-flex;align-items:center;gap:1px;margin-left:4px;flex-shrink:0}
.browse-record-navigation > .btn{
  font-family:var(--mono);font-size:11px;font-weight:600;line-height:1;
  background:transparent !important;border:none !important;border-radius:0;
  box-shadow:none !important;color:var(--text2);
  padding:4px 10px;min-width:28px;height:26px;
  cursor:pointer;transition:color .1s ease
}
.browse-record-navigation > .btn:hover:not(:disabled){color:var(--text);background:transparent !important}
.browse-record-navigation > .btn:active:not(:disabled){color:var(--gold)}
.browse-record-navigation > .btn:disabled{opacity:.35;cursor:default;color:var(--text3)}
.browse-nav-position{
  display:inline-block;min-width:118px;padding:0 12px;text-align:center;
  color:var(--text2);font-size:10px;letter-spacing:.3px;white-space:nowrap
}.browse-status-main{flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.browse-status-related{white-space:nowrap;overflow:hidden;text-overflow:ellipsis}

/* ChatGPT 20260720-10: schema-driven browse columns and transient splitters. */
/* ChatGPT 20260720-11: the table owns an explicit summed pixel width; the
   browse body is the sole two-axis scroll surface. */
.browse-record-pane{overflow:hidden}
.browse-record-pane .browse-body{width:100%;min-width:0;min-height:0;overflow:auto;overscroll-behavior:contain}
.browse-table{table-layout:fixed;width:auto;min-width:0;max-width:none}
.browse-table th{position:sticky;overflow:visible}
.browse-table th .browse-col-resizer{position:absolute;top:0;right:-3px;width:7px;height:100%;cursor:col-resize;z-index:3}
.browse-table th .browse-col-resizer::after{content:"";position:absolute;top:3px;bottom:3px;left:3px;width:1px;background:var(--border2)}
.browse-table th .browse-col-resizer:hover::after,.browse-table th.resizing .browse-col-resizer::after{background:var(--gold);width:2px}
.browse-table td{overflow:hidden;text-overflow:ellipsis}
.browse-table td.browse-wrap{white-space:normal;overflow-wrap:anywhere;word-break:break-word;vertical-align:top;line-height:1.35}
.browse-table td.browse-nowrap{white-space:nowrap}
.browse-meta-row{display:flex;flex-wrap:wrap;gap:12px;align-items:flex-end;margin-top:8px;padding-top:8px;border-top:1px dashed var(--border2)}
.browse-meta-row .fc-toggle input[type="number"]{width:84px;padding:3px 6px}

/* Shared read-only local instance-manifest modal. */
.instance-manifest-grid{display:grid;grid-template-columns:170px minmax(0,1fr);gap:6px 12px;font-family:var(--mono);font-size:11px}.instance-manifest-grid .k{color:var(--text3)}.instance-manifest-grid .v{color:var(--text);word-break:break-word}.instance-manifest-note{font-family:var(--mono);font-size:9px;color:var(--text3);line-height:1.45;margin-bottom:10px}

/* ChatGPT 20260721-12: business browse horizontal scrolling + canvas maximize/restore. */
#mdi-layer .browse-win.browse-maximized{resize:none!important;border-radius:0!important;}
#mdi-layer .browse-win.browse-tiled{min-width:0!important;min-height:0!important;resize:both!important;box-sizing:border-box!important;}
#mdi-layer .browse-win.modal-launched-mdi{outline:none;}
#mdi-layer .browse-win.modal-launched-mdi:focus{border-color:rgba(224,184,74,.78);box-shadow:0 18px 58px rgba(0,0,0,.9),0 0 0 1px rgba(224,184,74,.22);}
#mdi-layer .browse-win .browse-max-btn{border:none;background:none;color:var(--text3);font-size:14px;line-height:1;cursor:pointer;padding:2px 5px;flex:0 0 auto;}
#mdi-layer .browse-win .browse-max-btn:hover{color:var(--gold);}
#mdi-layer .browse-record-pane{min-width:0!important;max-width:100%!important;overflow:hidden!important;}
#mdi-layer .browse-record-pane .browse-body{display:block!important;box-sizing:border-box!important;width:100%!important;max-width:100%!important;min-width:0!important;overflow-x:auto!important;overflow-y:auto!important;scrollbar-gutter:stable both-edges;overscroll-behavior:contain;}
#mdi-layer .browse-record-pane .browse-table{display:table!important;max-width:none!important;}

/* v31c165: FileMaker-style Find/Sort editors. */
.find-mode-banner{display:grid;grid-template-columns:auto 1fr auto;align-items:start;gap:10px;padding:10px 12px;margin-bottom:10px;border:1px solid rgba(224,184,74,.38);background:var(--gold-bg);font:10px var(--mono);color:var(--gold)}
.find-mode-banner strong{padding-top:2px}.find-help-btn{width:20px;height:20px;min-width:20px;padding:0;border-radius:50%;font:700 10px var(--mono);line-height:18px}.find-request{border:1px solid var(--border);background:var(--bg2);border-radius:4px;margin-bottom:12px;overflow:hidden}.find-request-hdr{display:flex;align-items:center;gap:9px;padding:8px 10px;background:var(--bg3);border-bottom:1px solid var(--border);font:10px var(--mono)}.find-request-title{flex:1;color:var(--steel);font-weight:700}.find-omit-label{display:flex;align-items:center;gap:5px}.find-criteria{padding:10px}.find-criterion-head,.find-criterion{display:grid;grid-template-columns:minmax(190px,1.15fr) minmax(155px,.8fr) minmax(260px,1.55fr) 32px;gap:12px}.find-criterion-head{align-items:end;margin:0 0 5px;color:var(--text3);font:9px var(--mono);text-transform:uppercase;letter-spacing:.45px}.find-criterion-head span{display:flex;align-items:center;gap:5px}.find-criterion{align-items:start;margin-bottom:12px}.find-criterion.between{grid-template-columns:minmax(190px,1.15fr) minmax(155px,.8fr) minmax(125px,.75fr) minmax(125px,.75fr) 32px}.find-criterion select,.find-criterion input,.sort-row select{width:100%;font:11px var(--mono);color:var(--text);background:var(--bg3);border:1px solid var(--border);border-radius:2px;padding:7px 8px;min-height:32px}.find-field-wrap{display:flex;flex-direction:column;gap:5px;min-width:0}.find-index-line{display:flex;align-items:flex-start;gap:6px;min-height:18px}.find-index-explain{color:var(--text3);font:9px/1.3 var(--mono);padding-top:2px}.find-remove-criterion{width:32px;height:32px;padding:0}.find-request-actions,.find-footer,.sort-footer{display:flex;gap:8px;align-items:center;flex-wrap:wrap}.find-request-actions{padding:0 10px 10px}.find-footer,.sort-footer{justify-content:flex-end;margin-top:12px;padding-top:10px;border-top:1px solid var(--border)}.find-empty{padding:10px;color:var(--text3);font:10px var(--mono);text-align:center}.sort-row{display:grid;grid-template-columns:minmax(165px,1.35fr) 112px 104px auto auto 142px 30px 30px 30px;gap:7px;align-items:center;margin-bottom:9px}.sort-row label{display:flex;align-items:center;gap:4px;white-space:nowrap}.browse-sortable-header .browse-header-label{cursor:pointer}.browse-header-sort{color:var(--accent);font:700 9px var(--mono);margin-left:3px}.query-plan-note{margin-right:auto;color:var(--text3);font:10px var(--mono)}
@media(max-width:900px){.find-criterion-head{display:none}.find-criterion,.find-criterion.between{grid-template-columns:1fr}.find-remove-criterion{justify-self:end}.find-mode-banner{grid-template-columns:auto 1fr auto}}
</style>

<style id="cee-multi-select-checkboxes-v31c112">
.multi-select-checklist{display:grid;gap:6px;padding:8px;border:1px solid var(--border);border-radius:3px;background:var(--bg3);max-height:220px;overflow:auto}
.multi-select-option{display:flex;align-items:center;gap:8px;font-family:var(--sans);font-size:var(--fs);color:var(--text);cursor:pointer}
.multi-select-option input{margin:0;flex:0 0 auto}
.multi-select-option-stale{color:var(--amber,#b8860b)}
</style>
<style id="cee-hub-artifact-history-v31c112">
#edit-modal.artifact-history-modal{width:min(1180px,96vw);max-width:1180px;height:min(82vh,860px);display:flex;flex-direction:column}
#edit-modal.artifact-history-modal #edit-body{flex:1;min-height:0;overflow:hidden;padding:0}
.artifact-history-shell{height:100%;display:grid;grid-template-rows:auto minmax(0,1fr) auto}
.artifact-history-meta{padding:9px 12px;border-bottom:1px solid var(--border);background:var(--bg2)}
.artifact-history-split{display:grid;grid-template-columns:minmax(420px,3fr) 7px minmax(280px,2fr);min-height:0}
.artifact-history-artifact,.artifact-history-chain{min-width:0;min-height:0;overflow:auto;padding:12px}
.artifact-history-splitter{background:var(--border);cursor:col-resize;position:relative}
.artifact-history-splitter:after{content:"";position:absolute;inset:0 -3px}
.artifact-history-chain{background:var(--bg2);border-left:1px solid var(--border)}
.artifact-history-footer{padding:8px 12px;border-top:1px solid var(--border);display:flex;justify-content:flex-end;background:var(--bg2)}
.artifact-chain-item{display:block;width:100%;text-align:left;border:1px solid var(--border);background:var(--bg3);color:var(--text);padding:9px;margin:0 0 8px;border-radius:4px}
.artifact-chain-item:hover,.artifact-chain-item.selected{border-color:var(--gold);background:var(--gold-bg)}
.artifact-chain-item .chain-title{font-family:var(--mono);font-size:10px;overflow-wrap:anywhere}
.artifact-chain-item .chain-meta{font-size:10px;color:var(--muted);margin-top:5px;line-height:1.45}
.artifact-ro-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px}
.artifact-ro-field{border:1px solid var(--border);background:var(--bg3);padding:8px;border-radius:3px;min-width:0}
.artifact-ro-field.full{grid-column:1/-1}
.artifact-ro-label{font-family:var(--mono);font-size:9px;text-transform:uppercase;letter-spacing:.04em;color:var(--muted);margin-bottom:5px}
.artifact-ro-value{white-space:pre-wrap;overflow-wrap:anywhere;line-height:1.45}
.artifact-form-field{border:1px solid var(--border);background:var(--bg3);padding:10px;border-radius:4px;margin-bottom:9px}
.artifact-form-field.retired{opacity:.72}
.artifact-form-field-head{display:flex;justify-content:space-between;gap:10px;align-items:flex-start}
.artifact-option-list{margin-top:7px;padding-top:7px;border-top:1px solid var(--border);font-size:11px}
@media(max-width:800px){.artifact-history-split{grid-template-columns:1fr;grid-template-rows:minmax(280px,1fr) 7px minmax(220px,.75fr)}.artifact-history-splitter{cursor:row-resize}.artifact-history-chain{border-left:0;border-top:1px solid var(--border)}.artifact-ro-grid{grid-template-columns:1fr}}
</style>

<style id="cursor-hotfix-v18">
.tree-row,.mdi-chip,.btn,.md-btn,.help-dot,.browse-table tbody tr,.row-expander,.browse-close,.modal-close,.help-close,.form-field-row button,.select-options-row{cursor:pointer}
input,textarea,select{cursor:auto}
button,input[type="button"],input[type="submit"],input[type="checkbox"],select{cursor:pointer}
textarea,.md-preview,.md-rendered,.md-source{cursor:text}
</style>

<style id="chandra-instance-builder-routing-v1">
.route-guard-banner{
  display:none;
  position:fixed;
  left:12px;
  right:12px;
  top:46px;
  z-index:8500;
  border:1px solid rgba(201,168,76,.45);
  background:var(--gold-bg);
  color:var(--gold);
  border-radius:4px;
  padding:8px 12px;
  font-family:var(--mono);
  font-size:10px;
  line-height:1.45;
  box-shadow:0 10px 30px rgba(0,0,0,.35);
}
.route-guard-banner.show{display:block}
</style>


<style id="chandra-browse-crud-controls-v2">
.browse-table tr.sel td{background:transparent!important;color:var(--text2)!important}.browse-select-cell{text-align:center}.browse-select-cell input{margin:0;vertical-align:middle}.browse-select-all{margin:0;vertical-align:middle}
.chain-table tr.sel td{background:var(--gold-bg)!important;color:var(--gold)!important}
.browse-row-actions{display:flex;gap:4px}
.browse-row-actions .btn{padding:3px 6px;font-size:9px}
.browse-row-chain{width:28px;height:24px;padding:0!important;font-size:13px!important;line-height:1;opacity:.72}.browse-row-chain:hover{opacity:1}
.browse-tools .btn.primary{border-color:rgba(201,168,76,.42);color:var(--gold);background:var(--gold-bg)}
</style>


<style id="chandra-preview-single-handler-v2-style">
  #chandraPreviewBackdropV2{
    position:fixed;
    inset:0;
    z-index:99999;
  }
  #chandraPreviewBackdropV2.preview-light{
    background:rgba(15,23,42,.28) !important;
  }
  #chandraPreviewBackdropV2.preview-dark{
    background:rgba(0,0,0,.55) !important;
  }

  #chandraPreviewWindowV2{
    position:absolute;
    left:50%;
    top:7vh;
    transform:translateX(-50%);
    width:min(840px,96vw);
    max-height:88vh;
    overflow:auto;
    border-radius:16px;
  }
  #chandraPreviewBackdropV2.preview-light #chandraPreviewWindowV2{
    background:#ffffff !important;
    color:#162033 !important;
    border:1px solid #c9d4e7 !important;
    box-shadow:0 24px 70px rgba(15,23,42,.22) !important;
  }
  #chandraPreviewBackdropV2.preview-dark #chandraPreviewWindowV2{
    background:#111a2e !important;
    color:#e9eefc !important;
    border:1px solid #2d3b59 !important;
    box-shadow:0 24px 80px rgba(0,0,0,.48) !important;
  }

  #chandraPreviewTitlebarV2{
    display:flex;
    align-items:center;
    justify-content:space-between;
    gap:12px;
    padding:12px 14px;
    cursor:move;
    user-select:none;
    border-radius:16px 16px 0 0;
  }
  #chandraPreviewBackdropV2.preview-light #chandraPreviewTitlebarV2{
    background:#eef3fb !important;
    color:#162033 !important;
    border-bottom:1px solid #c9d4e7 !important;
  }
  #chandraPreviewBackdropV2.preview-dark #chandraPreviewTitlebarV2{
    background:#17233c !important;
    color:#e9eefc !important;
    border-bottom:1px solid #2d3b59 !important;
  }

  #chandraPreviewTitleV2{
    font-size:13px;
    font-weight:900;
    color:inherit !important;
  }
  #chandraPreviewCloseV2{
    cursor:pointer;
  }
  #chandraPreviewBodyV2{
    padding:16px;
  }

  .chandra-preview-form-v2{
    display:grid;
    gap:14px;
    padding:14px;
    border-radius:14px;
  }
  #chandraPreviewBackdropV2.preview-light .chandra-preview-form-v2{
    background:#ffffff !important;
    color:#162033 !important;
    border:1px solid #c9d4e7 !important;
  }
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-form-v2{
    background:#111a2e !important;
    color:#e9eefc !important;
    border:1px solid #2d3b59 !important;
  }

  .chandra-preview-form-title-v2{
    margin:0;
    font-size:16px;
    font-weight:900;
  }
  #chandraPreviewBackdropV2.preview-light .chandra-preview-form-title-v2{
    color:#162033 !important;
  }
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-form-title-v2{
    color:#e9eefc !important;
  }

  .chandra-preview-form-sub-v2{
    font-size:12px;
    margin:2px 0 4px 0;
  }
  #chandraPreviewBackdropV2.preview-light .chandra-preview-form-sub-v2{
    color:#56657f !important;
  }
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-form-sub-v2{
    color:#aab7d6 !important;
  }

  .chandra-preview-field-v2{
    display:grid;
    gap:6px;
  }
  .chandra-preview-label-row-v2{
    display:flex;
    align-items:center;
    justify-content:space-between;
    gap:10px;
  }
  .chandra-preview-label-v2{
    display:block !important;
    font-size:13px;
    font-weight:900;
    line-height:1.35;
    opacity:1 !important;
    visibility:visible !important;
  }
  #chandraPreviewBackdropV2.preview-light .chandra-preview-label-v2{
    color:#162033 !important;
  }
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-label-v2{
    color:#e9eefc !important;
  }

  .chandra-preview-required-v2{
    color:#fb7185 !important;
    font-weight:900;
  }

  .chandra-preview-tab-v2{
    font-size:11px;
    font-weight:800;
    white-space:nowrap;
  }
  #chandraPreviewBackdropV2.preview-light .chandra-preview-tab-v2{
    color:#56657f !important;
  }
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-tab-v2{
    color:#aab7d6 !important;
  }

  .chandra-preview-field-v2 input,
  .chandra-preview-field-v2 textarea,
  .chandra-preview-field-v2 select{
    width:100%;
    border-radius:10px;
    padding:10px;
    font:inherit;
  }
  #chandraPreviewBackdropV2.preview-light .chandra-preview-field-v2 input,
  #chandraPreviewBackdropV2.preview-light .chandra-preview-field-v2 textarea,
  #chandraPreviewBackdropV2.preview-light .chandra-preview-field-v2 select{
    background:#ffffff !important;
    color:#162033 !important;
    border:1px solid #c9d4e7 !important;
  }
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-field-v2 input,
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-field-v2 textarea,
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-field-v2 select{
    background:#0d162a !important;
    color:#e9eefc !important;
    border:1px solid #2d3b59 !important;
  }

  .chandra-preview-field-v2 textarea{
    min-height:86px;
    resize:vertical;
  }
  .chandra-preview-field-v2 input:invalid,
  .chandra-preview-field-v2 textarea:invalid,
  .chandra-preview-field-v2 select:invalid{
    border-color:#fb7185 !important;
  }

  .chandra-preview-hint-v2,
  .chandra-preview-select-values-v2{
    font-size:12px;
    line-height:1.35;
  }
  #chandraPreviewBackdropV2.preview-light .chandra-preview-hint-v2,
  #chandraPreviewBackdropV2.preview-light .chandra-preview-select-values-v2{
    color:#56657f !important;
  }
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-hint-v2,
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-select-values-v2{
    color:#aab7d6 !important;
  }

  .chandra-preview-actions-v2{
    display:flex;
    justify-content:flex-end;
    gap:10px;
    padding-top:12px;
  }
  #chandraPreviewBackdropV2.preview-light .chandra-preview-actions-v2{
    border-top:1px solid #c9d4e7 !important;
  }
  #chandraPreviewBackdropV2.preview-dark .chandra-preview-actions-v2{
    border-top:1px solid #2d3b59 !important;
  }
</style>


<style id="chandra-mdi-move-cursor-v14">
#mdi-layer .browse-win .browse-hdr,
#mdi-layer .browse-win .browse-hdr *:not(button):not(input):not(select):not(textarea):not(a),
#mdi-layer .browse-win.chandra-mdi-dragging .browse-hdr{
  cursor:move !important;
}
#mdi-layer .browse-win .browse-hdr button,
#mdi-layer .browse-win .browse-hdr .browse-close,
#mdi-layer .browse-win .browse-hdr .help-dot{
  cursor:pointer !important;
}
</style>


<style id="cee-v26-child-hub-layout">
.browse-content-split{display:grid;grid-template-columns:280px 6px minmax(0,1fr);flex:1;min-height:0;overflow:hidden}
.browse-related-splitter{position:relative;background:var(--border);cursor:col-resize;min-width:6px;touch-action:none;user-select:none;z-index:5}
.browse-related-splitter::after{content:"";position:absolute;top:0;bottom:0;left:2px;width:2px;background:rgba(255,255,255,.06)}
.browse-related-splitter:hover,.browse-related-splitter.dragging{background:var(--gold);box-shadow:0 0 8px rgba(224,184,74,.35)}
.child-hub-pane{border-right:1px solid var(--border);background:var(--bg2);display:flex;flex-direction:column;min-width:0}
.child-hub-pane-hdr{padding:8px;border-bottom:1px solid var(--border);font-family:var(--mono);font-size:9px;font-weight:700;letter-spacing:.7px;color:var(--text3);text-transform:uppercase}
.child-hub-list{flex:1;overflow:auto;padding:6px}
.child-hub-item{display:block;width:100%;text-align:left;font-family:var(--mono);font-size:10px;color:var(--text2);background:transparent;border:1px solid transparent;border-radius:2px;padding:6px 7px;margin-bottom:4px;cursor:pointer}
.child-hub-item:hover{background:var(--bg3);color:var(--text)}
.child-hub-item.sel{background:var(--gold-bg);border-color:rgba(224,184,74,.35);color:var(--gold)}
.child-hub-actions{padding:6px;border-top:1px solid var(--border);display:grid;grid-template-columns:1fr 1fr;gap:4px}
.child-hub-actions .btn{padding:4px 5px;font-size:9px}
.browse-record-pane{display:flex;flex-direction:column;min-width:0;min-height:0}
.browse-record-pane .browse-body{flex:1}
.browse-row-actions{display:flex;align-items:center;justify-content:flex-end;gap:4px;white-space:nowrap}
.form-index-row{display:grid;grid-template-columns:120px 90px 110px 1fr;gap:6px;align-items:center;margin-top:8px;padding:6px;background:var(--bg4);border:1px solid var(--border);border-left:2px solid var(--gold);border-radius:3px}
.form-index-row label{font-size:9px}
.form-index-row input,.form-index-row select{width:100%}
.find-field-wrap{display:flex;flex-direction:column;gap:5px;align-items:stretch;min-width:0}
.find-index-badge{font-family:var(--mono);font-size:8px;line-height:1.2;padding:3px 5px;border:1px solid var(--border2);border-radius:2px;color:var(--text2);white-space:nowrap}
.find-index-badge.indexed{color:var(--green);border-color:rgba(61,214,140,.35);background:var(--green-bg)}
.find-index-badge.filter{color:var(--amber);border-color:rgba(232,160,32,.35);background:var(--amber-bg)}
.find-index-badge.scan{color:var(--text3)}
/* v31c203: keep Find criterion controls aligned within the shared modal width. */
.find-criteria{overflow-x:hidden}
.find-criterion-head,.find-criterion{grid-template-columns:minmax(150px,1.15fr) minmax(125px,.85fr) minmax(180px,1.45fr) 30px;gap:10px}
.find-criterion.between{grid-template-columns:minmax(145px,1.1fr) minmax(120px,.82fr) minmax(105px,.75fr) minmax(105px,.75fr) 30px;gap:8px}
.find-criterion>*{min-width:0}
.find-field-wrap{display:flex;flex-direction:column;align-items:stretch;gap:5px;min-width:0}
.find-index-line{display:flex;align-items:center;gap:6px;min-width:0;min-height:18px}
.find-index-badge{flex:0 0 auto}
.find-index-explain{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;line-height:18px;padding-top:0}
.find-remove-criterion{justify-self:end}
@media(max-width:760px){.find-criterion-head{display:none}.find-criterion,.find-criterion.between{grid-template-columns:1fr}.find-index-explain{white-space:normal}.find-remove-criterion{justify-self:end}}

.find-plan-summary{font-family:var(--mono);font-size:9px;color:var(--text2);padding:7px 9px;border:1px solid var(--border);background:var(--bg3);margin:0 0 8px}

@media(max-width:900px){
  .browse-content-split{grid-template-columns:150px 6px minmax(0,1fr)}
  .form-index-row{grid-template-columns:1fr 1fr}
}
</style>
<style id="chassis-direction-v62">
/* v62 (claude): chassis frame around the whole app shell. Corner screws +
   brushed texture live ONLY on this outer wrapper; everything from .topbar
   down is untouched existing CEE markup, just nested one level deeper
   inside .glass. Final converged design — see chandra-worker-diagnostics.html
   and chandra-marshaller.html for the fuller bug/fix history. */
html,body{height:100%}
body{background:#000;padding:10px}
.chassis{flex:1;display:flex;flex-direction:column;min-height:0;border-radius:10px;position:relative;
  background:linear-gradient(180deg,var(--gun2) 0%,var(--gun) 55%,var(--gun3) 100%),var(--brushed);
  box-shadow:inset 0 1px 0 var(--gun-hi),inset 0 -2px 0 var(--gun-lo),0 30px 70px rgba(0,0,0,.6);
  padding:8px}
.cap{position:absolute;width:8px;height:8px;border-radius:50%;z-index:10;
  background:radial-gradient(circle at 34% 30%,var(--screw-hi),var(--screw) 60%,#000 100%);
  box-shadow:0 1px 1px rgba(0,0,0,.7),inset 0 0 0 1px rgba(0,0,0,.5)}
.cap::after{content:"";position:absolute;inset:0;margin:auto;width:4px;height:1px;background:rgba(0,0,0,.65);transform:rotate(38deg)}
.cap.tl{top:8px;left:8px}.cap.tr{top:8px;right:8px}.cap.bl{bottom:8px;left:8px}.cap.br{bottom:8px;right:8px}
.led-rail{display:flex;align-items:center;gap:16px;height:22px;padding:0 8px 6px;flex-shrink:0;
  font-family:var(--mono);font-size:9px;letter-spacing:1.1px;color:var(--led-label);text-transform:uppercase}
.led-item{display:flex;align-items:center;gap:6px}
.led-dot{width:6px;height:6px;border-radius:50%;flex-shrink:0}
.led-dot.on-green{background:var(--green);box-shadow:0 0 5px 1.5px var(--glow-green),0 0 12px 4px var(--glow-green2)}
.led-dot.on-gold{background:var(--gold);box-shadow:0 0 5px 1.5px var(--glow-gold),0 0 12px 4px var(--glow-gold2)}
.led-dot.on-steel{background:var(--steel);box-shadow:0 0 5px 1.5px var(--glow-steel),0 0 12px 4px var(--glow-steel2)}
.led-dot.idle{background:var(--led-idle)}
.glass{flex:1;min-height:0;display:flex;flex-direction:column;overflow:hidden;border-radius:6px;background:var(--bg);position:relative;
  box-shadow:inset 0 2px 6px rgba(0,0,0,.35)}
.badge{position:relative;padding-left:16px}
.badge::before{content:'';position:absolute;left:6px;top:50%;width:6px;height:6px;border-radius:50%;transform:translateY(-50%);background:var(--led-idle)}
.badge.attested::before{background:var(--green);box-shadow:0 0 4px 1px var(--glow-green)}
.tb-action-btn,.btn{box-shadow:0 1px 0 rgba(255,255,255,.03),0 2px 3px rgba(0,0,0,.35)}
.tb-action-btn:active,.btn:active:not(:disabled){box-shadow:inset 0 2px 3px rgba(0,0,0,.5),inset 0 -1px 0 rgba(255,255,255,.03);transform:translateY(1px)}
</style>


<style id="chandra-saved-searches-v1-style">
#edit-modal.fixture-result-modal{width:min(760px,94vw);max-width:760px;height:auto;min-height:0;max-height:72vh;resize:none;overflow:hidden}
#edit-modal.fixture-result-modal #edit-body{overflow:auto;padding:12px}
#edit-modal.fixture-result-modal .card{margin:0}
#edit-modal.fixture-result-modal .card-body{padding:10px}
#edit-modal.fixture-result-modal .fixture-result-scroll{max-height:220px;overflow:auto;margin-top:8px}
#edit-modal.saved-searches-modal{width:min(1180px,94vw);max-width:none;height:min(82vh,860px);max-height:94vh;min-width:760px;min-height:480px;resize:both;overflow:hidden;display:flex;flex-direction:column}
#edit-modal.saved-searches-modal #edit-body{flex:1;min-height:0;overflow:hidden;padding:0}
.saved-search-shell{display:flex;flex-direction:column;height:100%;min-height:0}
.saved-search-toolbar{display:flex;align-items:center;justify-content:flex-end;gap:7px;padding:8px 10px;border-top:1px solid var(--border);flex-wrap:wrap;flex:0 0 auto}
.saved-search-toolbar .spacer{display:none}
.saved-search-work{display:grid;grid-template-columns:minmax(260px,34%) 6px minmax(0,1fr);flex:1;min-height:0;overflow:hidden}
.saved-search-list-pane,.saved-search-detail-pane{min-width:0;min-height:0;display:flex;flex-direction:column;overflow:hidden}
.saved-search-list-tools{display:flex;gap:6px;padding:8px;border-bottom:1px solid var(--border)}
.saved-search-list-tools input{flex:1;min-width:0}
.saved-search-list{overflow:auto;flex:1}
.saved-search-row{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:8px;padding:9px 10px;border-bottom:1px solid var(--border);cursor:pointer;align-items:center}
.saved-search-row:hover{background:var(--bg3)}
.saved-search-row.sel{background:rgba(106,180,216,.12);box-shadow:inset 3px 0 0 var(--steel)}
.saved-search-name{font-weight:700;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
.saved-search-meta{font-family:var(--mono);font-size:9px;color:var(--text3);margin-top:3px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
.saved-search-execute{font-size:9px;padding:4px 8px}
.saved-search-splitter{cursor:col-resize;background:var(--border);position:relative}
.saved-search-splitter:hover{background:var(--steel)}
.saved-search-detail-scroll{overflow:auto;flex:1;padding:12px 14px}
.saved-search-empty{padding:24px;color:var(--text3);font-family:var(--mono)}
.saved-search-grid{display:grid;grid-template-columns:minmax(180px,1fr) minmax(180px,1fr);gap:10px 14px}
.saved-search-grid .full{grid-column:1/-1}
.saved-search-grid label{display:flex;flex-direction:column;gap:4px;font-size:10px;text-transform:uppercase;letter-spacing:.4px;color:var(--text3)}
.saved-search-grid input,.saved-search-grid textarea,.saved-search-grid select{width:100%;min-width:0}
.saved-search-grid textarea{min-height:72px;resize:vertical}
.saved-search-request{border:1px solid var(--border);border-radius:4px;margin-top:10px;background:var(--bg2)}
.saved-search-request-hdr{display:flex;align-items:center;gap:8px;padding:7px 8px;border-bottom:1px solid var(--border)}
.saved-search-request-hdr strong{margin-right:auto}
.saved-search-criterion{display:grid;grid-template-columns:minmax(190px,1.25fr) minmax(130px,.8fr) minmax(160px,1fr) auto;gap:8px;align-items:start;padding:8px;border-bottom:1px solid var(--border)}
.saved-search-field-meta{font-family:var(--mono);font-size:8px;color:var(--text3);margin-top:3px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
.saved-search-request-actions{padding:7px 8px}
.saved-search-statusbar{display:flex;gap:12px;align-items:center;padding:6px 10px;border-top:1px solid var(--border);font-family:var(--mono);font-size:9px;color:var(--text3)}
.saved-search-statusbar .tail{margin-left:auto;max-width:46%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
@media(max-width:900px){#edit-modal.saved-searches-modal{min-width:640px}.saved-search-work{grid-template-columns:minmax(220px,38%) 6px minmax(0,1fr)}.saved-search-criterion{grid-template-columns:1fr 1fr}.saved-search-criterion .saved-search-remove{grid-column:2;justify-self:end}}
</style>


<style id="cee-detach-v1-style">
.browse-detach-btn{border:none;background:none;color:var(--text3);font-size:14px;line-height:1;cursor:pointer;padding:2px 6px;flex:0 0 auto}.browse-detach-btn:hover{color:var(--gold)}
/* Group tag lives LEFT of title — never in the window-chrome cluster */
.browse-group-select{display:inline-flex;align-items:center;gap:5px;flex:0 0 auto;margin:0 8px 0 0;padding:2px 8px 2px 4px;border-right:1px solid var(--border);font-family:var(--mono);font-size:9px;font-weight:600;letter-spacing:.55px;text-transform:uppercase;color:var(--text3);cursor:pointer;user-select:none;line-height:1}
.browse-group-select:hover{color:var(--text)}
.browse-group-select:has(.browse-detach-select:checked){color:var(--gold)}
.browse-group-select .browse-detach-select{margin:0;cursor:pointer;accent-color:var(--gold);width:13px;height:13px}
/* Window chrome cluster (detach / max / close) on the right */
.browse-hdr .browse-scope{margin-left:auto}
.browse-hdr .browse-max-btn,.browse-hdr .browse-detach-btn,.browse-hdr .browse-close{flex:0 0 auto}
.browse-hdr .browse-detach-btn{border-left:1px solid var(--border);margin-left:4px;padding-left:8px}

.mdi-chip.detached{border-style:dashed;color:var(--gold)}
html.cee-detached-tab .topbar,html.cee-detached-tab .main-grid>.left-pane,html.cee-detached-tab .tree-splitter,html.cee-detached-tab #right-pane>.pane-hdr,html.cee-detached-tab #right-pane>.editor-scroll{display:none!important}
html.cee-detached-tab .main-grid{top:0!important;grid-template-columns:1fr!important}
html.cee-detached-tab #right-pane{grid-column:1!important;grid-row:1!important}
html.cee-detached-tab #mdi-layer{top:34px!important}
html.cee-detached-tab .mdi-strip{position:absolute;left:0;right:0;top:0;z-index:20}
html.cee-detached-tab #right-pane{
  display:block!important;position:fixed!important;inset:0!important;
  width:100vw!important;height:100vh!important;max-width:none!important;
  min-width:0!important;margin:0!important;padding:0!important
}
html.cee-detached-tab #mdi-layer{
  display:block!important;position:fixed!important;pointer-events:auto!important;
  left:0!important;right:0!important;top:65px!important;bottom:0!important;
  width:100vw!important;height:auto!important;max-width:none!important;
  margin:0!important;padding:0!important;overflow:auto!important;scrollbar-gutter:stable!important;overscroll-behavior:contain!important
}
/* Multi-window detached MDI: honor tile/cascade geometry (do NOT full-bleed every win). */
html.cee-detached-tab #mdi-layer > .browse-win{
  position:absolute!important;
  right:auto!important;
  bottom:auto!important;
  transform:none!important;
  border-radius:3px!important;
  box-shadow:0 10px 28px rgba(0,0,0,.4)!important
}
/* Single-window or user-maximized: fill the detached canvas */
html.cee-detached-tab #mdi-layer > .browse-win.browse-maximized{
  position:fixed!important;left:0!important;right:0!important;
  top:65px!important;bottom:0!important;
  width:auto!important;height:auto!important;max-width:none!important;max-height:none!important;
  min-width:0!important;min-height:0!important;transform:none!important;
  border-color:var(--line)!important;outline:none!important;box-shadow:none!important;
  border-radius:0!important
}
html.cee-detached-tab #test-plan-run-window{
  position:fixed!important;left:0!important;right:0!important;
  top:65px!important;bottom:0!important;
  width:auto!important;height:auto!important;max-width:none!important;max-height:none!important;
  min-width:0!important;min-height:0!important;transform:none!important;
  border-color:var(--line)!important;outline:none!important;box-shadow:none!important;
  border-radius:0!important
}
html.cee-detached-tab #test-plan-run-window:focus,
html.cee-detached-tab #test-plan-run-window.active,
html.cee-detached-tab #test-plan-run-window.browse-active{
  border-color:var(--line)!important;outline:none!important;box-shadow:none!important
}
html.cee-detached-tab #test-plan-run-window .tp-run-mdi-body{width:auto!important;min-width:0!important}
html.cee-detached-tab #test-plan-run-window .tp-form-shell{
  width:100%!important;height:100%!important;min-width:0!important;
  display:flex!important;flex-direction:column!important
}
html.cee-detached-tab #test-plan-run-window .tp-form-body{
  flex:1 1 auto!important;min-height:0!important;height:auto!important;overflow:hidden!important
}
html.cee-detached-tab #test-plan-run-window .tp-run-grid{
  height:100%!important;min-height:0!important;align-items:stretch!important
}
html.cee-detached-tab #test-plan-run-window .tp-doc-pane,
html.cee-detached-tab #test-plan-run-window .tp-steps-pane{
  height:100%!important;min-height:0!important;display:flex!important;flex-direction:column!important
}
html.cee-detached-tab #test-plan-run-window .tp-markdown-editor,
html.cee-detached-tab #test-plan-run-window .md-editor{
  flex:1 1 auto!important;min-height:0!important;height:auto!important;
  display:flex!important;flex-direction:column!important
}
html.cee-detached-tab #test-plan-run-window .tp-markdown-editor textarea,
html.cee-detached-tab #test-plan-run-window .md-editor textarea,
html.cee-detached-tab #test-plan-run-window .md-source,
html.cee-detached-tab #test-plan-run-window .md-preview{
  flex:1 1 auto!important;min-height:0!important;height:auto!important;max-height:none!important;
  width:100%!important;box-sizing:border-box!important;resize:none!important
}

html.cee-detached-tab #test-plan-run-window .tp-plan-source-scroll{
  display:flex!important;flex-direction:column!important;
  flex:1 1 auto!important;min-height:0!important;height:auto!important;
  overflow:hidden!important
}
html.cee-detached-tab #test-plan-run-window .tp-plan-source-scroll > .md-editor{
  display:flex!important;flex-direction:column!important;
  flex:1 1 auto!important;min-height:0!important;height:100%!important;
  overflow:hidden!important
}
html.cee-detached-tab #test-plan-run-window .tp-plan-source-scroll > .md-editor > textarea,
html.cee-detached-tab #test-plan-run-window .tp-plan-source-scroll > .md-editor > .md-preview{
  flex:1 1 auto!important;min-height:0!important;height:100%!important;
  max-height:none!important;overflow:auto!important;resize:none!important
}
html.cee-detached-tab #test-plan-run-window .tp-plan-source-scroll > .md-editor > .md-note{
  flex:0 0 auto!important
}
html.cee-detached-tab #test-plan-run-window .tp-form-footer{
  display:flex!important;visibility:visible!important;position:relative!important;z-index:5
}

</style>

<style>
#test-plan-run-window textarea,
.tp-markdown-editor textarea,
.md-editor textarea,
.md-source {
  resize:none;
}
</style>

<style>

.automation-help-backdrop{position:fixed;inset:0;z-index:10030;display:none;align-items:center;justify-content:center;background:rgba(0,0,0,.58);padding:18px}
.automation-help-backdrop.show{display:flex}
.automation-help-modal{width:min(680px,92vw);max-height:min(76vh,720px);display:flex;flex-direction:column;background:var(--bg2);color:var(--text);border:1px solid var(--border2);border-radius:4px;box-shadow:0 18px 55px rgba(0,0,0,.72);overflow:hidden}
.automation-help-header{display:flex;align-items:center;justify-content:space-between;gap:10px;padding:10px 12px;border-bottom:1px solid var(--border);background:var(--bg3);flex-shrink:0}
.automation-help-header strong{font-family:var(--mono);font-size:13px;letter-spacing:.02em;color:var(--gold)}
.automation-help-body{padding:14px;overflow:auto;background:var(--bg2);color:var(--text2);line-height:1.5;min-height:0}
.automation-help-body p{margin:0 0 12px}
.automation-help-body p:last-child{margin-bottom:0}
.automation-help-table{width:100%;min-width:0;border-collapse:collapse;table-layout:fixed;font-family:var(--mono);font-size:11px;background:var(--bg2)}
.automation-help-table th,.automation-help-table td{padding:8px 10px;border-bottom:1px solid var(--border);vertical-align:top;text-align:left;white-space:normal;overflow-wrap:anywhere}
.automation-help-table th{background:var(--bg3);color:var(--text3);font-size:9px;text-transform:uppercase;letter-spacing:.6px}
.automation-help-table th:first-child,.automation-help-table td:first-child{width:190px}
.automation-help-footer{display:flex;justify-content:flex-end;padding:10px 12px;border-top:1px solid var(--border);background:var(--bg3);flex-shrink:0}
.tp-fixture-status{margin:8px 10px;padding:8px 10px;border:1px solid var(--border);background:var(--bg3);font-size:11px;line-height:1.45}
.tp-fixture-status[data-state="attached"]{border-left:4px solid var(--green)}
.tp-fixture-status[data-state="available"]{border-left:4px solid var(--gold)}
.tp-fixture-status[data-state="missing"]{border-left:4px solid var(--red)}
.fixture-progress-track{height:14px;border:1px solid var(--border);background:var(--bg3);overflow:hidden;margin:10px 0}
.fixture-progress-bar{height:100%;width:0;background:var(--green);transition:width .12s linear}
.fixture-progress-grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:8px;margin-top:8px}
.fixture-progress-stat{border:1px solid var(--border);background:var(--bg2);padding:8px;font-family:var(--mono);font-size:11px}
.fixture-progress-stat b{display:block;font-size:14px;color:var(--text)}
</style>

<style id="chandra-mdi-scroll-v1-style">
  #mdi-layer.mdi-has-windows{pointer-events:auto;}
  #mdi-layer.mdi-has-windows > .browse-win{pointer-events:auto;}
  #mdi-layer > .mdi-horizontal-scroll-spacer{position:absolute;top:0;width:1px;height:1px;pointer-events:none;visibility:hidden;}
</style>
</head>
<body>
<div class="chassis">
  <span class="cap tl"></span><span class="cap tr"></span><span class="cap bl"></span><span class="cap br"></span>
  <div class="led-rail">
    <div class="led-item"><span class="led-dot on-green"></span>SPINE</div>
    <div class="led-item"><span class="led-dot on-steel"></span>CANARY</div>
    <div class="led-item"><span class="led-dot idle"></span>PRODUCTION</div>
  </div>
  <div class="glass">

<div class="topbar"><div class="tb-logo">CHANDRA ENTERPRISE</div><div class="tb-center" id="tb-binding-name">ENTERPRISE EDITOR</div><div class="tb-right"><span id="chandra-build-version" class="badge">BUILD v31c432</span><button class="tb-action-btn" onclick="openInstanceManifest()">INSTANCE MANIFEST</button><button class="tb-action-btn" onclick="openHelpIndex()">HELP INDEX</button><div class="tb-sep"></div><button class="tb-action-btn" onclick="openBugReports()">BUG REPORTS</button><button class="tb-action-btn" onclick="openTestPlans()" title="CU-backed test plans and acceptance checklists">TEST PLANS</button><button class="tb-action-btn" id="report-bug-btn" onclick="openDiagnosticBugReport()" title="Create a context-specific bug report from recent diagnostics">REPORT BUG <span id="diagnostic-count"></span></button><div class="tb-sep"></div><button class="tb-action-btn" onclick="openSpineEditor()">SPINE EDITOR &rarr;</button><div class="tb-sep"></div><div class="font-ctrl"><button class="icon-btn" onclick="changeFontSize(-1)" title="Smaller text">A−</button><span class="fs-disp" id="fs-disp">13px</span><button class="icon-btn" onclick="changeFontSize(1)" title="Larger text">A+</button></div><div class="tb-sep"></div><button class="icon-btn" id="theme-btn" onclick="toggleTheme()" title="Toggle theme">☾</button></div></div>
<div class="instance-bar"><span class="instance-title" id="cee-instance-title">Loading spine instance identity…</span><span class="badge attested" id="cee-health-badge" role="button" tabindex="0" title="Open spine instance diagnostics" onclick="openLocalInstanceDiagnostics()" onkeydown="if(event.key==='Enter'||event.key===' '){event.preventDefault();openLocalInstanceDiagnostics();}">SPINE</span><span class="badge" id="cee-build-badge" style="border-color:rgba(106,180,216,.35);color:var(--steel)">v31c432</span><span class="instance-meta" id="cee-instance-meta">full-stack spine workstation · loading committed deployment map</span></div>
<div class="mdi-strip"><span class="mdi-title">Open Browses</span><button class="btn" onclick="cascadeBrowses()">Cascade</button><button class="btn" onclick="tileBrowses()">Tile</button><button class="btn" onclick="openDeletedRecordsBrowse()">Deleted Records</button><button class="btn danger" onclick="closeAllBrowses()">Close All</button><div class="mdi-chips" id="mdi-chips"></div></div>
<div class="workspace" id="workspace"><section class="left-pane" id="left-pane"><div class="pane-hdr"><span class="pane-tag">TREE</span><span class="pane-title">Structure</span><button class="help-dot" onclick="openHelpById('tree', this)">?</button></div><div class="brand-banner"><div class="brand-row"><svg viewBox="0 0 160 160" xmlns="http://www.w3.org/2000/svg" width="44" height="44" style="flex-shrink:0;filter:drop-shadow(0 0 8px rgba(106,180,216,.35))">
  <g transform="translate(5,-20) scale(2)">
    <g stroke="#6ab4d8" stroke-width="0.3" opacity="0.12">
      <line x1="0" y1="30" x2="70" y2="30"/><line x1="0" y1="50" x2="70" y2="50"/>
      <line x1="0" y1="70" x2="70" y2="70"/><line x1="10" y1="20" x2="10" y2="80"/>
      <line x1="30" y1="20" x2="30" y2="80"/><line x1="50" y1="20" x2="50" y2="80"/>
    </g>
    <g fill="none" stroke="#6ab4d8" opacity="0.8">
      <line x1="30" y1="50" x2="60" y2="35" stroke-width="2.2"/>
      <polygon points="56,37 60,35 57,39" fill="#6ab4d8"/>
      <line x1="30" y1="50" x2="55" y2="70" stroke-width="2.2"/>
      <polygon points="51,67 55,70 50,70" fill="#6ab4d8"/>
      <line x1="30" y1="50" x2="15" y2="30" stroke-width="1.8"/>
      <polygon points="18,32 15,30 19,29" fill="#6ab4d8"/>
      <line x1="30" y1="50" x2="18" y2="70" stroke-width="1.8"/>
      <polygon points="21,67 18,70 20,65" fill="#6ab4d8"/>
      <line x1="60" y1="35" x2="55" y2="70" stroke-width="1.5" stroke-dasharray="3,2"/>
      <line x1="15" y1="30" x2="18" y2="70" stroke-width="1.2" stroke-dasharray="2,2"/>
      <line x1="15" y1="30" x2="60" y2="35" stroke-width="1" stroke-dasharray="1,2" opacity="0.5"/>
    </g>
    <g>
      <circle cx="30" cy="50" r="7" fill="#e0b84a" stroke="#e0b84a" stroke-width="1"/>
      <circle cx="30" cy="50" r="10" fill="none" stroke="#e0b84a" stroke-width="0.8" opacity="0.35"/>
      <circle cx="30" cy="50" r="2.5" fill="#fff" opacity="0.9"/>
      <circle cx="60" cy="35" r="5" fill="#6ab4d8" stroke="#6ab4d8" stroke-width="1"/>
      <circle cx="60" cy="35" r="1.8" fill="#fff" opacity="0.8"/>
      <circle cx="55" cy="70" r="5" fill="#6ab4d8" stroke="#6ab4d8" stroke-width="1"/>
      <circle cx="55" cy="70" r="1.8" fill="#fff" opacity="0.8"/>
      <circle cx="15" cy="30" r="4" fill="#6ab4d8" stroke="#6ab4d8" stroke-width="1"/>
      <circle cx="15" cy="30" r="1.4" fill="#fff" opacity="0.8"/>
      <circle cx="18" cy="70" r="4" fill="#6ab4d8" stroke="#6ab4d8" stroke-width="1"/>
      <circle cx="18" cy="70" r="1.4" fill="#fff" opacity="0.8"/>
      <circle cx="38" cy="45" r="1.5" fill="#e0b84a" opacity="0.9"/>
      <circle cx="42" cy="60" r="1.5" fill="#e0b84a" opacity="0.9"/>
      <circle cx="25" cy="38" r="1.2" fill="#9dd0ee" opacity="0.9"/>
      <circle cx="22" cy="62" r="1.2" fill="#9dd0ee" opacity="0.9"/>
    </g>
  </g>
</svg><div class="brand-text"><span class="brand-ch">Chandra</span><span class="brand-ent">Enterprise</span></div></div></div><div class="env-tabs" id="envTabs"><button type="button" class="env-tab active" id="envTabAcceptance" onclick="switchEnvTab('acceptance')">Acceptance <span class="env-status-pill no" id="acceptanceStatusPill">—</span></button><button type="button" class="env-tab" id="envTabProduction" onclick="switchEnvTab('production')">Production <span class="env-status-pill no" id="productionStatusPill">—</span></button></div><div class="env-status-body" id="envStatusBody">Loading…</div><div class="tree-wrap" id="tree"></div></section><div class="tree-splitter" id="tree-splitter" title="Resize tree panel"></div><section class="right-pane" id="right-pane"><div class="pane-hdr"><span class="pane-tag">EDITOR</span><span class="pane-title" id="editor-title">Selected Level</span><span class="pane-sub" id="editor-sub">no selection</span></div><div class="editor-scroll" id="editor"></div><div class="mdi-layer" id="mdi-layer"></div></section></div>
<div class="modal-backdrop" id="edit-backdrop"><div class="modal" id="edit-modal"><div class="modal-hdr" id="edit-hdr"><span class="modal-title" id="edit-title">Edit Spoke</span><button class="modal-close" onclick="closeEditModal()">✕</button></div><div class="modal-body" id="edit-body"></div></div></div>
<div class="context-help-backdrop" id="context-help-backdrop"><div class="context-help-modal" id="context-help-modal" role="dialog" aria-modal="true" aria-labelledby="context-help-title"><div class="context-help-hdr" id="context-help-hdr"><span class="context-help-title" id="context-help-title">Field Help</span><button class="modal-close" onclick="closeContextHelp()">✕</button></div><div class="context-help-body" id="context-help-body"></div></div></div>
<div class="help-pop" id="help-pop"><div class="help-pop-hdr"><span class="help-pop-title" id="help-title">Help</span><button class="help-close" onclick="closeHelp()">✕</button></div><div class="help-pop-body" id="help-body"></div></div>
<div class="modal-backdrop" id="instance-manifest-backdrop">
  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="instance-manifest-title">
    <div class="modal-hdr"><div class="modal-title" id="instance-manifest-title">Instance Manifest</div><button class="modal-close" type="button" onclick="closeInstanceManifest()">×</button></div>
    <div class="modal-body"><div class="instance-manifest-note">Read-only projection of this instance's current chandra.conf plus its persistent immutable instance identity.</div><div class="instance-manifest-grid" id="instance-manifest-grid"></div><div class="action-row" style="justify-content:flex-end"><button class="btn" type="button" onclick="closeInstanceManifest()">CLOSE</button></div></div>
  </div>
</div>
<div class="toast" id="toast"></div>

<!-- =====================================================================
   CHANDRA MD EDITOR COMPONENT (reusable) - - v3
   Self-contained markdown editor: toolbar + textarea + rendered preview.

   HISTORY NOTE: an earlier "v2" comment here described a contenteditable
   rich-surface editor (HTML<->Markdown round-trip, execCommand Bold/
   Italic, View Source toggle). That implementation does not exist in
   this codebase - - checked every UI HTML file in the current upload,
   only this CSS block and that description survived. What's actually
   implemented below is the simpler, real, working editor that WAS found
   intact (identically) in chandra-instance-builder.html,
   chandra-instance-builder-demo.html, and the CEE conflicted copy:
   plain <textarea> source + a separate rendered <div>, toggled via a
   "Source/Render" button - - not a contenteditable surface. If the
   richer contenteditable version is wanted later, it needs to be built
   from scratch; nothing to port exists today.

   v3 change (this session): defaults to the RENDERED view instead of
   raw Markdown source - - actual bold text, not **tags** - - since a
   source-first default was the actual complaint that prompted this
   rewrite. Toggle to Source to type Markdown/use the toolbar, which all
   operate on the underlying <textarea> (selection-based wrap/insert),
   then toggle back to see it rendered.

   REUSE ELSEWHERE:
     1. Copy the style block with id chandra-md-editor-style-v3.
     2. Copy the script block with id chandra-md-editor-script-v3.
     3. Host page must provide two functions: esc(s) (HTML-escape) and
        toast(msg,kind) (kind is "ok" or "err"). Both are tiny utility
        functions already present in most Chandra pages - - copy them
        too if the target page doesn't have them.

   PUBLIC API (call this from host page markup):
     markdownTextareaHtml(id, name, value) -> HTML string
       Renders the full editor (toolbar + textarea + rendered preview).
       id    = unique DOM id for the textarea (also used to derive
               wrap-{id} and preview-{id} ids - - must be unique per
               instance on the page).
       name  = used only as the textarea's HTML name attribute and as
               placeholder header text for empty values.
       value = initial markdown source, or "" / null for placeholder.
     Read the current value the same way regardless of which view (source
     or rendered) is showing: document.getElementById(id).value - - the
     textarea is always the canonical store; the rendered pane is a
     read-only view generated from it, not an independent editable copy.

   Everything else (mdWrap, mdLine, mdLink, mdCopy, mdPaste, mdInsert,
   mdTogglePreview, mdRefreshPreview, mdToHtml) is internal plumbing wired
   to the toolbar buttons via inline onclick="" attributes in the HTML
   markdownTextareaHtml() generates. They're global functions (not an
   IIFE) because of that onclick="" wiring - - if porting into a page that
   already defines globals with these names, rename both the functions
   and the onclick="" strings inside markdownTextareaHtml().
   ===================================================================== -->
<style id="chandra-md-editor-style-v3">
.md-editor{border:1px solid var(--border);border-radius:3px;background:var(--bg3);overflow:hidden}
.md-toolbar{min-height:28px;display:flex;align-items:center;gap:3px;padding:3px 5px;background:var(--bg4);border-bottom:1px solid var(--border);flex-wrap:wrap}
.md-copy-top{margin-left:auto;font-weight:600}
.md-btn{font-family:var(--mono);font-size:10px;color:var(--text2);background:var(--bg3);border:1px solid var(--border);border-radius:2px;padding:2px 6px;cursor:pointer;min-width:24px}
.md-btn:hover{border-color:var(--gold);color:var(--gold)}
.md-btn.md-btn-active{border-color:var(--gold);color:var(--gold);background:var(--gold-bg)}
.md-sep{width:1px;height:16px;background:var(--border);margin:0 3px}
.md-editor textarea{border:0;border-radius:0;background:var(--bg3);width:100%;min-height:150px;resize:vertical;display:none;font-family:var(--mono);font-size:11px}
.md-preview{display:block;min-height:150px;padding:10px;color:var(--text);background:var(--bg2);line-height:1.5;overflow:auto;outline:none;cursor:text}
.md-preview:focus{box-shadow:inset 0 0 0 1px var(--steel)}
.md-preview h1,.md-preview h2,.md-preview h3{font-family:var(--mono);color:var(--gold);margin:6px 0}
.md-preview p{margin:0 0 8px}.md-preview code{font-family:var(--mono);font-size:11px;background:var(--bg4);border:1px solid var(--border);border-radius:2px;padding:1px 4px}
.md-preview pre{font-family:var(--mono);font-size:11px;background:var(--bg4);border:1px solid var(--border);border-radius:3px;padding:8px;overflow:auto;margin:6px 0}
.md-preview blockquote{border-left:2px solid var(--gold);padding-left:8px;margin:6px 0;color:var(--text2)}.md-preview ul{padding-left:20px;margin:6px 0}
.md-preview a{color:var(--steel);text-decoration:underline}
.md-editor.source-mode textarea{display:block}.md-editor.source-mode .md-preview{display:none}
.md-note{font-family:var(--mono);font-size:9px;color:var(--text3);margin-top:4px}
</style>

<!-- end chandra-md-editor component; resume original inline script -->


<style id="chandra-spoke-chain-browser-v1-style">
.chain-table{width:100%;border-collapse:collapse;font-family:var(--mono);font-size:11px;min-width:860px}
.chain-table th{position:sticky;top:0;background:var(--bg3);color:var(--text3);font-size:9px;text-transform:uppercase;letter-spacing:.6px;text-align:left;padding:5px;border-bottom:1px solid var(--border);z-index:1}
.chain-table td{padding:5px;border-bottom:1px solid rgba(106,138,176,.08);color:var(--text2);vertical-align:top;white-space:nowrap}
.chain-table tr:hover td{background:var(--bg3);color:var(--text)}
.chain-artifact{display:none;margin:6px 0 8px 0;padding:8px;background:var(--bg4);border:1px solid var(--border);border-radius:3px;color:var(--text);white-space:pre-wrap;word-break:break-word;font-family:var(--mono);font-size:10px;line-height:1.45;max-height:260px;overflow:auto}
.chain-row-detail .chain-artifact{display:block;margin:0;max-height:320px}
.chain-row-detail{display:none}
.chain-row-detail.open{display:table-row}
.chain-row{cursor:pointer}
.chain-row.open{background:rgba(224,184,74,.04)}
.chain-artifact-meta{display:grid;grid-template-columns:90px 1fr;gap:3px 8px;margin-bottom:8px;padding-bottom:8px;border-bottom:1px solid var(--border)}
.chain-artifact-meta .k{color:var(--text3);font-size:9px;text-transform:uppercase;letter-spacing:.4px}
.chain-artifact-json{white-space:pre-wrap}
.chain-artifact-actions{margin-top:8px}
.chain-row.open .chain-artifact{display:block}
.chain-readonly-note{font-family:var(--mono);font-size:10px;color:var(--text3);padding:6px 8px;border-bottom:1px solid var(--border);background:var(--bg2)}
.stale-conflict-grid{display:grid;grid-template-columns:150px 1fr;gap:6px 10px;font-family:var(--mono);font-size:10px;color:var(--text2)}
.stale-conflict-grid .k{color:var(--text3)}
.stale-conflict-copy{width:100%;min-height:120px;margin-top:8px;font-family:var(--mono);font-size:10px}
</style>


<style id="cee-level-row-style-v31c129">
/* v31c129: Level rows should read like ordinary spine text at rest.
   Hierarchy is carried by indentation and disclosure chevrons; hover supplies
   the only row emphasis. */
.tree-row.tier-hdr{
  color:var(--text2);
  font-weight:400;
  background:transparent;
}
.tree-row.tier-hdr:hover{
  color:var(--text);
  background:var(--bg3);
}
.tree-children>.tree-node>.tree-row::before{display:none}
</style>

<style id="cee-full-spine-editor-style-v1">
  .tree-node.cee-tier-node > .tree-row{background:rgba(48,200,176,.075);border-left:0;font-weight:700}
  .tree-node.cee-tier-node .tree-label{font-weight:700;color:var(--teal)}
  .cee-tier-health{font-family:var(--mono);font-size:9px;padding:1px 5px;border-radius:999px;border:1px solid var(--border);margin-left:6px;white-space:nowrap}
  .cee-tier-health.ok{color:var(--green);border-color:rgba(61,214,140,.35);background:var(--green-bg)}
  .cee-tier-health.fail{color:var(--red);border-color:rgba(232,91,91,.35);background:var(--red-bg)}
  .cee-tier-health.checking{color:var(--amber);border-color:rgba(245,170,66,.35);background:var(--amber-bg)}
  .cee-spine-path{font-family:var(--mono);font-size:10px;color:var(--text3);line-height:1.45;border:1px solid var(--border);background:var(--bg3);padding:8px;border-radius:3px;margin-bottom:10px}
  .cee-level-route-card .card-title{color:var(--teal)}
  .cee-mini-grid{display:grid;grid-template-columns:145px minmax(0,1fr);gap:5px 10px;font-family:var(--mono);font-size:10px;color:var(--text2)}
  .cee-mini-grid .k{color:var(--text3)}
  .cee-spine-btn-row{display:flex;gap:6px;flex-wrap:wrap;margin-top:10px}
  .cee-route-pill{display:inline-flex;align-items:center;max-width:100%;font-family:var(--mono);font-size:9px;border:1px solid var(--border);background:var(--bg4);color:var(--text2);border-radius:999px;padding:2px 7px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
</style>


<style id="chandra-cee-dev-reset-db-style-v1">
  .cee-reset-backdrop{
    position:fixed;
    inset:0;
    z-index:100000;
    display:none;
    align-items:center;
    justify-content:center;
    background:rgba(0,0,0,.62);
    padding:24px;
  }
  .cee-reset-backdrop.show{display:flex}
  .cee-reset-modal{
    width:min(760px,96vw);
    max-height:90vh;
    overflow:auto;
    background:var(--bg2);
    color:var(--text);
    border:1px solid rgba(232,91,91,.42);
    border-radius:6px;
    box-shadow:0 24px 80px rgba(0,0,0,.65);
  }
  .cee-reset-hdr{
    display:flex;
    align-items:center;
    gap:10px;
    padding:13px 15px;
    background:var(--red-bg);
    border-bottom:1px solid rgba(232,91,91,.30);
  }
  .cee-reset-title{
    font-family:var(--mono);
    font-size:12px;
    font-weight:800;
    letter-spacing:.7px;
    color:var(--red);
    text-transform:uppercase;
    flex:1;
  }
  .cee-reset-body{padding:14px 15px}
  .cee-reset-body p{margin:0 0 10px 0;line-height:1.45;color:var(--text2)}
  .cee-reset-list{
    margin:10px 0;
    border:1px solid var(--border);
    border-radius:4px;
    background:var(--bg);
    max-height:220px;
    overflow:auto;
    font-family:var(--mono);
    font-size:10px;
  }
  .cee-reset-row{
    display:grid;
    grid-template-columns:110px 1fr;
    gap:8px;
    padding:7px 9px;
    border-bottom:1px solid rgba(106,138,176,.10);
  }
  .cee-reset-row:last-child{border-bottom:0}
  .cee-reset-kind{color:var(--gold);font-weight:700}
  .cee-reset-url{color:var(--text2);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
  .cee-reset-confirm{
    display:grid;
    grid-template-columns:150px 1fr;
    gap:8px;
    align-items:center;
    margin-top:12px;
  }
  .cee-reset-actions{
    display:flex;
    justify-content:flex-end;
    gap:8px;
    padding:12px 15px 15px 15px;
    border-top:1px solid var(--border);
  }
  .cee-reset-result{
    margin-top:10px;
    padding:8px;
    border:1px solid var(--border);
    border-radius:3px;
    background:var(--bg);
    font-family:var(--mono);
    font-size:10px;
    white-space:pre-wrap;
    color:var(--text2);
    display:none;
  }
</style>


<!-- CEE level-system route/materialization hotfix v1 removed in v3; authority materializer owns routing/materialization. -->


<!-- CEE level-system authority materializer v3
     Architectural rule: committed spine/personality labels are bootstrap defaults;
     latest _level_info / _form_design CUs on the owning tier instance are current
     materialized truth for tree refreshes and modal data. -->


<style id="chandra-chain-window-header-flex-v7">
/* Chain viewer header must flex across resized MDI window.
   Earlier CEE child-browse CSS applies `.browse-title{max-width:520px}`,
   which leaves the CU count and close button stranded after resize. */
.chain-browse-win .browse-hdr{
  width:100% !important;
  min-width:0 !important;
  display:flex !important;
  align-items:center !important;
}
.chain-browse-win .browse-title{
  flex:1 1 auto !important;
  min-width:0 !important;
  max-width:none !important;
  overflow:hidden !important;
  text-overflow:ellipsis !important;
  white-space:nowrap !important;
}
.chain-browse-win .browse-scope{
  margin-left:auto !important;
  flex:0 0 auto !important;
  white-space:nowrap !important;
}
.chain-browse-win .browse-close{
  flex:0 0 auto !important;
}
</style>


<style id="chandra-chain-context-actions-v8-style">
.chain-browse-win .cee-children-btn,
.chain-browse-win .cee-toolbar-children{display:none!important}
</style>


<style id="chandra-browse-header-logo-v9-style">
.browse-hdr .browse-hdr-logo{
  width:18px;
  height:18px;
  flex:0 0 18px;
  display:inline-flex;
  align-items:center;
  justify-content:center;
  pointer-events:none;
  filter:drop-shadow(0 0 5px rgba(106,180,216,.32));
  opacity:.95;
}
.browse-hdr .browse-hdr-logo svg{
  width:18px;
  height:18px;
  display:block;
}
.chain-browse-win .browse-hdr .browse-hdr-logo{
  filter:drop-shadow(0 0 5px rgba(224,184,74,.22));
}
</style>


<style id="chandra-browse-help-v10-style">
.browse-help-dot{
  width:15px!important;height:15px!important;min-width:15px!important;
  padding:0!important;margin-left:4px!important;
  font-size:9px!important;line-height:13px!important;
  border-radius:50%!important;display:inline-flex!important;
  align-items:center!important;justify-content:center!important;
  vertical-align:middle!important;cursor:pointer!important;
}
.browse-hdr .browse-help-dot{margin-left:2px!important;flex:0 0 auto!important}
.browse-tools .browse-help-dot{margin-left:-2px!important;margin-right:4px!important;flex:0 0 auto!important}
.browse-table th .browse-th-wrap,
.chain-table th .browse-th-wrap{display:inline-flex;align-items:center;gap:3px;white-space:nowrap}
.browse-table th .browse-help-dot,
.chain-table th .browse-help-dot{margin-left:1px!important;opacity:.72}
.browse-table th .browse-help-dot:hover,
.chain-table th .browse-help-dot:hover{opacity:1}
.chain-browse-win .browse-title-help{margin-left:6px!important}
</style>


<style id="chandra-help-index-v11-style">
.help-index-win{width:860px;height:540px;min-width:620px;min-height:360px}
.help-index-layout{display:grid;grid-template-columns:235px 1fr;height:100%;min-height:0}
.help-index-tags{border-right:1px solid var(--border);background:var(--bg2);overflow:auto;padding:8px}
.help-index-main{display:flex;flex-direction:column;min-width:0;min-height:0;background:var(--bg)}
.help-index-search{display:flex;gap:6px;padding:8px;border-bottom:1px solid var(--border);background:var(--bg2);flex-shrink:0}
.help-index-search input{flex:1;height:26px;font-family:var(--mono);font-size:10px}
.help-tag-row{font-family:var(--mono);font-size:10px;line-height:1.35;padding:6px 7px;border:1px solid transparent;border-radius:3px;color:var(--text2);cursor:pointer;display:flex;gap:6px;align-items:center;justify-content:space-between}
.help-tag-row:hover{background:var(--bg3);color:var(--text)}
.help-tag-row.sel{background:var(--gold-bg);border-color:rgba(224,184,74,.45);color:var(--gold);box-shadow:inset 3px 0 0 var(--gold);font-weight:700}
.help-tag-count{font-size:9px;color:var(--text3);border:1px solid var(--border);background:var(--bg3);border-radius:2px;padding:0 4px;flex:0 0 auto}
.help-context-list{overflow:auto;padding:8px;min-height:0;flex:1}
.help-context-row{border:1px solid var(--border);background:var(--bg2);border-radius:4px;padding:8px;margin-bottom:7px;cursor:pointer;position:relative}
.help-context-row:hover{border-color:rgba(224,184,74,.38);background:var(--bg3)}
.help-context-row.sel{border-color:var(--gold);background:var(--bg3);box-shadow:inset 3px 0 0 var(--gold)}
.help-context-row-actions{position:absolute;right:8px;top:8px;display:flex;gap:5px}
.help-context-row-actions .btn{font-family:var(--mono);font-size:9px;padding:3px 7px}
.help-context-row-actions .help-context-row-chain{border-color:var(--steel);color:var(--steel);background:var(--steel-bg);font-weight:600}
.help-context-row-actions .help-context-row-chain:hover{border-color:var(--steel);background:var(--steel-bg);color:var(--steel);filter:brightness(1.15)}
.help-context-title{font-family:var(--mono);font-size:11px;font-weight:700;color:var(--gold);display:flex;align-items:center;gap:6px}
.help-context-id{font-family:var(--mono);font-size:9px;color:var(--text3);margin-top:2px}
.help-context-body{font-size:12px;color:var(--text2);margin-top:5px;line-height:1.35;max-height:36px;overflow:hidden}
.help-context-tags{display:flex;flex-wrap:wrap;gap:4px;margin-top:6px}
.help-context-tag{font-family:var(--mono);font-size:8px;color:var(--steel);border:1px solid rgba(106,180,216,.22);background:var(--steel-bg);border-radius:2px;padding:1px 4px}
.help-context-form .readonly-help{border:1px solid var(--border);background:var(--bg3);border-radius:4px;padding:10px;margin-bottom:10px}
.help-context-form .readonly-help h3{font-family:var(--mono);font-size:12px;color:var(--gold);margin:0 0 6px 0}
.help-context-form .readonly-help p{color:var(--text2);line-height:1.45;margin:0 0 8px 0}
.help-context-form .help-form-tags{display:flex;flex-wrap:wrap;gap:4px;margin-top:6px}
.help-context-form .help-form-tag{font-family:var(--mono);font-size:9px;color:var(--steel);border:1px solid rgba(106,180,216,.22);background:var(--steel-bg);border-radius:2px;padding:1px 5px}
.help-context-form textarea{min-height:130px}
.help-context-form .tail-line{font-family:var(--mono);font-size:10px;color:var(--text3);margin-top:6px}
.help-index-empty{font-family:var(--mono);font-size:11px;color:var(--text3);padding:18px;text-align:center}
</style>


<style id="chandra-mdi-windowing-v14-style">
  /* MDI browse windows live inside #mdi-layer. Their drag math must be layer-relative, not viewport-relative. */
  #mdi-layer .browse-win{position:absolute!important;transform:none!important;pointer-events:auto!important;}
  #mdi-layer .browse-win .browse-hdr{cursor:move!important;}
  #mdi-layer .browse-win.chandra-mdi-dragging .browse-hdr{cursor:move!important;}
  #mdi-layer .browse-win .browse-hdr *{cursor:inherit;}
  #mdi-layer .browse-win .browse-hdr button,
  #mdi-layer .browse-win .browse-hdr .help-dot,
  #mdi-layer .browse-win .browse-hdr input,
  #mdi-layer .browse-win .browse-hdr select,
  #mdi-layer .browse-win .browse-hdr textarea{cursor:pointer!important;}
</style>


<style id="chandra-mdi-browse-header-flex-v13">
  /* All MDI browse-like windows should keep right-side controls pinned while resizing.
     This neutralizes older global `.browse-title{max-width:520px}` rules and applies
     to business record browses, CU chain browses, and Help Index windows. */
  #mdi-layer .browse-win .browse-hdr{
    width:100% !important;
    min-width:0 !important;
    display:flex !important;
    align-items:center !important;
    gap:7px !important;
  }
  #mdi-layer .browse-win .browse-hdr-logo{
    flex:0 0 auto !important;
  }
  #mdi-layer .browse-win .browse-title{
    flex:1 1 auto !important;
    min-width:0 !important;
    max-width:none !important;
    overflow:hidden !important;
    text-overflow:ellipsis !important;
    white-space:nowrap !important;
  }
  #mdi-layer .browse-win .browse-title-help{
    flex:0 0 auto !important;
  }
  #mdi-layer .browse-win .browse-scope{
    margin-left:auto !important;
    flex:0 0 auto !important;
    white-space:nowrap !important;
  }
  #mdi-layer .browse-win .help-dot,
  #mdi-layer .browse-win .browse-close{
    flex:0 0 auto !important;
  }
</style>


<style id="chandra-help-context-form-v15-style">
  .help-context-row{position:relative;padding-right:70px!important}
  .help-context-row .help-context-chain-mini{
    position:absolute;right:8px;top:8px;
    font-family:var(--mono);font-size:9px;padding:3px 6px;
  }
  .help-context-save-state{font-family:var(--mono);font-size:10px;color:var(--text3);margin-left:auto;align-self:center}
  .help-context-save-state.ok{color:var(--green)}
  .help-context-save-state.err{color:var(--red)}
</style>


<style id="chandra-help-context-form-v16-style">
  .help-context-form .help-context-read-state{
    font-family:var(--mono);font-size:10px;color:var(--text3);margin:6px 0 0 0;
  }
  .help-context-form .help-context-read-state.ok{color:var(--green)}
  .help-context-form .help-context-read-state.err{color:var(--red)}
  .help-context-form .action-row .spacer{flex:1 1 auto}
.help-index-toolbar{height:34px;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:6px;padding:5px 8px;background:var(--bg2);flex-shrink:0}
.help-index-toolbar .help-index-selection{font-family:var(--mono);font-size:9px;color:var(--text3);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;flex:1}
.help-index-toolbar .btn:disabled{opacity:.38;cursor:not-allowed}
</style>


<style id="chandra-attachment-manager-style-v1">
.attach-mgr-grid{display:flex;flex-wrap:wrap;gap:8px;margin-top:6px}
.attach-mgr-tile{position:relative;width:64px;height:64px;border:1px solid var(--border2);border-radius:4px;background:var(--bg3);display:flex;flex-direction:column;align-items:center;justify-content:center;cursor:pointer;overflow:hidden}
.attach-mgr-tile:hover{border-color:var(--steel);background:var(--bg4)}
.attach-mgr-ext{font-family:var(--mono);font-size:10px;font-weight:700;letter-spacing:.3px;color:var(--steel)}
.attach-mgr-name{font-family:var(--mono);font-size:7px;color:var(--text3);max-width:58px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;margin-top:2px;padding:0 3px}
.attach-mgr-del{position:absolute;top:2px;right:2px;width:14px;height:14px;border-radius:2px;background:var(--bg2);border:1px solid var(--border2);color:var(--text3);font-size:10px;line-height:12px;text-align:center;cursor:pointer}
.attach-mgr-del:hover{border-color:var(--red);color:var(--red)}
.attach-mgr-tile-add{border-style:dashed;color:var(--text3)}
.attach-mgr-tile-add:hover{border-color:var(--gold);color:var(--gold)}
.attach-mgr-tile-add .attach-mgr-ext{font-size:20px;color:inherit}
.attach-mgr-uploading{opacity:.5;pointer-events:none}
.attach-mgr-hint{font-family:var(--mono);font-size:9px;color:var(--text3);margin-top:6px}
.file-attach-control{border:1px solid var(--border);border-radius:4px;background:var(--bg3);padding:8px 10px;display:flex;flex-wrap:wrap;gap:8px;align-items:center}
.file-attach-control .file-attach-name{font-family:var(--mono);font-size:12px;color:var(--text);flex:1;min-width:120px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.file-attach-control .file-attach-name.is-empty{color:var(--text3);font-style:italic}
.file-attach-control .file-attach-actions{display:flex;gap:6px;align-items:center;flex-wrap:wrap}
.file-attach-control input[type=file]{font-size:11px;max-width:220px}
.file-attach-control .file-attach-hash-row{width:100%;display:flex;flex-direction:column;gap:2px;margin-top:2px}
.file-attach-control .file-attach-hash-label{font-family:var(--mono);font-size:9px;color:var(--text3);text-transform:uppercase;letter-spacing:.4px}
.file-attach-control .file-attach-hash{
  font-family:var(--mono);font-size:11px;color:var(--text2);
  background:var(--bg2);border:1px solid var(--border);border-radius:3px;
  padding:4px 8px;width:100%;box-sizing:border-box;
  overflow-x:auto;white-space:nowrap;user-select:all;cursor:text;
}
.file-attach-control .file-attach-hash.is-empty{color:var(--text3);font-style:italic}


</style>


<style id="chandra-test-plans-style-v1">
/* Test Plans reuses the bug-reports table/toolbar visual language */
.testplans-toolbar{display:flex;align-items:center;gap:8px;padding:8px 10px;border-bottom:1px solid var(--border);flex-wrap:wrap}
.testplans-toolbar input{flex:1;min-width:160px}
.testplans-table{width:100%;border-collapse:collapse;font-family:var(--mono);font-size:11px}
.testplans-table thead th{text-align:left;padding:6px 8px;color:var(--text3);font-size:9px;text-transform:uppercase;letter-spacing:.4px;border-bottom:1px solid var(--border);background:var(--bg3);position:sticky;top:0}
.testplans-table tbody tr{cursor:pointer;border-bottom:1px solid var(--border)}
.testplans-table tbody tr:hover{background:var(--bg3)}
.testplans-table tbody tr.sel td{background:var(--gold-bg)!important;color:var(--gold)!important}
.testplans-table td{padding:6px 8px;color:var(--text2);vertical-align:top}
.testplans-table td.title-cell{color:var(--text);font-weight:600;max-width:280px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.tp-badge{display:inline-block;padding:1px 6px;border-radius:2px;font-size:9px;font-weight:600;text-transform:uppercase;letter-spacing:.3px}
.tp-badge-draft{background:var(--bg3);color:var(--text-dim);border:1px solid var(--border)}
.tp-badge-active{background:rgba(76,175,130,.15);color:var(--green);border:1px solid rgba(76,175,130,.35)}
.tp-badge-archived{background:rgba(224,92,92,.12);color:var(--red);border:1px solid rgba(224,92,92,.3)}

.tp-md-load-row{display:flex;align-items:center;gap:8px;margin:0 0 6px}
.tp-md-load-row .small-muted{flex:1}
.tp-run-panel{border:1px solid var(--border);background:var(--bg2);border-radius:3px;margin-top:8px;overflow:hidden}
.tp-run-stats{display:flex;flex-wrap:wrap;gap:10px 16px;padding:8px 10px;border-bottom:1px solid var(--border);font-family:var(--mono);font-size:11px;color:var(--text2);background:var(--bg3)}
.tp-run-stats b{color:var(--text);font-weight:600}
.tp-run-stats .tp-rate-ok{color:var(--green)}
.tp-run-stats .tp-rate-mid{color:var(--amber)}
.tp-run-stats .tp-rate-bad{color:var(--red)}
.tp-run-stat-btn{font:inherit;color:var(--text2);background:transparent;border:1px solid transparent;border-radius:3px;padding:1px 5px;cursor:pointer}
.tp-run-stat-btn:hover{border-color:var(--border2);background:var(--bg2);color:var(--text)}
.tp-run-stat-btn.tp-failed-filter{color:var(--red)}
.tp-run-stat-btn.tp-active{border-color:rgba(224,92,92,.45);background:rgba(224,92,92,.12);color:var(--red)}
.tp-run-copy-failed{font:inherit;color:var(--text2);background:transparent;border:1px solid var(--border);border-radius:3px;padding:1px 6px;cursor:pointer}
.tp-run-copy-failed:hover:not(:disabled){color:var(--text);border-color:var(--steel);background:var(--steel-bg)}
.tp-run-copy-failed:disabled{opacity:.45;cursor:default}
.tp-step-row.tp-result-filter-hidden,.tp-test-separator.tp-result-filter-hidden{display:none!important}
.tp-step-list{max-height:280px;overflow:auto}
.tp-step-row{display:grid;grid-template-columns:auto 76px minmax(0,1fr);gap:10px;align-items:start;padding:8px 10px;border-bottom:1px solid var(--border)}
.tp-run-notes{display:block;width:100%;margin-top:5px;padding:3px 0;border:0;border-bottom:1px dotted var(--border);background:transparent;color:var(--text2);font:11px/1.35 var(--sans);box-sizing:border-box}.tp-run-notes::placeholder{color:var(--text3);font-style:italic}.tp-run-notes:focus{border-bottom-color:var(--steel);outline:none;color:var(--text)}
.tp-step-row.tp-test-start:not(:first-child){border-top:0;padding-top:8px}
.tp-test-separator{display:flex;align-items:center;justify-content:space-between;gap:10px;padding:9px 10px 7px;border-top:3px double var(--border2);border-bottom:1px solid var(--border);background:var(--bg3);font-family:var(--mono)}
.tp-test-separator:first-child{border-top:1px solid var(--border2)}
.tp-test-separator-title{min-width:0;color:var(--text);font-size:11px;font-weight:700;white-space:normal}
.tp-test-source-btn{flex:0 0 auto;font-size:9px;padding:3px 8px;border-color:var(--steel);color:var(--steel);background:var(--steel-bg)}
.tp-test-source-btn:hover{filter:brightness(1.15)}
.tp-step-row:last-child{border-bottom:none}

/* v31c198: tabbed Test Plan editor and split author/run workspace */
.tp-form-shell{display:flex;flex-direction:column;min-height:620px;max-height:78vh}
.tp-form-tabs{display:flex;gap:2px;border-bottom:1px solid var(--border);flex:0 0 auto}
.tp-form-tab{font-family:var(--mono);font-size:10px;letter-spacing:.35px;text-transform:uppercase;padding:8px 14px;border:1px solid transparent;border-bottom:none;background:transparent;color:var(--text3);cursor:pointer}
.tp-form-tab:hover{color:var(--text)}
.tp-form-tab.active{color:var(--steel);background:var(--bg3);border-color:var(--border);border-bottom-color:var(--bg3);margin-bottom:-1px}
.tp-form-tab-panel{display:none;min-height:0;overflow:auto;padding:12px 2px 4px;flex:1 1 auto}
.tp-form-tab-panel.active{display:block}
.tp-form-tab-panel[data-tab-panel="plan"].active{display:flex;flex-direction:column;overflow:hidden;height:100%}
.tp-plan-workspace{display:grid;grid-template-columns:minmax(330px,45fr) 7px minmax(380px,55fr);min-height:0;height:100%;flex:1 1 0;border:1px solid var(--border);background:var(--bg2)}
.tp-plan-source-pane,.tp-plan-run-pane{min-width:0;min-height:0;display:flex;flex-direction:column;overflow:hidden}
.tp-plan-pane-header{display:flex;align-items:center;justify-content:space-between;gap:8px;min-height:42px;padding:7px 9px;border-bottom:1px solid var(--border);background:var(--bg3)}
.tp-plan-pane-title{font-family:var(--mono);font-size:10px;font-weight:700;letter-spacing:.35px;text-transform:uppercase;color:var(--text2)}
.tp-plan-pane-actions{display:flex;align-items:center;gap:6px;flex-wrap:wrap;justify-content:flex-end}
.tp-plan-source-scroll{padding:8px;overflow:auto;min-height:0;flex:1 1 auto}
.tp-plan-source-scroll .md-wrap{height:100%;min-height:420px;display:flex;flex-direction:column}
.tp-plan-source-scroll .md-editor-shell{flex:1 1 auto;min-height:0}
.tp-plan-source-scroll textarea{min-height:420px;height:100%!important}
.tp-plan-run-pane{height:100%;align-self:stretch}
.tp-plan-run-pane .tp-run-stats{flex:0 0 auto;margin:8px}
.tp-plan-run-pane .tp-step-list{
  flex:1 1 0;
  min-height:0;
  height:auto;
  max-height:none;
  overflow:auto;
  margin:0 8px 8px;
  border:1px solid var(--border);
  background:var(--bg2);
  box-sizing:border-box;
}
.tp-plan-run-pane .tp-step-list:empty{display:block}
.tp-plan-splitter{cursor:col-resize;background:var(--border);position:relative;touch-action:none}
.tp-plan-splitter:hover,.tp-plan-splitter.dragging{background:var(--steel)}
.tp-plan-splitter:after{content:"";position:absolute;top:50%;left:2px;width:3px;height:34px;transform:translateY(-50%);border-top:1px solid var(--text3);border-bottom:1px solid var(--text3)}
.tp-form-footer{display:flex;align-items:center;justify-content:space-between;gap:10px;padding-top:10px;border-top:1px solid var(--border);flex:0 0 auto}
.tp-form-footer .tail-line{margin:0;min-width:0;overflow:hidden;text-overflow:ellipsis}
@media(max-width:900px){
  .tp-form-shell{max-height:none}
  .tp-plan-workspace{display:flex;flex-direction:column;overflow:auto}
  .tp-plan-splitter{display:none}
  .tp-plan-source-pane,.tp-plan-run-pane{min-height:430px;overflow:visible}
  .tp-plan-source-scroll,.tp-plan-run-pane .tp-step-list{overflow:auto}
}

/* v31c198: modeless MDI Test Plan Run window */
#mdi-layer .tp-run-mdi{min-width:760px;min-height:480px;display:flex;flex-direction:column;overflow:hidden}
#mdi-layer .tp-run-mdi .tp-run-mdi-body{flex:1 1 auto;min-height:0;overflow:hidden;padding:8px;background:var(--bg)}
#mdi-layer .tp-run-mdi .tp-form-shell{height:100%;min-height:0;max-height:none}
#mdi-layer .tp-run-mdi .tp-form-tab-panel{min-height:0}
#mdi-layer .tp-run-mdi .tp-form-footer{padding:8px 2px 0}
#mdi-layer .tp-run-mdi .browse-title{font-weight:600}
#mdi-layer .browse-win .browse-max-btn{min-width:25px;text-align:center}

.tp-automation-badge{display:inline-flex;align-items:center;justify-content:center;min-width:62px;height:24px;padding:0 7px;border:1px solid var(--border);border-radius:2px;font-family:var(--mono);font-size:9px;font-weight:700;letter-spacing:.7px}.tp-automation-badge.auto{color:var(--steel);background:var(--steel-bg);border-color:rgba(106,180,216,.35)}.tp-automation-badge.manual{color:var(--text3);background:var(--bg3)}.tp-automation-badge.candidate{color:var(--amber);background:rgba(216,168,106,.08);border-color:rgba(216,168,106,.35)}.tp-automation-badge.unanalyzed{color:var(--text3);background:transparent;border-style:dashed}.tp-automation-badge.error{color:var(--red);background:rgba(210,82,82,.08);border-color:rgba(210,82,82,.35)}.tp-automation-evidence{display:block;margin-top:4px;font-family:var(--mono);font-size:9px;color:var(--text3);line-height:1.35}.tp-automation-column-head{display:grid;grid-template-columns:auto 76px minmax(0,1fr);gap:10px;padding:5px 10px;border-bottom:1px solid var(--border);background:var(--bg3);font-family:var(--mono);font-size:8px;letter-spacing:.7px;text-transform:uppercase;color:var(--text3)}.tp-automation-column-head span:first-child{min-width:96px}
.tp-step-row.tp-pass{background:rgba(76,175,130,.08)}
.tp-step-row.tp-fail{background:rgba(224,92,92,.08)}
.tp-step-controls{display:flex;flex-direction:column;gap:4px;min-width:58px}
.tp-pf{font-size:10px;padding:3px 8px;border:1px solid var(--border);background:var(--bg1);color:var(--text-dim);border-radius:2px;cursor:pointer;font-family:var(--mono);font-weight:600;letter-spacing:.3px}
.tp-pf:hover{filter:brightness(1.08)}
.tp-pf.tp-on-pass{background:rgba(76,175,130,.2);border-color:rgba(76,175,130,.5);color:var(--green)}
.tp-pf.tp-on-fail{background:rgba(224,92,92,.18);border-color:rgba(224,92,92,.45);color:var(--red)}
.tp-step-text{font-size:12px;color:var(--text);line-height:1.45;padding-top:2px}
.tp-step-seq{color:var(--text-dim);font-family:var(--mono);font-size:10px;margin-right:6px}
.tp-confirm-panel{border:1px solid var(--border);background:var(--bg2);border-radius:3px;padding:12px 14px;margin:10px 0 4px}
.tp-confirm-panel .tp-confirm-title{font-weight:600;color:var(--gold);margin-bottom:6px}
.tp-confirm-panel .tp-confirm-body{font-size:12px;color:var(--text2);line-height:1.45;margin-bottom:8px}
.tp-confirm-panel .tp-confirm-meta{font-family:var(--mono);font-size:11px;color:var(--text-dim);margin-bottom:10px;word-break:break-all}

</style>
<style id="chandra-bug-reports-style-v1">
.bugreports-toolbar{display:flex;align-items:center;gap:8px;padding:8px 10px;border-bottom:1px solid var(--border);flex-wrap:wrap}
.bugreports-toolbar input{flex:1;min-width:160px}
.bugreports-table{width:100%;border-collapse:collapse;font-family:var(--mono);font-size:11px}
.bugreports-table thead th{text-align:left;padding:6px 8px;color:var(--text3);font-size:9px;text-transform:uppercase;letter-spacing:.4px;border-bottom:1px solid var(--border);background:var(--bg3);position:sticky;top:0}
.bugreports-table tbody tr{cursor:pointer;border-bottom:1px solid var(--border)}
.bugreports-table tbody tr:hover{background:var(--bg3)}
.bugreports-table tbody tr.sel td{background:var(--gold-bg)!important;color:var(--gold)!important}
.bugreports-table td{padding:6px 8px;color:var(--text2);vertical-align:top}
.bugreports-table td.title-cell{color:var(--text);font-weight:600;max-width:280px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.bugreports-table .br-row-chain-btn{font-size:9px;padding:3px 7px;border-color:var(--steel);color:var(--steel);background:var(--steel-bg);font-weight:600}
.bugreports-table .br-row-chain-btn:hover{filter:brightness(1.15)}
.br-badge{font-family:var(--mono);font-size:9px;font-weight:700;letter-spacing:.3px;padding:2px 7px;border-radius:2px;display:inline-block;white-space:nowrap}
.br-badge-open{background:var(--steel-bg);color:var(--steel);border:1px solid var(--steel)}
.br-badge-triaged{background:var(--amber-bg);color:var(--amber);border:1px solid var(--amber)}
.br-badge-inprogress{background:var(--gold-bg);color:var(--gold);border:1px solid var(--gold)}
.br-badge-resolved{background:var(--green-bg);color:var(--green);border:1px solid var(--green)}
.br-badge-wontfix{background:var(--bg4);color:var(--text3);border:1px solid var(--border2)}
.br-badge-duplicate{background:var(--bg4);color:var(--text3);border:1px solid var(--border2)}
.br-badge-deleted{background:var(--red-bg);color:var(--red);border:1px solid var(--red)}
.br-sev-critical{color:var(--red);font-weight:700}
.br-sev-high{color:var(--amber);font-weight:700}
.br-sev-medium{color:var(--text2)}
.br-sev-low{color:var(--text3)}
.br-sev-cosmetic{color:var(--text3)}
.br-tabs{display:flex;gap:2px;border-bottom:1px solid var(--border);margin-bottom:10px}
.br-tab{font-family:var(--mono);font-size:10px;padding:6px 12px;color:var(--text3);cursor:pointer;border-bottom:2px solid transparent}
.br-tab:hover{color:var(--text2)}
.br-tab.active{color:var(--gold);border-bottom-color:var(--gold)}
.br-tabpanel{display:none}
.br-tabpanel.active{display:block}
.br-field-row{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-bottom:10px}
.br-field-row .field.full{grid-column:1 / -1}
</style>


<style id="chandra-cu-record-viewer-style-v1">
.cu-rv-kv{display:grid;grid-template-columns:120px 1fr;gap:5px 10px;font-family:var(--mono);font-size:11px;color:var(--text2);margin-bottom:12px;padding-bottom:10px;border-bottom:1px solid var(--border)}
.cu-rv-kv .k{color:var(--text3);font-size:9px;text-transform:uppercase;letter-spacing:.4px;align-self:start;padding-top:1px}
.cu-rv-json{font-family:var(--mono);font-size:11px;line-height:1.5;white-space:pre-wrap;word-break:break-word;background:var(--bg3);border:1px solid var(--border);border-radius:3px;padding:10px;max-height:320px;overflow:auto;color:var(--text)}
.cu-rv-actions{display:flex;gap:6px;margin-top:12px;flex-wrap:wrap}
</style>


<style id="chandra-cee-acceptance-review-style">
body.acceptance-review-mode .route-guard-banner{display:none!important}
body.acceptance-review-mode #missingSpineModal{display:none!important}
body.acceptance-review-mode #routeGuardBanner{display:none!important}
.acceptance-review-banner{
  display:none;
  border-bottom:1px solid var(--border2);
  background:linear-gradient(90deg, rgba(48,200,176,.12), rgba(224,184,74,.06));
  padding:10px 14px;
  gap:12px;
  align-items:center;
  font-family:var(--mono);
  flex-shrink:0;
}
.acceptance-review-banner.show{display:flex}
.acceptance-review-main{flex:1;min-width:0}
.acceptance-review-title{font-weight:900;color:var(--teal);font-size:11px;letter-spacing:.8px;text-transform:uppercase}
.acceptance-review-detail{color:var(--text2);font-size:10px;line-height:1.45;white-space:normal;word-break:break-word;margin-top:2px}
.acceptance-review-actions{display:flex;gap:6px;align-items:center;flex-wrap:wrap;justify-content:flex-end}
.acceptance-review-actions .btn.primary{border-color:rgba(224,184,74,.42);color:var(--gold);background:var(--gold-bg)}
.acceptance-accept-overlay{position:fixed;inset:0;z-index:9600;display:none;align-items:center;justify-content:center;background:rgba(0,0,0,.65)}
.acceptance-accept-overlay.show{display:flex}
.acceptance-accept-modal{width:min(620px,92vw);background:var(--bg2);border:1px solid var(--border2);border-radius:4px;box-shadow:0 18px 70px rgba(0,0,0,.7);padding:16px;font-family:var(--mono)}
.acceptance-accept-title{font-weight:900;color:var(--gold);font-size:12px;letter-spacing:.7px;text-transform:uppercase;margin-bottom:10px}
.acceptance-accept-body{color:var(--text2);font-size:12px;line-height:1.55;margin-bottom:12px}
.acceptance-accept-status{font-size:11px;line-height:1.5;margin-top:8px;white-space:normal;word-break:break-word}
</style>

<div class="acceptance-accept-overlay" id="ceeAcceptanceAcceptOverlay">
  <div class="acceptance-accept-modal">
    <div class="acceptance-accept-title">Accept Acceptance Spine</div>
    <div class="acceptance-accept-body">
      Are you sure? This action will commit the current test spine configuration as the accepted source for the Production spine.
      <br><br>
      Production creation or any later Production change remains governed by the Production/Concordia rules.
    </div>
    <div class="acceptance-accept-status" id="ceeAcceptanceAcceptStatus"></div>
    <div class="action-row" style="justify-content:flex-end;margin-top:12px">
      <button class="btn" onclick="ceeCloseAcceptanceAcceptModal()">No</button>
      <button class="btn primary" id="ceeAcceptanceAcceptYesBtn" onclick="ceeConfirmAcceptanceAccept()">Yes</button>
    </div>
  </div>
</div>


<script id="cee-boot-pause">
/* Boot pause: capture parse/runtime errors before UI paints; freeze with overlay.
   Open DevTools first — debugger stops on load so the black-screen message is readable. */
(function(){
  window.__CEE_BOOT_ERRORS__ = window.__CEE_BOOT_ERRORS__ || [];
  function showBootOverlay(){
    var errs = window.__CEE_BOOT_ERRORS__;
    if(!errs.length) return;
    var el = document.getElementById("cee-boot-error-overlay");
    if(!el){
      el = document.createElement("div");
      el.id = "cee-boot-error-overlay";
      el.setAttribute("style",
        "position:fixed;inset:0;z-index:2147483647;background:#0a0a0a;color:#f5c2c2;"+
        "font:13px/1.45 ui-monospace,Menlo,Consolas,monospace;padding:24px;overflow:auto;");
      (document.body||document.documentElement).appendChild(el);
    }
    el.innerHTML =
      "<div style='color:#fff;font-weight:700;margin-bottom:12px'>CEE boot error (page paused)</div>"+
      "<pre style='white-space:pre-wrap;margin:0'>"+errs.map(function(e){
        return String(e).replace(/[&<>]/g,function(c){return {"&":"&amp;","<":"&lt;",">":"&gt;"}[c];});
      }).join("\n\n")+"</pre>"+
      "<p style='color:#aaa;margin-top:16px'>Fix the error or click Continue to dismiss.</p>"+
      "<button type='button' id='cee-boot-continue' style='margin-top:8px;padding:8px 14px;cursor:pointer'>Continue</button>";
    var btn = document.getElementById("cee-boot-continue");
    if(btn) btn.onclick = function(){ el.remove(); };
  }
  window.addEventListener("error", function(e){
    var msg = (e && e.message) || "error";
    var where = ((e && e.filename) || "?") + ":" + ((e && e.lineno) || "?") + ":" + ((e && e.colno) || "?");
    window.__CEE_BOOT_ERRORS__.push(msg + "\n  at " + where);
    try { showBootOverlay(); } catch (_){}
  });
  window.addEventListener("unhandledrejection", function(e){
    var r = e && e.reason;
    window.__CEE_BOOT_ERRORS__.push("Unhandled rejection: " + (r && r.message ? r.message : String(r)));
    try { showBootOverlay(); } catch (_){}
  });
  // debugger removed after identifying HTML comment -- leakage (dates like 20260805-20).
})();
</script>

<script src="/chandra-help-registry.js"></script>
<script id="cee-acceptance-native-formdesign-v31">
(function(){
  "use strict";

  var PERSONALITY_LEVEL_FORMS={"definitions":{"level_13_independent_broker_dealer":{"kind":"level_form_design","form_key":"level_form_level_13_independent_broker_dealer","target_container":"logical_level","level_number":13,"level_key":"level_13_independent_broker_dealer","label":"Independent broker-dealer \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_generic_level_independent_broker_dealer","context_label":"Generic Industry Level Metadata","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":[],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["level_owner_principal_type","governing_policy_set","population_estimate_basis","boundary_risk_notes","downstream_level_dependency"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"level_owner_principal_type","label":"Level Owner Principal Type","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"principal_owner_type"},{"field_key":"governing_policy_set","label":"Governing Policy Set","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"policy_set"},{"field_key":"population_estimate_basis","label":"Population Estimate Basis","type":"text","required":false,"indexed":false,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"population_basis"},{"field_key":"boundary_risk_notes","label":"Boundary Risk Notes","type":"markdown","required":false,"indexed":false,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"risk_notes"},{"field_key":"downstream_level_dependency","label":"Downstream Level Dependency","type":"text","required":false,"indexed":false,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"downstream_dependency"}]},"level_12_enterprise_holding_company_supervision":{"kind":"level_form_design","form_key":"level_form_level_12_enterprise_holding_company_supervision","target_container":"logical_level","level_number":12,"level_key":"level_12_enterprise_holding_company_supervision","label":"Enterprise / Holding Company Supervision \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_supervisory_system_wsp","context_label":"FINRA Supervisory System / WSP Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_rule_3110","finra_supervision_topic","finra_rule_4511"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["wsp_section_family","supervisory_principal_required","review_cadence","escalation_path_required","approval_gate_type","supervision_evidence_required"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"wsp_section_family","label":"WSP Section Family","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"wsp_section","example":"Communications, sales practice, trading, branch inspection"},{"field_key":"supervisory_principal_required","label":"Supervisory Principal Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"principal_approval_requirement"},{"field_key":"review_cadence","label":"Review Cadence","type":"select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Daily","Weekly","Monthly","Quarterly","Annual","Event Driven"],"semantic_role":"review_schedule"},{"field_key":"escalation_path_required","label":"Escalation Path Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"escalation_policy"},{"field_key":"approval_gate_type","label":"Approval Gate Type","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Principal Sign-off","CCO Approval","Compliance Review","Automated Surveillance Gate","Board / Committee Review","Other"],"semantic_role":"approval_gate"},{"field_key":"supervision_evidence_required","label":"Supervision Evidence Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"evidence_requirement"}]},"level_11_carrying_firm_major_finra_member_firm":{"kind":"level_form_design","form_key":"level_form_level_11_carrying_firm_major_finra_member_firm","target_container":"logical_level","level_number":11,"level_key":"level_11_carrying_firm_major_finra_member_firm","label":"Carrying Firm / Major FINRA Member Firm \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_regulated_entity_member_firm","context_label":"FINRA Regulated Entity / Member Firm Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_crd_program","finra_rule_3110","sea_rule_17a_5"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["firm_crd_number_applicable","legal_entity_identifier","registration_type","designated_principal_role","regulator_set","financial_responsibility_rule_set"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"firm_crd_number_applicable","label":"Firm CRD Number Applicable","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"firm_registration_identifier"},{"field_key":"legal_entity_identifier","label":"Legal Entity Identifier","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"legal_entity_identifier"},{"field_key":"registration_type","label":"Registration Type","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Broker-Dealer","Investment Adviser","Carrying Firm","Clearing Firm","Introducing Firm","Municipal Securities Dealer","Other"],"semantic_role":"registration_type"},{"field_key":"designated_principal_role","label":"Designated Principal Role","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"designated_principal"},{"field_key":"regulator_set","label":"Regulator Set","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["FINRA","SEC","MSRB","State Securities Regulator","CFTC/NFA","Other"],"semantic_role":"regulator_set"},{"field_key":"financial_responsibility_rule_set","label":"Financial Responsibility Rule Set","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["SEA Rule 15c3-1","SEA Rule 15c3-3","SEA Rule 17a-5","FOCUS reporting","Other"],"semantic_role":"financial_responsibility_rules"}]},"level_10_multi_line_osj_structure":{"kind":"level_form_design","form_key":"level_form_level_10_multi_line_osj_structure","target_container":"logical_level","level_number":10,"level_key":"level_10_multi_line_osj_structure","label":"Multi-line / OSJ structure \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_branch_osj_network","context_label":"FINRA Branch / OSJ / Network Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_rule_3110","finra_crd_program"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["branch_crd_applicable","osj_indicator","branch_manager_role","geographic_jurisdiction","inspection_cycle"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"branch_crd_applicable","label":"Branch CRD Applicable","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"branch_registration_identifier"},{"field_key":"osj_indicator","label":"OSJ Indicator","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"osj_status"},{"field_key":"branch_manager_role","label":"Branch Manager / Supervisor Role","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"branch_supervisor"},{"field_key":"geographic_jurisdiction","label":"Geographic Jurisdiction","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"jurisdiction"},{"field_key":"inspection_cycle","label":"Inspection Cycle","type":"select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Annual","Every 3 Years","Risk-Based","Event Driven","Other"],"semantic_role":"inspection_cycle"}]},"level_9_reportable_business_segment_line_of_business":{"kind":"level_form_design","form_key":"level_form_level_9_reportable_business_segment_line_of_business","target_container":"logical_level","level_number":9,"level_key":"level_9_reportable_business_segment_line_of_business","label":"Reportable Business Segment / Line of Business \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_business_line_supervisory_channel","context_label":"FINRA Business Line / Supervisory Channel Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_rule_3110","finra_supervision_topic"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["business_line_code","supervisory_channel","product_scope","revenue_stream_type","risk_owner_role","surveillance_program_required"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"business_line_code","label":"Business Line Code","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"business_line_identifier"},{"field_key":"supervisory_channel","label":"Supervisory Channel","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"supervisory_channel"},{"field_key":"product_scope","label":"Product Scope","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Equities","Options","Fixed Income","Municipal Securities","Private Placements","Investment Banking","Advisory","Other"],"semantic_role":"product_scope"},{"field_key":"revenue_stream_type","label":"Revenue Stream Type","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Commission","Advisory Fee","Spread / Markup","Underwriting","Asset-Based Fee","Other"],"semantic_role":"revenue_stream"},{"field_key":"risk_owner_role","label":"Risk Owner Role","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"risk_owner"},{"field_key":"surveillance_program_required","label":"Surveillance Program Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"surveillance_requirement"}]},"level_8_broker_dealer_business_unit_supervisory_channel":{"kind":"level_form_design","form_key":"level_form_level_8_broker_dealer_business_unit_supervisory_channel","target_container":"logical_level","level_number":8,"level_key":"level_8_broker_dealer_business_unit_supervisory_channel","label":"Broker-Dealer Business Unit / Supervisory Channel \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_supervisory_system_wsp","context_label":"FINRA Supervisory System / WSP Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_rule_3110","finra_supervision_topic","finra_rule_4511"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["wsp_section_family","supervisory_principal_required","review_cadence","escalation_path_required","approval_gate_type","supervision_evidence_required"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"wsp_section_family","label":"WSP Section Family","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"wsp_section","example":"Communications, sales practice, trading, branch inspection"},{"field_key":"supervisory_principal_required","label":"Supervisory Principal Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"principal_approval_requirement"},{"field_key":"review_cadence","label":"Review Cadence","type":"select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Daily","Weekly","Monthly","Quarterly","Annual","Event Driven"],"semantic_role":"review_schedule"},{"field_key":"escalation_path_required","label":"Escalation Path Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"escalation_policy"},{"field_key":"approval_gate_type","label":"Approval Gate Type","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Principal Sign-off","CCO Approval","Compliance Review","Automated Surveillance Gate","Board / Committee Review","Other"],"semantic_role":"approval_gate"},{"field_key":"supervision_evidence_required","label":"Supervision Evidence Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"evidence_requirement"}]},"level_7_carrying_firm_complexity":{"kind":"level_form_design","form_key":"level_form_level_7_carrying_firm_complexity","target_container":"logical_level","level_number":7,"level_key":"level_7_carrying_firm_complexity","label":"Carrying firm complexity \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_carrying_clearing_major_member","context_label":"FINRA Carrying / Clearing / Major Member Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_rule_3110","sea_rule_17a_5","finra_crd_program"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["firm_role","carrying_agreement_reference","introducing_firm_relationships","custody_control_responsibility","financial_reporting_obligation"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"firm_role","label":"Firm Role","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Carrying Firm","Clearing Firm","Introducing Firm","Prime Broker","Major FINRA Member Firm","Affiliate"],"semantic_role":"firm_role"},{"field_key":"carrying_agreement_reference","label":"Carrying Agreement Reference","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"carrying_agreement"},{"field_key":"introducing_firm_relationships","label":"Introducing Firm Relationships","type":"text","required":false,"indexed":false,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"introducing_relationships"},{"field_key":"custody_control_responsibility","label":"Custody / Control Responsibility","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"custody_control_responsibility"},{"field_key":"financial_reporting_obligation","label":"Financial Reporting Obligation","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["FOCUS","Net Capital","Customer Reserve","Annual Audit","Other"],"semantic_role":"financial_reporting_obligation"}]},"level_6_regulated_entity_governance":{"kind":"level_form_design","form_key":"level_form_level_6_regulated_entity_governance","target_container":"logical_level","level_number":6,"level_key":"level_6_regulated_entity_governance","label":"Regulated Entity Governance \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_regulated_entity_member_firm","context_label":"FINRA Regulated Entity / Member Firm Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_crd_program","finra_rule_3110","sea_rule_17a_5"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["firm_crd_number_applicable","legal_entity_identifier","registration_type","designated_principal_role","regulator_set","financial_responsibility_rule_set"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"firm_crd_number_applicable","label":"Firm CRD Number Applicable","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"firm_registration_identifier"},{"field_key":"legal_entity_identifier","label":"Legal Entity Identifier","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"legal_entity_identifier"},{"field_key":"registration_type","label":"Registration Type","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Broker-Dealer","Investment Adviser","Carrying Firm","Clearing Firm","Introducing Firm","Municipal Securities Dealer","Other"],"semantic_role":"registration_type"},{"field_key":"designated_principal_role","label":"Designated Principal Role","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"designated_principal"},{"field_key":"regulator_set","label":"Regulator Set","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["FINRA","SEC","MSRB","State Securities Regulator","CFTC/NFA","Other"],"semantic_role":"regulator_set"},{"field_key":"financial_responsibility_rule_set","label":"Financial Responsibility Rule Set","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["SEA Rule 15c3-1","SEA Rule 15c3-3","SEA Rule 17a-5","FOCUS reporting","Other"],"semantic_role":"financial_responsibility_rules"}]},"level_5_registered_broker_dealer_osj_branch_network":{"kind":"level_form_design","form_key":"level_form_level_5_registered_broker_dealer_osj_branch_network","target_container":"logical_level","level_number":5,"level_key":"level_5_registered_broker_dealer_osj_branch_network","label":"Registered Broker-Dealer / OSJ / Branch Network \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_branch_osj_network","context_label":"FINRA Branch / OSJ / Network Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_rule_3110","finra_crd_program"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["branch_crd_applicable","osj_indicator","branch_manager_role","geographic_jurisdiction","inspection_cycle"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"branch_crd_applicable","label":"Branch CRD Applicable","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"branch_registration_identifier"},{"field_key":"osj_indicator","label":"OSJ Indicator","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"osj_status"},{"field_key":"branch_manager_role","label":"Branch Manager / Supervisor Role","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"branch_supervisor"},{"field_key":"geographic_jurisdiction","label":"Geographic Jurisdiction","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"jurisdiction"},{"field_key":"inspection_cycle","label":"Inspection Cycle","type":"select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Annual","Every 3 Years","Risk-Based","Event Driven","Other"],"semantic_role":"inspection_cycle"}]},"level_4_business_line":{"kind":"level_form_design","form_key":"level_form_level_4_business_line","target_container":"logical_level","level_number":4,"level_key":"level_4_business_line","label":"Business Line \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_business_line_supervisory_channel","context_label":"FINRA Business Line / Supervisory Channel Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_rule_3110","finra_supervision_topic"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["business_line_code","supervisory_channel","product_scope","revenue_stream_type","risk_owner_role","surveillance_program_required"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"business_line_code","label":"Business Line Code","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"business_line_identifier"},{"field_key":"supervisory_channel","label":"Supervisory Channel","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"supervisory_channel"},{"field_key":"product_scope","label":"Product Scope","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Equities","Options","Fixed Income","Municipal Securities","Private Placements","Investment Banking","Advisory","Other"],"semantic_role":"product_scope"},{"field_key":"revenue_stream_type","label":"Revenue Stream Type","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Commission","Advisory Fee","Spread / Markup","Underwriting","Asset-Based Fee","Other"],"semantic_role":"revenue_stream"},{"field_key":"risk_owner_role","label":"Risk Owner Role","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"risk_owner"},{"field_key":"surveillance_program_required","label":"Surveillance Program Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"surveillance_requirement"}]},"level_3_supervisory_system_wsp":{"kind":"level_form_design","form_key":"level_form_level_3_supervisory_system_wsp","target_container":"logical_level","level_number":3,"level_key":"level_3_supervisory_system_wsp","label":"Supervisory System / WSP \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_supervisory_system_wsp","context_label":"FINRA Supervisory System / WSP Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_rule_3110","finra_supervision_topic","finra_rule_4511"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["wsp_section_family","supervisory_principal_required","review_cadence","escalation_path_required","approval_gate_type","supervision_evidence_required"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"wsp_section_family","label":"WSP Section Family","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"wsp_section","example":"Communications, sales practice, trading, branch inspection"},{"field_key":"supervisory_principal_required","label":"Supervisory Principal Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"principal_approval_requirement"},{"field_key":"review_cadence","label":"Review Cadence","type":"select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Daily","Weekly","Monthly","Quarterly","Annual","Event Driven"],"semantic_role":"review_schedule"},{"field_key":"escalation_path_required","label":"Escalation Path Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"escalation_policy"},{"field_key":"approval_gate_type","label":"Approval Gate Type","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Principal Sign-off","CCO Approval","Compliance Review","Automated Surveillance Gate","Board / Committee Review","Other"],"semantic_role":"approval_gate"},{"field_key":"supervision_evidence_required","label":"Supervision Evidence Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"evidence_requirement"}]},"level_2_associated_person_registered_rep":{"kind":"level_form_design","form_key":"level_form_level_2_associated_person_registered_rep","target_container":"logical_level","level_number":2,"level_key":"level_2_associated_person_registered_rep","label":"Associated Person / Registered Rep \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_associated_person_registered_representative","context_label":"FINRA Associated Person / Registered Representative Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["finra_rule_3110","finra_crd_program","finra_form_u5","finra_statutory_disqualification"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["crd_number_applicable","registration_category_family","u4_u5_lifecycle_applicable","statutory_disqualification_review_applicable","supervising_principal_role","branch_or_osj_assignment_required"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"crd_number_applicable","label":"CRD Number Applicable","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"stable_registration_identifier","framework_refs":["finra_crd_program"]},{"field_key":"registration_category_family","label":"Registration Category Family","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Registered Representative","Principal","Investment Adviser Representative","Associated Person","Operations Professional","Non-registered fingerprinted person","Other"],"semantic_role":"registration_category"},{"field_key":"u4_u5_lifecycle_applicable","label":"Form U4/U5 Lifecycle Applicable","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"registration_lifecycle"},{"field_key":"statutory_disqualification_review_applicable","label":"Statutory Disqualification Review Applicable","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"eligibility_review","framework_refs":["finra_statutory_disqualification"]},{"field_key":"supervising_principal_role","label":"Supervising Principal Role","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"supervising_principal"},{"field_key":"branch_or_osj_assignment_required","label":"Branch / OSJ Assignment Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"organizational_assignment"}]},"level_1_books_and_records_entry_rule_17a_4":{"kind":"level_form_design","form_key":"level_form_level_1_books_and_records_entry_rule_17a_4","target_container":"logical_level","level_number":1,"level_key":"level_1_books_and_records_entry_rule_17a_4","label":"Books & Records Entry (Rule 17a-4) \u2014 Contextual Level Metadata","ownership":"industry_configurator","scope":"logical_level_metadata_only","context_key":"finra_books_records_evidence_entry","context_label":"FINRA Books & Records / Evidence Entry Level","context_detection":"derived_from_industry_domain_and_level_label","inherits":"base_level_metadata_form","framework_refs":["sea_rule_17a_4","cfr_17a_4","finra_rule_4511","finra_books_records_topic"],"purpose":"Captures this Level\u2019s industry-specific metadata. Does not define Hub/table or Spoke/row schemas; those are written later by Spine Editor inside the Level.","base_fields":["canonical_label","internal_term","description","primary_authority","typical_records","framework_refs","mandatory","parent_level_number","child_level_numbers"],"context_fields":["record_type_family","retention_basis","source_system_class","evidence_custodian_role","immutability_requirement","examiner_traversal_required"],"fields":[{"field_key":"canonical_label","label":"Canonical Level Label","type":"text","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"stable_level_label"},{"field_key":"internal_term","label":"Internal / Industry Term","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"organization_local_label"},{"field_key":"description","label":"Level Description","type":"markdown","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"level_purpose"},{"field_key":"primary_authority","label":"Primary Authority / Owner","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"governing_authority"},{"field_key":"typical_records","label":"Typical Records Governed Here","type":"text","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"record_population_summary"},{"field_key":"framework_refs","label":"Framework References","type":"text","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"regulatory_reference_set"},{"field_key":"mandatory","label":"Mandatory Level","type":"boolean","required":true,"indexed":true,"system_field":true,"context_field":false,"source":"step_3_level_terms","semantic_role":"deployment_required_flag"},{"field_key":"parent_level_number","label":"Parent Level Number","type":"integer","required":false,"indexed":true,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_parent_pointer"},{"field_key":"child_level_numbers","label":"Child Level Numbers","type":"list<integer>","required":false,"indexed":false,"system_field":true,"context_field":false,"source":"step_2_level_spine","semantic_role":"logical_child_pointer_set"},{"field_key":"record_type_family","label":"Record Type Family","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["Form U4","Form U5","Customer Complaint","Trade Surveillance Review","Supervisory Approval","FOCUS / Financial Filing","Correspondence","Other Books & Records"],"semantic_role":"record_type_classification","framework_refs":["sea_rule_17a_4","finra_rule_4511"]},{"field_key":"retention_basis","label":"Retention Basis","type":"multi_select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["SEA Rule 17a-4","FINRA Rule 4511","WSP Requirement","Litigation Hold","Other"],"semantic_role":"retention_rule_basis"},{"field_key":"source_system_class","label":"Source System Class","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"source_system_class","example":"CRD, clearing platform, surveillance system, email archive"},{"field_key":"evidence_custodian_role","label":"Evidence Custodian Role","type":"text","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","semantic_role":"evidence_custodian"},{"field_key":"immutability_requirement","label":"Immutability Requirement","type":"select","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","options":["WORM required","Hash-chain sufficient","External archive retained","Other"],"semantic_role":"immutability_requirement"},{"field_key":"examiner_traversal_required","label":"Examiner Traversal Required","type":"boolean","required":false,"indexed":true,"system_field":false,"context_field":true,"source":"v7_5_context_level_form_design","default":true,"semantic_role":"examiner_access_requirement"}]}},"values":{"level_13_independent_broker_dealer":{"canonical_label":"Independent broker-dealer","internal_term":"Independent broker-dealer","description":"","primary_authority":"","typical_records":"","framework_refs":"","mandatory":true,"parent_level_number":"","child_level_numbers":[12],"level_owner_principal_type":"","governing_policy_set":"","population_estimate_basis":"","boundary_risk_notes":"","downstream_level_dependency":""},"level_12_enterprise_holding_company_supervision":{"canonical_label":"Enterprise / Holding Company Supervision","internal_term":"Enterprise / Holding Company Supervision","description":"Supervisory-system and written-supervisory-procedures boundary governing reviews, escalations, approvals, and retained evidence of supervision.","primary_authority":"","typical_records":"Written supervisory procedures, supervisory reviews, exception reports, escalation records, principal approvals, and surveillance evidence.","framework_refs":"FINRA Rule 3110; FINRA Rule 3120; FINRA Rule 4511","mandatory":true,"parent_level_number":13,"child_level_numbers":[11],"wsp_section_family":"","supervisory_principal_required":true,"review_cadence":"","escalation_path_required":true,"approval_gate_type":"","supervision_evidence_required":true},"level_11_carrying_firm_major_finra_member_firm":{"canonical_label":"Carrying Firm / Major FINRA Member Firm","internal_term":"Carrying Firm / Major FINRA Member Firm","description":"Regulated broker-dealer or FINRA member-firm boundary for legal-entity identity, regulatory responsibility, governance, and consolidated supervision.","primary_authority":"","typical_records":"Firm CRD data, legal-entity identifiers, registrations, financial filings, supervisory designations, governance approvals, and regulatory correspondence.","framework_refs":"FINRA Rule 3110; SEC Exchange Act Rule 17a-5; FINRA CRD Program","mandatory":true,"parent_level_number":12,"child_level_numbers":[10],"firm_crd_number_applicable":true,"legal_entity_identifier":"","registration_type":"","designated_principal_role":"","regulator_set":"","financial_responsibility_rule_set":""},"level_10_multi_line_osj_structure":{"canonical_label":"Multi-line / OSJ structure","internal_term":"Multi-line / OSJ structure","description":"Branch, office of supervisory jurisdiction, or office-network boundary for local supervision, registration, inspection, and geographic accountability.","primary_authority":"","typical_records":"Branch registrations, OSJ designations, inspection reports, supervisory assignments, exception reports, and remediation evidence.","framework_refs":"FINRA Rule 3110; FINRA CRD Program","mandatory":true,"parent_level_number":11,"child_level_numbers":[9],"branch_crd_applicable":true,"osj_indicator":"","branch_manager_role":"","geographic_jurisdiction":"","inspection_cycle":""},"level_9_reportable_business_segment_line_of_business":{"canonical_label":"Reportable Business Segment / Line of Business","internal_term":"Reportable Business Segment / Line of Business","description":"Business-line or supervisory-channel boundary for products, desks, programs, and operating activities governed under a common supervisory model.","primary_authority":"","typical_records":"Business-line policies, product approvals, desk procedures, risk assessments, supervisory reviews, exceptions, and escalation records.","framework_refs":"FINRA Rule 3110; applicable product and conduct rules","mandatory":true,"parent_level_number":10,"child_level_numbers":[8],"business_line_code":"","supervisory_channel":"","product_scope":"","revenue_stream_type":"","risk_owner_role":"","surveillance_program_required":true},"level_8_broker_dealer_business_unit_supervisory_channel":{"canonical_label":"Broker-Dealer Business Unit / Supervisory Channel","internal_term":"Broker-Dealer Business Unit / Supervisory Channel","description":"Supervisory-system and written-supervisory-procedures boundary governing reviews, escalations, approvals, and retained evidence of supervision.","primary_authority":"","typical_records":"Written supervisory procedures, supervisory reviews, exception reports, escalation records, principal approvals, and surveillance evidence.","framework_refs":"FINRA Rule 3110; FINRA Rule 3120; FINRA Rule 4511","mandatory":true,"parent_level_number":9,"child_level_numbers":[7],"wsp_section_family":"","supervisory_principal_required":true,"review_cadence":"","escalation_path_required":true,"approval_gate_type":"","supervision_evidence_required":true},"level_7_carrying_firm_complexity":{"canonical_label":"Carrying firm complexity","internal_term":"Carrying firm complexity","description":"Carrying, clearing, or major-member-firm boundary for custody, clearing, settlement, financial responsibility, and service-provider oversight.","primary_authority":"","typical_records":"Clearing agreements, custody records, settlement controls, reserve computations, reconciliations, financial filings, and vendor oversight evidence.","framework_refs":"SEC Exchange Act Rules 15c3-1 and 15c3-3; FINRA financial responsibility requirements","mandatory":true,"parent_level_number":8,"child_level_numbers":[6],"firm_role":"","carrying_agreement_reference":"","introducing_firm_relationships":"","custody_control_responsibility":"","financial_reporting_obligation":""},"level_6_regulated_entity_governance":{"canonical_label":"Regulated Entity Governance","internal_term":"Regulated Entity Governance","description":"Regulated broker-dealer or FINRA member-firm boundary for legal-entity identity, regulatory responsibility, governance, and consolidated supervision.","primary_authority":"","typical_records":"Firm CRD data, legal-entity identifiers, registrations, financial filings, supervisory designations, governance approvals, and regulatory correspondence.","framework_refs":"FINRA Rule 3110; SEC Exchange Act Rule 17a-5; FINRA CRD Program","mandatory":true,"parent_level_number":7,"child_level_numbers":[5],"firm_crd_number_applicable":true,"legal_entity_identifier":"","registration_type":"","designated_principal_role":"","regulator_set":"","financial_responsibility_rule_set":""},"level_5_registered_broker_dealer_osj_branch_network":{"canonical_label":"Registered Broker-Dealer / OSJ / Branch Network","internal_term":"Registered Broker-Dealer / OSJ / Branch Network","description":"Branch, office of supervisory jurisdiction, or office-network boundary for local supervision, registration, inspection, and geographic accountability.","primary_authority":"","typical_records":"Branch registrations, OSJ designations, inspection reports, supervisory assignments, exception reports, and remediation evidence.","framework_refs":"FINRA Rule 3110; FINRA CRD Program","mandatory":true,"parent_level_number":6,"child_level_numbers":[4],"branch_crd_applicable":true,"osj_indicator":"","branch_manager_role":"","geographic_jurisdiction":"","inspection_cycle":""},"level_4_business_line":{"canonical_label":"Business Line","internal_term":"Business Line","description":"Business-line or supervisory-channel boundary for products, desks, programs, and operating activities governed under a common supervisory model.","primary_authority":"","typical_records":"Business-line policies, product approvals, desk procedures, risk assessments, supervisory reviews, exceptions, and escalation records.","framework_refs":"FINRA Rule 3110; applicable product and conduct rules","mandatory":true,"parent_level_number":5,"child_level_numbers":[3],"business_line_code":"","supervisory_channel":"","product_scope":"","revenue_stream_type":"","risk_owner_role":"","surveillance_program_required":true},"level_3_supervisory_system_wsp":{"canonical_label":"Supervisory System / WSP","internal_term":"Supervisory System / WSP","description":"Supervisory-system and written-supervisory-procedures boundary governing reviews, escalations, approvals, and retained evidence of supervision.","primary_authority":"","typical_records":"Written supervisory procedures, supervisory reviews, exception reports, escalation records, principal approvals, and surveillance evidence.","framework_refs":"FINRA Rule 3110; FINRA Rule 3120; FINRA Rule 4511","mandatory":true,"parent_level_number":4,"child_level_numbers":[2],"wsp_section_family":"","supervisory_principal_required":true,"review_cadence":"","escalation_path_required":true,"approval_gate_type":"","supervision_evidence_required":true},"level_2_associated_person_registered_rep":{"canonical_label":"Associated Person / Registered Rep","internal_term":"Associated Person / Registered Rep","description":"Attestation boundary for associated persons and registered representatives, including registration, supervision, qualification, and disciplinary lifecycle.","primary_authority":"","typical_records":"CRD identifiers, Form U4/U5 events, registration categories, branch or OSJ assignments, qualification records, and statutory-disqualification reviews.","framework_refs":"FINRA Rule 3110; FINRA CRD Program; Form U4/U5 requirements","mandatory":true,"parent_level_number":3,"child_level_numbers":[1],"crd_number_applicable":true,"registration_category_family":"","u4_u5_lifecycle_applicable":true,"statutory_disqualification_review_applicable":true,"supervising_principal_role":"","branch_or_osj_assignment_required":true},"level_1_books_and_records_entry_rule_17a_4":{"canonical_label":"Books & Records Entry (Rule 17a-4)","internal_term":"Books & Records Entry (Rule 17a-4)","description":"Books-and-records and evidence boundary for retained regulatory records, attestations, and examiner-traversable proof.","primary_authority":"","typical_records":"Form U4/U5 records, customer complaints, supervisory approvals, surveillance reviews, correspondence, financial filings, and retained evidence.","framework_refs":"SEC Exchange Act Rule 17a-4; FINRA Rule 4511","mandatory":true,"parent_level_number":2,"child_level_numbers":[],"record_type_family":"","retention_basis":"","source_system_class":"","evidence_custodian_role":"","immutability_requirement":"WORM required","examiner_traversal_required":true}}};

  var params = new URLSearchParams(location.search || "");
  var context = {
    environmentRoot: "acceptance",
    environmentLabel: params.get("environment_label") || params.get("acceptance_label") || "UAT",
    genesisKey: params.get("acceptance_genesis_key") || params.get("genesis_key") || ""
  };
  var model = {payload:null, root:null, byId:Object.create(null), drafts:Object.create(null), browses:Object.create(null), browseSeq:1, zTop:200};
  window.CEE_WORKSPACE_MODEL=model;

  /* v31c10 (claude): CEE_HELP replaced by CHANDRA_HELP -- the shared
     registry both chandra-enterprise-editor.html and spine-editor.html
     now load from (chandra-help-registry.js, sibling file, <script src>
     tag added to <head>/near the top of <body>). Single source of truth
     for topic title/default_body/tags across both apps; user-editable
     notes (user_body) still live only in the backend, fetched/saved
     per-topic, unaffected by this merge. See that file's own header
     comment for the full provenance story (49 topics ported verbatim
     from spine-editor's former local SPINE_HELP, 1 from CEE's own). */
  var fontSize = parseInt(localStorage.getItem("ci-fs") || "13", 10);

  function esc(v){
    return String(v == null ? "" : v)
      .replace(/&/g,"&amp;").replace(/</g,"&lt;")
      .replace(/>/g,"&gt;").replace(/"/g,"&quot;");
  }
  function toast(msg, kind){
    var displayMsg=String(msg==null?"":msg);
    if(kind==="err"){
      if(window.ceeCaptureDiagnostic) window.ceeCaptureDiagnostic("ui-error",displayMsg,{source:"toast"});
      displayMsg += "\nClick REPORT BUG to capture this context.";
    }
    var t=document.getElementById("toast");
    if(!t) return;
    t.textContent=displayMsg; t.className="toast show "+(kind||"");
    setTimeout(function(){t.className="toast";},kind==="err"?10000:2200);
  }

  /* v31c9 (claude): chandra-md-editor-script-v3 -- see the doc comment
     above chandra-md-editor-style-v3 in the markup for the full story.
     Ported verbatim (function bodies unchanged) from the one place a
     real, working implementation actually existed --
     chandra-instance-builder.html -- with one deliberate behavior change:
     markdownTextareaHtml() starts in source mode so authored Markdown is visibly
     editable. The "Source/Render"
     button toggles .source-mode on/off to reveal the underlying textarea
     for typing Markdown or using the toolbar (all of which operate on
     textarea selection, so editing still happens in source view -- this
     only changes what you see when you're not actively editing). */
  function markdownTextareaHtml(id,name,value){
    var raw=(value==null||value==="")?("### "+name+"\n\nWrite Markdown here. Use the toolbar only when you want markup."):value;
    var eid=esc(id);
    setTimeout(function(){mdRefreshPreview(id);},0);
    return '<div class="md-editor" id="wrap-'+eid+'">'+
      '<div class="md-toolbar" aria-label="Markdown toolbar">'+
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdWrap(\''+eid+'\',\'**\',\'**\')"><b>B</b></button>'+ 
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdWrap(\''+eid+'\',\'*\',\'*\')"><i>I</i></button>'+ 
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdLine(\''+eid+'\',\'# \')">H1</button>'+ 
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdLine(\''+eid+'\',\'## \')">H2</button>'+ 
      '<span class="md-sep"></span>'+ 
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdLine(\''+eid+'\',\'- \')">List</button>'+ 
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdLine(\''+eid+'\',\'> \')">Quote</button>'+ 
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdWrap(\''+eid+'\',\'`\',\'`\')">Code</button>'+ 
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdLink(\''+eid+'\')">Link</button>'+ 
      '<span class="md-sep"></span>'+ 
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdPaste(\''+eid+'\')">Paste</button>'+ 
      '<button type="button" class="md-btn" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdTogglePreview(\''+eid+'\')">Source/Render</button>'+ 
      '<button type="button" class="md-btn md-copy-top" title="Copy this Markdown control" onmousedown="mdToolbarMouseDown(event,\''+eid+'\')" onclick="mdCopy(\''+eid+'\')">Copy</button>'+ 
      '</div><textarea id="'+eid+'" name="'+esc(name)+'" oninput="mdRefreshPreview(\''+eid+'\')">'+esc(raw)+'</textarea><div class="md-preview" id="preview-'+eid+'" contenteditable="true" role="textbox" aria-multiline="true" oninput="mdSyncFromRender(\''+eid+'\')"></div></div><div class="md-note">Rendered mode is directly editable; Markdown source remains canonical.</div>';
  }
  var mdRenderRanges=Object.create(null);
  function mdIsSource(id){var wrap=document.getElementById("wrap-"+id);return !!(wrap&&wrap.classList.contains("source-mode"));}
  function mdRememberRenderSelection(id){var pv=document.getElementById("preview-"+id),sel=window.getSelection();if(!pv||!sel||!sel.rangeCount)return false;var range=sel.getRangeAt(0);if(pv.contains(range.commonAncestorContainer)){mdRenderRanges[id]=range.cloneRange();return true;}return false;}
  function mdToolbarMouseDown(event,id){if(!mdIsSource(id))mdRememberRenderSelection(id);event.preventDefault();}
  function mdRestoreRenderSelection(id){var pv=document.getElementById("preview-"+id),sel=window.getSelection(),range=mdRenderRanges[id];if(!pv||!sel)return false;if(range&&pv.contains(range.commonAncestorContainer)){pv.focus();sel.removeAllRanges();sel.addRange(range);return true;}pv.focus();return false;}
  function mdRenderCommand(id,command,value){var pv=document.getElementById("preview-"+id);if(!pv)return;mdRestoreRenderSelection(id);var ok=document.execCommand(command,false,value||null);mdSyncFromRender(id);mdRememberRenderSelection(id);if(!ok)toast("Formatting command was not accepted by the browser.","err");}
  function mdWrap(id,before,after){if(!mdIsSource(id)){mdRenderCommand(id,before==="**"?"bold":before==="*"?"italic":"formatBlock",before==="`"?"pre":null);return;}var ta=document.getElementById(id);if(!ta)return;var a=ta.selectionStart,b=ta.selectionEnd,txt=ta.value,sel=txt.slice(a,b)||"text";ta.value=txt.slice(0,a)+before+sel+after+txt.slice(b);ta.focus();ta.setSelectionRange(a+before.length,a+before.length+sel.length);mdRefreshPreview(id);}
  function mdLine(id,prefix){if(!mdIsSource(id)){if(prefix==="# ")mdRenderCommand(id,"formatBlock","h1");else if(prefix==="## ")mdRenderCommand(id,"formatBlock","h2");else if(prefix==="- ")mdRenderCommand(id,"insertUnorderedList");else if(prefix==="> ")mdRenderCommand(id,"formatBlock","blockquote");return;}var ta=document.getElementById(id);if(!ta)return;var a=ta.selectionStart,txt=ta.value,lineStart=txt.lastIndexOf("\n",Math.max(0,a-1))+1;ta.value=txt.slice(0,lineStart)+prefix+txt.slice(lineStart);ta.focus();ta.setSelectionRange(a+prefix.length,a+prefix.length);mdRefreshPreview(id);}
  function mdLink(id){if(!mdIsSource(id)){var url=window.prompt("Link URL","https://");if(url)mdRenderCommand(id,"createLink",url);return;}var ta=document.getElementById(id);if(!ta)return;var a=ta.selectionStart,b=ta.selectionEnd,txt=ta.value,sel=txt.slice(a,b)||"link text",repl="["+sel+"](https://example.com)";ta.value=txt.slice(0,a)+repl+txt.slice(b);ta.focus();ta.setSelectionRange(a+1,a+1+sel.length);mdRefreshPreview(id);}
  function mdCopy(id){var ta=document.getElementById(id);if(!ta)return;var txt=ta.value;navigator.clipboard&&navigator.clipboard.writeText(txt);toast("Markdown copied.","ok");}
  function mdPaste(id){if(!mdIsSource(id)){document.getElementById("preview-"+id).focus();toast("Use Ctrl+V to paste into rendered mode.","ok");return;}var ta=document.getElementById(id);if(!ta)return;if(navigator.clipboard&&navigator.clipboard.readText){navigator.clipboard.readText().then(function(txt){mdInsert(id,txt||"");}).catch(function(){toast("Clipboard paste blocked by browser. Use Ctrl+V.","err");});}else toast("Use Ctrl+V to paste.","ok");}
  function mdInsert(id,txt){var ta=document.getElementById(id);if(!ta)return;var a=ta.selectionStart,b=ta.selectionEnd,v=ta.value;ta.value=v.slice(0,a)+txt+v.slice(b);ta.focus();ta.setSelectionRange(a+txt.length,a+txt.length);mdRefreshPreview(id);}
  function mdTogglePreview(id){var wrap=document.getElementById("wrap-"+id);if(!wrap)return;if(wrap.classList.contains("source-mode")){mdRefreshPreview(id);wrap.classList.remove("source-mode");var pv=document.getElementById("preview-"+id);if(pv)pv.focus();}else{mdSyncFromRender(id);wrap.classList.add("source-mode");var ta=document.getElementById(id);if(ta)ta.focus();}}
  function mdRefreshPreview(id){var ta=document.getElementById(id),pv=document.getElementById("preview-"+id);if(!ta||!pv)return;pv.innerHTML=mdToHtml(ta.value);}
  function mdSyncFromRender(id){var ta=document.getElementById(id),pv=document.getElementById("preview-"+id);if(!ta||!pv)return;ta.value=mdHtmlToMarkdown(pv.innerHTML);ta.dispatchEvent(new Event("change",{bubbles:true}));}
  function mdHtmlToMarkdown(html){var box=document.createElement("div");box.innerHTML=html||"";function walk(node){if(node.nodeType===3)return node.nodeValue||"";if(node.nodeType!==1)return "";var tag=node.tagName.toLowerCase(),inner=Array.from(node.childNodes).map(walk).join("");if(tag==="strong"||tag==="b")return "**"+inner+"**";if(tag==="em"||tag==="i")return "*"+inner+"*";if(tag==="code"&&node.parentElement&&node.parentElement.tagName.toLowerCase()==="pre")return inner;if(tag==="code")return "`"+inner+"`";if(tag==="h1")return "# "+inner+"\n\n";if(tag==="h2")return "## "+inner+"\n\n";if(tag==="h3")return "### "+inner+"\n\n";if(tag==="blockquote")return inner.split(/\n/).map(function(x){return "> "+x;}).join("\n")+"\n\n";if(tag==="pre")return "```\n"+inner.replace(/\n+$/,'')+"\n```\n\n";if(tag==="a")return "["+inner+"]("+(node.getAttribute("href")||"")+")";if(tag==="br")return "\n";if(tag==="li")return "- "+inner.replace(/\n+$/,'')+"\n";if(tag==="ul"||tag==="ol")return inner+"\n";if(tag==="p"||tag==="div")return inner.replace(/\n+$/,'')+"\n\n";return inner;}return walk(box).replace(/\n{3,}/g,"\n\n").trim();}
  function mdToHtml(src){var text=esc(src||"");text=text.replace(/```([\s\S]*?)```/g,function(_,code){return "<pre>"+code+"</pre>";});text=text.replace(/^### (.*)$/gm,"<h3>$1</h3>").replace(/^## (.*)$/gm,"<h2>$1</h2>").replace(/^# (.*)$/gm,"<h1>$1</h1>");text=text.replace(/^&gt; (.*)$/gm,"<blockquote>$1</blockquote>");text=text.replace(/^- (.*)$/gm,"<ul><li>$1</li></ul>").replace(/<\/ul>\s*<ul>/g,"");text=text.replace(/\*\*(.*?)\*\*/g,"<strong>$1</strong>").replace(/\*(.*?)\*/g,"<em>$1</em>");text=text.replace(/`([^`]+)`/g,"<code>$1</code>");text=text.replace(/\[([^\]]+)\]\(([^)]+)\)/g,function(_,label,url){return "<a href=\""+esc(url)+"\">"+label+"</a>";});return text.split(/\n\n+/).map(function(block){if(/^\s*<(h\d|ul|blockquote|pre)/.test(block))return block;return "<p>"+block.replace(/\n/g,"<br>")+"</p>";}).join("");}
  /* v31c40: inline toolbar attributes execute in the page-global scope.
     This script is enclosed by the CEE module wrapper, so explicitly export
     the Markdown handlers instead of relying on local function declarations. */
  window.mdToolbarMouseDown=mdToolbarMouseDown;
  window.mdWrap=mdWrap;
  window.mdLine=mdLine;
  window.mdLink=mdLink;
  window.mdCopy=mdCopy;
  window.mdPaste=mdPaste;
  window.mdTogglePreview=mdTogglePreview;
  window.mdRefreshPreview=mdRefreshPreview;
  window.mdSyncFromRender=mdSyncFromRender;


  function applyTheme(){
    var theme=localStorage.getItem("ci-theme")||"dark";
    document.documentElement.setAttribute("data-theme",theme);
    var b=document.getElementById("theme-btn");
    if(b)b.textContent=theme==="dark"?"☾":"☀";
  }
  window.toggleTheme=function(){
    var current=document.documentElement.getAttribute("data-theme")||"dark";
    localStorage.setItem("ci-theme",current==="dark"?"light":"dark"); applyTheme();
  };
  function applyFont(){
    fontSize=Math.max(9,Math.min(20,fontSize));
    document.documentElement.style.setProperty("--fs",fontSize+"px");
    var d=document.getElementById("fs-disp"); if(d)d.textContent=fontSize+"px";
    localStorage.setItem("ci-fs",String(fontSize));
  }
  window.changeFontSize=function(d){fontSize+=d;applyFont();};
  window.openSpineEditor=function(){location.href="/spine-editor";};
  function restoreMdiWindowState(id){
    var el=document.getElementById(id);if(!el)return;
    el.classList.remove("browse-maximized","browse-tiled");
    el.style.maxWidth="";
    el.style.maxHeight="";
    var button=el.querySelector(".browse-max-btn");
    if(button){button.textContent="□";button.title="Maximize window to workspace";button.setAttribute("aria-label","Maximize window");}
  }
  window.cascadeBrowses=function(){
    var layer=document.getElementById("mdi-layer"),ids=Object.keys(model.browses).filter(function(id){return model.browses[id]&&model.browses[id].mode!=="detached";}),i=0;
    if(!layer)return;
    layer.scrollLeft=0;layer.scrollTop=0;
    ids.forEach(function(id){
      var el=document.getElementById(id),w=model.browses[id];if(!el)return;
      restoreMdiWindowState(id);
      var width=Math.min(Math.max(560,Math.floor(layer.clientWidth*.68)),Math.max(560,layer.clientWidth-80));
      var height=Math.min(Math.max(380,Math.floor(layer.clientHeight*.72)),Math.max(380,layer.clientHeight-70));
      applyBrowseGeometry(el,{left:28+i*24,top:22+i*24,width:width,height:height});
      if(w)w.restoreGeometry=browseGeometry(el);
      i++;
    });
  };
  window.tileBrowses=function(){
    var ids=Object.keys(model.browses).filter(function(id){return model.browses[id]&&model.browses[id].mode!=="detached";}),layer=document.getElementById("mdi-layer");
    if(!layer||!ids.length)return;
    layer.scrollLeft=0;layer.scrollTop=0;
    var count=ids.length,cols=Math.ceil(Math.sqrt(count)),rows=Math.ceil(count/cols);
    var gap=6,usableW=Math.max(0,layer.clientWidth-gap*(cols+1)),usableH=Math.max(0,layer.clientHeight-gap*(rows+1));
    var baseW=Math.floor(usableW/cols),baseH=Math.floor(usableH/rows);
    ids.forEach(function(id,i){
      var el=document.getElementById(id),w=model.browses[id];if(!el)return;
      restoreMdiWindowState(id);
      el.classList.add("browse-tiled");
      var col=i%cols,row=Math.floor(i/cols);
      var left=gap+col*(baseW+gap),top=gap+row*(baseH+gap);
      var width=(col===cols-1)?Math.max(0,layer.clientWidth-gap-left):baseW;
      var height=(row===rows-1)?Math.max(0,layer.clientHeight-gap-top):baseH;
      applyBrowseGeometry(el,{left:left,top:top,width:width,height:height});
      el.style.maxWidth=Math.max(0,layer.clientWidth-gap-left)+"px";
      el.style.maxHeight=Math.max(0,layer.clientHeight-gap-top)+"px";
      if(w)w.restoreGeometry=browseGeometry(el);
    });
  };
  window.closeAllBrowses=function(){Object.keys(model.browses).forEach(closeBusinessBrowse);};
  /* v31 (claude): left deliberately unwired. This maps to
     chandra-dev:reset-db (chdev-reload.lisp) -- a genuinely destructive
     REPL function that deletes the whole local chandra-db/ directory.
     Wiring a button to trigger that over HTTP is a real safety decision
     (accidental clicks, or this endpoint ever being reachable beyond
     localhost), not just a stub-fixing task -- flagging for an explicit
     decision rather than building it silently. */
  window.chandraCeeResetAllTestDbs=function(){
    toast("Reset All Test DBs is intentionally not wired -- it would trigger chandra-dev:reset-db, which deletes the local database. Run it from the REPL if you actually mean to.","err");
  };

  /* v31c10 (claude): openHelpById and closeHelp were previously either a
     no-op stub (openHelpById, chained off chandraCeeResetAllTestDbs) or
     entirely undefined (closeHelp -- referenced by the popup's close
     button onclick, never implemented). Every ? help-dot in CEE has been
     inert until now. Real implementation: shows CHANDRA_HELP's
     default_body immediately (already HTML, injected directly -- see
     chandra-help-registry.js's header comment for why it's HTML and not
     Markdown), then fetches any saved user_body from the real backend
     and appends it once it resolves. user_body IS Markdown (the rich
     editor's canonical format), so that part still goes through
     mdToHtml. Editing happens only in the Help Index (openHelpIndex),
     never inline here -- this popup stays read-only by design. */
  window.openHelpById=async function(id, el){
    var t=CEE_DYNAMIC_HELP[id]||CHANDRA_HELP[id];
    var p=document.getElementById("help-pop");
    if(!p) return;
    document.getElementById("help-title").textContent=t?t.title:id;
    var body=document.getElementById("help-body");
    body.innerHTML=(t?(t.default_body||""):'<p style="color:var(--text3)">No help registered for this yet.</p>')+
      (t&&t.tags&&t.tags.length?'<div class="help-form-tags" style="margin-top:8px">'+t.tags.map(function(g){return '<span class="help-ref">'+esc(g)+'</span>';}).join("")+'</div>':"")+
      '<div id="help-user-body-slot" style="margin-top:8px"></div>'+
      '<div class="action-row" style="margin-top:8px"><button class="btn" onclick="closeHelp();openHelpIndex(\''+esc(id)+'\')">Edit in Help Index</button></div>';
    if(el){
      var rect=el.getBoundingClientRect();
      p.style.left=Math.min(window.innerWidth-380,Math.max(12,rect.left))+"px";
      p.style.top=Math.min(window.innerHeight-260,Math.max(52,rect.bottom+6))+"px";
    }
    p.classList.add("show");
    if(t){
      try{
        var j=normalizeArtifactResponse(await getJson(helpContextsApi("latest")+"?context_id="+encodeURIComponent(id)));
        var art=j&&j.artifact;
        var slot=document.getElementById("help-user-body-slot");
        if(slot && art && art.user_body){
          slot.innerHTML='<div class="small-muted" style="margin-bottom:3px">Notes:</div>'+mdToHtml(art.user_body);
        }
      }catch(e){ /* non-fatal -- default_body already shown */ }
    }
  };
  window.closeHelp=function(){
    var p=document.getElementById("help-pop");
    if(p) p.classList.remove("show");
  };
  document.addEventListener("click", function(e){
    if(!e.target.closest(".help-pop") && !e.target.classList.contains("help-dot")) closeHelp();
  });

  /* v31c27: field help is a Help Context SPOKE record in the Help Contexts HUB/table.
     The stable lookup key is form_design_id + field_id. Labels are snapshots only. */
  var CEE_DYNAMIC_HELP={};
  Object.assign(CEE_DYNAMIC_HELP,{
    "find-mode":{title:"Find Mode",default_body:"<p>Find evaluates one or more requests against the records already loaded for the current Hub, parent relationship, and lifecycle view.</p><p>Criteria inside one request are combined with <strong>AND</strong>. Separate include requests are combined with <strong>OR</strong>. Omit requests subtract matching records.</p><p><strong>Current execution:</strong> local scan. Index declarations are planner metadata only.</p>",tags:["find","local scan","requests"]},
    "find-request":{title:"Find Request",default_body:"<p>A request is one group of criteria. Every criterion in the same request must match the record.</p><p>Use separate include requests when either group may match. Select <strong>Omit</strong> to subtract records matching that request.</p>",tags:["find","AND","OR","omit"]},
    "find-field":{title:"Find Field and Index Capability",default_body:"<p>Choose a field from the current published Form Definition.</p><p>The capability badge describes declared index metadata for the selected field and operator:</p><ul><li><strong>Index candidate</strong> — a future backend planner may execute it directly through an index.</li><li><strong>Indexed + filter</strong> — an index may narrow candidates, but the operator still requires filtering.</li><li><strong>Scan only</strong> — no declared index supports the criterion.</li></ul><p>These labels do not change the current <strong>local scan</strong> execution.</p>",tags:["find","field","index metadata"]},
    "find-operator":{title:"Find Operator",default_body:"<p>The operator determines how the selected field is compared with the entered value. Available operators depend on field type.</p><p>Examples include Contains and Equals for text, comparisons and Between for numbers or dates, and true/false/empty tests for booleans.</p>",tags:["find","operator","field type"]},
    "find-value":{title:"Find Value",default_body:"<p>Enter or select the value used by the criterion.</p><p>Between requires two inclusive boundary values. Empty, not-empty, true, and false operators do not require an entered value.</p><p>Select and multi-select criteria display option labels but match canonical option identities.</p>",tags:["find","criterion value"]}
  });
  function safeFieldId(v){return String(v||'field').trim().toLowerCase().replace(/[^a-z0-9_-]+/g,'_').replace(/^_+|_+$/g,'')||'field';}
  /* v14 (claude): mirrors the backend's srm-indexed-name (spoke-record-manager.lisp) --
     lowercase, any run of non a-z0-9 characters collapses to a single hyphen, leading/
     trailing hyphens trimmed. Character loop, not a regex, on purpose: matching the
     backend's own char-by-char implementation exactly (a-z/0-9 membership, not a pattern)
     means there's one definition of "safe character" to keep in sync, not two dialects
     that can silently drift. This is a PREVIEW ONLY -- the backend is authoritative for
     what actually gets stored; see ent-level-system-save.lisp. */
  function deriveIndexedName(label){
    var src=String(label||"").toLowerCase(),out="",lastHyphen=true;
    for(var i=0;i<src.length;i++){
      var ch=src[i],isSafe=(ch>="a"&&ch<="z")||(ch>="0"&&ch<="9");
      if(isSafe){out+=ch;lastHyphen=false;}
      else if(!lastHyphen){out+="-";lastHyphen=true;}
    }
    while(out.length&&out[out.length-1]==="-")out=out.slice(0,-1);
    return out;
  }
  var CEE_DRAFT_ID_SEQ=0;
  function newDraftSchemaId(){CEE_DRAFT_ID_SEQ+=1;return 'draft-schema-'+Date.now().toString(36)+'-'+CEE_DRAFT_ID_SEQ.toString(36);}
  function valid256BitId(v){return /^[0-9a-f]{64}$/.test(String(v||''));}
  function canonicalUuidHex(uuid){
    var raw=String(uuid||'');
    if(!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(raw))
      throw new Error('Backend returned a non-canonical UUID: '+JSON.stringify(uuid));
    return raw.replace(/-/g,'');
  }
  /* v31c317 (claude): Select/multi_select options are stable, identity-bearing
     rows -- {id, label, status} -- because the id, once a real 256-bit
     Chandra id, is what existing records actually store. Renaming a label
     must NOT change its id ("changed"); removing an option from view must
     NOT erase its id/label mapping ("deleted" == retired, never hard-
     deleted), or every record still holding that id becomes permanently
     unresolvable with no way to even show what it used to mean. The prior
     design routed all edits through a single optionsCsv text string,
     rebuilt into options[] by diffing label TEXT against the old array on
     every save (selectOptionRecordsFromCsv) -- which can't tell "renamed"
     apart from "deleted this one, added a new one", silently drops (does
     not retire) any option whose current label text isn't present in the
     CSV box including already-retired ones, and resets status to "active"
     for everything it does keep. normalizeFieldOptions is now the single
     source of truth: it just shapes whatever's already in f.options
     in-place (never text-diffs), and the per-row editor below mutates
     specific rows directly instead of round-tripping through a string. */
  function normalizeFieldOptions(f){
    if(!Array.isArray(f.options))f.options=[];
    f.options=f.options.map(function(o,idx){
      if(o&&typeof o==="object")return {
        id:(o.id!==undefined&&o.id!==null)?o.id:"",
        label:String(o.label!==undefined?o.label:(o.value!==undefined?o.value:"")),
        indexed_name:o.indexed_name||deriveIndexedName(o.label||o.value||""),
        status:o.status||"active",
        order:o.order!==undefined?o.order:idx
      };
      return {id:"",label:String(o),indexed_name:deriveIndexedName(String(o)),status:"active",order:idx};
    });
    return f.options;
  }
  function ensureDraftSchemaIds(form){
    form=form||{};
    if(!form.form_design_id)form.form_design_id=newDraftSchemaId();
    (form.fields||[]).forEach(function(f){
      if(!f.field_id)f.field_id=newDraftSchemaId();
      if(f.type==="select"||f.type==="multi_select"){
        /* One-time bootstrap only: brand-new fields (e.g. Add Test Fields)
           still seed via optionsCsv and have no options[] yet -- nothing
           to lose by converting that once. A field that already has
           options[] is left alone; optionsCsv is never consulted again. */
        if((!Array.isArray(f.options)||!f.options.length)&&f.optionsCsv){
          f.options=String(f.optionsCsv).split(",").map(function(x){return x.trim();}).filter(Boolean)
            .map(function(label,idx){return {id:"",label:label,indexed_name:deriveIndexedName(label),status:"active",order:idx};});
        }
        normalizeFieldOptions(f);
        delete f.optionsCsv;
      }
    });
    return form;
  }
  async function allocateChandraIdsForNode(n,count){
    var lv=model.byId[n.levelId],base=levelBase(lv);
    if(!base)throw new Error('No owning instance address for '+(lv&&lv.label||n.levelId));
    var j=await getJson(base+'/api/enterprise/ids/new?count='+encodeURIComponent(count));
    var instanceId=(j&&j.instance_id)||(j&&j.data&&j.data.instance_id)||'';
    var prefix=canonicalUuidHex(instanceId);
    var ids=(j&&j.ids)||(j&&j.data&&j.data.ids)||[];
    if(!Array.isArray(ids)||ids.length!==count)throw new Error('ID allocator returned '+ids.length+' IDs; expected '+count);
    ids.forEach(function(id){if(!valid256BitId(id)||id.slice(0,32)!==prefix)throw new Error('ID allocator returned an invalid routed Chandra ID');});
    return {instance_id:instanceId,prefix:prefix,ids:ids};
  }
  async function assignAuthoritativeSchemaIds(n,form){
    var needs=[];
    if(!valid256BitId(form.form_design_id))needs.push({kind:'form'});
    (form.fields||[]).forEach(function(f,fieldIndex){
      if(!valid256BitId(f.field_id))needs.push({kind:'field',fieldIndex:fieldIndex});
      if(Array.isArray(f.options)){
        f.options=f.options.map(function(o,optionIndex){
          if(o&&typeof o==='object')return o;
          return {id:'',label:String(o),indexed_name:deriveIndexedName(o),status:'active',order:optionIndex};
        });
        f.options.forEach(function(o,optionIndex){
          if(!valid256BitId(o.id))needs.push({kind:'option',fieldIndex:fieldIndex,optionIndex:optionIndex});
        });
      }
    });
    if(!needs.length)return form;
    var allocation=await allocateChandraIdsForNode(n,needs.length);
    needs.forEach(function(item,i){
      var id=allocation.ids[i];
      if(item.kind==='form')form.form_design_id=id;
      else if(item.kind==='field')form.fields[item.fieldIndex].field_id=id;
      else form.fields[item.fieldIndex].options[item.optionIndex].id=id;
    });
    return form;
  }
  function fieldHelpContextId(formDesignId,fieldId){return 'field-help:'+formDesignId+':'+fieldId;}
  function helpContextsApi(action){
    /* v31c51: Help Contexts are enterprise-editor documentation records owned
       by the spine instance, not Acceptance-spine construction records. */
    return "/api/enterprise/help-contexts/"+action;
  }
  async function parseJsonResponse(resp){
    var txt=await resp.text(),j=null;
    try{j=JSON.parse(txt);}catch(e){}
    return {text:txt,json:j};
  }
  function normalizeArtifactResponse(j){
    if(!j)return j;
    if(!j.artifact && typeof j.artifact_json==="string" && j.artifact_json){
      try{j.artifact=JSON.parse(j.artifact_json);}catch(e){
        if(window.ceeCaptureDiagnostic)window.ceeCaptureDiagnostic(
          "artifact-parse-error",e.message||String(e),
          {artifact_json:j.artifact_json,response_json:j}
        );
      }
    }
    return j;
  }
  function registerDynamicHelp(a){
    if(!a||!a.context_id)return;
    CEE_DYNAMIC_HELP[a.context_id]={title:a.title||a.field_label||a.context_id,default_body:a.default_body||'',tags:a.tags||[],apps:['enterprise-editor'],artifact:a};
  }
  async function refreshDynamicHelpIndex(){
    try{
      var j=await getJson(helpContextsApi("index"));
      (j.contexts||[]).forEach(function(x){
        normalizeArtifactResponse(x);
        registerDynamicHelp(x.artifact||x);
      });
    }catch(e){}
  }
  /* v31c28: field help invoked from a modal editor must itself be a child
     modal above the caller. The Help Index remains the global browse/admin
     surface; both presentations read and append to the same Help Context
     SPOKE record. */
  var contextHelpState={contextId:'',meta:null,loadedTail:'',mode:'read',opener:null,pendingDraft:null,conflictDraft:null};
  function fieldHelpMeta(formDesignId,fieldId,fieldLabel,levelId,hubId){
    return {context_id:fieldHelpContextId(formDesignId,fieldId),context_type:'form_field',form_design_id:formDesignId,field_id:fieldId,field_label:fieldLabel,title:fieldLabel,level_id:levelId||'',hub_id:hubId||'',tags:['Field Help',fieldLabel]};
  }
  /* ChatGPT 20260720-02: _level_info is a fixed three-field system record,
     not a user-designed form. Give those standard fields stable help
     identities while retaining the current Level as placement metadata. */
  function levelInfoHelpMeta(fieldName,fieldLabel,levelId){
    var defaults={
      name:'The human-readable label for this Level. Name the organizational, authority, or evidentiary boundary represented here. Renaming the label does not change the Level\'s structural position in the spine.',
      status:'The lifecycle state of this Level information record. Active means the Level is currently in use; Suspended means temporarily unavailable for normal operation; Retired means no longer used for new activity while its prior evidence remains preserved.',
      description:'Describe the purpose, scope, authority boundary, and representative kinds of records governed at this Level. Do not use this field as a business-record schema, procedure manual, or exhaustive record inventory.'
    };
    return {context_id:'level-info:'+fieldName,context_type:'level_info_field',form_design_id:'',field_id:fieldName,field_label:fieldLabel,title:fieldLabel,level_id:levelId||'',hub_id:'',default_body:defaults[fieldName]||'',tags:['Level Information','Field Help',fieldLabel]};
  }
  /* ChatGPT 20260720-03: inline onclick handlers execute in global scope.
     Keep showContextHelp and levelInfoHelpMeta private, but expose one narrow
     public entry point for the fixed Level Information fields. Register the
     three standard contexts immediately so Help Index can browse/customize
     them before the first saved Help Context CU exists. */
  ['name','status','description'].forEach(function(fieldName){
    var labels={name:'Name',status:'Status',description:'Description'};
    var meta=levelInfoHelpMeta(fieldName,labels[fieldName],'');
    meta.title='Level Information — '+labels[fieldName];
    registerDynamicHelp(meta);
  });
  window.openLevelInfoHelp=function(fieldName,fieldLabel,levelId,el){
    showContextHelp(levelInfoHelpMeta(fieldName,fieldLabel,levelId),'read',el||document.activeElement);
  };

  function contextHelpMetaLine(meta){
    if(meta.context_type==='level_info_field')return 'Level information field: '+esc(meta.field_label||meta.field_id)+(meta.level_id?' · Level: '+esc(meta.level_id):'');
    return 'Field: '+esc(meta.field_label||meta.field_id)+' · Form design: '+esc(meta.form_design_id||'');
  }
  function contextHelpTags(meta,artifact){
    var tags=(artifact&&artifact.tags)||meta.tags||[];
    if(typeof tags==='string'){try{tags=JSON.parse(tags);}catch(e){tags=tags.split(',').map(function(x){return x.trim();}).filter(Boolean);}}
    return Array.isArray(tags)?tags:[];
  }
  function renderContextHelpRead(meta,artifact){
    var body=document.getElementById('context-help-body'); if(!body)return;
    var title=(artifact&&artifact.title)||meta.title||meta.field_label||'Field Help';
    var text=(artifact&&(artifact.user_body||artifact.default_body))||meta.default_body||'';
    var tags=contextHelpTags(meta,artifact);
    document.getElementById('context-help-title').textContent=title;
    body.innerHTML='<div class="context-help-meta">'+contextHelpMetaLine(meta)+'</div>'+ 
      '<div class="context-help-read">'+(text?mdToHtml(text):'<p class="context-help-empty">No contextual help has been written for this field yet.</p>')+'</div>'+ 
      (tags.length?'<div class="help-form-tags" style="margin-top:10px">'+tags.map(function(g){return '<span class="help-form-tag">'+esc(g)+'</span>';}).join('')+'</div>':'')+
      '<div class="context-help-actions"><button class="btn" onclick="closeContextHelp()">Close</button><button class="btn" onclick="openHelpIndexFromContextHelp()">Open in Help Index</button><button class="btn primary" onclick="editCurrentContextHelp()">Edit Help</button></div>';
  }
  function renderContextHelpEdit(meta,artifact){
    var body=document.getElementById('context-help-body'); if(!body)return;
    var title=(artifact&&artifact.title)||meta.title||meta.field_label||'Field Help';
    var text=(artifact&&(artifact.user_body||artifact.default_body))||'';
    var tags=contextHelpTags(meta,artifact);
    document.getElementById('context-help-title').textContent='Edit Field Help';
    body.innerHTML='<div class="context-help-meta">'+contextHelpMetaLine(meta)+'</div>'+ 
      '<div class="context-help-field context-help-inline-field"><label>Help title</label><input id="context-help-edit-title" value="'+esc(title)+'"></div>'+ 
      '<div class="context-help-field"><label>Context help</label>'+markdownTextareaHtml('context-help-edit-body','user_body',text)+'</div>'+ 
      '<div class="context-help-field"><label>Tags (comma separated)</label><input id="context-help-edit-tags" value="'+esc(tags.join(', '))+'"></div>'+ 
      '<div class="tail-line">'+(contextHelpState.loadedTail?'Loaded tail: '+esc(contextHelpState.loadedTail):'No saved help yet — saving will create the first CU.')+'</div>'+ 
      '<div class="context-help-actions"><button class="btn" onclick="closeContextHelp()">Cancel</button><button class="btn primary" onclick="saveContextHelp()">Save + Append CU</button></div>';
  }
  async function findPersistedFieldHelpByPlacement(meta){
    try{
      var j=await getJson(helpContextsApi("index"));
      var fieldIdMatches=[],placementMatches=[];
      (j.contexts||[]).forEach(function(row){
        normalizeArtifactResponse(row);
        var a=row&&row.artifact;
        if(!a||a.status==="retired"||a.context_type!=="form_field")return;

        /* ChatGPT 20260720-05: field_id is the authoritative identity of a
           persisted form field. Older Help Context rows may carry a legacy
           form_design_id or no hub_id at all, but that must not make the Form
           Designer miss help that Help Index can already see. */
        if(meta.field_id&&String(a.field_id||"")===String(meta.field_id)){
          fieldIdMatches.push({row:row,artifact:a});
          return;
        }

        if(String(a.level_id||"")!==String(meta.level_id||""))return;
        if(String(a.hub_id||"")!==String(meta.hub_id||""))return;
        if(String(a.field_label||a.title||"").trim().toLowerCase()!==
           String(meta.field_label||meta.title||"").trim().toLowerCase())return;
        placementMatches.push({row:row,artifact:a});
      });
      if(fieldIdMatches.length===1)return fieldIdMatches[0];
      return placementMatches.length===1?placementMatches[0]:null;
    }catch(e){return null;}
  }

  async function showContextHelp(meta,mode,opener){
    contextHelpState={contextId:meta.context_id,meta:meta,loadedTail:'',mode:mode||'read',opener:opener||document.activeElement,pendingDraft:meta.pending_draft||null,conflictDraft:null};
    closeHelp();
    var backdrop=document.getElementById('context-help-backdrop');
    if(!backdrop)return;
    backdrop.classList.add('show');
    document.getElementById('context-help-title').textContent=mode==='edit'?'Edit Field Help':'Field Help';
    document.getElementById('context-help-body').innerHTML='<div class="help-index-empty">Loading…</div>';
    var artifact=null;
    try{
      var j=normalizeArtifactResponse(await getJson(helpContextsApi("latest")+"?context_id="+encodeURIComponent(meta.context_id)));
      artifact=j&&j.artifact;
      contextHelpState.loadedTail=(j&&j.tail_hash)||'';
    }catch(e){}
    if(contextHelpState.contextId!==meta.context_id)return;

    /* Recovery path for the bug that previously regenerated schema IDs:
       locate one unambiguous persisted Field Help record at the same
       Level/Hub/field label. It is displayed under its real stored identity;
       no ghost row is created for the unmatched current ID. */
    if(!artifact){
      var recovered=await findPersistedFieldHelpByPlacement(meta);
      if(recovered){
        artifact=recovered.artifact;
        contextHelpState.loadedTail=(recovered.row&&recovered.row.tail_hash)||'';
        contextHelpState.contextId=artifact.context_id;
        meta=Object.assign({},meta,artifact,{tags:contextHelpTags(meta,artifact),recovered_identity:true});
      }
    }
    if(artifact){
      meta=Object.assign({},meta,artifact,{tags:contextHelpTags(meta,artifact)});
      contextHelpState.meta=meta;
      registerDynamicHelp(meta);
    }
    if(mode==='edit')renderContextHelpEdit(meta,artifact);else renderContextHelpRead(meta,artifact);
  }
  window.closeContextHelp=function(){
    var backdrop=document.getElementById('context-help-backdrop');if(backdrop)backdrop.classList.remove('show');
    var opener=contextHelpState.opener;contextHelpState={contextId:'',meta:null,loadedTail:'',mode:'read',opener:null,pendingDraft:null,conflictDraft:null};
    if(opener&&typeof opener.focus==='function')setTimeout(function(){try{opener.focus();}catch(e){}},0);
  };
  window.editCurrentContextHelp=function(){if(contextHelpState.meta){contextHelpState.mode='edit';renderContextHelpEdit(contextHelpState.meta,contextHelpState.meta);}};
  window.openHelpIndexFromContextHelp=function(){var cid=contextHelpState.contextId;closeContextHelp();openHelpIndex(cid);};
  function renderContextHelpConflict(meta,latest,rejectedDraft,currentTail){
    var body=document.getElementById('context-help-body');if(!body)return;
    contextHelpState.conflictDraft=rejectedDraft;contextHelpState.loadedTail=currentTail||'';
    document.getElementById('context-help-title').textContent='Field Help Changed';
    body.innerHTML='<div class="context-help-meta">'+contextHelpMetaLine(meta)+'</div>'+ 
      '<div class="card"><div class="card-body"><strong>This field help changed while you were editing it.</strong><div class="small-muted" style="margin-top:5px">Your write was rejected. Start a fresh edit from the latest saved help. No merge or blind retry is performed.</div></div></div>'+ 
      '<div class="context-help-field"><label>Latest saved help</label><div class="context-help-read">'+mdToHtml((latest&&(latest.user_body||latest.default_body))||'')+'</div></div>'+ 
      '<div class="context-help-field"><label>Your rejected draft (reference only)</label><textarea id="context-help-rejected-draft" readonly>'+esc(rejectedDraft.user_body||'')+'</textarea></div>'+ 
      '<div class="context-help-actions"><button class="btn" onclick="copyRejectedHelpDraft()">Copy My Draft</button><button class="btn" onclick="closeContextHelp()">Close</button><button class="btn primary" onclick="startFreshHelpEdit()">Load Latest for Fresh Edit</button></div>';
  }
  window.copyRejectedHelpDraft=async function(){var el=document.getElementById('context-help-rejected-draft');try{await navigator.clipboard.writeText(el?el.value:'');toast('Draft copied.','ok');}catch(e){if(el){el.focus();el.select();}toast('Select and copy the draft.','err');}};
  window.startFreshHelpEdit=function(){var meta=contextHelpState.meta;if(!meta)return;contextHelpState.conflictDraft=null;contextHelpState.mode='edit';renderContextHelpEdit(meta,meta);};
  window.saveContextHelp=async function(){
    var meta=contextHelpState.meta;if(!meta)return;
    var titleEl=document.getElementById('context-help-edit-title'),bodyEl=document.getElementById('context-help-edit-body'),tagsEl=document.getElementById('context-help-edit-tags');
    var title=(titleEl&&titleEl.value.trim())||meta.field_label||'Field Help';
    var userBody=bodyEl?bodyEl.value:'';
    var tags=(tagsEl?tagsEl.value:'').split(',').map(function(x){return x.trim();}).filter(Boolean);
    try{
      var resp=await fetch(helpContextsApi("save"),{method:'POST',cache:'no-store',headers:{'Content-Type':'application/json','Accept':'application/json'},body:JSON.stringify({context_id:meta.context_id,title:title,scope:'enterprise-editor',default_body:'',user_body:userBody,tags_json:JSON.stringify(tags),status:'active',context_type:meta.context_type||'form_field',form_design_id:meta.form_design_id||'',field_id:meta.field_id||'',field_label:meta.field_label||'',level_id:meta.level_id||'',hub_id:meta.hub_id||'',loaded_tail_hash:contextHelpState.loadedTail||'',operator:operator()})});
      var parsed=await parseJsonResponse(resp),j=normalizeArtifactResponse(parsed.json),txt=parsed.text;
      if(j&&j.ok===true){toast('Field help saved.','ok');meta=Object.assign({},meta,{title:title,user_body:userBody,tags:tags});registerDynamicHelp(meta);contextHelpState.meta=meta;await showContextHelp(meta,'read',contextHelpState.opener);refreshDynamicHelpIndex();}
      else if(j&&j.error==='stale-tail'){
        var rejected={title:title,user_body:userBody,tags:tags},latest=null,currentTail=j.current_tail_hash||'';
        try{var fresh=normalizeArtifactResponse(await getJson(helpContextsApi("latest")+"?context_id="+encodeURIComponent(meta.context_id)));latest=fresh&&fresh.artifact;currentTail=(fresh&&fresh.tail_hash)||currentTail;}catch(e){}
        meta=Object.assign({},meta,latest||{});contextHelpState.meta=meta;renderContextHelpConflict(meta,latest,rejected,currentTail);toast('Field help save rejected: newer tail exists.','err');
      }
      else{
        var detail=(j&&(j.error||j.message))||
          ('HTTP '+resp.status+' response: '+(j?JSON.stringify(j):(txt||'<empty body>')));
        if(window.ceeCaptureDiagnostic)window.ceeCaptureDiagnostic(
          'http-error',detail,
          {url:helpContextsApi("save"),status:resp.status,response_json:j,response_text:txt,
           request_body:{context_id:meta.context_id,title:title,scope:'enterprise-editor',default_body:'',user_body:userBody,tags_json:JSON.stringify(tags),status:'active',context_type:meta.context_type||'form_field',form_design_id:meta.form_design_id||'',field_id:meta.field_id||'',field_label:meta.field_label||'',level_id:meta.level_id||'',hub_id:meta.hub_id||'',loaded_tail_hash:contextHelpState.loadedTail||'',operator:operator()}}
        );
        toast('Save failed: '+detail,'err');
      }
    }catch(e){
      if(window.ceeCaptureDiagnostic)window.ceeCaptureDiagnostic('http-error',(e&&e.message)||String(e),{url:helpContextsApi("save"),stack:e&&e.stack});
      toast('Save failed: '+(e.message||e),'err');
    }
  };
  window.editDesignerFieldHelp=async function(nodeId,index,el){
    var n=model.byId[nodeId],d=model.drafts[nodeId],f=d&&d.fields&&d.fields[index];
    if(!n||!d||!f)return;
    try{
      await assignAuthoritativeSchemaIds(n,d);
      f=d.fields[index];
      var lv=model.byId[n.levelId];
      showContextHelp(fieldHelpMeta(d.form_design_id,f.field_id,f.label||f.name,n.levelId,d.hub_id||hubIdForLevel(lv)),'edit',el||document.activeElement);
    }catch(e){
      console.error('[CEE v31c51] Could not open Field Help', {
        error:e,
        message:(e&&e.message)||String(e),
        nodeId:nodeId,
        fieldIndex:index,
        node:n,
        draft:d,
        field:f
      });
      toast('Could not open Field Help: '+((e&&e.message)||e),'err');
    }
  };
  window.editFieldHelp=function(formDesignId,fieldId,fieldLabel,levelId,hubId,el){showContextHelp(fieldHelpMeta(formDesignId,fieldId,fieldLabel,levelId,hubId),'edit',el||document.activeElement);};
  window.openFieldHelp=function(formDesignId,fieldId,fieldLabel,levelId,hubId,el){showContextHelp(fieldHelpMeta(formDesignId,fieldId,fieldLabel,levelId,hubId),'read',el||document.activeElement);};
  /* ChatGPT 20260720-20: Form Designer field-help buttons use one delegated
     event route. Inline handlers were brittle across synthetic/canonical Hub
     descriptors and could fail before the Help Context modal opened. */
  document.addEventListener('click',function(e){
    var btn=e.target.closest&&e.target.closest('.field-help-btn[data-field-help-node]');
    if(!btn||btn.disabled)return;
    e.preventDefault();e.stopPropagation();
    var nodeId=btn.getAttribute('data-field-help-node');
    var index=Number(btn.getAttribute('data-field-help-index'));
    window.editDesignerFieldHelp(nodeId,index,btn);
  },true);

  /* Help Index window -- reuses the existing MDI browse-window machinery
     (model.browses / setBrowseActive / closeBusinessBrowse / makeDraggable
     / renderBrowseChips) so it drags, closes, and chips exactly like
     every other MDI window in CEE, rather than inventing a parallel
     mechanism. Reads from the shared CHANDRA_HELP registry but only
     LISTS topics tagged apps:["enterprise-editor"] (or shared across
     both) -- CHANDRA_HELP itself carries all ~50 topics from both apps,
     but showing spine-editor's Isolation Surface Planner topics in
     CEE's own index would just be clutter. Selecting a topic by id
     still works regardless of its apps tag (e.g. via a direct
     preselectId), since the registry itself is genuinely shared. */
  var CEE_APP_TAG="enterprise-editor";
  /* ChatGPT 20260720-06: Help Index topics are identified by context_id, not
     by their mutable display titles. A static registry topic may describe the
     same field as a persisted/dynamic Help Context. Resolve that static topic
     to the authoritative dynamic identity before listing, loading, chaining,
     or saving. Title normalization is only a conservative legacy fallback
     when explicit field metadata is absent, and only when it yields one match. */
  function helpTopicSemanticKey(topicId,t){
    var a=(t&&t.artifact)||t||{};
    var type=String(a.context_type||"");
    var fieldId=String(a.field_id||"");
    if((type==="form_field"||type==="level_info_field")&&fieldId)
      return type+":"+fieldId;
    return "";
  }
  function normalizedHelpTitle(title){
    return String(title||"").trim().toLowerCase()
      .replace(/[\s\-—_:]+help\s*$/i,"")
      .replace(/\s+/g," ");
  }
  function authoritativeDynamicHelpIds(){
    return Object.keys(CEE_DYNAMIC_HELP).filter(function(id){
      var a=(CEE_DYNAMIC_HELP[id]&&CEE_DYNAMIC_HELP[id].artifact)||CEE_DYNAMIC_HELP[id]||{};
      return (a.context_type==="form_field"||a.context_type==="level_info_field")&&!!a.field_id;
    });
  }
  function canonicalHelpTopicId(topicId){
    var source=CEE_DYNAMIC_HELP[topicId]||CHANDRA_HELP[topicId];
    if(!source)return topicId;
    var sourceKey=helpTopicSemanticKey(topicId,source);
    var authoritative=authoritativeDynamicHelpIds();
    if(sourceKey){
      var keyed=authoritative.filter(function(id){return helpTopicSemanticKey(id,CEE_DYNAMIC_HELP[id])===sourceKey;});
      if(keyed.length===1)return keyed[0];
    }
    var wanted=normalizedHelpTitle(source.title);
    if(wanted){
      var titled=authoritative.filter(function(id){return normalizedHelpTitle(CEE_DYNAMIC_HELP[id]&&CEE_DYNAMIC_HELP[id].title)===wanted;});
      if(titled.length===1)return titled[0];
    }
    return topicId;
  }
  function resolvedHelpTopic(topicId){
    var canonicalId=canonicalHelpTopicId(topicId);
    var canonical=CEE_DYNAMIC_HELP[canonicalId]||CHANDRA_HELP[canonicalId]||{title:canonicalId,default_body:"",tags:[]};
    var aliasIds=Object.keys(CHANDRA_HELP).concat(Object.keys(CEE_DYNAMIC_HELP)).filter(function(id){
      return id!==canonicalId&&canonicalHelpTopicId(id)===canonicalId;
    });
    var supplement=null;
    for(var i=0;i<aliasIds.length&&!supplement;i++){
      var candidate=CEE_DYNAMIC_HELP[aliasIds[i]]||CHANDRA_HELP[aliasIds[i]];
      if(candidate&&(candidate.default_body||(candidate.tags&&candidate.tags.length)))supplement=candidate;
    }
    if(!supplement)return {id:canonicalId,topic:canonical};
    return {id:canonicalId,topic:Object.assign({},supplement,canonical,{
      default_body:canonical.default_body||supplement.default_body||"",
      tags:(canonical.tags&&canonical.tags.length)?canonical.tags:(supplement.tags||[])
    })};
  }
  function ceeHelpTopicIds(){
    var dynamicIds=Object.keys(CEE_DYNAMIC_HELP).filter(function(id){return canonicalHelpTopicId(id)===id;});
    var staticIds=Object.keys(CHANDRA_HELP).filter(function(k){
      var t=CHANDRA_HELP[k];
      return !!(t.apps&&t.apps.indexOf(CEE_APP_TAG)!==-1)&&canonicalHelpTopicId(k)===k;
    });
    return staticIds.concat(dynamicIds).filter(function(v,i,a){return a.indexOf(v)===i;}).sort();
  }
  window.openHelpIndex=async function(preselectId){
    await refreshDynamicHelpIndex();
    var existingId=Object.keys(model.browses).find(function(id){return model.browses[id].kind==="help-index";});
    if(existingId){
      setBrowseActive(existingId);
      renderHelpIndexTags(existingId);
      var scope=document.querySelector("#"+existingId+" .browse-scope");
      if(scope)scope.textContent=ceeHelpTopicIds().length+" topic(s)";
      if(preselectId) selectHelpTopic(existingId, preselectId);
      return;
    }
    var id="help-index-"+(model.browseSeq++);
    var w={id:id, key:"help-index", kind:"help-index", title:"Help Index", selectedTopic:null, selectedSubjectId:"", selectedTitle:"", loadedTail:""};
    model.browses[id]=w;
    var el=document.createElement("div");
    el.id=id; el.className="browse-win help-index-win active";
    el.style.left="60px"; el.style.top="40px"; el.style.zIndex=String(++model.zTop);
    el.innerHTML=
      '<div class="browse-hdr"><span class="browse-title">Help Index</span><span class="browse-scope">'+ceeHelpTopicIds().length+' topic(s)</span><button class="browse-close">×</button></div>'+
      '<div class="help-index-toolbar">'+
        '<span class="help-index-selection" id="'+id+'-selection">No help topic selected</span>'+
      '</div>'+
      '<div class="help-index-layout">'+
        '<div class="help-index-tags" id="'+id+'-tags"></div>'+
        '<div class="help-index-main" id="'+id+'-main"><div class="help-index-empty">Select a tag on the left.</div></div>'+
      '</div>';
    document.getElementById("mdi-layer").appendChild(el);
    el.onmousedown=function(){setBrowseActive(id);};
    el.querySelector(".browse-close").onclick=function(){closeBusinessBrowse(id);};
    makeDraggable(el, el.querySelector(".browse-hdr"));
    renderHelpIndexTags(id);
    renderBrowseChips();
    if(preselectId) selectHelpTopic(id, preselectId);
  };
  function renderHelpIndexTags(winId){
    var host=document.getElementById(winId+"-tags");
    var w=model.browses[winId];
    if(!host || !w) return;
    host.innerHTML="";
    ceeHelpTopicIds().forEach(function(topicId){
      var resolved=resolvedHelpTopic(topicId),t=resolved.topic;
      topicId=resolved.id;
      var row=document.createElement("div");
      row.className="help-tag-row"+(w.selectedTopic===topicId?" sel":"");
      row.textContent=t.title;
      row.onclick=function(){selectHelpTopic(winId, topicId);};
      host.appendChild(row);
    });
  }
  async function selectHelpTopic(winId, topicId){
    var resolved=resolvedHelpTopic(topicId);
    topicId=resolved.id;
    var w=model.browses[winId]; if(!w) return;
    w.selectedTopic=topicId;
    w.selectedSubjectId="";
    w.selectedTitle="";
    updateHelpChainButton(winId);
    renderHelpIndexTags(winId);
    var main=document.getElementById(winId+"-main");
    if(!main) return;
    var t=resolved.topic;
    main.innerHTML='<div class="help-index-empty">Loading…</div>';
    var loadedTail="", userBody="";
    try{
      var j=normalizeArtifactResponse(await getJson(helpContextsApi("latest")+"?context_id="+encodeURIComponent(topicId)));
      var art=j&&j.artifact;
      if(art){
        userBody=art.user_body||"";
        loadedTail=j.tail_hash||"";
        w.selectedSubjectId=j.subject_id||art.subject_id||"";
        w.selectedTitle=art.title||t.title||topicId;
      }
    }catch(e){ /* no saved notes yet -- start blank, loadedTail stays "" */ }
    if(w.selectedTopic!==topicId) return; // selection changed while this was in flight
    w.loadedTail=loadedTail;
    if(!w.selectedTitle) w.selectedTitle=t.title||topicId;
    updateHelpChainButton(winId);
    main.innerHTML=
      '<div class="help-context-form" style="padding:10px;overflow:auto">'+
        '<div class="readonly-help"><h3>'+esc(t.title)+'</h3><div id="'+winId+'-default-body"></div>'+
        (t.tags&&t.tags.length?'<div class="help-form-tags">'+t.tags.map(function(g){return '<span class="help-form-tag">'+esc(g)+'</span>';}).join("")+'</div>':"")+
        '</div>'+
        '<label style="font-family:var(--mono);font-size:10px;color:var(--text2);display:block;margin-bottom:4px">Your notes (optional -- saved separately from the default text above)</label>'+
        markdownTextareaHtml(winId+"-user-body","user_body",userBody)+
        '<div class="tail-line">'+(loadedTail?"Loaded tail: "+esc(loadedTail):"No saved notes yet -- saving will create the first one.")+'</div>'+
        '<div class="action-row" style="margin-top:10px">'+
          '<button class="btn primary" onclick="saveHelpTopic(\''+winId+'\',\''+esc(topicId)+'\')">Save</button>'+
          '<button class="btn" id="'+winId+'-chain-btn" onclick="openSelectedHelpChain(\''+winId+'\')" disabled>Chain</button>'+
          '<button class="btn" onclick="cancelHelpTopicEdit(\''+winId+'\')">Close</button>'+
        '</div>'+
      '</div>';
    document.getElementById(winId+"-default-body").innerHTML=t.default_body||"(no default text yet)";
    updateHelpChainButton(winId);
  }
  function updateHelpChainButton(winId){
    var w=model.browses[winId];
    var btn=document.getElementById(winId+"-chain-btn");
    var label=document.getElementById(winId+"-selection");
    if(!w)return;
    var hasSubject=!!w.selectedSubjectId;
    if(btn) btn.disabled=!hasSubject;
    if(label){
      label.textContent=w.selectedTopic
        ? ((w.selectedTitle||w.selectedTopic)+(hasSubject?" · persisted CU chain":" · no saved CU yet"))
        : "No help topic selected";
    }
  }

  window.openSelectedHelpChain=function(parentWinId){
    var w=model.browses[parentWinId];
    if(!w||!w.selectedSubjectId)return;
    openHelpContextChain(parentWinId,w.selectedSubjectId,w.selectedTitle||w.selectedTopic||"Help Context");
  };

  window.openHelpContextChain=async function(parentWinId,subjectId,title){
    return openUniversalChainViewer({parentWinId:parentWinId,subjectId:subjectId,title:"Help Context · "+title,detailKind:"help-context"});
  };

  window.cancelHelpTopicEdit=function(winId){
    var w=model.browses[winId]; if(!w||!w.selectedTopic) return;
    selectHelpTopic(winId, w.selectedTopic); // re-fetches fresh, discarding any unsaved edits
  };
  /* v31c9 (claude): optimistic-tail-reject, same doctrine as every other
     CU write in this codebase -- loaded_tail_hash is whatever was current
     when the form opened; the backend rejects with error:"stale-tail" if
     someone else saved this same context_id in between, rather than
     silently overwriting. On success OR on stale-tail, re-select the
     topic to pull the current state back into the form. */
  window.saveHelpTopic=async function(winId, topicId){
    var resolved=resolvedHelpTopic(topicId);
    topicId=resolved.id;
    var w=model.browses[winId]; if(!w) return;
    var t=resolved.topic;
    var ta=document.getElementById(winId+"-user-body");
    var userBody=ta?ta.value:"";
    try{
      var resp=await fetch(helpContextsApi("save"),{
        method:"POST", cache:"no-store",
        headers:{"Content-Type":"application/json","Accept":"application/json"},
        body:JSON.stringify({
          context_id:topicId, title:t.title, scope:"enterprise-editor",
          default_body:t.default_body||"", user_body:userBody,
          tags_json:JSON.stringify(t.tags||[]), status:"active",
          context_type:(t.artifact&&t.artifact.context_type)||"general", form_design_id:(t.artifact&&t.artifact.form_design_id)||"", field_id:(t.artifact&&t.artifact.field_id)||"", field_label:(t.artifact&&t.artifact.field_label)||"", level_id:(t.artifact&&t.artifact.level_id)||"", hub_id:(t.artifact&&t.artifact.hub_id)||"",
          loaded_tail_hash:w.loadedTail||"", operator:operator()
        })
      });
      var parsed=await parseJsonResponse(resp),j=normalizeArtifactResponse(parsed.json),txt=parsed.text;
      if(j && j.ok===true){
        toast("Help notes saved.","ok");
        selectHelpTopic(winId, topicId);
      }else if(j && j.error==="stale-tail"){
        toast("This topic changed since you opened it -- reloaded the latest version. Re-check before saving again.","err");
        selectHelpTopic(winId, topicId);
      }else{
        var detail=(j&&(j.error||j.message))||
          ("HTTP "+resp.status+" response: "+(j?JSON.stringify(j):(txt||"<empty body>")));
        if(window.ceeCaptureDiagnostic)window.ceeCaptureDiagnostic("http-error",detail,{url:helpContextsApi("save"),status:resp.status,response_json:j,response_text:txt,context_id:topicId});
        toast("Save failed: "+detail,"err");
      }
    }catch(e){
      toast("Save failed: "+(e.message||e),"err");
    }
  };


  /* v31c50: durable context-specific diagnostics. Console warnings/errors,
     uncaught errors, rejected promises, and UI error balloons are retained in a
     bounded in-memory journal and can be promoted directly into the CU-backed
     Bug Reports Hub through REPORT BUG. */
  /* One active, unsaved diagnostic incident per browser session.
     A later substantive incident replaces the earlier one. The error toast
     produced from that same incident is presentation, not a second bug. */
  var CEE_DIAGNOSTICS=[];
  function updateDiagnosticCount(){
    var c=document.getElementById('diagnostic-count');
    if(c)c.textContent=CEE_DIAGNOSTICS.length?'(1)':'';
  }
  function clearDiagnostics(){
    CEE_DIAGNOSTICS.length=0;
    updateDiagnosticCount();
  }
  function diagnosticContext(){
    var modalTitle=document.querySelector('#edit-modal .modal-title,.modal.show .modal-title');
    var active=document.querySelector('.browse-win.active .browse-title');
    return {url:location.href,environment_root:context.environmentRoot||'',environment_label:context.environmentLabel||'',active_window:(modalTitle&&modalTitle.textContent)||(active&&active.textContent)||'',user_agent:navigator.userAgent,version:currentCeeVersion()};
  }
  window.ceeCaptureDiagnostic=function(kind,message,detail){
    kind=String(kind||'diagnostic');
    message=String(message||'');
    detail=detail||null;

    var previous=CEE_DIAGNOSTICS[0]||null;
    var now=Date.now();

    /* Toasts usually repeat an HTTP/exception diagnostic recorded moments
       earlier. Do not count the same failure twice. */
    if(kind==='ui-error' && detail && detail.source==='toast' && previous){
      var previousAt=Date.parse(previous.at)||0;
      var sameText=message===previous.message ||
        message.indexOf(previous.message)>=0 ||
        previous.message.indexOf(message)>=0;
      if((now-previousAt)<3000 && sameText){
        updateDiagnosticCount();
        return previous;
      }
    }

    var entry={
      at:new Date(now).toISOString(),
      kind:kind,
      message:message,
      detail:detail,
      context:diagnosticContext()
    };

    /* Deliberate overwrite policy: one active unsaved incident. Persisted
       Bug Report spokes remain available independently in Bug Browse. */
    CEE_DIAGNOSTICS.length=0;
    CEE_DIAGNOSTICS.push(entry);
    updateDiagnosticCount();
    return entry;
  };
  (function installDiagnosticCapture(){
    ['warn','error'].forEach(function(level){var nativeFn=console[level]&&console[level].bind(console);if(!nativeFn)return;console[level]=function(){var args=[].slice.call(arguments);try{window.ceeCaptureDiagnostic('console-'+level,args.map(function(x){return x instanceof Error?(x.stack||x.message):typeof x==='string'?x:JSON.stringify(x);}).join(' '),{arguments:args.map(function(x){try{return x instanceof Error?(x.stack||x.message):JSON.parse(JSON.stringify(x));}catch(e){return String(x);}})});}catch(e){}return nativeFn.apply(console,args);};});
    window.addEventListener('error',function(e){window.ceeCaptureDiagnostic('uncaught-error',e.message,{filename:e.filename,lineno:e.lineno,colno:e.colno,stack:e.error&&e.error.stack});});
    window.addEventListener('unhandledrejection',function(e){var r=e.reason;window.ceeCaptureDiagnostic('unhandled-rejection',r&&r.message||String(r),{stack:r&&r.stack});});
  })();
  /* v19 (claude): auto-file for errors severe enough that waiting for a person to
     notice the console and click REPORT BUG isn't good enough -- a backend commit
     failure (e.g. a unique-index violation) silently swallowed into "no form design
     yet" is actively misleading, not just unlogged. This still shows the person a
     balloon (this IS the visible surface, not a replacement for one) and files a
     real CU-backed bug report via the same bugReportsApiBase()/save endpoint
     showBugReportForm's manual path uses -- just without waiting for a click.
     Deduped per browser session by a signature (kind+context+message) so retrying
     the same broken action twice doesn't file two reports for one root cause. */
  var AUTO_FILED_SIGNATURES={};
  function autoFileBugReport(opts){
    var sig=(opts.context_id||"")+"::"+opts.title;
    if(AUTO_FILED_SIGNATURES[sig]){
      toast(opts.balloon||opts.title,"err");
      return;
    }
    AUTO_FILED_SIGNATURES[sig]=true;
    var stamp=Date.now();
    var body={
      report_id:"BR-AUTO-"+stamp,
      subject_id:"",
      title:opts.title.slice(0,140),
      severity:opts.severity||"High",
      status:"Open",
      context_id:opts.context_id||"",
      reporter:(typeof operator==="function"?operator():"system")+" (auto-filed)",
      environment:context.environmentRoot||"production",
      cee_version:currentCeeVersion(),
      description:"Auto-filed from a runtime error. Not manually triaged yet.\n\n**Error:** "+opts.title+"\n\n**Detail:**\n```\n"+
        (typeof opts.detail==="string"?opts.detail:JSON.stringify(opts.detail,null,2))+"\n```",
      triage_notes:"",
      attachment_url:"",
      loaded_tail_hash:"",
      operator:(typeof operator==="function"?operator():"system")
    };
    toast(opts.balloon||opts.title,"err");
    postJson(bugReportsApiBase()+"/save",body).then(function(){
      toast("Filed as "+body.report_id+" in Bug Reports.","ok");
    }).catch(function(e){
      /* Do not recurse into autoFileBugReport for a failure of the filer itself --
         that's exactly the loop this whole mechanism exists to avoid triggering. */
      console.warn("Auto-file of bug report failed",{report_id:body.report_id,error:e});
    });
  }
  function diagnosticsMarkdown(){
    var rows=CEE_DIAGNOSTICS.slice(0,1);
    return '## Context\n\n```json\n'+JSON.stringify(diagnosticContext(),null,2)+'\n```\n\n## Active diagnostic incident\n\n```json\n'+JSON.stringify(rows,null,2)+'\n```';
  }
  window.openDiagnosticBugReport=function(){
    var existingId=Object.keys(model.browses).find(function(id){return model.browses[id].kind==='bug-reports';});
    if(!existingId){openBugReports();existingId=Object.keys(model.browses).find(function(id){return model.browses[id].kind==='bug-reports';});}
    var latest=CEE_DIAGNOSTICS[CEE_DIAGNOSTICS.length-1];
    var stamp=new Date().toISOString().replace(/[-:TZ.]/g,'').slice(0,14);
    showBugReportForm(existingId,{report_id:'BR-'+stamp,severity:latest&&/error|reject/.test(latest.kind)?'High':'Medium',status:'Open',environment:context.environmentRoot||'production',context_id:(latest&&latest.context&&latest.context.active_window)||'CEE',title:latest?latest.message.slice(0,140):'CEE context report',description:diagnosticsMarkdown(),reporter:operator()},'',true);
  };

  /* Bug Reports -- restored CU-backed system Hub UI.
     The current CEE had retained only the CSS while its menu, MDI browse,
     editor, route selection, optimistic-tail save, and chain access were
     lost during the Level-centric Acceptance rewrite. */
  function bugReportsApiBase(){
    return context.environmentRoot==="acceptance"
      ? "/api/enterprise/acceptance/bug-reports"
      : "/api/enterprise/bug-reports";
  }
  function bugArtifact(row){
    var a=row&&row.artifact;
    if(typeof a==="string"){try{a=JSON.parse(a);}catch(e){a={};}}
    return a||{};
  }
  function bugStatusClass(status){
    return "br-badge-"+String(status||"open").toLowerCase().replace(/[^a-z0-9]+/g,"");
  }
  function bugSeverityClass(sev){
    return "br-sev-"+String(sev||"medium").toLowerCase().replace(/[^a-z0-9]+/g,"");
  }
  window.openBugReports=function(){
    var existingId=Object.keys(model.browses).find(function(id){return model.browses[id].kind==="bug-reports";});
    if(existingId){setBrowseActive(existingId);refreshBugReports(existingId);return;}
    var id="bug-reports-"+(model.browseSeq++);
    var w={id:id,key:"bug-reports",kind:"bug-reports",title:"Bug Reports",reports:[],selectedSubject:""};
    model.browses[id]=w;
    var el=document.createElement("div");
    el.id=id;el.className="browse-win active";el.style.width="900px";el.style.height="540px";
    el.style.left=(44+(Object.keys(model.browses).length%5)*26)+"px";
    el.style.top=(48+(Object.keys(model.browses).length%5)*22)+"px";
    el.innerHTML=
      '<div class="browse-hdr"><span class="browse-title">Bug Reports</span><span class="browse-scope">'+esc(context.environmentRoot||"production")+'</span><button class="browse-close">×</button></div>'+ 
      '<div class="bugreports-toolbar"><button class="btn primary" onclick="newBugReport(\''+id+'\')">New Report</button><button class="btn" onclick="refreshBugReports(\''+id+'\')">Refresh</button><input id="'+id+'-search" placeholder="Filter reports…" oninput="filterBugReports(\''+id+'\',this.value)"><span class="small-muted" id="'+id+'-count"></span></div>'+ 
      '<div class="browse-body" id="'+id+'-body"><div class="small-muted">Loading bug reports…</div></div>';
    document.getElementById("mdi-layer").appendChild(el);
    el.onmousedown=function(){setBrowseActive(id);};
    el.querySelector(".browse-close").onclick=function(){closeBusinessBrowse(id);};
    makeDraggable(el,el.querySelector(".browse-hdr"));
    setBrowseActive(id);renderBrowseChips();refreshBugReports(id);
  };
  window.refreshBugReports=async function(winId){
    var w=model.browses[winId],body=document.getElementById(winId+"-body");if(!w||!body)return;
    body.innerHTML='<div class="small-muted">Loading bug reports…</div>';
    try{
      var j=await getJson(bugReportsApiBase()+"/index");
      w.reports=(j.reports||[]).map(function(row){var a=bugArtifact(row);a._subject_id=row.subject_id||a.subject_id||"";a._cu_id=row.cu_id||"";return a;});
      renderBugReports(winId);
    }catch(e){body.innerHTML='<div style="color:var(--red);padding:10px">'+esc(e.message||e)+'</div>';}
  };
  function renderBugReports(winId){
    var w=model.browses[winId],body=document.getElementById(winId+"-body"),count=document.getElementById(winId+"-count");if(!w||!body)return;
    if(count)count.textContent=w.reports.length+" report(s)";
    if(!w.reports.length){body.innerHTML='<div class="help-index-empty">No bug reports yet.</div>';return;}
    var rows=w.reports.map(function(r){
      var subject=r._subject_id||r.subject_id||"",search=[r.report_id,r.title,r.severity,r.status,r.reporter,r.environment,r.context_id].join(" ").toLowerCase();
      return '<tr data-search="'+esc(search)+'" onclick="editBugReport(\''+winId+'\',\''+esc(subject)+'\')">'+
        '<td class="title-cell">'+esc(r.title||r.report_id||subject)+'</td>'+ 
        '<td><span class="'+bugSeverityClass(r.severity)+'">'+esc(r.severity||"Medium")+'</span></td>'+ 
        '<td><span class="br-badge '+bugStatusClass(r.status)+'">'+esc(r.status||"Open")+'</span></td>'+ 
        '<td>'+esc(r.reporter||"")+'</td><td>'+esc(r.context_id||"")+'</td>'+ 
        '<td><button class="btn br-row-chain-btn" onclick="event.stopPropagation();openBugReportChain(\''+winId+'\',\''+esc(subject)+'\',\''+esc(r.title||r.report_id||subject)+'\')">Chain</button></td></tr>';
    }).join("");
    body.innerHTML='<table class="bugreports-table"><thead><tr><th>Title</th><th>Severity</th><th>Status</th><th>Reporter</th><th>Context</th><th>Evidence</th></tr></thead><tbody>'+rows+'</tbody></table>';
    var q=document.getElementById(winId+"-search");if(q&&q.value)filterBugReports(winId,q.value);
  }
  window.filterBugReports=function(winId,q){q=String(q||"").toLowerCase();document.querySelectorAll("#"+winId+" tbody tr").forEach(function(tr){tr.style.display=tr.dataset.search.indexOf(q)>=0?"":"none";});};
  function bugSelect(id,value,options){return '<select id="'+id+'">'+options.map(function(v){return '<option'+(v===value?' selected':'')+'>'+esc(v)+'</option>';}).join('')+'</select>';}
  window.newBugReport=function(winId){
    var stamp=new Date().toISOString().replace(/[-:TZ.]/g,"").slice(0,14);
    showBugReportForm(winId,{report_id:"BR-"+stamp,severity:"Medium",status:"Open",environment:context.environmentRoot||"production"},"",true);
  };
  window.editBugReport=async function(winId,subjectId){
    try{
      var j=await getJson(bugReportsApiBase()+"/latest?subject_id="+encodeURIComponent(subjectId));
      showBugReportForm(winId,bugArtifact(j),j.tail_hash||j.cu_id||"",false);
    }catch(e){toast("Bug report load failed: "+(e.message||e),"err");}
  };
  function currentCeeVersion(){
    var badge=document.getElementById("cee-build-badge");
    return String((badge&&badge.textContent)||"v31c432").trim();
  }

  /* ============================================================
     Universal CU Chain Viewer — metadata browse + one-CU detail.
     All CEE chain actions route through this surface.
     ============================================================ */
  function ceeChainBase(base){return String(base||"").replace(/\/$/,"");}
  function ceeChainArtifact(envelope){
    var raw=envelope&&(envelope.artifact!==undefined?envelope.artifact:envelope.artifact_json);
    if(raw&&typeof raw==="object")return raw;
    if(typeof raw==="string"){try{return JSON.parse(raw);}catch(_e){return {raw_artifact:raw};}}
    return {};
  }
  function ceeChainTimestamp(row){
    /* Chandra chronology is derived from the UUIDv7 CU identity. Do not
       privilege or require a separately stored publication timestamp. */
    var raw=String((row&&row.cu_id)||"").trim();
    var compact=raw.replace(/[^0-9a-f]/gi,"").toLowerCase();
    var localHex="";
    if(compact.length===64)localHex=compact.slice(32);
    else if(compact.length===32)localHex=compact;
    else return "—";
    if(!/^[0-9a-f]{32}$/.test(localHex))return "—";
    var ms=parseInt(localHex.slice(0,12),16);
    if(!Number.isFinite(ms))return "—";
    var d=new Date(ms);
    return Number.isFinite(d.getTime())?d.toLocaleString():"—";
  }
  function ceeChainScalar(value){
    if(value===null||value===undefined)return "";
    if(typeof value==="boolean")return value?"true":"false";
    return String(value);
  }
  function ceeChainGenericDetailHtml(envelope,artifact){
    var keys=Object.keys(artifact||{}),fields=[],complex=[];
    keys.forEach(function(key){
      var value=artifact[key];
      if(value!==null&&typeof value==="object")complex.push({key:key,value:value});
      else fields.push({key:key,value:value});
    });
    var fieldHtml=fields.map(function(item){
      var value=ceeChainScalar(item.value),long=value.length>180||value.indexOf("\n")>=0;
      return '<div class="field"><label>'+esc(item.key)+'</label>'+
        (long?'<textarea readonly style="min-height:90px">'+esc(value)+'</textarea>':
              '<input readonly value="'+esc(value)+'">')+'</div>';
    }).join("");
    var complexHtml=complex.map(function(item){
      return '<details style="margin-top:8px"><summary>'+esc(item.key)+'</summary>'+
        '<pre style="white-space:pre-wrap;max-height:300px;overflow:auto">'+esc(JSON.stringify(item.value,null,2))+'</pre></details>';
    }).join("");
    return '<div class="small-muted" style="padding:8px 10px;margin-bottom:10px;border:1px solid var(--border);background:var(--bg3)">'+
        '<b>Historical CU — read only</b><br>CU: <span class="tail-hash">'+esc(envelope.cu_id||"")+'</span><br>'+
        'Published: '+esc(ceeChainTimestamp(envelope))+' · Operator: '+esc(envelope.operator||"")+'<br>'+
        'Predecessor: <span class="tail-hash">'+esc(envelope.predecessor_id||envelope.predecessor_cu_id||"root")+'</span>'+
      '</div>'+fieldHtml+complexHtml+
      '<details style="margin-top:10px"><summary>CU Notes and Raw Artifact</summary>'+
        '<div class="small-muted" style="margin:8px 0">'+esc(envelope.notes||"")+'</div>'+
        '<pre style="white-space:pre-wrap;max-height:320px;overflow:auto">'+esc(JSON.stringify(artifact,null,2))+'</pre>'+
      '</details>'+
      '<div class="action-row" style="justify-content:flex-end"><button class="btn chain-detail-close">Close</button></div>';
  }
  function openInheritedMdiDetail(openerId,title,html,afterOpen){
    var opener=model.browses[openerId],authorized=!!(opener&&(opener.modalAuthorized||opener.modalLaunched));
    var id="mdi-detail-"+(model.browseSeq++),parent=document.getElementById(openerId||"");
    var left=parent?(parseInt(parent.style.left||"70",10)+34):110;
    var top=parent?(parseInt(parent.style.top||"70",10)+34):120;
    model.browses[id]={id:id,key:id,kind:"cu-detail",title:title,modalAuthorized:authorized,modalLaunched:authorized,openerMdiId:openerId||""};
    var el=document.createElement("div");
    el.id=id;el.className="browse-win active"+(authorized?" modal-launched-mdi":"");
    el.style.width="860px";el.style.height="620px";el.style.left=Math.max(12,left)+"px";el.style.top=Math.max(12,top)+"px";
    el.innerHTML='<div class="browse-hdr"><span class="browse-title">'+esc(title)+'</span><span class="browse-scope">historical CU · read-only</span><button class="browse-close">×</button></div><div class="browse-body" style="overflow:auto;padding:12px">'+html+'</div>';
    document.getElementById("mdi-layer").appendChild(el);
    el.onmousedown=function(){setBrowseActive(id);};
    el.querySelector(".browse-close").onclick=function(e){e.stopPropagation();closeBusinessBrowse(id);};
    var close=el.querySelector(".chain-detail-close");if(close)close.onclick=function(){closeBusinessBrowse(id);};
    makeDraggable(el,el.querySelector(".browse-hdr"));setBrowseActive(id);renderBrowseChips();
    if(typeof afterOpen==="function")setTimeout(function(){afterOpen(el,id);},0);
    return id;
  }
  window.openUniversalChainDetail=async function(winId,cuId){
    var w=model.browses[winId];if(!w)return;
    var started=performance.now(),base=ceeChainBase(w.base);
    try{
      var j=await getJson(base+"/api/enterprise/chain/detail?cu_id="+encodeURIComponent(cuId));
      var fetched=performance.now(),artifact=ceeChainArtifact(j);
      if(w.detailKind==="test-plan" && typeof testPlanChainDetailPresentation==="function"){
        var presentation=testPlanChainDetailPresentation(j);
        openInheritedMdiDetail(winId,presentation.title,presentation.html,presentation.afterOpen);
      }else{
        openInheritedMdiDetail(winId,"Historical CU — "+(w.title||w.subjectId),ceeChainGenericDetailHtml(j,artifact));
      }
      var rendered=performance.now();
      console.log("[CEE Universal Chain] detail timing",{
        subject_id:w.subjectId,cu_id:cuId,kind:w.detailKind||"generic",
        detail_roundtrip_ms:Math.round(fetched-started),
        render_ms:Math.round(rendered-fetched),
        total_ms:Math.round(rendered-started)
      });
    }catch(e){toast("Failed to load CU detail: "+(e.message||e),"err");}
  };
  window.selectUniversalChainRow=function(winId,cuId){
    var w=model.browses[winId];if(!w)return;
    w.selectedCu=cuId;
    var body=document.getElementById(winId+"-body");if(!body)return;
    Array.prototype.forEach.call(body.querySelectorAll("tr[data-cu]"),function(tr){
      tr.classList.toggle("sel",tr.getAttribute("data-cu")===cuId);
    });
  };
  function renderUniversalChainBrowse(winId){
    var w=model.browses[winId],body=document.getElementById(winId+"-body");
    if(!w||!body)return;
    var rows=w.rows||[];
    if(!rows.length){body.innerHTML='<div class="small-muted" style="padding:14px">No history yet.</div>';return;}
    var html='<div class="small-muted" style="margin:0 0 8px">subject_id: '+esc(w.subjectId)+
      ' · latest CU: '+esc(w.tailCuId||"")+' · read-only, non-mergeable</div>'+
      '<table class="testplans-table"><thead><tr><th>CU</th><th>Published</th><th>Operator</th><th>Type</th><th>Revision</th><th></th></tr></thead><tbody>';
    rows.forEach(function(row,index){
      var cu=String(row.cu_id||""),shortCu=cu.length>18?(cu.slice(0,8)+"…"+cu.slice(-8)):cu;
      html+='<tr data-cu="'+esc(cu)+'" onclick="selectUniversalChainRow(\''+winId+'\',\''+esc(cu)+'\')">'+
        '<td class="tail-hash" title="'+esc(cu)+'">'+esc(shortCu)+(row.is_tail?' <span class="tp-badge tp-badge-active">LATEST</span>':'')+'</td>'+
        '<td class="small-muted">'+esc(ceeChainTimestamp(row))+'</td>'+
        '<td>'+esc(row.operator||"")+'</td>'+
        '<td>'+esc(row.artifact_type||row.subject_type||"")+'</td>'+
        '<td>'+esc(String(row.spoke_count||rows.length-index))+'</td>'+
        '<td><button class="btn primary" style="font-size:9px;padding:2px 8px" onclick="event.stopPropagation();openUniversalChainDetail(\''+winId+'\',\''+esc(cu)+'\')">Detail</button></td></tr>';
    });
    body.innerHTML=html+'</tbody></table>';
    if(w.selectedCu)selectUniversalChainRow(winId,w.selectedCu);
  }
  window.openUniversalChainViewer=async function(options){
    options=options||{};
    var subjectId=String(options.subjectId||"");
    if(!subjectId){toast("No chain subject is available.","err");return;}
    var base=ceeChainBase(options.base),key=base+"|"+subjectId;
    var existingId=Object.keys(model.browses).find(function(id){
      var b=model.browses[id];return b.kind==="universal-chain"&&b.key===key;
    });
    var opener=model.browses[options.parentWinId||""];
    var launchedFromModal=modalBackdropIsOpen()||!!(opener&&(opener.modalAuthorized||opener.modalLaunched));
    if(existingId){
      if(launchedFromModal){model.browses[existingId].modalLaunched=true;model.browses[existingId].modalAuthorized=true;model.browses[existingId].openerMdiId=options.parentWinId||model.browses[existingId].openerMdiId||"";var existingEl=document.getElementById(existingId);if(existingEl)existingEl.classList.add("modal-launched-mdi");}
      setBrowseActive(existingId);return existingId;
    }
    var id="universal-chain-"+(model.browseSeq++),parent=document.getElementById(options.parentWinId||"");
    var left=parent?(parseInt(parent.style.left||"44",10)+42):80;
    var top=parent?(parseInt(parent.style.top||"48",10)+42):90;
    var title=String(options.title||subjectId);
    model.browses[id]={id:id,key:key,kind:"universal-chain",title:"Chain — "+title,
      subjectId:subjectId,base:base,detailKind:options.detailKind||"generic",modalLaunched:launchedFromModal,modalAuthorized:launchedFromModal,openerMdiId:options.parentWinId||"",
      rows:[],selectedCu:"",tailCuId:""};
    var el=document.createElement("div");
    el.id=id;el.className="browse-win active"+(launchedFromModal?" modal-launched-mdi":"");el.style.width="900px";el.style.height="520px";
    el.style.left=Math.max(12,left)+"px";el.style.top=Math.max(12,top)+"px";
    el.innerHTML='<div class="browse-hdr"><span class="browse-title">Chain — '+esc(title)+'</span>'+
      '<span class="browse-scope">universal · read-only</span><button class="browse-close">×</button></div>'+
      '<div class="browse-body" id="'+id+'-body" style="overflow:auto;padding:10px"><div class="small-muted">Loading chain metadata…</div></div>';
    document.getElementById("mdi-layer").appendChild(el);
    el.onmousedown=function(){setBrowseActive(id);};
    el.querySelector(".browse-close").onclick=function(e){e.stopPropagation();closeBusinessBrowse(id);};
    makeDraggable(el,el.querySelector(".browse-hdr"));setBrowseActive(id);renderBrowseChips();
    var started=performance.now();
    try{
      var j=await getJson(base+"/api/enterprise/chain/index?subject_id="+encodeURIComponent(subjectId));
      var fetched=performance.now(),w=model.browses[id];if(!w)return id;
      w.rows=j.rows||j.chain||[];w.tailCuId=j.tail_cu_id||j.tail_hash||"";
      w.selectedCu=(w.rows[0]&&w.rows[0].cu_id)||"";
      renderUniversalChainBrowse(id);
      var rendered=performance.now();
      console.log("[CEE Universal Chain] index timing",{
        subject_id:subjectId,kind:w.detailKind,row_count:w.rows.length,
        chain_roundtrip_ms:Math.round(fetched-started),
        browse_render_ms:Math.round(rendered-fetched),
        total_ms:Math.round(rendered-started),metadata_only:true
      });
    }catch(e){
      var body=document.getElementById(id+"-body");
      if(body)body.innerHTML='<div class="card"><div class="card-body"><div class="small-muted">Failed to load: '+esc(e.message||e)+'</div></div></div>';
    }
    return id;
  };
  window.cancelBugReport=function(){
    closeEditModal();
    clearDiagnostics();
  };
  function showBugReportForm(winId,r,tail,isNew){
    r=r||{};
    modal((isNew?"New Bug Report":"Bug Report — "+(r.title||r.report_id||"")),
      '<div class="br-field-row"><div class="field"><label>Report ID</label><input id="br-report-id" value="'+esc(r.report_id||'')+'"'+(isNew?'':' readonly')+'></div><div class="field"><label>Context ID</label><input id="br-context-id" value="'+esc(r.context_id||'')+'"></div></div>'+ 
      '<div class="field"><label>Title</label><input id="br-title" value="'+esc(r.title||'')+'"></div>'+ 
      '<div class="br-field-row"><div class="field"><label>Severity</label>'+bugSelect('br-severity',r.severity||'Medium',['Critical','High','Medium','Low','Cosmetic'])+'</div><div class="field"><label>Status</label>'+bugSelect('br-status',r.status||'Open',['Open','Triaged','In Progress','Resolved','Won\'t Fix','Duplicate'])+'</div></div>'+ 
      '<div class="br-field-row"><div class="field"><label>Reporter</label><input id="br-reporter" value="'+esc(r.reporter||operator())+'"></div><div class="field"><label>Environment</label><input id="br-environment" value="'+esc(r.environment||context.environmentRoot||'production')+'" readonly></div></div>'+ 
      '<div class="field"><label>CEE Version</label><input id="br-cee-version" value="'+esc(r.cee_version||currentCeeVersion())+'" readonly></div>'+ 
      '<div class="field"><label>Description</label>'+markdownTextareaHtml('br-description','description',r.description||'')+'</div>'+ 
      '<div class="field"><label>Triage Notes</label>'+markdownTextareaHtml('br-triage-notes','triage_notes',r.triage_notes||'')+'</div>'+ 
      '<div class="field"><label>Attachment URL</label><input id="br-attachment-url" value="'+esc(r.attachment_url||'')+'" placeholder="Optional URL or attachment reference"></div>'+ 
      '<div class="tail-line">'+(tail?'Loaded tail: '+esc(tail):'New report — first save creates its CU chain.')+'</div>'+ 
      '<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="cancelBugReport()">Cancel</button><button class="btn primary" onclick="saveBugReport(\''+winId+'\',\''+esc(r.subject_id||r._subject_id||'')+'\',\''+esc(tail||'')+'\')">Save + Append CU</button></div>');
  }
  window.saveBugReport=async function(winId,subjectId,tail){
    var val=function(id){var e=document.getElementById(id);return e?e.value.trim():"";};
    var body={report_id:val("br-report-id"),subject_id:subjectId||"",title:val("br-title"),severity:val("br-severity"),status:val("br-status"),context_id:val("br-context-id"),reporter:val("br-reporter"),environment:val("br-environment"),cee_version:val("br-cee-version")||currentCeeVersion(),description:val("br-description"),triage_notes:val("br-triage-notes"),attachment_url:val("br-attachment-url"),loaded_tail_hash:tail||"",operator:operator()};
    if(!body.report_id||!body.title){toast("Report ID and title are required.","err");return;}
    try{
      var j=await postJson(bugReportsApiBase()+"/save",body);
      closeEditModal();clearDiagnostics();toast("Bug report saved by CU append.","ok");refreshBugReports(winId);
    }catch(e){
      if(String(e.message||e).indexOf("stale-tail")>=0){toast("This bug report changed since it was opened. Reloading current state.","err");closeEditModal();refreshBugReports(winId);}
      else toast("Bug report save failed: "+(e.message||e),"err");
    }
  };
  window.openBugReportChain=async function(parentWinId,subjectId,title){
    return openUniversalChainViewer({parentWinId:parentWinId,subjectId:subjectId,title:title,detailKind:"bug-report"});
  };


  /* ============================================================
     Test Plans -- CU-backed via /api/enterprise/test-plans/*
     Parallel to Bug Reports: list / open / save / chain.
     Added v31c168.
     ============================================================ */
  function testPlansApiBase(){
    return "/api/enterprise/test-plans";
  }
  function tpArtifact(row){
    var a=row&&row.artifact;
    if(typeof a==="string"){try{a=JSON.parse(a);}catch(e){a={};}}
    return a||{};
  }
  function tpCuIdentityParts(value){
    var raw=String(value||"").trim();
    var compact=raw.replace(/[^0-9a-f]/gi,"").toLowerCase();
    if(compact.length===64){
      return {raw:raw,canonical:true,instance_hex:compact.slice(0,32),cu_hex:compact.slice(32)};
    }
    if(compact.length===32){
      return {raw:raw,canonical:false,instance_hex:"",cu_hex:compact};
    }
    return null;
  }
  function tpUuidV7DateFromHex(uuidHex){
    var hex=String(uuidHex||"").toLowerCase();
    if(!/^[0-9a-f]{32}$/.test(hex)||hex.charAt(12)!=="7")return null;
    var milliseconds=parseInt(hex.slice(0,12),16);
    if(!Number.isSafeInteger(milliseconds))return null;
    var date=new Date(milliseconds);
    return isNaN(date.getTime())?null:date;
  }
  function tpCuTimestampInfo(row,artifact){
    row=row||{};artifact=artifact||{};
    var identity=row.canonical_cu_id||row.routed_cu_id||row.full_cu_id||row.cu_id||artifact.canonical_cu_id||artifact.cu_id||"";
    var parts=tpCuIdentityParts(identity);
    var identityDate=parts?tpUuidV7DateFromHex(parts.cu_hex):null;
    if(identityDate)return {date:identityDate,source:"cu-identity",instance_hex:parts.instance_hex,canonical:parts.canonical,identity:identity};
    var explicit=row.cu_published_at||row.published_at||artifact.cu_published_at||artifact.published_at||"";
    if(explicit!==""&&explicit!==null&&explicit!==undefined){
      var numeric=Number(explicit),date;
      if(Number.isFinite(numeric)){
        /* Chandra cu-published-at values may be seconds or milliseconds. */
        date=new Date(numeric<100000000000?numeric*1000:numeric);
      }else date=new Date(explicit);
      if(!isNaN(date.getTime()))return {date:date,source:"explicit",instance_hex:parts?parts.instance_hex:"",canonical:!!(parts&&parts.canonical),identity:identity};
    }
    var legacy=artifact.updated_at||"";
    if(legacy){
      var legacyDate=new Date(legacy);
      if(!isNaN(legacyDate.getTime()))return {date:legacyDate,source:"legacy",instance_hex:parts?parts.instance_hex:"",canonical:!!(parts&&parts.canonical),identity:identity};
    }
    return {date:null,source:"none",instance_hex:parts?parts.instance_hex:"",canonical:!!(parts&&parts.canonical),identity:identity};
  }
  function tpStatusClass(status){
    return "tp-badge tp-badge-"+String(status||"draft").toLowerCase().replace(/[^a-z0-9]+/g,"");
  }
  window.openTestPlans=function(){
    var existingId=Object.keys(model.browses).find(function(id){return model.browses[id].kind==="test-plans";});
    if(existingId){
      setBrowseActive(existingId);
      var existing=model.browses[existingId];
      if(existing&&existing.plans&&existing.plans.length)renderTestPlans(existingId);
      else refreshTestPlans(existingId);
      return;
    }
    var id="test-plans-"+(model.browseSeq++);
    var w={id:id,key:"test-plans",kind:"test-plans",title:"Test Plans",plans:[],selectedSubject:"",checkedSubjects:{}};
    model.browses[id]=w;
    var el=document.createElement("div");
    el.id=id;el.className="browse-win active";el.style.width="920px";el.style.height="560px";
    el.style.left=(44+(Object.keys(model.browses).length%5)*26)+"px";
    el.style.top=(48+(Object.keys(model.browses).length%5)*22)+"px";
    el.innerHTML=
      '<div class="browse-hdr"><span class="browse-title">Test Plans</span><span class="browse-scope">'+esc(context.environmentRoot||"production")+'</span><button class="browse-close">×</button></div>'+
      '<div class="testplans-toolbar">'+
        '<button class="btn primary" onclick="newTestPlan(\''+id+'\')">New Plan</button>'+
        '<button class="btn" onclick="refreshTestPlans(\''+id+'\')">Refresh</button>'+
        '<button class="btn" id="'+id+'-delete-selected" disabled onclick="deleteSelectedTestPlans(\''+id+'\')">Delete Selected</button>'+
        '<input id="'+id+'-search" placeholder="Filter plans…" oninput="filterTestPlans(\''+id+'\',this.value)">'+
        '<span class="small-muted" id="'+id+'-count"></span>'+
      '</div>'+
      '<div class="browse-body" id="'+id+'-body"><div class="small-muted">Loading test plans…</div></div>';
    document.getElementById("mdi-layer").appendChild(el);
    el.onmousedown=function(){setBrowseActive(id);};
    el.querySelector(".browse-close").onclick=function(){closeBusinessBrowse(id);};
    makeDraggable(el,el.querySelector(".browse-hdr"));
    setBrowseActive(id);renderBrowseChips();refreshTestPlans(id);
  };
  window.refreshTestPlans=async function(winId){
    var w=model.browses[winId],body=document.getElementById(winId+"-body");if(!w||!body)return;
    var started=Date.now();
    if(!(w.plans&&w.plans.length))body.innerHTML='<div class="small-muted">Loading test plans…</div>';
    try{
      var j=await getJson(testPlansApiBase()+"/index");
      w.plans=(j.plans||[]).map(function(row){
        /* v6 authority returns compact direct summary fields. Older authorities
           returned a stringified full artifact; support both during rollout. */
        var a=(row&&row.artifact!==undefined)?tpArtifact(row):Object.assign({},row||{});
        a._subject_id=row.subject_id||a.subject_id||"";
        a._cu_id=row.canonical_cu_id||row.routed_cu_id||row.full_cu_id||row.cu_id||a.canonical_cu_id||a.cu_id||"";
        a._cu_published_at=row.cu_published_at||row.published_at||a.cu_published_at||a.published_at||"";
        var identityParts=tpCuIdentityParts(a._cu_id);
        a._cu_instance_hex=identityParts?identityParts.instance_hex:"";
        a._cu_identity_is_canonical=!!(identityParts&&identityParts.canonical);
        return a;
      });
      var surviving={};
      Object.keys(w.checkedSubjects||{}).forEach(function(subjectId){
        if(w.plans.some(function(p){return p._subject_id===subjectId;}))surviving[subjectId]=true;
      });
      w.checkedSubjects=surviving;
      if(w.selectedSubject&&!w.plans.some(function(p){return p._subject_id===w.selectedSubject;}))w.selectedSubject="";
      w.loadedAt=Date.now();
      w.loadDurationMs=w.loadedAt-started;
      renderTestPlans(winId);
    }catch(e){
      body.innerHTML='<div style="color:var(--red);padding:10px">'+esc(e.message||e)+'</div>';
    }
  };
  function renderTestPlans(winId,filterText){
    var w=model.browses[winId],body=document.getElementById(winId+"-body"),count=document.getElementById(winId+"-count");
    if(!w||!body)return;
    var q=(filterText||"").toLowerCase().trim();
    var rows=w.plans||[];
    if(q){
      rows=rows.filter(function(p){
        return [p.title,p.plan_id,p.status,p.description,p.author,p.tags].join(" ").toLowerCase().indexOf(q)>=0;
      });
    }
    if(count){
      count.textContent=rows.length+" plan"+(rows.length===1?"":"s")+
        (w.loadDurationMs>=750?(" · loaded in "+(w.loadDurationMs/1000).toFixed(1)+"s"):"");
    }
    if(!rows.length){
      body.innerHTML='<div class="small-muted" style="padding:14px">No test plans yet. Click <b>New Plan</b> to create one (e.g. Acceptance spine lifecycle checklist).</div>';
      return;
    }
    var visibleSubjects=rows.map(function(p){return p._subject_id||"";}).filter(Boolean);
    var allVisibleChecked=visibleSubjects.length>0&&visibleSubjects.every(function(subjectId){return !!(w.checkedSubjects||{})[subjectId];});
    var html='<table class="testplans-table"><thead><tr>'+
      '<th style="width:34px;text-align:center"><input type="checkbox" aria-label="Select all visible Test Plans" '+(allVisibleChecked?'checked ':'')+'onclick="event.stopPropagation();toggleAllVisibleTestPlans(\''+winId+'\',this.checked)"></th>'+
      '<th>Title</th><th>Status</th><th>Environment</th><th>Author</th><th>Updated</th><th></th>'+
      '</tr></thead><tbody>';
    rows.forEach(function(p){
      var timestampInfo=tpCuTimestampInfo({cu_id:p._cu_id,cu_published_at:p._cu_published_at},p);
      var when=timestampInfo.date?timestampInfo.date.toLocaleString():"—";
      var whenTitle=timestampInfo.source==="cu-identity"?
        (timestampInfo.canonical?"Derived from canonical 256-bit CU identity; instance prefix "+timestampInfo.instance_hex:"Derived from UUIDv7 CU identity"):
        (timestampInfo.source==="explicit"?"Explicit CU publication timestamp":(timestampInfo.source==="legacy"?"Legacy artifact date":"No timestamp available"));
      var subjectId=p._subject_id||"";
      var checked=!!(w.checkedSubjects||{})[subjectId];
      html+='<tr data-subject="'+esc(subjectId)+'" onclick="selectTestPlanRow(\''+winId+'\',\''+esc(subjectId)+'\')">'+
        '<td style="text-align:center"><input type="checkbox" class="tp-row-check" data-subject="'+esc(subjectId)+'" aria-label="Select '+esc(p.title||p.plan_id||'Test Plan')+'" '+(checked?'checked ':'')+'onclick="event.stopPropagation()" onchange="toggleTestPlanChecked(\''+winId+'\',\''+esc(subjectId)+'\',this.checked)"></td>'+
        '<td class="title-cell" title="'+esc(p.plan_id||'')+'">'+esc(p.title||p.plan_id||'(untitled)')+'</td>'+
        '<td><span class="'+tpStatusClass(p.status)+'">'+esc(p.status||'Draft')+'</span></td>'+
        '<td>'+esc(p.environment||'')+'</td>'+
        '<td>'+esc(p.author||'')+'</td>'+
        '<td class="small-muted" title="'+esc(whenTitle)+'">'+esc(when)+'</td>'+
        '<td style="white-space:nowrap">'+
          '<button class="btn primary" style="font-size:9px;padding:2px 6px" onclick="event.stopPropagation();runTestPlan(\''+winId+'\',\''+esc(p._subject_id||'')+'\')">Run</button> '+
          '<button class="btn" style="font-size:9px;padding:2px 6px" onclick="event.stopPropagation();editTestPlan(\''+winId+'\',\''+esc(p._subject_id||'')+'\')">Open</button> '+
          '<button class="btn" style="font-size:9px;padding:2px 6px" onclick="event.stopPropagation();openTestPlanChain(\''+winId+'\',\''+esc(p._subject_id||'')+'\',\''+esc(p.title||p.plan_id||'')+'\')">Chain</button>'+
        '</td></tr>';
    });
    html+='</tbody></table>';
    body.innerHTML=html;
    updateTestPlanDeleteButton(winId);
  }
  function updateTestPlanDeleteButton(winId){
    var w=model.browses[winId],button=document.getElementById(winId+"-delete-selected");
    if(!w||!button)return;
    var count=Object.keys(w.checkedSubjects||{}).filter(function(subjectId){return w.checkedSubjects[subjectId];}).length;
    button.disabled=count===0;
    button.textContent=count?"Delete Selected ("+count+")":"Delete Selected";
  }
  window.toggleTestPlanChecked=function(winId,subjectId,checked){
    var w=model.browses[winId];if(!w||!subjectId)return;
    w.checkedSubjects=w.checkedSubjects||{};
    if(checked)w.checkedSubjects[subjectId]=true;else delete w.checkedSubjects[subjectId];
    updateTestPlanDeleteButton(winId);
  };
  window.toggleAllVisibleTestPlans=function(winId,checked){
    var w=model.browses[winId];if(!w)return;
    w.checkedSubjects=w.checkedSubjects||{};
    var q=((document.getElementById(winId+"-search")||{}).value||"").toLowerCase().trim();
    (w.plans||[]).filter(function(p){
      return !q||[p.title,p.plan_id,p.status,p.description,p.author,p.tags].join(" ").toLowerCase().indexOf(q)>=0;
    }).forEach(function(p){if(checked)w.checkedSubjects[p._subject_id]=true;else delete w.checkedSubjects[p._subject_id];});
    renderTestPlans(winId,q);
  };
  function tpLispString(value){
    return JSON.stringify(String(value==null?"":value));
  }
  window.deleteSelectedTestPlans=async function(winId){
    var w=model.browses[winId];if(!w)return;
    var body=document.getElementById(winId+"-body");
    var subjects=body?Array.from(body.querySelectorAll("input.tp-row-check:checked")).map(function(cb){return cb.getAttribute("data-subject")||"";}).filter(Boolean):[];
    subjects=Array.from(new Set(subjects));
    w.checkedSubjects={};subjects.forEach(function(subjectId){w.checkedSubjects[subjectId]=true;});
    updateTestPlanDeleteButton(winId);
    if(!subjects.length)return;
    var selectedPlans=subjects.map(function(subjectId){return (w.plans||[]).find(function(p){return p._subject_id===subjectId;});}).filter(Boolean);
    var names=selectedPlans.map(function(p){return p.title||p.plan_id||p._subject_id;});
    var prompt="Soft delete "+subjects.length+" Test Plan"+(subjects.length===1?"":"s")+"?\n\n"+names.slice(0,8).join("\n")+(names.length>8?"\n… and "+(names.length-8)+" more":"")+"\n\nThe server will delete each plan only if it is still active, append one lifecycle CU, and preserve its complete chain.";
    if(!window.confirm(prompt))return;
    var button=document.getElementById(winId+"-delete-selected");
    if(button){button.disabled=true;button.textContent="Deleting "+subjects.length+"…";}
    var batchStarted=performance.now();
    try{
      var sexpr='(optdelete :subject-ids ('+subjects.map(tpLispString).join(' ')+') :operator '+tpLispString(typeof operator==="function"?operator():"local-operator")+')';
      var response=await fetch(testPlansApiBase()+"/optdelete",{
        method:"POST",
        headers:{"Content-Type":"text/plain; charset=utf-8","Accept":"application/json"},
        body:sexpr
      });
      var raw=await response.text(),result;
      try{result=JSON.parse(raw);}catch(parseError){throw new Error("Non-JSON optdelete response: "+raw.slice(0,240));}
      if(!response.ok||!result.ok)throw new Error(result.error||("HTTP "+response.status));
      var batchMs=Math.round(performance.now()-batchStarted);
      console.log("[CEE Test Plans] optdelete",{
        requested:subjects.length,
        deleted:Number(result.deleted_count||0),
        already_deleted:Number(result.already_deleted_count||0),
        missing:Number(result.missing_count||0),
        failed:Number(result.failed_count||0),
        backend_total_ms:result.timing&&result.timing.total_ms,
        roundtrip_ms:batchMs,
        results:result.results||[]
      });
      w.checkedSubjects={};
      w.selectedSubject="";
      await refreshTestPlans(winId);
      var deleted=Number(result.deleted_count||0),skipped=Number(result.already_deleted_count||0)+Number(result.missing_count||0),failed=Number(result.failed_count||0);
      if(failed){
        console.error("[CEE Test Plans] optdelete partial failure",result.results||[]);
        toast(deleted+" Test Plan"+(deleted===1?"":"s")+" deleted; "+failed+" failed. Browse refreshed.","err");
      }else{
        toast(deleted+" Test Plan"+(deleted===1?"":"s")+" soft-deleted"+(skipped?"; "+skipped+" already absent/deleted":"")+" in "+(batchMs/1000).toFixed(2)+"s. Browse refreshed.","ok");
      }
    }catch(e){
      console.error("[CEE Test Plans] optdelete failed",e);
      await refreshTestPlans(winId);
      toast("Test Plan delete failed: "+(e&&e.message?e.message:e)+" Browse refreshed.","err");
    }finally{
      updateTestPlanDeleteButton(winId);
    }
  };
  window.filterTestPlans=function(winId,q){renderTestPlans(winId,q);};
  window.selectTestPlanRow=function(winId,subjectId){
    var w=model.browses[winId];if(!w)return;
    w.selectedSubject=subjectId;
    var body=document.getElementById(winId+"-body");if(!body)return;
    Array.prototype.forEach.call(body.querySelectorAll("tr[data-subject]"),function(tr){
      tr.classList.toggle("sel",tr.getAttribute("data-subject")===subjectId);
    });
  };
  window.newTestPlan=function(winId){
    var stamp=Date.now().toString(36);
    showTestPlanForm(winId,{
      plan_id:"TP-"+stamp,
      title:"",
      status:"Draft",
      environment:context.environmentRoot||"production",
      /* Non-empty seed avoids markdownTextareaHtml placeholder stub. */
      description:" ",
      steps_markdown:"# Test Plan: New Test Plan\n\n## Metadata\n\n- Format: cee-test-plan-md/v1\n- Plan ID: TP-"+stamp+"\n- Frontend Build: "+currentCeeVersion()+"\n- Backend Baseline: unchanged\n- Environment: Acceptance\n- Author:\n- Status: Draft\n\n## Test 1: First test\n\n### Steps\n\n1. Perform the test action.\n\n### Expected\n\n- The expected behavior occurs.\n\n### Pass Criteria\n\n- [ ] The test passes.\n",
      steps_json:"[]",
      author:typeof operator==="function"?operator():"local-operator",
      tags:"",
      cee_version:currentCeeVersion()
    },"",true);
  };
  function tpArtifactFromChainRow(row){
    row=row||{};
    var raw=(row.artifact_json!==undefined?row.artifact_json:row.artifact);
    if(raw&&typeof raw==="object")return raw;
    if(typeof raw==="string"){
      try{return JSON.parse(raw);}catch(_e){return {};}
    }
    return {};
  }
  function tpResultArrayFromArtifact(artifact){
    artifact=artifact||{};
    var fields=[artifact.steps_json,artifact.results_json,artifact.assertions_json,artifact.results];
    for(var i=0;i<fields.length;i++){
      var parsed=tpParseStepsJson(fields[i]);
      if(parsed.length)return parsed;
    }
    return [];
  }
  function tpEvaluatedResultCount(steps){
    return (steps||[]).reduce(function(n,s){return n+((s.result==="pass"||s.result==="fail")?1:0);},0);
  }
  function tpSavedExecutionStateCount(steps){
    return (steps||[]).reduce(function(n,s){
      var hasResult=(s.result==="pass"||s.result==="fail");
      var hasNotes=!!String(s.notes||"").trim();
      var hasExecution=!!(s.execution&&(s.execution.evidence||s.execution.outcome||s.execution.reason_code));
      return n+((hasResult||hasNotes||hasExecution)?1:0);
    },0);
  }
  function tpAutomationDefinitionCount(steps){
    return (steps||[]).reduce(function(n,s){
      return n+((s.automation&&typeof s.automation==="object")?1:0);
    },0);
  }
  function tpMergeAutomationDefinitions(steps,candidates){
    var newestByKey={};
    (candidates||[]).slice().sort(function(a,b){
      return (b.published-a.published)||(b.ordinal-a.ordinal);
    }).forEach(function(candidate){
      (candidate.steps||[]).forEach(function(step){
        var key=String(step.criterion_id||step.text||"");
        if(key&&step.automation&&!newestByKey[key])newestByKey[key]=step.automation;
      });
    });
    return (steps||[]).map(function(step){
      var key=String(step.criterion_id||step.text||"");
      /* Execution/result snapshots are not authoritative for automation
         classification. Overlay the newest accepted definition found in the
         chain even when the selected result snapshot carries an older
         MANUAL/CANDIDATE object. */
      if(newestByKey[key])step.automation=Object.assign({},newestByKey[key]);
      return step;
    });
  }
  async function tpLoadLatestSavedResults(subjectId,latestEnvelope,planArtifact){
    var candidates=[],historyRowsInspected=0,detailHydrated=0,detailFailures=0;
    function rowCuId(row){
      return String((row&&(row.canonical_cu_id||row.routed_cu_id||row.full_cu_id||row.cu_id||row.id))||"");
    }
    function addCandidate(artifact,row,ordinal){
      var steps=tpResultArrayFromArtifact(artifact);
      if(!steps.length)return;
      var published=Number((row&&(row.cu_published_at||row.published_at||row.created_at))||0);
      if(!Number.isFinite(published))published=0;
      candidates.push({
        steps:steps,
        evaluated:tpEvaluatedResultCount(steps),
        saved_state:tpSavedExecutionStateCount(steps),
        published:published,
        ordinal:ordinal||0,
        cu_id:rowCuId(row)||artifact.cu_id||""
      });
    }
    async function hydrateHistoryRow(row,index,total){
      historyRowsInspected++;
      var artifact=tpArtifactFromChainRow(row),steps=tpResultArrayFromArtifact(artifact);
      if(steps.length){ addCandidate(artifact,row,total-index); return; }
      var cuId=rowCuId(row);
      if(!cuId)return;
      try{
        var detail=await getJson("/api/enterprise/chain/detail?cu_id="+encodeURIComponent(cuId));
        /* Universal chain detail may expose artifact or artifact_json, and the
           response normalizer may preserve either shape. Use the same decoder
           as the working chain viewer instead of tpArtifact(), which only reads
           .artifact and caused metadata-only history rows to hydrate as empty. */
        var detailedArtifact=ceeChainArtifact(detail);
        if(!Object.keys(detailedArtifact||{}).length)detailedArtifact=tpArtifactFromChainRow(detail);
        if(!Object.keys(detailedArtifact||{}).length&&detail&&detail.cu)detailedArtifact=ceeChainArtifact(detail.cu);
        detailHydrated++;
        addCandidate(detailedArtifact,Object.assign({},row,detail),total-index);
      }catch(e){
        detailFailures++;
        console.warn("[CEE Test Plans] could not hydrate historical CU detail",{cu_id:cuId,error:e});
      }
    }
    addCandidate(planArtifact,latestEnvelope,Number.MAX_SAFE_INTEGER);
    try{
      var history=await getJson(testPlansApiBase()+"/history?subject_id="+encodeURIComponent(subjectId));
      var rows=history.rows||[];
      await Promise.all(rows.map(function(row,index){return hydrateHistoryRow(row,index,rows.length);}));
    }catch(e){
      console.warn("[CEE Test Plans] could not inspect Test Plan history; using latest artifact",e);
    }
    if(!candidates.length){
      console.warn("[CEE Test Plans] no parseable assertion artifacts found",{subject_id:subjectId,history_cus_inspected:historyRowsInspected,detail_hydrated:detailHydrated,detail_failures:detailFailures});
      return null;
    }

    /* Reconstruct execution state across the whole chain. Historical result
       CUs can be partial, so choosing one snapshot can discard older evaluated
       assertions. For each criterion, retain the newest meaningful value. */
    var newestFirst=candidates.slice().sort(function(a,b){
      return (b.published-a.published)||(b.ordinal-a.ordinal);
    });
    var baseSteps=tpResultArrayFromArtifact(planArtifact).map(function(step){return Object.assign({},step);});
    if(!baseSteps.length)baseSteps=(newestFirst[0].steps||[]).map(function(step){return Object.assign({},step);});
    var byKey={};
    baseSteps.forEach(function(step){
      var key=String(step.criterion_id||step.text||"");
      if(key)byKey[key]=step;
    });
    newestFirst.forEach(function(candidate){
      (candidate.steps||[]).forEach(function(hist){
        var key=String(hist.criterion_id||hist.text||"");
        if(!key)return;
        var target=byKey[key];
        if(!target){ target=Object.assign({},hist); byKey[key]=target; baseSteps.push(target); }
        if(!target._restored_result&&(hist.result==="pass"||hist.result==="fail")){
          target.result=hist.result; target._restored_result=true;
        }
        if(!target._restored_notes&&String(hist.notes||"").trim()){
          target.notes=hist.notes; target._restored_notes=true;
        }
        if(!target._restored_execution&&hist.execution&&(hist.execution.evidence||hist.execution.outcome||hist.execution.reason_code)){
          target.execution=hist.execution; target._restored_execution=true;
        }
      });
    });
    baseSteps.forEach(function(step){
      delete step._restored_result; delete step._restored_notes; delete step._restored_execution;
    });
    baseSteps=tpMergeAutomationDefinitions(baseSteps,candidates);
    var statefulCandidates=newestFirst.filter(function(c){return c.saved_state>0;});
    var newestStateful=statefulCandidates[0]||null;
    var restoredEvaluated=tpEvaluatedResultCount(baseSteps);
    var restoredState=tpSavedExecutionStateCount(baseSteps);
    var restoredNotes=baseSteps.filter(function(s){return !!String(s.notes||"").trim();}).length;
    var restoredExecution=baseSteps.filter(function(s){return !!(s.execution&&(s.execution.evidence||s.execution.outcome||s.execution.reason_code));}).length;
    console.log("[CEE Test Plans] result restoration",{
      subject_id:subjectId,
      history_cus_inspected:historyRowsInspected,
      detail_cus_hydrated:detailHydrated,
      detail_failures:detailFailures,
      assertion_artifacts_found:candidates.length,
      state_bearing_cus_found:statefulCandidates.length,
      evaluated_criteria_restored:restoredEvaluated,
      runner_notes_restored:restoredNotes,
      execution_evidence_restored:restoredExecution,
      results_cu_id:newestStateful?newestStateful.cu_id:""
    });
    return {
      steps:baseSteps,
      evaluated:restoredEvaluated,
      saved_state:restoredState,
      restored_notes:restoredNotes,
      restored_execution:restoredExecution,
      automation_definitions:tpAutomationDefinitionCount(baseSteps),
      cu_id:newestStateful?newestStateful.cu_id:"",
      state_bearing_cu_count:statefulCandidates.length,
      source_cu_count:candidates.length,
      history_cus_inspected:historyRowsInspected
    };
  }
  async function tpOpenTestPlan(winId,subjectId,runMode){
    var openStart=performance.now(),latestEnd=openStart,resultsEnd=openStart,renderEnd=openStart;
    try{
      var j=await getJson(testPlansApiBase()+"/latest?subject_id="+encodeURIComponent(subjectId));
      latestEnd=performance.now();
      if(!j.exists){toast("Plan not found","err");return;}
      var a=tpArtifact(j);
      a._subject_id=j.subject_id||subjectId;
      a.subject_id=a._subject_id;

      /* The authoritative latest artifact is the normal source of assertion
         state. Only inspect the full CU chain when the latest artifact has no
         evaluated decisions and an older saved run may need restoration. */
      var latestSteps=tpResultArrayFromArtifact(a);
      var latestEvaluated=tpEvaluatedResultCount(latestSteps);
      var latestSavedState=tpSavedExecutionStateCount(latestSteps);
      var latestAutomationDefinitions=tpAutomationDefinitionCount(latestSteps);
      var latestMissingAutomation=latestSteps.length>0&&latestAutomationDefinitions<latestSteps.length;
      var usedChainFallback=false;
      var savedResults=null;
      /* Run mode must recover the accepted automation-definition layer from
         the chain. A result CU can contain a structurally valid but stale
         MANUAL/CANDIDATE snapshot, so object presence alone is not authority. */
      if(!runMode&&latestSavedState>0&&!latestMissingAutomation){
        savedResults={
          steps:latestSteps,
          evaluated:latestEvaluated,
          saved_state:latestSavedState,
          automation_definitions:latestAutomationDefinitions,
          cu_id:j.canonical_cu_id||j.routed_cu_id||j.full_cu_id||j.cu_id||""
        };
      }else{
        usedChainFallback=true;
        savedResults=await tpLoadLatestSavedResults(a._subject_id,j,a);
      }
      resultsEnd=performance.now();
      if(savedResults){
        a.steps_json=JSON.stringify(savedResults.steps);
        a._results_cu_id=savedResults.cu_id||"";
        a._restored_result_count=savedResults.evaluated||0;
        a._restored_note_count=savedResults.restored_notes||0;
        a._restored_execution_count=savedResults.restored_execution||0;
        a._history_cu_count=savedResults.history_cus_inspected||savedResults.source_cu_count||0;
      }
      showTestPlanForm(winId,a,j.tail_hash||j.cu_id||"",false,!!runMode);
      renderEnd=performance.now();
      console.log("[CEE Test Plans] open timing",{
        subject_id:subjectId,
        latest_roundtrip_ms:Math.round(latestEnd-openStart),
        results_restore_ms:Math.round(resultsEnd-latestEnd),
        render_ms:Math.round(renderEnd-resultsEnd),
        total_ms:Math.round(renderEnd-openStart),
        results_source:usedChainFallback?"chain-fallback":"latest-artifact",
        latest_evaluated_count:latestEvaluated,
        latest_saved_state_count:latestSavedState,
        latest_automation_definition_count:latestAutomationDefinitions,
        restored_automation_definition_count:savedResults?Number(savedResults.automation_definitions||tpAutomationDefinitionCount(savedResults.steps)):0,
        run_mode:!!runMode
      });
      if(runMode){
        setTimeout(function(){
          var panel=document.querySelector(".tp-run-panel");
          if(panel&&typeof panel.scrollIntoView==="function")panel.scrollIntoView({block:"start"});
        },0);
      }
    }catch(e){toast("Failed to load plan: "+(e.message||e),"err");}
  }
  window.editTestPlan=function(winId,subjectId){return tpOpenTestPlan(winId,subjectId,false);};
  window.runTestPlan=function(winId,subjectId){return tpOpenTestPlan(winId,subjectId,true);};
  function tpSelect(id,value,options){
    return '<select id="'+id+'">'+options.map(function(v){
      return '<option'+(v===value?' selected':'')+'>'+esc(v)+'</option>';
    }).join('')+'</select>';
  }
  window.cancelTestPlan=function(){var current=tpCurrentRunWindow();if(current)tpCloseRunWindow(false);else closeEditModal();};

  /* ---- Steps Markdown → checklist ---- */
  function tpIsMdPlaceholder(md){
    /* markdownTextareaHtml() seeds empty fields with:
         ### <name>
         Write Markdown here. Use the toolbar only when you want markup.
       That must never become checklist content or trigger Description→Steps copy. */
    var s=String(md||"").trim();
    if(!s) return true;
    if(/^###\s+\S[\s\S]*Write Markdown here\.?\s*Use the toolbar only when you want markup\.?\s*$/i.test(s)) return true;
    if(/^Write Markdown here\.?\s*Use the toolbar only when you want markup\.?\s*$/i.test(s)) return true;
    return false;
  }
  function tpGetMdValue(id){
    /* IMPORTANT: do NOT call mdSyncFromRender when the textarea already has
       real content. In render mode an empty/stale preview was overwriting
       Steps and producing "Steps field is empty — nothing to parse." */
    var ta=document.getElementById(id);
    var raw=ta ? String(ta.value||"") : "";
    if(!tpIsMdPlaceholder(raw) && String(raw).trim()){
      return raw;
    }
    var wrap=document.getElementById("wrap-"+id);
    if(wrap && !wrap.classList.contains("source-mode") && typeof mdSyncFromRender==="function"){
      try{ mdSyncFromRender(id); }catch(_e){}
      raw=ta ? String(ta.value||"") : "";
    }
    return tpIsMdPlaceholder(raw) ? "" : raw;
  }
  function tpSetMdValue(id, value){
    var ta=document.getElementById(id);
    if(!ta) return false;
    ta.value=String(value||"");
    var wrap=document.getElementById("wrap-"+id);
    if(wrap) wrap.classList.add("source-mode");
    if(typeof mdRefreshPreview==="function"){
      try{ mdRefreshPreview(id); }catch(_e){}
    }
    return true;
  }
  function tpNormalizeMd(md){
    return String(md||"").replace(/\r\n/g,"\n").replace(/\r/g,"\n");
  }
  function tpParseMetadataLine(line){
    var m=String(line||"").match(/^\s*-\s*([^:]+):\s*(.*)\s*$/);
    return m?{key:m[1].trim(),value:m[2].trim()}:null;
  }
  function tpParseTestPlanMarkdownV1(md){
    var lines=tpNormalizeMd(md).split("\n");
    var result={
      ok:true,format:"",plan_id:"",title:"",metadata:{},tests:[],errors:[],warnings:[]
    };
    var titleSeen=false, inMetadata=false, current=null, currentCriterion=null, subsection="", inFence=false;
    var testIds={};
    function fail(message,lineNo){result.errors.push({line:lineNo||0,message:message});result.ok=false;}
    function warn(message,lineNo){result.warnings.push({line:lineNo||0,message:message});}
    lines.forEach(function(line,idx){
      var n=idx+1, raw=String(line||""), t=raw.trim();
      if(/^```/.test(t)){inFence=!inFence;if(current&&subsection==="notes")current.notes.push(raw);return;}
      if(inFence){if(current&&subsection==="notes")current.notes.push(raw);return;}
      var titleMatch=raw.match(/^#\s+Test Plan:\s*(.+?)\s*$/);
      if(titleMatch){
        if(titleSeen) fail("Duplicate # Test Plan title.",n);
        titleSeen=true;result.title=titleMatch[1].trim();inMetadata=false;current=null;subsection="";return;
      }
      if(/^##\s+Metadata\s*$/.test(raw)){inMetadata=true;current=null;subsection="";return;}
      var testMatch=raw.match(/^##\s+Test\s+([^:]+):\s*(.+?)\s*$/);
      if(testMatch){
        inMetadata=false;
        var id=testMatch[1].trim(), title=testMatch[2].trim();
        if(testIds[id]) fail("Duplicate test ID: "+id,n);
        testIds[id]=true;
        current={test_id:id,title:title,bindings:{context:"",target:"",action:""},preconditions:[],steps:[],expected:[],pass_criteria:[],evidence:[],notes:[]};
        result.tests.push(current);currentCriterion=null;subsection="";return;
      }
      if(/^##\s+/.test(raw)){inMetadata=false;current=null;subsection="";return;}
      var sub=raw.match(/^###\s+(.+?)\s*$/);
      if(sub&&current){
        var name=sub[1].trim().toLowerCase();
        currentCriterion=null;subsection={"bindings":"bindings","preconditions":"preconditions","steps":"steps","expected":"expected","pass criteria":"pass_criteria","evidence":"evidence","notes":"notes"}[name]||"unknown";
        if(subsection==="unknown") warn("Unknown subsection preserved as notes: "+sub[1].trim(),n);
        return;
      }
      if(inMetadata){
        if(!t)return;
        var kv=tpParseMetadataLine(raw);
        if(kv){
          result.metadata[kv.key]=kv.value;
          var key=kv.key.toLowerCase();
          if(key==="format")result.format=kv.value;
          if(key==="plan id")result.plan_id=kv.value;
        }else warn("Malformed metadata line; expected '- Key: Value'.",n);
        return;
      }
      if(!current||!t)return;
      var numbered=raw.match(/^\s*\d+[.)]\s+(.+?)\s*$/);
      var task=raw.match(/^\s*-\s*\[([ xX])\]\s+(.+?)\s*$/);
      var bullet=raw.match(/^\s*[-*+]\s+(.+?)\s*$/);
      if(subsection==="bindings"){
        var binding=tpParseMetadataLine(raw);
        if(binding){
          var bk=String(binding.key||"").toLowerCase();
          if(bk==="context"||bk==="target"||bk==="action")current.bindings[bk]=String(binding.value||"").trim();
          else warn("Unknown binding key: "+binding.key,n);
        }else warn("Bindings must use '- Key: Value'.",n);
      }else if(subsection==="steps"){
        if(numbered)current.steps.push(numbered[1].trim());
        else if(task||bullet) warn("Only numbered items are procedural Steps.",n);
        else current.notes.push(raw);
      }else if(subsection==="pass_criteria"){
        var criterionMeta=raw.match(/^\s+-\s*(Verify|Operation|Parameters|Executor):\s*(.*?)\s*$/i);
        if(criterionMeta&&currentCriterion){
          var mk=criterionMeta[1].toLowerCase(),mv=criterionMeta[2].trim();
          if(mk==="verify")currentCriterion.verify=mv;
          else if(mk==="operation")currentCriterion.operation=mv;
          else if(mk==="executor")currentCriterion.executor=mv;
          else if(mk==="parameters"){
            try{currentCriterion.parameters=mv?JSON.parse(mv):{};}catch(_e){
              currentCriterion.parameters={};mv.split(/\s*,\s*/).forEach(function(part){var p=part.split(/=/);if(p.length>1){var v=p.slice(1).join("=").trim();currentCriterion.parameters[p[0].trim()]=/^-?\d+(?:\.\d+)?$/.test(v)?Number(v):(/^(true|false)$/i.test(v)?v.toLowerCase()==="true":v);}});
            }
          }
        }else if(task){
          var criterionId=current.test_id+"."+(current.pass_criteria.length+1);
          currentCriterion={criterion_id:criterionId,text:task[2].trim(),result:(task[1].toLowerCase()==="x"?"pass":"pending"),verify:"",operation:"",parameters:{},executor:""};
          current.pass_criteria.push(currentCriterion);
        }else if(numbered||bullet) warn("Pass Criteria must use Markdown task boxes; criterion metadata must be indented '- Verify:', '- Operation:', '- Parameters:', or '- Executor:'.",n);
        else current.notes.push(raw);
      }else if(subsection==="preconditions"&&bullet) current.preconditions.push(bullet[1].trim());
      else if(subsection==="expected"&&bullet) current.expected.push(bullet[1].trim());
      else if(subsection==="evidence"&&bullet) current.evidence.push(bullet[1].trim());
      else current.notes.push(raw);
    });
    if(!titleSeen) fail("Missing '# Test Plan: <Title>'.",0);
    if(result.format!=="cee-test-plan-md/v1") fail("Metadata must include '- Format: cee-test-plan-md/v1'.",0);
    if(!result.plan_id) fail("Metadata must include '- Plan ID: <value>'.",0);
    if(!result.tests.length) fail("At least one '## Test <ID>: <Title>' section is required.",0);
    result.tests.forEach(function(test){
      if(!test.steps.length&&!test.pass_criteria.length) fail("Test "+test.test_id+" has no Steps or Pass Criteria.",0);
    });
    return result;
  }
  function tpPlanCriteria(parsed){
    var flat=[],seq=0;
    (parsed&&parsed.tests||[]).forEach(function(test){
      (test.pass_criteria||[]).forEach(function(c){
        seq++;
        flat.push({seq:seq,criterion_id:c.criterion_id,test_id:test.test_id,test_title:test.title,text:c.text,result:c.result||"pending",bindings:Object.assign({context:"",target:"",action:""},test.bindings||{}),verification_spec:(c.verify||c.operation)?{operation:String(c.operation||""),verification:String(c.verify||""),parameters:Object.assign({},c.parameters||{}),binding:Object.assign({},test.bindings||{})}:null,executor:String(c.executor||"")});
      });
    });
    return flat;
  }
  function tpParseStepsMarkdown(md){
    var parsed=tpParseTestPlanMarkdownV1(md);
    return parsed.ok?tpPlanCriteria(parsed):[];
  }
  function tpParseStepsJson(raw){
    if(!raw) return [];
    try{
      var arr=typeof raw==="string"?JSON.parse(raw):raw;
      if(!Array.isArray(arr)) return [];
      return arr.map(function(s,i){
        return {
          seq:Number(s.seq)||(i+1),
          criterion_id:String(s.criterion_id||""),
          test_id:String(s.test_id||""),
          test_title:String(s.test_title||""),
          text:String(s.text||""),
          result:(s.result==="pass"||s.result==="fail")?s.result:"pending",
          notes:String(s.notes||s.run_notes||""),
          automation:(s.automation&&typeof s.automation==="object")?{
            status:String(s.automation.status||s.automation.eligibility||"not-defined"),
            eligibility:String(s.automation.eligibility||s.automation.status||"not-defined"),
            executor:String(s.automation.executor||""),
            executor_version:Number(s.automation.executor_version||s.automation.version)||0,
            reason_code:String(s.automation.reason_code||""),
            reason:String(s.automation.reason||""),
            confidence:String(s.automation.confidence||""),
            accepted_at:String(s.automation.accepted_at||""),
            accepted_by:String(s.automation.accepted_by||""),
            characteristics:Array.isArray(s.automation.characteristics)?s.automation.characteristics.slice():[],
            semantic_binding:Object.assign({context:"",target:"",action:""},s.automation.semantic_binding||{}),
            executor_capability:(s.automation.executor_capability&&typeof s.automation.executor_capability==="object")?Object.assign({},s.automation.executor_capability):null,
            verification_spec:(s.automation.verification_spec&&typeof s.automation.verification_spec==="object")?{operation:String(s.automation.verification_spec.operation||""),verification:String(s.automation.verification_spec.verification||""),parameters:Object.assign({},s.automation.verification_spec.parameters||{}),binding:Object.assign({},s.automation.verification_spec.binding||{})}:null,
            evidence_standard:(s.automation.evidence_standard&&typeof s.automation.evidence_standard==="object")?Object.assign({},s.automation.evidence_standard):null,
            scorecard:(s.automation.scorecard&&typeof s.automation.scorecard==="object")?Object.assign({},s.automation.scorecard):{},
            broad_criterion:!!s.automation.broad_criterion,
            atomic_split_suggestions:Array.isArray(s.automation.atomic_split_suggestions)?s.automation.atomic_split_suggestions.slice():[],
            classifier:String(s.automation.classifier||"")
          }:null,
          execution:(s.execution&&typeof s.execution==="object")?{
            outcome:String(s.execution.outcome||s.execution.result||""),
            evidence:String(s.execution.evidence||""),
            reason_code:String(s.execution.reason_code||""),
            executor:String(s.execution.executor||""),
            executed_at:String(s.execution.executed_at||s.execution.at||""),
            changed:!!s.execution.changed,
            prior_result:String(s.execution.prior_result||"")
          }:null
        };
      });
    }catch(e){return [];}
  }
  function tpMergeStepResults(fromMd, fromJson){
    var byKey={};
    fromJson.forEach(function(s){
      var key=s.criterion_id||s.text;
      if(key)byKey[key]=s;
    });
    return fromMd.map(function(s){
      var prev=byKey[s.criterion_id||s.text];
      if(prev){
        if(prev.result==="pass"||prev.result==="fail")s.result=prev.result;
        if(prev.notes!==undefined)s.notes=String(prev.notes||"");
        if(prev.automation)s.automation=Object.assign({},prev.automation);
        if(prev.execution)s.execution=Object.assign({},prev.execution);
      }
      return s;
    });
  }
  function tpStepsStats(steps){
    var total=steps.length, passed=0, failed=0;
    steps.forEach(function(s){
      if(s.result==="pass") passed++;
      else if(s.result==="fail") failed++;
    });
    var covered=passed+failed;
    var rate=covered?Math.round((passed/covered)*1000)/10:0;
    return {total:total,covered:covered,passed:passed,failed:failed,pending:total-covered,rate:rate};
  }
  function tpPlanRunCounts(parsed){
    var plan=parsed;
    if(!plan){
      var hidden=document.getElementById("tp-plan-json");
      if(hidden&&hidden.value){
        try{ plan=JSON.parse(hidden.value); }catch(_e){ plan=null; }
      }
    }
    var tests=plan&&Array.isArray(plan.tests)?plan.tests:[];
    var stepCount=0;
    tests.forEach(function(test){ stepCount+=Array.isArray(test.steps)?test.steps.length:0; });
    return {tests:tests.length,steps:stepCount};
  }
  function tpRenderStats(st,parsed){
    var counts=tpPlanRunCounts(parsed);
    var rateCls=st.covered===0?"":(st.rate>=80?"tp-rate-ok":(st.rate>=50?"tp-rate-mid":"tp-rate-bad"));
    return '<span>Plan Tests <b>'+counts.tests+'</b></span>'+
      '<span>Procedure Steps <b>'+counts.steps+'</b></span>'+
      '<span>Test Points <b>'+st.total+'</b></span>'+
      '<span>Evaluated <b>'+st.covered+'</b> / '+st.total+'</span>'+
      '<span>Passed <b>'+st.passed+'</b></span>'+
      '<button type="button" class="tp-run-stat-btn tp-failed-filter" onclick="tpToggleFailedFilter(this)" '+(st.failed?'':'disabled')+' title="'+(st.failed?'Show only failed test points':'No failed test points')+'">Failed <b>'+st.failed+'</b></button>'+
      '<button type="button" class="tp-run-copy-failed" onclick="tpCopyFailedEvidence(this)" '+(st.failed?'':'disabled')+' title="Copy retained evidence for all failed test points">Copy Failed Evidence</button>'+
      '<span class="'+rateCls+'">Pass Rate <b>'+(st.covered?st.rate+"%":"—")+'</b>'+(st.covered?' of evaluated':'')+'</span>';
  }
  function tpRunRootFromElement(el){
    /* Execute belongs to the canonical Test Plan Run surface, never to the
       fixture dialog or another generic browse ancestor. Prefer the exact Run
       root; fall back to the current Run window only when detached markup has
       lost that ancestor relationship. */
    var exact=(el&&el.closest&&el.closest("#test-plan-run-window"))||null;
    if(exact)return exact;
    var current=tpCurrentRunWindow();
    if(current&&current.element)return current.element;
    var generic=(el&&el.closest&&el.closest(".cee-detached-window,.browse-window"))||null;
    if(generic&&generic.querySelector&&generic.querySelector("#tp-step-list")&&generic.querySelector("#tp-run-automation-btn"))return generic;
    return document;
  }
  function tpRunQuery(root,selector){
    return (root&&root.querySelector?root.querySelector(selector):null)||document.querySelector(selector);
  }
  function tpApplyResultFilter(root){
    root=root||document;
    var mode=String((root.getAttribute&&root.getAttribute("data-tp-result-filter"))||"");
    var failedOnly=mode==="failed";
    var list=tpRunQuery(root,"#tp-step-list");
    if(!list)return;
    var rows=Array.prototype.slice.call(list.querySelectorAll(".tp-step-row"));
    rows.forEach(function(row){
      var hide=failedOnly&&String(row.getAttribute("data-result")||"")!=="fail";
      row.classList.toggle("tp-result-filter-hidden",hide);
    });
    Array.prototype.slice.call(list.querySelectorAll(".tp-test-separator")).forEach(function(sep){
      var testId=String(sep.getAttribute("data-test-id")||"");
      var anyVisible=rows.some(function(row){
        return String(row.getAttribute("data-test-id")||"")===testId&&!row.classList.contains("tp-result-filter-hidden");
      });
      sep.classList.toggle("tp-result-filter-hidden",failedOnly&&!anyVisible);
    });
    var btn=tpRunQuery(root,".tp-failed-filter");
    if(btn){
      btn.classList.toggle("tp-active",failedOnly);
      btn.title=failedOnly?"Show all test points":"Show only failed test points";
    }
  }
  window.tpToggleFailedFilter=function(trigger){
    var root=tpRunRootFromElement(trigger);
    var active=String((root.getAttribute&&root.getAttribute("data-tp-result-filter"))||"")==="failed";
    if(root.setAttribute)root.setAttribute("data-tp-result-filter",active?"":"failed");
    tpApplyResultFilter(root);
  };
  function tpClipboardWrite(text){
    if(navigator.clipboard&&navigator.clipboard.writeText)return navigator.clipboard.writeText(text);
    return new Promise(function(resolve,reject){
      try{
        var ta=document.createElement("textarea");ta.value=text;ta.style.position="fixed";ta.style.opacity="0";
        document.body.appendChild(ta);ta.focus();ta.select();
        var ok=document.execCommand("copy");document.body.removeChild(ta);
        ok?resolve():reject(new Error("Copy command was rejected."));
      }catch(e){reject(e);}
    });
  }
  window.tpCopyFailedEvidence=async function(trigger){
    var root=tpRunRootFromElement(trigger);
    var rows=Array.prototype.slice.call(root.querySelectorAll('#tp-step-list .tp-step-row[data-result="fail"]'));
    if(!rows.length){toast("No failed test evidence is available.","err");return;}
    var lines=["CEE Test Plan — Failed Evidence","Failed test points: "+rows.length,""];
    rows.forEach(function(row,index){
      var automation={},execution={};
      try{automation=JSON.parse(row.getAttribute("data-automation-json")||"{}");}catch(_e){}
      try{execution=JSON.parse(row.getAttribute("data-execution-json")||"{}");}catch(_e){}
      var notes=row.querySelector(".tp-run-notes");
      var operation=automation.operation||((automation.executor_capability||{}).operation)||"";
      var verification=automation.verification||automation.verify||((automation.executor_capability||{}).verification)||"";
      var parameters=automation.parameters||{};
      lines.push((index+1)+". Test "+String(row.getAttribute("data-test-id")||"")+" · Criterion "+String(row.getAttribute("data-criterion-id")||""));
      lines.push("Assertion: "+String(row.getAttribute("data-text")||""));
      if(operation)lines.push("Operation: "+String(operation));
      if(verification)lines.push("Verification: "+String(verification));
      if(parameters&&Object.keys(parameters).length)lines.push("Parameters: "+JSON.stringify(parameters));
      if(execution.executor||automation.executor)lines.push("Executor: "+String(execution.executor||automation.executor));
      if(execution.reason_code)lines.push("Reason code: "+String(execution.reason_code));
      if(execution.executed_at)lines.push("Executed at: "+String(execution.executed_at));
      lines.push("Evidence: "+String(execution.evidence||"No retained execution evidence."));
      if(notes&&String(notes.value||"").trim())lines.push("Run notes: "+String(notes.value||"").trim());
      lines.push("");
    });
    try{await tpClipboardWrite(lines.join("\n"));toast("Copied evidence for "+rows.length+" failed test point"+(rows.length===1?"":"s")+".");}
    catch(e){toast("Could not copy failed evidence: "+(e.message||e),"err");}
  };
  function tpCurrentRunButton(){
    var buttons=Array.prototype.slice.call(document.querySelectorAll("#tp-run-automation-btn"));
    return buttons.find(function(b){return b.offsetParent!==null&&!b.disabled;})||buttons.find(function(b){return b.offsetParent!==null;})||buttons[buttons.length-1]||null;
  }
  function tpRefreshAutomationRunButton(root){
    root=root&&root.querySelector?root:((tpCurrentRunWindow()||{}).element||document);
    var button=root.querySelector?root.querySelector("#tp-run-automation-btn"):null;
    if(!button)return {autoCount:0,analyzedCount:0};
    var rows=Array.prototype.slice.call(root.querySelectorAll('#tp-step-list .tp-step-row'));
    var autoCount=rows.filter(function(row){return String(row.getAttribute("data-automation-eligibility")||"")==="automatable";}).length;
    var analyzedCount=rows.filter(function(row){return String(row.getAttribute("data-automation-eligibility")||"")!=="unanalyzed"&&String(row.getAttribute("data-automation-eligibility")||"")!=="not-defined";}).length;
    if(!rows.length){
      var scopedMap=(root&&root.__ceeTestAutomationMap)||CEE_ACTIVE_TEST_AUTOMATION_MAP||{};
      var keys=Object.keys(scopedMap);
      autoCount=keys.filter(function(k){return String((scopedMap[k]||{}).eligibility||"")==="automatable";}).length;
      analyzedCount=keys.filter(function(k){var e=String((scopedMap[k]||{}).eligibility||"");return e&&e!=="unanalyzed";}).length;
    }
    var batchId=(root&&root.dataset&&root.dataset.fixtureBatchId)||CEE_ACTIVE_TEST_FIXTURE_BATCH_ID||"";
    var batch=batchId&&CEE_TEST_FIXTURE_BATCHES[batchId];
    if(!batch&&root&&root.id==="test-plan-run-window"){
      var runState=model.browses["test-plan-run-window"]||{};
      batch=tpRecoverPersistedFixtureBinding(runState.subjectId||"");
      if(batch){batchId=batch.batchId;root.dataset.fixtureBatchId=batchId;root.__ceeTestAutomationMap=Object.assign({},batch.automationMap||{});}
    }
    var runnable=autoCount>0;
    /* Never native-disable Execute. A disabled HTML button suppresses the click
       event, which also suppresses the diagnostics needed to explain missing
       fixture or automation state. All gating is handled by the click handler. */
    button.disabled=false;
    button.setAttribute("aria-disabled",runnable?"false":"true");
    button.textContent="Execute Automated Tests"+(autoCount?" ("+autoCount+")":"");
    button.title=!runnable
      ?(analyzedCount?"Click to inspect why no runnable AUTO criteria are available.":"Click to inspect the Test Plan automation state.")
      :(batch?("Execute "+autoCount+" persisted AUTO test(s) against this Run window's applied fixture."):"AUTO contracts are loaded. Click to apply or diagnose the required fixture.");
    return {autoCount:autoCount,analyzedCount:analyzedCount,runnable:runnable,fixtureApplied:!!batch,batchId:batchId};
  }

  function tpSyncStepsJson(root){
    root=root||document;
    var host=tpRunQuery(root,"#tp-step-list");
    var hidden=tpRunQuery(root,"#tp-steps-json");
    if(!host||!hidden) return;
    var steps=[];
    host.querySelectorAll(".tp-step-row").forEach(function(row){
      steps.push({
        seq:Number(row.getAttribute("data-seq"))||0,
        criterion_id:row.getAttribute("data-criterion-id")||"",
        test_id:row.getAttribute("data-test-id")||"",
        test_title:row.getAttribute("data-test-title")||"",
        text:row.getAttribute("data-text")||"",
        result:row.getAttribute("data-result")||"pending",
        notes:(function(){var n=row.querySelector(".tp-run-notes");return n?String(n.value||""):"";})(),
        automation:(function(){
          var raw=row.getAttribute("data-automation-json")||"";
          if(!raw)return null;
          try{return JSON.parse(raw);}catch(_e){return null;}
        })(),
        execution:(function(){
          var raw=row.getAttribute("data-execution-json")||"";
          if(!raw)return null;
          try{return JSON.parse(raw);}catch(_e){return null;}
        })()
      });
    });
    hidden.value=JSON.stringify(steps);
    var statsEl=tpRunQuery(root,"#tp-run-stats");
    if(statsEl) statsEl.innerHTML=tpRenderStats(tpStepsStats(steps));
    tpApplyResultFilter(root);
  }
  window.tpSetStepResult=function(seq,result){
    var row=document.querySelector('#tp-step-list .tp-step-row[data-seq="'+seq+'"]');
    if(!row) return;
    var cur=row.getAttribute("data-result")||"pending";
    if(cur===result) result="pending";
    row.setAttribute("data-result",result);
    row.classList.remove("tp-pass","tp-fail");
    if(result==="pass") row.classList.add("tp-pass");
    if(result==="fail") row.classList.add("tp-fail");
    var passBtn=row.querySelector(".tp-pf-pass");
    var failBtn=row.querySelector(".tp-pf-fail");
    if(passBtn) passBtn.classList.toggle("tp-on-pass",result==="pass");
    if(failBtn) failBtn.classList.toggle("tp-on-fail",result==="fail");
    tpSyncStepsJson();
  };
  function tpApplyAutomationResult(seq,result,root){
    root=root||document;
    var row=tpRunQuery(root,'#tp-step-list .tp-step-row[data-seq="'+seq+'"]');
    if(!row)return {found:false,changed:false,previous:"missing",result:result};
    var previous=row.getAttribute("data-result")||"pending";
    row.setAttribute("data-result",result);
    row.classList.remove("tp-pass","tp-fail");
    if(result==="pass")row.classList.add("tp-pass");
    if(result==="fail")row.classList.add("tp-fail");
    var passBtn=row.querySelector(".tp-pf-pass");
    var failBtn=row.querySelector(".tp-pf-fail");
    if(passBtn)passBtn.classList.toggle("tp-on-pass",result==="pass");
    if(failBtn)failBtn.classList.toggle("tp-on-fail",result==="fail");
    return {found:true,changed:previous!==result,previous:previous,result:result};
  }
  function tpAutomationSummaryHost(root){
    root=root||document;
    var stats=tpRunQuery(root,"#tp-run-stats");
    if(!stats)return null;
    var host=tpRunQuery(root,"#tp-automation-run-summary");
    if(!host){
      host=document.createElement("div");
      host.id="tp-automation-run-summary";
      host.className="small-muted";
      host.style.cssText="margin:0 10px 8px;padding:8px;border:1px solid var(--border);background:var(--bg3);font-family:var(--mono);font-size:10px;line-height:1.5";
      stats.insertAdjacentElement("afterend",host);
    }
    return host;
  }
  async function tpWaitForAutomationChecklist(timeoutMs){
    var started=performance.now(),timeout=Number(timeoutMs)||3000;
    while(performance.now()-started<timeout){
      var list=document.getElementById("tp-step-list");
      if(list&&list.querySelectorAll(".tp-step-row").length)return list;
      await new Promise(function(resolve){setTimeout(resolve,25);});
    }
    throw new Error("Test Plan Run checklist did not initialize within "+timeout+" ms.");
  }

  window.tpJumpToTestSource=function(testId){
    tpSelectFormTab("plan");
    var textarea=document.getElementById("tp-steps-md");
    var wrap=document.getElementById("wrap-tp-steps-md");
    if(!textarea||!wrap){
      if(typeof toast==="function")toast("Test Plan Markdown editor is not available.","err");
      return;
    }
    /* The authoritative Markdown is searched live so the jump remains correct
       after unsaved edits. Test identity and Pass/Fail identity are unaffected. */
    var markdown=String(textarea.value||"");
    var escaped=String(testId||"").replace(/[.*+?^${}()|[\]\\]/g,"\\$&");
    var headingPattern=new RegExp("^##\\s+Test\\s+"+escaped+"\\s*:\\s*.*$","mi");
    var match=headingPattern.exec(markdown);
    if(!match){
      if(typeof toast==="function")toast("Could not find Test "+testId+" in the current Markdown source.","err");
      return;
    }
    wrap.classList.add("source-mode");
    if(typeof mdRefreshPreview==="function"){
      try{mdRefreshPreview("tp-steps-md");}catch(_e){}
    }
    var start=match.index,end=start+match[0].length;
    var before=markdown.slice(0,start);
    var lineNumber=before?before.split("\n").length:1;
    var totalLines=Math.max(1,markdown.split("\n").length);
    textarea.focus();
    textarea.setSelectionRange(start,end);
    /* First bring the editor itself into the modal viewport, then place the
       selected heading near the upper third of the textarea. */
    if(typeof wrap.scrollIntoView==="function")wrap.scrollIntoView({block:"start",behavior:"smooth"});
    var maxScroll=Math.max(0,textarea.scrollHeight-textarea.clientHeight);
    textarea.scrollTop=Math.max(0,Math.min(maxScroll,((lineNumber-2)/totalLines)*textarea.scrollHeight));
  };

  function tpRenderChecklist(steps,root){
    root=root||document;
    var list=tpScoped(root,"#tp-step-list");
    var statsEl=tpScoped(root,"#tp-run-stats");
    if(!list){
      if(typeof toast==="function") toast("Checklist panel not found in the form.","err");
      return;
    }
    if(!steps.length){
      list.innerHTML='<div class="small-muted" style="padding:12px">No v1 Pass/Fail assertions found. Load a <code>cee-test-plan-md/v1</code> document and use task boxes under <code>### Pass Criteria</code>.</div>';
      if(statsEl) statsEl.innerHTML=tpRenderStats({total:0,covered:0,passed:0,failed:0,pending:0,rate:0});
      var hidden=tpScoped(root,"#tp-steps-json");
      if(hidden) hidden.value="[]";
      return;
    }
    var previousTestId=null,html=[];
    steps.forEach(function(s){
      var testId=String(s.test_id||"");
      if(previousTestId===null||testId!==String(previousTestId||"")){
        html.push(
          '<div class="tp-test-separator" data-test-id="'+esc(testId)+'">'+
            '<div class="tp-test-separator-title">'+esc((testId?('Test '+testId+': '):'')+(s.test_title||''))+'</div>'+
            '<button type="button" class="btn tp-test-source-btn" title="Jump to this test in Test Plan Markdown" onclick="tpJumpToTestSource(\''+esc(testId)+'\')">Source</button>'+
          '</div>'
        );
      }
      var cls=s.result==="pass"?" tp-pass":(s.result==="fail"?" tp-fail":"");
      html.push(
        (function(){
          var key=String(s.criterion_id||s.seq),scopedAutomationMap=(root&&root.__ceeTestAutomationMap)||CEE_ACTIVE_TEST_AUTOMATION_MAP||{},fixtureEntry=scopedAutomationMap[key]||null;
          var persistent=(s.automation&&typeof s.automation==="object")?s.automation:null;
          var eligibility=persistent?String(persistent.eligibility||persistent.status||"not-defined"):"not-defined";
          var badgeClass="unanalyzed",badgeText="NOT DEFINED",runnable=false;
          if(eligibility==="automatable"){badgeClass="auto";badgeText="AUTO";runnable=!!fixtureEntry;}
          else if(eligibility==="candidate"){badgeClass="candidate";badgeText="NOT AUTOMATED";}
          else if(eligibility==="manual"||eligibility==="human-required"||eligibility==="review-required"){badgeClass="manual";badgeText="MANUAL";}
          var badgeTitle=persistent?((eligibility==="candidate"?"Automation candidate — not runnable. ":"")+(persistent.intrinsic_automability?("Intrinsic: "+persistent.intrinsic_automability+". "):"")+((persistent.executor_state||{}).id?("Executor: "+persistent.executor_state.id+". "):"")+((persistent.evidence_maturity||{}).level?("Evidence: "+tpEvidenceGradeLabel(persistent.evidence_maturity)+". "):"")+(persistent.gap_type&&persistent.gap_type!=="none"?("Gap: "+persistent.gap_type+". "):"")+(persistent.reason||persistent.reason_code||"Persisted Test Plan automation definition.")):"No automation definition has been accepted for this criterion.";
          var automationJson=persistent?JSON.stringify(persistent):"";
          var execution=(s.execution&&typeof s.execution==="object")?s.execution:null;
          var executionJson=execution?JSON.stringify(execution):"";
          var executionText=execution&&execution.evidence
            ?((execution.outcome?('Automated '+String(execution.outcome).toUpperCase()+': '):'')+String(execution.evidence))
            :"";
          return '<div class="tp-step-row'+cls+'" data-seq="'+s.seq+'" data-criterion-id="'+esc(s.criterion_id||'')+'" data-test-id="'+esc(testId)+'" data-test-title="'+esc(s.test_title||'')+'" data-text="'+esc(s.text)+'" data-result="'+esc(s.result||"pending")+'" data-automatable="'+(runnable?'true':'false')+'" data-automation-eligibility="'+esc(eligibility)+'" data-automation-json="'+esc(automationJson)+'" data-execution-json="'+esc(executionJson)+'">'+
            '<div class="tp-step-controls">'+
              '<button type="button" class="tp-pf tp-pf-pass'+(s.result==="pass"?" tp-on-pass":"")+'" onclick="tpSetStepResult('+s.seq+',\'pass\')">Pass</button>'+
              '<button type="button" class="tp-pf tp-pf-fail'+(s.result==="fail"?" tp-on-fail":"")+'" onclick="tpSetStepResult('+s.seq+',\'fail\')">Fail</button>'+
            '</div>'+
            '<div><span class="tp-automation-badge '+badgeClass+'" title="'+esc(badgeTitle)+'">'+badgeText+'</span></div>'+
            '<div class="tp-step-text"><span class="tp-step-seq">'+s.seq+'.</span>'+esc(s.text)+'<span class="tp-automation-evidence">'+esc(executionText)+'</span><input type="text" class="tp-run-notes" value="'+esc(s.notes||'')+'" placeholder="Add run note…" aria-label="Run note for test point '+s.seq+'"></div>'+
          '</div>';
        })()
      );
      previousTestId=testId;
    });
    list.innerHTML=html.join("");
    if(statsEl) statsEl.innerHTML=tpRenderStats(tpStepsStats(steps));
    tpSyncStepsJson(root);
  }
  function tpFormRootFromContext(context){
    if(context&&context.nodeType===1){
      if(context.classList&&context.classList.contains("tp-form-shell"))return context;
      if(context.closest){
        var shell=context.closest(".tp-form-shell");
        if(shell)return shell;
      }
    }
    return document;
  }
  function tpScoped(root,selector){
    return (root&&root.querySelector?root.querySelector(selector):null)||document.querySelector(selector);
  }
  function tpGetMdValueScoped(root,id){
    var ta=tpScoped(root,"#"+id);
    var raw=ta?String(ta.value||""):"";
    return tpIsMdPlaceholder(raw)?"":raw;
  }
  function tpSetMdValueScoped(root,id,value){
    var ta=tpScoped(root,"#"+id);
    if(!ta)return false;
    ta.value=String(value||"");
    var wrap=tpScoped(root,"#wrap-"+id);
    if(wrap)wrap.classList.add("source-mode");
    if(typeof mdRefreshPreview==="function"){try{mdRefreshPreview(id);}catch(_e){}}
    return true;
  }
  function tpApplyImportedPlanFields(root,parsed){
    if(!parsed||!parsed.ok)return;
    function set(id,value){var el=tpScoped(root,"#"+id);if(el&&value!==undefined&&value!==null&&String(value)!=="")el.value=String(value);}
    set("tp-plan-id",parsed.plan_id);
    set("tp-title",parsed.title);
    var m=parsed.metadata||{};
    set("tp-status",m.Status||m.status);
    set("tp-environment",m.Environment||m.environment);
    set("tp-author",m.Author||m.author);
  }

  window.tpRebuildChecklist=function(context){
    var root=tpFormRootFromContext(context);
    var md=tpGetMdValueScoped(root,"tp-steps-md");
    var usedDescription=false;
    if(!String(md||"").trim()){
      /* Common path: Load .md was used on Description, not Steps. */
      var desc=tpGetMdValueScoped(root,"tp-description");
      if(String(desc||"").trim()){
        md=desc;
        usedDescription=true;
        tpSetMdValueScoped(root,"tp-steps-md", desc);
      }else{
        var ta=tpScoped(root,"#tp-steps-md");
        var hint=ta?("textarea length="+String(ta.value||"").length):"textarea #tp-steps-md not found";
        if(typeof toast==="function") toast("Steps field is empty — nothing to parse ("+hint+"). Load a .md into Steps or paste numbered lines.","err");
        tpRenderChecklist([],root);
        return;
      }
    }
    var parsed=tpParseTestPlanMarkdownV1(md);
    var planJson=tpScoped(root,"#tp-plan-json");
    if(planJson)planJson.value=JSON.stringify(parsed);
    if(!parsed.ok){
      tpRenderChecklist([],root);
      var first=parsed.errors[0]||{message:"Invalid CEE Test Plan Markdown v1."};
      if(typeof toast==="function")toast("Test plan format error: "+first.message+(first.line?" (line "+first.line+")":""),"err");
      return;
    }
    var prev=tpParseStepsJson((tpScoped(root,"#tp-steps-json")||{}).value||"[]");
    var steps=tpMergeStepResults(tpPlanCriteria(parsed), prev);
    tpApplyImportedPlanFields(root,parsed);
    tpRenderChecklist(steps,root);
    if(typeof toast==="function")toast((usedDescription?"Copied Description → Steps. ":"")+"Parsed "+parsed.tests.length+" tests, "+tpPlanRunCounts(parsed).steps+" steps, and "+steps.length+" assertions.","ok");
  };
  window.tpLoadMdInto=function(targetId,context){
    var root=tpFormRootFromContext(context);
    var input=tpScoped(root,targetId==="tp-description"?"#tp-desc-file":"#tp-steps-file");
    if(!input){
      if(typeof toast==="function") toast("File picker not available.","err");
      return;
    }
    input.value="";
    input.onchange=function(){
      var file=input.files&&input.files[0];
      if(!file) return;
      var reader=new FileReader();
      reader.onload=function(){
        var text=String(reader.result||"");
        if(!String(text).trim()){
          if(typeof toast==="function") toast("That file is empty — nothing to load.","err");
          return;
        }
        if(!tpSetMdValueScoped(root,targetId, text)){
          if(typeof toast==="function") toast("Could not set markdown field "+targetId,"err");
          return;
        }
        if(targetId==="tp-steps-md"){
          window.tpRebuildChecklist(root);
        }else{
          /* A valid Test Plan file loaded from Details is a full-plan import, not prose Description. */
          var importedPlan=tpParseTestPlanMarkdownV1(text);
          if(importedPlan&&importedPlan.ok){
            tpSetMdValueScoped(root,"tp-steps-md",text);
            tpApplyImportedPlanFields(root,importedPlan);
            window.tpRebuildChecklist(root);
            if(typeof toast==="function") toast("Imported "+file.name+" as a complete Test Plan: "+importedPlan.tests.length+" tests.","ok");
          }else{
            /* Ordinary Markdown loaded from Details remains Description-only. */
            if(typeof toast==="function") toast("Loaded "+file.name+" into Description. It is not a valid cee-test-plan-md/v1 Test Plan.","ok");
          }
        }
      };
      reader.onerror=function(){ if(typeof toast==="function") toast("Could not read file","err"); };
      reader.readAsText(file);
    };
    input.click();
  };

  function tpSynchronizeMarkdownPlanId(markdown,planId){
    var md=String(markdown||"");
    var canonical=String(planId||"").trim();
    if(!canonical)return md;
    var lines=md.replace(/\r\n?/g,"\n").split("\n");
    var metadata=-1,nextSection=lines.length,planLine=-1,formatLine=-1;
    for(var i=0;i<lines.length;i++){
      if(/^##\s+Metadata\s*$/i.test(lines[i].trim())){metadata=i;continue;}
      if(metadata>=0&&i>metadata&&/^##\s+/.test(lines[i].trim())){nextSection=i;break;}
      if(metadata>=0&&i>metadata){
        if(/^\s*-\s*Plan ID\s*:/i.test(lines[i]))planLine=i;
        if(/^\s*-\s*Format\s*:/i.test(lines[i]))formatLine=i;
      }
    }
    if(metadata<0)return md;
    var replacement="- Plan ID: "+canonical;
    if(planLine>=0)lines[planLine]=replacement;
    else lines.splice(formatLine>=0?formatLine+1:metadata+1,0,replacement);
    return lines.join("\n");
  }

  function tpRunWindowId(){return "test-plan-run-window";}
  function tpCurrentRunWindow(){
    var id=tpRunWindowId(),w=model.browses[id],el=document.getElementById(id);
    return w&&el?{id:id,state:w,element:el}:null;
  }
  function tpCloseRunWindow(force){
    var current=tpCurrentRunWindow();if(!current)return;
    if(!force&&current.state.dirty){
      var discard=window.confirm("This test run contains unsaved changes.\n\nPress OK to discard them and close, or Cancel to continue the run.");
      if(!discard)return;
    }
    closeBusinessBrowse(current.id);
  }
  window.tpCloseRunWindow=function(){tpCloseRunWindow(false);};
  window.tpOpenCurrentPlanChain=function(button){
    var root=(button&&button.closest)?button.closest("#test-plan-run-window"):null;
    var id=(root&&root.id)||tpRunWindowId();
    var w=model.browses[id]||model.browses[tpRunWindowId()];
    var subjectId=String((w&&w.subjectId)||"");
    if(!subjectId){
      toast("No Test Plan chain subject is available.","err");
      return false;
    }
    openUniversalChainViewer({
      subjectId:subjectId,
      title:(w&&w.title)?String(w.title).replace(/^Run Test Plan\s+—\s+/,""):"Test Plan",
      detailKind:"test-plan",
      parentWinId:id
    });
    return false;
  };
  function tpOpenRunMdiWindow(sourceBrowseId,plan,tail){
    var existing=tpCurrentRunWindow();
    if(existing){
      if(existing.state.subjectId===String(plan.subject_id||plan._subject_id||"")){
        setBrowseActive(existing.id);
        return existing.element.querySelector(".tp-run-mdi-body");
      }
      if(existing.state.dirty){
        var replace=window.confirm("Another Test Plan run has unsaved changes.\n\nPress OK to discard that run and open this one, or Cancel to keep it.");
        if(!replace)return null;
      }
      tpCloseRunWindow(true);
    }
    var layer=document.getElementById("mdi-layer"),id=tpRunWindowId();
    var title="Run Test Plan — "+String(plan.title||plan.plan_id||"");
    model.browses[id]={
      id:id,key:"test-plan-run",kind:"test-plan-run",title:title,
      sourceBrowseId:sourceBrowseId,subjectId:String(plan.subject_id||plan._subject_id||""),
      loadedTail:String(tail||""),dirty:false,
      detachPlan:JSON.parse(JSON.stringify(plan||{}))
    };
    var el=document.createElement("div");
    el.id=id;el.className="browse-win tp-run-mdi active";
    var width=Math.min(Math.max(820,Math.floor(layer.clientWidth*.82)),layer.clientWidth);
    var height=Math.min(Math.max(560,Math.floor(layer.clientHeight*.88)),layer.clientHeight);
    applyBrowseGeometry(el,clampBrowseGeometry({
      left:Math.max(0,layer.clientWidth-width-24),
      top:Math.max(0,layer.clientHeight-height-20),
      width:width,height:height
    },layer));
    el.style.zIndex=String(++model.zTop);
    el.innerHTML=
      '<div class="browse-hdr">'+
        '<span class="browse-title">'+esc(title)+'</span>'+
        '<span class="browse-scope">RUN</span>'+
        '<button class="browse-detach-btn" title="Detach to Tab" aria-label="Detach to Tab" onclick="event.preventDefault();event.stopPropagation();ceeDetachToTab(\''+id+'\')">↗</button>'+
        '<button class="browse-max-btn" title="Maximize window to workspace" aria-label="Maximize window">□</button>'+
        '<button class="browse-close" title="Close Test Plan Run">×</button>'+
      '</div>'+
      '<div class="tp-run-mdi-body"></div>';
    layer.appendChild(el);
    el.onmousedown=function(){setBrowseActive(id);};
    el.querySelector(".browse-close").onclick=function(e){e.stopPropagation();tpCloseRunWindow(false);};
    el.querySelector(".browse-max-btn").onclick=function(e){e.stopPropagation();toggleBusinessBrowseSize(id);};
    el.querySelector(".browse-hdr").ondblclick=function(e){if(!e.target.closest("button"))toggleBusinessBrowseSize(id);};
    makeDraggable(el,el.querySelector(".browse-hdr"));
    renderBrowseChips();
    setBrowseActive(id);
    return el.querySelector(".tp-run-mdi-body");
  }
  function tpMarkRunDirty(){
    var current=tpCurrentRunWindow();if(current)current.state.dirty=true;
  }
  function tpInstallRunDirtyTracking(){
    var current=tpCurrentRunWindow();if(!current)return;
    var shell=current.element.querySelector("#tp-form-shell");if(!shell)return;
    shell.addEventListener("input",tpMarkRunDirty);
    shell.addEventListener("change",tpMarkRunDirty);
    shell.addEventListener("click",function(e){
      if(e.target.closest(".tp-pf")||e.target.closest("#tp-plan-splitter"))tpMarkRunDirty();
    });
  }

  window.tpSelectFormTab=function(tabName){
    var shell=document.getElementById("tp-form-shell");if(!shell)return;
    var selected=tabName==="plan"?"plan":"details";
    Array.prototype.forEach.call(shell.querySelectorAll("[data-tp-tab]"),function(btn){
      var active=btn.getAttribute("data-tp-tab")===selected;
      btn.classList.toggle("active",active);
      btn.setAttribute("aria-selected",active?"true":"false");
    });
    Array.prototype.forEach.call(shell.querySelectorAll("[data-tab-panel]"),function(panel){
      panel.classList.toggle("active",panel.getAttribute("data-tab-panel")===selected);
    });
  };
  function tpInitializeWorkspaceSplitter(){
    var workspace=document.getElementById("tp-plan-workspace");
    var splitter=document.getElementById("tp-plan-splitter");
    if(!workspace||!splitter)return;
    var dragging=false;
    function setFromPointer(clientX){
      if(window.matchMedia("(max-width:900px)").matches)return;
      var rect=workspace.getBoundingClientRect();
      var available=Math.max(1,rect.width-7);
      var left=Math.max(330,Math.min(available-380,clientX-rect.left));
      var right=Math.max(380,available-left);
      workspace.style.gridTemplateColumns=left+"px 7px "+right+"px";
    }
    splitter.addEventListener("pointerdown",function(e){
      dragging=true;splitter.classList.add("dragging");
      splitter.setPointerCapture(e.pointerId);e.preventDefault();
    });
    splitter.addEventListener("pointermove",function(e){if(dragging)setFromPointer(e.clientX);});
    function finish(){dragging=false;splitter.classList.remove("dragging");}
    splitter.addEventListener("pointerup",finish);
    splitter.addEventListener("pointercancel",finish);
    splitter.addEventListener("dblclick",function(){
      workspace.style.gridTemplateColumns="minmax(330px,45fr) 7px minmax(380px,55fr)";
    });
  }

  function tpFixtureStatusHtml(plan){
    var subject=String(plan.subject_id||plan._subject_id||"");
    if(subject)tpRecoverPersistedFixtureBinding(subject);
    var matches=Object.keys(CEE_TEST_FIXTURE_BATCHES||{}).map(function(id){return CEE_TEST_FIXTURE_BATCHES[id];}).filter(function(batch){
      return batch&&String(batch.planSubjectId||"")===subject;
    });
    var activeId=CEE_ACTIVE_TEST_FIXTURE_BATCH_ID||"";
    var active=activeId&&CEE_TEST_FIXTURE_BATCHES[activeId];
    if(active&&(!subject||String(active.planSubjectId||"")===subject)){
      return '<div class="tp-fixture-status" data-state="attached"><b>Fixture binding recovered and attached:</b> '+esc(active.batchId||activeId)+
        '<br><span class="small-muted">The binding is persisted in this browser for this Test Plan and will be recovered by future Run windows. Automated results remain local until <b>Save Results</b> appends a Test Plan CU.</span></div>';
    }
    if(matches.length){
      var recent=matches[matches.length-1];
      return '<div class="tp-fixture-status" data-state="available"><b>Fixture batch exists in this browser session but is not attached to this Run window:</b> '+esc(recent.batchId||"")+
        '<br><span class="small-muted">Click Execute Automated Tests to attach the newest matching session batch. After a page reload, recreate or reconcile the fixture from the business-record browse: <b>Test → Generate Test Plan Fixture</b>.</span></div>';
    }
    return '<div class="tp-fixture-status" data-state="missing"><b>No fixture is attached to this Run window.</b>'+
      '<br><span class="small-muted">Return to the target business-record browse and use <b>Test → Generate Test Plan Fixture</b>, select this plan, then Reconcile or Reuse. Fixture attachment is browser-session state; the published Hub schema and saved Test Plan results are separate CU-backed state.</span></div>';
  }

  function tpAttachFixtureBatchToMatchingRun(batchId){
    var batch=CEE_TEST_FIXTURE_BATCHES&&CEE_TEST_FIXTURE_BATCHES[batchId];
    if(!batch)return false;
    CEE_ACTIVE_TEST_FIXTURE_BATCH_ID=batchId;
    tpPersistFixtureBinding(batch);
    if(batch.automationMap&&Object.keys(batch.automationMap).length){
      CEE_ACTIVE_TEST_AUTOMATION_MAP=Object.assign({},batch.automationMap);
    }
    var current=tpCurrentRunWindow();
    if(!current||String(current.state.subjectId||"")!==String(batch.planSubjectId||""))return false;
    current.element.dataset.fixtureBatchId=batchId;
    current.element.__ceeTestAutomationMap=Object.assign({},batch.automationMap||CEE_ACTIVE_TEST_AUTOMATION_MAP||{});
    var status=current.element.querySelector(".tp-fixture-status");
    if(status){
      status.outerHTML='<div class="tp-fixture-status" data-state="attached"><b>Fixture attached for this browser session:</b> '+esc(batch.batchId||batchId)+
        '<br><span class="small-muted">This binding will be recovered when the Test Plan is opened through Run in this browser. Automated results remain local until <b>Save Results</b> appends a Test Plan CU.</span></div>';
    }
    tpRefreshAutomationRunButton(current.element);
    var summary=tpAutomationSummaryHost(current.element);
    if(summary)summary.innerHTML='<b>Fixture attached:</b> '+esc(batch.planTitle||batch.planId||"Test Plan")+' · Batch '+esc(batch.batchId||batchId)+
      ' · Fixture records '+Number((batch.created||0)+(batch.reused||0))+'<br>Execute Automated Tests may now run the accepted AUTO criteria in this window.';
    console.log("[CEE Test Automation] Fixture batch attached to existing Run window",{batch_id:batchId,subject_id:batch.planSubjectId});
    return true;
  }

  function showTestPlanForm(winId,plan,tail,isNew,runMode){
    plan=plan||{};
    if(!runMode||!CEE_ACTIVE_TEST_FIXTURE_BATCH_ID)CEE_ACTIVE_TEST_AUTOMATION_MAP={};
    var descSeed=(plan.description&&!tpIsMdPlaceholder(plan.description))?String(plan.description):"";
    var stepsSeed=(plan.steps_markdown&&!tpIsMdPlaceholder(plan.steps_markdown))
      ?String(plan.steps_markdown)
      :"1. First step\n2. Second step\n3. Third step\n";
    var initialParsed=tpParseTestPlanMarkdownV1(stepsSeed);
    var initialSteps=tpMergeStepResults(
      initialParsed.ok?tpPlanCriteria(initialParsed):[],
      tpParseStepsJson(plan.steps_json||"[]")
    );
    var tailText=tail
      ?('Loaded tail: '+esc(tail)+(plan._results_cu_id
          ?(' · restored results CU: '+esc(plan._results_cu_id)+
            ' · '+esc(plan._restored_result_count||0)+' evaluated'+
            ' · '+esc(plan._restored_note_count||0)+' runner notes'+
            ' · '+esc(plan._restored_execution_count||0)+' execution evidence')
          :(' · No saved execution results found'+(plan._history_cu_count?(' · '+esc(plan._history_cu_count)+' history CUs inspected'):''))))
      :'New plan — first save creates its CU chain.';
    var formTitle=(isNew?"New Test Plan":((runMode?"Run Test Plan — ":"Test Plan — ")+(plan.title||plan.plan_id||"")));
    var formHtml=
      '<div class="tp-form-shell" id="tp-form-shell">'+
        '<div class="tp-form-tabs" role="tablist" aria-label="Test Plan sections">'+
          '<button type="button" class="tp-form-tab'+(runMode?'':' active')+'" data-tp-tab="details" role="tab" aria-selected="'+(runMode?'false':'true')+'" onclick="tpSelectFormTab(\'details\')">Details</button>'+
          '<button type="button" class="tp-form-tab'+(runMode?' active':'')+'" data-tp-tab="plan" role="tab" aria-selected="'+(runMode?'true':'false')+'" onclick="tpSelectFormTab(\'plan\')">Test Plan</button>'+
        '</div>'+
        '<div class="tp-form-tab-panel'+(runMode?'':' active')+'" data-tab-panel="details" role="tabpanel">'+
          '<div class="br-field-row">'+
            '<div class="field"><label>Plan ID</label><input id="tp-plan-id" value="'+esc(plan.plan_id||'')+'"'+(isNew?'':' readonly')+'></div>'+
            '<div class="field"><label>Status</label>'+tpSelect('tp-status',plan.status||'Draft',['Draft','Active','Archived'])+'</div>'+
          '</div>'+
          '<div class="field"><label>Title</label><input id="tp-title" value="'+esc(plan.title||'')+'"></div>'+
          '<div class="br-field-row">'+
            '<div class="field"><label>Author</label><input id="tp-author" value="'+esc(plan.author||(typeof operator==="function"?operator():"local-operator"))+'"></div>'+
            '<div class="field"><label>Environment</label><input id="tp-environment" value="'+esc(plan.environment||context.environmentRoot||'production')+'"></div>'+
          '</div>'+
          '<div class="br-field-row">'+
            '<div class="field"><label>Tags</label><input id="tp-tags" value="'+esc(plan.tags||'')+'" placeholder="acceptance, spine, smoke"></div>'+
            '<div class="field"><label>CEE Version</label><input id="tp-cee-version" value="'+esc(plan.cee_version||currentCeeVersion())+'" readonly></div>'+
          '</div>'+
          '<div class="field">'+
            '<label>Description</label>'+
            '<div class="tp-md-load-row">'+
              '<span class="small-muted">Optional: load a Markdown file into Description</span>'+
              '<button type="button" class="btn" onclick="tpLoadMdInto(\'tp-description\',this)">Load .md</button>'+
              '<input type="file" id="tp-desc-file" accept=".md,.markdown,.txt,text/markdown,text/plain" style="display:none">'+
            '</div>'+
            markdownTextareaHtml('tp-description','description'," ")+
          '</div>'+
        '</div>'+
        '<div class="tp-form-tab-panel'+(runMode?' active':'')+'" data-tab-panel="plan" role="tabpanel">'+
          '<div class="tp-plan-workspace" id="tp-plan-workspace">'+
            '<section class="tp-plan-source-pane" aria-label="Test Plan Markdown">'+
              '<div class="tp-plan-pane-header">'+
                '<div><div class="tp-plan-pane-title">Test Plan Markdown</div><div class="small-muted">Authoritative cee-test-plan-md/v1 source</div></div>'+
                '<div class="tp-plan-pane-actions">'+
                  '<button type="button" class="btn" onclick="tpLoadMdInto(\'tp-steps-md\',this)">Load .md</button>'+
                  '<button type="button" class="btn" onclick="tpRebuildChecklist(this)">Rebuild assertions</button>'+
                  '<input type="file" id="tp-steps-file" accept=".md,.markdown,.txt,text/markdown,text/plain" style="display:none">'+
                '</div>'+
              '</div>'+
              '<div class="tp-plan-source-scroll">'+
                markdownTextareaHtml('tp-steps-md','steps_markdown'," ")+
              '</div>'+
            '</section>'+
            '<div class="tp-plan-splitter" id="tp-plan-splitter" role="separator" aria-orientation="vertical" title="Drag to resize; double-click to reset"></div>'+
            '<section class="tp-plan-run-pane" aria-label="Test Steps and Assertions">'+
              '<div class="tp-plan-pane-header">'+
                '<div><div class="tp-plan-pane-title">Test Execution</div><div class="small-muted">Overall plan status and test-point results</div></div>'+
              '</div>'+
              '<div class="tp-run-stats" id="tp-run-stats">'+tpRenderStats(tpStepsStats(initialSteps),initialParsed)+'</div>'+
              (runMode?tpFixtureStatusHtml(plan):'')+
              '<div class="tp-automation-column-head"><span>Result</span><span>Mode</span><span>Assertion</span></div>'+
              '<div class="tp-step-list" id="tp-step-list"></div>'+
            '</section>'+
          '</div>'+
          '<input type="hidden" id="tp-steps-json" value=""><input type="hidden" id="tp-plan-json" value="">'+
        '</div>'+
        '<div class="tp-form-footer">'+
          '<div class="tail-line">'+tailText+'</div>'+
          '<div class="action-row" style="justify-content:flex-end;margin:0">'+
            '<button class="btn" onclick="cancelTestPlan()">'+(runMode?'Close':'Cancel')+'</button>'+
            (runMode?'<button type="button" id="tp-chain-btn" class="btn" onclick="return tpOpenCurrentPlanChain(this)" title="Open the CU chain for this Test Plan subject.">Chain</button>':'')+
            (runMode?'<button type="button" id="tp-run-automation-btn" class="btn" onclick="return runAppliedFixtureAutomation(this,event)" title="Execute against an attached session fixture; if none is attached, CEE explains how to generate or reconcile one.">Execute Automated Tests</button>':'')+
            '<button type="button" id="tp-save-btn" class="btn primary" onclick="saveTestPlan(\''+winId+'\',\''+esc(plan.subject_id||plan._subject_id||'')+'\',\''+esc(tail||'')+'\')">'+(runMode?'Save Results':'Save + Append CU')+'</button>'+
          '</div>'+
        '</div>'+
      '</div>';
    if(runMode){
      var runHost=tpOpenRunMdiWindow(winId,plan,tail);
      if(!runHost)return;
      runHost.innerHTML=formHtml;
    }else{
      modal(formTitle,formHtml);
    }
    setTimeout(function(){
      /* Select the intended panel before any editor/checklist work. A later
         initialization fault must never leave both panels hidden. */
      tpSelectFormTab(runMode?"plan":"details");
      try{
      ["tp-description","tp-steps-md"].forEach(function(id){
        var wrap=document.getElementById("wrap-"+id);
        if(wrap)wrap.classList.add("source-mode");
      });
      tpSetMdValue("tp-description",descSeed);
      tpSetMdValue("tp-steps-md",stepsSeed);
      var live=tpGetMdValue("tp-steps-md");
      var parsed=tpParseTestPlanMarkdownV1(live||stepsSeed);
      var planJson=document.getElementById("tp-plan-json");
      if(planJson)planJson.value=JSON.stringify(parsed);
      var prev=tpParseStepsJson(plan.steps_json||"[]");
      var steps=tpMergeStepResults(parsed.ok?tpPlanCriteria(parsed):[],prev);
      if(!steps.length&&initialSteps.length)steps=initialSteps;
      var formRoot=runMode?((tpCurrentRunWindow()||{}).element||document):document;
      tpRenderChecklist(steps,formRoot);
      tpInitializeWorkspaceSplitter();
      tpSelectFormTab(runMode?"plan":"details");
      if(runMode){
        var saveButton=formRoot.querySelector("#tp-save-btn");
        if(saveButton)saveButton.textContent="Save Results";
        var cancelButton=formRoot.querySelector("#tp-form-shell .tp-form-footer .action-row .btn:not(.primary)");
        if(cancelButton)cancelButton.textContent="Close";
        tpInstallRunDirtyTracking();
        var list=formRoot.querySelector("#tp-step-list");
        if(list)list.scrollTop=0;
        tpRefreshAutomationRunButton(formRoot);
      }
      }catch(e){
        console.error("[CEE Test Plans] form initialization failed",{
          error:e, message:(e&&e.message)||String(e), run_mode:!!runMode,
          subject_id:String(plan.subject_id||plan._subject_id||""),
          plan_id:String(plan.plan_id||"")
        });
        if(typeof toast==="function")toast("Test Plan opened, but part of the execution surface failed to initialize. See console.","err");
      }
    },0);
  }
  function tpUpsertBrowsePlan(winId,body,saved){
    var w=model.browses[winId];if(!w)return;
    var sid=(saved&&saved.subject_id)||body.subject_id||("test-plan-"+String(body.plan_id||"").toLowerCase().replace(/[^a-z0-9_-]/g,"-"));
    var cu=(saved&&(saved.canonical_cu_id||saved.routed_cu_id||saved.full_cu_id||saved.cu_id||saved.tail_hash))||"";
    var next={
      plan_id:body.plan_id,subject_id:sid,_subject_id:sid,title:body.title,status:body.status,
      environment:body.environment,author:body.author,tags:body.tags,description:body.description,
      cee_version:body.cee_version,_cu_id:cu,_cu_published_at:Date.now()/1000
    };
    var plans=w.plans||[],found=false;
    w.plans=plans.map(function(p){
      if((p._subject_id||p.subject_id)===sid){found=true;return Object.assign({},p,next);}
      return p;
    });
    if(!found)w.plans.unshift(next);
    w.loadDurationMs=0;
    renderTestPlans(winId);
  }
  window.saveTestPlan=async function(winId,subjectId,tail){
    var saveClickStart=performance.now();
    /* v31c370: In modeless Run mode, WIN-ID is the originating Test Plans
       browse window, which also exists in the DOM. The old browse-first lookup
       therefore serialized no checklist rows and saved steps_json as [], even
       while the Run window visibly held Pass/Fail, notes, and execution evidence.
       The active Run window is the authoritative save surface; browse/modal
       roots are fallbacks only when no Run window exists. */
    var activeRun=tpCurrentRunWindow();
    var saveRoot=(activeRun&&activeRun.element)||document.getElementById(winId)||document;
    var saveBtn=tpRunQuery(saveRoot,"#tp-save-btn");
    if(saveBtn&&saveBtn.disabled)return;
    var val=function(id){var e=tpRunQuery(saveRoot,"#"+id);return e?e.value.trim():"";};
    var authoritativePlanId=val("tp-plan-id");
    var originalMarkdown=tpGetMdValue("tp-steps-md").trim();
    var liveMarkdown=tpSynchronizeMarkdownPlanId(originalMarkdown,authoritativePlanId).trim();
    if(liveMarkdown!==originalMarkdown)tpSetMdValue("tp-steps-md",liveMarkdown);
    var parsedPlan=tpParseTestPlanMarkdownV1(liveMarkdown);
    if(!parsedPlan.ok){
      var firstError=parsedPlan.errors[0]||{message:"Invalid CEE Test Plan Markdown v1."};
      toast("Cannot save: "+firstError.message+(firstError.line?" (line "+firstError.line+")":""),"err");
      return;
    }
    tpSyncStepsJson(saveRoot);
    var planJsonEl=tpRunQuery(saveRoot,"#tp-plan-json");
    if(planJsonEl)planJsonEl.value=JSON.stringify(parsedPlan);
    var body={
      plan_id:val("tp-plan-id"),
      subject_id:subjectId||"",
      title:val("tp-title"),
      status:val("tp-status")||"Draft",
      environment:val("tp-environment"),
      author:val("tp-author"),
      tags:val("tp-tags"),
      description:tpGetMdValue("tp-description").trim(),
      plan_format:"cee-test-plan-md/v1",
      steps_markdown:liveMarkdown,
      steps_json:val("tp-steps-json")||"[]",
      /* Markdown is canonical and deterministically reparsed on open. Do not
         duplicate the entire plan tree in the POST body; persist only counts. */
      plan_json:JSON.stringify({
        format:"cee-test-plan-md/v1",
        test_count:(parsedPlan.tests||[]).length,
        step_count:(parsedPlan.tests||[]).reduce(function(n,t){return n+(t.steps||[]).length;},0),
        assertion_count:tpPlanCriteria(parsedPlan).length
      }),
      cee_version:val("tp-cee-version")||currentCeeVersion(),
      loaded_tail_hash:(function(){
        var current=tpCurrentRunWindow();
        return current?String(current.state.loadedTail||""):String(tail||"");
      })(),
      operator:typeof operator==="function"?operator():"local-operator"
    };
    if(!body.plan_id||!body.title){toast("Plan ID and title are required.","err");return;}
    if(saveBtn){saveBtn.disabled=true;saveBtn.textContent="Saving…";}
    var requestStart=performance.now();
    console.log("[CEE Test Plans] save request",{
      plan_id:body.plan_id,
      payload_bytes:new Blob([JSON.stringify(body)]).size,
      markdown_bytes:new Blob([body.steps_markdown||""]).size,
      client_preparation_ms:Math.round(requestStart-saveClickStart),
      persisted_execution_evidence:tpParseStepsJson(body.steps_json).filter(function(step){return !!(step.execution&&step.execution.evidence);}).length,
      persisted_run_notes:tpParseStepsJson(body.steps_json).filter(function(step){return !!String(step.notes||"").trim();}).length
    });
    try{
      var saved=await postJson(testPlansApiBase()+"/save",body);
      var responseAt=performance.now();
      console.log("[CEE Test Plans] save timing",{
        plan_id:body.plan_id,
        client_preparation_ms:Math.round(requestStart-saveClickStart),
        http_roundtrip_ms:Math.round(responseAt-requestStart),
        total_ms:Math.round(responseAt-saveClickStart),
        saved:saved
      });
      var currentRun=tpCurrentRunWindow();
      if(currentRun){
        currentRun.state.loadedTail=String(saved.canonical_cu_id||saved.routed_cu_id||saved.full_cu_id||saved.cu_id||saved.tail_hash||"");
        currentRun.state.dirty=false;
        var tailLine=currentRun.element.querySelector(".tail-line");
        if(tailLine)tailLine.textContent="Saved tail: "+currentRun.state.loadedTail;
        if(saveBtn){saveBtn.disabled=false;saveBtn.textContent="Save Results";}
      }else{
        var backdrop=document.getElementById("edit-backdrop");
        var editModal=document.getElementById("edit-modal");
        if(editModal)editModal.classList.remove("artifact-history-modal");
        if(backdrop)backdrop.classList.remove("show");
      }
      tpUpsertBrowsePlan(winId,body,saved);
      toast(currentRun?"Test results saved by CU append.":"Test plan saved by CU append.","ok");
      /* The v6 authority updates its compact summary index during the append.
         The optimistic row already contains the returned authoritative CU id;
         do not trigger an unnecessary post-save network rescan. */
    }catch(e){
      if(saveBtn){saveBtn.disabled=false;saveBtn.textContent=tpCurrentRunWindow()?"Save Results":"Save + Append CU";}
      if(String(e.message||e).indexOf("stale-tail")>=0){
        toast("This plan changed since it was opened. Reload the current plan before saving again.","err");
      }else{
        toast("Test plan save failed: "+(e.message||e)+". Use BUG REPORTS to document the failure if needed.","err");
      }
    }
  };
  function tpChainWhen(row){
    var info=tpCuTimestampInfo({cu_id:row.cu_id,published_at:row.published_at},{});
    return info.date?info.date.toLocaleString():"—";
  }
  function renderTestPlanChainBrowse(winId){
    var w=model.browses[winId],body=document.getElementById(winId+"-body");
    if(!w||!body)return;
    var rows=w.rows||[];
    if(!rows.length){
      body.innerHTML='<div class="small-muted" style="padding:14px">No history yet.</div>';
      return;
    }
    var html='<table class="testplans-table"><thead><tr>'+ 
      '<th>CU</th><th>Published</th><th>Operator</th><th>Type</th><th>Revision</th><th></th>'+ 
      '</tr></thead><tbody>';
    rows.forEach(function(row){
      var cu=String(row.cu_id||"");
      var shortCu=cu.length>18?(cu.slice(0,8)+"…"+cu.slice(-8)):cu;
      html+='<tr data-cu="'+esc(cu)+'" onclick="selectTestPlanChainRow(\''+winId+'\',\''+esc(cu)+'\')">'+
        '<td class="tail-hash" title="'+esc(cu)+'">'+esc(shortCu)+(row.is_tail?' <span class="tp-badge tp-badge-active">LATEST</span>':'')+'</td>'+ 
        '<td class="small-muted">'+esc(tpChainWhen(row))+'</td>'+ 
        '<td>'+esc(row.operator||"")+'</td>'+ 
        '<td>'+esc(row.artifact_type||"test-plan")+'</td>'+ 
        '<td>'+esc(row.spoke_count||"")+'</td>'+ 
        '<td><button class="btn primary" style="font-size:9px;padding:2px 8px" onclick="event.stopPropagation();openTestPlanChainDetail(\''+winId+'\',\''+esc(cu)+'\')">Detail</button></td>'+ 
        '</tr>';
    });
    html+='</tbody></table>';
    body.innerHTML=html;
    if(w.selectedCu)selectTestPlanChainRow(winId,w.selectedCu);
  }
  window.selectTestPlanChainRow=function(winId,cuId){
    var w=model.browses[winId];if(!w)return;
    w.selectedCu=cuId;
    var body=document.getElementById(winId+"-body");if(!body)return;
    Array.prototype.forEach.call(body.querySelectorAll("tr[data-cu]"),function(tr){
      tr.classList.toggle("sel",tr.getAttribute("data-cu")===cuId);
    });
  };
  function tpReadonlyResultHtml(artifact){
    var parsed=tpParseStepsJson(artifact.steps_json||"[]");
    if(!parsed.length)return '<div class="small-muted">No assertion state stored in this CU.</div>';
    var html='<table class="testplans-table"><thead><tr><th>Test</th><th>Assertion</th><th>Result</th></tr></thead><tbody>';
    parsed.forEach(function(item){
      var result=String(item.result||"").toLowerCase();
      var label=result==="pass"?"Pass":(result==="fail"?"Fail":"Not evaluated");
      html+='<tr><td>'+esc(item.test_id||item.test_title||"")+'</td><td>'+esc(item.text||item.criterion||item.title||"")+'</td><td>'+esc(label)+'</td></tr>';
    });
    return html+'</tbody></table>';
  }
  function testPlanChainDetailPresentation(envelope){
    var artifact=tpArtifact(envelope);
    var published=tpCuTimestampInfo({cu_id:envelope.cu_id,published_at:envelope.published_at},artifact);
    var when=published.date?published.date.toLocaleString():"—";
    var title='Historical Test Plan CU — '+(artifact.title||artifact.plan_id||"Detail");
    var html=
      '<div class="small-muted" style="padding:8px 10px;margin-bottom:10px;border:1px solid var(--border);background:var(--bg3)">'+
        '<b>Historical CU — read only</b><br>CU: <span class="tail-hash">'+esc(envelope.cu_id||"")+'</span><br>'+ 
        'Published: '+esc(when)+' · Operator: '+esc(envelope.operator||"")+'<br>'+ 
        'Predecessor: <span class="tail-hash">'+esc(envelope.predecessor_id||"root")+'</span>'+ 
      '</div>'+ 
      '<div class="br-field-row"><div class="field"><label>Plan ID</label><input readonly value="'+esc(artifact.plan_id||"")+'"></div>'+ 
      '<div class="field"><label>Status</label><input readonly value="'+esc(artifact.status||"")+'"></div></div>'+ 
      '<div class="field"><label>Title</label><input readonly value="'+esc(artifact.title||"")+'"></div>'+ 
      '<div class="br-field-row"><div class="field"><label>Author</label><input readonly value="'+esc(artifact.author||"")+'"></div>'+ 
      '<div class="field"><label>Environment</label><input readonly value="'+esc(artifact.environment||"")+'"></div></div>'+ 
      '<div class="br-field-row"><div class="field"><label>Tags</label><input readonly value="'+esc(artifact.tags||"")+'"></div>'+ 
      '<div class="field"><label>CEE Version</label><input readonly value="'+esc(artifact.cee_version||"")+'"></div></div>'+ 
      '<div class="field"><label>Description</label><textarea id="tp-chain-detail-description" readonly style="min-height:90px"></textarea></div>'+ 
      '<div class="field"><label>Test Plan (Markdown)</label><textarea id="tp-chain-detail-markdown" readonly style="min-height:220px;font-family:var(--mono)"></textarea></div>'+ 
      '<div class="field"><label>Assertion Results</label><div style="max-height:240px;overflow:auto">'+tpReadonlyResultHtml(artifact)+'</div></div>'+ 
      '<details style="margin-top:10px"><summary>CU Notes and Raw Artifact</summary>'+ 
        '<div class="small-muted" style="margin:8px 0">'+esc(envelope.notes||"")+'</div>'+ 
        '<pre style="white-space:pre-wrap;max-height:280px;overflow:auto">'+esc(JSON.stringify(artifact,null,2))+'</pre>'+ 
      '</details>'+ 
      '<div class="action-row" style="justify-content:flex-end"><button class="btn chain-detail-close">Close</button></div>';
    return {title:title,html:html,afterOpen:function(root){
      var d=root.querySelector("#tp-chain-detail-description");if(d)d.value=artifact.description||"";
      var m=root.querySelector("#tp-chain-detail-markdown");if(m)m.value=artifact.steps_markdown||"";
    }};
  }
  function showTestPlanChainDetailForm(envelope){
    var p=testPlanChainDetailPresentation(envelope);
    modal(p.title,p.html);if(p.afterOpen)p.afterOpen(document.getElementById("edit-modal"));
  }
  window.openTestPlanChainDetail=async function(winId,cuId){
    return openUniversalChainDetail(winId,cuId);
  };
  window.openTestPlanChain=async function(parentWinId,subjectId,title){
    return openUniversalChainViewer({parentWinId:parentWinId,subjectId:subjectId,title:title,detailKind:"test-plan"});
  };


  function ceeRecordDebug(stage,data){
    try{
      console.groupCollapsed("[CEE record debug] "+stage);
      console.log(data);
      console.groupEnd();
    }catch(_e){}
  }

  async function getJson(url){
    var r=await fetch(url,{cache:"no-store",headers:{Accept:"application/json"}});
    var txt=await r.text(),j;
    try{j=JSON.parse(txt);}catch(e){throw new Error("Non-JSON response from "+url);}
    if(!r.ok || j.ok===false) throw new Error(j.message||j.error||("HTTP "+r.status));
    return normalizeArtifactResponse(j);
  }
  async function postJson(url,body){
    ceeRecordDebug("POST request",{url:url,body:body});
    var r;
    try{
      r=await fetch(url,{
        method:"POST",cache:"no-store",
        headers:{"Content-Type":"application/json","Accept":"application/json"},
        body:JSON.stringify(body)
      });
    }catch(fetchError){
      console.error("[CEE record debug] fetch threw before response",{
        url:url,body:body,error:fetchError
      });
      throw fetchError;
    }
    var txt=await r.text(),j;
    ceeRecordDebug("POST response",{url:url,status:r.status,ok:r.ok,responseText:txt});
    try{j=JSON.parse(txt);}catch(e){
      var parseErr=new Error("Non-JSON response from "+url+" (HTTP "+r.status+"): "+txt.slice(0,1000));
      parseErr.status=r.status;parseErr.url=url;parseErr.responseText=txt;
      if(window.ceeCaptureDiagnostic)window.ceeCaptureDiagnostic("http-error",parseErr.message,{url:url,status:r.status,response_text:txt,request_body:body});
      console.error("[CEE record debug] response JSON parse failed",parseErr);
      throw parseErr;
    }
    if(!r.ok || j.ok===false){
      var detail=j.message||j.error||("HTTP "+r.status+" response: "+JSON.stringify(j));
      var err=new Error(detail);
      err.data=j;err.status=r.status;err.url=url;err.responseText=txt;
      if(window.ceeCaptureDiagnostic)window.ceeCaptureDiagnostic("http-error",detail,{url:url,status:r.status,response_json:j,response_text:txt,request_body:body});
      console.error("[CEE record debug] backend rejected POST",{
        url:url,status:r.status,requestBody:body,response:j
      });
      throw err;
    }
    return normalizeArtifactResponse(j);
  }
  function operator(){
    return localStorage.getItem("chandra.operator") || "cee-acceptance-user";
  }
  function register(n){model.byId[n.id]=n;return n;}
  function children(n){return n.children||(n.children=[]);}

  function build(payload){
    model.byId=Object.create(null);
    var envRoot=context.environmentRoot||"acceptance";
    var root=register({
      id:envRoot+"-root",type:"root",environmentRoot:envRoot,
      label:(envRoot==="production"?"Production Spine":"Acceptance Spine — "+context.environmentLabel),
      open:true,genesis_key:payload.genesis_key||context.genesisKey,children:[]
    });
    var parent=root;
    var currentHeader=null;
    (payload.levels||[]).slice().sort(function(a,b){
      return Number(b.level_number||0)-Number(a.level_number||0);
    }).forEach(function(lv){
      var addr=lv.instance_address||"";
      /* v31c5 (claude): synthetic, childless "instance-header" row inserted as a
         sibling immediately before the first Level of each contiguous run sharing
         the same instance_address -- same parent the Level itself attaches to, so
         it sits at the correct nesting depth without altering the real Level-chain
         hierarchy (which reflects genuine parent_anchor data, not a grouping
         device). Reuses .cee-tier-node/.cee-tier-health CSS that already existed
         for this purpose but had gone dead after the v3 routing rewrite. */
      if(!currentHeader || currentHeader.instance_address!==addr){
        var hid=(lv.level_key||("level-"+lv.level_number));
        currentHeader=register({
          id:"instance-header::"+hid,type:"instance-header",
          label:addr||"(no instance address)",
          instance_address:addr,instance_id:null,instance_name:null,
          level_numbers:[],open:true,children:[]
        });
        children(parent).push(currentHeader);
      }
      currentHeader.level_numbers.push(lv.level_number);

      var lid=lv.level_key||("level-"+lv.level_number);
      var level=register({
        id:lid,type:"level",label:"Level "+lv.level_number+" — "+(lv.label||lid),
        rawLabel:lv.label||lid,level_number:lv.level_number,level_key:lid,
        instance_address:lv.instance_address||"",
        system_hub_key:lv.system_hub_key||"",
        system_hub_id:lv.system_hub_id||lv.system_hub_key||"",
        system_hub_info_subject_id:lv.system_hub_info_subject_id||"",
        system_form_design_subject_id:lv.system_form_design_subject_id||"",
        business_hub_key:lv.business_hub_key||"",
        business_hub_id:lv.business_hub_id||lv.business_hub_key||"",
        business_hub_info_subject_id:lv.business_hub_info_subject_id||"",
        business_form_design_subject_id:lv.business_form_design_subject_id||"",
        personality_form_definition:(PERSONALITY_LEVEL_FORMS.definitions||{})[lid]||null,
        personality_form_values:(PERSONALITY_LEVEL_FORMS.values||{})[lid]||{},
        open:true,children:[]
      });
      children(parent).push(level);

      /* v31c112: System Hub control records stay registered for direct contextual
         access, but are no longer shown as ordinary tables in the spine tree. */
      register({
        id:lid+"::info",type:"level-info",label:"_level_info",levelId:lid,
        subjectId:lv.system_hub_info_subject_id||"",
        owningInstance:lv.instance_address||"",
        tail:"",open:false,children:[]
      });
      register({
        id:lid+"::form",type:"form-design",label:"_form_design (Business Records)",levelId:lid,
        subjectId:hubIdForLevel(lv)?hubIdForLevel(lv)+"::form-design":"",
        hubId:hubIdForLevel(lv)||"",
        owningInstance:lv.instance_address||"",
        tail:"",open:false,children:[]
      });
      /* v31c112: the canonical Business Hub remains registered because it is
         the Level's record/schema object, but its redundant tree row is hidden.
         Clicking the Level now opens this canonical Hub's records browse. */
      register({
        id:lid+"::business-hub",type:"business-hub",
        label:"Business Hub — "+(lv.label||lid),levelId:lid,
        key:lv.business_hub_key||"",open:false,children:[]
      });

      parent=level;
    });
    Object.keys(model.byId).forEach(function(id){
      var n=model.byId[id];
      if(n.type==="instance-header"){
        var levels=(n.level_numbers||[]).slice().sort(function(a,b){return b-a;}).join(", ");
        n.label=(n.instance_address||"(no instance address)")+" — Level(s) "+levels;
      }
    });
    model.root=root;
  }

  function makeNode(n){
    var wrap=document.createElement("div");
    wrap.className="tree-node"+(n.open?" open":"")+(n.type==="instance-header"?" cee-tier-node":"");
    var row=document.createElement("div");
    row.className="tree-row"+(n.type==="level"?" tier-hdr":"");
    var has=(n.children||[]).length>0;
    var twist=document.createElement("span");
    twist.className="twisty"; twist.textContent=has?(n.open?"▾":"▸"):"";
    var icon=null;
    if(n.type!=="level"){
      icon=document.createElement("span"); icon.className="tree-icon";
      icon.textContent=n.type==="root"?"▣":
        n.type==="system-hub"?"▤":n.type==="business-hub"?"●":
        n.type==="instance-header"?"▥":"◇";
    }
    var label=document.createElement("span"); label.className="tree-label"; label.textContent=n.label;
    row.appendChild(twist);
    if(icon) row.appendChild(icon);
    row.appendChild(label);
    if(n.type==="instance-header"){
      var healthPill=document.createElement("span");
      healthPill.className="cee-tier-health checking"; healthPill.textContent="…";
      healthPill.id="cee-tier-health::"+n.id;
      row.appendChild(healthPill);
      var testBtn=document.createElement("button");
      testBtn.className="btn cee-tier-test-btn"; testBtn.textContent="Test"; testBtn.style.marginLeft="6px";
      testBtn.setAttribute("data-instance-header-id",n.id);
      testBtn.onclick=function(e){ e.stopPropagation(); openInstanceDiagnosticsForNode(n.id); };
      row.appendChild(testBtn);
    }
    row.onclick=function(){
      if(n.type==="level") openBusinessBrowse(n.id,null);
      else showDetail(n);
    };
    if(n.type==="level-info"||n.type==="form-design"){
      row.ondblclick=function(e){e.stopPropagation();openEditor(n);};
    }else if(n.type==="business-hub"){
      row.ondblclick=function(e){e.stopPropagation();openBusinessBrowse(n.levelId,null);};
    }
    if(has){
      twist.onclick=function(e){
        e.stopPropagation();n.open=!n.open;wrap.classList.toggle("open",n.open);
        twist.textContent=n.open?"▾":"▸";
      };
    }
    wrap.appendChild(row);
    if(has){
      var kids=document.createElement("div"); kids.className="tree-children";
      n.children.forEach(function(c){kids.appendChild(makeNode(c));});
      wrap.appendChild(kids);
    }
    return wrap;
  }

  function renderTree(){
    var host=document.getElementById("tree"); host.innerHTML="";
    host.appendChild(makeNode(model.root));
  }
  function normalizeInstanceAddr(raw){
    raw=String(raw||"").trim();
    if(!raw) return "";
    return /^https?:\/\//i.test(raw)?raw.replace(/\/$/,""):"http://"+raw.replace(/\/$/,"");
  }
  /* v31c5 (claude): same /api/health call already used elsewhere for tier
     probes -- it returns instance_id (durable) and, as of this session,
     instance_name too, in one round trip. Updates the pill and, once
     resolved, prefixes the friendly name onto the row's label in place. */
  async function testCeeInstanceNode(nodeId, silent){
    var n=model.byId[nodeId];
    if(!n) return;
    var pill=document.getElementById("cee-tier-health::"+n.id);
    var btns=document.querySelectorAll('.cee-tier-test-btn[data-instance-header-id="'+n.id+'"]');
    var addr=normalizeInstanceAddr(n.instance_address);
    if(!addr){
      if(pill){pill.className="cee-tier-health fail"; pill.textContent="NO ADDR";}
      if(!silent) toast("No instance address for this group.","err");
      return;
    }
    if(pill){pill.className="cee-tier-health checking"; pill.textContent="…";}
    btns.forEach(function(b){ b.disabled=true; b.textContent="Testing…"; });
    var levels=(n.level_numbers||[]).slice().sort(function(a,b){return b-a;}).join(", ");
    try{
      var resp=await fetch(addr+"/api/health",{method:"GET",headers:{Accept:"application/json"},cache:"no-store"});
      var json=await resp.json().catch(function(){return null;});
      if(resp.ok && json && json.ok===true){
        n.instance_id=json.instance_id||null;
        n.instance_name=json.instance_name||null;
        n.label=(n.instance_name?n.instance_name+" — ":"")+n.instance_address+" — Level(s) "+levels;
        var wrapEl=pill && pill.closest(".tree-row");
        var lbl=wrapEl && wrapEl.querySelector(".tree-label");
        if(lbl) lbl.textContent=n.label;
        if(json.db_open===false){
          if(pill){pill.className="cee-tier-health fail"; pill.textContent="DB CLOSED";}
          if(!silent) toast((n.instance_name||addr)+" — server alive, DB closed (restart required)","err");
        }else{
          if(pill){pill.className="cee-tier-health ok"; pill.textContent="OK";}
          if(!silent) toast((n.instance_name||addr)+" — healthy","ok");
        }
      }else{
        if(pill){pill.className="cee-tier-health fail"; pill.textContent="HTTP "+resp.status;}
        if(!silent) toast("Test failed for "+addr+" — HTTP "+resp.status,"err");
      }
    }catch(e){
      if(pill){ pill.className="cee-tier-health fail"; pill.textContent="FAIL"; }
      if(!silent) toast("Test failed for "+addr+" — "+(e.message||e),"err");
    }finally{
      btns.forEach(function(b){ b.disabled=false; b.textContent="Test"; });
    }
  }

  /* v31c8 (claude): /api/enterprise/spine/environment/status already returns
     both acceptance and production summaries (exists/genesis_key/completed/
     validated) in one call -- the real mechanism the handoff notes flagged,
     not the fictional /manifest endpoint from earlier sessions. Cached on
     window._envStatus so switching tabs re-renders instantly without a
     second fetch; only the tree itself (a genuinely different, larger
     payload) is re-fetched on tab switch, via loadTree(root). */
  function envStatusRow(k,v){
    return '<div style="display:flex;gap:8px;padding:2px 0"><span style="color:var(--text3);min-width:90px;flex-shrink:0">'+esc(k)+'</span><span style="color:var(--text2)">'+esc(v)+'</span></div>';
  }
  function renderEnvStatusBody(root){
    var summary=(window._envStatus||{})[root];
    var bodyEl=document.getElementById("envStatusBody");
    if(!bodyEl) return;
    if(!summary || summary.exists!==true){
      bodyEl.innerHTML='<div style="color:var(--text3)">No completed '+esc(root)+' revision found'+(summary&&summary.label?' for label "'+esc(summary.label)+'"':'')+'.</div>';
      return;
    }
    var cur=summary.current||{};
    bodyEl.innerHTML=
      envStatusRow("Label",summary.label||"(none)")+
      envStatusRow("Genesis key",summary.genesis_key||"—")+
      envStatusRow("Completed",summary.completed?"Yes":"No")+
      envStatusRow("Validated",summary.validated?"Yes":"No")+
      (cur.status?envStatusRow("Status",cur.status):"")+
      (cur.completion_cu_key?envStatusRow("Completion CU",cur.completion_cu_key):"");
  }
  function updateEnvPill(root){
    var pill=document.getElementById(root+"StatusPill");
    var summary=(window._envStatus||{})[root];
    if(!pill) return;
    if(summary && summary.exists===true){ pill.className="env-status-pill yes"; pill.textContent="EXISTS"; }
    else{ pill.className="env-status-pill no"; pill.textContent="NONE"; }
  }
  window.switchEnvTab=function(root){
    document.getElementById("envTabAcceptance").classList.toggle("active",root==="acceptance");
    document.getElementById("envTabProduction").classList.toggle("active",root==="production");
    renderEnvStatusBody(root);
    if(context.environmentRoot!==root){
      context.environmentRoot=root;
      var el=document.getElementById("tree");
      if(el) el.textContent="Loading…";
      loadTree().catch(function(e){
        if(el) el.innerHTML='<div style="color:var(--red)">'+esc(e.message||e)+'</div>';
      });
    }
  };
  async function loadEnvironmentStatus(){
    var bodyEl=document.getElementById("envStatusBody");
    try{
      var j=await getJson("/api/enterprise/spine/environment/status?label="+encodeURIComponent(context.environmentLabel));
      window._envStatus={acceptance:j.acceptance, production:j.production};
      updateEnvPill("acceptance"); updateEnvPill("production");
      renderEnvStatusBody(context.environmentRoot);
    }catch(e){
      if(bodyEl) bodyEl.innerHTML='<div style="color:var(--red)">Failed to load: '+esc(e.message||e)+'</div>';
    }
  }
  function card(title,rows,actions,note){
    return '<div class="card"><div class="card-hdr"><span class="card-title">'+esc(title)+
      '</span></div><div class="card-body"><div class="kv">'+
      rows.map(function(r){return '<span class="k">'+esc(r[0])+'</span><span class="tail-hash">'+esc(r[1])+'</span>';}).join("")+
      '</div>'+(note?'<div class="small-muted" style="margin-top:10px">'+esc(note)+'</div>':'')+
      '<div class="action-row">'+(actions||"")+'</div></div></div>';
  }
  function showDetail(n){
    var title=document.getElementById("editor-title"),sub=document.getElementById("editor-sub"),host=document.getElementById("editor");
    var owningLevel=(n.levelId&&model.byId[n.levelId])?model.byId[n.levelId]:null;
    var systemSpokeTitle=(n.type==="level-info"||n.type==="form-design")
      ? n.label+" — "+(owningLevel?owningLevel.label:n.levelId||"Unknown Level")
      : n.label;
    title.textContent=systemSpokeTitle; sub.textContent=n.type;
    if(n.type==="level-info"){
      host.innerHTML=card("Level Info System Spoke",
        [["Subject",n.subjectId],["Loaded tail",n.tail||"not loaded"]],
        '<button class="btn primary" onclick="CEE20.edit(\''+esc(n.id)+'\')">Edit _level_info</button>');
    }else if(n.type==="form-design"){
      host.innerHTML=card("Business Record Form Design",
        [["Subject",n.subjectId],["Loaded tail",n.tail||"not loaded"]],
        '<button class="btn primary" onclick="CEE20.edit(\''+esc(n.id)+'\')">Form Definition</button>');
    }else if(n.type==="system-hub"){
      var lv=model.byId[n.levelId];
      host.innerHTML=card("System Hub",
        [["Level",lv?lv.label:n.levelId],["Hub key",n.key||"n/a"]],
        '<button class="btn primary" onclick="CEE20.edit(\''+esc(n.levelId+'::info')+'\')">Edit Level Info</button>'+
        '<button class="btn primary" onclick="CEE20.edit(\''+esc(n.levelId+'::form')+'\')">Edit Form Design</button>',
        "System Hub configuration is edited through its governed system spokes.");
    }else if(n.type==="business-hub"){
      host.innerHTML=card("Business Hub",
        [["Level",model.byId[n.levelId].label],["Hub key",n.key||"n/a"]],
        '<button class="btn primary" onclick="CEE20.openBrowse(\''+esc(n.levelId)+'\',null)">Open Business Records</button>',
        "Records are loaded explicitly from the owning Chandra instance. No polling is active.");
    }else if(n.type==="instance-header"){
      var levels2=(n.level_numbers||[]).slice().sort(function(a,b){return b-a;}).join(", ");
      host.innerHTML=card("Instance",
        [["Address",n.instance_address||"(none)"],["Instance name",n.instance_name||"(not tested yet)"],
         ["Instance id",n.instance_id||"(not tested yet)"],["Level(s)",levels2||"(none)"]],
        '<button class="btn cee-tier-test-btn" data-instance-header-id="'+esc(n.id)+'" onclick="CEE20.openInstanceDiagnostics(\''+esc(n.id)+'\')">Test</button>',
        "Grouping row only — not a real tree entity. instance_id/instance_name come from a live /api/health probe against the address above.");
    }else{
      host.innerHTML=card(n.type==="root"?(n.environmentRoot==="production"?"Production Spine":"Acceptance Spine"):"Level",
        [["Label",n.label],["Genesis",n.genesis_key||model.payload.genesis_key||""],
         ["Instance",n.instance_address||""],["System Hub",n.system_hub_key||""],["Business Hub",n.business_hub_key||""]],"");
    }
  }

  function modalViewportSize(){
    var vv=window.visualViewport;
    return {
      width:Math.max(1,Math.floor(vv?vv.width:window.innerWidth)),
      height:Math.max(1,Math.floor(vv?vv.height:window.innerHeight)),
      offsetLeft:Math.floor(vv?vv.offsetLeft:0),
      offsetTop:Math.floor(vv?vv.offsetTop:0)
    };
  }
  function clampEditModalPosition(left,top){
    var m=document.getElementById("edit-modal"),vp=modalViewportSize();
    if(!m)return {left:left,top:top};
    var maxLeft=vp.offsetLeft+Math.max(0,vp.width-m.offsetWidth);
    var maxTop=vp.offsetTop+Math.max(0,vp.height-m.offsetHeight);
    return {
      left:Math.max(vp.offsetLeft,Math.min(maxLeft,left)),
      top:Math.max(vp.offsetTop,Math.min(maxTop,top))
    };
  }
  function centerEditModal(){
    var m=document.getElementById("edit-modal"),vp=modalViewportSize();
    if(!m)return;
    m.classList.add("modal-positioned");
    var p=clampEditModalPosition(
      vp.offsetLeft+Math.max(0,(vp.width-m.offsetWidth)/2),
      vp.offsetTop+Math.max(0,(vp.height-m.offsetHeight)/2)
    );
    m.style.left=Math.round(p.left)+"px";
    m.style.top=Math.round(p.top)+"px";
  }
  function installEditModalDrag(){
    var m=document.getElementById("edit-modal"),hdr=document.getElementById("edit-hdr");
    if(!m||!hdr||hdr.dataset.dragInstalled==="1")return;
    hdr.dataset.dragInstalled="1";
    var dragging=false,dx=0,dy=0,pointerId=null;
    hdr.addEventListener("pointerdown",function(e){
      if(e.button!==0||e.target.closest("button,input,select,textarea,a"))return;
      var r=m.getBoundingClientRect();
      m.classList.add("modal-positioned");
      m.style.left=Math.round(r.left)+"px";
      m.style.top=Math.round(r.top)+"px";
      dragging=true;pointerId=e.pointerId;dx=e.clientX-r.left;dy=e.clientY-r.top;
      try{hdr.setPointerCapture(pointerId);}catch(_e){}
      e.preventDefault();
    });
    hdr.addEventListener("pointermove",function(e){
      if(!dragging||e.pointerId!==pointerId)return;
      var p=clampEditModalPosition(e.clientX-dx,e.clientY-dy);
      m.style.left=Math.round(p.left)+"px";
      m.style.top=Math.round(p.top)+"px";
    });
    function stop(e){
      if(!dragging||(e&&e.pointerId!==pointerId))return;
      dragging=false;
      try{hdr.releasePointerCapture(pointerId);}catch(_e){}
      pointerId=null;
      var p=clampEditModalPosition(m.offsetLeft,m.offsetTop);
      m.style.left=Math.round(p.left)+"px";
      m.style.top=Math.round(p.top)+"px";
    }
    hdr.addEventListener("pointerup",stop);
    hdr.addEventListener("pointercancel",stop);
    window.addEventListener("resize",function(){
      if(!document.getElementById("edit-backdrop").classList.contains("show"))return;
      var p=clampEditModalPosition(m.offsetLeft,m.offsetTop);
      m.style.left=Math.round(p.left)+"px";
      m.style.top=Math.round(p.top)+"px";
    });
    if(window.visualViewport)window.visualViewport.addEventListener("resize",function(){
      if(!document.getElementById("edit-backdrop").classList.contains("show"))return;
      var p=clampEditModalPosition(m.offsetLeft,m.offsetTop);
      m.style.left=Math.round(p.left)+"px";
      m.style.top=Math.round(p.top)+"px";
    });
  }
  function modal(title,html){
    var modalShell=document.getElementById("edit-modal");
    if(modalShell){modalShell.classList.remove("fixture-result-modal");modalShell.classList.remove("import-preview-modal");}
    document.getElementById("edit-title").textContent=title;
    document.getElementById("edit-body").innerHTML=html;
    document.getElementById("edit-backdrop").classList.add("show");
    installEditModalDrag();
    requestAnimationFrame(centerEditModal);
  }
  window.closeEditModal=function(){
    var m=document.getElementById("edit-modal");
    if(m){
      m.classList.remove("artifact-history-modal");
      m.classList.remove("saved-searches-modal");
      m.classList.remove("fixture-result-modal");
      m.classList.remove("import-preview-modal");
      m.classList.remove("modal-positioned");
      m.style.removeProperty("left");
      m.style.removeProperty("top");
    }
    document.getElementById("edit-backdrop").classList.remove("show");
  };

  function decodeArtifact(j){
    var a=j && (j.artifact||j.current||j.data||j);
    if(a && typeof a.artifact_json==="string"){
      try{a=JSON.parse(a.artifact_json);}catch(e){}
    }
    return a||{};
  }
  function endpointBaseForSpoke(n){
    if(n && (n.type==="form-design"||n.type==="level-info") && n.owningInstance){
      var raw=String(n.owningInstance).trim();
      return /^https?:\/\//i.test(raw)?raw.replace(/\/$/,""):"http://"+raw.replace(/\/$/,"");
    }
    return "";
  }

  function spokeUrl(n,path){
    return endpointBaseForSpoke(n)+path;
  }

  function capabilityValue(source,right,defaultValue){
    var caps=(source&&source.capabilities)||{};
    return Object.prototype.hasOwnProperty.call(caps,right)?!!caps[right]:defaultValue;
  }
  function editorMode(source,viewRight,editRight){
    var canView=capabilityValue(source,viewRight,true);
    var canEdit=capabilityValue(source,editRight,true);
    return canEdit?"edit":(canView?"view":"hidden");
  }
  function applyReadOnlyFormDesigner(n){
    var body=document.getElementById("edit-body");
    if(!body)return;
    body.querySelectorAll("input,select,textarea,button").forEach(function(el){
      if(el.closest(".action-row")&&/close/i.test(el.textContent||""))return;
      if(el.classList.contains("field-help-btn")||el.classList.contains("help-dot"))return;
      el.disabled=true;
    });
    body.querySelectorAll(".danger").forEach(function(el){el.style.display="none";});
    body.querySelectorAll("[onclick*='addField'],[onclick*='saveForm'],[onclick*='removeField']").forEach(function(el){el.style.display="none";});
    var title=document.getElementById("edit-title");
    if(title&&!/Read Only/.test(title.textContent))title.textContent=title.textContent+" · Read Only";
    var notice=document.createElement("div");
    notice.className="card";
    notice.style.marginBottom="10px";
    notice.innerHTML='<div class="card-body"><strong>Read-only access</strong><div class="small-muted">You can inspect this definition but do not have permission to modify it.</div></div>';
    body.insertBefore(notice,body.firstChild);
  }

  /* ChatGPT 20260720-13: one canonical route into Form Designer. Discovery
     may begin in the Level tree, a next-Level relationship, or a same-Level
     sub-Hub, but the editor itself receives the same normalized Hub identity. */
  function normalizeHubFormDescriptor(source){
    source=source||{};
    var levelId=source.levelId||source.level_id||"";
    var level=levelId?model.byId[levelId]:null;
    var hubId=source.hubId||source.hub_id||source.business_hub_id||"";
    if(!hubId && source.type==="form-design" && level) hubId=hubIdForLevel(level)||"";
    if(!hubId && source.type==="business-hub" && level) hubId=hubIdForLevel(level)||"";
    if(!hubId && source.type==="sub-hub") hubId=source.id||"";
    if(!levelId && hubId && model.byId[hubId]) levelId=hubId;
    level=levelId?model.byId[levelId]:level;
    var owningInstance=source.owningInstance||source.instanceBase||source.instance_base||source.instance_address||(level&&level.instance_address)||"";
    var label=source.hubLabel||source.label||(level&&(level.rawLabel||level.label))||hubId||"Hub";
    if(!hubId) throw new Error("No canonical hub_id is available for "+label+".");
    if(!owningInstance) throw new Error("No owning instance is available for "+label+".");
    return {
      hubId:hubId,
      levelId:levelId||hubId,
      owningInstance:owningInstance,
      hubLabel:label,
      placementType:source.placementType||source.placement_type||"unspecified",
      source:source.source||"unknown"
    };
  }
  window.openHubFormDesigner=function(source){
    var d;
    try{d=normalizeHubFormDescriptor(source);}catch(e){toast(e.message||String(e),"err");return;}
    var nodeId=d.hubId+"::form-design";
    var node=model.byId[nodeId]||{};
    Object.assign(node,{
      id:nodeId,
      type:"form-design",
      label:"_form_design — "+d.hubLabel,
      levelId:d.levelId,
      hubId:d.hubId,
      subjectId:nodeId,
      owningInstance:d.owningInstance,
      placementType:d.placementType,
      sourceRoute:d.source,
      capabilities:source.capabilities||node.capabilities||{},
      _editorMode:editorMode(source,"hub.view_schema","hub.edit_schema"),
      _canonicalHubDescriptor:true,
      tail:node.tail||""
    });
    model.byId[nodeId]=node;
    return openEditor(node);
  };

  async function loadSpoke(n){
    if(n.type==="level-info" && !n.subjectId){
      throw new Error("The Acceptance tree did not return this Level's native system_hub_info_subject_id. Load the native-identity tree backend patch and reload CEE.");
    }
    if(n.type==="form-design"){
      var lv=model.byId[n.levelId],hubId=n.hubId||hubIdForLevel(lv);
      if(!hubId)throw new Error("No hub_id resolvable for "+(lv&&lv.label||n.levelId)+" -- cannot load form design.");
      var j=await getJson(spokeUrl(n,"/api/enterprise/hub/form-design/latest?hub_id=")+encodeURIComponent(hubId));
      n.tail=j.tail_hash||"";
      try{return decodeArtifact(j);}catch(e){return {};}
    }
    var tail=await getJson(spokeUrl(n,"/api/enterprise/level-system/current-tail?subject_id=")+encodeURIComponent(n.subjectId));
    n.tail=tail.tail_hash||tail.cu_id||"";
    try{
      var latest=await getJson(spokeUrl(n,"/api/enterprise/level-system/latest?subject_id=")+encodeURIComponent(n.subjectId));
      return decodeArtifact(latest);
    }catch(e){return {};}
  }

  async function openEditor(n){
    if(n&&n.type==="form-design"&&!n._canonicalHubDescriptor)return window.openHubFormDesigner(n);
    if(n&&n._editorMode==="hidden"){toast("You do not have permission to view this artifact.","err");return;}
    var lv=model.byId[n.levelId];
    modal("Loading "+n.label+"…",'<div class="small-muted">Reading current CU state…</div><div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button></div>');
    try{
      var artifact=await loadSpoke(n);
      if(n.type==="level-info"){
        var current=(artifact&&typeof artifact==="object")?artifact:{};
        /* v31c3 (claude, applied for real this time): level_info is a fixed,
           universal record -- name/status/description, always, on every
           Level, regardless of industry personality. It is NOT
           personality-derived data (that belongs to _form_design). This
           branch previously read lv.personality_form_definition/
           personality_form_values here -- backwards from the actual
           architectural decision made several turns of design discussion
           ago (level_info shows this fixed 3-field set; form_design shows
           the personality schema). That decision was discussed at length
           but the real code change never landed until now -- confirmed
           missing by checking this exact file, not assumed done.
           Genesis shape (ent-native-materialize-system-hub, backend):
           content is {..., source_request: <raw POST body>}, and the
           corrected spine-editor.html sends {name,status,description}
           directly in that body (not nested under level_form_values --
           that nesting only ever existed in the old contaminated payload
           this whole investigation started from). A prior human edit
           (CEE20.saveInfo) instead writes {values:{name,status,description}}
           at the top level. Check both real shapes, genesis first since
           an edit CU supersedes it via normal latest-CU resolution. */
        var sr=current.source_request||{};
        var ev=current.values||{};
        var values={
          name: ev.name!=null?ev.name:(sr.name!=null?sr.name:(current.name!=null?current.name:(current.label||lv.rawLabel||""))),
          status: ev.status!=null?ev.status:(sr.status!=null?sr.status:(current.status!=null?current.status:"active")),
          description: ev.description!=null?ev.description:(sr.description!=null?sr.description:(current.description!=null?current.description:""))
        };
        model.drafts[n.id]={values:values};

        var statusOpts=["active","suspended","retired"];
        /* ChatGPT 20260720-02: fixed _level_info fields use stable CU-backed
           Help Context identities rather than form-design field identities. */
        function levelInfoHelpButton(fieldName,fieldLabel){
          var meta=levelInfoHelpMeta(fieldName,fieldLabel,n.levelId);
          return '<button type="button" class="help-dot" title="Field help" onclick="event.preventDefault();event.stopPropagation();openLevelInfoHelp(\''+esc(fieldName)+'\',\''+esc(fieldLabel)+'\',\''+esc(n.levelId)+'\',this)">?</button>';
        }
        var html=
          '<div class="field"><label><span class="field-label-help"><span>Name</span>'+levelInfoHelpButton('name','Name')+'</span></label><input data-level-field="name" value="'+esc(values.name)+'" required></div>'+
          '<div class="field"><label><span class="field-label-help"><span>Status</span>'+levelInfoHelpButton('status','Status')+'</span></label><select data-level-field="status">'+
            statusOpts.map(function(o){return '<option value="'+o+'"'+(values.status===o?' selected':'')+'>'+o.charAt(0).toUpperCase()+o.slice(1)+'</option>';}).join('')+
          '</select></div>'+
          '<div class="field full"><label><span class="field-label-help"><span>Description</span>'+levelInfoHelpButton('description','Description')+'</span></label>'+markdownTextareaHtml('level-info-description','description',values.description)+'</div>';

        modal("Edit _level_info · "+lv.label,
          '<div class="card"><div class="card-body">'+
          '<div class="small-muted" style="margin-bottom:10px">Defines the identity, lifecycle state, and purpose of this Level. Use the help beside each field for guidance specific to that value.</div>'+
          '<div class="form-grid">'+html+'</div>'+
          '<div class="kv" style="margin-top:10px"><span class="k">Loaded tail</span><span class="tail-hash">'+esc(n.tail||"first write")+'</span></div>'+
          '<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button>'+
          '<button class="btn primary" onclick="CEE20.saveInfo(\''+esc(n.id)+'\')">Append Level Info CU</button></div></div></div>');
      }else{
        /* v31c3 (claude): looksLikeLegacyLevelMetadataForm removed. It
           flagged form_design content as "contaminated" whenever it
           contained personality-derived field names like
           wsp_section_family/supervisory_principal_required/etc -- exactly
           the fields a WSP-context Level's REAL, correctly-seeded
           form_design is supposed to contain under the corrected
           architecture (personality data belongs in form_design, not
           level_info). That made it a guaranteed false positive for every
           WSP-context Level (12, 8, 3) and any other Level whose real
           schema happened to hit 3+ of those field names -- discarding
           genuinely correct genesis data and silently replacing it with
           the generic starter that used to live here.
           claude (2026-07-19): that starter is now REMOVED entirely, not
           just warned about. Confirmed live: it generated a
           name/status/description template indistinguishable from real
           content, a human clicked "Append Form Design CU" with zero
           indication it wasn't genuine personality-derived data, and it
           became permanently published, locked, and impossible to tell
           apart from real content afterward -- for at least one hub,
           tonight. James's explicit call: the business record form does
           not care what a personality file says, at all -- the ONLY
           contract is Form Designer writes _form_design, record editor
           reads _form_design, full stop. Any code that invents fields
           on behalf of a human is smothering the fact that no form has
           actually been designed yet, and gets ripped out rather than
           softened. When no real form_design exists yet, the draft
           starts genuinely empty -- fields:[] -- and drawFormEditor's
           existing "No fields yet — use Add Field below" state (already
           there, unchanged) is what a person sees. Nothing gets invented
           on their behalf; nothing can be saved without them explicitly
           building it field by field. */
        var draft=(artifact && Array.isArray(artifact.fields))?artifact:{
          name:(lv.rawLabel||"Level")+" Business Record Form",
          fields:[]
        };
        model.drafts[n.id]=JSON.parse(JSON.stringify(draft));
        model.drafts[n.id]._persisted_field_ids=(artifact&&Array.isArray(artifact.fields)?artifact.fields:[]).filter(function(f){return valid256BitId(f.field_id);}).map(function(f){return f.field_id;});
        model.drafts[n.id]._retired_fields=[];model.drafts[n.id]._form_was_persisted=!!n.tail;
        ensureDraftSchemaIds(model.drafts[n.id]);drawFormEditor(n);
        if(n._editorMode==="view")setTimeout(function(){applyReadOnlyFormDesigner(n);},0);
      }
    }catch(e){
      modal("Could not open "+n.label,'<div class="card"><div class="card-body" style="color:var(--red)">'+esc(e.message||e)+'</div>'+
        '<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');
    }
  }

  function renderSelectOptionsEditor(nodeId,fieldIndex,f){
    var opts=Array.isArray(f.options)?f.options:[];
    var rows=opts.map(function(o,j){
      var retired=String(o.status||"active").toLowerCase()==="retired";
      var idChip=valid256BitId(o.id)?(String(o.id).slice(0,8)+"\u2026"+String(o.id).slice(-6)):"(new \u2014 id assigned on publish)";
      return '<div class="select-option-editrow'+(retired?' retired':'')+'">'+
        '<input class="opt-label-input" value="'+esc(o.label||"")+'" placeholder="Option label" oninput="CEE20.optionLabel(\''+nodeId+'\','+fieldIndex+','+j+',this.value)">'+
        '<span class="opt-id-chip" title="'+esc(String(o.id||""))+'">'+esc(idChip)+'</span>'+
        '<button type="button" class="btn'+(retired?'':' danger')+'" onclick="CEE20.optionRetireToggle(\''+nodeId+'\','+fieldIndex+','+j+')" title="'+(retired?'Bring this option back into active use.':'Options are never deleted, only retired: the id/label stays resolvable for any existing record that already holds it, but it drops out of the list for new selections.')+'">'+(retired?'Reactivate':'Retire')+'</button>'+
      '</div>';
    }).join("");
    return '<div class="select-options-row select-options-editor"><span class="opt-label">Options</span><div class="select-options-list">'+rows+
      '<div class="select-options-list-actions"><button type="button" class="btn" onclick="CEE20.optionAdd(\''+nodeId+'\','+fieldIndex+')">+ Add option</button>'+
      '<button type="button" class="btn" onclick="CEE20.optionBulkAdd(\''+nodeId+'\','+fieldIndex+')" title="Adds new options only. Never touches, renames, or removes existing ones.">+ Add several\u2026</button></div>'+
      '<div class="opt-meta">Options are never deleted, only retired \u2014 existing records keep their real id/label and stay resolvable. Retiring hides an option from new selections without touching records that already hold it.</div>'+
      '</div></div>';
  }
  var activeFormEditorNodeId="";
  function drawFormEditor(n){
    try{if(document.activeElement&&document.activeElement.blur)document.activeElement.blur();}catch(_e){}
    activeFormEditorNodeId=n.id;
    var lv=model.byId[n.levelId],d=ensureDraftSchemaIds(model.drafts[n.id]);
    var persistedIds=d._persisted_field_ids||[];
    var rows=(d.fields||[]).map(function(f,i){
      var isRetired=fieldIsRetired(f);
      var isLocked=!!(f.field_id&&persistedIds.indexOf(f.field_id)>=0);
      var controlsLocked=isLocked||isRetired;
      var previewName=f.name||deriveIndexedName(f.label||"");
      var isCalc=fieldIsCalculated(f);
      return '<div class="field-card'+(f.name?'':' is-empty-name')+(isRetired?' field-card-retired':'')+'">'+
        (isRetired?'<div style="margin-bottom:6px"><span class="fc-retired-badge">Retired</span><span class="small-muted"> Kept on Form Definition; ignored by browse/find/forms.</span></div>':'')+
        (isCalc&&!isRetired?'<div style="margin-bottom:6px"><span class="fc-calculated-badge">Calculated</span><span class="small-muted"> Value is computed from formula on save; not user-editable on records.</span></div>':'')+
        '<div class="form-field-row">'+
          '<div class="fc-field fc-name"><label>Indexed name <span class="small-muted">(derived)</span></label><input class="fc-indexed-preview" value="'+esc(previewName)+'" readonly title="Derived from Label -- not editable directly. The backend is authoritative for the stored value; this is a live preview."></div>'+
          '<div class="fc-field fc-label'+(isLocked?' is-locked':'')+'"><label>Label'+(isLocked?' 🔒':'')+'</label><input value="'+esc(f.label||"")+'"'+(isLocked?' readonly title="Published — its indexed name is a live schema key already in use by existing records. Retire this field and add a new one to rename it."':' oninput="CEE20.field(\''+n.id+'\','+i+',\'label\',this.value);CEE20.field(\''+n.id+'\','+i+',\'name\',CEE20.deriveIndexedName(this.value));this.closest(\'.field-card\').querySelector(\'.fc-indexed-preview\').value=CEE20.deriveIndexedName(this.value)"')+'></div>'+
          '<div class="fc-field fc-type"><label>Type</label><select '+(controlsLocked?'disabled title="Locked on published/retired fields."':'onchange="CEE20.field(\''+n.id+'\','+i+',\'type\',this.value)"')+'>'+
            [["text","Text"],["markdown","Markdown (rich text)"],
             ["select","Select (single)"],["multi_select","Select (multiple)"],
             ["integer","Number (integer)"],["list<integer>","Number list"],
             ["boolean","Boolean"],["date","Date"],["file","File attach"]]
              .map(function(t){return '<option value="'+t[0]+'"'+((f.type||"text")===t[0]?" selected":"")+'>'+t[1]+'</option>';}).join("")+
          '</select></div>'+
          '<div class="fc-actions">'+
            '<button type="button" class="btn field-help-btn" data-field-help-node="'+esc(n.id)+'" data-field-help-index="'+i+'" title="Edit contextual help for this field">? help</button>'+
            (isRetired?'<button class="btn" disabled title="Already retired">Retired</button>':'<button class="btn danger" onclick="CEE20.removeField(\''+n.id+'\','+i+')" title="'+(isLocked?'Retire published field (kept with retired=true)':'Remove field')+'">'+(isLocked?'Retire':'×')+'</button>')+
          '</div>'+
        '</div>'+
        (isRetired?'<div class="fc-lock-note">Retired — retired=true is persisted on the Form Definition. Add a new field (new indexed name) to supersede.</div>':(isLocked?'<div class="fc-lock-note">Locked — published. Use Retire, then add a new field to rename.</div>':''))+
        '<div class="field-card-meta">'+
          '<div class="fc-toggle'+(f.required?' on':'')+'"><label>Required</label><select onchange="CEE20.field(\''+n.id+'\','+i+',\'required\',this.value===\'true\')"><option value="true"'+(f.required?" selected":"")+'>yes</option><option value="false"'+(!f.required?" selected":"")+'>no</option></select></div>'+
          ((String(f.type||'')==='integer'||String(f.type||'')==='number')
            ? '<div class="fc-toggle'+(isCalc?' on':'')+'"><label>Calculated</label><select '+(controlsLocked?'disabled title="Locked on published/retired fields. Retire and add a new field to change calculated/formula."':'onchange="CEE20.field(\''+n.id+'\','+i+',\'calculated\',this.value===\'true\')"')+'><option value="true"'+(isCalc?" selected":"")+'>yes</option><option value="false"'+(!isCalc?" selected":"")+'>no</option></select></div>'
            : '')+
          '<div class="fc-toggle'+(f.indexed?' on':'')+'"><label>Indexed</label><select onchange="CEE20.field(\''+n.id+'\','+i+',\'indexed\',this.value===\'true\')"><option value="true"'+(f.indexed?" selected":"")+'>yes</option><option value="false"'+(!f.indexed?" selected":"")+'>no</option></select></div>'+
          '<div class="fc-toggle"><label>Sort</label><select onchange="CEE20.field(\''+n.id+'\','+i+',\'sort\',this.value)"><option value="asc"'+((f.sort||"asc")==="asc"?" selected":"")+'>ASC</option><option value="desc"'+(f.sort==="desc"?" selected":"")+'>DESC</option></select></div>'+
          ((f.type==="text"||!f.type)?'<div class="fc-toggle'+(f.text_case&&f.text_case!=="none"?' on':'')+'"><label>Case</label><select onchange="CEE20.field(\''+n.id+'\','+i+',\'text_case\',this.value)"><option value="none"'+((f.text_case||"none")==="none"?" selected":"")+'>None</option><option value="upper"'+(f.text_case==="upper"?" selected":"")+'>UPPERCASE</option><option value="lower"'+(f.text_case==="lower"?" selected":"")+'>lowercase</option><option value="title"'+(f.text_case==="title"?" selected":"")+'>Title Case</option></select></div>':'')+
          ((f.type==="boolean"||f.type==="checkbox")?'<div class="fc-toggle'+(booleanDisplayMode(f)!=="true_false"?' on':'')+'"><label>Boolean display</label><select onchange="CEE20.field(\''+n.id+'\','+i+',\'boolean_display\',this.value)">'+BOOLEAN_DISPLAY_OPTIONS.map(function(opt){return '<option value="'+opt.value+'"'+(booleanDisplayMode(f)===opt.value?' selected':'')+'>'+opt.label+'</option>';}).join('')+'</select></div>':'')+
        '</div>'+
        ((String(f.type||'')==='integer'&&!fieldIsCalculated(f)&&!fieldIsRetired(f))?renderIntegerEntryEditor(n.id,i,f):'')+
        renderFormulaEditor(n.id,i,f,d,isLocked)+
        '<div class="browse-meta-row">'+
          '<div class="fc-toggle'+(f.show_in_browse!==false?' on':'')+'"><label>Show in browse</label><select '+(isRetired?'disabled title="Retired fields ignored by browse."':'onchange="CEE20.field(\''+n.id+'\','+i+',\'show_in_browse\',this.value===\'true\')"')+'><option value="true"'+(f.show_in_browse!==false?" selected":"")+'>yes</option><option value="false"'+(f.show_in_browse===false?" selected":"")+'>no</option></select></div>'+
          '<div class="fc-toggle"><label>Browse order</label><input type="number" min="0" step="10" value="'+esc(Number.isFinite(Number(f.browse_order))?Number(f.browse_order):(i+1)*10)+'" oninput="CEE20.field(\''+n.id+'\','+i+',\'browse_order\',Number(this.value)||0)"></div>'+
          '<div class="fc-toggle"><label>Browse width</label><input type="number" min="60" max="1200" step="10" value="'+esc(Number.isFinite(Number(f.browse_width))?Number(f.browse_width):180)+'" oninput="CEE20.field(\''+n.id+'\','+i+',\'browse_width\',Math.max(60,Number(this.value)||180))"></div>'+
          '<div class="fc-toggle'+(f.primary_display===true?' on':'')+'"><label>Primary display</label><select onchange="CEE20.primaryDisplay(\''+n.id+'\','+i+',this.value===\'true\')"><option value="true"'+(f.primary_display===true?" selected":"")+'>yes</option><option value="false"'+(f.primary_display!==true?" selected":"")+'>no</option></select></div>'+
          '<div class="fc-toggle'+(f.browse_wrap===true?' on':'')+'"><label>Word wrap</label><select onchange="CEE20.field(\''+n.id+'\','+i+',\'browse_wrap\',this.value===\'true\')"><option value="true"'+(f.browse_wrap===true?" selected":"")+'>yes</option><option value="false"'+(f.browse_wrap!==true?" selected":"")+'>no</option></select></div>'+
        '</div>'+
        (f.indexed?'<div class="form-index-row">'+
          '<label>Index kind<select onchange="CEE20.field(\''+n.id+'\','+i+',\'index_kind\',this.value)"><option value="single"'+((f.index_kind||"single")==="single"?" selected":"")+'>Single</option><option value="composite"'+(f.index_kind==="composite"?" selected":"")+'>Composite</option></select></label>'+
          '<label>Group<input value="'+esc(f.index_group||"")+'" oninput="CEE20.field(\''+n.id+'\','+i+',\'index_group\',this.value)" placeholder="parent_status"></label>'+
          '<label>Position<input type="number" min="1" value="'+esc(f.index_order||1)+'" oninput="CEE20.field(\''+n.id+'\','+i+',\'index_order\',Number(this.value)||1)"></label>'+
          '<label>Purpose<input value="'+esc(f.index_purpose||"")+'" oninput="CEE20.field(\''+n.id+'\','+i+',\'index_purpose\',this.value)" placeholder="find, sort, routing"></label>'+
        '</div>':'')+
        ((f.type==="select"||f.type==="multi_select")?renderSelectOptionsEditor(n.id,i,f):'')+
      '</div>';
    }).join("");
    modal("Design Business Record _form_design · "+lv.label,
      '<div class="card"><div class="card-body">'+
      (d._save_notice||'')+
      '<div class="small-muted" style="margin-bottom:10px">This form defines the schema for records stored in this Hub. Design it explicitly, field by field -- nothing is ever pre-filled or suggested on your behalf. _level_info is a separate, fixed name/status/description record for the Level itself and never reuses these fields.</div>'+
      '<div class="field full"><label>Form Name</label>'+
      '<input value="'+esc(d.name||"")+'" oninput="CEE20.formName(\''+n.id+'\',this.value)"></div>'+
      '<div style="margin-top:10px">'+
      (rows||'<div class="small-muted">No fields yet — use Add Field below.</div>')+
      '</div><div class="action-row"><button class="btn" onclick="CEE20.addField(\''+n.id+'\')">+ Add Field</button>'+
      '<button class="btn" onclick="CEE20.addTypeTestFields(\''+n.id+'\')" title="Testing utility -- appends one field of each supported data type, each pre-populated with default field help.">+ Add Test Fields (All Types)</button></div>'+
      '<div class="kv" style="margin-top:10px"><span class="k">Loaded tail</span><span class="tail-hash">'+esc(n.tail||"first write")+'</span></div>'+
      '<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button>'+
      '<button class="btn primary"'+((d.fields||[]).length?'':' disabled title="Add at least one field before publishing."')+' onclick="CEE20.saveForm(\''+n.id+'\')">Append Form Design CU</button></div></div></div>');
  }

  async function save(n,artifact,opts){
    opts=opts||{};
    var result;
    if(n.type==="form-design"){
      var lv=model.byId[n.levelId],hubId=n.hubId||hubIdForLevel(lv);
      if(!hubId)throw new Error("No hub_id resolvable for "+(lv&&lv.label||n.levelId)+" -- cannot save form design.");
      result=await postJson(spokeUrl(n,"/api/enterprise/hub/form-design/save"),{hub_id:hubId,fields_json:JSON.stringify(artifact),loaded_tail_hash:n.tail||"",operator:operator()});
    }else{
      result=await postJson(spokeUrl(n,"/api/enterprise/level-system/save"),{subject_id:n.subjectId,subject_type:"level-info",action:"update",loaded_tail_hash:n.tail||"",operator:operator(),environment_root:context.environmentRoot,environment_label:context.environmentLabel,genesis_key:model.payload.genesis_key||context.genesisKey,artifact_json:JSON.stringify(artifact)});
    }
    n.tail=result.tail_hash||result.cu_id||n.tail;
    if(!opts.keepOpen){closeEditModal();renderTree();showDetail(n);}
    toast((n.type==="form-design"?"Form design":"Level info")+" CU appended","ok");return result;
  }


  function normalizeInstanceBase(value){
    var raw=String(value||"").trim();
    if(!raw)return "";
    return /^https?:\/\//i.test(raw)?raw.replace(/\/$/,""):"http://"+raw.replace(/\/$/,"");
  }
  function levelBase(lv){
    return normalizeInstanceBase((lv&&lv.instance_address)||"");
  }
  /* v31 (claude): records are genuine Spokes now (Codd correction, direct
     instruction -- see ent-crud.lisp v3). subject_id is the real
     identity (was hub_id, back when every record was its own Hub).
     tail_hash is flat on the record JSON -- crud-spoke-record->json
     doesn't wrap it in a lock_token object the way the old Hub-per-
     record crud-lock-token-json did. */
  function recordId(r){ return String(r.subject_id||r.hub_id||r.id||""); }
  function recordTail(r){ return String(r.tail_hash||r.tailHash||""); }
  function recordName(r){ return r.name||r.label||r.display_name||recordId(r)||"(unnamed)"; }
  /* ChatGPT 20260720-09: business-record browse columns are a projection of
     the Hub's current _form_design. The Spoke label remains a structural
     display fallback for titles and diagnostics; it is not an invented
     business column named "Name". */
  function browseFieldKey(f){ return String((f&&(f.name||f.field_key))||""); }
  function browseFieldsForForm(form){
    var fields=tpVaFields(form);
    return fields.map(function(f,index){return {field:f,index:index};})
      .filter(function(x){return !fieldIsRetired(x.field)&&x.field.show_in_browse!==false&&!!browseFieldKey(x.field);})
      .sort(function(a,b){
        var ao=Number(a.field.browse_order),bo=Number(b.field.browse_order);
        var ah=Number.isFinite(ao),bh=Number.isFinite(bo);
        if(ah&&bh&&ao!==bo)return ao-bo;
        if(ah!==bh)return ah?-1:1;
        return a.index-b.index;
      }).map(function(x){return x.field;});
  }
  function browseRecordValue(r,f){
    var key=browseFieldKey(f),values=(r&&r.values&&typeof r.values==="object")?r.values:{};
    if(Object.prototype.hasOwnProperty.call(values,key))return values[key];
    if(r&&Object.prototype.hasOwnProperty.call(r,key))return r[key];
    return "";
  }
  function browseValueText(value){
    if(value===null||value===undefined)return "";
    if(Array.isArray(value))return value.join(", ");
    if(typeof value==="boolean")return value?"True":"False";
    if(typeof value==="object")return JSON.stringify(value);
    return String(value);
  }
  function browseOptionLabelMap(field){
    if(!field)return Object.create(null);
    var options=Array.isArray(field.options)?field.options:[],signature=options.length+":"+options.map(function(option,index){
      var id=(option&&typeof option==="object"&&option.id!==undefined&&option.id!==null)?option.id:index;
      var label=(option&&typeof option==="object")?(option.label!==undefined?option.label:(option.value!==undefined?option.value:option.id)):option;
      return String(id)+"="+String(label);
    }).join("|");
    if(field.__browseOptionSignature===signature&&field.__browseOptionLabelMap)return field.__browseOptionLabelMap;
    var map=Object.create(null);
    options.forEach(function(option,index){
      var id=(option&&typeof option==="object"&&option.id!==undefined&&option.id!==null)?option.id:index;
      var label=(option&&typeof option==="object")?(option.label!==undefined?option.label:(option.value!==undefined?option.value:option.id)):option;
      map[String(id)]=String(label===undefined||label===null?"":label);
    });
    try{Object.defineProperty(field,"__browseOptionSignature",{value:signature,writable:true,configurable:true});Object.defineProperty(field,"__browseOptionLabelMap",{value:map,writable:true,configurable:true});}
    catch(_e){field.__browseOptionSignature=signature;field.__browseOptionLabelMap=map;}
    return map;
  }
  function browseSelectOptionLabel(field,value){
    var resolved=unwrapScalarSelectValue(value),wanted=String(resolved===null||resolved===undefined?"":resolved),map=browseOptionLabelMap(field);
    return Object.prototype.hasOwnProperty.call(map,wanted)?map[wanted]:browseValueText(resolved);
  }
  function browseFieldValueText(field,value){
    var type=String(field&&field.type||"").toLowerCase();
    if(type==="file"||type==="attachment")return fileFieldDisplayName(value)||"";
    if(type==="select"||type==="dropdown")return browseSelectOptionLabel(field,value);
    if(type==="multi_select"||type==="multiselect"){
      var values=Array.isArray(value)?value:String(value||"").split(",").map(function(v){return v.trim();}).filter(Boolean);
      return values.map(function(v){return browseSelectOptionLabel(field,v);}).join(", ");
    }
    if(type==="boolean"||type==="checkbox")return booleanFieldValueText(field,value);
    if(type==="list<integer>")return integerListDisplay(value);
    return browseValueText(value);
  }
  function browseRecordDisplay(r,form){
    var fields=browseFieldsForForm(form);
    var primary=fields.find(function(f){return f.primary_display===true;})||fields[0];
    var value=primary?browseFieldValueText(primary,browseRecordValue(r,primary)):"";
    return value||recordName(r);
  }
  function normalizeRecords(j){
    var rows=(j&&j.data&&Array.isArray(j.data))?j.data:
      (j&&Array.isArray(j.records))?j.records:
      (j&&Array.isArray(j.rows))?j.rows:[];
    return rows.map(function(r){
      r.id=recordId(r);
      r.name=recordName(r);
      r.status=r.status||"active";
      r.tail_hash=recordTail(r);
      r.updated=r.updated||r.updated_at||r.modified_at||"";
      r.child_count=Number(r.child_count||r.childCount||0);
      return r;
    });
  }
  function normalizeOneRecord(raw){
    if(!raw||typeof raw!=="object")return null;
    var r=Object.assign({},raw);
    if(raw.values&&typeof raw.values==="object")r.values=Object.assign({},raw.values);
    r.id=recordId(r);
    r.name=recordName(r);
    r.status=r.status||"active";
    r.tail_hash=recordTail(r);
    r.updated=r.updated||r.updated_at||r.modified_at||"";
    r.child_count=Number(r.child_count||r.childCount||0);
    return r;
  }
  /* Apply one records/create|update response.record into the open browse.
     Updates only that row's data (and local found-set/sort) — no records/list. */
  function applyBrowseRecordFromServer(browseId, rawRecord, opts){
    opts=opts||{};
    var w=model.browses[browseId];
    if(!w||!rawRecord)return false;
    var fresh=normalizeOneRecord(rawRecord);
    if(!fresh||!recordId(fresh))return false;
    var rid=recordId(fresh);
    if(!Array.isArray(w.allRecords))w.allRecords=[];
    var ai=w.allRecords.findIndex(function(x){return recordId(x)===rid;});
    if(ai>=0)w.allRecords[ai]=Object.assign({},w.allRecords[ai],fresh,{values:Object.assign({},(w.allRecords[ai].values||{}), (fresh.values||{}))});
    else if(opts.isCreate)w.allRecords.push(fresh);
    else{
      /* Update response without a matching local row — still show it if create-like */
      w.allRecords.push(fresh);
    }
    applyBusinessFindAndSort(w);
    var vi=w.records.findIndex(function(x){return recordId(x)===rid;});
    if(vi>=0){w.selected=vi;w.lastSelectedRecordId=rid;ensureBrowseSelection(w).add(rid);}
    renderBusinessRows(browseId);
    if(vi>=0){try{selectBrowseRow(browseId,vi);scrollBrowseCurrentRecordIntoView(browseId);}catch(_e){}}
    return true;
  }

  /* v31 (claude): the one hub_id resolution used everywhere now, Level
     or sub-hub alike -- business_hub_id was already being read off the
     tree payload (see build()) but never actually used anywhere; it's
     the real local hub_id of a Level's own Business Hub (traced back
     to tree-hub-json's hub_id field), same shape/namespace as any
     sub-hub's own .id. No more "domain_id" concept anywhere in this
     resolution -- Hub is the only container that matters now. */
  function hubIdForLevel(lv){ return (lv&&(lv.business_hub_id||lv.id))||""; }

  function applyHubDisplayNameToLevel(lv,hubName,hubInfo){
    if(!lv||!hubName)return;
    lv.hubInfo=hubInfo||lv.hubInfo||null;
    lv.rawLabel=hubName;
    lv.label="Level "+lv.level_number+" — "+hubName;
    Object.keys(model.browses||{}).forEach(function(id){
      var w=model.browses[id];
      if(!w||w.levelId!==lv.id)return;
      w.title=hubName+" records";
      var el=document.getElementById(id);
      var titleEl=el&&el.querySelector(".browse-title");
      if(titleEl)titleEl.textContent=w.title;
    });
    renderBrowseChips();
  }
  function nextLowerLevel(lv){
    var target=Number(lv.level_number)-1;
    var found=null;
    Object.keys(model.byId).some(function(id){
      var n=model.byId[id];
      if(n&&n.type==="level"&&Number(n.level_number)===target){found=n;return true;}
      return false;
    });
    return found;
  }
  function browseKey(levelId,parentId){return levelId+"|"+(parentId||"__ROOT__");}
  /* v31 (claude): rewired onto the new spoke-based routes
     (/api/enterprise/records/list, ent-crud.lisp v3) -- hub_id is
     hubIdForLevel(lv), not levelId itself (levelId is the tree node id;
     for a Level that's a domain-shaped id from the old model, not a
     real hub_id -- see hubIdForLevel's own comment). parent_subject_id
     replaces the old parent_id manifest hack; omit it entirely for
     root records rather than sending "__ROOT__", since
     crud-list-spoke-records treats "no parent_subject_id" as "give me
     the records with no spoke-scope-id at all". */
  async function fetchRecords(levelId,parentId,lifecycle,metrics){
    var lv=model.byId[levelId],base=levelBase(lv);
    if(!base) throw new Error("No owning instance address for "+lv.label);
    var hubId=hubIdForLevel(lv);
    if(!hubId) throw new Error("No hub_id resolved for "+lv.label);
    var q=new URLSearchParams();q.set("hub_id",hubId);if(parentId)q.set("parent_subject_id",parentId);q.set("status",lifecycle||"active");
    var url=base+"/api/enterprise/records/list?"+q.toString(),networkStart=performance.now(),r=await fetch(url,{cache:"no-store",headers:{Accept:"application/json"}}),networkMs=performance.now()-networkStart;
    var textStart=performance.now(),txt=await r.text(),textMs=performance.now()-textStart,parseStart=performance.now(),j;
    try{j=JSON.parse(txt);}catch(e){throw new Error("Non-JSON response from "+url);}
    var parseMs=performance.now()-parseStart;if(!r.ok||j.ok===false)throw new Error(j.message||j.error||("HTTP "+r.status));
    var normalizeStart=performance.now(),rows=normalizeRecords(normalizeArtifactResponse(j)),normalizeMs=performance.now()-normalizeStart;
    if(metrics)Object.assign(metrics,{url:url,http_status:r.status,payload_bytes:new Blob([txt]).size,network_ms:networkMs,response_text_ms:textMs,json_parse_ms:parseMs,normalize_ms:normalizeMs});
    return rows;
  }
  function modalBackdropIsOpen(){var b=document.getElementById("edit-backdrop");return !!(b&&b.classList.contains("show"));}
  function mdiWindowZIndex(id){
    var w=model.browses[id];
    if(w&&(w.modalAuthorized||w.modalLaunched)&&modalBackdropIsOpen())return 7001+(++model.zTop);
    return ++model.zTop;
  }
  function focusMdiWindow(id){
    var el=document.getElementById(id);if(!el)return;
    if(!el.hasAttribute("tabindex"))el.setAttribute("tabindex","-1");
    try{el.focus({preventScroll:true});}catch(e){try{el.focus();}catch(ignore){}}
  }
  function setBrowseActive(id){
    Object.keys(model.browses).forEach(function(k){
      var el=document.getElementById(k);
      if(el)el.classList.toggle("active",k===id);
    });
    var el=document.getElementById(id);
    if(el){el.style.zIndex=String(mdiWindowZIndex(id));focusMdiWindow(id);}
  }
  function renderBrowseChips(){
    var host=document.getElementById("mdi-chips"),layer=document.getElementById("mdi-layer"); if(!host)return;
    host.innerHTML="";
    if(layer)layer.classList.toggle("mdi-has-windows",Object.keys(model.browses).some(function(id){var w=model.browses[id];return !!(w&&w.mode!=="detached"&&document.getElementById(id));}));
    Object.keys(model.browses).forEach(function(id){
      var w=model.browses[id],b=document.createElement("button");
      b.className="mdi-chip"+(w.mode==="detached"?" detached":"");
      b.textContent=(w.mode==="detached"?"↗ ":"")+w.title;
      b.title=w.mode==="detached"?"Detached to browser tab":"Focus MDI window";
      b.onclick=function(){
        if(w.mode==="detached"&&w.detachedPopup&&!w.detachedPopup.closed){try{w.detachedPopup.focus();}catch(_e){}return;}
        setBrowseActive(id);
      };
      host.appendChild(b);
    });
  }
  window.CEE_RENDER_BROWSE_CHIPS=renderBrowseChips;
  window.CEE_SET_BROWSE_ACTIVE=setBrowseActive;
  function closeBusinessBrowse(id){
    var w=model.browses[id],authorized=!!(w&&(w.modalAuthorized||w.modalLaunched)&&modalBackdropIsOpen()),openerId=w&&w.openerMdiId||"";
    var el=document.getElementById(id);if(el)el.remove();
    delete model.browses[id];renderBrowseChips();refreshMdiHorizontalScrollRange();
    if(authorized){
      if(openerId&&model.browses[openerId]&&document.getElementById(openerId)){setTimeout(function(){setBrowseActive(openerId);},0);}
      else{var m=document.getElementById("edit-modal");if(m){if(!m.hasAttribute("tabindex"))m.setAttribute("tabindex","-1");setTimeout(function(){try{m.focus({preventScroll:true});}catch(e){try{m.focus();}catch(ignore){}}},0);}}
    }
  }
  function refreshMdiHorizontalScrollRange(){
    var layer=document.getElementById("mdi-layer");if(!layer)return;
    var spacer=layer.querySelector(":scope > .mdi-horizontal-scroll-spacer");
    if(!spacer){spacer=document.createElement("div");spacer.className="mdi-horizontal-scroll-spacer";spacer.setAttribute("aria-hidden","true");layer.appendChild(spacer);}
    var maxRight=layer.clientWidth;
    Array.prototype.forEach.call(layer.children,function(child){
      if(!child.classList||!child.classList.contains("browse-win"))return;
      var w=(typeof model!=="undefined"&&model.browses)?model.browses[child.id]:null;
      if(w&&w.mode==="detached")return;
      maxRight=Math.max(maxRight,child.offsetLeft+child.offsetWidth);
    });
    spacer.style.left=Math.ceil(maxRight+280)+"px";
  }
  window.CEE_REFRESH_MDI_HORIZONTAL_SCROLL_RANGE=refreshMdiHorizontalScrollRange;
  function makeDraggable(el,handle){
    var drag=false,dx=0,dy=0,dragLayer=null;
    function workspacePoint(e,layer){
      if(!layer)return {x:e.clientX,y:e.clientY};
      var r=layer.getBoundingClientRect();
      return {x:e.clientX-r.left+layer.scrollLeft,y:e.clientY-r.top+layer.scrollTop};
    }
    function attachedPosition(left,top){return {left:Math.max(0,left),top:Math.max(0,top)};}
    handle.addEventListener("mousedown",function(e){
      if(e.target.closest("button")||el.classList.contains("browse-maximized"))return;
      var w=model.browses[el.id];
      if(w&&w.mode==="detached")return;
      dragLayer=document.getElementById("mdi-layer");
      var p=workspacePoint(e,dragLayer);
      drag=true;dx=p.x-el.offsetLeft;dy=p.y-el.offsetTop;
      el.classList.add("chandra-mdi-dragging");
      setBrowseActive(el.id);e.preventDefault();
    });
    document.addEventListener("mousemove",function(e){
      if(!drag)return;
      var p=workspacePoint(e,dragLayer),pos=attachedPosition(p.x-dx,p.y-dy);
      el.style.left=Math.round(pos.left)+"px";
      el.style.top=Math.round(pos.top)+"px";
      refreshMdiHorizontalScrollRange();
    });
    document.addEventListener("mouseup",function(){
      if(!drag)return;
      drag=false;
      el.classList.remove("chandra-mdi-dragging");
      var pos=attachedPosition(el.offsetLeft,el.offsetTop);
      el.style.left=Math.round(pos.left)+"px";
      el.style.top=Math.round(pos.top)+"px";
      refreshMdiHorizontalScrollRange();
      dragLayer=null;
    });
  }
  function browseGeometry(el){
    return {left:el.offsetLeft,top:el.offsetTop,width:el.offsetWidth,height:el.offsetHeight};
  }
  function clampBrowseGeometry(g,layer){
    var minW=360,minH=220,maxW=Math.max(minW,layer.clientWidth),maxH=Math.max(minH,layer.clientHeight);
    var width=Math.min(maxW,Math.max(minW,Number(g&&g.width)||560));
    var height=Math.min(maxH,Math.max(minH,Number(g&&g.height)||360));
    return {left:Math.max(0,Math.min(Math.max(0,maxW-width),Number(g&&g.left)||0)),top:Math.max(0,Math.min(Math.max(0,maxH-height),Number(g&&g.top)||0)),width:width,height:height};
  }
  function applyBrowseGeometry(el,g){
    el.style.left=Math.round(g.left)+"px";el.style.top=Math.round(g.top)+"px";el.style.width=Math.round(g.width)+"px";el.style.height=Math.round(g.height)+"px";
    refreshMdiHorizontalScrollRange();
  }
  function sizeMaximizedBrowse(id){
    var el=document.getElementById(id),layer=document.getElementById("mdi-layer");if(!el||!layer||!el.classList.contains("browse-maximized"))return;
    layer.scrollLeft=0;layer.scrollTop=0;
    applyBrowseGeometry(el,{left:0,top:0,width:layer.clientWidth,height:layer.clientHeight});
  }
  function toggleBusinessBrowseSize(id){
    var w=model.browses[id],el=document.getElementById(id),layer=document.getElementById("mdi-layer");if(!w||!el||!layer)return;
    var button=el.querySelector(".browse-max-btn");
    if(el.classList.contains("browse-maximized")){
      el.classList.remove("browse-maximized");
      applyBrowseGeometry(el,clampBrowseGeometry(w.restoreGeometry||{left:28,top:22,width:560,height:360},layer));
      if(button){button.textContent="□";button.title="Maximize window to workspace";}
    }else{
      w.restoreGeometry=browseGeometry(el);
      el.classList.add("browse-maximized");sizeMaximizedBrowse(id);
      if(button){button.textContent="❐";button.title="Restore previous window size";}
    }
    setBrowseActive(id);
  }
  window.addEventListener("resize",function(){Object.keys(model.browses||{}).forEach(sizeMaximizedBrowse);refreshMdiHorizontalScrollRange();});
  (function installMdiHorizontalRangeObserver(){
    var layer=document.getElementById("mdi-layer");if(!layer)return;
    if(window.MutationObserver){new MutationObserver(function(){refreshMdiHorizontalScrollRange();}).observe(layer,{childList:true});}
    if(window.ResizeObserver){new ResizeObserver(function(){refreshMdiHorizontalScrollRange();}).observe(layer);}
    setTimeout(refreshMdiHorizontalScrollRange,0);
  })();
  function filterBusinessBrowse(id,q){
    q=String(q||"").toLowerCase();
    var w=model.browses[id],el=document.getElementById(id);if(!w||!el)return;
    el.querySelectorAll("tbody tr").forEach(function(tr){tr.style.display=(tr.dataset.search||"").indexOf(q)>=0?"":"none";});
    var selectedRow=el.querySelector("tbody tr.sel");
    if(selectedRow&&selectedRow.style.display==="none"){
      w.selected=-1;
      el.querySelectorAll("tbody tr.sel").forEach(function(tr){tr.classList.remove("sel");});
    }
    updateBrowseChrome(id);
  }

  function findFieldKey(f){return browseFieldKey(f);}
  function findFieldId(f){return String(f&&(f.field_id||f.id)||"");}
  function findFieldRef(f){return findFieldId(f)||findFieldKey(f);}
  function findFieldType(f){return String(f&&f.type||"text").toLowerCase();}
  function findFields(w){return (w&&w.formDesign&&Array.isArray(w.formDesign.fields)?w.formDesign.fields:[]).filter(function(f){return !fieldIsRetired(f)&&!!findFieldKey(f);});}
  function findFieldForRef(w,ref){return findFields(w).find(function(f){return findFieldRef(f)===String(ref||"")||findFieldId(f)===String(ref||"")||findFieldKey(f)===String(ref||"");})||null;}
  function findFieldForCriterion(w,c){
    if(!c)return null;
    var refs=[c.field_id,c.id,c.field,c.field_name].filter(function(ref,index,all){return ref!==undefined&&ref!==null&&String(ref)!==""&&all.findIndex(function(x){return String(x)===String(ref);})===index;});
    for(var i=0;i<refs.length;i++){var found=findFieldForRef(w,refs[i]);if(found)return found;}
    console.warn("[CEE Saved Search] field resolution failed",{criterion:c,refs:refs,available_fields:findFields(w).map(function(f){return {field_id:findFieldId(f),field_name:findFieldKey(f),field_ref:findFieldRef(f),label:f.label||""};})});
    return null;
  }
  function findOperatorsForField(f){
    var t=findFieldType(f);
    if(t==="integer"||t==="number")return [["equals","Equals"],["gt","Greater than"],["gte","Greater than or equal"],["lt","Less than"],["lte","Less than or equal"],["between","Between"],["empty","Is empty"],["not_empty","Is not empty"]];
    if(t==="date")return [["equals","Equals"],["before","Before"],["after","After"],["on_or_before","On or before"],["on_or_after","On or after"],["between","Between"],["empty","Is empty"],["not_empty","Is not empty"]];
    if(t==="boolean"||t==="checkbox"){var bl=booleanFieldLabels(f);return [["true","Is "+bl.trueLabel],["false","Is "+bl.falseLabel],["empty","Is empty"]];}
    if(t==="select"||t==="dropdown")return [["equals","Equals"],["empty","Is empty"],["not_empty","Is not empty"]];
    if(t==="multi_select"||t==="multiselect"||t==="list<integer>")return [["contains","Contains"],["contains_all","Contains all"],["empty","Is empty"],["not_empty","Is not empty"]];
    return [["contains","Contains"],["equals","Equals"],["begins","Begins with"],["empty","Is empty"],["not_empty","Is not empty"]];
  }
  function findIndexCapability(f,operator){
    if(!f||!f.indexed)return {code:"scan",label:"Not indexed",detail:"scan-only"};
    var t=findFieldType(f),op=String(operator||"");
    if(op==="empty"||op==="not_empty")return {code:"filter",label:"Indexed + presence filter",detail:"indexed-plus-filter"};
    if((t==="text"||t==="textarea"||t==="markdown")&&(op==="contains"||op==="begins"))return {code:"filter",label:"Indexed + text filter",detail:"indexed-plus-filter"};
    return {code:"indexed",label:"Index candidate",detail:"indexed"};
  }
  function canonicalBooleanCriterion(value,operator){
    var op=String(operator||"").toLowerCase(),raw=String(value===undefined||value===null?"":value).toLowerCase();
    if(op==="true"||["true","yes","on","enabled","1"].includes(raw))return {operator:"true",value:true};
    if(op==="false"||["false","no","off","disabled","0"].includes(raw))return {operator:"false",value:false};
    return {operator:op,value:value};
  }
  function findCriterionFromField(f,operator,value,value2){
    var t=findFieldType(f),canon=(t==="boolean"||t==="checkbox")?canonicalBooleanCriterion(value,operator):{operator:String(operator||""),value:value};
    /* Execution criteria deliberately exclude index/planner classification. Those
       properties are derived from the current Form Definition and may influence
       presentation or planning, but never the field/operator/value claim. */
    return {field_id:findFieldId(f),field_name:findFieldKey(f),field_type:t,field:findFieldRef(f),operator:canon.operator,value:canon.value,value2:value2===undefined||value2===null?"":value2};
  }
  function findExecutionClaim(w){
    return {
      execution_policy:"local-scan",
      lifecycle_scope:String(w.lifecycleView||"active"),
      parent_subject_id:String(w.parentId||""),
      requests:(w.findRequests||[]).map(function(req){return {
        omit:!!req.omit,
        criteria:(req.criteria||[]).map(function(c){return {
          field_id:String(c.field_id||""),
          operator:String(c.operator||""),
          value:c.value,
          value2:c.value2===undefined||c.value2===null?"":c.value2
        };})
      };})
    };
  }
  function normalizeFindCriterion(w,c){
    var f=findFieldForCriterion(w,c)||findFields(w)[0];if(!f)return c||{};
    return findCriterionFromField(f,(c&&c.operator)||findOperatorsForField(f)[0][0],c&&c.value!==undefined?c.value:"",c&&c.value2!==undefined?c.value2:"");
  }
  function normalizeFindRequests(w){w.findRequests=(w.findRequests||[]).map(function(req){return {omit:!!req.omit,criteria:(req.criteria||[]).map(function(c){return normalizeFindCriterion(w,c);})};});}
  function findIsEmpty(v){return v===null||v===undefined||v===""||(Array.isArray(v)&&v.length===0);}
  function findArray(v){if(Array.isArray(v))return v.map(String);return String(v===null||v===undefined?"":v).split(",").map(function(x){return x.trim();}).filter(Boolean);}
  function findNormalizedText(v){return String(v===null||v===undefined?"":v).normalize("NFKC").toLocaleLowerCase("en-US");}
  function findCriterionMatches(r,c,w){
    var f=findFieldForCriterion(w,c);if(!f)return false;
    var v=browseRecordValue(r,f),op=c.operator,t=findFieldType(f),empty=findIsEmpty(v);
    if(op==="empty")return empty;if(op==="not_empty")return !empty;if(op==="true")return booleanValueIsTrue(v);if(op==="false")return !empty&&!booleanValueIsTrue(v);
    if(empty)return false;
    if(t==="integer"||t==="number"){
      var n=Number(v),a=Number(c.value),b=Number(c.value2);if(!Number.isFinite(n))return false;
      if(op==="equals")return n===a;if(op==="gt")return n>a;if(op==="gte")return n>=a;if(op==="lt")return n<a;if(op==="lte")return n<=a;if(op==="between")return n>=Math.min(a,b)&&n<=Math.max(a,b);
    }
    if(t==="date"){
      var d=String(v),aD=String(c.value||""),bD=String(c.value2||"");
      if(op==="equals")return d===aD;if(op==="before")return d<aD;if(op==="after")return d>aD;if(op==="on_or_before")return d<=aD;if(op==="on_or_after")return d>=aD;if(op==="between")return d>=([aD,bD].sort()[0])&&d<=([aD,bD].sort()[1]);
    }
    if(t==="multi_select"||t==="multiselect"||t==="list<integer>"){
      var actual=findArray(v),wanted=findArray(c.value);if(op==="contains")return wanted.some(function(x){return actual.indexOf(x)>=0;});if(op==="contains_all")return wanted.every(function(x){return actual.indexOf(x)>=0;});
    }
    var left=findNormalizedText(v),right=findNormalizedText(c.value);
    if(op==="equals")return left===right;if(op==="begins")return left.indexOf(right)===0;if(op==="contains")return left.indexOf(right)>=0;
    return false;
  }
  function findRequestMatches(r,request,w){return (request.criteria||[]).length>0&&(request.criteria||[]).every(function(c){return findCriterionMatches(r,c,w);});}
  function findPlanSummary(w){
    var counts={indexed:0,filter:0,scan:0};(w.findRequests||[]).forEach(function(req){(req.criteria||[]).forEach(function(c){var f=findFieldForCriterion(w,c),cap=findIndexCapability(f,c.operator);counts[cap.code]++;});});
    return "Execution: local scan · Declared planner candidates: "+counts.indexed+" indexed, "+counts.filter+" indexed-plus-filter, "+counts.scan+" scan-only";
  }
  function sortableFieldType(f){
    var t=findFieldType(f);return ["text","textarea","markdown","integer","number","date","datetime","timestamp","boolean","checkbox","select","dropdown"].indexOf(t)>=0;
  }
  function sortableFields(w){return findFields(w).filter(sortableFieldType);}
  function normalizeSortSpec(w,spec){
    spec=spec||{};var f=findFieldForRef(w,spec.field_id||spec.field);
    return {field_id:String(spec.field_id||""),field_name:String(spec.field_name||""),field:String(spec.field||""),direction:spec.direction==="desc"?"desc":"asc",empty:spec.empty==="first"?"first":"last",case_sensitive:!!spec.case_sensitive,natural:spec.natural!==false,select_order:spec.select_order==="defined"?"defined":"label",_resolved:!!f};
  }
  function sortFieldLabel(w,spec){var f=findFieldForRef(w,spec.field_id||spec.field);return f?String(f.label||findFieldKey(f)):String(spec.field_name||spec.field_id||spec.field||"Missing field");}
  function sortSummary(w){
    var specs=(w.sortSpec||[]).map(function(x){return normalizeSortSpec(w,x);});if(!specs.length)return "Unsorted";
    if(specs.length<=2)return specs.map(function(spec){return sortFieldLabel(w,spec)+(spec.direction==="desc"?" ↓":" ↑");}).join(", ");
    return sortFieldLabel(w,specs[0])+(specs[0].direction==="desc"?" ↓":" ↑")+" + "+(specs.length-1)+" more";
  }
  function selectDefinedOrder(f,v){
    var options=Array.isArray(f&&f.options)?f.options:[],raw=Array.isArray(v)?String(v[0]||""):String(v===null||v===undefined?"":v);
    for(var i=0;i<options.length;i++){var o=options[i],id=(o&&typeof o==="object"&&o.id!=null)?String(o.id):String(i);if(id===raw)return i;}
    return Number.MAX_SAFE_INTEGER;
  }
  function evaluateBusinessFindRequests(w){
    if(Array.isArray(w._fixtureQueryIds))return (w.allRecords||[]).filter(function(r){return w._fixtureQueryIds.indexOf(recordId(r))>=0;});
    normalizeFindRequests(w);
    var base=(w.allRecords||[]).slice(),requests=(w.findRequests||[]),include=requests.filter(function(x){return !x.omit;}),omit=requests.filter(function(x){return x.omit;});
    var rows=include.length?base.filter(function(r){return include.some(function(req){return findRequestMatches(r,req,w);});}):base.slice();
    if(omit.length)rows=rows.filter(function(r){return !omit.some(function(req){return findRequestMatches(r,req,w);});});
    return rows;
  }
  function ensureFoundSetState(w){
    if(!(w.foundBaseIds instanceof Set))w.foundBaseIds=new Set(Array.isArray(w.foundBaseIds)?w.foundBaseIds:[]);
    if(!(w.omittedIds instanceof Set))w.omittedIds=new Set(Array.isArray(w.omittedIds)?w.omittedIds:[]);
    if(w.foundView!=="omitted")w.foundView="included";
    return w;
  }
  function currentIncludedFoundIds(w){ensureFoundSetState(w);var base=w.findActive?w.foundBaseIds:new Set((w.allRecords||[]).map(recordId));return Array.from(base).filter(function(id){return !w.omittedIds.has(id);});}
  function commitBusinessFindOperation(w,mode){
    ensureFoundSetState(w);mode=mode||"replace";var queryIds=new Set(evaluateBusinessFindRequests(w).map(recordId)),current=new Set(currentIncludedFoundIds(w)),next;
    if(mode==="constrain")next=new Set(Array.from(current).filter(function(id){return queryIds.has(id);}));
    else if(mode==="extend")next=new Set(Array.from(current).concat(Array.from(queryIds)));
    else next=queryIds;
    w.foundBaseIds=next;w.omittedIds=new Set();w.foundView="included";w.findActive=true;w.findOperation="replace";
  }
  function applyBusinessFindAndSort(w){
    ensureFoundSetState(w);
    var all=(w.allRecords||[]).slice(),available=new Set(all.map(recordId));
    w.foundBaseIds=new Set(Array.from(w.foundBaseIds).filter(function(id){return available.has(id);}));
    w.omittedIds=new Set(Array.from(w.omittedIds).filter(function(id){return available.has(id)&&(!w.findActive||w.foundBaseIds.has(id));}));
    var baseIds=w.findActive?w.foundBaseIds:new Set(all.map(recordId)),rows;
    if(w.foundView==="omitted")rows=all.filter(function(r){return w.omittedIds.has(recordId(r));});
    else rows=all.filter(function(r){var id=recordId(r);return baseIds.has(id)&&!w.omittedIds.has(id);});
    var specs=(w.sortSpec||[]).map(function(x){return normalizeSortSpec(w,x);}),sortWarnings=[];
    if(specs.length){rows=rows.map(function(r,i){return {r:r,i:i};}).sort(function(a,b){for(var si=0;si<specs.length;si++){var spec=specs[si],f=findFieldForRef(w,spec.field_id||spec.field);if(!f){if(sortWarnings.indexOf("Unresolved sort field: "+sortFieldLabel(w,spec))<0)sortWarnings.push("Unresolved sort field: "+sortFieldLabel(w,spec));continue;}var av=browseRecordValue(a.r,f),bv=browseRecordValue(b.r,f),ae=findIsEmpty(av),be=findIsEmpty(bv);if(ae||be){if(ae!==be)return (ae?(spec.empty==="first"?-1:1):(spec.empty==="first"?1:-1));continue;}var t=findFieldType(f),cmp=0;if(t==="integer"||t==="number"){var an=Number(av),bn=Number(bv);if(!Number.isFinite(an)||!Number.isFinite(bn)){sortWarnings.push("Invalid numeric value in "+String(f.label||findFieldKey(f))+" for record "+recordId(!Number.isFinite(an)?a.r:b.r));cmp=String(av).localeCompare(String(bv));}else cmp=an-bn;}else if(t==="date"||t==="datetime"||t==="timestamp"){var ad=Date.parse(String(av)),bd=Date.parse(String(bv));if(!Number.isFinite(ad)||!Number.isFinite(bd)){sortWarnings.push("Invalid date value in "+String(f.label||findFieldKey(f))+" for record "+recordId(!Number.isFinite(ad)?a.r:b.r));cmp=String(av).localeCompare(String(bv));}else cmp=ad-bd;}else if(t==="boolean"||t==="checkbox")cmp=(booleanValueIsTrue(av)?1:0)-(booleanValueIsTrue(bv)?1:0);else if((t==="select"||t==="dropdown")&&spec.select_order==="defined")cmp=selectDefinedOrder(f,av)-selectDefinedOrder(f,bv);else {var at=(t==="select"||t==="dropdown")?browseFieldValueText(f,av):browseValueText(av),bt=(t==="select"||t==="dropdown")?browseFieldValueText(f,bv):browseValueText(bv);cmp=String(at).localeCompare(String(bt),navigator.language||"en-US",{sensitivity:spec.case_sensitive?"variant":"base",numeric:spec.natural!==false});}if(cmp)return spec.direction==="desc"?-cmp:cmp;}return a.i-b.i;}).map(function(x){return x.r;});}
    w.sortWarnings=Array.from(new Set(sortWarnings));if(w.sortWarnings.length)console.warn("[CEE Sort] diagnostics",{browse_id:w.id,warnings:w.sortWarnings});
    w.records=rows;w.queryPlan="local-scan";w.queryPlanDetail=findPlanSummary(w);return rows;
  }
  function rerenderBusinessFoundSet(id,preserveId){var w=model.browses[id];if(!w)return;applyBusinessFindAndSort(w);w.selected=preserveId?w.records.findIndex(function(r){return recordId(r)===preserveId;}):-1;w.lastSelectedRecordId=w.selected>=0?preserveId:"";renderBusinessRows(id);}
  function findValueControlHtml(f,c){
    var t=findFieldType(f),op=c.operator||findOperatorsForField(f)[0][0],disabled=(op==="empty"||op==="not_empty"||op==="true"||op==="false");if(disabled)return '<span class="small-muted">No value required</span>';
    var options=Array.isArray(f.options)?f.options:[];
    if(t==="select"||t==="dropdown")return '<select class="find-value">'+options.map(function(o,i){var id=(o&&typeof o==="object"&&o.id!=null)?o.id:i,label=(o&&typeof o==="object")?(o.label!=null?o.label:o.value):o;return '<option value="'+esc(id)+'" '+(String(c.value||"")===String(id)?'selected':'')+'>'+esc(label)+'</option>';}).join('')+'</select>';
    if(t==="multi_select"||t==="multiselect")return '<select class="find-value" multiple size="3">'+options.map(function(o,i){var id=(o&&typeof o==="object"&&o.id!=null)?o.id:i,label=(o&&typeof o==="object")?(o.label!=null?o.label:o.value):o,sel=findArray(c.value).indexOf(String(id))>=0;return '<option value="'+esc(id)+'" '+(sel?'selected':'')+'>'+esc(label)+'</option>';}).join('')+'</select>';
    var inputType=t==="date"?"date":((t==="integer"||t==="number"||t==="list<integer>")?"number":"text");return '<input class="find-value" type="'+inputType+'" value="'+esc(c.value||"")+'">';
  }

  function savedSearchCatalogSubject(w){
    var lv=model.byId[w.levelId],hub=(lv&&hubIdForLevel(lv))||w.levelId;
    return String(hub)+"::saved-search-catalog";
  }
  function savedSearchBase(w){var lv=model.byId[w.levelId];return lv?levelBase(lv):"";}
  function newSavedSearchId(){var a=new Uint8Array(32);crypto.getRandomValues(a);return Array.from(a).map(function(x){return x.toString(16).padStart(2,"0");}).join("");}
  function savedSearchNow(){return new Date().toISOString();}
  function defaultSavedSearch(w,fields){return {search_id:newSavedSearchId(),name:"New Search",description:"",status:"active",target_hub_id:String((model.byId[w.levelId]&&hubIdForLevel(model.byId[w.levelId]))||w.levelId),lifecycle_scope:w.lifecycleView||"active",parent_mode:w.parentId?"current-parent":"hub",parent_subject_id:w.parentId||"",execution_policy:"local-scan",requests:[{omit:false,criteria:[findCriterionFromField(fields[0],findOperatorsForField(fields[0])[0][0],"","")]}],sort_spec:JSON.parse(JSON.stringify(w.sortSpec||[])),created_at:savedSearchNow(),updated_at:savedSearchNow(),deleted_at:""};}
  function normalizeSavedSearchDefinition(w,search){
    var s=JSON.parse(JSON.stringify(search||{}));
    s.requests=(Array.isArray(s.requests)?s.requests:[]).map(function(req){return {omit:!!req.omit,criteria:(Array.isArray(req.criteria)?req.criteria:[]).map(function(c){return normalizeFindCriterion(w,c);})};});
    if(!s.requests.length)s.requests=[{omit:false,criteria:[]}];
    s.sort_spec=Array.isArray(s.sort_spec)?s.sort_spec:[];
    return s;
  }
  async function loadSavedSearchCatalog(w){
    var subject=savedSearchCatalogSubject(w),base=savedSearchBase(w),artifact={artifact_type:"saved-search-catalog",catalog_version:1,target_hub_id:String((model.byId[w.levelId]&&hubIdForLevel(model.byId[w.levelId]))||w.levelId),searches:[]},tail="";
    try{var j=await getJson(base+"/api/enterprise/level-system/latest?subject_id="+encodeURIComponent(subject));var a=decodeArtifact(j);if(a&&a.artifact_type==="saved-search-catalog"&&Array.isArray(a.searches)){artifact=a;artifact.searches=artifact.searches.map(function(s){return normalizeSavedSearchDefinition(w,s);});}tail=j.tail_hash||j.tail||j.cu_id||"";console.debug("[CEE Saved Search] catalog loaded",{subject:subject,tail:tail,search_count:artifact.searches.length,searches:artifact.searches});}catch(e){if(!/404|not found|no current/i.test(String(e&&e.message||e)))console.warn("[CEE Saved Search] catalog read failed",e);else console.debug("[CEE Saved Search] no catalog yet",{subject:subject});}
    return {subject:subject,base:base,artifact:artifact,tail:tail};
  }
  async function saveSavedSearchCatalog(state,action){
    var body={subject_id:state.subject,subject_type:"saved-search-catalog",action:action||"update",loaded_tail_hash:state.tail||"",operator:operator(),artifact_json:JSON.stringify(state.artifact)};
    console.debug("[CEE Saved Search] catalog POST",{url:state.base+"/api/enterprise/level-system/save",action:body.action,loaded_tail_hash:body.loaded_tail_hash,artifact:state.artifact,artifact_json:body.artifact_json});
    var j=await postJson(state.base+"/api/enterprise/level-system/save",body);if(!j||j.ok!==true)throw new Error((j&&(j.error||j.message))||"Saved Search save failed.");state.tail=j.tail_hash||j.tail||j.cu_id||state.tail;console.debug("[CEE Saved Search] catalog POST response",{response:j,new_tail:state.tail});return j;
  }
  function executeSavedSearch(w,search,id){
    w.findRequests=JSON.parse(JSON.stringify(search.requests||[]));normalizeFindRequests(w);w.findActive=true;w.sortSpec=JSON.parse(JSON.stringify(search.sort_spec||[]));
    var selectedId=w.selected>=0&&w.records[w.selected]?recordId(w.records[w.selected]):"";rerenderBusinessFoundSet(id,selectedId);updateBrowseChrome(id);toast("Executed saved search: "+search.name,"ok");closeEditModal();
  }
  async function openSavedSearchManager(id){
    var w=model.browses[id];if(!w)return;if(!w.formDesign){toast("A published form design is required for Saved Searches.","err");return;}var fields=findFields(w);if(!fields.length){toast("No active fields are available for Saved Searches.","err");return;}
    modal("Saved Searches · "+w.title,'<div class="saved-search-shell"><div class="saved-search-work" id="ss-work"><section class="saved-search-list-pane"><div class="saved-search-list-tools"><input id="ss-filter" placeholder="Filter saved searches"><select id="ss-lifecycle"><option value="active">Active</option><option value="deleted">Deleted</option><option value="all">All</option></select></div><div class="saved-search-list" id="ss-list"><div class="saved-search-empty">Loading saved searches…</div></div></section><div class="saved-search-splitter" id="ss-splitter" title="Drag to resize"></div><section class="saved-search-detail-pane"><div class="saved-search-detail-scroll" id="ss-detail"><div class="saved-search-empty">Select a saved search or click New.</div></div><div class="saved-search-toolbar"><button class="btn primary" id="ss-new">New</button><button class="btn" id="ss-save" disabled>Save</button><button class="btn" id="ss-delete" disabled>Delete</button><button class="btn" id="ss-chain">View Chain</button><button class="btn" id="ss-close">Close</button></div></section></div><div class="saved-search-statusbar"><span id="ss-count">0 searches</span><span>Execution: local scan</span><span class="tail" id="ss-tail"></span></div></div>');
    var m=document.getElementById("edit-modal");m.classList.add("saved-searches-modal");
    var state=await loadSavedSearchCatalog(w),selectedId="",draft=null,dirty=false;
    var list=document.getElementById("ss-list"),detail=document.getElementById("ss-detail"),filter=document.getElementById("ss-filter"),life=document.getElementById("ss-lifecycle"),work=document.getElementById("ss-work");
    function searches(){return Array.isArray(state.artifact.searches)?state.artifact.searches:[];}
    function selected(){return searches().find(function(x){return x.search_id===selectedId;})||null;}
    function setDirty(v){dirty=!!v;document.getElementById("ss-save").disabled=!draft||!dirty;}
    function captureDraft(source){if(!draft)return;var nameEl=document.getElementById("ss-name"),descriptionEl=document.getElementById("ss-description"),scopeEl=document.getElementById("ss-scope"),parentEl=document.getElementById("ss-parent-mode");if(nameEl)draft.name=nameEl.value;if(descriptionEl)draft.description=descriptionEl.value;if(scopeEl)draft.lifecycle_scope=scopeEl.value||"active";if(parentEl)draft.parent_mode=parentEl.value||"hub";draft.requests=Array.from(detail.querySelectorAll(".saved-search-request")).map(function(reqEl){var omitEl=reqEl.querySelector(".ss-omit");return {omit:!!(omitEl&&omitEl.checked),criteria:Array.from(reqEl.querySelectorAll(".saved-search-criterion")).map(function(row){var fieldEl=row.querySelector(".ss-field"),operatorEl=row.querySelector(".ss-operator"),f=findFieldForRef(w,fieldEl&&fieldEl.value),val=row.querySelector(".ss-value"),v=val?(val.multiple?Array.from(val.selectedOptions).map(function(o){return o.value;}):val.value):"";return findCriterionFromField(f,operatorEl&&operatorEl.value,v,(row.querySelector(".ss-value2")||{}).value||"");})};});console.debug("[CEE Saved Search] draft captured",{source:source||"unspecified",search_id:draft.search_id,name:draft.name,requests:draft.requests});}
    function renderList(){var q=filter.value.trim().toLowerCase(),mode=life.value,rows=searches().filter(function(x){var ok=mode==="all"||(mode==="deleted"?x.status==="deleted":x.status!=="deleted");return ok&&(!q||(x.name||"").toLowerCase().includes(q)||(x.description||"").toLowerCase().includes(q));});list.innerHTML=rows.length?"":'<div class="saved-search-empty">No saved searches in this view.</div>';rows.forEach(function(x){var row=document.createElement("div");row.className="saved-search-row"+(x.search_id===selectedId?" sel":"");row.innerHTML='<div><div class="saved-search-name">'+esc(x.name||"Unnamed Search")+'</div><div class="saved-search-meta">'+esc((x.status||"active")+' · '+(x.lifecycle_scope||"active")+' · '+(x.execution_policy||"local-scan"))+'</div></div><button class="btn primary saved-search-execute" '+(x.status==="deleted"?'disabled':'')+'>Execute</button>';row.onclick=function(e){if(e.target.closest("button"))return;if(dirty&&!confirm("Discard unsaved Saved Search changes?"))return;selectedId=x.search_id;draft=normalizeSavedSearchDefinition(w,x);console.debug("[CEE Saved Search] row loaded into editor",{search_id:selectedId,draft:draft});setDirty(false);renderList();renderDetail();};row.querySelector("button").onclick=function(e){e.stopPropagation();executeSavedSearch(w,x,id);};list.appendChild(row);});document.getElementById("ss-count").textContent=rows.length+" shown · "+searches().length+" total";document.getElementById("ss-tail").textContent=state.tail?("Tail: "+state.tail):"No catalog CU yet";}
    function valueHtml(f,c){var t=findFieldType(f),op=c.operator,disabled=["empty","not_empty","true","false"].includes(op);if(disabled)return '<span class="small-muted">No value required</span>';var opts=Array.isArray(f.options)?f.options:[];if(t==="select"||t==="dropdown")return '<select class="ss-value">'+opts.map(function(o,i){var oid=o&&typeof o==="object"&&o.id!=null?o.id:i,l=o&&typeof o==="object"?(o.label!=null?o.label:o.value):o;return '<option value="'+esc(oid)+'" '+(String(c.value||"")===String(oid)?'selected':'')+'>'+esc(l)+'</option>';}).join("")+'</select>';if(t==="multi_select"||t==="multiselect")return '<select class="ss-value" multiple size="3">'+opts.map(function(o,i){var oid=o&&typeof o==="object"&&o.id!=null?o.id:i,l=o&&typeof o==="object"?(o.label!=null?o.label:o.value):o;return '<option value="'+esc(oid)+'" '+(findArray(c.value).includes(String(oid))?'selected':'')+'>'+esc(l)+'</option>';}).join("")+'</select>';return '<input class="ss-value" type="'+(t==="date"?'date':((t==="integer"||t==="number"||t==="list<integer>")?'number':'text'))+'" value="'+esc(c.value||"")+'">';}
    function renderDetail(){var s=draft;if(!s){detail.innerHTML='<div class="saved-search-empty">Select a saved search or click New.</div>';updateButtons();return;}detail.innerHTML='<div class="saved-search-grid"><label>Name<input id="ss-name" value="'+esc(s.name||"")+'"></label><label>Lifecycle scope<select id="ss-scope"><option value="active">Active</option><option value="deleted">Deleted</option><option value="all">All</option></select></label><label class="full">Description<textarea id="ss-description">'+esc(s.description||"")+'</textarea></label><label>Parent scope<select id="ss-parent-mode"><option value="hub">Entire Hub</option><option value="current-parent">Current parent</option></select></label><label>Execution policy<input value="local-scan" readonly></label></div><div id="ss-requests"></div><div style="padding-top:10px"><button class="btn" id="ss-add-request">Add Request</button></div>';document.getElementById("ss-scope").value=s.lifecycle_scope||"active";document.getElementById("ss-parent-mode").value=s.parent_mode||"hub";var host=document.getElementById("ss-requests");(s.requests||[]).forEach(function(req,ri){var box=document.createElement("div");box.className="saved-search-request";box.innerHTML='<div class="saved-search-request-hdr"><strong>Request '+(ri+1)+'</strong><label><input type="checkbox" class="ss-omit" '+(req.omit?'checked':'')+'> Omit</label><button class="btn ss-dup-req">Duplicate</button><button class="btn danger ss-del-req">Delete</button></div><div class="ss-criteria"></div><div class="saved-search-request-actions"><button class="btn ss-add-criterion">Add Criterion</button></div>';host.appendChild(box);var ch=box.querySelector(".ss-criteria");(req.criteria||[]).forEach(function(c,ci){var f=findFieldForCriterion(w,c)||fields[0],ops=findOperatorsForField(f),cap=findIndexCapability(f,c.operator),row=document.createElement("div");row.className="saved-search-criterion";row.innerHTML='<div><select class="ss-field">'+fields.map(function(x){return '<option value="'+esc(findFieldRef(x))+'" '+(findFieldRef(x)===findFieldRef(f)?'selected':'')+'>'+esc(x.label||findFieldKey(x))+'</option>';}).join("")+'</select><div class="saved-search-field-meta">'+esc(cap.label)+' · '+esc(findFieldId(f)||findFieldKey(f))+'</div></div><select class="ss-operator">'+ops.map(function(o){return '<option value="'+o[0]+'" '+(o[0]===c.operator?'selected':'')+'>'+o[1]+'</option>';}).join("")+'</select><div>'+valueHtml(f,c)+(c.operator==="between"?'<input class="ss-value2" type="'+(findFieldType(f)==="date"?'date':'number')+'" value="'+esc(c.value2||"")+'">':'')+'</div><button class="btn danger saved-search-remove">×</button>';ch.appendChild(row);row.querySelector(".ss-field").onchange=function(){captureDraft("field-change");var nf=findFieldForRef(w,this.value);draft.requests[ri].criteria[ci]=findCriterionFromField(nf,findOperatorsForField(nf)[0][0],"","");setDirty(true);renderDetail();};row.querySelector(".ss-operator").onchange=function(){captureDraft("operator-change");draft.requests[ri].criteria[ci].operator=this.value;setDirty(true);renderDetail();};row.querySelector(".saved-search-remove").onclick=function(){captureDraft("criterion-remove");draft.requests[ri].criteria.splice(ci,1);setDirty(true);renderDetail();};});box.querySelector(".ss-add-criterion").onclick=function(){captureDraft("criterion-add");draft.requests[ri].criteria.push(findCriterionFromField(fields[0],findOperatorsForField(fields[0])[0][0],"",""));setDirty(true);renderDetail();};box.querySelector(".ss-dup-req").onclick=function(){captureDraft("request-duplicate");draft.requests.splice(ri+1,0,JSON.parse(JSON.stringify(draft.requests[ri])));setDirty(true);renderDetail();};box.querySelector(".ss-del-req").onclick=function(){captureDraft("request-delete");draft.requests.splice(ri,1);if(!draft.requests.length)draft.requests=[{omit:false,criteria:[]}];setDirty(true);renderDetail();};});document.getElementById("ss-add-request").onclick=function(){captureDraft("request-add");draft.requests.push({omit:false,criteria:[]});setDirty(true);renderDetail();};detail.querySelectorAll("input,textarea,select").forEach(function(el){el.addEventListener("input",function(){captureDraft("input:"+(el.className||el.id||el.tagName));setDirty(true);});el.addEventListener("change",function(){captureDraft("change:"+(el.className||el.id||el.tagName));setDirty(true);});});console.debug("[CEE Saved Search] detail rendered",{search_id:s.search_id,requests:s.requests});updateButtons();}
    function updateButtons(){var s=draft,deleted=s&&s.status==="deleted",save=document.getElementById("ss-save"),del=document.getElementById("ss-delete");if(save)save.disabled=!s||!dirty||deleted;if(del)del.disabled=!s||deleted;}
    function searchVisibleInCurrentLifecycle(search){var mode=life.value;return mode==="all"||(mode==="deleted"?search&&search.status==="deleted":search&&search.status!=="deleted");}
    function reconcileSelectionToLifecycle(){var current=selected();if(!current||!searchVisibleInCurrentLifecycle(current)){console.debug("[CEE Saved Search] selection cleared by lifecycle view",{selected_id:selectedId,lifecycle_view:life.value,status:current&&current.status});selectedId="";draft=null;setDirty(false);}}
    async function persist(message){captureDraft("persist");draft=normalizeSavedSearchDefinition(w,draft);if(!String(draft.name||"").trim()){toast("Search name is required.","err");return;}draft.updated_at=savedSearchNow();var idx=searches().findIndex(function(x){return x.search_id===draft.search_id;});if(idx>=0)state.artifact.searches[idx]=JSON.parse(JSON.stringify(draft));else state.artifact.searches.push(JSON.parse(JSON.stringify(draft)));state.artifact.updated_at=savedSearchNow();console.debug("[CEE Saved Search] pre-save snapshot",{index:idx,draft:draft,catalog:state.artifact});try{await saveSavedSearchCatalog(state,state.tail?"update":"create");selectedId=draft.search_id;draft=normalizeSavedSearchDefinition(w,state.artifact.searches.find(function(x){return x.search_id===selectedId;})||draft);setDirty(false);reconcileSelectionToLifecycle();renderList();renderDetail();console.debug("[CEE Saved Search] saved and rebound",{search_id:selectedId,draft:draft,lifecycle_view:life.value});toast(message||"Saved Search appended.","ok");}catch(e){console.error("[CEE Saved Search] save failed",e);toast(e.message||String(e),"err");}}
    document.getElementById("ss-new").onclick=function(){if(dirty&&!confirm("Discard unsaved Saved Search changes?"))return;draft=defaultSavedSearch(w,fields);selectedId=draft.search_id;setDirty(true);renderList();renderDetail();};document.getElementById("ss-save").onclick=function(){persist("Saved Search CU appended.");};document.getElementById("ss-delete").onclick=function(){if(!draft||!confirm("Soft delete this Saved Search?"))return;draft.status="deleted";draft.deleted_at=savedSearchNow();setDirty(true);persist("Saved Search soft-deleted.");};document.getElementById("ss-chain").onclick=function(){openUniversalChainViewer({parentWinId:id,base:state.base,subjectId:state.subject,title:"Saved Searches · "+w.title,detailKind:"generic"});};document.getElementById("ss-close").onclick=function(){if(dirty&&!confirm("Discard unsaved Saved Search changes?"))return;closeEditModal();};filter.oninput=renderList;life.onchange=function(){reconcileSelectionToLifecycle();renderList();renderDetail();};
    var split=document.getElementById("ss-splitter"),drag=false;split.onpointerdown=function(e){drag=true;split.setPointerCapture(e.pointerId);};split.onpointermove=function(e){if(!drag)return;var r=work.getBoundingClientRect(),x=Math.max(220,Math.min(r.width-360,e.clientX-r.left));work.style.gridTemplateColumns=x+"px 6px minmax(0,1fr)";};split.onpointerup=function(){drag=false;};
    renderList();renderDetail();
  }

  function openFindEditor(id){
    var w=model.browses[id];if(!w)return;if(!w.formDesign){toast("A published form design is required for Find Mode.","err");return;}w.findMode=true;var fields=findFields(w);if(!fields.length){toast("The form design has no active fields available for Find Mode.","err");return;}
    if(!w.findActive||!Array.isArray(w.findRequests)||!w.findRequests.length)w.findRequests=[{omit:false,criteria:[findCriterionFromField(fields[0],findOperatorsForField(fields[0])[0][0],"","")]}];normalizeFindRequests(w);
    modal(w.findActive?"Modify Find":"Find Records",'<div class="find-mode-banner"><strong>FIND MODE</strong><span>Requests are evaluated locally over the authoritative lifecycle/relationship-scoped record set. Index declarations describe planner potential only; this Find still executes as a local scan.</span><button class="btn find-help-btn help-dot" type="button" title="Open Find Mode help" onclick="event.preventDefault();event.stopPropagation();openHelpById(&quot;find-mode&quot;,this)">?</button></div><div id="find-plan-summary" class="find-plan-summary" title="Execution method and declared planner-candidate counts. This does not claim backend index execution."></div><div id="find-requests-host"></div><div class="find-footer"><span class="query-plan-note" title="Current execution method">Query plan: local scan</span><button class="btn" id="find-new" title="Clear the current requests and start a new Find.">New Find</button><button class="btn" id="find-add-request" title="Add another include or omit request. Non-omit requests are combined with OR.">Add Request</button><button class="btn primary" id="find-perform" title="Validate and apply all Find requests to the current lifecycle- and parent-scoped record set.">Perform Find</button><button class="btn" id="find-close" title="Close Find Mode without performing a new Find.">Close</button></div>');
    var host=document.getElementById("find-requests-host"),plan=document.getElementById("find-plan-summary");
    function capture(){Array.from(host.querySelectorAll(".find-request")).forEach(function(reqEl,ri){var req=w.findRequests[ri];req.omit=reqEl.querySelector(".find-omit").checked;req.criteria=Array.from(reqEl.querySelectorAll(".find-criterion")).map(function(row){var valueEl=row.querySelector(".find-value"),value=valueEl?(valueEl.multiple?Array.from(valueEl.selectedOptions).map(function(o){return o.value;}):valueEl.value):"",f=findFieldForRef(w,row.querySelector(".find-field").value);return findCriterionFromField(f,row.querySelector(".find-operator").value,value,(row.querySelector(".find-value2")||{}).value||"");});});}
    function draw(){host.innerHTML="";if(plan)plan.textContent=findPlanSummary(w);w.findRequests.forEach(function(req,ri){var box=document.createElement("div");box.className="find-request";box.innerHTML='<div class="find-request-hdr"><span class="find-request-title">Request '+(ri+1)+'</span><button class="btn find-help-btn help-dot" type="button" title="Open Find Request help" onclick="event.preventDefault();event.stopPropagation();openHelpById(&quot;find-request&quot;,this)">?</button><label class="find-omit-label" title="Subtract records matching this request from the included candidate set."><input type="checkbox" class="find-omit" '+(req.omit?'checked':'')+'> Omit</label><button class="btn find-duplicate" title="Copy this request, including all criteria and its Omit setting.">Duplicate</button><button class="btn danger find-delete" title="Delete this request without changing other requests.">Delete</button></div><div class="find-criteria"><div class="find-criterion-head"><span>Field <button class="btn find-help-btn help-dot" type="button" title="Open Field and Index help" onclick="event.preventDefault();event.stopPropagation();openHelpById(&quot;find-field&quot;,this)">?</button></span><span>Operator <button class="btn find-help-btn help-dot" type="button" title="Open Operator help" onclick="event.preventDefault();event.stopPropagation();openHelpById(&quot;find-operator&quot;,this)">?</button></span><span>Value <button class="btn find-help-btn help-dot" type="button" title="Open Value help" onclick="event.preventDefault();event.stopPropagation();openHelpById(&quot;find-value&quot;,this)">?</button></span><span></span></div></div><div class="find-request-actions"><button class="btn find-add-criterion" title="Add another criterion to this request. Criteria in one request are combined with AND.">Add Criterion</button></div>';host.appendChild(box);var criteria=box.querySelector(".find-criteria");if(!req.criteria.length)criteria.insertAdjacentHTML('beforeend','<div class="find-empty">No criteria in this request.</div>');req.criteria.forEach(function(c,ci){var f=findFieldForCriterion(w,c)||fields[0],ops=findOperatorsForField(f);if(!ops.some(function(o){return o[0]===c.operator;}))c.operator=ops[0][0];var cap=findIndexCapability(f,c.operator),row=document.createElement("div"),idxTitle=(f.indexed?'Declared '+String(f.index_kind||'single')+' index':'No index declared')+(f.index_group?' · group '+f.index_group:''),idxExplain=cap.code==='indexed'?'Declared index candidate; current execution is still a local scan.':(cap.code==='filter'?'Declared index may narrow candidates, then this operator requires filtering; current execution is still a local scan.':'No declared index supports this criterion; current execution is a local scan.');row.className="find-criterion"+(c.operator==="between"?" between":"");row.innerHTML='<div class="find-field-wrap"><select class="find-field" title="Field">'+fields.map(function(x){return '<option value="'+esc(findFieldRef(x))+'" '+(findFieldRef(x)===findFieldRef(f)?'selected':'')+'>'+esc(x.label||findFieldKey(x))+'</option>';}).join('')+'</select><div class="find-index-line"><span class="find-index-badge '+cap.code+'" title="'+esc(idxTitle)+'">'+esc(cap.label)+'</span><span class="find-index-explain">'+esc(idxExplain)+'</span></div></div><select class="find-operator" title="Operator">'+ops.map(function(o){return '<option value="'+o[0]+'" '+(o[0]===c.operator?'selected':'')+'>'+o[1]+'</option>';}).join('')+'</select>'+findValueControlHtml(f,c)+(c.operator==="between"?'<input class="find-value2" aria-label="Second between value" title="Second inclusive boundary" type="'+(findFieldType(f)==="date"?'date':'number')+'" value="'+esc(c.value2||'')+'">':'')+'<button class="btn danger find-remove-criterion" title="Remove this criterion" aria-label="Remove criterion">×</button>';criteria.appendChild(row);var val=row.querySelector(".find-value");if(val){val.title="Criterion value";val.setAttribute("aria-label","Criterion value");}row.querySelector(".find-field").onchange=function(){capture();var nf=findFieldForRef(w,this.value);req.criteria[ci]=findCriterionFromField(nf,findOperatorsForField(nf)[0][0],"","");draw();};row.querySelector(".find-operator").onchange=function(){capture();req.criteria[ci]=findCriterionFromField(f,this.value,c.value,c.value2);draw();};row.querySelector(".find-remove-criterion").onclick=function(){capture();req.criteria.splice(ci,1);draw();};});box.querySelector(".find-add-criterion").onclick=function(){capture();req.criteria.push(findCriterionFromField(fields[0],findOperatorsForField(fields[0])[0][0],"",""));draw();};box.querySelector(".find-duplicate").onclick=function(){capture();w.findRequests.splice(ri+1,0,JSON.parse(JSON.stringify(req)));draw();};box.querySelector(".find-delete").onclick=function(){capture();w.findRequests.splice(ri,1);if(!w.findRequests.length)w.findRequests.push({omit:false,criteria:[]});draw();};});}
    document.getElementById("find-new").onclick=function(){capture();var hasCriteria=w.findRequests.some(function(req){return req.omit||req.criteria.some(function(c){return String(c.value||"").trim()!==""||String(c.value2||"").trim()!=="";});});if(hasCriteria&&!window.confirm("Clear the current Find requests and start a new Find?"))return;w.findRequests=[{omit:false,criteria:[findCriterionFromField(fields[0],findOperatorsForField(fields[0])[0][0],"","")]}];draw();};document.getElementById("find-add-request").onclick=function(){capture();w.findRequests.push({omit:false,criteria:[]});draw();};document.getElementById("find-perform").onclick=function(){capture();w.lastFindExecutionClaim=findExecutionClaim(w);console.debug("[CEE Find] execution claim",JSON.parse(JSON.stringify(w.lastFindExecutionClaim)));var selectedId=w.selected>=0&&w.records[w.selected]?recordId(w.records[w.selected]):"";commitBusinessFindOperation(w,w.findOperation||"replace");w.findMode=false;rerenderBusinessFoundSet(id,selectedId);closeEditModal();};document.getElementById("find-close").onclick=function(){capture();w.findMode=false;w.findOperation="replace";closeEditModal();};draw();
  }
  function showAllBusinessRecords(id){var w=model.browses[id];if(!w)return;var selectedId=w.selected>=0&&w.records[w.selected]?recordId(w.records[w.selected]):"";ensureFoundSetState(w);w.findActive=false;w.findMode=false;w.findOperation="replace";w.foundBaseIds=new Set();w.omittedIds=new Set();w.foundView="included";rerenderBusinessFoundSet(id,selectedId);}
  function omitSelectedBusinessRecords(id){var w=model.browses[id];if(!w)return false;ensureFoundSetState(w);var ids=Array.from(ensureBrowseSelection(w)).filter(function(x){return (w.records||[]).some(function(r){return recordId(r)===x;});});if(!ids.length)return false;if(!w.findActive){w.foundBaseIds=new Set((w.allRecords||[]).map(recordId));w.findActive=true;}ids.forEach(function(x){w.omittedIds.add(x);});w.foundView="included";w.selectedIds=new Set();rerenderBusinessFoundSet(id,"");return true;}
  function showOmittedBusinessRecords(id){var w=model.browses[id];if(!w)return false;ensureFoundSetState(w);if(!w.omittedIds.size)return false;w.foundView="omitted";w.selectedIds=new Set();rerenderBusinessFoundSet(id,"");return true;}
  function returnToIncludedFoundSet(id){var w=model.browses[id];if(!w)return false;ensureFoundSetState(w);w.foundView="included";w.selectedIds=new Set();rerenderBusinessFoundSet(id,"");return true;}
  function openFoundSetFind(id,mode){var w=model.browses[id];if(!w)return;ensureFoundSetState(w);if((mode==="constrain"||mode==="extend")&&!w.findActive){toast("Create a found set before using "+(mode==="constrain"?"Constrain":"Extend")+".","err");return;}w.findOperation=mode||"replace";w.findRequests=[{omit:false,criteria:[]}];openFindEditor(id);var title=document.querySelector(".modal-title");if(title)title.textContent=(mode==="constrain"?"Constrain Found Set":mode==="extend"?"Extend Found Set":"Find Records");var perform=document.getElementById("find-perform");if(perform)perform.textContent=(mode==="constrain"?"Constrain":mode==="extend"?"Extend":"Perform Find");}
  function openSortEditor(id){
    var w=model.browses[id];if(!w||!w.formDesign)return;var fields=sortableFields(w);if(!fields.length){toast("This form has no sortable fields.","err");return;}
    var draft=(w.sortSpec||[]).map(function(spec){return normalizeSortSpec(w,spec);});
    modal("Sort Records",'<div class="find-mode-banner"><strong>SORT</strong><span>Priority runs top to bottom. Changes are not applied until Sort is clicked. Multi-select and structural values are intentionally excluded.</span></div><div id="sort-host"></div><div class="sort-footer"><span class="query-plan-note">Current found set · local stable sort</span><button class="btn" id="sort-clear">Clear</button><button class="btn" id="sort-add">Add Sort Field</button><button class="btn primary" id="sort-apply">Sort</button><button class="btn" id="sort-close">Cancel</button></div>');var host=document.getElementById("sort-host");
    function sortSpecForField(f,direction){return {field_id:findFieldId(f),field_name:findFieldKey(f),field:findFieldRef(f),direction:direction==="desc"?"desc":"asc",empty:"last",case_sensitive:false,natural:true,select_order:"label"};}
    function capture(){draft=Array.from(host.querySelectorAll(".sort-row")).map(function(row){var f=findFieldForRef(w,row.querySelector(".sort-field").value);return {field_id:f?findFieldId(f):row.dataset.fieldId||"",field_name:f?findFieldKey(f):row.dataset.fieldName||"",field:f?findFieldRef(f):row.dataset.fieldRef||"",direction:row.querySelector(".sort-direction").value,empty:row.querySelector(".sort-empty").value,case_sensitive:!!row.querySelector(".sort-case").checked,natural:!!row.querySelector(".sort-natural").checked,select_order:row.querySelector(".sort-select-order").value};});}
    function draw(){host.innerHTML="";if(!draft.length)host.innerHTML='<div class="find-empty">No sort fields. Records remain in authoritative response order.</div>';draft.forEach(function(spec,i){var f=findFieldForRef(w,spec.field_id||spec.field),row=document.createElement("div");row.className="sort-row";row.dataset.fieldId=spec.field_id||"";row.dataset.fieldName=spec.field_name||"";row.dataset.fieldRef=spec.field||"";var missing=!f,selectedRef=f?findFieldRef(f):"__missing__";row.innerHTML='<select class="sort-field">'+(missing?'<option value="__missing__" selected>Missing field: '+esc(sortFieldLabel(w,spec))+'</option>':'')+fields.map(function(x){return '<option value="'+esc(findFieldRef(x))+'" '+(findFieldRef(x)===selectedRef?'selected':'')+'>'+esc(x.label||findFieldKey(x))+'</option>';}).join('')+'</select><select class="sort-direction"><option value="asc" '+(spec.direction!=="desc"?'selected':'')+'>Ascending</option><option value="desc" '+(spec.direction==="desc"?'selected':'')+'>Descending</option></select><select class="sort-empty" title="Empty-value placement"><option value="last" '+(spec.empty!=="first"?'selected':'')+'>Empty last</option><option value="first" '+(spec.empty==="first"?'selected':'')+'>Empty first</option></select><label class="small-muted"><input type="checkbox" class="sort-natural" '+(spec.natural!==false?'checked':'')+'> Natural</label><label class="small-muted"><input type="checkbox" class="sort-case" '+(spec.case_sensitive?'checked':'')+'> Case sensitive</label><select class="sort-select-order" title="Select-field ordering"><option value="label" '+(spec.select_order!=="defined"?'selected':'')+'>Select: label</option><option value="defined" '+(spec.select_order==="defined"?'selected':'')+'>Select: defined order</option></select><button class="btn sort-up" title="Move earlier" aria-label="Move sort field earlier">↑</button><button class="btn sort-down" title="Move later" aria-label="Move sort field later">↓</button><button class="btn danger sort-remove" title="Remove" aria-label="Remove sort field">×</button>';host.appendChild(row);var selectOrder=row.querySelector(".sort-select-order"),type=f?findFieldType(f):"";selectOrder.disabled=!(type==="select"||type==="dropdown");row.querySelector(".sort-up").disabled=i===0;row.querySelector(".sort-down").disabled=i===draft.length-1;row.querySelector(".sort-up").onclick=function(){capture();var x=draft.splice(i,1)[0];draft.splice(i-1,0,x);draw();};row.querySelector(".sort-down").onclick=function(){capture();var x=draft.splice(i,1)[0];draft.splice(i+1,0,x);draw();};row.querySelector(".sort-remove").onclick=function(){capture();draft.splice(i,1);draw();};row.querySelector(".sort-field").onchange=function(){if(this.value==="__missing__")return;capture();draft[i]=sortSpecForField(findFieldForRef(w,this.value),draft[i]&&draft[i].direction);draw();};});}
    document.getElementById("sort-clear").onclick=function(){draft=[];draw();};document.getElementById("sort-add").onclick=function(){capture();draft.push(sortSpecForField(fields[0],"asc"));draw();};document.getElementById("sort-apply").onclick=function(){capture();var missing=draft.filter(function(spec){return !findFieldForRef(w,spec.field_id||spec.field);});if(missing.length){toast("Remove or replace missing sort fields before sorting.","err");return;}w.sortSpec=JSON.parse(JSON.stringify(draft));var selectedId=w.selected>=0&&w.records[w.selected]?recordId(w.records[w.selected]):"";rerenderBusinessFoundSet(id,selectedId);closeEditModal();};document.getElementById("sort-close").onclick=closeEditModal;draw();
  }
  function quickSortBusinessColumn(id,fieldRef,additive){
    var w=model.browses[id],f=findFieldForRef(w,fieldRef);if(!w||!f||!sortableFieldType(f))return;
    var current=(w.sortSpec||[]).map(function(x){return normalizeSortSpec(w,x);}),idx=current.findIndex(function(x){return findFieldForRef(w,x.field_id||x.field)===f;}),next;
    if(additive){next=current.slice();if(idx<0)next.push({field_id:findFieldId(f),field_name:findFieldKey(f),field:findFieldRef(f),direction:"asc",empty:"last",case_sensitive:false,natural:true,select_order:"label"});else if(next[idx].direction==="asc")next[idx].direction="desc";else next.splice(idx,1);}else{var dir=(idx===0&&current.length===1&&current[0].direction==="asc")?"desc":"asc";next=[{field_id:findFieldId(f),field_name:findFieldKey(f),field:findFieldRef(f),direction:dir,empty:"last",case_sensitive:false,natural:true,select_order:"label"}];}
    w.sortSpec=next;var selectedId=w.selected>=0&&w.records[w.selected]?recordId(w.records[w.selected]):"";rerenderBusinessFoundSet(id,selectedId);
  }

  function isDeletedBusinessRecord(r){
    var status=String((r&&r.status)||"").toLowerCase();
    return status==="deactivated"||status==="deleted"||!!(r&&r.deleted_id);
  }
  function ensureBrowseSelection(w){
    if(!w.selectedIds)w.selectedIds=new Set();
    if(!(w.selectedIds instanceof Set))w.selectedIds=new Set(Array.isArray(w.selectedIds)?w.selectedIds:[]);
    return w.selectedIds;
  }
  function selectedBrowseRecords(id){
    var w=model.browses[id];if(!w)return[];
    var ids=ensureBrowseSelection(w);
    return (w.records||[]).filter(function(r){return ids.has(recordId(r));});
  }
  function updateBrowseChrome(id){
    var w=model.browses[id],el=document.getElementById(id);if(!w||!el)return;
    var selected=selectedBrowseRecords(id),hasSelection=selected.length===1,r=hasSelection?selected[0]:null,deleted=hasSelection&&isDeletedBusinessRecord(r);
    var viewBtn=el.querySelector(".browse-view-btn"),editBtn=el.querySelector(".browse-edit-btn"),duplicateBtn=el.querySelector(".browse-duplicate-btn"),chainBtn=el.querySelector(".browse-chain-btn"),deleteBtn=el.querySelector(".browse-delete-btn");
    if(viewBtn)viewBtn.disabled=!selected.length;if(chainBtn)chainBtn.disabled=!hasSelection;ensureFoundSetState(w);var showAllBtn=el.querySelector(".browse-show-all-btn"),showAllFoundBtn=el.querySelector(".browse-show-all-found-btn"),showAllDisabled=!w.findActive&&!w.omittedIds.size;if(showAllBtn)showAllBtn.disabled=showAllDisabled;if(showAllFoundBtn)showAllFoundBtn.disabled=showAllDisabled;var omitBtn=el.querySelector(".browse-omit-btn"),showOmittedBtn=el.querySelector(".browse-show-omitted-btn"),returnBtn=el.querySelector(".browse-return-found-btn"),constrainBtn=el.querySelector(".browse-constrain-btn"),extendBtn=el.querySelector(".browse-extend-btn");if(omitBtn)omitBtn.disabled=!selected.length||w.foundView==="omitted";if(showOmittedBtn)showOmittedBtn.disabled=!w.omittedIds.size||w.foundView==="omitted";if(returnBtn)returnBtn.disabled=w.foundView!=="omitted";if(constrainBtn)constrainBtn.disabled=!w.findActive||w.foundView==="omitted";if(extendBtn)extendBtn.disabled=!w.findActive||w.foundView==="omitted";
    if(editBtn)editBtn.disabled=!hasSelection||deleted||editBtn.dataset.formReady!=="yes";
    if(duplicateBtn){var creationDenied=w.recordCreationEnabled===false;duplicateBtn.disabled=!hasSelection||deleted||creationDenied||duplicateBtn.dataset.formReady!=="yes";duplicateBtn.title=deleted?"Deleted records cannot be duplicated.":(creationDenied?"Record creation is disabled for this Hub.":(!hasSelection?"Select exactly one active record.":(duplicateBtn.dataset.formReady==="yes"?"Create a new record from the selected record values.":duplicateBtn.title)));}
    if(deleteBtn){
      /* v31c324 (claude): Delete Record was gated to exactly one tagged
         record (hasSelection===selected.length===1), same as View/Edit/
         Duplicate/Chain -- but unlike those, bulk delete on a tagged set
         is completely standard (FileMaker's Delete Found Records) and
         "Omit Selected" right next to it already allows any count. Tag
         two records and Delete correctly, if unhelpfully, disabled.
         Widened to any count >=1; guards against a mixed active+deleted
         tag set rather than guessing which action the person meant. */
      var delMixed=selected.length>0&&!selected.every(isDeletedBusinessRecord)&&!selected.every(function(x){return !isDeletedBusinessRecord(x);}),
      delAllDeleted=selected.length>0&&selected.every(isDeletedBusinessRecord);
      deleteBtn.disabled=!selected.length||delMixed||deleteBtn.dataset.formReady!=="yes";
      deleteBtn.classList.toggle("danger",!delAllDeleted);
      deleteBtn.title=delMixed?"Tagged records mix active and deleted status \u2014 select records with the same status.":(selected.length?((delAllDeleted?"Restore ":"Soft delete ")+selected.length+(selected.length>1?" records":" record")):"Soft delete");
    }
    var total=(w.allRecords||w.records||[]).length,found=(w.records||[]).length,status=w.foundView==="omitted"?(found+" omitted · "+total+" total"):((w.findActive||w.omittedIds.size)?(found+" found / "+total+" total"):(total+" found / "+total+" total"));
    var sortText=sortSummary(w),sortBtn=el.querySelector(".browse-sort-btn");if(sortBtn){sortBtn.textContent=(w.sortSpec&&w.sortSpec.length)?("Sort: "+sortText):"Sort";sortBtn.title=(w.sortSpec&&w.sortSpec.length)?("Active sort: "+sortText):"Open Sort Records";}var main=el.querySelector(".browse-status-main");if(main)main.textContent=status+" · "+sortText+" · Query plan: local scan"+(w.findActive&&w.queryPlanDetail?" · "+w.queryPlanDetail.replace(/^Execution: local scan · /,""):"")+" · "+selected.length+" selected";
    var rel=el.querySelector(".browse-status-related");if(rel)rel.textContent=w.selectedChildHubLabel?("Related Hub: "+w.selectedChildHubLabel):"";
    var navIndex=currentBrowseNavigationIndex(w),navCount=(w.records||[]).length,navPosition=navIndex>=0?navIndex+1:0;
    var navPos=el.querySelector(".browse-nav-position");if(navPos)navPos.textContent="Record "+navPosition+" of "+navCount;
    var firstNav=el.querySelector(".browse-nav-first"),prevNav=el.querySelector(".browse-nav-prev"),nextNav=el.querySelector(".browse-nav-next"),lastNav=el.querySelector(".browse-nav-last");
    if(firstNav)firstNav.disabled=!navCount||navIndex<=0;if(prevNav)prevNav.disabled=!navCount||navIndex<=0;if(nextNav)nextNav.disabled=!navCount||navIndex>=navCount-1;if(lastNav)lastNav.disabled=!navCount||navIndex>=navCount-1;
    var all=el.querySelector(".browse-select-all"),visibleIds=(w.records||[]).map(recordId),selectedVisible=visibleIds.filter(function(x){return ensureBrowseSelection(w).has(x);}).length;
    if(all){all.checked=visibleIds.length>0&&selectedVisible===visibleIds.length;all.indeterminate=selectedVisible>0&&selectedVisible<visibleIds.length;}
  }
  function applyBrowseSelectionVisuals(id){
    var w=model.browses[id],el=document.getElementById(id);if(!w||!el)return;
    var ids=ensureBrowseSelection(w);
    el.querySelectorAll("tbody tr[data-record-id]").forEach(function(tr){
      var checked=ids.has(tr.dataset.recordId),box=tr.querySelector(".browse-row-select");
      if(box)box.checked=checked;
    });
    updateBrowseChrome(id);
  }
  function selectBrowseRow(id,index,options){
    options=options||{};
    var w=model.browses[id],el=document.getElementById(id);if(!w||!el)return;
    var valid=index>=0&&index<w.records.length,ids=ensureBrowseSelection(w);
    if(!valid){if(!options.preserve)ids.clear();w.selected=-1;w.lastSelectedRecordId="";applyBrowseSelectionVisuals(id);return;}
    var rid=recordId(w.records[index]);
    if(options.range&&Number.isInteger(w.selectionAnchor)){
      var a=Math.min(w.selectionAnchor,index),b=Math.max(w.selectionAnchor,index);
      if(!options.additive)ids.clear();
      for(var n=a;n<=b;n++)ids.add(recordId(w.records[n]));
    }else if(options.toggle){
      if(ids.has(rid))ids.delete(rid);else ids.add(rid);
      w.selectionAnchor=index;
    }else{
      ids.clear();ids.add(rid);w.selectionAnchor=index;
    }
    w.selected=index;w.lastSelectedRecordId=rid;
    applyBrowseSelectionVisuals(id);
  }
  function currentBrowseNavigationIndex(w){
    if(!w||!(w.records||[]).length)return -1;
    var ids=ensureBrowseSelection(w),idx=Number.isInteger(w.selected)?w.selected:-1;
    if(idx>=0&&idx<w.records.length&&ids.has(recordId(w.records[idx])))return idx;
    if(ids.size===1){var only=Array.from(ids)[0],found=w.records.findIndex(function(r){return recordId(r)===only;});if(found>=0)return found;}
    return -1;
  }
  function scrollBrowseCurrentRecordIntoView(id){
    var w=model.browses[id],el=document.getElementById(id);if(!w||!el)return;
    var idx=currentBrowseNavigationIndex(w);
    if(idx<0)return;
    var rid=recordId(w.records[idx]),row=el.querySelector('tbody tr[data-record-id="'+CSS.escape(rid)+'"]');
    if(row&&row.scrollIntoView)row.scrollIntoView({block:"nearest",inline:"nearest"});
  }
  function navigateBusinessRecord(id,command){
    var w=model.browses[id];if(!w)return false;
    var count=(w.records||[]).length;if(!count){selectBrowseRow(id,-1);return false;}
    var current=currentBrowseNavigationIndex(w),target=0;
    if(command==="first")target=0;
    else if(command==="last")target=count-1;
    else if(command==="previous")target=current<0?0:Math.max(0,current-1);
    else target=current<0?0:Math.min(count-1,current+1);
    selectBrowseRow(id,target);
    scrollBrowseCurrentRecordIntoView(id);
    return target!==current;
  }
  function visibleSelectedBrowseRecord(id){
    var rows=selectedBrowseRecords(id);
    return rows.length===1?rows[0]:null;
  }
  function browseColumnSpec(w){
    var fields=browseFieldsForForm(w.formDesign);
    var fieldSpecs=fields.map(function(f){
      var key=f.field_id||browseFieldKey(f);
      var saved=w.columnWidths&&w.columnWidths[key];
      var width=Math.max(60,Number(saved||f.browse_width||180));
      return {key:key,label:f.label||browseFieldKey(f),width:width,field:f,wrap:f.browse_wrap===true};
    });
    return [{key:"__select",label:"",width:34,system:true},{key:"__expand",label:"",width:34,system:true}].concat(fieldSpecs,[
      {key:"__status",label:"Status",width:96,system:true},
      {key:"__updated",label:"Updated",width:150,system:true},
      {key:"__children",label:"Children",width:76,system:true},
      {key:"__actions",label:"",width:92,system:true}
    ]);
  }
  function setBrowseTableWidth(table){
    if(!table)return;
    var total=Array.from(table.querySelectorAll("colgroup col")).reduce(function(sum,col){
      var width=parseFloat(col.style.width)||col.getBoundingClientRect().width||0;
      return sum+width;
    },0);
    if(total>0){table.style.width=Math.ceil(total)+"px";table.style.minWidth=Math.ceil(total)+"px";}
  }
  function installBrowseColumnSplitters(id){
    var w=model.browses[id],el=document.getElementById(id);if(!w||!el)return;
    el.querySelectorAll("th[data-col-key]").forEach(function(th){
      var handle=th.querySelector(".browse-col-resizer");if(!handle)return;
      handle.onmousedown=function(e){
        e.preventDefault();e.stopPropagation();th.classList.add("resizing");
        var key=th.dataset.colKey,startX=e.clientX,startWidth=th.getBoundingClientRect().width;
        function move(ev){
          var width=Math.max(60,Math.round(startWidth+(ev.clientX-startX)));
          w.columnWidths=w.columnWidths||{};w.columnWidths[key]=width;
          var col=el.querySelector('col[data-col-key="'+CSS.escape(key)+'"]');
          if(col){col.style.width=width+"px";setBrowseTableWidth(el.querySelector("table.browse-table"));}
        }
        function up(){th.classList.remove("resizing");document.removeEventListener("mousemove",move);document.removeEventListener("mouseup",up);}
        document.addEventListener("mousemove",move);document.addEventListener("mouseup",up);
      };
    });
  }
  function renderBusinessHeader(id){
    var w=model.browses[id],el=document.getElementById(id),table=el&&el.querySelector("table.browse-table"),row=el&&el.querySelector("thead tr");
    if(!w||!row||!table)return;
    var specs=browseColumnSpec(w),signature=specs.map(function(spec){return spec.key+":"+spec.label+":"+spec.width;}).join("|")+"|sort:"+(w.sortSpec||[]).map(function(x){return String(x.field_id||x.field)+":"+String(x.direction||"asc");}).join(",");
    if(w._browseHeaderSignature===signature&&table.querySelector("colgroup")&&row.children.length===specs.length)return;
    w._browseHeaderSignature=signature;
    var old=table.querySelector("colgroup");if(old)old.remove();
    var cg=document.createElement("colgroup");
    specs.forEach(function(spec){var col=document.createElement("col");col.dataset.colKey=spec.key;col.style.width=spec.width+"px";cg.appendChild(col);});
    table.insertBefore(cg,table.firstChild);
    row.innerHTML=specs.map(function(spec){
      if(spec.key==="__select")return '<th data-col-key="__select" class="browse-select-cell"><input type="checkbox" class="browse-select-all" aria-label="Select all visible records"></th>';
      var f=spec.field||null,sortClass=f&&sortableFieldType(f)?" browse-sortable-header":"",sortTitle=f&&sortableFieldType(f)?' title="Click to sort; Shift-click to add/toggle this field"':'',fieldRef=f?findFieldRef(f):"";return '<th data-col-key="'+esc(spec.key)+'" data-field-ref="'+esc(fieldRef)+'" class="'+sortClass+'"'+sortTitle+'><span class="browse-header-label">'+esc(spec.label)+'</span><span class="browse-header-sort"></span><span class="browse-col-resizer" aria-hidden="true"></span></th>';
    }).join("");
    row.querySelectorAll("th.browse-sortable-header").forEach(function(th){var key=String(th.dataset.fieldRef||""),f=findFieldForRef(w,key),label=th.querySelector(".browse-header-label"),mark=th.querySelector(".browse-header-sort"),idx=(w.sortSpec||[]).findIndex(function(spec){return findFieldForRef(w,spec.field_id||spec.field)===f;});if(mark)mark.textContent=idx>=0?((w.sortSpec[idx].direction==="desc"?" ↓":" ↑")+(idx>0?String(idx+1):"")):"";if(label)label.onclick=function(e){e.preventDefault();quickSortBusinessColumn(id,key,!!e.shiftKey);};});
    var selectAll=row.querySelector(".browse-select-all");
    if(selectAll)selectAll.onchange=function(){
      var ids=ensureBrowseSelection(w);
      if(this.checked)(w.records||[]).forEach(function(r){ids.add(recordId(r));});
      else (w.records||[]).forEach(function(r){ids.delete(recordId(r));});
      applyBrowseSelectionVisuals(id);
    };
    setBrowseTableWidth(table);
    installBrowseColumnSplitters(id);
  }
  function renderBusinessRows(id){
    var t0=performance.now(),w=model.browses[id],el=document.getElementById(id),tbody=el&&el.querySelector("tbody");
    if(!w||!tbody)return {total_ms:0};
    var headerStart=performance.now();renderBusinessHeader(id);var headerMs=performance.now()-headerStart;
    var fields=browseFieldsForForm(w.formDesign),columnCount=fields.length+6,lower=nextLowerLevel(model.byId[w.levelId]),formatStart=performance.now(),prepared=[];
    for(var i=0;i<w.records.length;i++){
      var r=w.records[i],values=new Array(fields.length);
      for(var fi=0;fi<fields.length;fi++)values[fi]=browseFieldValueText(fields[fi],browseRecordValue(r,fields[fi]));
      prepared.push({record:r,index:i,values:values,search:(values.join(" ")+" "+(r.status||"")+" "+recordId(r)).toLowerCase()});
    }
    var formatMs=performance.now()-formatStart,buildStart=performance.now(),fragment=document.createDocumentFragment();
    if(!prepared.length){
      var empty=document.createElement("tr");empty.innerHTML='<td colspan="'+columnCount+'" class="small-muted" style="padding:18px;text-align:center">No records found in this scope.</td>';fragment.appendChild(empty);
    }
    prepared.forEach(function(item){
      var r=item.record,i=item.index,values=item.values,tr=document.createElement("tr");
      tr.dataset.recordId=recordId(r);tr.dataset.search=item.search;
      tr.innerHTML='<td class="browse-select-cell"><input type="checkbox" class="browse-row-select" aria-label="Select record"></td><td><button class="btn" '+(!lower?'disabled':'')+' title="Open records at the next Level">▸</button></td>'+fields.map(function(f,fi){return '<td class="'+(f.browse_wrap===true?'browse-wrap':'browse-nowrap')+'">'+esc(values[fi])+'</td>';}).join("")+'<td><span class="status-badge '+esc(r.status)+'">'+esc(String(r.status).toUpperCase())+'</span></td><td>'+esc(r.updated||"")+'</td><td>'+esc(r.child_count||0)+'</td><td class="browse-row-actions"><button class="btn browse-row-chain" title="View record chain" aria-label="View record chain">⛓</button></td>';
      tr.onclick=function(e){if(e.target.closest("button,input"))return;selectBrowseRow(id,i,{toggle:!!(e.ctrlKey||e.metaKey),range:!!e.shiftKey,additive:!!(e.ctrlKey||e.metaKey)});};
      tr.ondblclick=function(){openRecordEditor(id,r);};
      var rowSelect=tr.querySelector(".browse-row-select");if(rowSelect)rowSelect.onclick=function(e){e.stopPropagation();selectBrowseRow(id,i,{toggle:!e.shiftKey,range:!!e.shiftKey,additive:!!(e.ctrlKey||e.metaKey)});};
      var expandButton=tr.querySelector("td:nth-child(2) button");if(expandButton)expandButton.onclick=function(e){e.stopPropagation();selectBrowseRow(id,i);if(lower)openBusinessBrowse(lower.id,recordId(r),browseRecordDisplay(r,w.formDesign),id,tr);};
      var rowChainButton=tr.querySelector(".browse-row-chain");if(rowChainButton)rowChainButton.onclick=function(e){e.preventDefault();e.stopPropagation();openChainBrowse(id,r);};
      fragment.appendChild(tr);
    });
    var buildMs=performance.now()-buildStart,appendStart=performance.now();tbody.replaceChildren(fragment);var appendMs=performance.now()-appendStart;
    var scope=el.querySelector(".browse-scope");if(scope){ensureFoundSetState(w);scope.textContent=w.foundView==="omitted"?(w.records.length+" omitted · "+(w.allRecords||[]).length+" total"):"";}updateBrowseChrome(id);
    return {header_ms:headerMs,format_ms:formatMs,build_ms:buildMs,append_ms:appendMs,total_ms:performance.now()-t0,row_count:w.records.length,field_count:fields.length};
  }
  async function refreshBusinessBrowse(id){
    var totalStart=performance.now(),w=model.browses[id];if(!w)return;
    var el=document.getElementById(id),tbody=el&&el.querySelector("tbody"),metrics={browse_id:id,level_id:w.levelId,parent_id:w.parentId||"",lifecycle:w.lifecycleView||"active"};
    if(tbody)tbody.innerHTML='<tr><td colspan="7" class="small-muted" style="padding:18px;text-align:center">Loading…</td></tr>';
    try{
      var selectedId=(w.selected>=0&&w.records[w.selected])?recordId(w.records[w.selected]):String(w.lastSelectedRecordId||""),selectedIds=Array.from(ensureBrowseSelection(w));
      w.allRecords=await fetchRecords(w.levelId,w.parentId,w.lifecycleView||"active",metrics);
      var filterStart=performance.now();applyBusinessFindAndSort(w);metrics.find_sort_ms=performance.now()-filterStart;
      var selectionStart=performance.now();w.selected=selectedId?w.records.findIndex(function(r){return recordId(r)===selectedId;}):-1;if(w.selected>=0)w.lastSelectedRecordId=selectedId;else w.lastSelectedRecordId="";
      var visibleSet=new Set(w.records.map(recordId));w.selectedIds=new Set(selectedIds.filter(function(x){return visibleSet.has(x);}));metrics.selection_restore_ms=performance.now()-selectionStart;
      metrics.render=renderBusinessRows(id);metrics.total_ms=performance.now()-totalStart;metrics.row_count=w.records.length;metrics.total_record_count=w.allRecords.length;
      console.info("[CEE Browse Performance]",metrics);
    }catch(e){
      console.warn("Business browse read failed",e);w.allRecords=[];w.records=[];
      if(tbody)tbody.innerHTML='<tr><td colspan="7" class="small-muted" style="padding:18px;text-align:center">No records found.</td></tr>';
      var scope=el&&el.querySelector(".browse-scope");if(scope)scope.textContent="0 rows";
      metrics.total_ms=performance.now()-totalStart;metrics.error=errorText(e);console.warn("[CEE Browse Performance] failed",metrics);
    }
  }
  /* v31 (claude): childHubOptions replaced by an async fetch against the
     real backend (/api/enterprise/sub-hub/create + /list, ent-crud.lisp)
     -- was hardcoded to always return exactly one option, "the next
     Level down", which was the existing Level-chain nesting wearing
     hub-picker language, not a real child-Hub selector. Real sub-hubs
     (independent child-Hub types, same-level or next-level-down
     placement, chosen explicitly at creation) merge in alongside that
     same fallback, which is kept since it's real, existing navigation.
     Each fetched sub-hub gets a lightweight synthetic model.byId entry
     so openBusinessBrowse/levelBase/businessFormFor all work on it
     unmodified -- sub-hubs render/collect records via the generic
     starter form (starterBusinessForm) since they don't have a
     personality-derived _form_design of their own yet. */
  function hubInfoSubject(hubId){return String(hubId||"")+"::hub-info";}
  function hubNameRoot(name){
    return String(name||"Table").replace(/\s+\(sub-hub\)$/,"").trim()||"Table";
  }
  function defaultHubInfo(descriptor){
    descriptor=descriptor||{};
    var name=hubNameRoot(descriptor.rawLabel||descriptor.label||descriptor.name||"Table");
    var singular=name.replace(/s$/i,"")||name;
    return {
      artifact_type:"hub-info",
      hub_id:descriptor.hubId||descriptor.hub_id||descriptor.levelId||descriptor.id||"",
      name:name,
      singular_label:singular,
      plural_label:name,
      description:descriptor.description||"",
      purpose:"",
      status:"active",
      default_form_name:name+" Record Form",
      authority_mode:"inherited",
      gaba_certificate_id:null,
      authorization_mode:"development-open",
      authorization_provider:null,
      record_creation_enabled:true,
      schema_changes_enabled:true
    };
  }
  async function loadHubInfo(descriptor){
    descriptor=descriptor||{};
    var hubId=descriptor.hubId||descriptor.hub_id||descriptor.levelId||descriptor.id||"";
    var base=normalizeInstanceBase(descriptor.instanceBase||descriptor.owningInstance||descriptor.instance_address||"");
    if(!base && descriptor.levelId && model.byId[descriptor.levelId])base=levelBase(model.byId[descriptor.levelId]);
    var fallback=defaultHubInfo(descriptor);
    if(!hubId||!base)return Object.assign(fallback,{loaded_tail_hash:""});
    try{
      var j=await getJson(base+"/api/enterprise/level-system/latest?subject_id="+encodeURIComponent(hubInfoSubject(hubId)));
      var a=decodeArtifact(j);
      if(a&&a.artifact_type==="hub-info"){
        a.loaded_tail_hash=j.tail_hash||j.cu_id||"";
        return Object.assign(fallback,a);
      }
    }catch(e){
      console.warn("Hub info read failed",{hub_id:hubId,instance:base,error:e});
    }
    return Object.assign(fallback,{loaded_tail_hash:""});
  }
  async function appendHubInfo(base,info,loadedTail,action){
    var subjectId=hubInfoSubject(info.hub_id);
    base=normalizeInstanceBase(base);
    if(!base)throw new Error("No owning instance address is available for Hub "+info.hub_id+".");
    var j=await postJson(base+"/api/enterprise/level-system/save",{
      subject_id:subjectId,
      subject_type:"hub-info",
      action:action||"update",
      loaded_tail_hash:loadedTail||"",
      operator:operator(),
      artifact_json:JSON.stringify(info)
    });
    if(!j||j.ok!==true)throw new Error((j&&(j.error||j.message))||"Hub info save failed.");
    return j;
  }
  async function initializeHubInfo(descriptor,description,purpose){
    var info=defaultHubInfo(descriptor);
    info.description=description||info.description||"";
    info.purpose=purpose||"";
    var base=normalizeInstanceBase(descriptor.instanceBase||descriptor.owningInstance||descriptor.instance_address||"");
    if(!base&&descriptor.levelId&&model.byId[descriptor.levelId])base=levelBase(model.byId[descriptor.levelId]);
    if(base)await appendHubInfo(base,info,"","create");
    descriptor.hubInfo=info;
    descriptor.rawLabel=info.name;
    descriptor.label=info.name+" (sub-hub)";
    return info;
  }
  async function fetchChildHubOptions(levelId){
    var lv=model.byId[levelId];
    var options=[];
    var lower=nextLowerLevel(lv);
    if(lower){
      options.push({
        levelId:lower.id,
        hubId:hubIdForLevel(lower),
        instanceBase:normalizeInstanceBase(lower.instance_address||""),
        placementType:"next-level",
        source:"related-hub",
        label:(model.byId[lower.id+"::business-hub"]||{}).label || ("Business Hub — "+lower.label)
      });
    }
    var base=levelBase(lv);
    var hubId=hubIdForLevel(lv);
    if(base && hubId){
      try{
        var j=await getJson(base+"/api/enterprise/sub-hub/list?level_id="+encodeURIComponent(hubId));
        (j.hubs||[]).forEach(function(hub){
          if(String(hub.name||"").toLowerCase()==="_triggers")return; /* system-owned child Hub: surfaced only by Trigger */
          if(!model.byId[hub.hub_id]){
            register({
              id:hub.hub_id, type:"sub-hub",
              label:hub.name, rawLabel:hub.name,
              local_hub_id:hub.local_hub_id||"",
              business_hub_key:"", business_form_design_subject_id:"",
              instance_address:lv.instance_address,
              level_number:null, children:[]
            });
          }
          options.push({levelId:hub.hub_id, hubId:hub.hub_id, localHubId:hub.local_hub_id||"", local_hub_id:hub.local_hub_id||"", instanceBase:normalizeInstanceBase(lv.instance_address||""), placementType:"same-or-declared-level", source:"related-hub", status:String(hub.status||"active").toLowerCase(), label:hub.name+" (sub-hub)"+(String(hub.status||"active").toLowerCase()==="retired"?" · RETIRED":"")});
        });
      }catch(e){
        console.warn("Sub-hub list failed",{level_id:levelId,hub_id:hubId,instance:base,error:e});
      }
    }
    await Promise.all(options.map(async function(option){
      var info=await loadHubInfo(option);
      option.hubInfo=info;
      option.rawLabel=info.name;
      option.label=info.name+(option.source==="related-hub"&&option.placementType==="next-level"?"":" (sub-hub)");
      var node=model.byId[option.levelId];
      if(node){
        node.hubInfo=info;
        node.rawLabel=info.name;
        node.label=info.name;
        node.description=info.description||"";
      }
    }));
    return options;
  }
  function openAddSubHubDialog(levelId, refreshFn, sourceBrowseId){
    var lv=model.byId[levelId];
    var sourceBrowse=sourceBrowseId?model.browses[sourceBrowseId]:null;
    var selectedRecord=(sourceBrowse&&sourceBrowse.selected>=0)?sourceBrowse.records[sourceBrowse.selected]:null;
    modal("Create Business Table",
      '<div class="card"><div class="card-body">'+
      '<div class="small-muted" style="margin-bottom:10px">Creates a governed business Hub, then opens its Hub-specific Form Designer. The table does not accept records until a form design has been published.</div>'+
      '<div class="form-grid">'+
        '<div class="field full"><label>Table name</label><input id="subhub-name" placeholder="e.g. Compliance Contacts"></div>'+
        '<div class="field full"><label>Description</label>'+markdownTextareaHtml('subhub-desc','description','')+'</div>'+
        '<div class="field full"><label>Level</label>'+
          '<div class="small-muted" style="margin:4px 0">'+esc(lv.label)+' — the new child table is created in the current Hub’s governed Level.</div>'+
        '</div>'+
      '</div>'+
      '<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button><button class="btn primary" onclick="CEE20.saveSubHub(\''+esc(levelId)+'\')">Create Table &amp; Design Form</button></div>'+
      '</div></div>');
    model.drafts.subHub={levelId:levelId, refreshFn:refreshFn, sourceBrowseId:sourceBrowseId||"", parentRecordId:selectedRecord?recordId(selectedRecord):"", parentRecordName:selectedRecord?browseRecordDisplay(selectedRecord,sourceBrowse.formDesign):""};
  }
  /* v31 (claude): was sending level_id/target_level_id as raw tree-node
     ids (lv.id/target.id) -- inconsistent with every other call in this
     file (records/create, records/list, form-design/save|latest), which
     already correctly resolve hubIdForLevel(lv). Self-consistent with
     sub-hub/list's own matching bug (fixed alongside this), so it
     hadn't visibly broken anything yet -- but it meant a sub-hub's
     child_hub_of_level_id tag didn't correlate with the real hub_id
     space business records use, and it silently defeated the backend's
     server-side level_number verification (crud-level-number-for-hub
     needs a real hub_id to find anything). */
  async function saveSubHub(levelId){
    var d=model.drafts.subHub; if(!d) return;
    var lv=model.byId[levelId];
    var name=(document.getElementById("subhub-name")||{}).value||"";
    var desc=(document.getElementById("subhub-desc")||{}).value||"";
    var placement="same";
    var target=lv;
    var base=levelBase(lv);
    if(!base){ toast("No owning instance address for "+lv.label,"err"); return; }
    try{
      var resp=await fetch(base+"/api/enterprise/sub-hub/create",{
        method:"POST", cache:"no-store",
        headers:{"Content-Type":"application/json","Accept":"application/json"},
        body:JSON.stringify({
          level_id:hubIdForLevel(lv), level_number:lv.level_number,
          target_level_id:hubIdForLevel(target), target_level_number:target.level_number,
          name:name, description:desc, operator:operator()
        })
      });
      var j=await resp.json().catch(function(){return null;});
      if(j && j.ok===true){
        var hub=j.hub||{};
        var newHubId=hub.hub_id||hub.id||"";
        if(!newHubId) throw new Error("Create succeeded but the backend did not return hub_id.");
        var descriptor={
          id:newHubId, type:"sub-hub", label:hub.name||name, rawLabel:hub.name||name,
          business_hub_id:newHubId, hubId:newHubId, levelId:newHubId,
          instance_address:lv.instance_address, owningInstance:lv.instance_address,
          placementType:"same-level",
          source:"create-business-table", children:[]
        };
        register(descriptor);
        await initializeHubInfo(descriptor,desc,"");
        descriptor._openBrowseAfterFirstFormSave=true;
        descriptor._newTableParentId=d.parentRecordId||"";
        descriptor._newTableParentName=d.parentRecordName||"";
        descriptor._newTableSourceBrowseId=d.sourceBrowseId||"";
        toast("Business table created. Design and publish its record form.","ok");
        closeEditModal();
        if(d.refreshFn) await d.refreshFn();
        window.openHubFormDesigner({
          hubId:newHubId, levelId:newHubId, owningInstance:lv.instance_address,
          hubLabel:hub.name||name, placementType:descriptor.placementType,
          source:"create-business-table"
        });
        var formNode=model.byId[newHubId+"::form-design"];
        if(formNode){
          formNode._openBrowseAfterFirstFormSave=true;
          formNode._newTableParentId=descriptor._newTableParentId;
          formNode._newTableParentName=descriptor._newTableParentName;
          formNode._newTableSourceBrowseId=descriptor._newTableSourceBrowseId;
        }
      }else{
        var detail=(j&&(j.error||j.message))||("HTTP "+resp.status+" response: "+JSON.stringify(j));if(window.ceeCaptureDiagnostic)window.ceeCaptureDiagnostic("http-error",detail,{status:resp.status,response_json:j});toast("Sub-hub create failed: "+detail,"err");
      }
    }catch(e){
      toast("Sub-hub create failed: "+(e.message||e),"err");
    }
  }

  function positionChildBrowse(childEl,parentBrowseId,parentRow){
    var layer=document.getElementById("mdi-layer");
    var parentEl=parentBrowseId?document.getElementById(parentBrowseId):null;
    if(!layer||!parentEl) return false;

    var layerRect=layer.getBoundingClientRect();
    var parentRect=parentEl.getBoundingClientRect();
    var rowRect=parentRow?parentRow.getBoundingClientRect():parentRect;

    var left=(parentRect.left-layerRect.left)+34;
    var top=(rowRect.top-layerRect.top)+28;

    var maxLeft=Math.max(0,layer.clientWidth-380);
    var maxTop=Math.max(0,layer.clientHeight-240);
    childEl.style.left=Math.min(Math.max(0,left),maxLeft)+"px";
    childEl.style.top=Math.min(Math.max(0,top),maxTop)+"px";
    return true;
  }

  /* ChatGPT 20260721-02: Acceptance-only, schema-driven FINRA test-record
     generator. It intentionally calls the normal /records/create route once per
     record so validation, 256-bit identity assignment, CU append, parent scope,
     indexing, and authority checks are exercised exactly as manual creation is. */
  var finraTestData={
    firms:["Northstar Securities LLC","Harbor Ridge Capital Markets LLC","Meridian Brokerage Services LLC","Summit Point Securities Inc.","Blue Heron Financial Network LLC","Cedar Gate Securities LLC"],
    people:["Elena Marquez","Daniel Mercer","Priya Shah","Marcus Reed","Natalie Chen","Owen Gallagher","Sofia Bennett","Caleb Thompson","Maya Patel","Julian Foster"],
    offices:["Southeast Regional OSJ","Midtown Branch Office","Institutional Markets Office","Great Lakes Regional Office","Pacific Northwest OSJ","Capital Markets Headquarters"],
    roles:["Chief Compliance Officer","General Securities Principal","Branch Manager","Supervising Principal","Operations Principal","Financial and Operations Principal","Registered Representative","Compliance Analyst"],
    authorities:["FINRA Rule 3110","FINRA Rule 3120","FINRA Rule 3130","FINRA Rule 3270","FINRA Rule 4511","SEA Rule 15c3-1","SEA Rule 17a-4"],
    channels:["Retail Brokerage","Municipal Securities","Private Placements","Options Supervision","Institutional Trading","Investment Banking"],
    systems:["Trade surveillance platform","Electronic communications archive","Branch inspection system","Customer complaint workflow","Registration and licensing system","Financial reporting platform"],
    recordTypes:["Customer Complaint","Trade Surveillance Review","Supervisory Approval","Correspondence","FOCUS / Financial Filing","Other Books & Records"]
  };
  function testPick(a){return a&&a.length?a[Math.floor(Math.random()*a.length)]:"";}
  function testSubset(a){if(!a||!a.length)return [];var copy=a.slice().sort(function(){return Math.random()-.5;});return copy.slice(0,Math.max(1,Math.min(copy.length,1+Math.floor(Math.random()*Math.min(3,copy.length)))));}
  function testDate(daysBack){var d=new Date(Date.now()-Math.floor(Math.random()*(daysBack||730))*86400000);return d.toISOString().slice(0,10);}
  function testTextForField(key,seq){
    key=String(key||"").toLowerCase();
    if(/(legal_name|firm_name|entity_name|organization_name)/.test(key))return testPick(finraTestData.firms);
    if(/(person_name|representative_name|associated_person|principal_name|owner_name)/.test(key))return testPick(finraTestData.people);
    if(/(branch|office|osj).*(name|assignment)|office_assignment/.test(key))return testPick(finraTestData.offices);
    if(/role|principal|manager/.test(key))return testPick(finraTestData.roles);
    if(/primary_authority|authority|rule_reference|framework_ref/.test(key))return testPick(finraTestData.authorities);
    if(/supervisory_channel|business_line/.test(key))return testPick(finraTestData.channels);
    if(/source_system|system_class/.test(key))return testPick(finraTestData.systems);
    if(/crd/.test(key))return String(100000+Math.floor(Math.random()*899999));
    if(/lei|legal_entity_identifier/.test(key))return "TESTLEI"+String(seq).padStart(12,"0");
    if(/email/.test(key))return "finra.test."+seq+"@example.test";
    if(/phone/.test(key))return "+1-202-555-"+String(1000+(seq%9000));
    if(/agreement_reference/.test(key))return "CA-"+new Date().getFullYear()+"-"+String(seq).padStart(5,"0");
    if(/geographic_jurisdiction/.test(key))return testPick(["New York","New Jersey","Florida","Illinois","Texas","California","Massachusetts"]);
    if(/cadence/.test(key))return testPick(["Monthly","Quarterly","Annual","Event Driven"]);
    if(/description|notes|basis|dependency/.test(key))return "Semi-realistic FINRA Acceptance test record "+seq+" generated for browser, validation, relationship, and CU-chain testing.";
    if(/name|label|title|section/.test(key))return testPick(finraTestData.channels)+" Test Record "+seq;
    return "FINRA test value "+seq;
  }
  function selectOptionId(o,index){
    if(o&&typeof o==="object"&&o.id!==undefined&&o.id!==null)return o.id;
    return index;
  }
  /* v31c144 (claude): selectOptionId's positional fallback (used whenever an
     option object has no explicit .id -- true for any select/multi_select
     that predates the optionsCsv ID-allocation fix, badge v31c133) is only
     stable if every caller indexes into the SAME array. Export
     (browseOptionLabelMap) and import validation (ieNormalizeImportValue)
     both index into the full, unfiltered f.options. But recordFieldHtml,
     floodValueFor, testValueForField, and the [CEE Select diagnostic]
     pre-submit check were indexing into activeSelectOptions(f) -- the
     retired-filtered list. Any field with a retired option ahead of an
     ID-less active one got two different fallback numbers for the same
     option depending which code path ran, so a value written by the record
     editor could silently fail to match on export/re-import. This helper
     is the one true positional-identity source: always resolve against the
     FULL f.options array, regardless of which (possibly filtered) list the
     caller is iterating for display. */
  function stableOptionId(f,o,fallbackIndex){
    if(o&&typeof o==="object"&&o.id!==undefined&&o.id!==null)return o.id;
    var opts=Array.isArray(f&&f.options)?f.options:[];
    var idx=opts.indexOf(o);
    return idx>=0?idx:(fallbackIndex!=null?fallbackIndex:0);
  }
  function selectOptionLabel(o){
    return (o&&typeof o==="object")?String(o.label!==undefined?o.label:(o.value!==undefined?o.value:o.id)):String(o);
  }
  function activeSelectOptions(f){
    var opts=Array.isArray(f&&f.options)?f.options:[];
    return opts.filter(function(o){return !(o&&typeof o==="object"&&String(o.status||"active").toLowerCase()==="retired");});
  }
  /* v31c317 (claude): selectOptionRecordsFromCsv removed. It rebuilt
     f.options from scratch by diffing optionsCsv label TEXT against the
     old array on every Form Design save -- unable to tell a rename apart
     from a delete+add, silently dropping (not retiring) any option whose
     current label text wasn't in the CSV box, and resetting status to
     "active" for whatever survived. Removed rather than left dormant so
     it can't get re-wired later; see normalizeFieldOptions and the
     CEE20.option* per-row handlers for the replacement, identity-
     preserving, retire-not-delete editing model. */
  function testValueForField(f,seq){
    var key=browseFieldKey(f),type=String(f.type||"text").toLowerCase(),opts=Array.isArray(f.options)?f.options:[];
    if(f.default_value!==undefined&&f.default_value!==null&&f.default_value!=="")return f.default_value;
    if(type==="select"||type==="dropdown"){var ao=activeSelectOptions(f);if(!ao.length)return testTextForField(key,seq);var pick=testPick(ao);return stableOptionId(f,pick,ao.indexOf(pick));}
    if(type==="multi_select"||type==="multiselect"||type==="list<text>"){var mo=activeSelectOptions(f);if(!mo.length)return testSubset(finraTestData.recordTypes);return testSubset(mo).map(function(o){return stableOptionId(f,o,mo.indexOf(o));});}
    if(type==="boolean"||type==="checkbox")return Math.random()>=.35?"true":"false";
    if(type==="integer"||type==="number")return /level_number/.test(key)?Math.max(1,Math.floor(Math.random()*13)+1):Math.floor(Math.random()*500)+1;
    if(type==="decimal"||type==="float")return Number((Math.random()*1000000).toFixed(2));
    if(type==="date")return testDate(730);
    if(type==="datetime"||type==="timestamp")return new Date(Date.now()-Math.floor(Math.random()*31536000000)).toISOString();
    if(type==="markdown")return "## FINRA Test Record "+seq+"\n\nGenerated in the Acceptance environment for business-record browser testing.\n\n- Authority: "+testPick(finraTestData.authorities)+"\n- Review owner: "+testPick(finraTestData.roles);
    if(type==="list<integer>")return [Math.max(1,Math.floor(Math.random()*13)+1)];
    return testTextForField(key,seq);
  }
  function generatedRecordValues(form,seq){var values={};(form.fields||[]).forEach(function(f){if(fieldIsRetired(f)||f.system_managed===true||f.read_only===true||fieldIsCalculated(f))return;var key=browseFieldKey(f);if(!key)return;values[key]=testValueForField(f,seq);});return values;}
  function generatedRecordTitle(values,form,seq){var fields=(form&&form.fields)||[];var primary=fields.find(function(f){return f.primary_display===true;})||fields[0];var value=primary&&values[browseFieldKey(primary)];return browseValueText(value)||"FINRA Test Record "+seq;}
  function errorText(e){return String((e&&(e.message||e.error||e.detail))||e||"Unknown generation error");}
  function fixtureSafeText(value,max){var s=String(value||"").replace(/\s+/g," ").trim();return s.length>(max||80)?s.slice(0,(max||80)-1)+"…":s;}
  var TP_AUTOMATION_STANDARDS={
    1:{id:"exploratory",label:"Exploratory",description:"Repeatable UI observation is sufficient.",minimum:{actionability:1,fixtureability:0,observability:1,determinism:1,authority:0,evidence:0}},
    2:{id:"practical",label:"Practical",description:"Deterministic UI or API observation is required.",minimum:{actionability:1,fixtureability:1,observability:2,determinism:2,authority:1,evidence:1}},
    3:{id:"acceptance",label:"Acceptance",description:"Fixture-bound authoritative comparison with retained evidence.",minimum:{actionability:2,fixtureability:2,observability:2,determinism:2,authority:2,evidence:2}},
    4:{id:"evidentiary",label:"Evidentiary",description:"Authoritative result plus request, response, identity, or CU evidence.",minimum:{actionability:2,fixtureability:2,observability:3,determinism:3,authority:3,evidence:3}},
    5:{id:"governed",label:"Governed",description:"Deterministic provenance, principal, policy, and evidentiary trace.",minimum:{actionability:3,fixtureability:3,observability:3,determinism:3,authority:4,evidence:4}}
  };
  function tpAutomationStandard(level){return TP_AUTOMATION_STANDARDS[Math.max(1,Math.min(5,Number(level)||3))]||TP_AUTOMATION_STANDARDS[3];}
  var TP_AUTOMATION_HELP_OPENER=null;
  function ensureAutomationHelpLayer(){
    var layer=document.getElementById("automation-help-backdrop");
    if(layer)return layer;
    layer=document.createElement("div");
    layer.id="automation-help-backdrop";
    layer.className="automation-help-backdrop";
    layer.innerHTML='<section class="automation-help-modal" role="dialog" aria-modal="true" aria-labelledby="automation-help-title"><div class="automation-help-header"><strong id="automation-help-title">Help</strong><button type="button" class="btn" id="automation-help-x" aria-label="Close help">×</button></div><div id="automation-help-body" class="automation-help-body"></div><div class="automation-help-footer"><button type="button" class="btn primary" id="automation-help-close">Close</button></div></section>';
    document.body.appendChild(layer);
    function close(){window.closeAutomationEvidenceHelp();}
    layer.querySelector("#automation-help-x").addEventListener("click",close);
    layer.querySelector("#automation-help-close").addEventListener("click",close);
    layer.addEventListener("pointerdown",function(e){if(e.target===layer)close();});
    document.addEventListener("keydown",function(e){if(e.key==="Escape"&&layer.classList.contains("show")){e.preventDefault();e.stopPropagation();close();}},true);
    return layer;
  }
  window.closeAutomationEvidenceHelp=function(){
    var layer=document.getElementById("automation-help-backdrop");
    if(layer)layer.classList.remove("show");
    var opener=TP_AUTOMATION_HELP_OPENER;TP_AUTOMATION_HELP_OPENER=null;
    if(opener&&document.contains(opener)){try{opener.focus();}catch(_e){}}
  };
  window.openAutomationEvidenceHelp=function(kind){
    TP_AUTOMATION_HELP_OPENER=document.activeElement;
    var layer=ensureAutomationHelpLayer(),title="Automation Evidence Grade",body="";
    if(kind==="classification"){
      title="Automation Classification Help";
      body='<p><b>AUTO</b> means the criterion meets the selected evidence standard and CEE has a registered executor capable of performing the action and retaining the required evidence.</p><p><b>CANDIDATE</b> means the criterion is machine-verifiable in principle, but an executor, fixture binding, explicit threshold, or required evidence source is still missing.</p><p><b>MANUAL</b> means the criterion currently requires human judgment, visual interpretation, an external process, or an unsupported interaction.</p><div class="small-muted">MANUAL is determined first from intrinsic human-judgment requirements and remains stable across evidence grades. The evidence slider compares a stable evidence-maturity assessment with the selected requirement. Executor state and evidence maturity remain visible independently, even when the derived AUTO count changes only slightly.</div>';
    }else{
      var rows=Object.keys(TP_AUTOMATION_STANDARDS).map(function(k){var x=TP_AUTOMATION_STANDARDS[k];return '<tr><td style="white-space:nowrap"><b>E'+k+' — '+esc(x.label)+'</b></td><td>'+esc(x.description)+'</td></tr>';}).join('');
      body='<p>The slider sets the minimum Evidence Grade required before a criterion may be classified <b>AUTO</b>. A criterion with a higher available grade also meets a lower selected minimum. The fixture action (Reconcile, Reuse, New, or Replace) controls fixture-record lifecycle separately and does not change Evidence Grade.</p><table class="automation-help-table"><thead><tr><th>Evidence Grade</th><th>Required evidence</th></tr></thead><tbody>'+rows+'</tbody></table><div class="small-muted" style="margin-top:10px"><b>Default: E3 — Acceptance.</b> The accepted Evidence Grade, intrinsic automability, executor state, evidence maturity, capability gaps, dimensional diagnostics, rationale, and automation contract are written into the Test Plan CU.</div>';
    }
    layer.querySelector("#automation-help-title").textContent=title;
    layer.querySelector("#automation-help-body").innerHTML=body;
    layer.classList.add("show");
    requestAnimationFrame(function(){var close=layer.querySelector("#automation-help-close");if(close)close.focus();});
  };
  function tpAtomicSplitSuggestions(text){
    var raw=String(text||"").trim();
    var pieces=raw.split(/\s*(?:;|\band\b|\bwhile\b|\bwithout\b)\s*/i).map(function(x){return x.trim().replace(/^[,.:\-\s]+|[,.:\-\s]+$/g,"");}).filter(function(x){return x.length>10;});
    if(pieces.length<2){
      var clauses=raw.split(/\s*,\s*(?=(?:no|the|each|every|records?|sort|browse|dialog|field|result|selection)\b)/i).map(function(x){return x.trim();}).filter(function(x){return x.length>10;});
      if(clauses.length>1)pieces=clauses;
    }
    return pieces.slice(0,6).map(function(x){return /[.!?]$/.test(x)?x:x+".";});
  }
  var TP_EVIDENCE_LEVEL_CAPABILITIES={
    1:["repeatable_observation"],
    2:["deterministic_expected_result","repeatable_fixture","basic_execution_evidence"],
    3:["fixture_binding","authoritative_identity","exact_result_comparison","reproducible_retained_evidence"],
    4:["authoritative_execution_record","record_or_cu_identity","execution_context_timestamp","source_result_linkage"],
    5:["principal_attribution","policy_capability_context","executor_fixture_version","evidence_integrity","provenance_linkage","governing_attestation","policy_boundary_reproducibility"]
  };
  var TP_EXECUTOR_CAPABILITY_CATALOG=[
    {executor:"cee-found-set-fixture-runner",version:"v6",contexts:["business-browse","child-business-browse","mdi-business-browse"],targets:["found-set","found-set-status","omit-selected","show-omitted-only","return-to-found-set","show-all-records","constrain-found-set","extend-found-set","refresh","sort","found-set-commands","virtualized-rows"],actions:["view","click","open","change","select"],assertions:["membership.equals","membership.includes","membership.excludes","membership.excludes-selected","membership.unique","omitted-membership.equals","omitted-membership.contains-selected","found-count.equals","found-count.equals-total","found-count.delta","total-count.equals","total-count.unchanged","status.matches","view-mode.equals","selection.preserved","sort-membership.unchanged","command.enabled","command.disabled","window-state.isolated","empty-state.active","membership.preserves-unselected","membership.no-stale","found-count.delta-selected","counts.unchanged","relationship-scope.matches","lifecycle-scope.matches","command.scoped","workflow.counts-correct","membership.equals-omitted","omission.preserved-after-refresh"]},
    {executor:"cee-record-navigation-fixture-runner",version:"v2",contexts:["business-browse","child-business-browse","mdi-business-browse"],targets:["record-navigation","first-record","previous-record","next-record","last-record","record-position"],actions:["click","select","navigate","view"],assertions:["position.equals","selected-id.equals","selection.single","boundary.no-wrap","command.enabled","command.disabled","order.follows-visible-set","empty-state.equals","empty-commands.disabled","state.restored","record-mutation.none","window-state.isolated"]},
    {executor:"cee-duplicate-record-fixture-runner",version:"v3",contexts:["business-browse","child-business-browse","mdi-business-browse"],targets:["duplicate-record","duplicate-command","duplicate-draft","duplicate-save","duplicate-cancel"],actions:["click","open","create","cancel","inspect","deny"],assertions:["command.enabled","command.disabled","draft.mode.new","draft.values.match","draft.identity.blank","counts.unchanged","record.identity.fresh","record.identity.canonical","record.values.match","record.parent.same","record.lifecycle.active","record.tail.differs-source","source.unchanged","found-count.reconciled","sort.preserved","selection.new-record"]},
    {executor:"cee-validation-autoentry-fixture-runner",version:"v2",contexts:["business-browse","child-business-browse","mdi-business-browse"],targets:["validation","auto-entry","record-create"],actions:["create","reject","normalize","generate","inspect"],assertions:["fixture.schema.available","request.rejected","record.not-created","value.normalized","value.defaulted","value.generated","value.equals-principal","sequence.monotonic"]},
    {executor:"cee-sort-fixture-runner",version:"v1",contexts:["business-browse"],targets:["sort"],actions:["change","click","open"],assertions:["order","selection","status"]},
    {executor:"cee-find-fixture-runner",version:"v1",contexts:["business-browse","child-business-browse"],targets:["find","found-set"],actions:["open","click","change"],assertions:["membership","count","status"]}
  ];
  function tpNormalizeBinding(binding){binding=binding||{};return {context:String(binding.context||"").trim().toLowerCase(),target:String(binding.target||"").trim().toLowerCase(),action:String(binding.action||"").trim().toLowerCase()};}
  function tpExecutorCapabilityMatch(binding,assertion,preferredExecutor){
    var b=tpNormalizeBinding(binding),preferred=String(preferredExecutor||""),matches=TP_EXECUTOR_CAPABILITY_CATALOG.filter(function(c){
      return (!preferred||c.executor===preferred)&&(!b.context||c.contexts.indexOf(b.context)>=0)&&(!b.target||c.targets.indexOf(b.target)>=0)&&(!b.action||c.actions.indexOf(b.action)>=0)&&(!assertion||!c.assertions||c.assertions.indexOf(String(assertion))>=0);
    });
    return matches.length?matches[0]:null;
  }
  var TP_EXECUTOR_EVIDENCE_CONTRACTS={
    "cee-find-fixture-runner":{version:"v1",maximum_level:4,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,fixture_binding:true,authoritative_identity:true,exact_result_comparison:true,reproducible_retained_evidence:true,authoritative_execution_record:true,authoritative_request:true,authoritative_response:true,record_or_cu_identity:true,execution_context_timestamp:true,source_result_linkage:true,error_path_capture:true,executor_fixture_version:true}},
    "cee-find-observable-runner":{version:"v1",maximum_level:2,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,execution_context_timestamp:true,executor_fixture_version:true}},
    "cee-record-navigation-fixture-runner":{version:"v2",planned:false,maximum_level:4,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,fixture_binding:true,authoritative_identity:true,exact_result_comparison:true,reproducible_retained_evidence:true,authoritative_execution_record:true,record_or_cu_identity:true,execution_context_timestamp:true,source_result_linkage:true,error_path_capture:true,executor_fixture_version:true}},
    "cee-duplicate-record-fixture-runner":{version:"v3",planned:false,maximum_level:4,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,fixture_binding:true,authoritative_identity:true,exact_result_comparison:true,reproducible_retained_evidence:true,authoritative_execution_record:true,authoritative_request:true,authoritative_response:true,record_or_cu_identity:true,execution_context_timestamp:true,source_result_linkage:true,error_path_capture:true,executor_fixture_version:true}},
    "cee-validation-autoentry-fixture-runner":{version:"v2",planned:false,maximum_level:4,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,fixture_binding:true,authoritative_identity:true,exact_result_comparison:true,reproducible_retained_evidence:true,authoritative_execution_record:true,authoritative_request:true,authoritative_response:true,record_or_cu_identity:true,execution_context_timestamp:true,source_result_linkage:true,error_path_capture:true,executor_fixture_version:true}},
    "cee-sort-fixture-runner":{version:"v1",planned:false,maximum_level:4,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,fixture_binding:true,authoritative_identity:true,exact_result_comparison:true,reproducible_retained_evidence:true,authoritative_execution_record:true,authoritative_request:true,authoritative_response:true,record_or_cu_identity:true,execution_context_timestamp:true,source_result_linkage:true,error_path_capture:true,executor_fixture_version:true}},
    "cee-found-set-fixture-runner":{version:"v6",planned:false,maximum_level:3,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,fixture_binding:true,authoritative_identity:true,exact_result_comparison:true,reproducible_retained_evidence:true,record_or_cu_identity:true,execution_context_timestamp:true,source_result_linkage:true,error_path_capture:true,executor_fixture_version:true}},
    "cee-lifecycle-fixture-runner":{version:"planned-v1",planned:true,maximum_level:4,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,fixture_binding:true,authoritative_identity:true,exact_result_comparison:true,reproducible_retained_evidence:true,authoritative_execution_record:true,authoritative_request:true,authoritative_response:true,record_or_cu_identity:true,execution_context_timestamp:true,source_result_linkage:true,error_path_capture:true,executor_fixture_version:true}},
    "cee-persistence-fixture-runner":{version:"planned-v1",planned:true,maximum_level:3,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,fixture_binding:true,authoritative_identity:true,exact_result_comparison:true,reproducible_retained_evidence:true,execution_context_timestamp:true,executor_fixture_version:true}},
    "cee-timing-threshold-runner":{version:"planned-v1",planned:true,maximum_level:2,capabilities:{repeatable_observation:true,deterministic_expected_result:true,repeatable_fixture:true,basic_execution_evidence:true,execution_context_timestamp:true,executor_fixture_version:true}}
  };
  function tpEvidenceContract(id){return Object.assign({version:"",planned:false,maximum_level:1,capabilities:{}},TP_EXECUTOR_EVIDENCE_CONTRACTS[String(id||"")]||{});}
  function tpEvidenceGradeLabel(maturity){
    var m=maturity||{},level=Number(m.level)||0,label=String(m.label||"").trim();
    if(!level)return label||"None";
    label=label.replace(/^E\d+\s*[—-]\s*/i,"")||((tpAutomationStandard(level)||{}).label||"");
    return "E"+level+" — "+label;
  }
  function tpEvidenceMaturity(capabilities,requirements){
    var caps=capabilities||{},req=requirements||{},level=0,missingByLevel={};
    for(var n=1;n<=5;n++){
      var needed=(TP_EVIDENCE_LEVEL_CAPABILITIES[n]||[]).filter(function(k){return !(k==="error_path_capture"&&!req.error_path);});
      var missing=needed.filter(function(k){return !caps[k];});
      missingByLevel[n]=missing;
      if(!missing.length&&level===n-1)level=n;else break;
    }
    var next=Math.min(5,Math.max(1,level+1)),std=tpAutomationStandard(level||1);
    return {level:level,id:level?std.id:"none",label:level?("E"+level+" — "+std.label):"None",capabilities:caps,missing_for_next_level:level>=5?[]:(missingByLevel[next]||[]),missing_by_level:missingByLevel};
  }
  function tpFoundSetVerificationSpec(text,binding){
    var raw=String(text||"").trim(),s=raw.toLowerCase(),b=tpNormalizeBinding(binding||{}),target=b.target||"",operation="",verification="membership.equals",parameters={};
    if(/\b(delete|restore|undelete|authorization|passport|worker unavailable|timeout|malformed|keyboard|shortcut|drag|resize|new session|pagination|virtualization|cached|tooltip|appearance|cu append|chain length|business-record write|network request|backend request)\b/.test(s))return null;
    if(target==="omit-selected")operation="omit.selected";
    else if(target==="show-omitted-only")operation="omitted.show";
    else if(target==="return-to-found-set")operation="found-set.return";
    else if(target==="show-all-records")operation="found-set.show-all";
    else if(target==="constrain-found-set")operation="found-set.constrain";
    else if(target==="extend-found-set")operation="found-set.extend";
    else if(target==="sort")operation="sort.apply";
    else if(target==="refresh")operation="browse.refresh";
    else if(target==="found-set-commands")operation="command.inspect";
    else operation="found-set.observe";
    if(/show all records?|found count equals the total|initial found/.test(s))operation="found-set.show-all";
    else if(/empty found set|found count becomes zero|contains zero/.test(s))operation="omit.all";
    else if(/show omitted|omitted-only|only explicitly omitted/.test(s))operation="omitted.show";
    else if(/return to found/.test(s))operation="found-set.return";
    else if(/constrain|intersection/.test(s))operation="found-set.constrain";
    else if(/extend|union|deduplicat/.test(s))operation="found-set.extend";
    else if(/omit/.test(s))operation="omit.selected";
    else if(/sort/.test(s))operation="sort.apply";
    else if(/window|independent found-set state|each browse window/.test(s))operation="window.compare";
    if(/found count.*decreas|decreases by exactly one|decrease by one/.test(s)){verification="found-count.delta";parameters.delta=-1;}
    else if(/found count.*increas/.test(s)){verification="found-count.delta";var m=s.match(/increase(?:s|d)? by (\d+)/);parameters.delta=m?Number(m[1]):1;}
    else if(/found count.*(?:equals|becomes|is )\s*(?:zero|0)/.test(s)){verification="found-count.equals";parameters.value=0;}
    else if(/found count.*equals the total|found count equals.*total/.test(s)){verification="found-count.equals-total";}
    else if(/total count remains unchanged|total remains unchanged|total count.*unchanged/.test(s)){verification="total-count.unchanged";}
    else if(/status|displays .*found.*total|mode indicator/.test(s)){verification="status.matches";}
    else if(/omitted record.*retriev|omitted-membership|explicitly omitted/.test(s)){verification="omitted-membership.contains-selected";}
    else if(/no included record|omitted records? are hidden|omitted.*absent/.test(s)){verification="membership.excludes";parameters.set="omitted";}
    else if(/selected record no longer|selected records? are removed|all selected records are removed|intended records are omitted/.test(s)){verification="membership.excludes-selected";}
    else if(/each canonical record id appears only once|no canonical record id appears more than once|unique record ids?/.test(s)){verification="membership.unique";}
    else if(/original.*remain included|every original found record remains included/.test(s)){verification="membership.includes";parameters.set="base";}
    else if(/only included records|resulting found set|expected intersection|expected union|membership is unchanged|included membership is unchanged/.test(s)){verification="membership.equals";}
    else if(/omitted-only mode|view mode|identifies omitted-only/.test(s)){verification="view-mode.equals";parameters.value="omitted";}
    else if(/return.*included|included found set/.test(s)){verification="view-mode.equals";parameters.value="included";}
    else if(/enabled|available/.test(s)){verification="command.enabled";}
    else if(/disabled/.test(s)){verification="command.disabled";}
    else if(/sort.*membership|membership.*sorting|counts.*unchanged/.test(s)){verification="sort-membership.unchanged";}
    else if(/window|independent/.test(s)){verification="window-state.isolated";}
    else if(/empty-state|empty found set/.test(s)){verification="empty-state.active";}
    return {operation:operation,verification:verification,parameters:parameters,binding:b};
  }
  function tpFoundSetRunnerSupportsCriterion(text,binding){
    return !!tpFoundSetVerificationSpec(text,binding);
  }
  function tpSortRunnerSupportsCriterion(text){
    var s=String(text||"").toLowerCase();
    if(!/\b(sort|ascending|descending|sort field|precedence|ordered|order)\b/.test(s))return false;
    if(/\b(drag|resize|keyboard|focus|z-order|modal position|visual|appearance|color|layout)\b/.test(s))return false;
    if(/\b(invalid|unresolved|missing field|diagnostic|error message|header|column-header|shift-click|quick sort|refresh|reopen|reload)\b/.test(s))return false;
    return true;
  }
  function fixtureAutomationClassification(stepText,test,standardLevel){
    var raw=String(stepText||"").trim(),s=raw.toLowerCase(),standard=tpAutomationStandard(standardLevel);
    var out={eligibility:"candidate",display_status:"candidate",gap_type:"executor-gap",gap_codes:[],reason_code:"deterministic-step",reason:"Deterministic criterion appears suitable for automation.",confidence:"medium",characteristics:[],standard_level:Number(standardLevel)||3,standard_id:standard.id,standard_label:standard.label,classifier:"cee-automation-analysis-v6",dimensions:{actionability:0,fixtureability:0,observability:0,determinism:0,authority:0,evidence:0},broad_criterion:false,atomic_split_suggestions:[],intrinsic_automability:"machine-verifiable",executor_state:{id:"none",executor_id:"",fixture_bound:false},evidence_maturity:{level:1,id:"exploratory",label:"E1 — Exploratory",capabilities:{},missing_for_next_level:[]},evidence_contract:{id:"",version:"",planned:false,maximum_level:1}};
    function has(re,label){if(re.test(s)){out.characteristics.push(label);return true;}return false;}
    var visual=has(/\b(look|visually|appearance|alignment|color|layout|screenshot|readable|displayed correctly|looks correct)\b/,"visual-judgment");
    var human=has(/\b(human|manually|reviewer|judg(e|ment)|subjective|confirm with user)\b/,"human-judgment");
    var external=has(/\b(external|another browser|different machine|network outage|disconnect|restart server|terminal|shell|filesystem)\b/,"external-dependency");
    var timing=has(/\b(wait|latency|seconds|performance|timing|responsive|threshold)\b/,"timing-sensitive");
    var interaction=has(/\b(drag|resize|move window|tile|cascade|multi-monitor|detach|focus|z-order|keyboard)\b/,"complex-ui-interaction");
    var lifecycle=has(/\b(delete|deleted|restore|undelete|soft delete)\b/,"lifecycle");
    var persistence=has(/\b(reopen|reload|refresh|close and open|new session|after closing)\b/,"persistence");
    var find=has(/\b(find|search|criterion|criteria|operator|found set|show all|omit|match|contains|begins|ends|equals|greater|less|range|empty|boolean)\b/,"find-semantic");
    var foundSet=has(/\b(found set|found count|total count|omit selected|omitted records?|omitted-only|show omitted|return to found|show all records?|constrain|extend|intersection|union|deduplicat|membership)\b/,"found-set-semantic");
    var sort=has(/\b(sort|ascending|descending|sort field|precedence|order|ordered|collation|nulls?|empty values?)\b/,"sort-semantic");
    var assertion=has(/\b(confirm|verify|assert|expect|must|should|returns?|shows?|includes?|excludes?|equals?|unchanged|preserved|appears?|remains?)\b/,"assertion");
    var explicitValue=has(/["'`][^"'`]+["'`]|\b\d{1,4}(?:\.\d+)?\b|\b(true|false|yes|no|on|off|enabled|disabled)\b/,"explicit-value");
    var canonicalIdentity=has(/\b(record ids?|criterion_id|field_id|subject_id|canonical (?:field|record|value)|record identity)\b/,"canonical-identity");
    var requestResponse=has(/\b(request|response|payload|http|api result|status code)\b/,"request-response-evidence");
    var cuIdentity=has(/\b(cu|tail|chain|provenance|context unit)\b/,"cu-evidence");
    var retained=has(/\b(retain|retained|persist|persisted|saved evidence|execution evidence|diagnostic|console)\b/,"retained-evidence");
    var principalPolicy=has(/\b(principal|operator|policy|capability|authorization|attestation|governed|signature)\b/,"principal-policy-evidence");
    var errorPath=has(/\b(error|failure|invalid|reject|rejected|unsupported|diagnostic)\b/,"error-path-evidence");
    var beforeAfter=has(/\b(before|after|unchanged|preserved|previous|prior|exact comparison)\b/,"before-after-comparison");
    var fixtureLanguage=has(/\b(fixture|known data|seeded|test record|bound value|record set)\b/,"fixture-binding");
    var versioned=has(/\b(version|build|classifier|executor version|fixture version)\b/,"version-evidence");
    var integrity=has(/\b(hash|integrity|signed|signature|sealed)\b/,"evidence-integrity");
    var executable=find||sort||lifecycle||persistence||/\b(open|click|select|set|apply|execute|clear|remove|add|save)\b/.test(s);
    out.dimensions.actionability=executable?3:(assertion?1:0);
    out.dimensions.fixtureability=(fixtureLanguage||explicitValue||find||sort)?3:((lifecycle||persistence)?2:1);
    out.dimensions.observability=(canonicalIdentity||requestResponse||cuIdentity)?4:(assertion?3:(visual?1:2));
    out.dimensions.determinism=explicitValue?4:(assertion?3:(timing?1:2));
    out.dimensions.authority=(cuIdentity||principalPolicy)?4:(canonicalIdentity?3:((find||sort||lifecycle||persistence)?2:1));
    out.dimensions.evidence=(requestResponse||cuIdentity||retained)?4:((find||sort||lifecycle||persistence)?2:1);
    out.atomic_split_suggestions=tpAtomicSplitSuggestions(raw);
    out.broad_criterion=!((test&&test.verification_spec&&test.verification_spec.verification))&&(out.atomic_split_suggestions.length>1 || ((raw.match(/\band\b/gi)||[]).length+(raw.match(/;/g)||[]).length>0));
    if(out.broad_criterion)out.characteristics.push("broad-compound-criterion");

    var executor="",executorState="none",baseReasonCode="deterministic-step",baseReason="Deterministic criterion appears suitable for automation.";
    var explicitSpec=test&&test.verification_spec&&test.verification_spec.verification?{operation:String(test.verification_spec.operation||"found-set.observe"),verification:String(test.verification_spec.verification||""),parameters:Object.assign({},test.verification_spec.parameters||{}),binding:tpNormalizeBinding((test&&test.bindings)||{})}:null;
    var declaredExecutor=String((test&&test.executor)||"");
    var explicitCapability=explicitSpec?tpExecutorCapabilityMatch((test&&test.bindings)||{},explicitSpec.verification):null;
    if(explicitSpec&&!explicitCapability&&declaredExecutor){explicitCapability=TP_EXECUTOR_CAPABILITY_CATALOG.find(function(c){return c.executor===declaredExecutor&&(!c.assertions||c.assertions.indexOf(explicitSpec.verification)>=0);})||null;}
    if(explicitSpec&&explicitCapability){
      executor=String((test&&test.executor)||explicitCapability.executor||"");executorState="fixture-bound";out.verification_spec=explicitSpec;out.intrinsic_automability="machine-verifiable";baseReasonCode="explicit-verification-binding";baseReason="The criterion declares an atomic Verify capability resolved through the executor capability catalog.";
    }else if(visual||human){
      out.intrinsic_automability="manual";baseReasonCode=visual?"visual-judgment":"human-judgment";baseReason=visual?"Requires visual judgment rather than an authoritative value comparison.":"Explicitly requires human judgment.";
    }else if(external||interaction){
      out.intrinsic_automability="manual";baseReasonCode=external?"external-dependency":"complex-ui-interaction";baseReason=external?"Depends on an external process not controlled by the current runner.":"Requires workstation or complex interaction not implemented by the runner.";
    }else if(!executable&&!assertion){
      out.intrinsic_automability="manual";baseReasonCode="unclassified-natural-language";baseReason="No safe machine-verifiable interpretation was recognized; human evaluation is required until the criterion is rewritten or an explicit evaluator is defined.";
    }else if(!explicitSpec&&foundSet&&assertion){
      var semanticBinding=tpNormalizeBinding((test&&test.bindings)||{}),capability=tpExecutorCapabilityMatch(semanticBinding);
      executor=capability&&capability.executor?capability.executor:"cee-found-set-fixture-runner";
      out.verification_spec=tpFoundSetVerificationSpec(raw,semanticBinding);
      if(out.verification_spec){
        executorState=capability?"fixture-bound":"available";baseReasonCode=capability?"semantic-capability-binding":"found-set-runner-v5-fallback";baseReason=capability?"The criterion inherits a semantic UI binding resolved through the registered executor capability catalog.":"The registered Found-Set fixture runner supports this legacy criterion through backward-compatible prose recognition.";
      }else{
        executorState="planned";baseReasonCode="found-set-capability-unresolved";baseReason="No registered executor capability matches the criterion binding, and the legacy prose adapter cannot safely resolve it.";
      }
    }else if(find&&assertion){
      executor="cee-find-fixture-runner";executorState=fixtureLanguage?"fixture-bound":"available";baseReasonCode=explicitValue?"explicit-find-assertion":"fixture-bound-find-assertion";baseReason=explicitValue?"Find semantics include an observable assertion and explicit comparison value.":"Find assertion can bind field, value, and expected record IDs from the fixture.";
    }else if(evaluateObservableCriterion(raw).executed){
      executor="cee-find-observable-runner";executorState="available";baseReasonCode="observable-ui-assertion";baseReason="A registered observable evaluator can produce deterministic evidence.";
    }else if(sort){
      executor="cee-sort-fixture-runner";
      if(tpSortRunnerSupportsCriterion(raw)){
        executorState="available";baseReasonCode="sort-runner-v1";baseReason="The registered Sort fixture runner can apply the real browse Sort path and compare exact ordered record IDs.";
      }else{
        executorState="planned";baseReasonCode="sort-adapter-required";baseReason="The Sort criterion requires an adapter not yet implemented by Sort runner v1.";
      }
    }else if(lifecycle){
      executor="cee-lifecycle-fixture-runner";executorState="planned";baseReasonCode="lifecycle-executor-required";baseReason="The lifecycle criterion has a planned authoritative executor contract, but the callable runner is not yet registered.";
    }else if(persistence){
      executor="cee-persistence-fixture-runner";executorState="planned";baseReasonCode="persistence-executor-required";baseReason="The persistence criterion has a planned reproducibility contract, but the callable runner is not yet registered.";
    }else if(timing&&!explicitValue){
      executor="cee-timing-threshold-runner";executorState="planned";baseReasonCode="timing-threshold-required";baseReason="Observable timing behavior requires an explicit threshold and the planned timing executor.";
    }
    out.executor=executor;
    out.semantic_binding=tpNormalizeBinding((test&&test.bindings)||{});
    out.executor_capability=tpExecutorCapabilityMatch(out.semantic_binding,out.verification_spec&&out.verification_spec.verification);
    out.executor_state={id:executorState,executor_id:executor,fixture_bound:executorState==="fixture-bound"};

    var contract=tpEvidenceContract(executor),contractCaps=Object.assign({},contract.capabilities||{});
    var criterionCaps={
      repeatable_observation:!!(assertion||executable),
      deterministic_expected_result:!!(assertion&&(explicitValue||find||sort||lifecycle||persistence)),
      repeatable_fixture:!!(fixtureLanguage||explicitValue||find||sort||lifecycle||persistence),
      fixture_binding:!!(fixtureLanguage||find||sort||lifecycle||persistence),
      authoritative_identity:!!(canonicalIdentity||cuIdentity||find||sort||lifecycle||persistence),
      exact_result_comparison:!!(beforeAfter||explicitValue||find||sort||lifecycle||persistence),
      error_path_capture:!errorPath||!!contractCaps.error_path_capture
    };
    var platformCaps={
      basic_execution_evidence:!!executor,
      reproducible_retained_evidence:!!executor,
      execution_context_timestamp:!!executor,
      executor_fixture_version:!!executor,
      provenance_linkage:!!cuIdentity,
      principal_attribution:!!principalPolicy,
      policy_capability_context:!!principalPolicy,
      evidence_integrity:!!integrity,
      governing_attestation:!!(/\b(attestation|approval|governing decision|signed|signature)\b/.test(s)),
      policy_boundary_reproducibility:!!(principalPolicy&&(/\b(same|reproduc|boundary|environment)\b/.test(s)))
    };
    var caps=Object.assign({},criterionCaps,contractCaps,platformCaps);
    if(requestResponse){caps.authoritative_execution_record=true;caps.authoritative_request=true;caps.authoritative_response=true;}
    if(canonicalIdentity||cuIdentity){caps.record_or_cu_identity=true;}
    if((requestResponse||contractCaps.authoritative_execution_record)&&(caps.authoritative_identity||caps.record_or_cu_identity)){caps.source_result_linkage=true;}
    if(retained){caps.basic_execution_evidence=true;caps.reproducible_retained_evidence=true;}
    out.evidence_contract={id:executor,version:String(contract.version||""),planned:!!contract.planned,maximum_level:Number(contract.maximum_level)||1,capabilities:Object.assign({},contractCaps)};
    out.evidence_maturity=out.intrinsic_automability==="machine-verifiable"?tpEvidenceMaturity(caps,{error_path:errorPath}):{level:0,id:"none",label:"None",capabilities:caps,missing_for_next_level:[]};
    var maturity=Number(out.evidence_maturity.level)||0;

    if(out.intrinsic_automability==="manual"){
      out.eligibility="human-required";out.display_status="manual";out.gap_type="human-judgment-required";out.gap_codes=[baseReasonCode];out.reason_code=baseReasonCode;out.reason=baseReason;out.confidence="high";out.executor="";out.executor_state={id:"none",executor_id:"",fixture_bound:false};
    }else{
      var executorSatisfied=(executorState==="available"||executorState==="fixture-bound")&&!!executor;
      var evidenceSatisfied=maturity>=out.standard_level;
      if(out.broad_criterion){
        out.eligibility="candidate";out.display_status="candidate";out.gap_type="criterion-breadth-gap";out.gap_codes=["criterion-too-broad"];out.reason_code="broad-criterion-split-recommended";out.reason="Contains multiple independently verifiable claims; split into atomic criteria before AUTO acceptance.";out.confidence="high";
      }else if(!executorSatisfied){
        out.eligibility="candidate";out.display_status="candidate";out.gap_type="executor-gap";out.gap_codes=[executorState==="planned"?"executor-planned-not-available":"executor-missing"];out.reason_code=baseReasonCode;out.reason=baseReason+" Evidence maturity is assessed independently as "+out.evidence_maturity.label+" from the declared evidence contract.";out.confidence="high";
      }else if(!evidenceSatisfied){
        var required=[];for(var li=1;li<=out.standard_level;li++)required=required.concat(TP_EVIDENCE_LEVEL_CAPABILITIES[li]||[]);
        var missing=required.filter(function(k,i,a){return a.indexOf(k)===i&&!caps[k];});
        out.eligibility="candidate";out.display_status="candidate";out.gap_type="evidence-gap";out.gap_codes=missing.length?missing:["evidence-below-selected-standard"];out.reason_code="evidence-maturity-deficit";out.reason="Executor is available, but evidence maturity is "+out.evidence_maturity.label+" and the selected standard is "+standard.label+". Missing: "+out.gap_codes.join(", ")+".";out.confidence="high";
      }else{
        out.eligibility="automatable";out.display_status="auto";out.gap_type="none";out.gap_codes=[];out.reason_code=baseReasonCode;out.reason=baseReason;out.confidence="high";
      }
    }
    return out;
  }
  function fixtureStepRows(parsed,standardLevel){
    var rows=[];
    (parsed&&parsed.tests||[]).forEach(function(test){
      (test.steps||[]).forEach(function(stepText,index){
        var automation=fixtureAutomationClassification(stepText,test,standardLevel);
        rows.push({
          sequence:rows.length+1,
          test_id:String(test.test_id||""),
          test_title:String(test.title||""),
          step_number:index+1,
          step_id:String(test.test_id||"")+"."+(index+1),
          step_text:String(stepText||""),
          coverage:[String(test.test_id||"")+"."+(index+1)],
          automation:automation
        });
      });
    });
    return rows;
  }
  function fixtureAutomationSummary(rows){
    var summary={total:rows.length,automatable:0,candidate:0,review_required:0,human_required:0,broad_criteria:0,atomic_suggestion_count:0,reasons:{},machine_verifiable:0,manual:0,executor_states:{none:0,planned:0,available:0,"fixture-bound":0},evidence_levels:{1:0,2:0,3:0,4:0,5:0},meets_selected_standard:0,below_selected_standard:0,gap_types:{},candidate_gaps:{executor_only:0,evidence_only:0,executor_and_evidence:0,other:0,fixture_binding:0,broad:0}};
    rows.forEach(function(row){
      var a=row.automation||{},key=String(a.eligibility||"review-required");
      if(a.broad_criterion)summary.broad_criteria++;
      summary.atomic_suggestion_count+=(a.atomic_split_suggestions||[]).length;
      if(key==="automatable")summary.automatable++;
      else if(key==="candidate")summary.candidate++;
      else if(key==="human-required")summary.human_required++;
      else summary.review_required++;
      if(a.intrinsic_automability==="machine-verifiable")summary.machine_verifiable++;else summary.manual++;
      var es=String((a.executor_state||{}).id||"none");summary.executor_states[es]=(summary.executor_states[es]||0)+1;
      var ml=Number((a.evidence_maturity||{}).level)||0;if(ml>=1&&ml<=5)summary.evidence_levels[ml]++;
      var selectedLevel=Number(a.standard_level||3),evidenceSufficient=ml>=selectedLevel;
      if(a.intrinsic_automability==="machine-verifiable"){if(evidenceSufficient)summary.meets_selected_standard++;else summary.below_selected_standard++;}
      var gap=String(a.gap_type||"none");summary.gap_types[gap]=(summary.gap_types[gap]||0)+1;
      var reason=String(a.reason_code||"unclassified");summary.reasons[reason]=(summary.reasons[reason]||0)+1;
      if(key==="candidate"){
        var executorReady=(es==="available"||es==="fixture-bound");
        if(!executorReady&&evidenceSufficient)summary.candidate_gaps.executor_only++;
        else if(executorReady&&!evidenceSufficient)summary.candidate_gaps.evidence_only++;
        else if(!executorReady&&!evidenceSufficient)summary.candidate_gaps.executor_and_evidence++;
        else summary.candidate_gaps.other++;
        var codes=Array.isArray(a.gap_codes)?a.gap_codes:[];
        if(es==="available"&&!((a.executor_state||{}).fixture_bound)||codes.some(function(x){return /fixture/i.test(String(x));}))summary.candidate_gaps.fixture_binding++;
        if(a.broad_criterion)summary.candidate_gaps.broad++;
      }
    });
    summary.automation_potential=summary.automatable+summary.candidate;
    summary.automation_potential_percent=summary.total?Math.round(summary.automation_potential*1000/summary.total)/10:0;
    return summary;
  }
  function fixtureCriterionRows(parsed,standardLevel){
    return tpPlanCriteria(parsed).map(function(c){
      var automation=fixtureAutomationClassification(c.text,{
        test_id:c.test_id,
        title:c.test_title,
        bindings:Object.assign({context:"",target:"",action:""},c.bindings||{}),
        verification_spec:c.verification_spec?Object.assign({},c.verification_spec):null,
        executor:String(c.executor||"")
      },standardLevel);
      return {
        sequence:c.seq,
        seq:c.seq,
        criterion_id:String(c.criterion_id||""),
        test_id:String(c.test_id||""),
        test_title:String(c.test_title||""),
        text:String(c.text||""),
        automation:automation
      };
    });
  }
  function fixtureCriterionAutomationMap(rows){
    var map={};
    (rows||[]).forEach(function(row){
      var key=String(row.criterion_id||row.seq||row.sequence);
      var a=row.automation||{};
      map[key]={
        criterion_id:String(row.criterion_id||""),
        seq:Number(row.seq||row.sequence)||0,
        eligibility:String(a.eligibility||"review-required"),
        reason_code:String(a.reason_code||"unclassified"),
        reason:String(a.reason||""),
        confidence:String(a.confidence||"low"),
        characteristics:(a.characteristics||[]).slice(),
        standard_level:Number(a.standard_level)||3,
        standard_id:String(a.standard_id||"acceptance"),
        standard_label:String(a.standard_label||"Acceptance"),
        classifier:String(a.classifier||"cee-automation-analysis-v6"),
        dimensions:Object.assign({},a.dimensions||{}),
        broad_criterion:!!a.broad_criterion,
        atomic_split_suggestions:Array.isArray(a.atomic_split_suggestions)?a.atomic_split_suggestions.slice():[],
        intrinsic_automability:String(a.intrinsic_automability||"manual"),
        executor_state:Object.assign({id:"none",executor_id:"",fixture_bound:false},a.executor_state||{}),
        evidence_maturity:{level:Number((a.evidence_maturity||{}).level)||0,id:String((a.evidence_maturity||{}).id||"none"),label:String((a.evidence_maturity||{}).label||"None"),capabilities:Object.assign({},(a.evidence_maturity||{}).capabilities||{}),missing_for_next_level:Array.isArray((a.evidence_maturity||{}).missing_for_next_level)?a.evidence_maturity.missing_for_next_level.slice():[],missing_by_level:Object.assign({},(a.evidence_maturity||{}).missing_by_level||{})},
        evidence_contract:{id:String((a.evidence_contract||{}).id||a.executor||""),version:String((a.evidence_contract||{}).version||""),planned:!!(a.evidence_contract||{}).planned,maximum_level:Number((a.evidence_contract||{}).maximum_level)||1,capabilities:Object.assign({},(a.evidence_contract||{}).capabilities||{})},
        display_status:String(a.display_status||"candidate"),
        gap_type:String(a.gap_type||"none"),
        gap_codes:Array.isArray(a.gap_codes)?a.gap_codes.slice():[],
        executor:String(a.executor||""),
        verification_spec:a.verification_spec?{operation:String(a.verification_spec.operation||""),verification:String(a.verification_spec.verification||""),parameters:Object.assign({},a.verification_spec.parameters||{}),binding:Object.assign({},a.verification_spec.binding||{})}:null
      };
    });
    return map;
  }

  function fixtureRecordValues(form,row,plan,batchId){
    var values=generatedRecordValues(form,row.sequence);
    values._test_fixture=true;
    values._test_fixture_batch_id=batchId;
    values._test_plan_id=String(plan.plan_id||"");
    values._test_plan_subject_id=String(plan.subject_id||plan._subject_id||"");
    values._test_id=row.test_id;
    values._test_step_number=row.step_number;
    values._test_step_id=row.step_id;
    values._test_step_text=row.step_text;
    values._test_fixture_coverage=row.coverage.slice();
    values._test_automation_eligibility=String((row.automation||{}).eligibility||"review-required");
    values._test_automation_reason_code=String((row.automation||{}).reason_code||"unclassified");
    values._test_automation_reason=String((row.automation||{}).reason||"");
    values._test_automation_confidence=String((row.automation||{}).confidence||"low");
    values._test_automation_characteristics=((row.automation||{}).characteristics||[]).slice();
    values._test_automation_classifier=String((row.automation||{}).classifier||"cee-automation-analysis-v3");
    values._test_automation_standard=String((row.automation||{}).standard_id||"acceptance");
    values._test_automation_scorecard=Object.assign({},(row.automation||{}).dimensions||{});
    return values;
  }
  function fixtureRecordTitle(plan,row){
    return fixtureSafeText((plan.plan_id||"TEST-PLAN")+" · "+row.step_id+" — "+row.step_text,120);
  }

  var CEE_TEST_FIXTURE_BATCHES=window.CEE_TEST_FIXTURE_BATCHES||{};
  window.CEE_TEST_FIXTURE_BATCHES=CEE_TEST_FIXTURE_BATCHES;
  var CEE_ACTIVE_TEST_FIXTURE_BATCH_ID=null;
  var CEE_TEST_FIXTURE_BINDINGS_KEY="cee-test-fixture-bindings-v1";
  function tpReadFixtureBindings(){
    try{var raw=localStorage.getItem(CEE_TEST_FIXTURE_BINDINGS_KEY);var obj=raw?JSON.parse(raw):{};return obj&&typeof obj==="object"?obj:{};}catch(e){console.warn("[CEE Test Fixture] Could not read persisted bindings",e);return {};}
  }
  function tpPersistFixtureBinding(batch){
    if(!batch||!batch.planSubjectId||!batch.batchId)return false;
    try{
      var all=tpReadFixtureBindings();
      all[String(batch.planSubjectId)]={
        version:"cee-test-fixture-binding-v1",saved_at:new Date().toISOString(),
        batchId:String(batch.batchId),planId:String(batch.planId||""),planTitle:String(batch.planTitle||""),planSubjectId:String(batch.planSubjectId),
        browseId:String(batch.browseId||""),sourceDescriptor:batch.sourceDescriptor||null,
        automationMap:batch.automationMap||{},created:Number(batch.created||0),reused:Number(batch.reused||0),failed:Number(batch.failed||0),
        fixtureMode:String(batch.fixtureMode||batch.mode||""),results:Array.isArray(batch.results)?batch.results:[]
      };
      localStorage.setItem(CEE_TEST_FIXTURE_BINDINGS_KEY,JSON.stringify(all));
      return true;
    }catch(e){console.warn("[CEE Test Fixture] Could not persist binding",e);return false;}
  }
  function tpRecoverPersistedFixtureBinding(subjectId){
    subjectId=String(subjectId||"");if(!subjectId)return null;
    var saved=tpReadFixtureBindings()[subjectId];if(!saved||!saved.batchId)return null;
    var batch=Object.assign({mode:"fixture",persistedBinding:true},saved);
    CEE_TEST_FIXTURE_BATCHES[batch.batchId]=batch;
    CEE_ACTIVE_TEST_FIXTURE_BATCH_ID=batch.batchId;
    if(batch.automationMap&&Object.keys(batch.automationMap).length)CEE_ACTIVE_TEST_AUTOMATION_MAP=Object.assign({},batch.automationMap);
    return batch;
  }
  var CEE_ACTIVE_TEST_AUTOMATION_MAP={};
  var CEE_TEST_AUTOMATION_ANALYSES=window.CEE_TEST_AUTOMATION_ANALYSES||{};
  window.CEE_TEST_AUTOMATION_ANALYSES=CEE_TEST_AUTOMATION_ANALYSES;


  function openFixtureProgress(batch){
    modal("Generating Test Plan Fixture — "+batch.batchId,
      '<div class="card"><div class="card-body">'+
      '<div><b>'+esc(batch.planTitle||batch.planId||"Test Plan")+'</b></div>'+
      '<div id="fixture-progress-current" class="small-muted">Preparing fixture generation…</div>'+
      '<div class="fixture-progress-track"><div id="fixture-progress-bar" class="fixture-progress-bar"></div></div>'+
      '<div class="fixture-progress-grid">'+
        '<div class="fixture-progress-stat">Completed<b id="fixture-progress-completed">0 / '+batch.requested+'</b></div>'+
        '<div class="fixture-progress-stat">Created<b id="fixture-progress-created">0</b></div>'+
        '<div class="fixture-progress-stat">Failed<b id="fixture-progress-failed">0</b></div>'+
        '<div class="fixture-progress-stat">Percent<b id="fixture-progress-percent">0%</b></div>'+
      '</div>'+
      '<div class="small-muted" style="margin-top:10px">Each successful row is created through the normal CU-backed record endpoint.</div>'+
      '</div></div>');
  }
  function updateFixtureProgress(batch,row){
    var completed=batch.created+batch.failed,pct=batch.requested?Math.round(completed*100/batch.requested):100;
    var set=function(id,value){var el=document.getElementById(id);if(el)el.textContent=value;};
    set("fixture-progress-current",row?("Current: "+row.step_id+" — "+row.step_text):"Finalizing fixture browse…");
    set("fixture-progress-completed",completed+" / "+batch.requested);
    set("fixture-progress-created",String(batch.created));
    set("fixture-progress-failed",String(batch.failed));
    set("fixture-progress-percent",pct+"%");
    var bar=document.getElementById("fixture-progress-bar");if(bar)bar.style.width=pct+"%";
  }

  function evaluateObservableCriterion(textValue){
    var s=String(textValue||"").toLowerCase();
    var bodyText=String(document.body&&document.body.innerText||"").toLowerCase();
    function result(value,code,evidence){return {executed:true,result:value?"pass":"fail",reason_code:code,evidence:evidence};}
    if(/\bcee loads successfully\b/.test(s))return result(document.readyState==="complete","document-ready","document.readyState="+document.readyState);
    if(/\bno new console errors\b/.test(s))return result(!CEE_DIAGNOSTICS.length,"diagnostic-journal-empty","active_diagnostics="+CEE_DIAGNOSTICS.length);
    if(/\ball four commands are visible\b/.test(s)){
      var required=["quick search","find","show all","sort"];
      var missing=required.filter(function(label){return bodyText.indexOf(label)<0;});
      return result(!missing.length,"browse-command-visibility","missing="+missing.join(","));
    }
    if(/\bquick search remains separate\b/.test(s)){
      var quick=Array.prototype.some.call(document.querySelectorAll("input,button"),function(el){return /quick search/i.test(String(el.placeholder||el.textContent||el.title||""));});
      var find=Array.prototype.some.call(document.querySelectorAll("button"),function(el){return /^\s*find\s*$/i.test(String(el.textContent||""));});
      return result(quick&&find,"quick-search-separation","quick_search="+quick+"; find_button="+find);
    }
    if(/\bquery-plan label reads?\s+local scan\b/.test(s))return result(bodyText.indexOf("local scan")>=0,"query-plan-local-scan","body_contains_local_scan="+(bodyText.indexOf("local scan")>=0));
    if(/\bno indexed-query claim appears\b/.test(s))return result(!/\bindexed[- ]query\b/.test(bodyText),"no-indexed-query-claim","indexed_query_claim="+(/\bindexed[- ]query\b/.test(bodyText)));
    if(/\bexisting crud and lifecycle controls remain available\b/.test(s)){
      var labels=["add","edit","delete"];
      var absent=labels.filter(function(label){return !Array.prototype.some.call(document.querySelectorAll("button"),function(el){return String(el.textContent||"").trim().toLowerCase()===label;});});
      return result(!absent.length,"crud-control-visibility","missing="+absent.join(","));
    }
    return {executed:false,result:"pending",reason_code:"no-safe-observable-evaluator",evidence:"Natural-language assertion requires a field/value execution contract or human review."};
  }


  function tpFindFixtureRecord(batch,row,w){
    var stepId=String(row.getAttribute("data-step-id")||"");
    var criterionId=String(row.getAttribute("data-criterion-id")||"");
    var seq=Number(row.getAttribute("data-seq"))||0;
    var records=(w&&w.allRecords)||[];
    return records.find(function(r){
      var rid=String(fixtureRecordValue(r,"_test_fixture_batch_id")||"");
      var plan=String(fixtureRecordValue(r,"_test_plan_subject_id")||"");
      var rs=String(fixtureRecordValue(r,"_test_step_id")||"");
      return (!rid||rid===String(batch.batchId||"")) &&
        (!plan||plan===String(batch.planSubjectId||"")) &&
        (rs===stepId||rs===criterionId||Number(fixtureRecordValue(r,"_test_step_number"))===seq);
    })||records.find(function(r){
      return String(fixtureRecordValue(r,"_test_plan_subject_id")||"")===String(batch.planSubjectId||"") &&
        Number(fixtureRecordValue(r,"_test_step_number"))===seq;
    })||records.find(function(r){
      return String(fixtureRecordValue(r,"_test_plan_subject_id")||"")===String(batch.planSubjectId||"");
    })||null;
  }
  function tpFixtureRequestedOperator(text){
    var s=String(text||"").toLowerCase();
    if(/\bcontains?\b/.test(s))return "contains";
    if(/\bbegins?(?: with)?\b|\bstarts?(?: with)?\b/.test(s))return "begins";
    if(/\bends?(?: with)?\b/.test(s))return "ends";
    if(/\bgreater(?: than)?\b|\bafter\b/.test(s))return "greater";
    if(/\bless(?: than)?\b|\bbefore\b/.test(s))return "less";
    if(/\brange\b|\bbetween\b/.test(s))return "range";
    if(/\bempty\b|\bblank\b/.test(s))return "empty";
    if(/\bnot equal\b|\bdoes not equal\b|\bneq\b/.test(s))return "not_equals";
    return "equals";
  }
  function tpFixtureFindInput(w,fixtureRecord,criterionText){
    var fields=findFields(w||{}),values=(fixtureRecord&&fixtureRecord.values)||{},requested=tpFixtureRequestedOperator(criterionText);
    for(var i=0;i<fields.length;i++){
      var f=fields[i],key=findFieldKey(f),v=values[key]!==undefined?values[key]:fixtureRecord&&fixtureRecord[key];
      if(v===undefined||v===null||Array.isArray(v)||typeof v==="object")continue;
      var ops=findOperatorsForField(f),supported=ops.map(function(x){return x[0];});
      var op=supported.indexOf(requested)>=0?requested:(supported.indexOf("equals")>=0?"equals":supported[0]);
      if(!op)continue;
      var value=String(v),value2="";
      if(op==="contains"&&value.length>3)value=value.slice(1,Math.min(value.length-1,6));
      else if(op==="begins"&&value.length>2)value=value.slice(0,Math.min(value.length,5));
      else if(op==="ends"&&value.length>2)value=value.slice(-Math.min(value.length,5));
      else if(op==="range"){value2=value;}
      else if(op==="empty")value="";
      return {field:f,operator:op,value:value,value2:value2,requested_operator:requested};
    }
    return null;
  }
  function tpExecutorSupportsCriterion(executor,text,binding,verificationSpec){
    executor=String(executor||"");
    if(executor==="cee-find-fixture-runner")return /\b(find|search|criterion|criteria|operator|found set|show all|omit|match|contains|begins|ends|equals|greater|less|range|empty|boolean)\b/i.test(String(text||""));
    if(executor==="cee-find-observable-runner")return !!evaluateObservableCriterion(text).executed;
    if(executor==="cee-record-navigation-fixture-runner")return !!(verificationSpec&&verificationSpec.verification&&tpExecutorCapabilityMatch(binding,verificationSpec.verification,executor));
    if(executor==="cee-validation-autoentry-fixture-runner")return !!(verificationSpec&&verificationSpec.verification&&tpExecutorCapabilityMatch(binding,verificationSpec.verification,executor));
    if(executor==="cee-sort-fixture-runner")return tpSortRunnerSupportsCriterion(text);
    if(executor==="cee-found-set-fixture-runner")return !!(verificationSpec&&verificationSpec.verification&&tpExecutorCapabilityMatch(binding,verificationSpec.verification,executor))||tpFoundSetRunnerSupportsCriterion(text,binding);
    return false;
  }
  function tpSortFieldMentionScore(field,text){
    var s=String(text||"").toLowerCase(),label=String((field&&field.label)||"").toLowerCase(),name=String(findFieldKey(field)||"").toLowerCase().replace(/[_-]+/g," "),score=0;
    if(label&&s.indexOf(label)>=0)score+=4;
    if(name&&s.indexOf(name)>=0)score+=3;
    label.split(/\s+/).forEach(function(x){if(x.length>3&&s.indexOf(x)>=0)score++;});
    return score;
  }
  function tpSortSpecFromCriterion(w,text){
    var s=String(text||"").toLowerCase(),fields=findFields(w||{}).filter(function(f){return !f.retired;});
    if(!fields.length)return [];
    fields=fields.map(function(f,i){return {f:f,i:i,score:tpSortFieldMentionScore(f,s)};}).sort(function(a,b){return b.score-a.score||a.i-b.i;}).map(function(x){return x.f;});
    var multi=/\b(multi|multiple|secondary|tie|tie-break|precedence|then by|second sort|two fields|three fields)\b/.test(s),count=multi?Math.min(3,fields.length):1;
    return fields.slice(0,count).map(function(f,i){
      var desc=/\b(descending|descending order|reverse order|highest to lowest|z to a|newest first|largest first)\b/.test(s);
      var asc=/\b(ascending|lowest to highest|a to z|oldest first|smallest first)\b/.test(s);
      return {field_id:findFieldId(f),field_name:findFieldKey(f),field:findFieldRef(f),direction:desc&&!asc?"desc":"asc",empty:/\b(empty|blank|null).{0,20}\b(first|top|before)\b/.test(s)?"first":"last",case_sensitive:/\bcase[- ]sensitive\b/.test(s),natural:!/\b(lexical|lexicographic|non-natural|natural off)\b/.test(s),select_order:/\b(defined|definition|option order)\b/.test(s)?"defined":"label"};
    });
  }
  function tpSortOracleValue(field,value,spec){
    var empty=findIsEmpty(value);if(empty)return {empty:true,value:null};
    var t=findFieldType(field);
    if(t==="integer"||t==="number")return {empty:false,value:Number(value),type:"number"};
    if(t==="date"||t==="datetime"||t==="timestamp")return {empty:false,value:Date.parse(String(value)),type:"number"};
    if(t==="boolean"||t==="checkbox")return {empty:false,value:booleanValueIsTrue(value)?1:0,type:"number"};
    if((t==="select"||t==="dropdown")&&spec.select_order==="defined")return {empty:false,value:selectDefinedOrder(field,value),type:"number"};
    return {empty:false,value:(t==="select"||t==="dropdown")?browseFieldValueText(field,value):browseValueText(value),type:"text"};
  }
  function tpSortOracleIds(w,records,specs){
    return (records||[]).map(function(r,i){return {r:r,i:i};}).sort(function(a,b){
      for(var si=0;si<specs.length;si++){
        var spec=normalizeSortSpec(w,specs[si]),f=findFieldForRef(w,spec.field_id||spec.field);if(!f)continue;
        var av=tpSortOracleValue(f,browseRecordValue(a.r,f),spec),bv=tpSortOracleValue(f,browseRecordValue(b.r,f),spec),cmp=0;
        if(av.empty||bv.empty){if(av.empty!==bv.empty)cmp=av.empty?(spec.empty==="first"?-1:1):(spec.empty==="first"?1:-1);}
        else if(av.type==="number")cmp=(Number.isFinite(av.value)?av.value:0)-(Number.isFinite(bv.value)?bv.value:0);
        else cmp=String(av.value).localeCompare(String(bv.value),navigator.language||"en-US",{sensitivity:spec.case_sensitive?"variant":"base",numeric:spec.natural!==false});
        if(cmp)return spec.direction==="desc"?-cmp:cmp;
      }
      return a.i-b.i;
    }).map(function(x){return recordId(x.r);});
  }
  async function tpRunSortFixtureCriterion(contract,row,batch){
    var w=model.browses[batch.browseId],text=row.getAttribute("data-text")||"";
    if(!w)return {executed:false,result:"error",reason_code:"source-browse-missing",evidence:"The fixture source browse is not open."};
    if(!tpSortRunnerSupportsCriterion(text))return {executed:false,result:"error",reason_code:"sort-adapter-not-implemented",evidence:"Sort runner v2 does not support this criterion shape."};
    var specs=tpSortSpecFromCriterion(w,text);if(!specs.length)return {executed:false,result:"error",reason_code:"sortable-field-missing",evidence:"No sortable field could be resolved."};
    var prior={sortSpec:JSON.parse(JSON.stringify(w.sortSpec||[])),findRequests:JSON.parse(JSON.stringify(w.findRequests||[])),findActive:!!w.findActive,findMode:!!w.findMode,selectedId:w.selected>=0&&w.records[w.selected]?recordId(w.records[w.selected]):""};
    var requestedSelection=/\b(selection|selected record|record remains selected|preserv)\b/i.test(text),requestedActive=/\b(active sort|sort indicator|sort summary|shows? the sort|displayed sort)\b/i.test(text);
    try{
      w.sortSpec=[];rerenderBusinessFoundSet(batch.browseId,prior.selectedId);await new Promise(function(resolve){setTimeout(resolve,0);});
      var source=(w.records||[]).slice(),expected=tpSortOracleIds(w,source,specs);
      w.sortSpec=JSON.parse(JSON.stringify(specs));rerenderBusinessFoundSet(batch.browseId,prior.selectedId);await new Promise(function(resolve){setTimeout(resolve,0);});
      var actual=(w.records||[]).map(recordId),orderPass=expected.length===actual.length&&expected.every(function(id,i){return id===actual[i];});
      var selectedNow=w.selected>=0&&w.records[w.selected]?recordId(w.records[w.selected]):"",selectionPass=!requestedSelection||!prior.selectedId||selectedNow===prior.selectedId;
      var activePass=!requestedActive||sortSummary(w)!=="Unsorted";
      var pass=orderPass&&selectionPass&&activePass;
      return {executed:true,result:pass?"pass":"fail",reason_code:"sort-runner-v1",evidence:"sort_spec="+JSON.stringify(specs)+"; expected_ids="+expected.join(",")+"; actual_ids="+actual.join(",")+"; order="+(orderPass?"pass":"fail")+"; selection="+(selectionPass?"pass":"fail")+"; active_sort="+(activePass?"pass":"fail")+"; executor=cee-sort-fixture-runner@v1"};
    }finally{
      w.sortSpec=prior.sortSpec;w.findRequests=prior.findRequests;w.findActive=prior.findActive;w.findMode=prior.findMode;rerenderBusinessFoundSet(batch.browseId,prior.selectedId);
    }
  }
  function tpFoundSetCloneState(w){
    return {
      records:(w.records||[]).slice(),
      findRequests:JSON.parse(JSON.stringify(w.findRequests||[])),
      findActive:!!w.findActive,findMode:!!w.findMode,
      sortSpec:JSON.parse(JSON.stringify(w.sortSpec||[])),foundBaseIds:Array.from(ensureFoundSetState(w).foundBaseIds),omittedIds:Array.from(w.omittedIds),foundView:w.foundView,findOperation:w.findOperation||"replace",
      selectedId:w.selected>=0&&w.records[w.selected]?recordId(w.records[w.selected]):"",
      selectedIds:Array.from(ensureBrowseSelection(w))
    };
  }
  function tpFoundSetRestoreState(w,browseId,prior){
    w.findRequests=prior.findRequests;w.findActive=prior.findActive;w.findMode=prior.findMode;w.sortSpec=prior.sortSpec;w.foundBaseIds=new Set(prior.foundBaseIds||[]);w.omittedIds=new Set(prior.omittedIds||[]);w.foundView=prior.foundView||"included";w.findOperation=prior.findOperation||"replace";
    w.selectedIds=new Set(prior.selectedIds||[]);rerenderBusinessFoundSet(browseId,prior.selectedId);
  }
  function tpFoundSetScalarFixtureInput(w,batch,row){
    var fixtureRecord=tpFindFixtureRecord(batch,row,w)||(w.allRecords||[])[0]||null;
    if(!fixtureRecord)return null;
    return tpFixtureFindInput(w,fixtureRecord,row.getAttribute("data-text")||"");
  }
  function tpFoundSetQueryIds(w,criterion){
    return (w.allRecords||[]).filter(function(r){return findCriterionMatches(r,criterion,w);}).map(recordId);
  }
  function tpFoundSetRunQuery(w,browseId,ids,mode,selectedId){w._fixtureQueryIds=(ids||[]).map(String);try{commitBusinessFindOperation(w,mode||"replace");}finally{delete w._fixtureQueryIds;}w.selectedIds=new Set(selectedId?[String(selectedId)]:[]);rerenderBusinessFoundSet(browseId,selectedId||"");}
  function tpFoundSetStatusText(browseId){var el=document.getElementById(browseId),main=el&&el.querySelector(".browse-status-main");return String(main&&main.textContent||"");}
  function tpFoundSetSelectIds(w,browseId,ids){w.selectedIds=new Set((ids||[]).map(String));w.selected=-1;w.lastSelectedRecordId="";applyBrowseSelectionVisuals(browseId);updateBrowseChrome(browseId);}
  function tpFoundSetCommandElement(browseId,operation){
    var el=document.getElementById(browseId),map={"omit.selected":".browse-omit-btn","omitted.show":".browse-show-omitted-btn","found-set.return":".browse-return-found-btn","found-set.show-all":".browse-show-all-btn","found-set.constrain":".browse-constrain-btn","found-set.extend":".browse-extend-btn"};
    return el&&map[operation]?el.querySelector(map[operation]):null;
  }
  async function tpRunFoundSetFixtureCriterion(contract,row,batch){
    var w=model.browses[batch.browseId],text=String(row.getAttribute("data-text")||"");
    if(!w)return {executed:false,result:"error",reason_code:"source-browse-missing",evidence:"The fixture source browse is not open."};
    var spec=contract.verification_spec||tpFoundSetVerificationSpec(text,contract.semantic_binding);
    if(!spec)return {executed:false,result:"error",reason_code:"found-set-capability-unresolved",evidence:"Found-Set runner v6 found no atomic verification capability for this criterion."};
    var all=(w.allRecords||[]).slice(),allIds=all.map(recordId),total=allIds.length;
    if(!total)return {executed:false,result:"error",reason_code:"fixture-records-missing",evidence:"The source browse contains no authoritative records."};
    var prior=tpFoundSetCloneState(w),input=tpFoundSetScalarFixtureInput(w,batch,row),criterion=input&&findCriterionFromField(input.field,input.operator,input.value,input.value2);
    var queryIds=criterion?tpFoundSetQueryIds(w,criterion):allIds.slice(0,Math.max(1,Math.ceil(total/2)));if(!queryIds.length)queryIds=[allIds[0]];
    var baseIds=queryIds.slice(),omitIds=baseIds.slice(0,Math.min(3,baseIds.length)),includedIds=baseIds.filter(function(id){return omitIds.indexOf(id)<0;});
    var before={found:0,total:total,ids:[],omitted:[],view:"included"},after={},expectedIds=[],selectedForAction=[],checks={},operation=String(spec.operation||"found-set.observe"),verify=String(spec.verification||"membership.equals"),params=spec.parameters||{};
    try{
      tpFoundSetRunQuery(w,batch.browseId,baseIds,"replace","");
      before={found:(w.records||[]).length,total:(w.allRecords||[]).length,ids:(w.records||[]).map(recordId).sort(),omitted:Array.from(w.omittedIds||[]).sort(),view:w.foundView||"included"};
      if(verify==="command.enabled"||verify==="command.disabled"){
        var setup=String(params.setup||"");
        if(setup==="empty-found-set"){
          tpFoundSetSelectIds(w,batch.browseId,baseIds.slice());
          omitSelectedBusinessRecords(batch.browseId);
          tpFoundSetSelectIds(w,batch.browseId,[]);
        }else if(setup==="selected"){
          tpFoundSetSelectIds(w,batch.browseId,baseIds.slice(0,1));
        }else{
          tpFoundSetSelectIds(w,batch.browseId,[]);
        }
        expectedIds=(w.records||[]).map(recordId).sort();
      }
      else if(operation==="found-set.show-all"){showAllBusinessRecords(batch.browseId);expectedIds=allIds.slice().sort();}
      else if(operation==="omit.all"){selectedForAction=baseIds.slice();tpFoundSetSelectIds(w,batch.browseId,selectedForAction);omitSelectedBusinessRecords(batch.browseId);expectedIds=[];}
      else if(operation==="omit.selected"){selectedForAction=omitIds.slice();tpFoundSetSelectIds(w,batch.browseId,selectedForAction);omitSelectedBusinessRecords(batch.browseId);expectedIds=includedIds.slice().sort();}
      else if(operation==="omitted.show"){selectedForAction=omitIds.slice();tpFoundSetSelectIds(w,batch.browseId,selectedForAction);omitSelectedBusinessRecords(batch.browseId);showOmittedBusinessRecords(batch.browseId);expectedIds=omitIds.slice().sort();}
      else if(operation==="found-set.return"){selectedForAction=omitIds.slice();tpFoundSetSelectIds(w,batch.browseId,selectedForAction);omitSelectedBusinessRecords(batch.browseId);showOmittedBusinessRecords(batch.browseId);returnToIncludedFoundSet(batch.browseId);expectedIds=includedIds.slice().sort();}
      else if(operation==="found-set.constrain"){
        var second;
        if(verify==="found-count.equals"&&Number(params.value)===0){
          second=allIds.filter(function(id){return baseIds.indexOf(id)<0;});
          if(!second.length)second=["__cee-no-match-"+Date.now()];
          expectedIds=[];
        }else{
          second=allIds.filter(function(id,i){return i%2===0;});
          expectedIds=baseIds.filter(function(id){return second.indexOf(id)>=0;}).sort();
        }
        tpFoundSetRunQuery(w,batch.browseId,second,"constrain","");
      }
      else if(operation==="omit.refresh"){selectedForAction=omitIds.slice(0,1);tpFoundSetSelectIds(w,batch.browseId,selectedForAction);omitSelectedBusinessRecords(batch.browseId);await refreshBusinessBrowse(batch.browseId);expectedIds=(w.records||[]).map(recordId).sort();}
      else if(operation==="workflow.full"){
        var workflow={};
        workflow.initial={found:(w.records||[]).length,total:(w.allRecords||[]).length};
        selectedForAction=omitIds.slice(0,1);tpFoundSetSelectIds(w,batch.browseId,selectedForAction);omitSelectedBusinessRecords(batch.browseId);
        workflow.omit={found:(w.records||[]).length,total:(w.allRecords||[]).length,expected_found:workflow.initial.found-selectedForAction.length};
        showOmittedBusinessRecords(batch.browseId);workflow.omitted={found:(w.records||[]).length,expected_found:selectedForAction.length};
        returnToIncludedFoundSet(batch.browseId);workflow.returned={found:(w.records||[]).length,expected_found:workflow.omit.found};
        showAllBusinessRecords(batch.browseId);workflow.show_all={found:(w.records||[]).length,total:(w.allRecords||[]).length};
        checks.workflow=workflow;expectedIds=allIds.slice().sort();
      }
      else if(operation==="found-set.extend"){var extension=allIds.slice(Math.max(0,total-Math.max(2,Math.ceil(total/3))));expectedIds=Array.from(new Set(baseIds.concat(extension))).sort();tpFoundSetRunQuery(w,batch.browseId,extension,"extend","");}
      else if(operation==="sort.apply"){expectedIds=before.ids.slice();var f=sortableFields(w)[0];if(f){w.sortSpec=[{field_id:findFieldId(f),field_name:findFieldKey(f),field:findFieldRef(f),direction:"desc",empty:"last",case_sensitive:false,natural:true,select_order:"label"}];tpFoundSetRunQuery(w,batch.browseId,baseIds,"replace","");}}
      else if(operation==="window.compare"){expectedIds=baseIds.slice().sort();var other=Object.keys(model.browses||{}).map(function(k){return model.browses[k];}).find(function(x){return x&&x!==w&&x.levelId===w.levelId;});checks.other_before=other?JSON.stringify((other.records||[]).map(recordId)):"";tpFoundSetRunQuery(w,batch.browseId,includedIds,"replace","");checks.other_after=other?JSON.stringify((other.records||[]).map(recordId)):"";}
      else if(operation==="command.inspect"){expectedIds=before.ids.slice();}
      else expectedIds=before.ids.slice();
      after={found:(w.records||[]).length,total:(w.allRecords||[]).length,ids:(w.records||[]).map(recordId).sort(),omitted:Array.from(w.omittedIds||[]).sort(),view:w.foundView||"included",status:tpFoundSetStatusText(batch.browseId)};
      var pass=false;
      if(verify==="membership.equals")pass=expectedIds.length===after.ids.length&&expectedIds.every(function(id,i){return id===after.ids[i];});
      else if(verify==="membership.excludes-selected")pass=selectedForAction.length>0&&selectedForAction.every(function(id){return after.ids.indexOf(id)<0;});
      else if(verify==="membership.excludes"){
        var excluded=params.set==="omitted"?after.omitted:(params.set==="included"?includedIds:selectedForAction);
        pass=excluded.every(function(id){return after.ids.indexOf(id)<0;});
      }
      else if(verify==="membership.includes")pass=baseIds.every(function(id){return after.ids.indexOf(id)>=0;});
      else if(verify==="membership.unique")pass=(new Set(after.ids)).size===after.ids.length;
      else if(verify==="omitted-membership.contains-selected")pass=selectedForAction.length>0&&selectedForAction.every(function(id){return after.omitted.indexOf(id)>=0;});
      else if(verify==="found-count.delta")pass=(after.found-before.found)===Number(params.delta||0);
      else if(verify==="found-count.equals")pass=after.found===Number(params.value||0);
      else if(verify==="found-count.equals-total")pass=after.found===after.total;
      else if(verify==="total-count.unchanged")pass=after.total===before.total;
      else if(verify==="status.matches")pass=after.status.indexOf(after.found+" found / "+after.total+" total")>=0||(after.view==="omitted"&&/omitted/i.test(after.status));
      else if(verify==="view-mode.equals")pass=after.view===String(params.value||"included");
      else if(verify==="sort-membership.unchanged")pass=before.ids.length===after.ids.length&&before.ids.every(function(id,i){return id===after.ids[i];});
      else if(verify==="window-state.isolated")pass=checks.other_before===checks.other_after;
      else if(verify==="empty-state.active")pass=after.found===0;
      else if(verify==="membership.preserves-unselected")pass=baseIds.filter(function(id){return selectedForAction.indexOf(id)<0;}).every(function(id){return after.ids.indexOf(id)>=0;});
      else if(verify==="membership.no-stale")pass=after.ids.every(function(id){return allIds.indexOf(id)>=0;})&&(new Set(after.ids)).size===after.ids.length;
      else if(verify==="found-count.delta-selected")pass=(after.found-before.found)===-selectedForAction.length;
      else if(verify==="counts.unchanged")pass=after.found===before.found&&after.total===before.total;
      else if(verify==="membership.equals-omitted"){var omittedSorted=after.omitted.slice().sort();pass=after.ids.length===omittedSorted.length&&after.ids.every(function(id,i){return id===omittedSorted[i];});}
      else if(verify==="omission.preserved-after-refresh")pass=selectedForAction.length>0&&selectedForAction.every(function(id){return after.omitted.indexOf(id)>=0&&after.ids.indexOf(id)<0;});
      else if(verify==="workflow.counts-correct"){var wf=checks.workflow||{};pass=!!wf.initial&&wf.omit.found===wf.omit.expected_found&&wf.omit.total===wf.initial.total&&wf.omitted.found===wf.omitted.expected_found&&wf.returned.found===wf.returned.expected_found&&wf.show_all.found===wf.show_all.total;}
      else if(verify==="relationship-scope.matches"){
        var parent=String(w.parentId||"");
        pass=!parent||(w.allRecords||[]).every(function(r){var rp=String(r.parent_subject_id||r.parent_id||((r.values||{}).parent_subject_id)||"");return !rp||rp===parent;});
        checks.parent_id=parent;
      }
      else if(verify==="lifecycle-scope.matches"){
        var expectedLifecycle=String(params.value||w.lifecycleView||"active");
        pass=(w.lifecycleView||"active")===expectedLifecycle&&(w.allRecords||[]).every(function(r){var deleted=isDeletedBusinessRecord(r);return expectedLifecycle==="all"||((expectedLifecycle==="deleted")===deleted);});
        checks.lifecycle=String(w.lifecycleView||"active");
      }
      else if(verify==="command.scoped")pass=!!document.getElementById(batch.browseId)&&document.activeElement!==null;
      else if(verify==="command.enabled"||verify==="command.disabled"){var btn=tpFoundSetCommandElement(batch.browseId,operation);pass=!!btn&&(verify==="command.enabled"?!btn.disabled:!!btn.disabled);checks.command_present=!!btn;checks.command_disabled=btn?!!btn.disabled:null;}
      else pass=false;
      checks.verification=verify;checks.operation=operation;checks.pass=pass;
      return {executed:true,result:pass?"pass":"fail",reason_code:"found-set-runner-v6",evidence:"operation="+operation+"; verification="+verify+"; parameters="+JSON.stringify(params)+"; before="+JSON.stringify(before)+"; after="+JSON.stringify(after)+"; expected_ids="+expectedIds.join(",")+"; selected_ids="+selectedForAction.join(",")+"; checks="+JSON.stringify(checks)+"; executor=cee-found-set-fixture-runner@v6; binding="+JSON.stringify(tpNormalizeBinding(contract.semantic_binding||{}))};
    }finally{tpFoundSetRestoreState(w,batch.browseId,prior);}
  }
  function tpNavigationSnapshot(w,id){
    var idx=currentBrowseNavigationIndex(w),ids=Array.from(ensureBrowseSelection(w));
    return {index:idx,position:idx>=0?idx+1:0,count:(w.records||[]).length,selected_ids:ids.slice().sort(),selected_id:idx>=0?recordId(w.records[idx]):"",visible_ids:(w.records||[]).map(recordId),status:(document.getElementById(id)&&document.getElementById(id).querySelector(".browse-nav-position")||{}).textContent||""};
  }
  function tpNavigationCommandElement(id,operation){var el=document.getElementById(id);if(!el)return null;var map={"navigation.first":".browse-nav-first","navigation.previous":".browse-nav-prev","navigation.next":".browse-nav-next","navigation.last":".browse-nav-last"};return el.querySelector(map[operation]||"");}
  function tpRestoreRecordNavigationState(w,id,prior){
    w.findRequests=prior.findRequests;w.findActive=prior.findActive;w.foundBaseIds=new Set(prior.foundBaseIds);w.omittedIds=new Set(prior.omittedIds);w.foundView=prior.foundView;w.sortSpec=prior.sortSpec;applyBusinessFindAndSort(w);w.selectedIds=new Set(prior.selectedIds);w.selected=prior.selected;w.lastSelectedRecordId=prior.lastSelectedRecordId;w.selectionAnchor=prior.selectionAnchor;renderBusinessRows(id);applyBrowseSelectionVisuals(id);
  }
  function tpNavigationStateEquals(a,b){return !!a&&!!b&&a.position===b.position&&a.count===b.count&&a.status===b.status&&JSON.stringify(a.selected_ids)===JSON.stringify(b.selected_ids)&&JSON.stringify(a.visible_ids)===JSON.stringify(b.visible_ids);}
  async function tpRunRecordNavigationCriterion(contract,row,batch){
    var w=model.browses[batch.browseId];if(!w)return {executed:false,result:"error",reason_code:"source-browse-missing",evidence:"The fixture source browse is not open."};
    var spec=contract.verification_spec||{},operation=String(spec.operation||"navigation.next"),verify=String(spec.verification||"position.equals"),params=Object.assign({},spec.parameters||{});
    var before=tpNavigationSnapshot(w,batch.browseId),authoritativeIds=(w.allRecords||[]).map(recordId).slice().sort();
    var prior={selected:w.selected,lastSelectedRecordId:w.lastSelectedRecordId||"",selectionAnchor:w.selectionAnchor,selectedIds:Array.from(ensureBrowseSelection(w)),findRequests:JSON.parse(JSON.stringify(w.findRequests||[])),findActive:!!w.findActive,foundBaseIds:Array.from(w.foundBaseIds||[]),omittedIds:Array.from(w.omittedIds||[]),foundView:w.foundView||"included",sortSpec:JSON.parse(JSON.stringify(w.sortSpec||[]))};
    try{
      if(operation==="navigation.setup-empty"){w.findActive=true;w.foundBaseIds=new Set();w.omittedIds=new Set();w.foundView="included";applyBusinessFindAndSort(w);selectBrowseRow(batch.browseId,-1);renderBusinessRows(batch.browseId);}
      else{
        if(!(w.records||[]).length)return {executed:false,result:"error",reason_code:"fixture-records-missing",evidence:"Record navigation requires at least one visible fixture record."};
        if(operation==="navigation.first")navigateBusinessRecord(batch.browseId,"first");
        else if(operation==="navigation.last")navigateBusinessRecord(batch.browseId,"last");
        else if(operation==="navigation.previous"){navigateBusinessRecord(batch.browseId,"last");navigateBusinessRecord(batch.browseId,"previous");}
        else if(operation==="navigation.next"){navigateBusinessRecord(batch.browseId,"first");navigateBusinessRecord(batch.browseId,"next");}
        else if(operation==="navigation.first-boundary"){navigateBusinessRecord(batch.browseId,"first");navigateBusinessRecord(batch.browseId,"previous");}
        else if(operation==="navigation.last-boundary"){navigateBusinessRecord(batch.browseId,"last");navigateBusinessRecord(batch.browseId,"next");}
        else if(operation==="navigation.inspect"){selectBrowseRow(batch.browseId,-1);updateBrowseChrome(batch.browseId);}
      }
      await new Promise(function(resolve){setTimeout(resolve,0);});
      var after=tpNavigationSnapshot(w,batch.browseId),expectedIndex=Number(params.index),expectedId="";
      if(Number.isFinite(expectedIndex)&&expectedIndex>=0&&expectedIndex<after.visible_ids.length)expectedId=after.visible_ids[expectedIndex];
      var pass=false,checks={operation:operation,verification:verify};
      if(verify==="position.equals")pass=after.position===Number(params.value||0)&&after.status==="Record "+after.position+" of "+after.count;
      else if(verify==="selected-id.equals")pass=after.selected_id===(params.value==="first"?after.visible_ids[0]:params.value==="last"?after.visible_ids[after.visible_ids.length-1]:(expectedId||String(params.value||"")));
      else if(verify==="selection.single")pass=after.count===0?after.selected_ids.length===0:after.selected_ids.length===1&&after.selected_ids[0]===after.selected_id;
      else if(verify==="boundary.no-wrap")pass=(operation==="navigation.first-boundary"&&after.index===0)||(operation==="navigation.last-boundary"&&after.index===after.count-1);
      else if(verify==="order.follows-visible-set")pass=after.index>=0&&after.selected_id===after.visible_ids[after.index];
      else if(verify==="empty-state.equals")pass=after.count===0&&after.position===0&&after.selected_ids.length===0&&after.status==="Record 0 of 0";
      else if(verify==="command.enabled"||verify==="command.disabled"){var commandOperation=String(params.command||operation),btn=tpNavigationCommandElement(batch.browseId,commandOperation);pass=!!btn&&(verify==="command.enabled"?!btn.disabled:!!btn.disabled);checks.command=commandOperation;checks.command_present=!!btn;checks.command_disabled=btn?!!btn.disabled:null;}
      else if(verify==="empty-commands.disabled"){var commands=["navigation.first","navigation.previous","navigation.next","navigation.last"];pass=commands.every(function(cmd){var b=tpNavigationCommandElement(batch.browseId,cmd);return !!b&&b.disabled;});checks.commands=commands;}
      else if(verify==="state.restored"){tpRestoreRecordNavigationState(w,batch.browseId,prior);var restored=tpNavigationSnapshot(w,batch.browseId);pass=tpNavigationStateEquals(before,restored);checks.restored=restored;}
      else if(verify==="record-mutation.none")pass=true;
      else if(verify==="window-state.isolated"){var other=Object.keys(model.browses||{}).map(function(k){return model.browses[k];}).find(function(x){return x&&x!==w;});var otherBefore=other?tpNavigationSnapshot(other,other.id||""):null;pass=!other||JSON.stringify(otherBefore)===JSON.stringify(tpNavigationSnapshot(other,other.id||""));checks.other_browse=other?other.id:"none";}
      checks.pass=pass;
      return {executed:true,result:pass?"pass":"fail",reason_code:"record-navigation-runner-v2",evidence:"operation="+operation+"; verification="+verify+"; parameters="+JSON.stringify(params)+"; before="+JSON.stringify(before)+"; after="+JSON.stringify(after)+"; authoritative_ids="+authoritativeIds.join(",")+"; restoration=verified-or-finally-enforced; mutation=none-local-navigation; checks="+JSON.stringify(checks)+"; executor=cee-record-navigation-fixture-runner@v2; binding="+JSON.stringify(tpNormalizeBinding(contract.semantic_binding||{}))};
    }finally{
      tpRestoreRecordNavigationState(w,batch.browseId,prior);
    }
  }
  function tpDuplicateSource(w){
    var selected=Array.from(ensureBrowseSelection(w||{}));
    var id=selected.length===1?selected[0]:"";
    var source=(w&&w.records||[]).find(function(r){return recordId(r)===id&&!isDeletedBusinessRecord(r);})||(w&&w.records||[]).find(function(r){return !isDeletedBusinessRecord(r);});
    return source||null;
  }
  function tpDuplicateValues(source,form){
    var raw=Object.assign({},source&&source.values||{},source||{}),out={};
    (form&&form.fields||[]).filter(function(f){return !fieldIsRetired(f);}).forEach(function(f){
      var key=f.name||f.field_key||"";if(!key)return;
      var value=raw[key];try{out[key]=JSON.parse(JSON.stringify(value));}catch(_e){out[key]=value;}
    });
    return out;
  }
  function tpDuplicateComparable(value){
    if(value===undefined)return null;
    if(Array.isArray(value))return value.map(tpDuplicateComparable);
    if(value&&typeof value==="object"){var out={};Object.keys(value).sort().forEach(function(k){out[k]=tpDuplicateComparable(value[k]);});return out;}
    return value;
  }
  function tpDuplicateFieldType(field){return String(field&&field.type||field&&field.field_type||"text").toLowerCase().replace(/\s+/g,"_");}
  function tpDuplicateNormalizeFieldValue(value,field){
    var type=tpDuplicateFieldType(field);
    if(value===undefined||value===null||value==="")return (type==="multi_select"||type==="select_multiple"||type==="list<integer>"||type==="number_list")?[]:(value===""?"":null);
    if(type==="checkbox"||type==="boolean"||type==="yes_no"){if(typeof value==="boolean")return value;return /^(true|1|yes|on|enabled)$/i.test(String(value));}
    if(type==="integer"||type==="number_integer"){var n=Number(value);return Number.isFinite(n)?n:null;}
    if(type==="list<integer>"||type==="number_list"){if(Array.isArray(value))return value.map(Number).filter(Number.isFinite);try{var parsed=JSON.parse(String(value));if(Array.isArray(parsed))return parsed.map(Number).filter(Number.isFinite);}catch(_e){}return integerListValues(String(value));}
    if(type==="multi_select"||type==="select_multiple"){if(Array.isArray(value))return value.map(String);try{var a=JSON.parse(String(value));if(Array.isArray(a))return a.map(String);}catch(_e){}return String(value).split(",").map(function(x){return x.trim();}).filter(Boolean);}
    if(type==="select"||type==="select_single"){var uv=unwrapScalarSelectValue(value);return uv==null?null:String(uv);}
    return typeof value==="string"?value:String(value);
  }
  function tpDuplicateNormalizeValues(values,form){
    var out={},raw=values||{};
    (form&&form.fields||[]).filter(function(f){return !fieldIsRetired(f);}).forEach(function(f){var key=f.name||f.field_key||"";if(key)out[key]=tpDuplicateNormalizeFieldValue(raw[key],f);});
    return out;
  }
  function tpDuplicateValuesEqual(a,b,form){return JSON.stringify(tpDuplicateComparable(tpDuplicateNormalizeValues(a,form)))===JSON.stringify(tpDuplicateComparable(tpDuplicateNormalizeValues(b,form)));}
  function tpDuplicateFormValues(form){
    var values={};
    document.querySelectorAll("[data-record-field]").forEach(function(el){
      var key=el.getAttribute("data-record-field"),type=el.getAttribute("data-record-field-type")||"text",v;
      if(el.multiple)v=Array.from(el.selectedOptions).map(function(o){return o.value;});else v=el.value;
      if(type==="checkbox"||type==="boolean")v=(v==="true");
      else if(type==="select")v=(v===""?null:v);
      else if(type==="multi_select")v=(Array.isArray(v)?v:[]).filter(function(x){return x!==""&&x!=null;});
      else if(type==="integer")v=(v===""?null:Number(v));
      else if(type==="list<integer>")v=integerListValues(v);
      values[key]=v;
    });
    document.querySelectorAll("[data-record-multi-field]").forEach(function(group){var key=group.getAttribute("data-record-multi-field");values[key]=Array.from(group.querySelectorAll('input[type="checkbox"]:checked')).map(function(el){return el.value;});});
    document.querySelectorAll("[data-md-field]").forEach(function(wrap){var key=wrap.getAttribute("data-md-field"),el=document.getElementById(wrap.getAttribute("data-md-field-id"));if(el)values[key]=el.value;});
    return values;
  }
  async function tpDuplicateCreate(w,source,form){
    var lv=model.byId[w.levelId],values=tpDuplicateValues(source,form),first=(form.fields||[])[0],title=values.name||(first?values[first.name||first.field_key]:"")||recordName(source)||"Duplicated Record";
    var before={total:(w.allRecords||[]).length,found:(w.records||[]).length,sort:JSON.stringify(w.sortSpec||[]),source_id:recordId(source),source_tail:recordTail(source),parent_id:String(w.parentId||"")};
    var payload={hub_id:hubIdForLevel(lv),parent_subject_id:w.parentId||null,level_number:lv.level_number,target_level_number:lv.level_number,name:title,values:values,operator:operator()};
    var response=await postJson(levelBase(lv)+"/api/enterprise/records/create",payload),responseRecord=response&&response.record&&typeof response.record==="object"?response.record:response||{};
    var createdSubjectId=String(responseRecord.subject_id||responseRecord.spoke_id||responseRecord.id||"");
    var createdRecordId=String(responseRecord.record_id||"");
    await refreshBusinessBrowse(w.id);
    var created=(w.allRecords||[]).find(function(r){return recordId(r)===createdSubjectId||String(r.record_id||"")===createdRecordId;})||null;
    var createdBrowseId=created?recordId(created):createdSubjectId,visibleIndex=(w.records||[]).findIndex(function(r){return recordId(r)===createdBrowseId||String(r.record_id||"")===createdRecordId;});
    if(visibleIndex>=0){selectBrowseRow(w.id,visibleIndex);scrollBrowseCurrentRecordIntoView(w.id);}
    return {before:before,payload:payload,response:response,created_id:createdBrowseId,created_subject_id:createdSubjectId,created_record_id:createdRecordId,created:created,visible_index:visibleIndex,after:{total:(w.allRecords||[]).length,found:(w.records||[]).length,sort:JSON.stringify(w.sortSpec||[]),selected_ids:Array.from(ensureBrowseSelection(w)),source_tail:recordTail((w.allRecords||[]).find(function(r){return recordId(r)===recordId(source);})||source)}};
  }
  async function tpRunDuplicateRecordCriterion(contract,row,batch){
    var w=model.browses[batch.browseId];if(!w)return {executed:false,result:"error",reason_code:"source-browse-missing",evidence:"The fixture source browse is not open."};
    var spec=contract.verification_spec||{},operation=String(spec.operation||"duplicate.create"),verify=String(spec.verification||"record.identity.fresh"),params=Object.assign({},spec.parameters||{}),form=await businessFormFor(w.levelId),source=batch._duplicateRecordSourceId?(w.allRecords||[]).find(function(r){return recordId(r)===batch._duplicateRecordSourceId;})||tpDuplicateSource(w):tpDuplicateSource(w);if(source&&!batch._duplicateRecordSourceId)batch._duplicateRecordSourceId=recordId(source);
    if(!form||form._read_error)return {executed:false,result:"error",reason_code:"form-design-missing",evidence:"Duplicate Record automation requires a published readable form design."};
    var priorSelection=Array.from(ensureBrowseSelection(w)),beforeCounts={total:(w.allRecords||[]).length,found:(w.records||[]).length},pass=false,checks={operation:operation,verification:verify},creation=null;
    try{
      if(operation==="duplicate.command-no-selection"){selectBrowseRow(batch.browseId,-1);updateBrowseChrome(batch.browseId);}
      else if(operation==="duplicate.command-selected"){if(!source)return {executed:false,result:"error",reason_code:"fixture-record-missing",evidence:"Duplicate Record requires one active fixture record."};var idx=(w.records||[]).findIndex(function(r){return recordId(r)===recordId(source);});selectBrowseRow(batch.browseId,idx);updateBrowseChrome(batch.browseId);}
      else if(operation==="duplicate.command-deleted"){if(!source)return {executed:false,result:"error",reason_code:"fixture-record-missing",evidence:"Duplicate Record requires one active fixture record."};batch._duplicatePriorSourceStatus=source.status;source.status="deleted";var deletedIdx=(w.records||[]).findIndex(function(r){return recordId(r)===recordId(source);});selectBrowseRow(batch.browseId,deletedIdx);updateBrowseChrome(batch.browseId);checks.denial="deleted-record";}
      else if(operation==="duplicate.command-creation-prohibited"){if(!source)return {executed:false,result:"error",reason_code:"fixture-record-missing",evidence:"Duplicate Record requires one active fixture record."};batch._duplicatePriorCreationEnabled=w.recordCreationEnabled;w.recordCreationEnabled=false;var deniedIdx=(w.records||[]).findIndex(function(r){return recordId(r)===recordId(source);});selectBrowseRow(batch.browseId,deniedIdx);updateBrowseChrome(batch.browseId);checks.denial="record-creation-disabled";}
      else if(operation==="duplicate.draft-open"||operation==="duplicate.cancel"){
        if(!source)return {executed:false,result:"error",reason_code:"fixture-record-missing",evidence:"Duplicate Record requires one active fixture record."};
        await openRecordEditor(batch.browseId,null,{duplicateSource:source});await new Promise(function(resolve){setTimeout(resolve,0);});
        var draft=model.drafts.record||{},draftValues=tpDuplicateFormValues(form),sourceValues=tpDuplicateValues(source,form);
        checks.draft_mode=draft.mode||"";checks.draft_record=draft.record==null?null:recordId(draft.record);checks.source_id=draft.duplicateSourceId||"";checks.source_tail=draft.duplicateSourceTail||"";checks.values_match=tpDuplicateValuesEqual(draftValues,sourceValues,form);
        if(operation==="duplicate.cancel")closeEditModal();
      }else{
        if(!source)return {executed:false,result:"error",reason_code:"fixture-record-missing",evidence:"Duplicate Record requires one active fixture record."};
        creation=batch._duplicateRecordCreation||await tpDuplicateCreate(w,source,form);batch._duplicateRecordCreation=creation;checks.creation=creation;
      }
      var button=(document.getElementById(batch.browseId)||document).querySelector(".browse-duplicate-btn");
      if(verify==="command.enabled")pass=!!button&&!button.disabled;
      else if(verify==="command.disabled")pass=!!button&&!!button.disabled;
      else if(verify==="draft.mode.new")pass=checks.draft_mode==="duplicate"&&checks.draft_record===null;
      else if(verify==="draft.values.match")pass=checks.values_match===true;
      else if(verify==="draft.identity.blank")pass=checks.draft_record===null&&checks.source_id===recordId(source);
      else if(verify==="counts.unchanged")pass=(w.allRecords||[]).length===beforeCounts.total&&(w.records||[]).length===beforeCounts.found;
      else if(!creation||!creation.created)pass=false;
      else if(verify==="record.identity.fresh")pass=!!creation.created_id&&creation.created_id!==recordId(source);
      else if(verify==="record.identity.canonical")pass=/^[0-9a-f]{64}$/i.test(creation.created_record_id);
      else if(verify==="record.values.match")pass=tpDuplicateValuesEqual(tpDuplicateValues(creation.created,form),tpDuplicateValues(source,form),form);
      else if(verify==="record.parent.same")pass=String(creation.created.parent_subject_id||creation.created.parent_id||"")===String(w.parentId||"");
      else if(verify==="record.lifecycle.active")pass=!isDeletedBusinessRecord(creation.created);
      else if(verify==="record.tail.differs-source")pass=!!recordTail(creation.created)&&recordTail(creation.created)!==recordTail(source);
      else if(verify==="source.unchanged")pass=creation.after.source_tail===creation.before.source_tail;
      else if(verify==="found-count.reconciled")pass=creation.after.total===creation.before.total+1&&creation.after.found===(creation.visible_index>=0?creation.before.found+1:creation.before.found);
      else if(verify==="sort.preserved")pass=creation.after.sort===creation.before.sort;
      else if(verify==="selection.new-record")pass=creation.visible_index<0||creation.after.selected_ids.length===1&&creation.after.selected_ids[0]===creation.created_id;
      checks.pass=pass;
      return {executed:true,result:pass?"pass":"fail",reason_code:"duplicate-record-runner-v3",evidence:"operation="+operation+"; verification="+verify+"; parameters="+JSON.stringify(params)+"; source_id="+(source?recordId(source):"")+"; source_tail="+(source?recordTail(source):"")+"; before_counts="+JSON.stringify(beforeCounts)+"; created_id="+(creation?creation.created_id:"")+"; checks="+JSON.stringify(checks)+"; executor=cee-duplicate-record-fixture-runner@v3; binding="+JSON.stringify(tpNormalizeBinding(contract.semantic_binding||{}))};
    }finally{
      if(operation==="duplicate.draft-open")closeEditModal();
      if(operation.indexOf("duplicate.command-")===0){if(operation==="duplicate.command-deleted"&&source)source.status=batch._duplicatePriorSourceStatus;if(operation==="duplicate.command-creation-prohibited")w.recordCreationEnabled=batch._duplicatePriorCreationEnabled;w.selectedIds=new Set(priorSelection);var rid=priorSelection[0]||"",restoreIndex=(w.records||[]).findIndex(function(r){return recordId(r)===rid;});w.selected=restoreIndex;w.lastSelectedRecordId=rid;applyBrowseSelectionVisuals(batch.browseId);updateBrowseChrome(batch.browseId);}
    }
  }


  function tpFixtureSourceDescriptor(w,lv){
    if(!w||!lv)return null;
    return {
      browse_id:String(w.id||w.browseId||""),
      level_id:String(w.levelId||lv.id||""),
      hub_id:String(hubIdForLevel(lv)||""),
      authority_base:String(levelBase(lv)||""),
      parent_subject_id:w.parentId||null,
      level_number:Number(lv.level_number),
      target_level_number:Number(lv.level_number),
      form_design:JSON.parse(JSON.stringify(w.formDesign||{}))
    };
  }
  function tpVaResolveSource(batch){
    var w=batch&&batch.browseId&&model.browses[batch.browseId];
    var source=batch&&batch.sourceDescriptor||null;
    if(!w&&source){
      w=Object.keys(model.browses||{}).map(function(id){return model.browses[id];}).find(function(candidate){
        if(!candidate)return false;
        var lv=model.byId[candidate.levelId];
        return lv&&String(hubIdForLevel(lv)||"")===String(source.hub_id||"")&&String(candidate.parentId||"")===String(source.parent_subject_id||"");
      })||null;
      if(w)batch.browseId=w.id||batch.browseId;
    }
    var lv=w&&model.byId[w.levelId];
    return {
      browse:w||null,
      form:(w&&w.formDesign)||(source&&source.form_design)||null,
      base:(lv&&levelBase(lv))||(source&&source.authority_base)||"",
      hubId:(lv&&hubIdForLevel(lv))||(source&&source.hub_id)||"",
      parentId:w?w.parentId||null:(source?source.parent_subject_id||null:null),
      levelNumber:(lv&&Number(lv.level_number))||(source&&Number(source.level_number))||0,
      targetLevelNumber:(lv&&Number(lv.level_number))||(source&&Number(source.target_level_number))||0
    };
  }

  function tpVaExtractFormDefinition(value){
    if(!value||typeof value!=="object")return null;
    var candidates=[
      value,
      value.artifact,
      value.form_design,
      value.formDesign,
      value.definition,
      value.data,
      value.record,
      value.value,
      value.payload
    ];
    for(var i=0;i<candidates.length;i++){
      var c=candidates[i];
      if(!c||typeof c!=="object")continue;
      if(Array.isArray(c.fields))return c;
      if(c.form_design&&Array.isArray(c.form_design.fields))return c.form_design;
      if(c.formDesign&&Array.isArray(c.formDesign.fields))return c.formDesign;
      if(c.definition&&Array.isArray(c.definition.fields))return c.definition;
      if(c.artifact&&Array.isArray(c.artifact.fields))return c.artifact;
    }
    return null;
  }

  async function tpVaRefreshAuthoritativeForm(batch,resolved){
    resolved=resolved||tpVaResolveSource(batch);
    if(!resolved||!resolved.base||!resolved.hubId)return resolved;
    try{
      var latest=await getJson(resolved.base+"/api/enterprise/hub/form-design/latest?hub_id="+encodeURIComponent(resolved.hubId));
      var decoded=decodeArtifact(latest);
      var artifact=tpVaExtractFormDefinition(latest)||tpVaExtractFormDefinition(decoded);
      if(artifact){
        resolved.form=artifact;
        batch.sourceDescriptor=batch.sourceDescriptor||{};
        batch.sourceDescriptor.form_design=JSON.parse(JSON.stringify(artifact));
        batch.sourceDescriptor.form_design_tail=String((latest&&(latest.tail_hash||latest.cu_id))||"");
        tpPersistFixtureBinding(batch);
      }
    }catch(e){
      console.warn("[CEE Validation Fixture] Could not refresh authoritative Form Definition",e);
    }
    return resolved;
  }

  function tpVaFields(form){
    var normalized=tpVaExtractFormDefinition(form)||form;
    return normalized&&Array.isArray(normalized.fields)?normalized.fields:[];
  }
  function tpVaFieldKey(f){return String(f&&((f.field_key||f.indexed_name||f.name||f.field_name||f.field_id||f.id))||"");}
  function tpVaFieldType(f){return String(f&&((f.type||f.field_type))||"text").toLowerCase();}
  function tpVaIsIsoCreatedAtField(f){
    if(!f||f.retired)return false;
    var fk=tpVaFieldKey(f).toLowerCase(),label=String((f&&(f.label||f.display_label))||"").toLowerCase();
    return fk==="fixture-created-at-iso"||fk.indexOf("fixture-created-at-iso")>=0||label==="fixture created at (iso)"||label.indexOf("fixture created at (iso)")>=0;
  }
  function tpVaIsLegacyIntegerCreatedAtField(f){
    if(!f||f.retired)return false;
    var fk=tpVaFieldKey(f).toLowerCase(),label=String((f&&(f.label||f.display_label))||"").toLowerCase();
    var t=String((f&&(f.type||f.field_type||f.data_type))||"").toLowerCase();
    if(fk==="fixture-created-at"||(label==="fixture created at"&&label.indexOf("iso")<0)){
      return t==="integer"||t==="number"||t==="";
    }
    return false;
  }
  function tpVaAutoType(f){
    var raw=f&&(f.auto_entry_type||f.auto_type||f.entry_type||(typeof f.auto_entry==="string"?f.auto_entry:"")||(f.auto_entry&&f.auto_entry.type)||"");
    var normalized=String(raw||"").toLowerCase().replace(/[ _]+/g,"-");
    var key=tpVaFieldKey(f).toLowerCase(),label=String((f&&(f.label||f.display_label))||"").toLowerCase();
    /* Only the stable ISO identity is inferred without explicit auto_entry_type.
       Do not treat the legacy integer fixture-created-at label as the ISO field. */
    if(!normalized&&(key==="fixture-created-at-iso"||key.indexOf("fixture-created-at-iso")>=0||label==="fixture created at (iso)"||label.indexOf("fixture created at (iso)")>=0))normalized="creation-timestamp";
    return normalized;
  }
  function tpVaHasCreationTimestampCapability(form){
    /* Authoritative markers: published fixture-created-at-iso identity, or a
       type-compatible creation-timestamp auto-entry field. Do NOT treat the
       legacy integer fixture-created-at auto_entry_type string alone as proof
       of the ISO capability — that caused VA-010 to target a field the form
       never published. */
    var fields=tpVaFields(form);
    if(fields.some(function(f){
      if(f.retired||tpVaIsLegacyIntegerCreatedAtField(f))return false;
      if(tpVaIsIsoCreatedAtField(f))return true;
      return tpVaAutoType(f)==="creation-timestamp"&&tpVaCreationTimestampCompatible(f);
    }))return true;
    var seen=[];
    function walk(v){
      if(v===null||v===undefined)return false;
      if(typeof v==="string"){
        var text=v.toLowerCase().replace(/[ _]+/g,"-");
        return text.indexOf("fixture-created-at-iso")>=0||text.indexOf("fixture-created-at-(iso)")>=0;
      }
      if(typeof v!=="object")return false;
      if(seen.indexOf(v)>=0)return false;
      seen.push(v);
      if(Array.isArray(v))return v.some(walk);
      return Object.keys(v).some(function(k){return walk(k)||walk(v[k]);});
    }
    return walk(form);
  }
  function tpVaFindField(form,params,kind){
    var fields=tpVaFields(form),key=String(params.field_key||params.field||"").toLowerCase(),type=String(params.field_type||"").toLowerCase(),auto=String(params.auto_type||"").toLowerCase().replace(/[ _]+/g,"-");
    if(auto==="creation-timestamp"){
      /* Prefer the append-only ISO fixture field. The legacy fixture-created-at
         field is intentionally integer-backed and must not be selected for VA-010.
         Never synthesize a capability-marker field: if the published form lacks
         an ISO-capable creation-timestamp field, the caller must treat it as a
         schema gap. */
      var isoField=fields.find(function(f){return tpVaIsIsoCreatedAtField(f);});
      if(isoField)return isoField;
      var compatibleAutoField=fields.find(function(f){
        return !f.retired&&!tpVaIsLegacyIntegerCreatedAtField(f)&&tpVaAutoType(f)==="creation-timestamp"&&tpVaCreationTimestampCompatible(f);
      });
      return compatibleAutoField||null;
    }
    return fields.find(function(f){
      if(f.retired)return false;
      var fk=tpVaFieldKey(f).toLowerCase(),label=String(f.label||"").toLowerCase(),ft=tpVaFieldType(f),fa=tpVaAutoType(f);
      if(key&&(fk===key||label===key||fk.indexOf(key)>=0||label.indexOf(key)>=0))return true;
      if(auto&&fa===auto){if(auto==="creation-timestamp")return tpVaCreationTimestampCompatible(f)&&!tpVaIsLegacyIntegerCreatedAtField(f);return true;}
      if(type&&ft===type)return true;
      if(kind==="required"&&(f.required===true||f.mandatory===true)&&!fa)return true;
      return false;
    })||null;
  }
  function tpVaValueForField(f,seed){
    var t=tpVaFieldType(f),opts=Array.isArray(f.options)?f.options.filter(function(o){return !o.retired&&String(o.status||"active").toLowerCase()!=="retired";}):[];
    if(t==="integer"||t==="number")return 7;
    if(t==="decimal"||t==="float")return 7.25;
    if(t==="list<integer>")return [1,2];
    if(t==="boolean"||t==="checkbox")return true;
    if(t==="date")return "2026-08-05";
    if(t==="datetime"||t==="timestamp")return "2026-08-05T12:00:00.000Z";
    if(t==="select"||t==="dropdown"){var o=opts[0];return o?String(o.id!=null?o.id:(o.value!=null?o.value:o.label)):"";}
    if(t==="multi_select"||t==="multiselect"||t==="select-multiple"){var m=opts[0];return m?[String(m.id!=null?m.id:(m.value!=null?m.value:m.label))]:[];}
    if(t==="markdown")return "## Validation fixture\n\n"+seed;
    return "VAL-"+seed;
  }
  function tpVaBaseValues(form,seed,omitField){
    var out={};((form&&form.fields)||[]).forEach(function(f){
      if(f.retired||f===omitField||tpVaAutoType(f))return;
      if(f.required===true||f.mandatory===true)out[tpVaFieldKey(f)]=tpVaValueForField(f,seed);
    });return out;
  }
  function tpVaCreatedRecord(result){return result&&((result.record&&typeof result.record==="object"&&result.record)||result.created_record||result.artifact||result)||null;}
  async function tpVaRefreshAndFind(batch,id){var source=tpVaResolveSource(batch),w=source.browse;if(!w)return null;await refreshBusinessBrowse(batch.browseId);w=model.browses[batch.browseId]||w;return (w&&w.allRecords||[]).find(function(r){return recordId(r)===String(id||"");})||null;}
  async function tpVaCleanup(base,r){if(!r||!recordId(r)||!recordTail(r))return;try{await softDeleteFixtureRecord(base,r);}catch(_e){}}
  async function tpVaCreateProbe(batch,form,values,label){
    var source=tpVaResolveSource(batch),base=source.base,payload={hub_id:source.hubId,parent_subject_id:source.parentId,level_number:source.levelNumber,target_level_number:source.targetLevelNumber,name:label,values:values,operator:operator(),test_record:true,test_fixture:true,test_generation_mode:"validation-autoentry-runner"};
    if(!base||!source.hubId)throw new Error("Fixture source authority or Hub identity is unavailable.");
    try{var response=await postJson(base+"/api/enterprise/records/create",payload),created=tpVaCreatedRecord(response),id=String((created&&(created.subject_id||created.id||created.record_id))||(response&&(response.subject_id||response.id||response.record_id))||"");if(id&&source.browse)created=await tpVaRefreshAndFind(batch,id)||created;return {accepted:true,response:response,payload:payload,record:created,id:id,base:base};}
    catch(e){return {accepted:false,error:errorText(e),payload:payload,base:base};}
  }
  function tpVaExpectedCase(mode,input){mode=String(mode||"").toLowerCase();if(mode==="uppercase"||mode==="upper")return input.toUpperCase();if(mode==="lowercase"||mode==="lower")return input.toLowerCase();if(mode==="title"||mode==="title-case")return input.toLowerCase().replace(/\b\w/g,function(c){return c.toUpperCase();});return input;}
  async function tpRunValidationAutoEntryCriterion(contract,row,batch){
    var source=await tpVaRefreshAuthoritativeForm(batch,tpVaResolveSource(batch)),w=source&&source.browse,form=source&&source.form;if(!form||!source.base||!source.hubId)return {executed:false,result:"error",reason_code:"fixture-source-missing",evidence:"The fixture batch does not contain a usable source Hub, authority route, and published Form Definition descriptor."};
    var spec=contract.verification_spec||{},operation=String(spec.operation||""),verify=String(spec.verification||""),params=Object.assign({},spec.parameters||{}),seed=Date.now().toString(36),target=null,probe=null,pass=false,checks={operation:operation,verification:verify};
    /* Schema is not mutated during criterion execution. Missing
       fixture-created-at-iso is a real fixture-schema gap: run Table >
       Generate Test Plan Fixture → Reconcile so tpVaEnsureFixtureSchema
       publishes the field before VA-001/VA-010 are evaluated. */
    if(operation==="fixture.schema-check"){
      var requirements=Array.isArray(params.requirements)?params.requirements:[];var missing=requirements.filter(function(req){return !tpVaFindField(form,req,req.kind||"");});checks.missing=missing;pass=missing.length===0;
      return {executed:true,result:pass?"pass":"fail",reason_code:pass?"validation-autoentry-schema-ready":"fixture-schema-gap",evidence:"requirements="+JSON.stringify(requirements)+"; missing="+JSON.stringify(missing)+"; field_count="+tpVaFields(form).length+"; creation_timestamp_marker="+tpVaHasCreationTimestampCapability(form)+"; executor=cee-validation-autoentry-fixture-runner@v3"};
    }
    if(operation.indexOf("validation.required")===0)target=tpVaFindField(form,params,"required");
    else if(operation.indexOf("validation.")===0)target=tpVaFindField(form,params,"");
    else target=tpVaFindField(form,params,"");
    if(!target)return {executed:false,result:"error",reason_code:"fixture-field-missing",evidence:"No compatible field found for parameters "+JSON.stringify(params)+"."};
    var key=tpVaFieldKey(target),values=tpVaBaseValues(form,seed,target),input=params.input;
    if(operation==="validation.required-reject")values[key]="";
    else if(operation==="validation.integer-reject")values[key]=input!=null?input:"not-an-integer";
    else if(operation==="validation.date-reject")values[key]=input!=null?input:"08/99/2026";
    else if(operation==="validation.select-reject")values[key]=input!=null?input:"__undefined-option__";
    else if(operation==="validation.case-normalize")values[key]=input!=null?String(input):"mIxEd cAsE";
    else if(operation.indexOf("autoentry.")===0){delete values[key];}
    probe=await tpVaCreateProbe(batch,form,values,"Validation Auto-entry Probe "+seed);checks.accepted=probe.accepted;checks.error=probe.error||"";checks.field=key;
    var persisted=probe.record&&((probe.record.values&&probe.record.values[key]!==undefined)?probe.record.values[key]:probe.record[key]);checks.persisted=persisted;
    if(verify==="request.rejected")pass=!probe.accepted;
    else if(verify==="record.not-created")pass=!probe.accepted;
    else if(verify==="value.normalized"){var mode=params.case||target.case||target.text_case||target.case_rule||"";pass=probe.accepted&&String(persisted)===tpVaExpectedCase(mode,String(values[key]));checks.expected=tpVaExpectedCase(mode,String(values[key]));}
    else if(verify==="value.defaulted"){var expected=params.expected!==undefined?params.expected:target.default_value;pass=probe.accepted&&String(persisted)===String(expected);checks.expected=expected;}
    else if(verify==="value.generated"){pass=probe.accepted&&persisted!==undefined&&persisted!==null&&String(persisted)!=="";if(params.pattern)pass=pass&&new RegExp(params.pattern).test(String(persisted));}
    else if(verify==="value.equals-principal")pass=probe.accepted&&String(persisted)===String(operator());
    else if(verify==="sequence.monotonic"){
      var values2=tpVaBaseValues(form,seed+"b",target),probe2=await tpVaCreateProbe(batch,form,values2,"Validation Auto-entry Probe "+seed+"b"),persisted2=probe2.record&&((probe2.record.values&&probe2.record.values[key]!==undefined)?probe2.record.values[key]:probe2.record[key]);checks.second=persisted2;pass=probe.accepted&&probe2.accepted&&Number.isFinite(Number(persisted))&&Number(persisted2)>Number(persisted);await tpVaCleanup(probe2.base,probe2.record);
    }
    if(probe.accepted)await tpVaCleanup(probe.base,probe.record);
    checks.pass=pass;
    return {executed:true,result:pass?"pass":"fail",reason_code:"validation-autoentry-runner-v1",evidence:"parameters="+JSON.stringify(params)+"; checks="+JSON.stringify(checks)+"; request="+JSON.stringify(probe.payload||{})+"; response="+JSON.stringify(probe.response||{error:probe.error||""})+"; record_id="+String(probe.id||"")+"; executor=cee-validation-autoentry-fixture-runner@v2"};
  }
  async function tpExecuteAutomationContract(contract,row,batch){
    var executor=String(contract.executor||"");
    var text=row.getAttribute("data-text")||"";
    var explicitVerification=contract.verification_spec&&String(contract.verification_spec.verification||"");
    if(explicitVerification){
      var explicitBinding=contract.semantic_binding||contract.verification_spec.binding||{};
      var declaredCapability=executor?tpExecutorCapabilityMatch(explicitBinding,explicitVerification,executor):null;
      if(!executor||!declaredCapability){var inferredCapability=tpExecutorCapabilityMatch(explicitBinding,explicitVerification);if(inferredCapability)executor=inferredCapability.executor;}
    }
    if(!executor)return {executed:false,result:"error",reason_code:"missing-executor",evidence:"Persisted AUTO contract has no executor."};
    if(executor==="cee-find-fixture-runner"){
      var w=model.browses[batch.browseId];
      if(!w)return {executed:false,result:"error",reason_code:"source-browse-missing",evidence:"The fixture source browse is not open."};
      var fixtureRecord=tpFindFixtureRecord(batch,row,w);
      if(!fixtureRecord)return {executed:false,result:"error",reason_code:"fixture-record-missing",evidence:"No fixture record could be resolved for this criterion."};
      var input=tpFixtureFindInput(w,fixtureRecord,text);
      if(!input)return {executed:false,result:"error",reason_code:"fixture-input-missing",evidence:"The fixture record has no scalar searchable field value."};
      var prior={findRequests:JSON.parse(JSON.stringify(w.findRequests||[])),findActive:!!w.findActive,findMode:!!w.findMode,selectedId:w.selected>=0&&w.records[w.selected]?recordId(w.records[w.selected]):""};
      var criterion=findCriterionFromField(input.field,input.operator,input.value,input.value2);
      var expected=(w.allRecords||[]).filter(function(r){return !isDeletedBusinessRecord(r)&&findCriterionMatches(r,criterion,w);}).map(recordId).sort();
      try{
        w.findMode=true;
        w.findRequests=[{omit:false,criteria:[criterion]}];
        w.lastFindExecutionClaim=findExecutionClaim(w);
        w.findActive=true;
        w.findMode=false;
        rerenderBusinessFoundSet(batch.browseId,"");
        await new Promise(function(resolve){setTimeout(resolve,0);});
        var actual=(w.records||[]).map(recordId).sort();
        var pass=expected.length===actual.length&&expected.every(function(id,i){return id===actual[i];});
        return {executed:true,result:pass?"pass":"fail",reason_code:"fixture-find-record-set",evidence:"field="+findFieldKey(input.field)+"; requested_operator="+input.requested_operator+"; operator="+input.operator+"; value="+input.value+"; expected_ids="+expected.join(",")+"; actual_ids="+actual.join(",")};
      }finally{
        w.findRequests=prior.findRequests;w.findActive=prior.findActive;w.findMode=prior.findMode;
        rerenderBusinessFoundSet(batch.browseId,prior.selectedId);
      }
    }
    if(executor==="cee-find-observable-runner"){
      var observable=evaluateObservableCriterion(text);
      if(!observable.executed)return {executed:false,result:"error",reason_code:"executor-does-not-support-criterion",evidence:"Executor "+executor+" does not implement this criterion. Reanalyze it to create a fixture-bound Find contract."};
      return observable;
    }
    if(executor==="cee-record-navigation-fixture-runner")return tpRunRecordNavigationCriterion(contract,row,batch);
    if(executor==="cee-duplicate-record-fixture-runner")return tpRunDuplicateRecordCriterion(contract,row,batch);
    if(executor==="cee-validation-autoentry-fixture-runner")return tpRunValidationAutoEntryCriterion(contract,row,batch);
    if(executor==="cee-sort-fixture-runner")return tpRunSortFixtureCriterion(contract,row,batch);
    if(executor==="cee-found-set-fixture-runner")return tpRunFoundSetFixtureCriterion(contract,row,batch);
    return {executed:false,result:"error",reason_code:"unknown-executor",evidence:"No registered executor named "+executor+"."};
  }
  function buildFixtureAutomationMap(criteria,persistedSteps){
    var byKey={};
    (persistedSteps||[]).forEach(function(s){
      var key=String(s.criterion_id||s.text||"");
      if(key&&s.automation)byKey[key]=s.automation;
    });
    var map={};
    (criteria||[]).forEach(function(c){
      var key=String(c.criterion_id||c.seq),automation=byKey[key]||null;
      /* cee-test-plan-md/v1 explicit criterion bindings are executable source
         contracts. The Test Plan history endpoint is metadata-first and may not
         return historical artifact_json, so a missing persisted automation
         object must not erase an explicit Verify/Operation/Executor contract. */
      if((!automation||String(automation.eligibility||automation.status)!=="automatable")&&c.verification_spec&&c.verification_spec.verification&&c.executor&&tpExecutorSupportsCriterion(String(c.executor),String(c.text||""),c.bindings,c.verification_spec)){
        automation={
          eligibility:"automatable",
          status:"automatable",
          reason_code:"explicit-markdown-contract",
          reason:"Recovered from the explicit cee-test-plan-md/v1 criterion binding.",
          executor:String(c.executor),
          executor_version:String(c.executor)==="cee-found-set-fixture-runner"?6:(String(c.executor)==="cee-record-navigation-fixture-runner"?2:(String(c.executor)==="cee-duplicate-record-fixture-runner"?3:(String(c.executor)==="cee-validation-autoentry-fixture-runner"?2:1))),
          semantic_binding:Object.assign({},c.bindings||{}),
          verification_spec:{operation:String(c.verification_spec.operation||""),verification:String(c.verification_spec.verification||""),parameters:Object.assign({},c.verification_spec.parameters||{}),binding:Object.assign({},c.verification_spec.binding||c.bindings||{})}
        };
      }
      if(automation&&String(automation.eligibility||automation.status)==="automatable"){
        map[key]={
          criterion_id:String(c.criterion_id||""),
          seq:Number(c.seq)||0,
          eligibility:"automatable",
          reason_code:String(automation.reason_code||""),
          reason:String(automation.reason||""),
          executor:String(automation.executor||"cee-find-fixture-runner"),
          executor_version:Number(automation.executor_version)||1,
          fixture_bound:true,
          semantic_binding:Object.assign({context:"",target:"",action:""},automation.semantic_binding||((automation.verification_spec||{}).binding)||c.bindings||{}),
          executor_capability:automation.executor_capability?Object.assign({},automation.executor_capability):null,
          verification_spec:automation.verification_spec?{operation:String(automation.verification_spec.operation||""),verification:String(automation.verification_spec.verification||""),parameters:Object.assign({},automation.verification_spec.parameters||{}),binding:Object.assign({},automation.verification_spec.binding||automation.semantic_binding||c.bindings||{})}:null
        };
      }
    });
    return map;
  }

  async function showFixtureAppliedToTestPlan(batchId){
    var batch=CEE_TEST_FIXTURE_BATCHES[batchId];
    if(!batch){toast("Fixture batch is no longer available in this browser session.","err");return;}
    try{
      var latest=await getJson(testPlansApiBase()+"/latest?subject_id="+encodeURIComponent(batch.planSubjectId));
      var plan=tpArtifact(latest.plan||latest);if(!plan||!Object.keys(plan).length)plan=latest.plan||latest;
      plan._subject_id=latest.subject_id||batch.planSubjectId;
      plan.subject_id=plan._subject_id;
      /* The latest CU may be a result snapshot that does not carry the accepted
         automation-definition layer. Reuse the same authority-history merge as
         normal Run open before constructing the fixture runtime map. */
      var restored=await tpLoadLatestSavedResults(plan._subject_id,latest,plan);
      if(restored&&restored.steps&&restored.steps.length)plan.steps_json=JSON.stringify(restored.steps);
      var tail=String(latest.tail_cu_id||latest.tail||latest.tail_hash||latest.cu_id||plan._tail_cu_id||"");
      var parsed=tpParseTestPlanMarkdownV1(plan.steps_markdown||"");
      if(!parsed.ok)throw new Error(((parsed.errors[0]||{}).message||"Invalid Test Plan"));
      var criteria=tpPlanCriteria(parsed);

      CEE_ACTIVE_TEST_FIXTURE_BATCH_ID=batchId;
      var persistedSteps=tpParseStepsJson(plan.steps_json||"[]");
      var reconstructedMap=buildFixtureAutomationMap(criteria,persistedSteps);
      var analyzedMap=(CEE_TEST_AUTOMATION_ANALYSES&&CEE_TEST_AUTOMATION_ANALYSES[String(batch.planSubjectId||"")])||{};
      var batchMap=(batch.automationMap&&Object.keys(batch.automationMap).length)?batch.automationMap:{};
      CEE_ACTIVE_TEST_AUTOMATION_MAP=Object.assign({},reconstructedMap,analyzedMap,batchMap);
      batch.automationMap=Object.assign({},CEE_ACTIVE_TEST_AUTOMATION_MAP);
      closeEditModal();
      showTestPlanForm("test-plans-window",plan,tail,false,true);
      await tpWaitForAutomationChecklist(3000);

      var currentRun=tpCurrentRunWindow();
      var runRoot=(currentRun&&currentRun.element)||document;
      if(runRoot&&runRoot.dataset)runRoot.dataset.fixtureBatchId=batchId;
      if(runRoot)runRoot.__ceeTestAutomationMap=Object.assign({},CEE_ACTIVE_TEST_AUTOMATION_MAP);
      var button=runRoot.querySelector?runRoot.querySelector("#tp-run-automation-btn"):null;
      var buttonState=tpRefreshAutomationRunButton(runRoot);
      var summary=tpAutomationSummaryHost(runRoot);
      var autoCount2=Object.keys(CEE_ACTIVE_TEST_AUTOMATION_MAP).filter(function(k){return CEE_ACTIVE_TEST_AUTOMATION_MAP[k].eligibility==="automatable";}).length;
      var candidateCount2=criteria.filter(function(c){var a=c.automation||{};return String(a.eligibility||a.status||"")==="candidate";}).length;
      var manualCount2=Math.max(0,criteria.length-autoCount2-candidateCount2);
      if(summary)summary.innerHTML='<b>Fixture applied:</b> '+esc(batch.planTitle||batch.planId||"Test Plan")+
        ' · Batch '+esc(batch.batchId)+' · Fixture records '+Number((batch.created||0)+(batch.reused||0))+
        ' · AUTO '+autoCount2+' · NOT AUTOMATED '+candidateCount2+' · MANUAL '+manualCount2+
        '<br>'+(autoCount2?'Run the AUTO criteria here, continue manual testing, then use <b>Save Results</b>.':'No runnable AUTO criteria are defined. Candidate criteria require configuration or executor implementation before they can run.');
      console.log("[CEE Test Automation] Fixture applied to Test Plan",{batch_id:batchId,assertions:criteria.length,automatable:autoCount2});
    }catch(e){
      console.error("[CEE Test Automation] show fixture failed",e);
      toast("Could not show fixture with Test Plan: "+errorText(e),"err");
    }
  }
  window.showFixtureAppliedToTestPlan=showFixtureAppliedToTestPlan;

  async function runAppliedFixtureAutomation(triggerButton,event){
    if(event){event.preventDefault();event.stopPropagation();}
    var button=triggerButton||tpCurrentRunButton();
    var runRoot=tpRunRootFromElement(button);
    var summaryHost=tpAutomationSummaryHost(runRoot);
    if(summaryHost)summaryHost.innerHTML="<b>Automated execution requested…</b> Validating fixture and executor contracts.";
    if(button){button.disabled=true;button.textContent="Starting Automated Tests…";}
    console.log("[CEE Test Automation] Execute Automated Tests clicked",{
      active_fixture_batch_id:CEE_ACTIVE_TEST_FIXTURE_BATCH_ID
    });
    await new Promise(function(resolve){setTimeout(resolve,0);});

    var batchId=(runRoot&&runRoot.dataset&&runRoot.dataset.fixtureBatchId)||CEE_ACTIVE_TEST_FIXTURE_BATCH_ID;
    var batch=batchId&&CEE_TEST_FIXTURE_BATCHES[batchId];
    if(!batch){
      var runState=(runRoot&&runRoot.id&&model.browses[runRoot.id])||model.browses[tpRunWindowId()]||{};
      var wantedSubject=String(runState.subjectId||runState.subject_id||"");
      var candidates=Object.keys(CEE_TEST_FIXTURE_BATCHES||{}).map(function(id){return CEE_TEST_FIXTURE_BATCHES[id];}).filter(function(item){
        return item&&(!wantedSubject||String(item.planSubjectId||"")===wantedSubject);
      });
      if(candidates.length){
        batch=candidates[candidates.length-1];batchId=String(batch.batchId||"");
        if(runRoot&&runRoot.dataset)runRoot.dataset.fixtureBatchId=batchId;
        CEE_ACTIVE_TEST_FIXTURE_BATCH_ID=batchId;
      }
    }
    if(!batch){
      if(summaryHost)summaryHost.innerHTML='<b style="color:var(--red)">Automated execution not started:</b> no fixture is applied to this Test Plan.';
      if(button){button.disabled=false;button.textContent="Execute Automated Tests";}
      toast("Apply a fixture to this Test Plan before executing automated tests.","err");
      return;
    }

    if(batch.automationMap&&Object.keys(batch.automationMap).length){
      CEE_ACTIVE_TEST_AUTOMATION_MAP=Object.assign({},batch.automationMap);
      if(runRoot)runRoot.__ceeTestAutomationMap=Object.assign({},batch.automationMap);
    }
    var allRows=Array.prototype.slice.call(runRoot.querySelectorAll('#tp-step-list .tp-step-row'));
    var rows=allRows.filter(function(row){return String(row.getAttribute("data-automation-eligibility")||"")==="automatable";});
    if(!rows.length){
      /* The accepted automation contract is authoritative. Checklist markup is
         presentation state and can be rendered before asynchronous restoration
         finishes. Recover AUTO criteria from the window-scoped map and hydrate
         matching rows by stable criterion_id. */
      var scopedMap=(runRoot&&runRoot.__ceeTestAutomationMap)||CEE_ACTIVE_TEST_AUTOMATION_MAP||{};
      rows=allRows.filter(function(row){
        var criterionId=String(row.getAttribute("data-criterion-id")||"");
        var contract=scopedMap[criterionId]||null;
        if(!contract||String(contract.eligibility||contract.status||"")!=="automatable")return false;
        row.setAttribute("data-automation-eligibility","automatable");
        row.setAttribute("data-automatable","true");
        row.setAttribute("data-automation-json",JSON.stringify(contract));
        var badge=row.querySelector(".tp-automation-badge");
        if(badge){badge.className="tp-automation-badge auto";badge.textContent="AUTO";}
        return true;
      });
    }
    if(!rows.length){
      /* An already-open Run window may predate acceptance of the automation CU.
         Recover the authoritative definition directly from Test Plan history,
         rebuild the map, and hydrate the existing rows without reopening. */
      try{
        var subjectId=String(batch.planSubjectId||"");
        if(subjectId){
          var latestPlan=await getJson(testPlansApiBase()+"/latest?subject_id="+encodeURIComponent(subjectId));
          var planArtifact=tpArtifact(latestPlan.plan||latestPlan);if(!planArtifact||!Object.keys(planArtifact).length)planArtifact=latestPlan.plan||latestPlan;
          planArtifact.subject_id=subjectId;planArtifact._subject_id=subjectId;
          var restoredPlan=await tpLoadLatestSavedResults(subjectId,latestPlan,planArtifact);
          if(restoredPlan&&restoredPlan.steps){
            var parsedPlan=tpParseTestPlanMarkdownV1(planArtifact.steps_markdown||"");
            var criteriaPlan=parsedPlan.ok?tpPlanCriteria(parsedPlan):[];
            var recoveredMap=buildFixtureAutomationMap(criteriaPlan,restoredPlan.steps);
            runRoot.__ceeTestAutomationMap=Object.assign({},recoveredMap);
            CEE_ACTIVE_TEST_AUTOMATION_MAP=Object.assign({},recoveredMap);
            rows=allRows.filter(function(row){
              var criterionId=String(row.getAttribute("data-criterion-id")||"");
              var contract=recoveredMap[criterionId]||null;
              if(!contract||String(contract.eligibility||contract.status||"")!=="automatable")return false;
              row.setAttribute("data-automation-eligibility","automatable");
              row.setAttribute("data-automatable","true");
              row.setAttribute("data-automation-json",JSON.stringify(contract));
              var badge=row.querySelector(".tp-automation-badge");
              if(badge){badge.className="tp-automation-badge auto";badge.textContent="AUTO";}
              return true;
            });
          }
        }
      }catch(recoveryError){console.error("[CEE Test Automation] authority recovery failed",recoveryError);}
    }
    if(!rows.length){
      var mapForDiagnostic=(runRoot&&runRoot.__ceeTestAutomationMap)||CEE_ACTIVE_TEST_AUTOMATION_MAP||{};
      var mappedAuto=Object.keys(mapForDiagnostic).filter(function(k){return String((mapForDiagnostic[k]||{}).eligibility||"")==="automatable";});
      if(summaryHost)summaryHost.innerHTML="<b>No persisted AUTO criteria are available in the associated Test Plan Run window.</b> Rendered rows "+allRows.length+" · mapped AUTO "+mappedAuto.length+".";
      if(button){button.disabled=false;button.textContent="Execute Automated Tests";}
      console.error("[CEE Test Automation] AUTO contract discovery failed",{run_root_id:runRoot&&runRoot.id||"",rendered_rows:allRows.length,mapped_auto:mappedAuto,fixture_batch_id:batchId});
      toast("No persisted AUTO criteria are available in the Test Plan Run window.","err");
      return;
    }

    if(button)button.textContent="Executing Automated Tests…";
    var report=[],executed=0,passed=0,failed=0,errors=0,changed=0,unchanged=0;
    try{
      for(var i=0;i<rows.length;i++){
        var row=rows[i],seq=Number(row.getAttribute("data-seq"))||0;
        var contract={};
        try{contract=JSON.parse(row.getAttribute("data-automation-json")||"{}");}catch(_e){}
        if(summaryHost)summaryHost.innerHTML="<b>Automation running…</b> "+(i+1)+" / "+rows.length+
          " · Passed "+passed+" · Failed "+failed+" · Errors "+errors;
        var ev=await tpExecuteAutomationContract(contract,row,batch);
        var evidence=row.querySelector(".tp-automation-evidence");
        var badge=row.querySelector(".tp-automation-badge");

        if(ev.result==="error"||!ev.executed){
          errors++;
          if(badge){badge.className="tp-automation-badge error";badge.textContent="AUTO ERROR";}
          var errorExecution={
            outcome:"error",evidence:String(ev.evidence||ev.reason_code||"Unknown executor error."),
            reason_code:String(ev.reason_code||""),executor:String(contract.executor||""),
            executed_at:new Date().toISOString(),changed:false,prior_result:String(row.getAttribute("data-result")||"pending")
          };
          row.setAttribute("data-execution-json",JSON.stringify(errorExecution));
          if(evidence)evidence.textContent="Execution error: "+errorExecution.evidence;
          report.push({
            seq:seq,
            criterion_id:row.getAttribute("data-criterion-id")||"",
            result:"error",
            reason_code:ev.reason_code,
            evidence:ev.evidence,
            executor:String(contract.executor||"")
          });
          continue;
        }

        executed++;
        if(ev.result==="pass")passed++;else failed++;
        var apply=tpApplyAutomationResult(seq,ev.result,runRoot);
        if(apply.changed)changed++;else unchanged++;
        if(badge){badge.className="tp-automation-badge auto";badge.textContent="AUTO";}
        var savedExecution={
          outcome:String(ev.result||""),evidence:String(ev.evidence||ev.reason_code||""),
          reason_code:String(ev.reason_code||""),executor:String(contract.executor||""),
          executed_at:new Date().toISOString(),changed:!!apply.changed,prior_result:String(apply.previous||"")
        };
        row.setAttribute("data-execution-json",JSON.stringify(savedExecution));
        if(evidence)evidence.textContent="Automated "+String(ev.result).toUpperCase()+": "+savedExecution.evidence;
        report.push({
          seq:seq,
          criterion_id:row.getAttribute("data-criterion-id")||"",
          result:ev.result,
          reason_code:ev.reason_code,
          evidence:ev.evidence,
          executor:String(contract.executor||""),
          changed:apply.changed,
          prior_result:apply.previous
        });
      }

      tpSyncStepsJson(runRoot);
      batch.automationRun={
        at:new Date().toISOString(),
        criteria:rows.length,
        executed:executed,
        passed:passed,
        failed:failed,
        errors:errors,
        changed:changed,
        unchanged:unchanged,
        report:report,
        runner:"cee-test-executor-dispatch-v2"
      };
      if(summaryHost)summaryHost.innerHTML='<b>Latest Automated Run</b> · Eligible Test Points <b>'+rows.length+
        '</b> · Executed <b>'+executed+'</b> · Passed <b>'+passed+'</b> · Failed <b>'+failed+
        '</b> · Execution Errors <b>'+errors+'</b> · Results Updated <b>'+changed+
        '</b> · Already Matched <b>'+unchanged+
        '</b><br>This panel describes only the latest automated run. The status above is cumulative across manual and automated evaluation. Continue manual testing, then use <b>Save Results</b>.';
      console.log("[CEE Test Automation] execution complete",{batch_id:batchId,run:batch.automationRun});
      toast("Automated tests: "+passed+" passed · "+failed+" failed · "+errors+" errors.",errors?"err":"ok");
    }catch(e){
      console.error("[CEE Test Automation] execution failed",e);
      if(summaryHost)summaryHost.innerHTML='<b style="color:var(--red)">Automated execution failed:</b> '+esc(errorText(e));
      toast("Automated execution failed: "+errorText(e),"err");
    }finally{
      if(button){button.disabled=false;button.textContent="Execute Automated Tests ("+rows.length+")";}
    }
    return false;
  }
  window.runAppliedFixtureAutomation=runAppliedFixtureAutomation;
  document.addEventListener("pointerdown",function(ev){
    var b=ev.target&&ev.target.closest?ev.target.closest("#tp-run-automation-btn"):null;
    if(!b)return;
    console.log("[CEE Test Automation] Execute button pointerdown",{disabled:!!b.disabled,text:b.textContent||""});
  },true);

  function renderGenerationResults(batch){
    var fixture=batch.mode==="fixture";
    var rows=batch.results.map(function(r){
      return '<tr><td>'+r.sequence+'</td>'+
        (fixture?'<td>'+esc(r.coverage||'')+'</td><td>'+esc(r.eligibility||'')+'</td><td>'+esc(r.reason_code||'')+'</td>':'')+
        '<td>'+esc(r.ok?'Created':'Failed')+'</td><td>'+esc(r.stage)+'</td><td style="max-width:520px;white-space:normal">'+esc(r.message||r.subject_id||'')+'</td></tr>';
    }).join('');
    modal((fixture?'Test Plan Fixture':'Test Record Generation')+' — '+esc(batch.batchId),
      '<div class="card"><div class="card-body">'+
      (fixture?'<div class="small-muted"><b>'+esc(batch.planTitle||batch.planId||'Test Plan')+'</b> · one record per numbered step</div>':'')+
      (fixture&&batch.automationSummary?'<div class="small-muted">Automation potential: <b>'+batch.automationSummary.automation_potential+' / '+batch.automationSummary.total+' ('+batch.automationSummary.automation_potential_percent+'%)</b> · immediately automatable '+batch.automationSummary.automatable+' · mapping candidates '+batch.automationSummary.candidate+' · review '+batch.automationSummary.review_required+' · human '+batch.automationSummary.human_required+'</div>':'')+
      '<div class="small-muted">Requested: '+batch.requested+' · Created: '+batch.created+' · Reused: '+(batch.reused||0)+' · Superseded: '+(batch.superseded||0)+' · Failed: '+batch.failed+'</div>'+
      '<div class="fixture-result-scroll"><table class="browse-table"><thead><tr><th>#</th>'+
      (fixture?'<th>Coverage</th><th>Automation</th><th>Reason</th>':'')+'<th>Result</th><th>Stage</th><th>Detail</th></tr></thead><tbody>'+rows+'</tbody></table></div>'+
      '<div class="action-row" style="justify-content:flex-end;margin-top:10px">'+
      (fixture?'<button class="btn primary" onclick="showFixtureAppliedToTestPlan(\''+esc(batch.batchId)+'\')">Show Fixture Applied to Test Plan</button>':'')+
      '<button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');
    var fixtureModal=document.getElementById("edit-modal");
    if(fixtureModal){
      fixtureModal.classList.toggle("fixture-result-modal",fixture);
      requestAnimationFrame(centerEditModal);
    }
  }
  function openRandomTestRecordsDialog(browseId){
    var w=model.browses[browseId];if(!w||!w.formDesign){toast('A published form design is required.','err');return;}
    if(context.environmentRoot!=="acceptance"){toast('Test records may be created only in Acceptance.','err');return;}
    modal('Create Random Test Records','<div class="card"><div class="card-body"><div class="field"><label>Hub</label><input value="'+esc((model.byId[w.levelId]||{}).label||w.levelId)+'" readonly></div><div class="field"><label>Number of records</label><input id="test-record-count" type="number" min="1" max="100" value="10"></div><div class="small-muted">Generates schema-valid random data through the normal CU-backed record creation route.</div><div class="action-row" style="justify-content:flex-end;margin-top:10px"><button class="btn" onclick="closeEditModal()">Cancel</button><button class="btn primary" id="confirm-create-test-records">Create</button></div></div></div>');
    document.getElementById('confirm-create-test-records').onclick=async function(){var n=Math.max(1,Math.min(100,Number(document.getElementById('test-record-count').value)||10));closeEditModal();await createTestRecords(browseId,n);};
  }
  async function loadTestPlanChoices(){
    var j=await getJson(testPlansApiBase()+"/index");
    return (j.plans||[]).map(function(row){var a=(row&&row.artifact!==undefined)?tpArtifact(row):Object.assign({},row||{});a._subject_id=row.subject_id||a.subject_id||"";return a;});
  }
  function fixtureRecordValue(r,key){
    if(!r)return undefined;
    var v=(r.values&&typeof r.values==="object")?r.values:{};
    return v[key]!==undefined?v[key]:r[key];
  }
  function activeFixtureRecordsForPlan(w,subjectId){
    return (w.allRecords||w.records||[]).filter(function(r){
      return !isDeletedBusinessRecord(r)&&String(fixtureRecordValue(r,"_test_plan_subject_id")||fixtureRecordValue(r,"test_plan_subject_id")||"")===String(subjectId||"");
    });
  }
  function fixtureExistingSummary(records){
    var batches={},steps={};
    records.forEach(function(r){
      var batch=String(fixtureRecordValue(r,"_test_fixture_batch_id")||fixtureRecordValue(r,"test_batch_id")||"unknown");
      var step=String(fixtureRecordValue(r,"_test_step_id")||fixtureRecordValue(r,"test_step_id")||"");
      batches[batch]=(batches[batch]||0)+1;if(step)steps[step]=r;
    });
    return {records:records,batches:batches,steps:steps,count:records.length};
  }
  async function softDeleteFixtureRecord(base,r){
    return postJson(base+"/api/enterprise/records/delete",{subject_id:recordId(r),loaded_tail_hash:recordTail(r),operator:operator()});
  }
  function tpAcceptedAutomationContract(entry,criterionText){
    var eligibility=String(entry.eligibility||"review-required");
    if(eligibility==="human-required"||eligibility==="review-required")eligibility="manual";
    var executor=eligibility==="automatable"?String(entry.executor||"cee-find-fixture-runner"):"";
    if(eligibility==="automatable"&&!tpExecutorSupportsCriterion(executor,criterionText,entry.semantic_binding,entry.verification_spec)){
      eligibility="candidate";
      executor="";
    }
    return {
      status:eligibility,
      eligibility:eligibility,
      executor:executor,
      executor_version:executor==="cee-found-set-fixture-runner"?6:(executor==="cee-record-navigation-fixture-runner"?2:(executor==="cee-validation-autoentry-fixture-runner"?2:(executor?1:0))),
      reason_code:String(entry.reason_code||""),
      reason:String(entry.reason||""),
      confidence:String(entry.confidence||""),
      accepted_at:new Date().toISOString(),
      accepted_by:typeof operator==="function"?String(operator()):"local-operator",
      characteristics:Array.isArray(entry.characteristics)?entry.characteristics.slice():[],
      semantic_binding:Object.assign({context:"",target:"",action:""},entry.semantic_binding||{}),
      executor_capability:entry.executor_capability?Object.assign({},entry.executor_capability):null,
      verification_spec:entry.verification_spec?{operation:String(entry.verification_spec.operation||""),verification:String(entry.verification_spec.verification||""),parameters:Object.assign({},entry.verification_spec.parameters||{}),binding:Object.assign({},entry.verification_spec.binding||{})}:null,
      evidence_standard:{level:Number(entry.standard_level)||3,id:String(entry.standard_id||"acceptance"),label:String(entry.standard_label||"Acceptance")},
      scorecard:Object.assign({},entry.dimensions||{}),
      intrinsic_automability:String(entry.intrinsic_automability||"manual"),
      executor_state:Object.assign({id:executor?"available":"none",executor_id:executor,fixture_bound:false},entry.executor_state||{}),
      evidence_maturity:{level:Number((entry.evidence_maturity||{}).level)||0,id:String((entry.evidence_maturity||{}).id||"none"),label:String((entry.evidence_maturity||{}).label||"None"),capabilities:Object.assign({},(entry.evidence_maturity||{}).capabilities||{}),missing_for_next_level:Array.isArray((entry.evidence_maturity||{}).missing_for_next_level)?entry.evidence_maturity.missing_for_next_level.slice():[],missing_by_level:Object.assign({},(entry.evidence_maturity||{}).missing_by_level||{})},
      evidence_contract:{id:String((entry.evidence_contract||{}).id||entry.executor||""),version:String((entry.evidence_contract||{}).version||""),planned:!!(entry.evidence_contract||{}).planned,maximum_level:Number((entry.evidence_contract||{}).maximum_level)||1,capabilities:Object.assign({},(entry.evidence_contract||{}).capabilities||{})},
      display_status:String(entry.display_status||eligibility),
      gap_type:String(entry.gap_type||"none"),
      gap_codes:Array.isArray(entry.gap_codes)?entry.gap_codes.slice():[],
      broad_criterion:!!entry.broad_criterion,
      atomic_split_suggestions:Array.isArray(entry.atomic_split_suggestions)?entry.atomic_split_suggestions.slice():[],
      classifier:String(entry.classifier||"cee-automation-analysis-v6")
    };
  }
  async function persistTestPlanAutomationAnalysis(subjectId,latest,plan,parsed,analysisMap,analysisMeta){
    var existing=tpParseStepsJson(plan.steps_json||"[]"),existingByKey={};
    existing.forEach(function(s){existingByKey[String(s.criterion_id||s.text||"")]=s;});
    var steps=tpPlanCriteria(parsed).map(function(c){
      var key=String(c.criterion_id||c.text),prior=existingByKey[key]||{},draft=analysisMap[key];
      return {
        seq:c.seq,
        criterion_id:String(c.criterion_id||""),
        test_id:String(c.test_id||""),
        test_title:String(c.test_title||""),
        text:String(c.text||""),
        result:(prior.result==="pass"||prior.result==="fail")?prior.result:"pending",
        automation:draft?tpAcceptedAutomationContract(draft,c.text):(prior.automation||null)
      };
    });
    var body={
      plan_id:String(plan.plan_id||parsed.plan_id||""),
      subject_id:String(subjectId||""),
      title:String(plan.title||parsed.title||""),
      status:String(plan.status||"Draft"),
      environment:String(plan.environment||""),
      author:String(plan.author||""),
      tags:String(plan.tags||""),
      description:String(plan.description||""),
      plan_format:"cee-test-plan-md/v1",
      steps_markdown:String(plan.steps_markdown||""),
      steps_json:JSON.stringify(steps),
      plan_json:JSON.stringify({
        format:"cee-test-plan-md/v1",
        test_count:(parsed.tests||[]).length,
        step_count:(parsed.tests||[]).reduce(function(n,t){return n+(t.steps||[]).length;},0),
        assertion_count:steps.length,
        automation_definition_version:6,
        automation_analysis:Object.assign({classifier:"cee-automation-analysis-v6"},analysisMeta||{})
      }),
      cee_version:String(plan.cee_version||currentCeeVersion()),
      loaded_tail_hash:String(latest.tail_cu_id||latest.tail||plan._tail_cu_id||""),
      operator:typeof operator==="function"?operator():"local-operator"
    };
    var saved=await postJson(testPlansApiBase()+"/save",body);
    return {saved:saved,steps:steps,body:body};
  }

  async function openTestPlanFixtureDialog(browseId){
    var w=model.browses[browseId];if(!w||!w.formDesign){toast("A published form design is required.","err");return;}
    if(context.environmentRoot!=="acceptance"){toast("Test fixtures may be created only in Acceptance.","err");return;}
    modal("Generate Test Plan Fixture",'<div class="card"><div class="card-body"><div class="small-muted">Loading Test Plans…</div></div></div>');
    try{
      var plans=await loadTestPlanChoices();
      if(!plans.length){modal("Generate Test Plan Fixture",'<div class="card"><div class="card-body"><div class="small-muted">No Test Plans are available.</div><div class="action-row" style="justify-content:flex-end;margin-top:10px"><button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');return;}
      var options=plans.map(function(p){return '<option value="'+esc(p._subject_id||p.subject_id||"")+'">'+esc((p.plan_id||"")+" — "+(p.title||"Untitled"))+'</option>';}).join("");
      modal("Generate Test Plan Fixture",'<div class="card"><div class="card-body"><div class="field"><label>Hub</label><input value="'+esc((model.byId[w.levelId]||{}).label||w.levelId)+'" readonly></div><div class="field"><label>Test Plan</label><select id="fixture-test-plan">'+options+'</select></div><div class="field"><label>Existing-fixture action</label><select id="fixture-mode"><option value="reconcile">Reconcile fixture</option><option value="reuse">Reuse existing fixture</option><option value="new">Create new fixture batch</option><option value="replace">Replace existing fixture</option></select></div><div id="fixture-existing-preview" class="small-muted">Select a plan to inspect existing fixture records.</div><div class="field" style="margin-top:8px"><label><span class="field-label-help"><span>Automation Evidence Grade</span><button type="button" class="help-dot" title="Explain the E1–E5 Evidence Grade scale" onclick="event.preventDefault();event.stopPropagation();openAutomationEvidenceHelp(&quot;scale&quot;)">?</button></span></label><input id="fixture-evidence-standard" type="range" min="1" max="5" step="1" value="3" aria-describedby="fixture-evidence-standard-label fixture-evidence-scale"><div id="fixture-evidence-scale" style="display:grid;grid-template-columns:repeat(5,1fr);gap:4px;margin-top:3px;text-align:center;font-size:11px"><span title="Repeatable UI observation">E1<br>Exploratory</span><span title="Deterministic UI or API observation">E2<br>Practical</span><span title="Fixture-bound authoritative comparison">E3<br>Acceptance</span><span title="Request/response, identity, or CU evidence">E4<br>Evidentiary</span><span title="Provenance, principal, policy, and evidence trace">E5<br>Governed</span></div><div id="fixture-evidence-standard-label" class="small-muted" style="margin-top:6px"><b>E3 — Acceptance</b> — Fixture-bound authoritative comparison with retained evidence.</div></div><div id="fixture-analysis-preview" class="small-muted" style="margin-top:8px">Analyze and accept an automation definition before generation. Accepted badges persist with the Test Plan. <button type="button" class="help-dot" title="Explain AUTO, CANDIDATE, and MANUAL" onclick="event.preventDefault();event.stopPropagation();openAutomationEvidenceHelp(&quot;classification&quot;)">?</button></div><div id="fixture-broad-review" style="display:none;max-height:260px;overflow:auto;margin-top:8px;border:1px solid var(--border);padding:8px"></div><div class="small-muted" style="margin-top:8px"><b>Reconcile</b> reuses unchanged step records, creates missing or changed records, and supersedes changed rows. <b>Replace</b> soft-deletes the active fixture before creating a clean batch.</div><div class="action-row" style="justify-content:flex-end;margin-top:10px"><button class="btn" onclick="closeEditModal()">Cancel</button><button class="btn" id="fixture-test-plan-chain">Chain</button><button class="btn" id="analyze-test-plan-fixture">Analyze Automation</button><button class="btn" id="review-broad-criteria" disabled>Review Broad Criteria</button><button class="btn" id="accept-test-plan-automation" disabled>Accept Automation Analysis</button><button class="btn primary" id="confirm-create-fixture">Continue</button></div></div></div>');
      async function inspectExisting(){
        var sid=document.getElementById("fixture-test-plan").value,summary=fixtureExistingSummary(activeFixtureRecordsForPlan(w,sid)),preview=document.getElementById("fixture-existing-preview");
        var batches=Object.keys(summary.batches).map(function(k){return k+" ("+summary.batches[k]+")";}).join(", ");
        preview.innerHTML=summary.count?("<b>"+summary.count+" active fixture records</b> · batches: "+esc(batches)):"No active fixture records exist for this Test Plan and Hub.";
        document.getElementById("fixture-mode").value=summary.count?"reconcile":"new";
      }
      var fixtureAnalysisDraft=null,fixtureAnalysisLatest=null,fixtureAnalysisPlan=null,fixtureAnalysisParsed=null,fixtureAnalysisRows=[],fixtureAnalysisMeta=null;
      function updateEvidenceStandardLabel(){var input=document.getElementById("fixture-evidence-standard"),level=Math.max(1,Math.min(5,Number(input&&input.value)||3)),std=tpAutomationStandard(level),label=document.getElementById("fixture-evidence-standard-label");if(label)label.innerHTML="<b>E"+level+" — "+esc(std.label)+"</b> — "+esc(std.description);}
      var evidenceInput=document.getElementById("fixture-evidence-standard");if(evidenceInput){evidenceInput.oninput=updateEvidenceStandardLabel;updateEvidenceStandardLabel();}
      document.getElementById("review-broad-criteria").onclick=function(){
        var host=document.getElementById("fixture-broad-review"),button=document.getElementById("review-broad-criteria");
        if(!host)return;
        if(host.style.display!=="none"){host.style.display="none";button.textContent="Review Broad Criteria";return;}
        var broad=(fixtureAnalysisRows||[]).filter(function(r){return r.automation&&r.automation.broad_criterion;});
        host.innerHTML=(broad.length?broad.map(function(r){return '<div class="card" style="margin-bottom:8px"><div class="card-body"><b>'+esc(r.criterion_id+' — '+r.text)+'</b><div class="small-muted" style="margin-top:6px">Draft atomic assertions:</div><ol>'+(r.automation.atomic_split_suggestions||[]).map(function(x){return '<li>'+esc(x)+'</li>';}).join('')+'</ol></div></div>';}).join(''):'<div class="small-muted">No broad criteria were detected.</div>')+'<div class="small-muted">Proposals are CU-persisted analysis evidence only. Applying them requires an explicit Markdown revision because criterion identities change.</div>';
        host.style.display="block";button.textContent="Hide Broad Criteria";
      };
      document.getElementById("fixture-test-plan-chain").onclick=function(){
        var select=document.getElementById("fixture-test-plan"),sid=select&&select.value;if(!sid)return;
        var label=select.options[select.selectedIndex]?select.options[select.selectedIndex].text:"Test Plan";
        openTestPlanChain("",sid,label);
      };
      document.getElementById("fixture-test-plan").onchange=async function(){
        fixtureAnalysisDraft=null;fixtureAnalysisLatest=null;fixtureAnalysisPlan=null;fixtureAnalysisParsed=null;fixtureAnalysisRows=[];fixtureAnalysisMeta=null;
        var accept=document.getElementById("accept-test-plan-automation");if(accept)accept.disabled=true;
        document.getElementById("fixture-analysis-preview").textContent="Analyze the Test Plan to create a draft automation definition.";var broadHost=document.getElementById("fixture-broad-review");if(broadHost){broadHost.style.display="none";broadHost.innerHTML="";}var reviewButton=document.getElementById("review-broad-criteria");if(reviewButton){reviewButton.disabled=true;reviewButton.textContent="Review Broad Criteria";}
        await inspectExisting();
      };
      await inspectExisting();
      document.getElementById("analyze-test-plan-fixture").onclick=async function(){
        var sid=document.getElementById("fixture-test-plan").value,preview=document.getElementById("fixture-analysis-preview");preview.textContent="Analyzing…";
        try{
          var latest=await getJson(testPlansApiBase()+"/latest?subject_id="+encodeURIComponent(sid)),plan=tpArtifact(latest.plan||latest);if(!plan||!Object.keys(plan).length)plan=latest.plan||latest;
          var parsed=tpParseTestPlanMarkdownV1(plan.steps_markdown||"");if(!parsed.ok)throw new Error(((parsed.errors[0]||{}).message||"Invalid plan"));
          var standardLevel=Number((document.getElementById("fixture-evidence-standard")||{}).value)||3,standard=tpAutomationStandard(standardLevel);
          var rows=fixtureCriterionRows(parsed,standardLevel),summary=fixtureAutomationSummary(rows),automationMap=fixtureCriterionAutomationMap(rows);
          CEE_TEST_AUTOMATION_ANALYSES[sid]=automationMap;
          fixtureAnalysisDraft=automationMap;fixtureAnalysisLatest=latest;fixtureAnalysisPlan=plan;fixtureAnalysisParsed=parsed;fixtureAnalysisRows=rows;fixtureAnalysisMeta={evidence_standard:{level:standardLevel,id:standard.id,label:standard.label},summary:summary,broad_criteria:rows.filter(function(r){return r.automation&&r.automation.broad_criterion;}).map(function(r){return {criterion_id:r.criterion_id,text:r.text,atomic_split_suggestions:r.automation.atomic_split_suggestions||[]};})};
          var accept=document.getElementById("accept-test-plan-automation");if(accept)accept.disabled=false;var review=document.getElementById("review-broad-criteria");if(review)review.disabled=!summary.broad_criteria;
          console.log("[CEE Test Automation] criterion analysis",{subject_id:sid,summary:summary,rows:rows,automation_map:automationMap});
          var fixtureModeEl=document.getElementById("fixture-mode"),fixtureModeLabel=fixtureModeEl&&fixtureModeEl.options[fixtureModeEl.selectedIndex]?fixtureModeEl.options[fixtureModeEl.selectedIndex].text:"Reconcile fixture";
          preview.innerHTML='<div><b>Selected minimum: '+esc(standard.label)+'</b> · '+summary.total+' criteria</div><div class="small-muted" style="margin-top:2px"><b>Fixture action:</b> '+esc(fixtureModeLabel)+' — controls fixture-record lifecycle only; it does not change Evidence Grade.</div><div style="margin-top:6px"><b>Intrinsic:</b> Machine-verifiable '+summary.machine_verifiable+' · Manual '+summary.manual+'</div><div><b>Executor readiness:</b> Fixture-bound '+(summary.executor_states["fixture-bound"]||0)+' · Available '+(summary.executor_states.available||0)+' · Planned '+(summary.executor_states.planned||0)+' · None '+(summary.executor_states.none||0)+'</div><div><b>Available Evidence Grade:</b> E1 '+(summary.evidence_levels[1]||0)+' · E2 '+(summary.evidence_levels[2]||0)+' · E3 '+(summary.evidence_levels[3]||0)+' · E4 '+(summary.evidence_levels[4]||0)+' · E5 '+(summary.evidence_levels[5]||0)+'</div><div><b>Against selected '+esc(standard.id.toUpperCase())+' minimum:</b> Meets '+summary.meets_selected_standard+' · Below '+summary.below_selected_standard+' · Broad '+summary.broad_criteria+'</div><div style="margin-top:6px"><b>Automation outcome:</b> AUTO '+summary.automatable+' · CANDIDATE '+summary.candidate+' · MANUAL '+(summary.review_required+summary.human_required)+'</div><div><b>Candidate gaps:</b> Executor only '+summary.candidate_gaps.executor_only+' · Evidence only '+summary.candidate_gaps.evidence_only+' · Both '+summary.candidate_gaps.executor_and_evidence+' · Other '+summary.candidate_gaps.other+'</div><div><b>Candidate qualifiers:</b> Fixture binding '+summary.candidate_gaps.fixture_binding+' · Broad '+summary.candidate_gaps.broad+'</div><div class="small-muted" style="margin-top:6px">Evidence above the selected minimum still counts as meeting it. '+(summary.broad_criteria?'Review the atomic split proposals before acceptance. ':'')+'Click <b>Accept Automation Analysis</b> to CU-append the selected minimum, capability model, gap reasons, and contracts.</div>';
        }catch(e){preview.textContent="Analysis failed: "+errorText(e);}
      };
      document.getElementById("accept-test-plan-automation").onclick=async function(){
        var sid=document.getElementById("fixture-test-plan").value,button=document.getElementById("accept-test-plan-automation"),preview=document.getElementById("fixture-analysis-preview");
        if(!fixtureAnalysisDraft||!fixtureAnalysisLatest||!fixtureAnalysisPlan||!fixtureAnalysisParsed){
          toast("Run Analyze Automation first.","err");return;
        }
        button.disabled=true;button.textContent="Accepting…";
        try{
          var persisted=await persistTestPlanAutomationAnalysis(sid,fixtureAnalysisLatest,fixtureAnalysisPlan,fixtureAnalysisParsed,fixtureAnalysisDraft,fixtureAnalysisMeta);
          fixtureAnalysisPlan.steps_json=persisted.body.steps_json;
          fixtureAnalysisLatest.tail_cu_id=String(persisted.saved.canonical_cu_id||persisted.saved.routed_cu_id||persisted.saved.full_cu_id||persisted.saved.cu_id||persisted.saved.tail_hash||"");
          preview.innerHTML='<b>Automation definition accepted and CU-appended.</b> AUTO/CANDIDATE/MANUAL badges are now durable and will appear whenever this Test Plan is opened.';
          button.textContent="Automation Analysis Accepted";
          toast("Test Plan automation definition saved.","ok");
        }catch(e){
          button.disabled=false;button.textContent="Accept Automation Analysis";
          preview.textContent="Could not save automation definition: "+errorText(e);
          toast("Automation definition save failed: "+errorText(e),"err");
        }
      };
      document.getElementById("confirm-create-fixture").onclick=async function(){
        var sid=document.getElementById("fixture-test-plan").value,mode=document.getElementById("fixture-mode").value,button=document.getElementById("confirm-create-fixture");if(!sid)return;
        if(button){button.disabled=true;button.textContent=(mode==="reuse"?"Reusing…":"Working…");}
        try{
          await createTestPlanFixture(browseId,sid,mode);
        }catch(e){
          console.error("[CEE Test Fixture] Continue failed",{browse_id:browseId,subject_id:sid,mode:mode,error:errorText(e)});
          toast("Fixture "+mode+" failed: "+errorText(e),"err");
          if(button&&document.body.contains(button)){button.disabled=false;button.textContent="Continue";}
        }
      };
    }catch(e){modal("Generate Test Plan Fixture",'<div class="card"><div class="card-body"><div style="color:var(--red)">'+esc(errorText(e))+'</div><div class="action-row" style="justify-content:flex-end;margin-top:10px"><button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');}
  }
  async function createTestRecords(browseId,count){
    var w=model.browses[browseId],lv=w&&model.byId[w.levelId];if(!w||!lv||!w.formDesign)return;
    var batch={mode:'random',batchId:'RANDOM-'+Date.now().toString(36).toUpperCase(),requested:count,created:0,failed:0,results:[]};
    var base=levelBase(lv),hubId=hubIdForLevel(lv),button=document.getElementById(browseId)&&document.getElementById(browseId).querySelector('.browse-test-btn');if(button){button.disabled=true;button.textContent='Creating…';}
    for(var i=1;i<=count;i++){
      var values=generatedRecordValues(w.formDesign,i),payload={hub_id:hubId,parent_subject_id:w.parentId||null,level_number:lv.level_number,target_level_number:lv.level_number,name:generatedRecordTitle(values,w.formDesign,i),values:values,operator:operator(),test_record:true,test_batch_id:batch.batchId,test_sequence:i,test_generation_mode:'random'};
      try{var result=await postJson(base+'/api/enterprise/records/create',payload);batch.created++;batch.results.push({sequence:i,ok:true,stage:'cu-append',subject_id:String((result&&(result.subject_id||result.id))||''),message:'Record created and CU appended.'});}
      catch(e){batch.failed++;batch.results.push({sequence:i,ok:false,stage:'record-create',message:errorText(e)});}
    }
    if(button){button.disabled=false;button.textContent='Create Test Records ▾';}
    await refreshBusinessBrowse(browseId);renderGenerationResults(batch);toast(batch.created+' test records created'+(batch.failed?' · '+batch.failed+' failed':''),batch.failed?'err':'ok');
  }
  function tpVaPlanUsesFixtureRunner(steps){
    return (steps||[]).some(function(step){
      var a=step&&step.automation||{};
      return String(a.executor||a.resolved_executor||"")==="cee-validation-autoentry-fixture-runner";
    });
  }
  function tpVaSchemaFieldKey(f){return String((f&&(f.field_key||f.indexed_name||f.name||f.field_name))||"").toLowerCase();}
  function tpVaSchemaAutoType(f){
    var raw=f&&(f.auto_entry_type||f.auto_type||(typeof f.auto_entry==="string"?f.auto_entry:"")||(f.auto_entry&&f.auto_entry.type)||"");
    var normalized=String(raw||"").toLowerCase().replace(/[ _]+/g,"-");
    var key=tpVaSchemaFieldKey(f),label=String((f&&(f.label||f.display_label))||"").toLowerCase();
    /* Infer creation-timestamp only for the stable ISO identity, never for the
       legacy integer fixture-created-at label alone. */
    if(!normalized&&(key==="fixture-created-at-iso"||key.indexOf("fixture-created-at-iso")>=0||label==="fixture created at (iso)"||label.indexOf("fixture created at (iso)")>=0))normalized="creation-timestamp";
    return normalized;
  }
  function tpVaCreationTimestampCompatible(f){
    var key=tpVaSchemaFieldKey(f),label=String((f&&(f.label||f.display_label))||"").toLowerCase();
    /* The append-only ISO fixture field has a stable contract identity. Some
       persisted Form Definition envelopes flatten or alias its type, so its
       explicit ISO key/label is authoritative for capability detection. */
    if(key==="fixture-created-at-iso"||key.indexOf("fixture-created-at-iso")>=0||label==="fixture created at (iso)")return true;
    var t=String((f&&(f.type||f.field_type||f.data_type||f.control_type))||"").toLowerCase().replace(/[ _]+/g,"-");
    return t==="datetime"||t==="date-time"||t==="datetime-local"||t==="timestamp"||t==="iso-8601"||t==="string"||t==="text";
  }
  async function tpVaEnsureFixtureSchema(w,lv){
    var form=JSON.parse(JSON.stringify(w.formDesign||{})),fields=Array.isArray(form.fields)?form.fields:(form.fields=[]),added=[];
    function hasKey(key){return fields.some(function(f){return !f.retired&&tpVaSchemaFieldKey(f)===key;});}
    function hasAuto(kind){return fields.some(function(f){if(f.retired||tpVaSchemaAutoType(f)!==kind)return false;return kind!=="creation-timestamp"||tpVaCreationTimestampCompatible(f);});}
    function canonicalizeField(def,index){
      var label=String(def.label||def.display_label||def.name||def.field_key||def.indexed_name||("Fixture Field "+(index+1))).trim();
      var key=String(def.field_key||def.indexed_name||def.name||def.field_name||"").trim();
      if(!key)key=deriveIndexedName(label);
      if(!key)key="fixture-field-"+String(index+1);
      def.label=label;
      def.name=key;
      def.field_key=key;
      def.indexed_name=key;
      return def;
    }
    /* Existing published fields are immutable schema history. Reconcile must
       not synthesize aliases, normalize keys, or otherwise rewrite them merely
       because the browse snapshot uses a legacy shape. Preserve every existing
       field byte-for-byte and canonicalize only newly appended fixture fields. */
    function add(def){canonicalizeField(def,fields.length);def.field_id=def.field_id||"";def.required=def.required===true;def.indexed=def.indexed===true;def.sort=def.sort||"asc";def.show_in_browse=def.show_in_browse===true;def.browse_order=Number(def.browse_order||((fields.length+1)*10));def.browse_width=Number(def.browse_width||180);fields.push(def);added.push(def.name);}
    if(!hasKey("uppercase-code"))add({name:"uppercase-code",field_key:"uppercase-code",indexed_name:"uppercase-code",label:"Uppercase Code",type:"text",text_case:"upper",required:false,indexed:false,show_in_browse:false});
    if(!hasAuto("literal"))add({name:"fixture-literal-status",field_key:"fixture-literal-status",indexed_name:"fixture-literal-status",label:"Fixture Literal Status",type:"text",auto_entry_type:"literal",default_value:"Draft",required:false,indexed:false,show_in_browse:false});
    if(!hasAuto("uuid"))add({name:"fixture-uuid",field_key:"fixture-uuid",indexed_name:"fixture-uuid",label:"Fixture UUID",type:"text",auto_entry_type:"uuid",required:false,indexed:false,show_in_browse:false});
    /* Stable ISO identity is required for VA-010 even when a legacy integer
       fixture-created-at creation-timestamp field already exists. hasAuto alone
       was insufficient when capability detection treated the legacy field as
       satisfying the creation-timestamp requirement. */
    if(!hasKey("fixture-created-at-iso"))add({name:"fixture-created-at-iso",field_key:"fixture-created-at-iso",indexed_name:"fixture-created-at-iso",label:"Fixture Created At (ISO)",type:"datetime",auto_entry_type:"creation-timestamp",required:false,indexed:false,show_in_browse:false});
    if(!hasAuto("creating-principal"))add({name:"fixture-created-by",field_key:"fixture-created-by",indexed_name:"fixture-created-by",label:"Fixture Created By",type:"text",auto_entry_type:"creating-principal",required:false,indexed:false,show_in_browse:false});
    if(!hasAuto("sequence"))add({name:"fixture-sequence",field_key:"fixture-sequence",indexed_name:"fixture-sequence",label:"Fixture Sequence",type:"integer",auto_entry_type:"sequence",required:false,indexed:true,index_kind:"single",index_purpose:"validation-autoentry-fixture",show_in_browse:false});
    if(!added.length)return {changed:false,added:[],form:form};
    form.hub_id=form.hub_id||hubIdForLevel(lv);form.name=form.name||"Business Record Form";
    await assignAuthoritativeSchemaIds(w,form);
    var base=levelBase(lv),hubId=hubIdForLevel(lv),latest=await getJson(base+"/api/enterprise/hub/form-design/latest?hub_id="+encodeURIComponent(hubId)),tail=String((latest&&(latest.tail_hash||latest.cu_id))||"");
    var saved=await postJson(base+"/api/enterprise/hub/form-design/append-fields",{hub_id:hubId,fields_json:JSON.stringify(form),loaded_tail_hash:tail,operator:operator()});
    if(!saved||saved.ok===false)throw new Error((saved&&(saved.error||saved.message))||"Validation/auto-entry fixture Form Definition could not be published.");
    w.formDesign=form;
    return {changed:true,added:added,form:form,tail:String(saved.tail_hash||saved.cu_id||"")};
  }

  async function createTestPlanFixture(browseId,subjectId,mode){
    mode=mode||"reconcile";
    var w=model.browses[browseId],lv=w&&model.byId[w.levelId];if(!w||!lv||!w.formDesign)return;
    var latest=await getJson(testPlansApiBase()+"/latest?subject_id="+encodeURIComponent(subjectId)),plan=tpArtifact(latest.plan||latest);if(!plan||!Object.keys(plan).length)plan=latest.plan||latest;
    plan.subject_id=subjectId;plan._subject_id=subjectId;
    /* Fixture generation must use the accepted automation definition, not just
       whichever result snapshot happens to be latest. */
    var restoredFixturePlan=await tpLoadLatestSavedResults(subjectId,latest,plan);
    if(restoredFixturePlan&&restoredFixturePlan.steps&&restoredFixturePlan.steps.length)plan.steps_json=JSON.stringify(restoredFixturePlan.steps);
    var parsed=tpParseTestPlanMarkdownV1(plan.steps_markdown||"");if(!parsed.ok){toast("Test Plan cannot generate a fixture: "+((parsed.errors[0]||{}).message||"invalid plan format"),"err");return;}
    plan.plan_id=plan.plan_id||parsed.plan_id;plan.title=plan.title||parsed.title;
    var rows=fixtureStepRows(parsed);if(!rows.length){toast("The selected Test Plan has no numbered steps.","err");return;}
    var persistedCriterionSteps=tpParseStepsJson(plan.steps_json||"[]");
    /* Reuse is attachment-only: it must not mutate or republish the Form
       Definition before it can attach an already-existing fixture batch. */
    if(mode!=="reuse"&&tpVaPlanUsesFixtureRunner(persistedCriterionSteps)){
      var schemaResult=await tpVaEnsureFixtureSchema(w,lv);
      if(schemaResult.changed)toast("Validation/auto-entry fixture schema published: "+schemaResult.added.join(", "),"ok");
    }
    var automationSummary=fixtureAutomationSummary(persistedCriterionSteps.map(function(s){
      var a=s.automation||{};
      return {automation:{
        eligibility:String(a.eligibility||a.status||"not-defined"),
        reason_code:String(a.reason_code||"not-defined")
      }};
    })),existing=fixtureExistingSummary(activeFixtureRecordsForPlan(w,subjectId)),base=levelBase(lv),hubId=hubIdForLevel(lv);
    if(mode==="reuse"){
      if(!existing.count){toast("No existing fixture is available to reuse.","err");return;}
      var reuseRuntimeMap=Object.assign({},buildFixtureAutomationMap(tpPlanCriteria(parsed),persistedCriterionSteps),CEE_TEST_AUTOMATION_ANALYSES[String(subjectId)]||{});
      var reuseBatch={mode:"fixture",batchId:"REUSE-"+Date.now().toString(36).toUpperCase(),planId:plan.plan_id,planTitle:plan.title,planSubjectId:subjectId,browseId:browseId,sourceDescriptor:tpFixtureSourceDescriptor(w,lv),requested:0,created:0,failed:0,reused:existing.count,results:existing.records.map(function(r,i){return {sequence:i+1,coverage:String(fixtureRecordValue(r,"_test_step_id")||""),eligibility:String(fixtureRecordValue(r,"_test_automation_eligibility")||""),reason_code:"reused-existing",ok:true,stage:"reuse",subject_id:recordId(r),message:"Existing fixture record reused."};}),automationSummary:automationSummary,automationMap:reuseRuntimeMap};
      CEE_TEST_FIXTURE_BATCHES[reuseBatch.batchId]=reuseBatch;
      tpAttachFixtureBatchToMatchingRun(reuseBatch.batchId);
      renderGenerationResults(reuseBatch);
      toast(existing.count+" existing fixture records reused and attached.","ok");
      return reuseBatch;
    }
    var toCreate=rows.slice(),toDelete=[],reused=0;
    if(mode==="reconcile"){
      toCreate=[];
      rows.forEach(function(row){
        var old=existing.steps[row.step_id],oldText=old&&String(fixtureRecordValue(old,"_test_step_text")||"");
        if(old&&oldText===row.step_text){reused++;return;}
        if(old)toDelete.push(old);
        toCreate.push(row);
      });
    }else if(mode==="replace")toDelete=existing.records.slice();
    var fixtureRuntimeMap=Object.assign({},buildFixtureAutomationMap(tpPlanCriteria(parsed),persistedCriterionSteps),CEE_TEST_AUTOMATION_ANALYSES[String(subjectId)]||{});
    var batch={mode:"fixture",fixtureMode:mode,batchId:"FIXTURE-"+Date.now().toString(36).toUpperCase(),planId:plan.plan_id,planTitle:plan.title,planSubjectId:subjectId,browseId:browseId,sourceDescriptor:tpFixtureSourceDescriptor(w,lv),requested:toCreate.length,created:0,failed:0,reused:reused,superseded:0,results:[],automationSummary:automationSummary,automationMap:fixtureRuntimeMap};
    CEE_TEST_FIXTURE_BATCHES[batch.batchId]=batch;openFixtureProgress(batch);
    for(var d=0;d<toDelete.length;d++){
      try{await softDeleteFixtureRecord(base,toDelete[d]);batch.superseded++;}
      catch(e){batch.failed++;batch.results.push({sequence:0,coverage:String(fixtureRecordValue(toDelete[d],"_test_step_id")||""),ok:false,stage:"fixture-retire",message:errorText(e)});}
    }
    for(var x=0;x<toCreate.length;x++){
      var row=toCreate[x];updateFixtureProgress(batch,row);
      var values=fixtureRecordValues(w.formDesign,row,plan,batch.batchId),payload={hub_id:hubId,parent_subject_id:w.parentId||null,level_number:lv.level_number,target_level_number:lv.level_number,name:fixtureRecordTitle(plan,row),values:values,operator:operator(),test_record:true,test_fixture:true,test_generation_mode:"test-plan-fixture",test_batch_id:batch.batchId,test_sequence:row.sequence,test_plan_id:plan.plan_id,test_plan_subject_id:subjectId,test_id:row.test_id,test_step_id:row.step_id,test_step_number:row.step_number,test_fixture_coverage:row.coverage,test_automation_eligibility:row.automation.eligibility,test_automation_reason_code:row.automation.reason_code,test_automation_confidence:row.automation.confidence,test_automation_classifier:String((row.automation||{}).classifier||"cee-automation-analysis-v3"),test_automation_standard:String((row.automation||{}).standard_id||"acceptance"),test_automation_scorecard:Object.assign({},(row.automation||{}).dimensions||{})};
      try{var result=await postJson(base+"/api/enterprise/records/create",payload);batch.created++;batch.results.push({sequence:row.sequence,coverage:row.step_id,eligibility:row.automation.eligibility,reason_code:row.automation.reason_code,ok:true,stage:"cu-append",subject_id:String((result&&(result.subject_id||result.id))||""),message:"Fixture record created for "+row.step_id+"."});}
      catch(e){batch.failed++;batch.results.push({sequence:row.sequence,coverage:row.step_id,eligibility:row.automation.eligibility,reason_code:row.automation.reason_code,ok:false,stage:"record-create",message:errorText(e)});}
    }
    updateFixtureProgress(batch,null);await refreshBusinessBrowse(browseId);tpAttachFixtureBatchToMatchingRun(batch.batchId);renderGenerationResults(batch);
    toast((batch.created+" created · "+batch.reused+" reused · "+batch.superseded+" superseded")+(batch.failed?" · "+batch.failed+" failed":""),batch.failed?"err":"ok");
  }
  window.openRandomTestRecordsDialog=openRandomTestRecordsDialog;
  window.openTestPlanFixtureDialog=openTestPlanFixtureDialog;


  function initBrowseContentSplitter(el,w){
    var split=el.querySelector(".browse-content-split"),bar=el.querySelector(".browse-related-splitter");
    if(!split||!bar)return;
    function bounds(){var total=split.clientWidth||el.clientWidth||560;return {min:240,max:Math.max(240,Math.min(520,total-260))};}
    function apply(width){var b=bounds();width=Math.max(b.min,Math.min(b.max,Number(width)||280));w.relatedPaneWidth=width;split.style.gridTemplateColumns=Math.round(width)+"px 6px minmax(0,1fr)";}
    apply(w.relatedPaneWidth||280);
    bar.addEventListener("pointerdown",function(e){
      e.preventDefault();e.stopPropagation();bar.setPointerCapture(e.pointerId);bar.classList.add("dragging");
      var startX=e.clientX,startWidth=w.relatedPaneWidth||280;
      function move(ev){apply(startWidth+(ev.clientX-startX));}
      function done(ev){bar.classList.remove("dragging");try{bar.releasePointerCapture(ev.pointerId);}catch(_e){}bar.removeEventListener("pointermove",move);bar.removeEventListener("pointerup",done);bar.removeEventListener("pointercancel",done);}
      bar.addEventListener("pointermove",move);bar.addEventListener("pointerup",done);bar.addEventListener("pointercancel",done);
    });
    bar.addEventListener("dblclick",function(e){e.preventDefault();e.stopPropagation();apply(280);});
    if(typeof ResizeObserver!=="undefined"){var ro=new ResizeObserver(function(){apply(w.relatedPaneWidth||280);});ro.observe(split);w._contentSplitObserver=ro;}
  }

  function ieJobId(){var a=new Uint8Array(16);crypto.getRandomValues(a);return Array.from(a).map(function(x){return x.toString(16).padStart(2,"0");}).join("");}
  async function ieSha256(text){var b=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(text));return Array.from(new Uint8Array(b)).map(function(x){return x.toString(16).padStart(2,"0");}).join("");}
  function ieCsvCell(v){if(v===null||v===undefined)v="";if(Array.isArray(v))v=v.join("; ");else if(typeof v==="object")v=JSON.stringify(v);v=String(v);return /[",\r\n]/.test(v)?'"'+v.replace(/"/g,'""')+'"':v;}
  /* v31c319 (claude): on-screen only -- a raw rejected value can be a
     64-char hex option id with no internal spaces, which forces overflow
     even in a wrapping cell (nothing to break a line on). Truncated the
     same way option-id chips already are elsewhere in this file. The
     downloadable "Export Rejected Rows" CSV still uses the untouched
     e.value, so nothing here loses data -- it's purely a preview-legibility
     fix. */
  function ieDisplayTruncate(v){var s=String(v==null?"":v);return s.length>40?(s.slice(0,20)+"\u2026"+s.slice(-14)):s;}
  function ieDownload(name,text,type){var blob=new Blob([text],{type:type||"text/csv;charset=utf-8"}),u=URL.createObjectURL(blob),a=document.createElement("a");a.href=u;a.download=name;document.body.appendChild(a);a.click();a.remove();setTimeout(function(){URL.revokeObjectURL(u);},1000);}
  function ieDownloadBlob(name,blob){var u=URL.createObjectURL(blob),a=document.createElement("a");a.href=u;a.download=name;document.body.appendChild(a);a.click();a.remove();setTimeout(function(){URL.revokeObjectURL(u);},1500);}
  async function ieSha256Bytes(buf){var b=await crypto.subtle.digest("SHA-256",buf);return Array.from(new Uint8Array(b)).map(function(x){return x.toString(16).padStart(2,"0");}).join("");}
  var _ceePdfLibsPromise=null;
  function ieLoadPdfLibs(){
    if(window.jspdf&&window.jspdf.jsPDF&&typeof window.jspdf.jsPDF==="function"){
      return Promise.resolve({jsPDF:window.jspdf.jsPDF});
    }
    if(_ceePdfLibsPromise)return _ceePdfLibsPromise;
    _ceePdfLibsPromise=new Promise(function(resolve,reject){
      function loadScript(src){
        return new Promise(function(res,rej){
          var s=document.createElement("script");
          s.src=src;s.async=true;
          s.onload=function(){res();};
          s.onerror=function(){rej(new Error("Failed to load "+src));};
          document.head.appendChild(s);
        });
      }
      loadScript("https://cdnjs.cloudflare.com/ajax/libs/jspdf/2.5.1/jspdf.umd.min.js")
        .then(function(){return loadScript("https://cdnjs.cloudflare.com/ajax/libs/jspdf-autotable/3.8.2/jspdf.plugin.autotable.min.js");})
        .then(function(){
          if(!(window.jspdf&&window.jspdf.jsPDF))throw new Error("jsPDF failed to initialize after CDN load");
          resolve({jsPDF:window.jspdf.jsPDF});
        })
        .catch(function(e){_ceePdfLibsPromise=null;reject(e);});
    });
    return _ceePdfLibsPromise;
  }
  function ieTruncateHeader(label,maxLen){
    var s=String(label||"");
    if(s.length<=maxLen)return s;
    return s.slice(0,Math.max(4,maxLen-1))+"\u2026";
  }
  /* Tabular multi-record list report */
  async function ieBuildPdfReport(opts){
    var libs=await ieLoadPdfLibs();
    var jsPDF=libs.jsPDF;
    var colCount=(opts.headers||[]).length;
    var landscape=!!opts.landscape || colCount>=5;
    var fontSize=colCount>=12?6.5:(colCount>=8?7:8);
    var headFont=colCount>=12?6.5:(colCount>=8?7:8);
    var headerMax=colCount>=18?18:(colCount>=12?22:(colCount>=8?28:40));
    var doc=new jsPDF({orientation:landscape?"landscape":"portrait",unit:"pt",format:"letter"});
    var pageW=doc.internal.pageSize.getWidth();
    var pageH=doc.internal.pageSize.getHeight();
    var margin=28;
    var title=String(opts.title||"Record Report");
    var subtitle=String(opts.subtitle||"");
    var meta=String(opts.meta||"");
    var headers=(opts.headers||[]).map(function(h){return ieTruncateHeader(h,headerMax);});
    var body=opts.body||[];
    doc.setFont("helvetica","bold");
    doc.setFontSize(12);
    doc.setTextColor(30,40,55);
    doc.text(title,margin,margin+6);
    doc.setFont("helvetica","normal");
    doc.setFontSize(8);
    doc.setTextColor(80,90,105);
    if(subtitle)doc.text(subtitle,margin,margin+18);
    if(meta)doc.text(meta,margin,margin+28);
    doc.setDrawColor(180,190,200);
    doc.setLineWidth(0.5);
    doc.line(margin,margin+34,pageW-margin,margin+34);
    var startY=margin+42;
    var usable=pageW-margin*2;
    var minCol=Math.max(32, Math.min(80, Math.floor(usable/Math.max(colCount,1))));
    var colStyles={};
    for(var ci=0;ci<colCount;ci++){
      colStyles[ci]={cellWidth:"auto",minCellWidth:minCol,overflow:"ellipsize"};
    }
    doc.autoTable({
      head:[headers],
      body:body,
      startY:startY,
      margin:{left:margin,right:margin,bottom:44},
      tableWidth:"auto",
      styles:{font:"helvetica",fontSize:fontSize,cellPadding:2,overflow:"ellipsize",valign:"top",halign:"left",lineColor:[200,205,210],lineWidth:0.3},
      headStyles:{fillColor:[45,55,72],textColor:255,fontStyle:"bold",fontSize:headFont,cellPadding:2.5,overflow:"ellipsize",valign:"middle",halign:"left"},
      alternateRowStyles:{fillColor:[245,247,250]},
      columnStyles:colStyles,
      didDrawPage:function(data){
        var page=doc.internal.getNumberOfPages();
        doc.setFont("helvetica","normal");
        doc.setFontSize(7.5);
        doc.setTextColor(120,130,140);
        doc.text(String(opts.footerLeft||""),margin,pageH-18);
        doc.text("Page "+page,pageW-margin,pageH-18,{align:"right"});
      }
    });
    return doc;
  }
  /* Detail report: one record per page, form-style label | value rows */
  async function ieBuildPdfDetailReport(opts){
    var libs=await ieLoadPdfLibs();
    var jsPDF=libs.jsPDF;
    var doc=new jsPDF({orientation:"portrait",unit:"pt",format:"letter"});
    var pageW=doc.internal.pageSize.getWidth();
    var pageH=doc.internal.pageSize.getHeight();
    var margin=40;
    var records=opts.records||[];
    var fields=opts.fields||[]; /* [{label,valueFn}] */
    var reportTitle=String(opts.title||"Record Detail Report");
    var meta=String(opts.meta||"");
    var footerLeft=String(opts.footerLeft||"");

    function drawPageChrome(recIndex,recTitle){
      doc.setFont("helvetica","bold");
      doc.setFontSize(13);
      doc.setTextColor(30,40,55);
      doc.text(reportTitle,margin,margin+4);
      doc.setFont("helvetica","normal");
      doc.setFontSize(9);
      doc.setTextColor(80,90,105);
      if(meta)doc.text(meta,margin,margin+18);
      var recLine="Record "+(recIndex+1)+" of "+records.length+(recTitle?"  ·  "+recTitle:"");
      doc.setFont("helvetica","bold");
      doc.setFontSize(10);
      doc.setTextColor(45,55,72);
      doc.text(recLine,margin,margin+34);
      doc.setDrawColor(180,190,200);
      doc.setLineWidth(0.6);
      doc.line(margin,margin+42,pageW-margin,margin+42);
    }
    function drawFooter(){
      var page=doc.internal.getNumberOfPages();
      doc.setFont("helvetica","normal");
      doc.setFontSize(7.5);
      doc.setTextColor(120,130,140);
      doc.text(footerLeft,margin,pageH-20);
      doc.text("Page "+page,pageW-margin,pageH-20,{align:"right"});
    }

    if(!records.length){
      drawPageChrome(0,"");
      doc.setFont("helvetica","normal");
      doc.setFontSize(10);
      doc.setTextColor(100,100,100);
      doc.text("No records in scope.",margin,margin+70);
      drawFooter();
      return doc;
    }

    records.forEach(function(rec,ri){
      if(ri>0)doc.addPage();
      var recTitle=String(opts.recordTitleFn?opts.recordTitleFn(rec):"");
      drawPageChrome(ri,recTitle);
      var rows=fields.map(function(f){
        var val="";
        try{val=String(f.valueFn(rec)||"");}catch(_e){val="";}
        if(val.length>800)val=val.slice(0,797)+"\u2026";
        return [String(f.label||""),val];
      });
      doc.autoTable({
        body:rows,
        startY:margin+52,
        margin:{left:margin,right:margin,bottom:44},
        tableWidth:"auto",
        theme:"plain",
        styles:{font:"helvetica",fontSize:9,cellPadding:4,overflow:"linebreak",valign:"top",halign:"left",lineColor:[220,224,228],lineWidth:0.3},
        columnStyles:{
          0:{cellWidth:150,fontStyle:"bold",textColor:[60,70,85],fillColor:[245,247,250]},
          1:{cellWidth:"auto",textColor:[30,40,55]}
        },
        didDrawPage:function(){drawFooter();}
      });
    });
    return doc;
  }
  function ieFieldKey(f){return String(f&&((f.field_key||f.indexed_name||f.name||f.field_name||f.field_id||f.id))||"");}
  function ieFieldLabel(f){return String(f&&(f.label||f.name||f.field_name||f.indexed_name)||ieFieldKey(f));}
  function ieExportValue(r,f){var v=browseRecordValue(r,f),t=findFieldType(f);if(v===null||v===undefined||v===""||(Array.isArray(v)&&!v.length))return "";return (t==="select"||t==="dropdown"||t==="multi_select"||t==="multiselect")?browseFieldValueText(f,v):browseValueText(v);}
  async function ieAttest(base,body){return postJson(base+"/api/enterprise/import-export/attest",body);}
  function ieReplayKey(hub,digest){return "cee-import-digest::"+hub+"::"+digest;}
  function ieParseCsv(text){var rows=[],row=[],cell="",q=false;for(var i=0;i<text.length;i++){var c=text[i];if(q){if(c==='"'&&text[i+1]==='"'){cell+='"';i++;}else if(c==='"')q=false;else cell+=c;}else if(c==='"')q=true;else if(c===','){row.push(cell);cell="";}else if(c==='\n'){row.push(cell);rows.push(row);row=[];cell="";}else if(c!=='\r')cell+=c;}if(cell.length||row.length){row.push(cell);rows.push(row);}return rows.filter(function(r){return r.some(function(x){return String(x).length;});});}
  function ieNormalizeImportValue(raw,f){var t=findFieldType(f),v=String(raw==null?"":raw),trimmed=v.trim();if(!trimmed||trimmed==="—"||trimmed==="–")return {ok:true,value:(t==="multi_select"||t==="multiselect")?[]:null};if(t==="integer"){var n=Number(v);return Number.isInteger(n)?{ok:true,value:n}:{ok:false,error:"Expected an integer"};}if(t==="number"){var n2=Number(v);return Number.isFinite(n2)?{ok:true,value:n2}:{ok:false,error:"Expected a number"};}if(t==="boolean"||t==="checkbox"){var x=v.trim().toLowerCase();if(["true","yes","1","on","enabled"].indexOf(x)>=0)return {ok:true,value:true};if(["false","no","0","off","disabled"].indexOf(x)>=0)return {ok:true,value:false};return {ok:false,error:"Expected a boolean"};}if(t==="date"){return /^\d{4}-\d{2}-\d{2}$/.test(v.trim())?{ok:true,value:v.trim()}:{ok:false,error:"Expected YYYY-MM-DD"};}
  /* v31c323 (claude): reverted the reject/clear policy toggle entirely, per
     James. The exported cell for an orphaned select is ALREADY the raw id
     -- browseSelectOptionLabel falls back to it when no current option
     matches (see v31c315/316) -- so on import, matching that text against
     current LABELS was never going to work; it isn't a label. There's
     nothing to validate here that the record form doesn't already handle:
     it resolves a label to its current id when one matches (this also
     transparently heals a renamed-but-still-present option), and when
     nothing matches, passes the text through unchanged, trusting it's
     already a real id from a prior export or another system. A stored
     value the current form design doesn't recognize is exactly what
     recordFieldHtml's "Unrecognized option" placeholder (v31c316) was
     built to display and preserve -- that's the validation surface,
     applied once, when someone actually opens the record, not duplicated
     and second-guessed here against a CSV of unknown age. */
  function ieResolveSelectPart(raw,f){
    var s=String(raw==null?"":raw).trim();
    if(!s)return null;
    var opts=Array.isArray(f.options)?f.options:[],hit=opts.find(function(o){return String(o&&typeof o==="object"?(o.label!=null?o.label:o.value):o).toLocaleLowerCase("en-US")===s.toLocaleLowerCase("en-US");});
    if(hit)return String(hit&&typeof hit==="object"?(hit.id!=null?hit.id:(hit.value!=null?hit.value:hit.label)):hit);
    return s;
  }
  if(t==="select"||t==="dropdown")return {ok:true,value:ieResolveSelectPart(v,f)};
  if(t==="multi_select"||t==="multiselect"){var parts=multiSelectValues(v).map(function(p){return ieResolveSelectPart(p,f);}).filter(function(x){return x!=null&&x!=="";});return {ok:true,value:parts};}
  return {ok:true,value:v};}
  function ieRequired(f){return !!(f&&(f.required===true||String(f.required).toLowerCase()==="true"));}
  function ieNameField(fields){return fields.find(function(f){var k=ieFieldKey(f).toLowerCase(),l=ieFieldLabel(f).toLowerCase();return k==="name"||l==="name";})||fields[0]||null;}
  async function openBusinessExport(id){
    var w=model.browses[id];if(!w)return;
    /* Defaults to browse grid columns. Other form fields unchecked.
       PDF layouts: tabular list | detail (one record per page). */
    var browseCols=browseFieldsForForm(w.formDesign)||[];
    var browseKeys={};
    browseCols.forEach(function(f){browseKeys[ieFieldKey(f)]=true;});
    var allFields=findFields(w);
    var otherFields=allFields.filter(function(f){return !browseKeys[ieFieldKey(f)];});
    var state=browseCols.map(function(f){return {f:f,on:true,browse:true};})
      .concat(otherFields.map(function(f){return {f:f,on:false,browse:false};}));
    if(!state.length){
      state=allFields.map(function(f){return {f:f,on:true,browse:false};});
    }
    var taggedIds=new Set(Array.from(ensureBrowseSelection(w)));
    var taggedRecords=(w.records||[]).filter(function(r){return taggedIds.has(recordId(r));});
    var currentRecord=(w.selected>=0&&w.records[w.selected])?w.records[w.selected]:null;
    var defaultScope=taggedRecords.length?"tagged":"found";
    modal("Export / Report",'<div id="ie-export-body"></div>');
    var host=document.getElementById("ie-export-body");
    function scopeRecords(scope){
      if(scope==="tagged")return taggedRecords.slice();
      if(scope==="current")return currentRecord?[currentRecord]:[];
      return (w.records||[]).slice();
    }
    function setAllFields(on){
      state.forEach(function(x){x.on=!!on;});
      draw();
    }
    function draw(){
      var fmtEl=document.getElementById('ie-export-format');
      var prevFmt=fmtEl?fmtEl.value:"csv";
      var layoutEl=document.getElementById('ie-export-layout');
      var prevLayout=layoutEl?layoutEl.value:"tabular";
      host.innerHTML='<div class="card"><div class="card-body">'+
        '<div class="field"><label>Format</label><select id="ie-export-format">'+
          '<option value="csv"'+(prevFmt==='csv'?' selected':'')+'>CSV (data interchange)</option>'+
          '<option value="pdf"'+(prevFmt==='pdf'?' selected':'')+'>PDF Report</option>'+
        '</select></div>'+
        '<div class="field" id="ie-export-layout-wrap" style="'+(prevFmt==='pdf'?'':'display:none')+'"><label>PDF layout</label><select id="ie-export-layout">'+
          '<option value="tabular"'+(prevLayout==='tabular'?' selected':'')+'>Tabular list (multi-record table)</option>'+
          '<option value="detail"'+(prevLayout==='detail'?' selected':'')+'>Detail (one record per page)</option>'+
        '</select></div>'+
        '<div class="field"><label>Export scope</label><select id="ie-export-scope">'+
          '<option value="found" '+(defaultScope==="found"?'selected':'')+'>Current found set ('+(w.records||[]).length+')</option>'+
          '<option value="tagged" '+(defaultScope==="tagged"?'selected':'')+' '+(taggedRecords.length?'':'disabled')+'>Tagged records ('+taggedRecords.length+')</option>'+
          '<option value="current" '+(defaultScope==="current"?'selected':'')+' '+(currentRecord?'':'disabled')+'>Current record'+(currentRecord?' (1)':'')+'</option>'+
        '</select></div>'+
        '<div class="small-muted" id="ie-export-summary"></div>'+
        '<label style="display:block;margin:10px 0"><input id="ie-export-id" type="checkbox"> Include canonical record ID</label>'+
        '<div class="action-row" style="justify-content:space-between;align-items:center;margin:8px 0 4px">'+
          '<div class="small-muted">Defaults to browse-grid columns.</div>'+
          '<div style="display:flex;gap:6px;flex-shrink:0">'+
            '<button type="button" class="btn" id="ie-export-all" title="Check every field">Select all</button>'+
            '<button type="button" class="btn" id="ie-export-none" title="Uncheck every field">None</button>'+
          '</div>'+
        '</div>'+
        '<div id="ie-export-fields">'+
          (function(){
            var html="",seenOther=false,seenBrowse=false;
            state.forEach(function(x,i){
              if(x.browse&&!seenBrowse){html+='<div class="small-muted" style="margin:4px 0 2px">Browse columns</div>';seenBrowse=true;}
              if(!x.browse&&!seenOther){html+='<div class="small-muted" style="margin:10px 0 4px;border-top:1px solid var(--border);padding-top:8px">Other form fields (not shown in browse)</div>';seenOther=true;}
              html+='<div class="action-row" style="justify-content:space-between"><label><input class="ie-export-check" data-i="'+i+'" type="checkbox" '+(x.on?'checked':'')+'> '+esc(ieFieldLabel(x.f))+'</label><span><button class="btn ie-up" data-i="'+i+'" title="Move up">↑</button><button class="btn ie-down" data-i="'+i+'" title="Move down">↓</button></span></div>';
            });
            return html;
          })()+
        '</div>'+
        '<div class="action-row" style="justify-content:flex-end"><button class="btn" id="ie-export-cancel">Cancel</button><button class="btn primary" id="ie-export-run">Export</button></div>'+
      '</div></div>';
      function refreshSummary(){
        var scope=document.getElementById('ie-export-scope').value;
        var fmt=document.getElementById('ie-export-format').value;
        var layoutEl=document.getElementById('ie-export-layout');
        var layout=layoutEl?layoutEl.value:"tabular";
        var layoutWrap=document.getElementById('ie-export-layout-wrap');
        if(layoutWrap)layoutWrap.style.display=fmt==='pdf'?"":"none";
        var rows=scopeRecords(scope);
        var label=scope==='tagged'?'tagged record'+(rows.length===1?'':'s'):(scope==='current'?'current record':'record'+(rows.length===1?'':'s')+' in current found set');
        var nOn=state.filter(function(x){return x.on;}).length;
        var fmtLabel=fmt==='pdf'?(layout==='detail'?'PDF Detail':'PDF Tabular'):'CSV';
        document.getElementById('ie-export-summary').textContent=rows.length+' '+label+' · '+nOn+' column'+(nOn===1?'':'s')+' · '+fmtLabel;
        document.getElementById('ie-export-run').disabled=!rows.length||!nOn;
        document.getElementById('ie-export-run').textContent=fmt==='pdf'?(layout==='detail'?'Generate Detail PDF':'Generate PDF Report'):'Export CSV';
      }
      host.querySelectorAll('.ie-export-check').forEach(function(e){e.onchange=function(){state[+this.dataset.i].on=this.checked;refreshSummary();};});
      host.querySelectorAll('.ie-up').forEach(function(e){e.onclick=function(){var i=+this.dataset.i;if(i){var x=state.splice(i,1)[0];state.splice(i-1,0,x);draw();}};});
      host.querySelectorAll('.ie-down').forEach(function(e){e.onclick=function(){var i=+this.dataset.i;if(i<state.length-1){var x=state.splice(i,1)[0];state.splice(i+1,0,x);draw();}};});
      document.getElementById('ie-export-all').onclick=function(){setAllFields(true);};
      document.getElementById('ie-export-none').onclick=function(){setAllFields(false);};
      document.getElementById('ie-export-scope').onchange=refreshSummary;
      document.getElementById('ie-export-format').onchange=refreshSummary;
      var le=document.getElementById('ie-export-layout');if(le)le.onchange=refreshSummary;
      document.getElementById('ie-export-cancel').onclick=closeEditModal;
      document.getElementById('ie-export-run').onclick=run;
      refreshSummary();
    }
    async function run(){
      var chosen=state.filter(function(x){return x.on;});if(!chosen.length){toast("Select at least one field.","err");return;}
      var scope=document.getElementById('ie-export-scope').value;
      var fmt=document.getElementById('ie-export-format').value;
      var layoutEl=document.getElementById('ie-export-layout');
      var layout=(fmt==='pdf'&&layoutEl)?layoutEl.value:"tabular";
      var exportRecords=scopeRecords(scope);if(!exportRecords.length){toast("The selected export scope contains no records.","err");return;}
      var includeId=document.getElementById('ie-export-id').checked;
      var header=(includeId?["record_id"]:[]).concat(chosen.map(function(x){return ieFieldLabel(x.f);}));
      var fieldKeys=(includeId?["record_id"]:[]).concat(chosen.map(function(x){return ieFieldKey(x.f);}));
      var job=ieJobId(),lv=model.byId[w.levelId],hub=hubIdForLevel(lv),base=levelBase(lv),now=new Date().toISOString();
      var scopeSlug=scope==='tagged'?'tagged':(scope==='current'?'current-record':'found-set');
      var baseName=(String(lv.rawLabel||lv.label||"records").replace(/[^a-z0-9_-]+/gi,'-').replace(/^-|-$/g,'').toLowerCase()||"records")+"-"+scopeSlug+"-"+now.replace(/[:.]/g,'-');
      var runBtn=document.getElementById('ie-export-run');
      if(runBtn){runBtn.disabled=true;runBtn.textContent=fmt==='pdf'?'Building PDF…':'Exporting…';}
      try{
        if(fmt==='pdf'){
          var title=(lv.rawLabel||lv.label||"Records")+" — Report";
          var subtitle="Scope: "+(scope==="tagged"?"Tagged records":(scope==="current"?"Current record":"Current found set"))+" · "+exportRecords.length+" record"+(exportRecords.length===1?"":"s");
          var meta="Operator: "+operator()+" · Generated: "+new Date(now).toLocaleString()+" · CEE "+currentCeeVersion();
          var footerLeft="Chandra Enterprise · "+(hub||"")+" · job "+job;
          var doc;
          if(layout==="detail"){
            var detailFields=[];
            if(includeId){
              detailFields.push({label:"Record ID",valueFn:function(r){return String(recordId(r)||"");}});
            }
            chosen.forEach(function(x){
              detailFields.push({
                label:ieFieldLabel(x.f),
                valueFn:function(r){return String(ieExportValue(r,x.f)||"");}
              });
            });
            doc=await ieBuildPdfDetailReport({
              title:title,
              meta:meta+" · "+subtitle,
              records:exportRecords,
              fields:detailFields,
              recordTitleFn:function(r){return String(browseRecordDisplay(r,w.formDesign)||recordName(r)||recordId(r)||"");},
              footerLeft:footerLeft
            });
          }else{
            var bodyRows=exportRecords.map(function(r){
              return (includeId?[String(recordId(r))]:[]).concat(chosen.map(function(x){
                var v=String(ieExportValue(r,x.f)||"");
                return v.length>120?v.slice(0,117)+"\u2026":v;
              }));
            });
            doc=await ieBuildPdfReport({
              title:title,subtitle:subtitle,meta:meta,
              headers:header,body:bodyRows,landscape:header.length>=5,
              footerLeft:footerLeft
            });
          }
          var pdfArray=doc.output("arraybuffer");
          var digest=await ieSha256Bytes(pdfArray);
          var artifact={artifact_type:"import-export-job",job_id:job,operation:"export",status:"completed",hub_id:hub,parent_subject_id:w.parentId||null,lifecycle_scope:w.lifecycleView||"active",export_scope:scope,found_count:(w.records||[]).length,tagged_count:taggedRecords.length,exported_count:exportRecords.length,total_count:(w.allRecords||[]).length,record_ids:exportRecords.map(recordId),fields:fieldKeys,field_labels:header,sort_spec:w.sortSpec||[],file_digest_sha256:digest,format:"pdf",value_mode:"display",report_kind:layout==="detail"?"detail-one-per-page":"tabular-list",completed_at:now};
          var a=await ieAttest(base,{hub_id:hub,job_id:job,operation:"export",status:"completed",artifact:artifact,operator:operator()});
          ieDownloadBlob(baseName+(layout==="detail"?"-detail":"")+".pdf",new Blob([pdfArray],{type:"application/pdf"}));
          modal("PDF Report Generated",'<div class="card"><div class="card-body"><div><b>'+exportRecords.length+'</b> records · '+(layout==='detail'?'Detail (one per page)':'Tabular list')+'</div><div class="small-muted">Scope: '+esc(scope)+' · columns: '+header.length+'</div><div class="small-muted" style="margin-top:8px">SHA-256: '+esc(digest)+'</div><div class="small-muted">Job: '+esc(job)+'</div><div class="small-muted">CU: '+esc(a.cu_id||"")+'</div><div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');
        }else{
          var lines=[header.map(ieCsvCell).join(',')];
          exportRecords.forEach(function(r){var vals=(includeId?[recordId(r)]:[]).concat(chosen.map(function(x){return ieExportValue(r,x.f);}));lines.push(vals.map(ieCsvCell).join(','));});
          var csv='\ufeff'+lines.join('\r\n')+'\r\n',digest=await ieSha256(csv);
          var artifact={artifact_type:"import-export-job",job_id:job,operation:"export",status:"completed",hub_id:hub,parent_subject_id:w.parentId||null,lifecycle_scope:w.lifecycleView||"active",export_scope:scope,found_count:(w.records||[]).length,tagged_count:taggedRecords.length,exported_count:exportRecords.length,total_count:(w.allRecords||[]).length,record_ids:exportRecords.map(recordId),fields:fieldKeys,field_labels:header,sort_spec:w.sortSpec||[],file_digest_sha256:digest,format:"csv",value_mode:"display",completed_at:now};
          var a=await ieAttest(base,{hub_id:hub,job_id:job,operation:"export",status:"completed",artifact:artifact,operator:operator()});
          ieDownload(baseName+".csv",csv);
          modal("Export Completed",'<div class="card"><div class="card-body"><div><b>'+exportRecords.length+'</b> records exported.</div><div class="small-muted">Scope: '+esc(scope)+'</div><div class="small-muted" style="margin-top:8px">SHA-256: '+esc(digest)+'</div><div class="small-muted">Job: '+esc(job)+'</div><div class="small-muted">CU: '+esc(a.cu_id||"")+'</div><div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');
        }
      }catch(e){
        console.error("[CEE export]",e);
        toast((fmt==='pdf'?"PDF report":"Export")+" failed: "+(e&&e.message||e),"err");
        if(runBtn){runBtn.disabled=false;runBtn.textContent="Export";}
      }
    }
    draw();
  }
  async function openBusinessImport(id){var w=model.browses[id];if(!w)return;if(!w.formDesign){toast("A published form design is required before importing records.","err");return;}modal("Import CSV",'<div class="card"><div class="card-body"><div class="field"><label>CSV file</label><input id="ie-import-file" type="file" accept=".csv,text/csv"></div><div class="small-muted">Public beta import is add-only. Every accepted row uses the ordinary CU-backed record-create path.</div><div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Cancel</button><button class="btn primary" id="ie-import-read">Read CSV</button></div></div></div>');document.getElementById('ie-import-read').onclick=async function(){var file=document.getElementById('ie-import-file').files[0];if(!file){toast("Choose a CSV file.","err");return;}var text=await file.text(),digest=await ieSha256(text),lv=model.byId[w.levelId],hub=hubIdForLevel(lv);if(localStorage.getItem(ieReplayKey(hub,digest))&&!confirm("This source file appears to have been imported into this Hub previously in this browser. Continue?"))return;var rows=ieParseCsv(text);if(rows.length<2){toast("CSV must contain a header and at least one data row.","err");return;}ieDrawMapping(id,file.name,digest,rows[0],rows.slice(1));};}
  function ieDrawMapping(id,filename,digest,headers,dataRows){var w=model.browses[id],fields=findFields(w);modal("Map CSV Columns",'<div id="ie-map-host"></div>');var host=document.getElementById('ie-map-host'),mapping=headers.map(function(h){var norm=String(h).replace(/^\ufeff/,"").trim().toLowerCase(),identityColumn=(norm==="record_id"||norm==="canonical_record_id"||norm==="source_record_id"),idx=identityColumn?-1:fields.findIndex(function(f){return ieFieldLabel(f).trim().toLowerCase()===norm||ieFieldKey(f).trim().toLowerCase()===norm;});return idx;});function draw(){host.innerHTML='<div class="card"><div class="card-body"><div class="small-muted">'+esc(filename)+' · '+dataRows.length+' data rows</div><div class="small-muted" style="margin-top:5px">Identity columns such as record_id are source provenance only and are always ignored. Imported rows receive fresh canonical record IDs and genesis CUs.</div>'+headers.map(function(h,i){return '<div class="field"><label>'+esc(h)+'</label><select class="ie-map" data-i="'+i+'"><option value="-1">Ignore</option>'+fields.map(function(f,fi){return '<option value="'+fi+'" '+(mapping[i]===fi?'selected':'')+'>'+esc(ieFieldLabel(f))+' · '+esc(findFieldType(f))+'</option>';}).join('')+'</select><div class="small-muted">Sample: '+esc((dataRows[0]||[])[i]||'')+'</div></div>';}).join('')+'<div class="field"><label>Commit policy</label><select id="ie-policy"><option value="valid">Commit valid rows only</option><option value="all">Stop on first write failure</option></select></div><div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Cancel</button><button class="btn primary" id="ie-preview">Validate & Preview</button></div></div></div>';host.querySelectorAll('.ie-map').forEach(function(e){e.onchange=function(){mapping[+this.dataset.i]=+this.value;};});document.getElementById('ie-preview').onclick=function(){iePreviewImport(id,filename,digest,headers,dataRows,mapping.slice(),document.getElementById('ie-policy').value);};}draw();}
  function iePreviewImport(id,filename,digest,headers,dataRows,mapping,policy){
    var w=model.browses[id],fields=findFields(w),nameField=ieNameField(fields),seen=new Set(),
    rows=dataRows.map(function(src,ri){
      var values={},errors=[];
      mapping.forEach(function(fi,ci){
        if(fi<0)return;
        var f=fields[fi],key=ieFieldKey(f);
        if(seen.has(key))return;
        var n=ieNormalizeImportValue(src[ci]||'',f);
        if(!n.ok)errors.push({column:headers[ci],field:ieFieldLabel(f),message:n.error,value:src[ci]||''});
        else values[key]=n.value;
      });
      fields.forEach(function(f){var key=ieFieldKey(f);if(ieRequired(f)&&(values[key]===undefined||values[key]===null||values[key]===""||(Array.isArray(values[key])&&!values[key].length)))errors.push({field:ieFieldLabel(f),message:"Required value is missing"});});
      var nameKey=nameField?ieFieldKey(nameField):"name",name=String(values[nameKey]||'').trim();
      if(!name)errors.push({field:nameField?ieFieldLabel(nameField):"Name",message:"Name is required"});
      return {source_row:ri+2,source:src,values:values,name:name,errors:errors};
    }),
    valid=rows.filter(function(r){return !r.errors.length;}),
    invalid=rows.filter(function(r){return r.errors.length;});
    modal("Import Preview",'<div class="card ie-preview-card"><div class="card-body">'+
      '<div><b>'+rows.length+'</b> rows read · <b>'+valid.length+'</b> valid · <b>'+invalid.length+'</b> rejected</div>'+
      '<div class="small-muted" style="margin-top:8px">Policy: '+(policy==='all'?'stop on first write failure':'commit valid rows only')+'</div>'+
      '<div class="ie-preview-grid"><table class="browse-table"><colgroup><col class="ie-col-row"><col class="ie-col-status"><col class="ie-col-name"><col></colgroup><thead><tr><th>Row</th><th>Status</th><th>Name</th><th>Details</th></tr></thead><tbody>'+
      rows.slice(0,200).map(function(r){
        return '<tr><td>'+r.source_row+'</td><td>'+(r.errors.length?'Rejected':'Valid')+'</td><td>'+esc(r.name)+'</td><td>'+esc(r.errors.map(function(e){
          return (e.field||e.column||'')+': '+e.message+(e.value!==undefined&&e.value!==''?' [got: "'+ieDisplayTruncate(e.value)+'"]':'');
        }).join('; '))+'</td></tr>';
      }).join('')+
      '</tbody></table></div><div class="action-row ie-preview-actions"><button class="btn" onclick="closeEditModal()">Cancel</button>'+
      (invalid.length?'<button class="btn" id="ie-errors">Export Rejected Rows</button>':'')+
      '<button class="btn primary" id="ie-commit" '+((policy==='all'&&invalid.length)?'disabled title="Resolve validation errors before using stop-on-first-failure mode"':'')+'>Commit Import</button></div></div></div>');
    var previewShell=document.getElementById("edit-modal");if(previewShell)previewShell.classList.add("import-preview-modal");
    var eb=document.getElementById('ie-errors');if(eb)eb.onclick=function(){var lines=[["source_row","status","errors"].concat(headers).map(ieCsvCell).join(',')];invalid.forEach(function(r){lines.push([r.source_row,"rejected",r.errors.map(function(e){return (e.field||e.column||'')+': '+e.message;}).join('; ')].concat(r.source).map(ieCsvCell).join(','));});ieDownload('import-errors-'+new Date().toISOString().replace(/[:.]/g,'-')+'.csv','\ufeff'+lines.join('\r\n')+'\r\n');};
    var cb=document.getElementById('ie-commit');if(cb)cb.onclick=function(){ieCommitImport(id,filename,digest,rows,valid,invalid,policy,nameField);};
  }
  async function ieCommitImport(id,filename,digest,allRows,valid,invalid,policy,nameField){
    var w=model.browses[id],lv=model.byId[w.levelId],hub=hubIdForLevel(lv),base=levelBase(lv),job=ieJobId(),created=[],failed=invalid.map(function(r){return {source_row:r.source_row,errors:r.errors};}),btn=document.getElementById('ie-commit');
    btn.disabled=true;btn.textContent='Importing…';
    for(var i=0;i<valid.length;i++){
      var r=valid[i],values=Object.assign({},r.values),nameKey=nameField?ieFieldKey(nameField):'name';
      try{
        var j=await postJson(base+'/api/enterprise/records/create',{hub_id:hub,parent_subject_id:w.parentId||null,level_number:lv.number||lv.level_number||null,target_level_number:w.parentId?((model.byId[((model.browses[w.parentBrowseId]||{}).levelId)]||{}).number||(model.byId[((model.browses[w.parentBrowseId]||{}).levelId)]||{}).level_number||null):null,name:r.name,values:values,operator:operator()});
        created.push({source_row:r.source_row,record_id:recordId(j.record||{}),cu_id:(j.record||{}).tail_hash||(j.record||{}).cu_id||''});
      }catch(e){
        failed.push({source_row:r.source_row,errors:[{message:e.message||String(e)}]});
        if(policy==='all')break;
      }
    }
    var status=failed.length?'completed_with_errors':'completed',
    artifact={artifact_type:'import-export-job',job_id:job,operation:'import',status:status,hub_id:hub,parent_subject_id:w.parentId||null,source_filename:filename,source_digest_sha256:digest,format:'csv',mode:'add-only',commit_policy:policy,rows_read:allRows.length,records_created:created.length,rows_rejected:failed.length,created_records:created,rejected_rows:failed,completed_at:new Date().toISOString()};
    var att=null,attErr=null;
    try{att=await ieAttest(base,{hub_id:hub,job_id:job,operation:'import',status:status,artifact:artifact,operator:operator()});localStorage.setItem(ieReplayKey(hub,digest),JSON.stringify({job_id:job,at:artifact.completed_at}));}catch(e){attErr=e;}
    await refreshBusinessBrowse(id);
    /* v31c419: after import, default to Show All (full active set under the
       current parent scope). The previous "affected-record found set" was
       correct once fixed (v31c322) but routinely misread as a failed or
       partial import ("I had 2, imported 2, still only see 2"). Created /
       rejected counts remain in the Completed modal. */
    showAllBusinessRecords(id);
    /* v31c320 (claude): "0 created / 1 rejected" with no way to see why is
       a dead end. Preview shows per-row error detail; Completed showed
       only counts. Mirrored the same detail table here so a runtime
       (server-side records/create) failure is diagnosable without
       reproducing the import. */
    modal('Import Completed','<div class="card"><div class="card-body"><div><b>'+created.length+'</b> records created · <b>'+failed.length+'</b> rejected/failed</div>'+(failed.length?'<div class="ie-preview-grid" style="margin-top:8px;max-height:220px"><table class="browse-table"><colgroup><col class="ie-col-row"><col></colgroup><thead><tr><th>Row</th><th>Error</th></tr></thead><tbody>'+failed.map(function(r){return '<tr><td>'+esc(String(r.source_row))+'</td><td>'+esc((r.errors||[]).map(function(e){return (e.field||e.column||'')+(e.field||e.column?': ':'')+e.message+(e.value!==undefined&&e.value!==''?' [got: "'+ieDisplayTruncate(e.value)+'"]':'');}).join('; '))+'</td></tr>';}).join('')+'</tbody></table></div>':'')+'<div class="small-muted" style="margin-top:8px">Job: '+esc(job)+'</div>'+(att?'<div class="small-muted">CU: '+esc(att.cu_id||'')+'</div>':'<div style="color:var(--red)">Job attestation failed: '+esc(attErr&&attErr.message||attErr||'unknown error')+'</div>')+'<div class="small-muted">The browse shows all active records in this scope (Show All).</div><div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');
  }

  function openBusinessBrowse(levelId,parentId,parentName,parentBrowseId,parentRow){
    var key=browseKey(levelId,parentId),existing=Object.keys(model.browses).find(function(id){return model.browses[id].key===key;});
    if(existing){setBrowseActive(existing);return;}
    var lv=model.byId[levelId],id="business-browse-"+(model.browseSeq++);
    var title=parentId?lv.label+" children of "+(parentName||parentId):lv.label+" records";
    var w={id:id,key:key,levelId:levelId,parentId:parentId||null,title:title,allRecords:[],records:[],findRequests:[],findActive:false,findMode:false,findOperation:"replace",foundBaseIds:new Set(),omittedIds:new Set(),foundView:"included",sortSpec:[],queryPlan:"local-scan",queryPlanDetail:"Execution: local scan",lifecycleView:"active",selected:-1,selectedChildHubId:"",formDesign:null,columnWidths:{}};
    model.browses[id]=w;
    var el=document.createElement("div");
    el.id=id;el.className="browse-win active";
    el.style.left=(28+Object.keys(model.browses).length*18)+"px";
    el.style.top=(22+Object.keys(model.browses).length*18)+"px";
    el.style.zIndex=String(++model.zTop);
    el.innerHTML=
      '<div class="browse-hdr"><span class="browse-title">'+esc(title)+'</span><span class="browse-scope">loading</span><button class="browse-max-btn" title="Maximize browse to canvas" aria-label="Maximize browse">□</button><button class="browse-close">×</button></div>'+ 
      '<div class="browse-tools"><svg class="gr-toolbar-mark" aria-hidden="true" viewBox="0 0 70 100"><defs><radialGradient id="'+id+'-hub-glow" cx="50%" cy="50%" r="50%"><stop offset="0%" stop-color="var(--glow-gold)"/><stop offset="100%" stop-color="var(--glow-gold)" stop-opacity="0"/></radialGradient></defs><circle class="gr-hub-glow" cx="30" cy="50" r="18" fill="url(#'+id+'-hub-glow)"/><g stroke="#6ab4d8" stroke-width="2.4"><line x1="30" y1="50" x2="55" y2="35"/><line x1="30" y1="50" x2="50" y2="68"/><line x1="30" y1="50" x2="14" y2="35"/><line x1="30" y1="50" x2="18" y2="68"/></g><circle cx="30" cy="50" r="7.5" fill="#e0b84a"/><circle cx="30" cy="50" r="2.2" fill="#01030a"/><circle cx="55" cy="35" r="5" fill="#6ab4d8"/><circle cx="55" cy="35" r="1.6" fill="#01030a"/><circle cx="50" cy="68" r="5" fill="#6ab4d8"/><circle cx="50" cy="68" r="1.6" fill="#01030a"/><circle cx="14" cy="35" r="4.2" fill="#6ab4d8"/><circle cx="14" cy="35" r="1.3" fill="#01030a"/><circle cx="18" cy="68" r="4.2" fill="#6ab4d8"/><circle cx="18" cy="68" r="1.3" fill="#01030a"/></svg><div class="toolbar-sep"></div><div class="browse-command-group"><button class="icon-toolbar-btn primary browse-add-btn" disabled title="Checking form design…"><svg viewBox="0 0 20 20"><rect x="3" y="4.5" width="14" height="11" rx="1.5"/><line x1="10" y1="7.5" x2="10" y2="12.5"/><line x1="7.5" y1="10" x2="12.5" y2="10"/></svg><span class="icon-toolbar-label">Add</span></button><button class="icon-toolbar-btn browse-view-btn" disabled title="View selected record"><svg viewBox="0 0 20 20"><rect x="3" y="4.5" width="14" height="11" rx="1.5"/></svg><span class="icon-toolbar-label">View</span></button><button class="icon-toolbar-btn browse-edit-btn" disabled title="Checking form design…"><svg viewBox="0 0 20 20"><path d="M12.2 4.2l3.6 3.6-8.4 8.4-4.2 0.7 0.7-4.2z"/><line x1="10.8" y1="5.6" x2="14.4" y2="9.2"/></svg><span class="icon-toolbar-label">Edit</span></button><button class="icon-toolbar-btn browse-duplicate-btn" disabled title="Checking form design…"><svg viewBox="0 0 20 20"><rect x="6" y="6" width="10" height="10" rx="1.3"/><path d="M4 12V5.3C4 4.6 4.6 4 5.3 4H12"/></svg><span class="icon-toolbar-label">Duplicate</span></button><button class="icon-toolbar-btn danger browse-delete-btn" disabled title="Checking form design…"><svg viewBox="0 0 20 20"><rect x="3" y="4.5" width="14" height="11" rx="1.5"/><line x1="7.5" y1="10" x2="12.5" y2="10"/></svg><span class="icon-toolbar-label">Soft-delete</span></button><div class="toolbar-sep"></div><div class="browse-menu-wrap"><button class="icon-toolbar-btn browse-find-menu-btn" title="Find and saved-search commands"><svg viewBox="0 0 20 20"><circle cx="8.5" cy="8.5" r="5"/><line x1="12.3" y1="12.3" x2="17" y2="17"/></svg><span class="icon-toolbar-label">Find</span></button><div class="browse-menu browse-find-menu"><button class="btn browse-find-now-btn" title="Find records in this browse.">Find Records</button><button class="btn browse-find-btn" title="Open CU-backed Saved Searches.">Saved Searches</button><button class="btn browse-constrain-btn" disabled>Constrain Found Set</button><button class="btn browse-extend-btn" disabled>Extend Found Set</button><button class="btn browse-show-all-btn" disabled>Show All Records</button></div></div><div class="browse-menu-wrap"><button class="icon-toolbar-btn browse-found-set-btn" title="Found set commands"><svg viewBox="0 0 20 20"><path d="M3.5 4h13l-4.5 6.5v5.3l-4 1.7v-7z"/></svg><span class="icon-toolbar-label">Found Set</span></button><div class="browse-menu browse-found-set-menu"><button class="btn browse-omit-btn" disabled>Omit Selected</button><button class="btn browse-show-omitted-btn" disabled>Show Omitted Only</button><button class="btn browse-return-found-btn" disabled>Return to Found Set</button><button class="btn browse-show-all-found-btn" disabled>Show All Records</button></div></div><div class="browse-menu-wrap"><button class="icon-toolbar-btn browse-view-menu-btn" title="Sort records and view CU chain"><svg viewBox="0 0 20 20"><line x1="4" y1="6" x2="16" y2="6"/><line x1="4" y1="10" x2="12" y2="10"/><line x1="4" y1="14" x2="8" y2="14"/></svg><span class="icon-toolbar-label">Sort/View</span></button><div class="browse-menu browse-view-menu"><button class="btn browse-sort-btn">Sort Records</button><button class="btn browse-chain-btn" disabled>View CU Chain</button></div></div><div class="browse-menu-wrap"><button class="icon-toolbar-btn browse-hub-menu-btn" title="Hub definition commands"><svg viewBox="0 0 20 20"><circle cx="10" cy="10" r="3"/><circle cx="4" cy="5" r="1.6"/><circle cx="16" cy="5" r="1.6"/><circle cx="4" cy="15" r="1.6"/><circle cx="16" cy="15" r="1.6"/><line x1="7.5" y1="8" x2="5.2" y2="6.2"/><line x1="12.5" y1="8" x2="14.8" y2="6.2"/><line x1="7.5" y1="12" x2="5.2" y2="13.8"/><line x1="12.5" y1="12" x2="14.8" y2="13.8"/></svg><span class="icon-toolbar-label">Hub</span></button><div class="browse-menu browse-hub-menu"><button class="btn browse-hub-info-edit-btn">Edit Hub Info</button><button class="btn browse-hub-info-chain-btn">View Hub Info with Chain</button></div></div><div class="browse-menu-wrap"><button class="icon-toolbar-btn browse-form-menu-btn" title="Form Definition commands"><svg viewBox="0 0 20 20"><rect x="4" y="3" width="12" height="14" rx="1.5"/><line x1="7" y1="7" x2="13" y2="7"/><line x1="7" y1="10" x2="13" y2="10"/><line x1="7" y1="13" x2="11" y2="13"/></svg><span class="icon-toolbar-label">Form</span></button><div class="browse-menu browse-form-menu"><button class="btn browse-form-definition-edit-btn">Edit Form Definition</button><button class="btn browse-form-definition-chain-btn">View Form Definition with Chain</button></div></div><button class="icon-toolbar-btn browse-trigger-menu-btn" title="Browse governed Trigger Definitions"><svg viewBox="0 0 20 20"><path d="M4 5h7"/><path d="M9 3l2 2-2 2"/><path d="M16 15H9"/><path d="M11 13l-2 2 2 2"/><circle cx="5" cy="15" r="2"/><circle cx="15" cy="5" r="2"/></svg><span class="icon-toolbar-label">Trigger</span></button><div class="browse-menu-wrap"><button class="icon-toolbar-btn browse-test-menu-btn" title="Acceptance test data and fixtures"><svg viewBox="0 0 20 20"><path d="M7 3h6"/><path d="M8 3v4l-4 7a2 2 0 0 0 1.7 3h8.6a2 2 0 0 0 1.7-3l-4-7V3"/><line x1="6" y1="12" x2="14" y2="12"/></svg><span class="icon-toolbar-label">Test</span></button><div class="browse-menu browse-test-menu"><button class="btn browse-test-random-btn">Create Random Test Records</button><button class="btn browse-test-fixture-btn">Generate Test Plan Fixture</button></div></div><div class="browse-menu-wrap"><button class="icon-toolbar-btn browse-import-export-menu-btn" title="Governed import and export"><svg viewBox="0 0 20 20"><path d="M7 4H4v12h3"/><path d="M13 4h3v12h-3"/><path d="M6 10h8"/><path d="M11 7l3 3-3 3"/></svg><span class="icon-toolbar-label">Import/Export</span></button><div class="browse-menu browse-import-export-menu"><button class="btn browse-export-btn">Export / Report (CSV · PDF)…</button><button class="btn browse-import-btn">Import CSV…</button></div></div><div class="toolbar-sep"></div><button class="icon-toolbar-btn browse-refresh-btn" title="Refresh"><svg viewBox="0 0 20 20"><path d="M16 10a6 6 0 1 1-1.8-4.3"/><polyline points="16 3.5 16 6.5 13 6.5"/></svg><span class="icon-toolbar-label">Refresh</span></button></div><input class="browse-search" placeholder="Search this browse"></div>'+ 
      '<div class="browse-content-split"><aside class="child-hub-pane"><div class="child-hub-pane-hdr"><span class="child-hub-pane-title">Related Tables</span><button class="help-dot" onclick="openHelpById(\'child_hubs\', this)">?</button><button class="btn hub-add-btn">+ Create Table</button><div class="browse-menu-wrap"><button class="btn hub-more-btn">More ▾</button><div class="browse-menu hub-menu"><button class="btn hub-info-btn">Hub Info</button><button class="btn hub-edit-btn">Open Form Designer</button><button class="btn hub-duplicate-btn">Duplicate Table Definition</button><div style="height:1px;background:var(--border);margin:4px 6px"></div><button class="btn hub-info-chain-btn">View Hub Info Chain</button><button class="btn hub-form-chain-btn">View Form Definition Chain</button><div style="height:1px;background:var(--border);margin:4px 6px"></div><button class="btn hub-remove-btn">Remove Relationship</button><button class="btn hub-retire-btn">Retire Hub</button><button class="btn danger hub-purge-btn">Request Purge</button></div></div></div><div class="child-hub-list"></div><div class="child-hub-guidance">Select a parent record, then click a related table to open its filtered browse.</div></aside><div class="browse-related-splitter" role="separator" aria-orientation="vertical" title="Drag to resize Related Tables; double-click to reset"></div><section class="browse-record-pane"><div class="browse-body"><table class="browse-table"><thead><tr><th></th><th>Status</th><th>Updated</th><th>Children</th></tr></thead><tbody></tbody></table></div></section></div>'+ 
      '<div class="browse-statusbar"><span class="browse-status-main">0 records · none selected</span><span class="browse-record-navigation" aria-label="Record navigation"><button class="btn browse-nav-first" title="First record" aria-label="First record">|◀</button><button class="btn browse-nav-prev" title="Previous record" aria-label="Previous record">◀</button><span class="browse-nav-position">Record 0 of 0</span><button class="btn browse-nav-next" title="Next record" aria-label="Next record">▶</button><button class="btn browse-nav-last" title="Last record" aria-label="Last record">▶|</button></span><span class="browse-status-related"></span></div>';
    document.getElementById("mdi-layer").appendChild(el);
    initBrowseContentSplitter(el,w);
    if(parentBrowseId) positionChildBrowse(el,parentBrowseId,parentRow);
    el.onmousedown=function(){setBrowseActive(id);};
    el.querySelector(".browse-close").onclick=function(){closeBusinessBrowse(id);};
    el.querySelector(".browse-max-btn").onclick=function(e){e.stopPropagation();toggleBusinessBrowseSize(id);};
    el.querySelector(".browse-hdr").ondblclick=function(e){if(!e.target.closest("button"))toggleBusinessBrowseSize(id);};
    var addBtn=el.querySelector(".browse-add-btn"),randomTestBtn=el.querySelector(".browse-test-random-btn"),fixtureTestBtn=el.querySelector(".browse-test-fixture-btn"),viewBtn=el.querySelector(".browse-view-btn"),editBtn=el.querySelector(".browse-edit-btn"),duplicateBtn=el.querySelector(".browse-duplicate-btn"),refreshBtn=el.querySelector(".browse-refresh-btn"),hubMenuBtn=el.querySelector(".browse-hub-menu-btn"),formMenuBtn=el.querySelector(".browse-form-menu-btn"),triggerMenuBtn=el.querySelector(".browse-trigger-menu-btn"),testMenuBtn=el.querySelector(".browse-test-menu-btn"),importExportMenuBtn=el.querySelector(".browse-import-export-menu-btn"),hubInfoEditBtn=el.querySelector(".browse-hub-info-edit-btn"),hubInfoChainBtn=el.querySelector(".browse-hub-info-chain-btn"),formDefinitionEditBtn=el.querySelector(".browse-form-definition-edit-btn"),formDefinitionChainBtn=el.querySelector(".browse-form-definition-chain-btn"),exportBtn=el.querySelector(".browse-export-btn"),importBtn=el.querySelector(".browse-import-btn"),chainBtn=el.querySelector(".browse-chain-btn"),deleteBtn=el.querySelector(".browse-delete-btn"),findBtn=el.querySelector(".browse-find-btn"),findNowBtn=el.querySelector(".browse-find-now-btn"),showAllBtn=el.querySelector(".browse-show-all-btn"),showAllFoundBtn=el.querySelector(".browse-show-all-found-btn"),omitBtn=el.querySelector(".browse-omit-btn"),showOmittedBtn=el.querySelector(".browse-show-omitted-btn"),returnFoundBtn=el.querySelector(".browse-return-found-btn"),constrainBtn=el.querySelector(".browse-constrain-btn"),extendBtn=el.querySelector(".browse-extend-btn"),sortBtn=el.querySelector(".browse-sort-btn"),search=el.querySelector(".browse-search"),hubList=el.querySelector(".child-hub-list");
    var navFirst=el.querySelector(".browse-nav-first"),navPrev=el.querySelector(".browse-nav-prev"),navNext=el.querySelector(".browse-nav-next"),navLast=el.querySelector(".browse-nav-last");
    navFirst.onclick=function(e){e.stopPropagation();navigateBusinessRecord(id,"first");};navPrev.onclick=function(e){e.stopPropagation();navigateBusinessRecord(id,"previous");};navNext.onclick=function(e){e.stopPropagation();navigateBusinessRecord(id,"next");};navLast.onclick=function(e){e.stopPropagation();navigateBusinessRecord(id,"last");};
    search.oninput=function(){filterBusinessBrowse(id,this.value);};
    findNowBtn.onclick=function(){openFoundSetFind(id,"replace");};findBtn.onclick=function(){openSavedSearchManager(id);};showAllBtn.onclick=function(){showAllBusinessRecords(id);};showAllFoundBtn.onclick=function(){showAllBusinessRecords(id);};omitBtn.onclick=function(){omitSelectedBusinessRecords(id);};showOmittedBtn.onclick=function(){showOmittedBusinessRecords(id);};returnFoundBtn.onclick=function(){returnToIncludedFoundSet(id);};constrainBtn.onclick=function(){openFoundSetFind(id,"constrain");};extendBtn.onclick=function(){openFoundSetFind(id,"extend");};sortBtn.onclick=function(){openSortEditor(id);};exportBtn.onclick=function(){openBusinessExport(id);};importBtn.onclick=function(){openBusinessImport(id);};

    var hubOptions=[];
    function renderChildHubList(){hubList.innerHTML="";if(!hubOptions.length){hubList.innerHTML='<div class="small-muted" style="padding:8px">No related Hubs defined.</div>';w.selectedChildHubId="";w.selectedChildHubLabel="";updateBrowseChrome(id);return;}if(!w.selectedChildHubId||!hubOptions.some(function(h){return h.levelId===w.selectedChildHubId;}))w.selectedChildHubId=hubOptions[0].levelId;hubOptions.forEach(function(h){var b=document.createElement("button");b.className="child-hub-item"+(w.selectedChildHubId===h.levelId?" sel":"");b.textContent=h.label;b.onclick=function(){w.selectedChildHubId=h.levelId;w.selectedChildHubLabel=h.label;renderChildHubList();var r=w.records[w.selected];if(!r){toast("Select a parent record first.","err");return;}openBusinessBrowse(h.levelId,recordId(r),browseRecordDisplay(r,w.formDesign),id,el.querySelector("tbody tr.sel"));};hubList.appendChild(b);});var selectedHub=hubOptions.find(function(h){return h.levelId===w.selectedChildHubId;});w.selectedChildHubLabel=selectedHub?selectedHub.label:"";updateBrowseChrome(id);}
    async function reloadChildHubOptions(){
      hubList.innerHTML='<div class="small-muted" style="padding:8px">Loading…</div>';
      hubOptions=await fetchChildHubOptions(levelId);
      renderChildHubList();
    }
    reloadChildHubOptions();

    /* claude (2026-07-19): hard gate, universal for every Hub in every GR
       product -- CRUD on business records must not be exercisable at all
       until a real _form_design has been attested for this Hub. Not a
       reactive catch (click Add Record, then get told no form exists) --
       the buttons themselves are disabled up front, the moment this
       browse window opens, before any click is possible. Refresh (tools[4])
       and viewing the existing record list stay enabled regardless -- a
       hub with attested records but a since-corrupted form read should
       still be inspectable, just not mutable. Re-checked on every
       Refresh too, not just once at window-open, since a form_design can
       be published by someone else while this window stays open. */
    var formDesignGateNote=document.createElement("span");
    formDesignGateNote.className="small-muted";
    formDesignGateNote.style.cssText="margin-left:8px;color:var(--red)";
    formDesignGateNote.style.flexBasis="100%";el.querySelector(".browse-tools").appendChild(formDesignGateNote);
    async function applyFormDesignGate(){
      var result=await businessFormFor(levelId);
      /* claude (2026-07-19): result can be null (no form_design at all),
         {_read_error:true,...} (a real backend error, distinct from "no
         form" -- see businessFormFor's own catch block), or a real form
         object. Only the last case should ever enable these buttons --
         {_read_error:true} is a truthy object, so a naive !!result check
         would have incorrectly OPENED the gate on a read failure instead
         of failing closed. Fail closed on both null and _read_error. */
      var hasForm=!!(result&&!result._read_error&&Array.isArray(result.fields)&&result.fields.length);
      var isError=!!(result&&result._read_error);
      var hubInfo=await loadHubInfo(currentHubDescriptor());
      w.recordCreationEnabled=hubInfo.record_creation_enabled!==false;
      w.formDesign=hasForm?result:null;
      renderBusinessRows(id);
      addBtn.disabled=!hasForm||w.recordCreationEnabled===false;importBtn.disabled=!hasForm||w.recordCreationEnabled===false;importBtn.title=!hasForm?"A published form design is required before importing records.":(w.recordCreationEnabled===false?"Record creation is disabled in Hub Info.":"Import CSV as new records with fresh canonical IDs.");exportBtn.disabled=false;exportBtn.title="Export / Report — CSV or PDF (tabular list or detail) of browse columns";var testDisabled=!hasForm||w.recordCreationEnabled===false||context.environmentRoot!=="acceptance";randomTestBtn.disabled=testDisabled;fixtureTestBtn.disabled=testDisabled;var testTitle=context.environmentRoot!=="acceptance"?"Test records are Acceptance-only":(hasForm?"Generate test records through the normal CU-backed create path":"A published form design is required");randomTestBtn.title=testTitle;fixtureTestBtn.title=testTitle;editBtn.dataset.formReady=hasForm?"yes":"no";duplicateBtn.dataset.formReady=hasForm?"yes":"no";deleteBtn.dataset.formReady=hasForm?"yes":"no";var gateTitle=!hasForm?(isError?"Couldn't check whether this Hub has a form design (backend error) -- treating as not-ready until this is resolved.":"No form design has been published for this Hub yet -- design and publish one in _form_design before creating records."):(w.recordCreationEnabled===false?"Record creation is disabled in Hub Info.":"");addBtn.title=gateTitle||"Add record";editBtn.title=gateTitle||"Edit selected record";duplicateBtn.title=gateTitle;deleteBtn.title=gateTitle;updateBrowseChrome(id);
      formDesignGateNote.textContent=!hasForm?(isError?"⚠ Couldn't verify form design (error) — Add/Edit/Duplicate/Delete disabled":"⚠ No form design published — Add/Edit/Duplicate/Delete disabled"):(w.recordCreationEnabled===false?"⚠ Record creation disabled in Hub Info — Add/Duplicate/Test Data disabled":"");
      return hasForm;
    }
    applyFormDesignGate();

    function triggerFieldOptions(){
      var fields=(w.formDesign&&Array.isArray(w.formDesign.fields))?w.formDesign.fields:[];
      return fields.filter(function(f){return !f.retired;}).map(function(f){
        var key=String(f.field_key||f.indexed_name||f.name||f.label||"");
        var label=String(f.label||f.name||key);
        return {key:key,label:label};
      }).filter(function(x){return !!x.key;});
    }
    function triggerHelpButtonHtml(topic,title,executorId){
      return '<button type="button" class="help-dot trigger-help-btn" title="'+esc(title||'Help')+'" data-trigger-help="'+esc(topic||'overview')+'"'+(executorId?' data-executor-id="'+esc(executorId)+'"':'')+'>?</button>';
    }
    function triggerHelpContent(topic,executorId){
      var docs={
        overview:{title:'Trigger Definitions',body:'A Trigger Definition is a published, CU-backed rule that maps an attested business event to one or more allowlisted governed executors. A Hub may have multiple triggers. Trigger Definitions contain configuration and executor references only; they cannot contain JavaScript, Lisp, shell, SQL, eval, or uploaded executable code.'},
        browse:{title:'Trigger browse',body:'This browse lists the Trigger Definitions associated with the current Hub. Multiple triggers may listen to the same event. Active triggers are resolved deterministically by priority and then stable trigger identity.'},
        event:{title:'Event',body:'The event determines when a Trigger Definition is considered. On Validate runs after an attested validation request and before the business-record mutation is committed. On Commit runs only after the originating business-record CU has been appended. On Create, Delete, Restore, and Open represent their corresponding governed lifecycle/view events. Event-specific executor restrictions can be enforced by the catalog.'},
        status:{title:'Status',body:'Draft is stored but not eligible to fire. Active is eligible for event resolution. Disabled remains published and auditable but is not eligible to fire. Changing status creates a new governed Trigger Definition state rather than erasing history.'},
        priority:{title:'Priority',body:'Priority controls deterministic ordering when more than one active trigger matches the same event. Lower numeric values run first; ties are resolved by stable trigger identity. Priority does not bypass capability checks or CU attestation.'},
        failure:{title:'Failure policy',body:'Reject operation stops the governed operation when an action fails where the event semantics permit rejection. Record failure and continue retains failure evidence and proceeds to the next permitted action. The policy never suppresses the execution/result CUs.'},
        actions:{title:'Actions',body:'Actions are ordered references to named, versioned executors from the Governed Executor Catalog. The Trigger Definition supplies parameters; it never supplies executable source code. Each invocation is capability checked and produces governed execution evidence.'},
        chain:{title:'Trigger chain',body:'The chain viewer shows the CU history of the published Trigger Definition so you can see exactly which definition/version was authoritative at a point in time.'},
        catalog:{title:'Governed Executor Catalog',body:'The catalog is the allowlisted vocabulary of operations available to Trigger Definitions and other Chandra orchestrators. Executor IDs are versioned. Catalog metadata defines what the operation does, where it is allowed, and its side-effect class.'}
      };
      if(topic==='executor'){
        var spec=window.ceeGovernedExecutorSpec?window.ceeGovernedExecutorSpec(executorId):null;
        if(!spec)return {title:String(executorId||'Executor'),body:'No catalog metadata is available for this executor.'};
        var allowed=Array.isArray(spec.allowed_events)&&spec.allowed_events.length?spec.allowed_events.join(', '):'Not yet restricted by catalog metadata';
        return {title:spec.label||spec.id,body:(spec.description||'Allowlisted governed executor.')+'\n\nAllowed events: '+allowed+'\nSide effect: '+String(spec.side_effect||'unspecified')+'\n\n'+String(spec.governance||'Execution is named, versioned, allowlisted, and CU-attested; arbitrary source code is not accepted.')};
      }
      return docs[topic]||docs.overview;
    }
    function openTriggerHelp(topic,executorId,opener){
      var doc=triggerHelpContent(topic,executorId),old=document.getElementById('trigger-help-overlay');if(old)old.remove();
      var overlay=document.createElement('div');overlay.id='trigger-help-overlay';overlay.style.cssText='position:fixed;inset:0;z-index:100000;background:rgba(0,0,0,.48);display:flex;align-items:center;justify-content:center;padding:24px';
      var panel=document.createElement('div');panel.style.cssText='width:min(620px,92vw);max-height:78vh;overflow:auto;background:var(--bg2);color:var(--text);border:1px solid var(--border2);box-shadow:0 18px 60px rgba(0,0,0,.55);padding:16px;border-radius:4px';
      panel.innerHTML='<div style="display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:10px"><strong>'+esc(doc.title)+'</strong><button type="button" class="btn" id="trigger-help-close">Close</button></div><div style="white-space:pre-wrap;line-height:1.5">'+esc(doc.body)+'</div>';
      overlay.appendChild(panel);document.body.appendChild(overlay);
      function close(){overlay.remove();try{if(opener)opener.focus();}catch(_e){}}
      panel.querySelector('#trigger-help-close').onclick=close;overlay.onclick=function(e){if(e.target===overlay)close();};
    }
    function wireTriggerHelp(root){
      if(!root)return;root.querySelectorAll('[data-trigger-help]').forEach(function(btn){btn.onclick=function(e){e.preventDefault();e.stopPropagation();openTriggerHelp(btn.dataset.triggerHelp,btn.dataset.executorId||'',btn);};});
    }
    function triggerExecutorParameterHtml(executorId,params,index){
      params=params||{};var fields=triggerFieldOptions();
      function fieldSelect(name,value,label){return '<label>'+label+'</label><select class="trigger-action-param" data-param="'+name+'"><option value="">— Select field —</option>'+fields.map(function(f){return '<option value="'+esc(f.key)+'"'+(String(value||"")===f.key?' selected':'')+'>'+esc(f.label)+' · '+esc(f.key)+'</option>';}).join('')+'</select>';}
      if(/^field\./.test(executorId)){
        var html=fieldSelect('target',params.target||params.field,'Target field');
        if(executorId==='field.set-literal@v1')html+='<label>Literal value</label><input class="trigger-action-param" data-param="value" value="'+esc(params.value||'')+'">';
        return html;
      }
      if(executorId==='validation.require@v1')return fieldSelect('field',params.field||params.target,'Required field')+'<label>Message</label><input class="trigger-action-param" data-param="message" value="'+esc(params.message||'This field is required.')+'">';
      if(executorId==='validation.reject@v1')return '<label>Rejection message</label><input class="trigger-action-param" data-param="message" value="'+esc(params.message||'Operation rejected by governed trigger.')+'">';
      return '<div class="small-muted">This executor has no configurable parameters.</div>';
    }
    function triggerActionRowHtml(action,index){
      action=action||{};var ex=String(action.executor||'field.set-literal@v1');
      var catalog=(window.ceeGovernedExecutorCatalog?window.ceeGovernedExecutorCatalog():[]);
      return '<div class="card trigger-action-row" data-index="'+index+'" style="margin:8px 0"><div class="card-body">'+
        '<div style="display:flex;gap:8px;align-items:end"><div class="field" style="flex:1"><label><span class="field-label-help"><span>Governed executor</span>'+triggerHelpButtonHtml('executor','Explain this executor',ex)+'</span></label><select class="trigger-action-executor">'+catalog.map(function(x){return '<option value="'+esc(x.id)+'"'+(x.id===ex?' selected':'')+'>'+esc(x.id)+'</option>';}).join('')+'</select></div>'+
        '<button class="btn trigger-action-up" title="Move up">↑</button><button class="btn trigger-action-down" title="Move down">↓</button><button class="btn danger trigger-action-remove">Remove</button></div>'+
        '<div class="trigger-action-params">'+triggerExecutorParameterHtml(ex,action.parameters||{},index)+'</div></div></div>';
    }
    function triggerDefinitionFromEditor(root,existing){
      var actions=[];root.querySelectorAll('.trigger-action-row').forEach(function(row){var params={};row.querySelectorAll('.trigger-action-param').forEach(function(input){params[input.dataset.param]=input.value;});actions.push({executor:row.querySelector('.trigger-action-executor').value,parameters:params});});
      return {
        contract:'cee-trigger-definition-v1',
        trigger_id:String((existing&&existing.trigger_id)||root.querySelector('#trigger-id').value||''),
        name:root.querySelector('#trigger-name').value.trim()||'Hub Trigger Definition',
        status:root.querySelector('#trigger-status').value,
        event:root.querySelector('#trigger-event').value,
        priority:Number(root.querySelector('#trigger-priority').value||100),
        failure_policy:root.querySelector('#trigger-failure-policy').value,
        conditions:[],actions:actions
      };
    }
    var TRIGGER_SYSTEM_HUB_NAME="_triggers";
    function triggerSystemFormDefinition(parentHubId){
      return {
        name:"Chandra Governed Trigger Definition",
        source:"chandra-system-fixed-trigger-form-v1",
        system_form:true,
        parent_hub_id:String(parentHubId||""),
        fields:[
          {name:"trigger_id",field_key:"trigger_id",indexed_name:"trigger_id",label:"Trigger ID",type:"text",required:true,indexed:true},
          {name:"trigger_name",field_key:"trigger_name",indexed_name:"trigger_name",label:"Name",type:"text",required:true,indexed:true},
          {name:"event",field_key:"event",indexed_name:"event",label:"Event",type:"text",required:true,indexed:true},
          {name:"status",field_key:"status",indexed_name:"status",label:"Status",type:"text",required:true,indexed:true},
          {name:"priority",field_key:"priority",indexed_name:"priority",label:"Priority",type:"integer",required:true,indexed:true},
          {name:"failure_policy",field_key:"failure_policy",indexed_name:"failure_policy",label:"Failure Policy",type:"text",required:true,indexed:false},
          {name:"conditions_json",field_key:"conditions_json",indexed_name:"conditions_json",label:"Conditions",type:"markdown",required:false,indexed:false},
          {name:"actions_json",field_key:"actions_json",indexed_name:"actions_json",label:"Actions",type:"markdown",required:true,indexed:false},
          {name:"executor_contract_version",field_key:"executor_contract_version",indexed_name:"executor_contract_version",label:"Executor Contract",type:"text",required:true,indexed:false},
          {name:"parent_hub_id",field_key:"parent_hub_id",indexed_name:"parent_hub_id",label:"Owning Hub",type:"text",required:true,indexed:true}
        ]
      };
    }
    function triggerSystemDescriptor(parent,hub){
      var hid=String(hub&& (hub.hub_id||hub.id)||"");
      return {id:hid,type:"sub-hub",label:"Governed Triggers",rawLabel:TRIGGER_SYSTEM_HUB_NAME,hubId:hid,levelId:hid,local_hub_id:String(hub&&hub.local_hub_id||""),localHubId:String(hub&&hub.local_hub_id||""),instance_address:parent.owningInstance||parent.instanceBase||"",owningInstance:parent.owningInstance||parent.instanceBase||"",instanceBase:parent.instanceBase||normalizeInstanceBase(parent.owningInstance||""),placementType:"system-child",source:"system-trigger-hub",systemTriggerHub:true,parentHubId:parent.hubId,children:[],status:String(hub&&hub.status||"active").toLowerCase()};
    }
    async function triggerFindSystemHub(parent){
      var base=normalizeInstanceBase(parent.instanceBase||parent.owningInstance||"");
      var listed=await getJson(base+"/api/enterprise/sub-hub/list?level_id="+encodeURIComponent(parent.hubId));
      return (listed.hubs||[]).find(function(h){return String(h.name||"").toLowerCase()===TRIGGER_SYSTEM_HUB_NAME;})||null;
    }
    async function triggerEnsureSystemHub(parent){
      var base=normalizeInstanceBase(parent.instanceBase||parent.owningInstance||"");
      if(!base)throw new Error("No owning instance address for this Hub.");
      var parentInfo=await loadHubInfo(parent);
      var hub=await triggerFindSystemHub(parent);
      if(!hub){
        if(String(parentInfo.status||"active").toLowerCase()==="retired")throw new Error("The owning Hub is retired; its Trigger child Hub cannot be created.");
        var levelNo=(lv&&lv.level_number!=null)?lv.level_number:null;
        var created=await postJson(base+"/api/enterprise/sub-hub/create",{level_id:parent.hubId,level_number:levelNo,target_level_id:parent.hubId,target_level_number:levelNo,name:TRIGGER_SYSTEM_HUB_NAME,description:"System-owned governed Trigger Definitions for "+String(parent.label||parent.hubId),operator:operator()});
        hub=created&&created.hub||{};
        if(!(hub.hub_id||hub.id))hub=await triggerFindSystemHub(parent);
        if(!hub)throw new Error("Trigger child Hub creation succeeded but its canonical Hub identity could not be resolved.");
      }
      var desc=triggerSystemDescriptor(parent,hub);
      if(!model.byId[desc.hubId])register(desc);else Object.assign(model.byId[desc.hubId],desc);
      var form=await getJson(base+"/api/enterprise/hub/form-design/latest?hub_id="+encodeURIComponent(desc.hubId));
      if(!(form&&form.has_form_design&&form.artifact&&Array.isArray(form.artifact.fields)&&form.artifact.fields.length)){
        if(desc.status==="retired"||String(parentInfo.status||"active").toLowerCase()==="retired")throw new Error("The Trigger child Hub is retired and has no fixed Form Definition.");
        var fixed=triggerSystemFormDefinition(parent.hubId);
        await assignAuthoritativeSchemaIds(desc,fixed);
        await postJson(base+"/api/enterprise/hub/form-design/save",{hub_id:desc.hubId,fields_json:JSON.stringify(fixed),loaded_tail_hash:"",operator:operator()});
        try{await initializeHubInfo(desc,"System-owned governed Trigger Definitions. Form Definition is fixed by Chandra.","Governed event-to-executor bindings for "+String(parent.label||parent.hubId));}catch(_infoErr){}
      }
      desc.parentRetired=String(parentInfo.status||"active").toLowerCase()==="retired";
      return desc;
    }
    function triggerRecordToDefinition(r,triggerHub){
      function parseArray(v){if(Array.isArray(v))return v;if(v==null||v==="")return [];try{var x=JSON.parse(String(v));return Array.isArray(x)?x:[];}catch(_e){return [];}}
      return {trigger_id:String(r.trigger_id||r.record_id||r.subject_id||""),name:String(r.trigger_name||r.name||"Governed Trigger"),event:String(r.event||"on-commit"),status:String(r.status||"draft"),priority:Number(r.priority==null?100:r.priority),failure_policy:String(r.failure_policy||"reject"),conditions:parseArray(r.conditions_json),actions:parseArray(r.actions_json),executor_contract_version:String(r.executor_contract_version||"chandra-governed-executor-v1"),parent_hub_id:String(r.parent_hub_id||triggerHub.parentHubId||""),_record_subject_id:String(r.subject_id||""),_record_tail_hash:String(r.tail_hash||r.loaded_tail_hash||""),_trigger_hub_id:triggerHub.hubId};
    }
    async function triggerLoadRecords(triggerHub){
      var base=normalizeInstanceBase(triggerHub.instanceBase||triggerHub.owningInstance||"");
      var j=await getJson(base+"/api/enterprise/records/list?hub_id="+encodeURIComponent(triggerHub.hubId)+"&status=active");
      return (j.records||[]).map(function(r){return triggerRecordToDefinition(r,triggerHub);}).sort(function(a,b){var d=(Number(a.priority)||0)-(Number(b.priority)||0);return d||String(a.trigger_id).localeCompare(String(b.trigger_id));});
    }
    function triggerDefinitionValues(def,parentHubId){
      return {trigger_id:String(def.trigger_id||""),trigger_name:String(def.name||"Governed Trigger"),event:String(def.event||"on-commit"),status:String(def.status||"draft"),priority:Number(def.priority==null?100:def.priority),failure_policy:String(def.failure_policy||"reject"),conditions_json:JSON.stringify(Array.isArray(def.conditions)?def.conditions:[]),actions_json:JSON.stringify(Array.isArray(def.actions)?def.actions:[]),executor_contract_version:String(def.executor_contract_version||"chandra-governed-executor-v1"),parent_hub_id:String(parentHubId||"")};
    }
    async function triggerSaveRecord(parent,triggerHub,def){
      var base=normalizeInstanceBase(parent.instanceBase||parent.owningInstance||"");
      if(triggerHub.parentRetired||triggerHub.status==="retired")throw new Error("The owning Hub is retired; Trigger Definitions are historical/read-only.");
      if(!def.trigger_id)def.trigger_id=newSavedSearchId();
      var values=triggerDefinitionValues(def,parent.hubId);
      if(def._record_subject_id){
        var updated=await postJson(base+"/api/enterprise/records/update",{subject_id:def._record_subject_id,loaded_tail_hash:def._record_tail_hash||"",values:values,operator:operator()});
        return triggerRecordToDefinition(updated.record||{},triggerHub);
      }
      var levelNo=(lv&&lv.level_number!=null)?lv.level_number:null;
      var created=await postJson(base+"/api/enterprise/records/create",{hub_id:triggerHub.hubId,parent_subject_id:null,level_number:levelNo,target_level_number:levelNo,name:"Trigger "+def.trigger_id,values:values,operator:operator()});
      return triggerRecordToDefinition(created.record||{},triggerHub);
    }
    async function openCurrentHubTriggerDefinitionEditor(options){
      options=options||{};
      var d=currentHubDescriptor(),triggerHub=options.triggerHub||await triggerEnsureSystemHub(d),definition=options.definition||{};
      if(options.newDefinition)definition={};
      var actions=Array.isArray(definition.actions)?definition.actions:[];
      var readOnly=!!options.forceReadOnly||!!triggerHub.parentRetired||triggerHub.status==="retired";
      modal('Trigger Definition — '+String(d.label||d.hubId)+(readOnly?' · Read Only':''),
        '<div class="small-muted" style="margin-bottom:10px">Stored as a governed record in the system-owned <b>_triggers</b> child Hub of this Hub. Its Form Definition is fixed by Chandra; only allowlisted governed executors can be selected. '+triggerHelpButtonHtml('overview','What is a Trigger Definition?')+'</div>'+ 
        '<div class="br-field-row"><div class="field"><label>Name</label><input id="trigger-name" value="'+esc(definition.name||'Governed Trigger')+'"></div><div class="field"><label><span class="field-label-help"><span>Status</span>'+triggerHelpButtonHtml('status','Explain Trigger status')+'</span></label><select id="trigger-status"><option value="draft"'+(definition.status==='draft'?' selected':'')+'>Draft</option><option value="active"'+(definition.status==='active'?' selected':'')+'>Active</option><option value="disabled"'+(definition.status==='disabled'?' selected':'')+'>Disabled</option></select></div></div>'+ 
        '<div class="br-field-row"><div class="field"><label><span class="field-label-help"><span>Event</span>'+triggerHelpButtonHtml('event','Explain Trigger events')+'</span></label><select id="trigger-event">'+['on-validate','on-commit','on-create','on-delete','on-restore','on-open'].map(function(v){return '<option value="'+v+'"'+(definition.event===v?' selected':'')+'>'+v+'</option>';}).join('')+'</select></div><div class="field"><label><span class="field-label-help"><span>Priority</span>'+triggerHelpButtonHtml('priority','Explain Trigger priority')+'</span></label><input id="trigger-priority" type="number" value="'+esc(definition.priority==null?100:definition.priority)+'"></div></div>'+ 
        '<div class="field"><label><span class="field-label-help"><span>Failure policy</span>'+triggerHelpButtonHtml('failure','Explain failure policy')+'</span></label><select id="trigger-failure-policy"><option value="reject"'+(definition.failure_policy!=='continue'?' selected':'')+'>Reject operation</option><option value="continue"'+(definition.failure_policy==='continue'?' selected':'')+'>Record failure and continue</option></select></div>'+ 
        '<input id="trigger-id" type="hidden" value="'+esc(definition.trigger_id||'')+'">'+ 
        '<div style="display:flex;justify-content:space-between;align-items:center;margin-top:12px"><div><strong>Actions</strong> '+triggerHelpButtonHtml('actions','Explain governed actions')+'<div class="small-muted">Executed in order after the event has been attested.</div></div><button class="btn" id="trigger-add-action"'+(readOnly?' disabled':'')+'>+ Add Action</button></div>'+ 
        '<div id="trigger-actions">'+actions.map(triggerActionRowHtml).join('')+'</div>'+ 
        '<div class="action-row" style="justify-content:space-between"><button class="btn" id="trigger-view-chain"'+(definition._record_subject_id?'':' disabled')+'>View Chain</button><div><button class="btn" onclick="closeEditModal()">'+(readOnly?'Close':'Cancel')+'</button> '+(readOnly?'':'<button class="btn primary" id="trigger-save">Save / Publish</button>')+'</div></div>');
      var root=document.getElementById('edit-modal'),list=root.querySelector('#trigger-actions');wireTriggerHelp(root);
      function reindex(){Array.from(list.querySelectorAll('.trigger-action-row')).forEach(function(r,i){r.dataset.index=i;});}
      function wireRow(row){var sel=row.querySelector('.trigger-action-executor');wireTriggerHelp(row);if(readOnly){row.querySelectorAll('input,select,button').forEach(function(x){if(!x.classList.contains('trigger-help-btn'))x.disabled=true;});return;}sel.onchange=function(){row.querySelector('.trigger-action-params').innerHTML=triggerExecutorParameterHtml(sel.value,{},Number(row.dataset.index)||0);var hb=row.querySelector('[data-trigger-help="executor"]');if(hb)hb.dataset.executorId=sel.value;};row.querySelector('.trigger-action-remove').onclick=function(){row.remove();reindex();};row.querySelector('.trigger-action-up').onclick=function(){var prev=row.previousElementSibling;if(prev)list.insertBefore(row,prev);reindex();};row.querySelector('.trigger-action-down').onclick=function(){var next=row.nextElementSibling;if(next)list.insertBefore(next,row);reindex();};}
      list.querySelectorAll('.trigger-action-row').forEach(wireRow);
      if(readOnly)root.querySelectorAll('#trigger-name,#trigger-status,#trigger-event,#trigger-priority,#trigger-failure-policy').forEach(function(x){x.disabled=true;});
      else root.querySelector('#trigger-add-action').onclick=function(){var wrap=document.createElement('div');wrap.innerHTML=triggerActionRowHtml({executor:'field.set-literal@v1',parameters:{}},list.children.length);var row=wrap.firstElementChild;list.appendChild(row);wireRow(row);reindex();};
      root.querySelector('#trigger-view-chain').onclick=function(){if(!definition._record_subject_id)return;window.openUniversalChainViewer({base:normalizeInstanceBase(d.instanceBase||d.owningInstance||''),subjectId:definition._record_subject_id,title:'Trigger Definition — '+String(definition.name||definition.trigger_id),detailKind:'generic'});};
      if(!readOnly)root.querySelector('#trigger-save').onclick=async function(){try{var def=triggerDefinitionFromEditor(root,definition);def._record_subject_id=definition._record_subject_id||'';def._record_tail_hash=definition._record_tail_hash||'';if(!def.actions.length)throw new Error('Add at least one governed action before publishing.');this.disabled=true;await triggerSaveRecord(d,triggerHub,def);toast('Trigger Definition published in _triggers.','ok');closeEditModal();openCurrentHubTriggerDefinitionBrowse();}catch(e){toast('Trigger Definition save failed: '+(e.message||e),'err');this.disabled=false;}};
    }
    async function openCurrentHubTriggerDefinitionBrowse(){
      var d=currentHubDescriptor(),safeHub=String(d.hubId||'hub').replace(/[^A-Za-z0-9_-]/g,'_'),id='trigger-definitions-'+safeHub;
      if(document.getElementById(id)){
        setBrowseActive(id);
        var existing=model.browses[id];
        if(existing&&typeof existing._triggerReload==='function')await existing._triggerReload();
        return;
      }
      var el=document.createElement('div');el.className='browse-win';el.id=id;el.style.left='70px';el.style.top='55px';el.style.width='980px';el.style.height='560px';
      el.innerHTML='<div class="browse-hdr"><span class="browse-title">Trigger Definitions</span><span class="browse-scope">'+esc(String(d.label||d.hubId))+'</span><button class="browse-max-btn" title="Maximize browse to canvas" aria-label="Maximize browse">□</button><button class="browse-close">×</button></div>'+ 
        '<div class="browse-tools"><div class="browse-command-group"><button class="icon-toolbar-btn primary trigger-add-btn" title="Create Trigger Definition"><svg viewBox="0 0 20 20"><rect x="3" y="4.5" width="14" height="11" rx="1.5"/><line x1="10" y1="7.5" x2="10" y2="12.5"/><line x1="7.5" y1="10" x2="12.5" y2="10"/></svg><span class="icon-toolbar-label">Add</span></button><button class="icon-toolbar-btn trigger-view-btn" disabled title="View selected Trigger"><svg viewBox="0 0 20 20"><rect x="3" y="4.5" width="14" height="11" rx="1.5"/></svg><span class="icon-toolbar-label">View</span></button><button class="icon-toolbar-btn trigger-edit-btn" disabled title="Edit selected Trigger"><svg viewBox="0 0 20 20"><path d="M12.2 4.2l3.6 3.6-8.4 8.4-4.2 0.7 0.7-4.2z"/></svg><span class="icon-toolbar-label">Edit</span></button><button class="icon-toolbar-btn trigger-duplicate-btn" disabled title="Duplicate selected Trigger"><svg viewBox="0 0 20 20"><rect x="6" y="6" width="10" height="10" rx="1.3"/><path d="M4 12V5.3C4 4.6 4.6 4 5.3 4H12"/></svg><span class="icon-toolbar-label">Duplicate</span></button><button class="icon-toolbar-btn danger trigger-delete-btn" disabled title="Soft-delete selected Trigger"><svg viewBox="0 0 20 20"><rect x="3" y="4.5" width="14" height="11" rx="1.5"/><line x1="7.5" y1="10" x2="12.5" y2="10"/></svg><span class="icon-toolbar-label">Soft-delete</span></button><div class="toolbar-sep"></div><button class="icon-toolbar-btn trigger-refresh-btn" title="Refresh Trigger Definitions"><svg viewBox="0 0 20 20"><path d="M16 10a6 6 0 1 1-1.8-4.3"/><polyline points="16 3.5 16 6.5 13 6.5"/></svg><span class="icon-toolbar-label">Refresh</span></button><button class="icon-toolbar-btn trigger-toggle-btn" disabled title="Enable or disable selected Trigger"><svg viewBox="0 0 20 20"><circle cx="10" cy="10" r="6"/><line x1="10" y1="5" x2="10" y2="10"/></svg><span class="icon-toolbar-label">Enable/Disable</span></button><button class="icon-toolbar-btn trigger-catalog-btn" title="Governed Executor Catalog"><svg viewBox="0 0 20 20"><rect x="3.5" y="3.5" width="13" height="13" rx="1"/><path d="M7 7h6M7 10h6M7 13h4"/></svg><span class="icon-toolbar-label">Catalog</span></button></div><input class="browse-search" placeholder="Search triggers"></div>'+ 
        '<div class="small-muted trigger-scope-note" style="padding:7px 10px;border-bottom:1px solid var(--border)">Loading system-owned <b>_triggers</b> child Hub…</div>'+ 
        '<div class="browse-body"><table class="browse-table"><thead><tr><th style="width:42px"></th><th>Name</th><th>Event</th><th>Status</th><th style="width:85px">Priority</th><th style="width:75px">Actions</th><th style="width:90px">Chain</th></tr></thead><tbody><tr><td colspan="7" class="small-muted" style="padding:18px">Loading…</td></tr></tbody></table></div><div class="browse-statusbar"><span class="browse-status-main">Loading…</span></div>';
      document.getElementById('mdi-layer').appendChild(el);
      var w=model.browses[id]={id:id,title:'Trigger Definitions — '+String(d.label||d.hubId),records:[],selected:-1,triggerBrowse:true,parentHubId:d.hubId,tagged:new Set()};
      renderBrowseChips();setBrowseActive(id);makeDraggable(el,el.querySelector('.browse-hdr'));
      el.querySelector('.browse-max-btn').onclick=function(e){e.stopPropagation();toggleBusinessBrowseSize(id);};
      el.querySelector('.browse-hdr').ondblclick=function(e){if(!e.target.closest('button,label,input'))toggleBusinessBrowseSize(id);};
      el.querySelector('.browse-close').onclick=function(){closeBusinessBrowse(id);};
      if(typeof ceeAddDetachButton==='function')ceeAddDetachButton(id);
      var addBtn=el.querySelector('.trigger-add-btn'),viewBtn=el.querySelector('.trigger-view-btn'),editBtn=el.querySelector('.trigger-edit-btn'),dupBtn=el.querySelector('.trigger-duplicate-btn'),deleteBtn=el.querySelector('.trigger-delete-btn'),refreshBtn=el.querySelector('.trigger-refresh-btn'),toggleBtn=el.querySelector('.trigger-toggle-btn'),catalogBtn=el.querySelector('.trigger-catalog-btn'),search=el.querySelector('.browse-search');
      function selected(){return w.selected>=0&&w.selected<w.records.length?w.records[w.selected]:null;}
      function updateButtons(){var has=!!selected(),ro=!!w.readOnly;viewBtn.disabled=!has;editBtn.disabled=!has||ro;dupBtn.disabled=!has||ro;deleteBtn.disabled=!has||ro;toggleBtn.disabled=!has||ro;addBtn.disabled=ro;}
      function openChain(t){if(!t||!t._record_subject_id)return;window.openUniversalChainViewer({base:normalizeInstanceBase(d.instanceBase||d.owningInstance||''),subjectId:t._record_subject_id,title:'Trigger Definition — '+String(t.name||t.trigger_id),detailKind:'generic'});}
      async function load(){
        var tbody=el.querySelector('tbody'),status=el.querySelector('.browse-status-main'),note=el.querySelector('.trigger-scope-note');tbody.innerHTML='<tr><td colspan="7" class="small-muted" style="padding:18px">Loading Trigger Definitions…</td></tr>';status.textContent='Loading…';
        try{
          var triggerHub=await triggerEnsureSystemHub(d),rows=await triggerLoadRecords(triggerHub);w.triggerHub=triggerHub;w.records=rows;w.readOnly=!!triggerHub.parentRetired||triggerHub.status==='retired';w.selected=rows.length?Math.min(Math.max(w.selected,0),rows.length-1):-1;
          note.innerHTML='Scope: <b>'+esc(String(d.label||d.hubId))+'</b> → system child Hub <b>_triggers</b>. Lazy-created on first Trigger use and retained even when empty. '+triggerHelpButtonHtml('browse','Explain Trigger browse')+(w.readOnly?' <span style="color:var(--red)">Owning Hub is retired; Trigger Definitions are historical/read-only.</span>':'');wireTriggerHelp(el);
          tbody.innerHTML='';
          if(!rows.length)tbody.innerHTML='<tr><td colspan="7" class="small-muted" style="padding:18px;text-align:center">No active Trigger Definitions. The _triggers Hub remains available for future Trigger records.</td></tr>';
          rows.forEach(function(t,i){var tr=document.createElement('tr');tr.dataset.triggerIndex=i;tr.dataset.search=(String(t.name||'')+' '+String(t.event||'')+' '+String(t.status||'')+' '+String(t.priority||'')+' '+String(t.trigger_id||'')).toLowerCase();if(i===w.selected)tr.classList.add('selected');tr.innerHTML='<td class="browse-select-cell"><input type="radio" name="'+id+'-selected" '+(i===w.selected?'checked':'')+' aria-label="Select Trigger"></td><td>'+esc(t.name||t.trigger_id||('Trigger '+(i+1)))+'</td><td>'+esc(t.event||'')+'</td><td>'+esc(t.status||'draft')+'</td><td>'+esc(t.priority==null?'':t.priority)+'</td><td>'+esc(Array.isArray(t.actions)?t.actions.length:0)+'</td><td><button class="btn trigger-row-chain">Chain</button></td>';
            function choose(){w.selected=i;el.querySelectorAll('tbody tr').forEach(function(x){x.classList.remove('selected');});tr.classList.add('selected');tr.querySelector('input[type="radio"]').checked=true;updateButtons();}
            tr.onclick=function(e){if(e.target.closest('button'))return;choose();};tr.ondblclick=function(e){if(e.target.closest('button,input'))return;choose();openCurrentHubTriggerDefinitionEditor({definition:t,triggerHub:triggerHub,forceReadOnly:true});};tr.querySelector('input[type="radio"]').onchange=choose;tr.querySelector('.trigger-row-chain').onclick=function(e){e.stopPropagation();openChain(t);};tbody.appendChild(tr);});
          status.textContent=rows.length+' active Trigger Definition'+(rows.length===1?'':'s')+(w.readOnly?' · read-only':'');updateButtons();
          var q=String(search.value||'').toLowerCase();if(q)search.dispatchEvent(new Event('input'));
        }catch(e){tbody.innerHTML='<tr><td colspan="7" style="padding:18px;color:var(--red)">'+esc(errorText(e))+'</td></tr>';status.textContent='Trigger load failed';w.records=[];w.selected=-1;w.readOnly=true;updateButtons();}
      }
      w._triggerReload=load;
      search.oninput=function(){var q=String(this.value||'').toLowerCase();el.querySelectorAll('tbody tr[data-search]').forEach(function(tr){tr.style.display=tr.dataset.search.indexOf(q)>=0?'':'none';});};
      addBtn.onclick=function(){if(w.readOnly)return;openCurrentHubTriggerDefinitionEditor({newDefinition:true,definition:{},triggerHub:w.triggerHub});};
      viewBtn.onclick=function(){var t=selected();if(t)openCurrentHubTriggerDefinitionEditor({definition:t,triggerHub:w.triggerHub,forceReadOnly:true});};
      editBtn.onclick=function(){var t=selected();if(t&&!w.readOnly)openCurrentHubTriggerDefinitionEditor({definition:t,triggerHub:w.triggerHub});};
      dupBtn.onclick=function(){var t=selected();if(!t||w.readOnly)return;var copy=JSON.parse(JSON.stringify(t));copy.trigger_id='';copy._record_subject_id='';copy._record_tail_hash='';copy.name='Copy of '+String(t.name||'Governed Trigger');copy.status='draft';openCurrentHubTriggerDefinitionEditor({definition:copy,triggerHub:w.triggerHub});};
      deleteBtn.onclick=async function(){var t=selected();if(!t||w.readOnly)return;if(!confirm('Soft delete '+String(t.name||t.trigger_id||'this Trigger Definition')+'?\n\nIts CU history and the _triggers Hub will be preserved.'))return;try{this.disabled=true;await postJson(normalizeInstanceBase(d.instanceBase||d.owningInstance||'')+'/api/enterprise/records/delete',{subject_id:t._record_subject_id,loaded_tail_hash:t._record_tail_hash||'',operator:operator()});toast('Trigger Definition soft-deleted by CU append.','ok');await load();}catch(e){toast('Trigger soft-delete failed: '+(e.message||e),'err');updateButtons();}};
      refreshBtn.onclick=load;
      toggleBtn.onclick=async function(){var t=selected();if(!t||w.readOnly)return;var copy=JSON.parse(JSON.stringify(t));copy.status=String(copy.status||'draft').toLowerCase()==='active'?'disabled':'active';try{this.disabled=true;await triggerSaveRecord(d,w.triggerHub,copy);toast('Trigger '+copy.status+'.','ok');await load();}catch(e){toast('Trigger status update failed: '+(e.message||e),'err');updateButtons();}};
      catalogBtn.onclick=function(){var cat=window.ceeGovernedExecutorCatalog?window.ceeGovernedExecutorCatalog():[];modal('Governed Executor Catalog','<div class="card"><div class="card-body">'+(cat.length?cat.map(function(x){return '<div style="margin:8px 0;padding-bottom:8px;border-bottom:1px solid var(--border)"><b>'+esc(x.label||x.id)+'</b> '+triggerHelpButtonHtml('executor','Explain '+String(x.id),x.id)+'<div class="small-muted">'+esc(x.id)+' · '+esc(x.description||'Allowlisted governed executor')+'</div></div>';}).join(''):'<div class="small-muted">No executors are registered.</div>')+'<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');wireTriggerHelp(document.getElementById('edit-modal'));};
      await load();
    }
    function updateCurrentHubDefinitionMenus(){
      var descriptor=currentHubDescriptor();
      var infoMode=editorMode(descriptor,"hub.view_info","hub.edit_info");
      var schemaMode=editorMode(descriptor,"hub.view_schema","hub.edit_schema");
      hubMenuBtn.title=infoMode==="hidden"?"No Hub-definition commands are available.":"Hub definition commands";formMenuBtn.title=schemaMode==="hidden"?"No Form-definition commands are available.":"Form Definition commands";triggerMenuBtn.title=schemaMode==="hidden"?"No Trigger-definition commands are available.":"Governed Trigger Definitions";
      hubInfoEditBtn.disabled=infoMode!=="edit";
      hubInfoEditBtn.title=infoMode==="edit"?"Edit Hub Info":"Edit permission is not available.";
      hubInfoChainBtn.disabled=infoMode==="hidden";
      
      formDefinitionEditBtn.disabled=schemaMode!=="edit";
      formDefinitionEditBtn.title=schemaMode==="edit"?"Edit Form Definition":"Edit permission is not available.";
      formDefinitionChainBtn.disabled=schemaMode==="hidden";
      triggerMenuBtn.disabled=schemaMode==="hidden";triggerMenuBtn.title=schemaMode==="hidden"?"View permission is not available.":"Browse governed Trigger Definitions";
    }
    hubInfoEditBtn.onclick=function(e){
      e.preventDefault();e.stopPropagation();
      if(this.disabled)return;
      var menu=this.closest(".browse-menu");if(menu)menu.classList.remove("show");
      openHubInfoEditor(currentHubDescriptor());
    };
    hubInfoChainBtn.onclick=function(e){
      e.preventDefault();e.stopPropagation();
      if(this.disabled)return;
      var menu=this.closest(".browse-menu");if(menu)menu.classList.remove("show");
      viewHubChain(currentHubDescriptor(),"hub-info");
    };
    formDefinitionEditBtn.onclick=function(e){
      e.preventDefault();e.stopPropagation();
      if(this.disabled)return;
      var menu=this.closest(".browse-menu");if(menu)menu.classList.remove("show");
      window.openHubFormDesigner(currentHubDescriptor());
    };
    formDefinitionChainBtn.onclick=function(e){
      e.preventDefault();e.stopPropagation();
      if(this.disabled)return;
      var menu=this.closest(".browse-menu");if(menu)menu.classList.remove("show");
      viewHubChain(currentHubDescriptor(),"form-design");
    };
    updateCurrentHubDefinitionMenus();
    addBtn.onclick=function(){openRecordEditor(id,null);};viewBtn.onclick=function(){var records=selectedBrowseRecords(id);if(!records.length){toast("Select or tag at least one record first.","err");return;}var sourceEl=document.getElementById(id),baseLeft=60,baseTop=60;if(sourceEl){baseLeft=(parseInt(sourceEl.style.left,10)||0)+36;baseTop=(parseInt(sourceEl.style.top,10)||0)+36;}records.forEach(function(r,i){openRecordViewer(id,r,{cascadeIndex:i,baseLeft:baseLeft,baseTop:baseTop});});};editBtn.onclick=function(){var r=visibleSelectedBrowseRecord(id);if(r)openRecordEditor(id,r);else toast("Select a record first.","err");};duplicateBtn.onclick=function(){var r=visibleSelectedBrowseRecord(id);if(r)openRecordEditor(id,null,{duplicateSource:r});else toast("Select one active record first.","err");};chainBtn.onclick=function(){var r=visibleSelectedBrowseRecord(id);if(r)openChainBrowse(id,r);else toast("Select a record first.","err");};deleteBtn.onclick=function(){var records=selectedBrowseRecords(id);if(!records.length){toast("Select or tag at least one record first.","err");return;}var allDeleted=records.every(isDeletedBusinessRecord),allActive=records.every(function(x){return !isDeletedBusinessRecord(x);});if(!allDeleted&&!allActive){toast("Tagged records mix active and deleted status \u2014 select records with the same status.","err");return;}if(allDeleted)restoreBusinessRecords(id,records);else softDeleteRecords(id,records);};refreshBtn.onclick=async function(){await refreshBusinessBrowse(id);await applyFormDesignGate();};function wireMenu(buttonSelector,menuSelector){var button=el.querySelector(buttonSelector),menu=el.querySelector(menuSelector);if(!button||!menu)return;button.onclick=function(e){e.stopPropagation();var opening=!menu.classList.contains("show");el.querySelectorAll(".browse-menu.show").forEach(function(other){if(other!==menu)other.classList.remove("show");});menu.classList.toggle("show",opening);};menu.onclick=function(e){e.stopPropagation();};document.addEventListener("click",function(){menu.classList.remove("show");});}wireMenu(".browse-find-menu-btn",".browse-find-menu");wireMenu(".browse-found-set-btn",".browse-found-set-menu");wireMenu(".browse-view-menu-btn",".browse-view-menu");wireMenu(".browse-hub-menu-btn",".browse-hub-menu");wireMenu(".browse-form-menu-btn",".browse-form-menu");wireMenu(".browse-test-menu-btn",".browse-test-menu");wireMenu(".browse-import-export-menu-btn",".browse-import-export-menu");wireMenu(".hub-more-btn",".hub-menu");triggerMenuBtn.onclick=function(e){e.preventDefault();e.stopPropagation();if(this.disabled)return;el.querySelectorAll(".browse-menu.show").forEach(function(m){m.classList.remove("show");});openCurrentHubTriggerDefinitionBrowse();};if(randomTestBtn)randomTestBtn.onclick=function(){var menu=this.closest(".browse-menu");if(menu)menu.classList.remove("show");openRandomTestRecordsDialog(id);};if(fixtureTestBtn)fixtureTestBtn.onclick=function(){var menu=this.closest(".browse-menu");if(menu)menu.classList.remove("show");openTestPlanFixtureDialog(id);};

    async function retireSelectedChildHub(){
      var child=selectedChildHub();
      if(!child){toast("Select a related table first.","err");return;}
      if(String(child.status||"active").toLowerCase()==="retired"){toast("This Hub is already retired.","err");return;}
      var name=String(child.rawLabel||child.label||"selected Hub").replace(/\s*\(sub-hub\).*$/i,"");
      if(!confirm("Retire "+name+"?\n\nNew records will be prohibited. Existing records, relationships, browsing, and CU history will be preserved."))return;
      var base=normalizeInstanceBase(child.instanceBase)||levelBase(lv);
      try{
        var chain=await getJson(base+"/api/enterprise/spoke-chain?subject_id="+encodeURIComponent(child.hubId));
        var lifecycleRows=duplicateChainRows(chain);
        var lifecycleTailRow=lifecycleRows.length?lifecycleRows[0]:null;
        var loadedTail=String((chain&&(chain.tail_cu_id||chain.tail_hash||chain.cu_id))||(lifecycleTailRow&&(lifecycleTailRow.cu_id||lifecycleTailRow.id||lifecycleTailRow.tail_hash))||"");
        if(!loadedTail)throw new Error("The Hub lifecycle tail could not be loaded. Refresh and try again.");
        await postJson(base+"/api/enterprise/sub-hub/retire",{hub_id:child.hubId,local_hub_id:child.localHubId||child.local_hub_id||"",loaded_tail_hash:loadedTail,operator:operator()});
        child.status="retired";
        toast("Hub retired. Existing records and evidence remain available.","ok");
        await reloadChildHubOptions();
      }catch(e){
        if(e&&e.data&&e.data.error==="stale-tail")toast("Hub retirement rejected: lifecycle tail changed. Related Tables will refresh.","err");
        else toast("Hub retirement failed: "+(e.message||e),"err");
        await reloadChildHubOptions();
      }
    }
    function lifecycleMessage(action){
      var child=hubOptions.find(function(h){return h.levelId===w.selectedChildHubId;});
      var name=child?child.label:"selected child Hub";
      var messages={
        edit:"Edit the selected Hub definition and its record form design.",
        remove:"Deactivate only the topology relationship from the current Hub. The child Hub and records remain.",
        purge:"Request governed purge for "+name+": retention, dependency, legal-hold, and approval checks must pass before payload disposition."
      };
      modal(action==="purge"?"Request Purge":action.charAt(0).toUpperCase()+action.slice(1)+" Hub",
        '<div class="card"><div class="card-body"><div class="small-muted">'+esc(messages[action]||"")+'</div>'+
        '<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');
    }
    async function openHubInfoEditor(child){
      if(!child){toast("No Hub context is available.","err");return;}
      var mode=editorMode(child,"hub.view_info","hub.edit_info");
      if(mode==="hidden"){toast("You do not have permission to view Hub Info.","err");return;}
      var readOnly=mode==="view";
      modal("Hub Info",'<div class="small-muted">Loading governed Hub information…</div>');
      var info=await loadHubInfo(child);
      var formName=info.default_form_name||info.name+" Record Form";
      var ro=readOnly?" disabled":"";
      modal("Hub Info — "+esc(info.name)+(readOnly?" · Read Only":""),
        '<div class="card"><div class="card-body"><div class="form-grid">'+
        '<div class="field"><label>Table name</label><input id="hub-info-name" value="'+esc(info.name||"")+'"></div>'+
        '<div class="field"><label>Status</label><select id="hub-info-status"><option value="active"'+(info.status==="active"?" selected":"")+'>Active</option><option value="inactive"'+(info.status==="inactive"?" selected":"")+'>Inactive</option><option value="retired"'+(info.status==="retired"?" selected":"")+'>Retired</option></select></div>'+
        '<div class="field"><label>Singular record label</label><input id="hub-info-singular" value="'+esc(info.singular_label||"")+'"></div>'+
        '<div class="field"><label>Plural record label</label><input id="hub-info-plural" value="'+esc(info.plural_label||"")+'"></div>'+
        '<div class="field full"><label>Description</label>'+markdownTextareaHtml("hub-info-description","description",info.description||"")+'</div>'+
        '<div class="field full"><label>Purpose</label>'+markdownTextareaHtml("hub-info-purpose","purpose",info.purpose||"")+'</div>'+
        '<div class="field"><label>Preferred form name</label><input id="hub-info-form-name" value="'+esc(formName)+'"></div>'+
        '<div class="field"><label>Authority mode</label><select id="hub-info-authority"><option value="inherited"'+(info.authority_mode==="inherited"?" selected":"")+'>Inherited</option><option value="dedicated_certificate"'+(info.authority_mode==="dedicated_certificate"?" selected":"")+'>Dedicated GABA certificate</option><option value="external_authority"'+(info.authority_mode==="external_authority"?" selected":"")+'>External authority</option><option value="multi_authority"'+(info.authority_mode==="multi_authority"?" selected":"")+'>Multi-authority</option></select></div>'+
        '<div class="field"><label>GABA certificate ID</label><input id="hub-info-gaba" value="'+esc(info.gaba_certificate_id||"")+'" placeholder="Optional"></div>'+
        '<div class="field"><label><input type="checkbox" id="hub-info-record-create"'+(info.record_creation_enabled!==false?" checked":"")+'> Record creation enabled</label></div>'+
        '<div class="field"><label><input type="checkbox" id="hub-info-schema-change"'+(info.schema_changes_enabled!==false?" checked":"")+'> Schema changes enabled</label></div>'+
        '</div><div class="small-muted" style="margin-top:8px">Hub ID remains immutable: '+esc(info.hub_id)+'</div>'+
        '<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">'+(readOnly?"Close":"Cancel")+'</button>'+(readOnly?'':'<button class="btn primary" id="save-hub-info">Save Hub Info</button>')+'</div></div></div>');
      if(readOnly){
        document.querySelectorAll("#edit-body input,#edit-body select,#edit-body textarea").forEach(function(el){el.disabled=true;});
        return;
      }
      document.getElementById("save-hub-info").onclick=async function(){
        var button=this;button.disabled=true;button.textContent="Saving…";
        try{
          var name=String((document.getElementById("hub-info-name")||{}).value||"").trim();
          if(!name)throw new Error("Table name is required.");
          var next={
            artifact_type:"hub-info",hub_id:info.hub_id,
            name:name,
            singular_label:String((document.getElementById("hub-info-singular")||{}).value||"").trim()||name,
            plural_label:String((document.getElementById("hub-info-plural")||{}).value||"").trim()||name,
            description:String((document.getElementById("hub-info-description")||{}).value||""),
            purpose:String((document.getElementById("hub-info-purpose")||{}).value||""),
            status:String((document.getElementById("hub-info-status")||{}).value||"active"),
            default_form_name:String((document.getElementById("hub-info-form-name")||{}).value||"").trim()||name+" Record Form",
            authority_mode:String((document.getElementById("hub-info-authority")||{}).value||"inherited"),
            gaba_certificate_id:String((document.getElementById("hub-info-gaba")||{}).value||"").trim()||null,
            authorization_mode:info.authorization_mode||"development-open",
            authorization_provider:info.authorization_provider||null,
            record_creation_enabled:!!document.getElementById("hub-info-record-create").checked,
            schema_changes_enabled:!!document.getElementById("hub-info-schema-change").checked
          };
          var base=normalizeInstanceBase(child.instanceBase)||levelBase(lv);
          var saved=await appendHubInfo(base,next,info.loaded_tail_hash||"","update");
          child.hubInfo=next;child.rawLabel=next.name;child.label=next.name+" (sub-hub)";
          var node=model.byId[child.levelId];
          if(node){
            node.description=next.description;
            if(node.type==="level") applyHubDisplayNameToLevel(node,next.name,next);
            else {node.hubInfo=next;node.rawLabel=next.name;node.label=next.name;}
          }
          closeEditModal();renderTree();renderChildHubList();toast("Hub information saved.","ok");
        }catch(e){button.disabled=false;button.textContent="Save Hub Info";toast(e.message||String(e),"err");}
      };
    }
    function openSelectedHubInfoEditor(){
      var child=selectedChildHub();
      if(!child){toast("Select a related table first.","err");return;}
      return openHubInfoEditor(child);
    }
    function currentHubDescriptor(){
      return {
        levelId:lv.id,
        hubId:hubIdForLevel(lv),
        instanceBase:normalizeInstanceBase(lv.instance_address||""),
        owningInstance:lv.instance_address||"",
        placementType:"current-level",
        source:"browse-toolbar",
        label:lv.rawLabel||lv.label,
        level_number:lv.level_number,
        capabilities:lv.capabilities||{}
      };
    }
    function selectedChildHub(){
      return hubOptions.find(function(h){return h.levelId===w.selectedChildHubId;})||null;
    }
    function openSelectedChildHubFormDesign(){
      var child=selectedChildHub();
      if(!child){toast("Select a related table first.","err");return;}
      window.openHubFormDesigner(child);
    }
    function freshDuplicateForm(sourceForm,newHubId,newName){
      var copy=JSON.parse(JSON.stringify(sourceForm||{}));
      delete copy._read_error;
      delete copy.loaded_tail_hash;
      delete copy.tail;
      delete copy.tail_hash;
      delete copy.cu_id;
      copy.hub_id=newHubId;
      copy.form_design_id="";
      copy.name=newName+" Record Form";
      copy.source="duplicated-table-definition";
      copy.fields=(copy.fields||[]).filter(function(f){return !f.retired;}).map(function(f){
        var next=JSON.parse(JSON.stringify(f));
        next.field_id="";
        delete next._persisted;
        delete next._locked;
        if(Array.isArray(next.options)){
          next.options=next.options.filter(function(o){return !(o&&typeof o==="object"&&String(o.status||"active").toLowerCase()==="retired");})
            .map(function(o,i){
              if(o&&typeof o==="object"){
                return {id:"",label:String(o.label||o.value||o.id||("Option "+(i+1))),indexed_name:String(o.indexed_name||deriveIndexedName(o.label||o.value||("Option "+(i+1)))),status:"active",order:i};
              }
              return {id:"",label:String(o),indexed_name:deriveIndexedName(o),status:"active",order:i};
            });
          next.optionsCsv=next.options.map(function(o){return o.label;}).join(", ");
        }
        return next;
      });
      return copy;
    }
    function duplicateOptionObjects(field){
      return (Array.isArray(field&&field.options)?field.options:[]).map(function(o){
        return (o&&typeof o==="object")?o:{id:"",label:String(o),status:"active"};
      });
    }
    function duplicateFieldKey(field){
      return String((field&&(field.field_key||field.name||field.label))||"");
    }
    function duplicateOptionKey(option){
      return String((option&&(option.label||option.value||option.indexed_name||option.id))||"");
    }
    function duplicateResult(name,status,detail){
      return {name:name,status:status,detail:detail||""};
    }
    function duplicateChainRows(response){
      return response&&Array.isArray(response.chain)?response.chain:
        response&&Array.isArray(response.rows)?response.rows:[];
    }
    async function loadPersistedHubForm(base,hubId){
      var j=await getJson(base+"/api/enterprise/hub/form-design/latest?hub_id="+encodeURIComponent(hubId));
      var artifact=(j&&j.artifact)||decodeArtifact(j)||{};
      artifact.loaded_tail_hash=(j&&(j.tail_hash||j.cu_id))||artifact.loaded_tail_hash||"";
      return {response:j,artifact:artifact};
    }
    function showDuplicateAcceptanceResults(sourceName,newName,results){
      var failures=results.filter(function(r){return r.status!=="pass";});
      var rows=failures.map(function(r){
        var label=r.status==="fail"?"FAILED":"INCONCLUSIVE";
        return '<div class="card" style="margin-bottom:8px"><div class="card-body"><strong>'+esc(label+" — "+r.name)+'</strong>'+
          (r.detail?'<div class="small-muted" style="margin-top:5px">'+esc(r.detail)+'</div>':'')+'</div></div>';
      }).join("");
      var copyText="Duplicate Table Definition — Acceptance Results\n"+
        "Source: "+sourceName+"\n"+
        "Duplicate: "+newName+"\n\n"+
        failures.map(function(r){
          return (r.status==="fail"?"FAILED":"INCONCLUSIVE")+" — "+r.name+
            (r.detail?"\n"+r.detail:"");
        }).join("\n\n");
      modal("Duplicate Table Definition — Acceptance Results",
        '<div class="small-muted" style="margin-bottom:10px">Source: '+esc(sourceName)+' · Duplicate: '+esc(newName)+'</div>'+
        rows+
        '<div class="action-row" style="justify-content:flex-end"><button class="btn" id="copy-duplicate-acceptance-results">Copy Results</button><button class="btn" onclick="closeEditModal()">Close</button></div>');
      var copyBtn=document.getElementById("copy-duplicate-acceptance-results");
      if(copyBtn)copyBtn.onclick=async function(){
        try{
          await navigator.clipboard.writeText(copyText);
          toast("Acceptance results copied.","ok");
        }catch(e){
          var ta=document.createElement("textarea");
          ta.value=copyText;ta.setAttribute("readonly","");
          ta.style.position="fixed";ta.style.opacity="0";
          document.body.appendChild(ta);ta.select();
          var ok=false;
          try{ok=document.execCommand("copy");}catch(ignore){}
          document.body.removeChild(ta);
          toast(ok?"Acceptance results copied.":"Could not copy acceptance results.",ok?"ok":"err");
        }
      };
    }
    async function verifyDuplicateTableDefinition(base,sourceChild,sourceForm,newDescriptor,newHubId){
      var results=[];
      var sourceHubId=String(sourceChild.hubId||sourceChild.hub_id||"");
      results.push(duplicateResult("New immutable Hub ID",
        newHubId&&newHubId!==sourceHubId&&valid256BitId(newHubId)?"pass":"fail",
        newHubId===sourceHubId?"Duplicate reused the source Hub ID.":(!valid256BitId(newHubId)?"Returned Hub ID is not a valid 256-bit Chandra ID.":"")));

      var persistedInfo=null;
      try{
        persistedInfo=await loadHubInfo(newDescriptor);
        results.push(duplicateResult("New Hub Info CU and subject",
          persistedInfo&&persistedInfo.loaded_tail_hash&&String(persistedInfo.hub_id||"")===newHubId?"pass":"fail",
          persistedInfo&&persistedInfo.loaded_tail_hash?"":"No persisted Hub Info tail was returned for "+hubInfoSubject(newHubId)+"."));
      }catch(e){
        results.push(duplicateResult("New Hub Info CU and subject","inconclusive",e.message||String(e)));
      }

      var persistedForm=null,formResponse=null;
      try{
        var loaded=await loadPersistedHubForm(base,newHubId);
        persistedForm=loaded.artifact;formResponse=loaded.response;
        var formSubjectOk=!!(persistedForm&&Array.isArray(persistedForm.fields)&&persistedForm.loaded_tail_hash);
        results.push(duplicateResult("New form-design subject and initial CU",
          formSubjectOk?"pass":"fail",
          formSubjectOk?"":"No persisted Form Definition tail was returned for "+newHubId+"::form-design."));
      }catch(e){
        results.push(duplicateResult("New form-design subject and initial CU","inconclusive",e.message||String(e)));
      }

      if(persistedForm){
        var sourceFormId=String(sourceForm.form_design_id||"");
        var newFormId=String(persistedForm.form_design_id||"");
        results.push(duplicateResult("New form ID",
          valid256BitId(newFormId)&&newFormId!==sourceFormId?"pass":"fail",
          !valid256BitId(newFormId)?"Persisted form ID is not a valid 256-bit Chandra ID.":
            (newFormId===sourceFormId?"Duplicate reused the source form ID.":"")));

        var sourceActive=(sourceForm.fields||[]).filter(function(f){return !fieldIsRetired(f);});
        var sourceRetired=(sourceForm.fields||[]).filter(function(f){return f.retired||String(f.status||"active").toLowerCase()==="retired";});
        var targetFields=persistedForm.fields||[];
        var targetByKey={};targetFields.forEach(function(f){targetByKey[duplicateFieldKey(f)]=f;});

        var fieldIdProblems=[];
        sourceActive.forEach(function(sf){
          var tf=targetByKey[duplicateFieldKey(sf)];
          if(!tf)fieldIdProblems.push(duplicateFieldKey(sf)+": missing");
          else if(!valid256BitId(tf.field_id))fieldIdProblems.push(duplicateFieldKey(sf)+": invalid new field ID");
          else if(String(tf.field_id)===String(sf.field_id||""))fieldIdProblems.push(duplicateFieldKey(sf)+": reused source field ID");
        });
        if(targetFields.length!==sourceActive.length)fieldIdProblems.push("Expected "+sourceActive.length+" active fields; found "+targetFields.length+".");
        results.push(duplicateResult("New field IDs for every copied active field",
          fieldIdProblems.length?"fail":"pass",fieldIdProblems.join("; ")));

        var retiredFieldLeaks=sourceRetired.map(duplicateFieldKey).filter(function(k){return k&&targetByKey[k];});
        results.push(duplicateResult("Retired fields excluded",
          retiredFieldLeaks.length?"fail":"pass",
          retiredFieldLeaks.length?"Retired fields copied: "+retiredFieldLeaks.join(", "):""));

        var optionProblems=[],retiredOptionLeaks=[];
        sourceActive.forEach(function(sf){
          var tf=targetByKey[duplicateFieldKey(sf)];
          if(!tf)return;
          var sourceOptions=duplicateOptionObjects(sf);
          var sourceActiveOptions=sourceOptions.filter(function(o){return String(o.status||"active").toLowerCase()!=="retired";});
          var sourceRetiredOptions=sourceOptions.filter(function(o){return String(o.status||"active").toLowerCase()==="retired";});
          var targetOptions=duplicateOptionObjects(tf);
          var targetByLabel={};targetOptions.forEach(function(o){targetByLabel[duplicateOptionKey(o)]=o;});
          sourceActiveOptions.forEach(function(so){
            var key=duplicateOptionKey(so),to=targetByLabel[key];
            if(!to)optionProblems.push(duplicateFieldKey(sf)+" / "+key+": missing");
            else if(!valid256BitId(String(to.id||"")))optionProblems.push(duplicateFieldKey(sf)+" / "+key+": option ID is not a durable 256-bit ID");
            else if(String(to.id)===String(so.id||""))optionProblems.push(duplicateFieldKey(sf)+" / "+key+": reused source option ID");
          });
          if(targetOptions.length!==sourceActiveOptions.length){
            optionProblems.push(duplicateFieldKey(sf)+": expected "+sourceActiveOptions.length+" active options; found "+targetOptions.length);
          }
          sourceRetiredOptions.forEach(function(ro){
            var key=duplicateOptionKey(ro);
            if(key&&targetByLabel[key])retiredOptionLeaks.push(duplicateFieldKey(sf)+" / "+key);
          });
        });
        results.push(duplicateResult("New durable option IDs for copied active options",
          optionProblems.length?"fail":"pass",optionProblems.join("; ")));
        results.push(duplicateResult("Retired select options excluded",
          retiredOptionLeaks.length?"fail":"pass",
          retiredOptionLeaks.length?"Retired options copied: "+retiredOptionLeaks.join(", "):""));
      }else{
        results.push(duplicateResult("New form ID","inconclusive","Persisted Form Definition could not be loaded."));
        results.push(duplicateResult("New field IDs for every copied active field","inconclusive","Persisted Form Definition could not be loaded."));
        results.push(duplicateResult("Retired fields excluded","inconclusive","Persisted Form Definition could not be loaded."));
        results.push(duplicateResult("New durable option IDs for copied active options","inconclusive","Persisted Form Definition could not be loaded."));
        results.push(duplicateResult("Retired select options excluded","inconclusive","Persisted Form Definition could not be loaded."));
      }

      try{
        var records=normalizeRecords(await getJson(base+"/api/enterprise/records/list?hub_id="+encodeURIComponent(newHubId)));
        results.push(duplicateResult("No business records copied",
          records.length===0?"pass":"fail",
          records.length?"Duplicate contains "+records.length+" record(s).":""));
      }catch(e){
        results.push(duplicateResult("No business records copied","inconclusive",e.message||String(e)));
      }

      try{
        var infoChain=duplicateChainRows(await getJson(base+"/api/enterprise/spoke-chain?subject_id="+encodeURIComponent(hubInfoSubject(newHubId))));
        var formChain=duplicateChainRows(await getJson(base+"/api/enterprise/spoke-chain?subject_id="+encodeURIComponent(newHubId+"::form-design")));
        var clean=infoChain.length===1&&formChain.length===1;
        results.push(duplicateResult("No prior CU history copied",
          clean?"pass":"fail",
          clean?"":"Expected one initial CU for each new subject; Hub Info returned "+infoChain.length+" and Form Definition returned "+formChain.length+"."));
      }catch(e){
        results.push(duplicateResult("No prior CU history copied","inconclusive",e.message||String(e)));
      }

      return results;
    }
    async function resolvePersistedDuplicateHub(base,ownerHubId,name,createResult,sourceHubId){
      var direct=createResult&&(createResult.hub||createResult.data||createResult)||{};
      var directId=String(direct.hub_id||direct.id||createResult&&createResult.hub_id||createResult&&createResult.id||"");
      var listed=null,hubs=[];
      try{
        listed=await getJson(base+"/api/enterprise/sub-hub/list?level_id="+encodeURIComponent(ownerHubId));
        hubs=(listed&&Array.isArray(listed.hubs))?listed.hubs:[];
      }catch(e){
        console.warn("Duplicate Hub catalog refresh failed after successful create",e);
      }
      var byReturnedId=hubs.filter(function(h){
        return directId&&String(h&&h.hub_id||h&&h.id||"")===directId;
      });
      if(byReturnedId.length)return byReturnedId[0];
      var exact=hubs.filter(function(h){
        var id=String(h&&h.hub_id||h&&h.id||"");
        return id&&id!==String(sourceHubId||"")&&String(h.name||"")===String(name);
      });
      if(exact.length){
        exact.sort(function(a,b){
          return String(b.created_at||b.updated_at||b.hub_id||b.id).localeCompare(String(a.created_at||a.updated_at||a.hub_id||a.id));
        });
        return exact[0];
      }
      if(directId)return {hub_id:directId,name:direct.name||name,_identity_projection_incomplete:true};
      throw new Error("Create succeeded, but the backend returned no usable Hub identifier and the new Hub could not be found in the sub-hub catalog.");
    }
    async function duplicateSelectedTableDefinition(){
      var child=selectedChildHub();
      if(!child){toast("Select a related table first.","err");return;}
      var sourceForm=await businessFormFor(child.levelId);
      if(!sourceForm||sourceForm._read_error||!Array.isArray(sourceForm.fields)||!sourceForm.fields.length){
        toast("The selected table has no published definition to duplicate.","err");return;
      }
      var defaultName=String(child.label||"Table").replace(/\s+\(sub-hub\)$/,"")+" Copy";
      modal("Duplicate Table Definition",
        '<div class="card"><div class="card-body">'+
        '<div class="small-muted" style="margin-bottom:10px">Creates a new governed Hub and copies only the published table definition. Business records and CU history are not copied.</div>'+
        '<div class="field full"><label>New table name</label><input id="duplicate-table-name" value="'+esc(defaultName)+'"></div>'+
        '<div class="card" style="margin-top:12px"><div class="card-hdr">Automated Acceptance Verification</div><div class="card-body">'+
        '<div class="small-muted">After the duplicate is persisted, CEE will verify fresh Hub, form, field, and option identities; retired-element exclusion; zero copied records; and clean initial CU subjects. Successful verification produces a brief confirmation. Failures or unverifiable checks open a detailed report.</div>'+
        '</div></div>'+
        '<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Cancel</button><button class="btn primary" id="confirm-duplicate-table">Duplicate Definition</button></div>'+
        '</div></div>');
      document.getElementById("confirm-duplicate-table").onclick=async function(){
        var name=String((document.getElementById("duplicate-table-name")||{}).value||"").trim();
        if(!name){toast("Enter a table name.","err");return;}
        var button=this;button.disabled=true;button.textContent="Duplicating…";
        try{
          var base=levelBase(lv),ownerHubId=hubIdForLevel(lv);
          var createResult=await postJson(base+"/api/enterprise/sub-hub/create",{
            level_id:ownerHubId,level_number:lv.level_number,
            target_level_id:ownerHubId,target_level_number:lv.level_number,
            name:name,
            description:"Duplicated table definition from "+String(child.label||child.hubId),
            operator:operator()
          });
          var persistedHub=await resolvePersistedDuplicateHub(base,ownerHubId,name,createResult,child.hubId||child.hub_id||"");
          var newHubId=String(persistedHub.hub_id||persistedHub.id||"");
          if(!newHubId)throw new Error("Create succeeded, but no Hub identifier was available for the duplicate.");
          var descriptor={
            id:newHubId,type:"sub-hub",label:name,rawLabel:name,
            local_hub_id:String(persistedHub.local_hub_id||""),
            business_hub_id:newHubId,hubId:newHubId,levelId:newHubId,
            instance_address:lv.instance_address,owningInstance:lv.instance_address,
            placementType:"same-level",source:"duplicate-table-definition",children:[]
          };
          register(descriptor);
          var sourceInfo=await loadHubInfo(child);
          await initializeHubInfo(descriptor,sourceInfo.description||("Duplicated from "+String(child.label||child.hubId)),sourceInfo.purpose||"");
          var form=freshDuplicateForm(sourceForm,newHubId,name);
          await assignAuthoritativeSchemaIds(descriptor,form);
          var saveResult=await postJson(base+"/api/enterprise/hub/form-design/save",{
            hub_id:newHubId,
            fields_json:JSON.stringify(form),
            loaded_tail_hash:"",
            operator:operator()
          });
          if(!saveResult||saveResult.ok!==true)throw new Error((saveResult&&(saveResult.error||saveResult.message))||"Form definition copy failed.");
          var acceptanceResults=await verifyDuplicateTableDefinition(base,child,sourceForm,descriptor,newHubId);
          closeEditModal();
          await reloadChildHubOptions();
          w.selectedChildHubId=newHubId;
          renderChildHubList();
          var acceptanceProblems=acceptanceResults.filter(function(r){return r.status!=="pass";});
          if(acceptanceProblems.length){
            showDuplicateAcceptanceResults(String(child.label||child.hubId),name,acceptanceResults);
          }else{
            toast("Duplicate definition passed all automated acceptance checks.","ok");
            window.openHubFormDesigner(descriptor);
          }
        }catch(e){
          button.disabled=false;button.textContent="Duplicate Definition";
          toast("Duplicate table failed: "+(e.message||e),"err");
        }
      };
    }
    function historyValue(value){
      if(value===null||value===undefined||value==="")return "—";
      if(typeof value==="boolean")return value?"True":"False";
      if(Array.isArray(value))return value.length?value.join(", "):"—";
      if(typeof value==="object")return JSON.stringify(value,null,2);
      return String(value);
    }
    function historyField(label,value,full){
      return '<div class="artifact-ro-field'+(full?' full':'')+'"><div class="artifact-ro-label">'+esc(label)+'</div><div class="artifact-ro-value">'+esc(historyValue(value))+'</div></div>';
    }
    /* v31c141 (claude): form_design_id, hub_id, and every field_id are
       stable across ALL CU versions of the same form -- editing a field
       doesn't reissue its ID. Clicking through chain entries whose content
       happens to be identical (or whose only difference is deep in an
       options array) looked like nothing had swapped, because the one
       thing visibly at the top -- the identity block -- never changes
       between versions by design. This banner surfaces what's actually
       version-specific: the CU id, who published it, and when. */
    function historyCuBanner(row){
      var cuId=row.cu_id||row.id||"",operator=row.operator||"",timestampInfo=historyTimestampInfo(row),when=timestampInfo.text,tail=row.tail_hash||row.cu_id||row.id||"";
      return '<div class="artifact-cu-banner" style="border:1px solid var(--gold);border-radius:4px;padding:8px 10px;margin-bottom:12px;display:flex;flex-wrap:wrap;gap:14px;align-items:baseline">'+
        '<div><span class="small-muted">CU</span> <span class="tail-hash">'+esc(cuId||"—")+'</span></div>'+ 
        (operator?'<div><span class="small-muted">Operator</span> '+esc(operator)+'</div>':'')+
        (when?'<div><span class="small-muted">Published</span> '+esc(when)+(timestampInfo.source==="uuidv7"?' <span class="small-muted">(derived from UUIDv7 CU ID)</span>':'')+'</div>':'<div class="small-muted">Timestamp unavailable: no explicit timestamp or valid UUIDv7 CU ID.</div>')+
        (tail&&tail!==cuId?'<div><span class="small-muted">Tail</span> <span class="tail-hash">'+esc(tail)+'</span></div>':'')+
      '</div>';
    }
    function renderHubInfoHistoryArtifact(artifact,subjectId,row){
      artifact=artifact||{};
      return '<div class="card"><div class="card-body">'+
        historyCuBanner(row)+
        '<div style="display:flex;justify-content:space-between;gap:12px;align-items:flex-start;margin-bottom:10px"><div><strong>'+esc(artifact.name||"Hub Info")+'</strong><div class="small-muted">Read-only historical Hub control record</div></div><span class="small-muted">'+esc(artifact.artifact_type||row.artifact_type||"hub-info")+'</span></div>'+
        '<div class="artifact-ro-grid">'+
          historyField("Table name",artifact.name)+historyField("Status",artifact.status)+
          historyField("Singular label",artifact.singular_label)+historyField("Plural label",artifact.plural_label)+
          historyField("Description",artifact.description,true)+historyField("Purpose",artifact.purpose,true)+
          historyField("Preferred form name",artifact.default_form_name)+historyField("Authority mode",artifact.authority_mode)+
          historyField("GABA certificate ID",artifact.gaba_certificate_id)+historyField("Authorization mode",artifact.authorization_mode)+
          historyField("Authorization provider",artifact.authorization_provider)+historyField("Record creation enabled",artifact.record_creation_enabled)+
          historyField("Schema changes enabled",artifact.schema_changes_enabled)+historyField("Immutable Hub ID",artifact.hub_id||subjectId.replace(/::hub-info$/,""),true)+
        '</div></div></div>';
    }
    function renderFormDesignHistoryArtifact(artifact,subjectId,row){
      artifact=artifact||{};
      var fields=Array.isArray(artifact.fields)?artifact.fields:[];
      var fieldHtml=fields.map(function(f,i){
        var options=Array.isArray(f.options)?f.options:[];
        var opts=options.map(function(o,oi){
          if(o&&typeof o==="object")return esc(String(o.label||o.value||o.id||("Option "+(oi+1))))+' <span class="small-muted">[ID: '+esc(String(o.id===undefined?"—":o.id))+']'+(o.status?' · '+esc(o.status):'')+'</span>';
          return esc(String(o));
        }).join('<br>');
        return '<div class="artifact-form-field'+(f.retired||String(f.status||"").toLowerCase()==="retired"?' retired':'')+'">'+
          '<div class="artifact-form-field-head"><div><strong>'+esc(f.label||f.name||("Field "+(i+1)))+'</strong><div class="small-muted">'+esc(f.name||f.field_key||"")+'</div></div><div class="small-muted">'+esc(f.type||"text")+(f.indexed?' · indexed':'')+(f.required?' · required':'')+'</div></div>'+
          '<div class="artifact-ro-grid" style="margin-top:8px">'+historyField("Field ID",f.field_id||f.id)+historyField("Status",f.status||(f.retired?"retired":"active"))+historyField("Help",f.help||f.description,true)+'</div>'+
          (options.length?'<div class="artifact-option-list"><div class="artifact-ro-label">Select options</div>'+opts+'</div>':'')+
        '</div>';
      }).join("");
      return '<div class="card"><div class="card-body">'+
        historyCuBanner(row)+
        '<div style="display:flex;justify-content:space-between;gap:12px;align-items:flex-start;margin-bottom:10px"><div><strong>'+esc(artifact.name||"Form Definition")+'</strong><div class="small-muted">Read-only historical form design · '+fields.length+' field'+(fields.length===1?'':'s')+'</div></div><span class="small-muted">'+esc(artifact.artifact_type||row.artifact_type||"form-design")+'</span></div>'+
        '<div class="artifact-ro-grid" style="margin-bottom:10px">'+historyField("Form design ID",artifact.form_design_id||artifact.id)+historyField("Hub ID",artifact.hub_id||subjectId.replace(/::form-design$/,""))+historyField("Description",artifact.description,true)+'</div>'+
        (fieldHtml||'<div class="small-muted">This CU contains no form fields.</div>')+
      '</div></div>';
    }
    function uuidV7DateFromCuId(cuId){
      var compact=String(cuId||"").replace(/-/g,"").toLowerCase();
      if(!/^[0-9a-f]{32}$/.test(compact)||compact.charAt(12)!=="7")return null;
      var milliseconds=parseInt(compact.slice(0,12),16);
      if(!Number.isFinite(milliseconds))return null;
      var date=new Date(milliseconds);
      return isNaN(date.getTime())?null:date;
    }
    function historyTimestampInfo(row){
      var timestamp=row.created_at||row.timestamp||row.published_at||"";
      if(timestamp){
        var numeric=Number(timestamp),explicitDate=Number.isFinite(numeric)?new Date(numeric):new Date(timestamp);
        return {text:isNaN(explicitDate.getTime())?String(timestamp):explicitDate.toLocaleString(),source:"explicit"};
      }
      var derivedDate=uuidV7DateFromCuId(row.cu_id||row.id||"");
      return derivedDate?{text:derivedDate.toLocaleString(),source:"uuidv7"}:{text:"",source:"none"};
    }
    function normalizeHistoryTimestamp(row){return historyTimestampInfo(row).text;}
    function initializeArtifactHistorySplitter(shell){
      var split=shell.querySelector(".artifact-history-split"),bar=shell.querySelector(".artifact-history-splitter");
      if(!split||!bar)return;
      var dragging=false;
      bar.addEventListener("pointerdown",function(e){dragging=true;bar.setPointerCapture(e.pointerId);e.preventDefault();});
      bar.addEventListener("pointermove",function(e){
        if(!dragging||window.matchMedia("(max-width:800px)").matches)return;
        var r=split.getBoundingClientRect(),x=Math.max(360,Math.min(r.width-260,e.clientX-r.left));
        split.style.gridTemplateColumns=x+"px 7px minmax(260px,1fr)";
      });
      bar.addEventListener("pointerup",function(){dragging=false;});
      bar.addEventListener("pointercancel",function(){dragging=false;});
      bar.addEventListener("dblclick",function(){split.style.gridTemplateColumns="minmax(420px,3fr) 7px minmax(280px,2fr)";});
    }
    async function viewHubChain(child,kind){
      if(!child){toast("No Hub context is available.","err");return;}
      var base=normalizeInstanceBase(child.instanceBase)||levelBase(lv);
      var isInfo=kind==="hub-info";
      var subjectId=isInfo?hubInfoSubject(child.hubId):(child.hubId+"::form-design");
      return openUniversalChainViewer({
        parentWinId:id,base:base,subjectId:subjectId,
        title:(isInfo?"Hub Info — ":"Form Definition — ")+child.label,
        detailKind:isInfo?"hub-info":"form-design"
      });
    }
    function viewSelectedHubChain(kind){
      var child=selectedChildHub();
      if(!child){toast("Select a related table first.","err");return;}
      return viewHubChain(child,kind);
    }
    el.querySelector(".hub-add-btn").onclick=function(){openAddSubHubDialog(levelId, reloadChildHubOptions, id);};
    el.querySelector(".hub-info-btn").onclick=function(e){
      e.preventDefault();e.stopPropagation();if(e.stopImmediatePropagation)e.stopImmediatePropagation();
      el.querySelector(".hub-menu").classList.remove("show");
      openSelectedHubInfoEditor();
      return false;
    };
    el.querySelector(".hub-edit-btn").onclick=function(e){
      e.preventDefault();e.stopPropagation();if(e.stopImmediatePropagation)e.stopImmediatePropagation();
      el.querySelector(".hub-menu").classList.remove("show");
      openSelectedChildHubFormDesign();
      return false;
    };
    el.querySelector(".hub-duplicate-btn").onclick=duplicateSelectedTableDefinition;
    el.querySelector(".hub-info-chain-btn").onclick=function(e){
      e.preventDefault();e.stopPropagation();
      el.querySelector(".hub-menu").classList.remove("show");
      viewSelectedHubChain("hub-info");
    };
    el.querySelector(".hub-form-chain-btn").onclick=function(e){
      e.preventDefault();e.stopPropagation();
      el.querySelector(".hub-menu").classList.remove("show");
      viewSelectedHubChain("form-design");
    };
    el.querySelector(".hub-remove-btn").onclick=function(){lifecycleMessage("remove");};
    el.querySelector(".hub-retire-btn").onclick=retireSelectedChildHub;
    el.querySelector(".hub-purge-btn").onclick=function(){lifecycleMessage("purge");};
    makeDraggable(el,el.querySelector(".browse-hdr"));
    renderBrowseChips();refreshBusinessBrowse(id);setBrowseActive(id);
  }
  /* looksLikeLegacyLevelMetadataForm removed here (v31c3) -- see the
     comment at its former call site in openEditor's form-design branch
     for why it was a guaranteed false positive under the corrected
     architecture. */

  /* v31 (claude): starterBusinessForm is no longer an automatic fallback
     used to silently paper over a missing form design -- it's now just
     a starting template offered inside the new Define Form dialog
     (openDefineFormDialog), which the user can edit before publishing.
     The actual gate (does this Hub have a real form-design CU yet) is
     enforced server-side in crud-create-spoke-record and mirrored here
     by businessFormFor returning null rather than ever inventing one. */
  function starterBusinessForm(levelId){
    return {
      name:(model.byId[levelId].rawLabel||"Level")+" Business Record Form",
      source:"business-form-starter-template",
      fields:[
        {name:"name",label:"Name",type:"text",required:true,indexed:true},
        {name:"status",label:"Status",type:"select",required:false,indexed:true,options:["Active","Suspended","Retired"]},
        {name:"description",label:"Description",type:"markdown",required:false,indexed:false}
      ]
    };
  }

  /* v31 (claude): rewired onto /api/enterprise/hub/form-design/latest
     (ent-crud.lisp v3, crud-hub-form-design-subject-id's uniform
     per-hub convention -- hub_id::form-design -- used for a Level's own
     Hub and any sub-hub alike). Returns null when no form design has
     ever been published yet -- callers MUST handle that by prompting
     to define one (openDefineFormDialog), not by inventing a starter
     form transparently the way this used to. */
  /* claude (2026-07-19): legacy_subject_id REMOVED. Confirmed live: it
     silently triggered crud-promote-legacy-form-design on the backend --
     a GET request quietly writing a real CU, materializing whatever sat
     in the legacy business_form_design_subject_id subject into
     _form_design with zero human review. For at least one hub, that
     legacy content turned out to be the Level's own PERSONALITY_LEVEL_
     FORMS metadata (Canonical Label, Internal Term, etc.) -- accidentally
     rendered as if it were a business-record schema. Same class of bug
     as openEditor's now-removed fallback, just routed through a real
     backend write instead of client-side fabrication -- and worse, since
     a read endpoint should never have a mutating side effect at all.
     loadSpoke (the Form Designer's read) never sent this parameter and
     never triggered it -- that asymmetry is exactly why the Form
     Designer correctly showed empty while this function showed a full
     phantom form for the same hub. Removing it makes both paths
     identical: _form_design is _form_design, personality files are
     never consulted, full stop -- per explicit design direction. */
  async function canonicalHubFormWithLegacyMigration(lv,hubId,base){
    var canonicalUrl=base+"/api/enterprise/hub/form-design/latest?hub_id="+encodeURIComponent(hubId);
    var canonical=await getJson(canonicalUrl);
    if(canonical && canonical.has_form_design && canonical.artifact &&
       Array.isArray(canonical.artifact.fields) && canonical.artifact.fields.length){
      return canonical;
    }

    var localHubId=String(lv.local_hub_id||lv.localHubId||"");
    if(!localHubId || localHubId===String(hubId))return canonical;

    var legacy=await getJson(base+"/api/enterprise/hub/form-design/latest?hub_id="+encodeURIComponent(localHubId));
    if(!(legacy && legacy.has_form_design && legacy.artifact &&
         Array.isArray(legacy.artifact.fields) && legacy.artifact.fields.length)){
      return canonical;
    }

    var migratedArtifact=JSON.parse(JSON.stringify(legacy.artifact));
    migratedArtifact.hub_id=hubId;
    migratedArtifact.migrated_from_local_hub_id=localHubId;
    migratedArtifact.migration_reason="canonical-sub-hub-identity";
    migratedArtifact.loaded_tail_hash="";

    var saved=await postJson(base+"/api/enterprise/hub/form-design/save",{
      hub_id:hubId,
      fields_json:JSON.stringify(migratedArtifact),
      loaded_tail_hash:"",
      operator:operator()
    });
    console.info("Migrated legacy local-ID Form Definition to canonical Hub subject",{
      canonical_hub_id:hubId,
      local_hub_id:localHubId,
      source_tail_hash:legacy.tail_hash||legacy.cu_id||"",
      result:saved
    });
    return await getJson(canonicalUrl);
  }
  async function businessFormFor(levelId){
    var lv=model.byId[levelId]||{};
    var hubId=hubIdForLevel(lv);
    var base=levelBase(lv);
    if(!hubId||!base) return null;
    try{
      var j=await canonicalHubFormWithLegacyMigration(lv,hubId,base);
      if(j && j.has_form_design && j.artifact && Array.isArray(j.artifact.fields) && j.artifact.fields.length){
        var form=ensureDraftSchemaIds(j.artifact);
        form.source="hub-form-design-cu";
        form.hub_id=hubId;
        form.loaded_tail_hash=j.tail_hash||j.cu_id||form.loaded_tail_hash||"";
        return form;
      }
    }catch(e){
      console.warn("Hub form-design read failed",{level_id:levelId,hub_id:hubId,instance:base,error:e});
      autoFileBugReport({
        title:"Hub form-design read failed for "+(lv.rawLabel||lv.label||levelId),
        balloon:"Couldn't load the form design for "+(lv.rawLabel||lv.label||"this Hub")+" -- this is a backend error, not a missing form. Filed a bug report.",
        severity:"High",
        context_id:levelId,
        detail:{level_id:levelId,hub_id:hubId,instance:base,error:String((e&&e.message)||e)}
      });
      return {_read_error:true,_read_error_detail:String((e&&e.message)||e)};
    }
    return null;
  }
  /* v18 (claude): mirrors crud-coerce-text-case (ent-crud.lisp) for immediate feedback
     while typing. Backend is still authoritative -- this is UX, not enforcement, same
     split as everything else here (client lock/preview, server the actual gate). */
  function applyTextCase(v,mode){
    if(!v||!mode||mode==="none")return v;
    if(mode==="upper")return v.toUpperCase();
    if(mode==="lower")return v.toLowerCase();
    if(mode==="title")return v.split(" ").map(function(w){return w?w.charAt(0).toUpperCase()+w.slice(1).toLowerCase():w;}).join(" ");
    return v;
  }
  /* v31c135 (claude): canonicalizes a date value to fixed-width YYYY-MM-DD
     for the <input type="date"> value attribute, which the browser rejects
     silently (renders blank) unless the string is already exactly that
     shape. Salvages legacy freeform values from before this field had a
     real date input; genuinely unparseable input becomes "" rather than
     surfacing garbage in a date picker. */
  function isoDateValue(v){
    var s=String(v==null?"":v).trim();
    if(!s)return "";
    if(/^\d{4}-\d{2}-\d{2}$/.test(s))return s;
    var d=new Date(s);
    if(isNaN(d.getTime()))return "";
    return d.toISOString().slice(0,10);
  }
  function integerListValues(value){
    if(value===null||value===undefined||value==="")return [];
    if(Array.isArray(value)){
      return value.map(function(x){return Number(x);}).filter(function(x){return Number.isFinite(x);});
    }
    var s=String(value).trim();
    if(!s)return [];
    if((s[0]==="["&&s[s.length-1]==="]")||(s[0]==="{"&&s[s.length-1]==="}")){
      s=s.slice(1,-1);
    }
    return s.split(",").map(function(x){return Number(String(x).trim());})
      .filter(function(x){return Number.isFinite(x);});
  }
  function integerListDisplay(value){
    return integerListValues(value).join(", ");
  }
  function multiSelectValues(value){
    if(value===null||value===undefined||value==="")return [];
    if(Array.isArray(value))return value.map(String);
    var s=String(value).trim();
    if(!s)return [];
    if((s[0]==="["&&s[s.length-1]==="]")||(s[0]==="{"&&s[s.length-1]==="}")){
      s=s.slice(1,-1);
    }
    return s.split(",").map(function(x){
      return String(x).trim().replace(/^["']|["']$/g,"");
    }).filter(Boolean);
  }
  /* v31c315 (claude): the backend can return a select-family field's stored
     value shaped like a multi_select value -- a real array, or a
     JSON-array-encoded string e.g. '["19f99bbb0b6c..."]' wrapping the true
     option id -- regardless of whether the field's CURRENT type is "select"
     (single) or "multi_select". multiSelectValues() already unwraps that
     shape correctly, but every scalar "select" read path (recordFieldHtml,
     browseSelectOptionLabel/export, tpDuplicateNormalizeValues) called
     String(value) directly instead, which on a wrapping string returns the
     brackets and quotes verbatim -- so the dropdown never showed the real
     selection, export emitted literal "[...]" text instead of a label, and
     re-importing that text obviously matched no option ("Unknown select
     label"). This is a distinct bug from the v31c314 stableOptionId fix
     (that one was about ID *allocation* consistency; this one is about
     *unwrapping* a list-shaped value for a scalar field) and was never
     touched by it. Reuses multiSelectValues' parsing, then takes the first
     element for the scalar case. */
  function unwrapScalarSelectValue(value){
    if(Array.isArray(value))return value.length?value[0]:null;
    if(typeof value==="string"){
      var s=value.trim();
      if(s.length&&((s[0]==="["&&s[s.length-1]==="]")||(s[0]==="{"&&s[s.length-1]==="}"))){
        var parts=multiSelectValues(s);
        return parts.length?parts[0]:null;
      }
    }
    return value;
  }

  var BOOLEAN_DISPLAY_OPTIONS=[
    {value:"true_false",label:"True / False",trueLabel:"True",falseLabel:"False"},
    {value:"yes_no",label:"Yes / No",trueLabel:"Yes",falseLabel:"No"},
    {value:"on_off",label:"On / Off",trueLabel:"On",falseLabel:"Off"},
    {value:"enabled_disabled",label:"Enabled / Disabled",trueLabel:"Enabled",falseLabel:"Disabled"}
  ];
  function booleanDisplayMode(field){
    var raw=String(field&&((field.boolean_display||field.boolean_labels||field.booleanDisplay))||"").toLowerCase().replace(/[^a-z]/g,"_").replace(/^_+|_+$/g,"");
    if(raw==="yes_no"||raw==="yesno")return "yes_no";
    if(raw==="on_off"||raw==="onoff")return "on_off";
    if(raw==="enabled_disabled"||raw==="enableddisabled")return "enabled_disabled";
    return "true_false";
  }
  function booleanDisplaySpec(field){
    var mode=booleanDisplayMode(field);
    return BOOLEAN_DISPLAY_OPTIONS.find(function(x){return x.value===mode;})||BOOLEAN_DISPLAY_OPTIONS[0];
  }
  function booleanFieldLabels(field){
    var spec=booleanDisplaySpec(field);
    return {mode:spec.value,trueLabel:spec.trueLabel,falseLabel:spec.falseLabel};
  }
  function booleanValueIsTrue(value){
    return value===true||value===1||String(value).toLowerCase()==="true"||String(value).toLowerCase()==="yes"||String(value).toLowerCase()==="on"||String(value).toLowerCase()==="enabled";
  }
  function booleanFieldValueText(field,value){
    if(value===null||value===undefined||value==="")return "";
    var labels=booleanFieldLabels(field);
    return booleanValueIsTrue(value)?labels.trueLabel:labels.falseLabel;
  }

  var INTEGER_NUMBER_PRESETS={
    fibonacci_144:{label:"Fibonacci (to 144)",values:[1,2,3,5,8,13,21,34,55,89,144]},
    modified_fib:{label:"Modified Fibonacci",values:[0,1,2,3,5,8,13,20,40,100]},
    wsjf:{label:"WSJF score",values:[1,2,3,5,8,13,20]},
    likert_5:{label:"Likert 1-5",values:[1,2,3,4,5]},
    likert_7:{label:"Likert 1-7",values:[1,2,3,4,5,6,7]},
    risk_5:{label:"Risk 1-5",values:[1,2,3,4,5]},
    risk_10:{label:"Risk 1-10",values:[1,2,3,4,5,6,7,8,9,10]},
    priority_4:{label:"Priority 1-4",values:[1,2,3,4]},
    powers_2:{label:"Powers of 2",values:[1,2,4,8,16,32,64,128]}
  };
  function integerEntryMode(f){
    var m=String((f&&f.entry_mode)||"free").toLowerCase();
    return m==="select"?"select":"free";
  }
  function integerAllowedValues(f){
    if(!f)return [];
    if(Array.isArray(f.allowed_values))
      return f.allowed_values.map(function(x){return Number(x);}).filter(function(n){return isFinite(n);});
    var raw=String(f.allowed_values_csv||f.allowed_values||"").trim();
    if(!raw)return [];
    return raw.split(/[,\s]+/).map(function(x){return Number(String(x).trim());}).filter(function(n){return isFinite(n);});
  }
  function integerAllowedValuesCsv(f){return integerAllowedValues(f).join(", ");}
  function integerPresetOptionsHtml(){
    return '<option value="">Preset…</option>'+Object.keys(INTEGER_NUMBER_PRESETS).map(function(k){
      return '<option value="'+k+'">'+INTEGER_NUMBER_PRESETS[k].label+'</option>';
    }).join("");
  }
  function fieldIsCalculated(f){return !!(f&&(f.calculated===true||f.calculated==="true"));}
  function fieldIsRetired(f){return !!(f&&(f.retired===true||f.retired==="true"||String(f.status||"").toLowerCase()==="retired"));}
  /* Calculated formulas are numeric (PEMDAS). Compatible peers: integer fields
     on the same form, including other calculated integers (CoD -> WSJF). */
  function formulaCompatibleType(t){
    t=String(t||"text").toLowerCase();
    return t==="integer"||t==="number";
  }
  function formulaPeerFields(draft, selfIndex){
    var fields=(draft&&draft.fields)||[];
    var si=Number(selfIndex);
    var self=(si===si&&si>=0)?fields[si]:null; /* NaN-safe */
    var selfType=self?(self.type||"integer"):"integer";
    var selfKey=self?String(self.name||self.field_key||""):"";
    var selfId=self?String(self.field_id||""):"";
    var peers=[];
    for(var i=0;i<fields.length;i++){
      /* Never offer the field as a dependency of itself (stack fault / cycle). */
      if(i===si||i===selfIndex)continue;
      var x=fields[i];
      if(!x||fieldIsRetired(x))continue;
      var key=String(x.name||x.field_key||"");
      if(!key)continue;
      if(selfKey&&key===selfKey)continue;
      if(selfId&&x.field_id&&String(x.field_id)===selfId)continue;
      if(!formulaCompatibleType(x.type||"text"))continue;
      if(!formulaCompatibleType(selfType))continue;
      peers.push({index:i,key:key,label:x.label||key,calculated:fieldIsCalculated(x)});
    }
    return peers;
  }
  function renderFileFieldNote(f){
    var t=String(f&&f.type||"").toLowerCase();
    if(t!=="file"&&t!=="attachment")return "";
    if(fieldIsRetired(f))return "";
    return '<div class="fc-file-note">'+
      '<div class="small-muted"><b>File attach</b> — one file per field. Need another attachment? Add another File attach field.</div>'+
      '<div class="small-muted">Stored value is filename + SHA-256 content hash (optlock). Bytes live on the record attachment CU chain.</div>'+
      '<div class="small-muted">Max 10MB · png jpg gif webp pdf txt log csv json docx xlsx zip.</div>'+
    '</div>';
  }
  function renderFormulaEditor(nodeId, fieldIndex, f, draft, isLocked){
    if(!fieldIsCalculated(f)||fieldIsRetired(f))return "";
    if(!formulaCompatibleType(f.type||"")){
      return '<div class="fc-formula-row"><div class="small-muted">Calculated fields require Type = Number (integer). Change type or turn Calculated off.</div></div>';
    }
    var peers=formulaPeerFields(draft, fieldIndex);
    var formula=f.formula||"";
    var formulaLocked=!!isLocked;
    var insertOpts=peers.length
      ? peers.map(function(p){
          return '<option value="'+esc(p.key)+'">'+esc(p.label)+(p.calculated?' · calc':'')+' · '+esc(p.key)+'</option>';
        }).join("")
      : "";
    var insertHtml=peers.length
      ? ('<select class="fc-insert-field" '+(formulaLocked?'disabled':'')+' onchange="if(this.value){CEE20.insertFormulaToken(\''+nodeId+'\','+fieldIndex+',this.value);this.selectedIndex=0;}"><option value="">Insert field…</option>'+insertOpts+'</select>')
      : '<span class="small-muted">No compatible integer fields on this form yet. Add one or more integer fields first, then insert them here.</span>';
    var opHtml='<select class="fc-insert-field" '+(formulaLocked?'disabled':'')+' onchange="if(this.value){CEE20.insertFormulaToken(\''+nodeId+'\','+fieldIndex+',this.value);this.selectedIndex=0;}" title="Insert operator">'+
      '<option value="">Operator…</option>'+
      '<option value=" + "> + </option>'+
      '<option value=" - "> − </option>'+
      '<option value=" * "> × </option>'+
      '<option value=" / "> ÷ </option>'+
      '<option value="(">(</option>'+
      '<option value=")">)</option>'+
      '</select>';
    var clearHtml=formulaLocked
      ? ''
      : '<button type="button" class="btn" '+(formula?'':'disabled')+' onclick="CEE20.clearFormula(\''+nodeId+'\','+fieldIndex+')" title="Clear formula">Clear</button>';
    var lockNote=formulaLocked
      ? '🔒 published — retire + add to change'
      : 'read-only — build with Insert field / Operator';
    return '<div class="fc-formula-row">'+
      '<label>Formula <span class="small-muted">('+lockNote+')</span></label>'+
      '<input type="text" class="fc-formula-input" id="fc-formula-'+nodeId+'-'+fieldIndex+'" value="'+esc(formula)+'" readonly tabindex="-1" title="Formula is read-only. Use Insert field and Operator to build it. Full text scrolls horizontally if needed." placeholder="Use Insert field… and Operator…">'+
      '<div class="fc-formula-tools">'+insertHtml+opHtml+clearHtml+
        '<span class="small-muted">Field names are indexed names. Eval order: dependencies first (CoD before WSJF), then PEMDAS.</span>'+
      '</div>'+
    '</div>';
  }

  function renderIntegerEntryEditor(nodeId,fieldIndex,f){
    if(String(f.type||"")!=="integer")return "";
    if(fieldIsCalculated(f)||fieldIsRetired(f))return "";
    var mode=integerEntryMode(f),csv=integerAllowedValuesCsv(f);
    return '<div class="fc-integer-entry">'+
      '<div class="fc-integer-row">'+
        '<div><label>Entry</label><select onchange="CEE20.field(\''+nodeId+'\','+fieldIndex+',\'entry_mode\',this.value)">'+
          '<option value="free"'+(mode==="free"?" selected":"")+'>Free number</option>'+
          '<option value="select"'+(mode==="select"?" selected":"")+'>Select from list</option>'+
        '</select></div>'+
        '<div><label>Preset</label><select onchange="CEE20.applyIntegerPreset(\''+nodeId+'\','+fieldIndex+',this.value);this.selectedIndex=0">'+
          integerPresetOptionsHtml()+
        '</select></div>'+
      '</div>'+
      '<label>Allowed values <span class="small-muted">(when Entry = Select)</span></label>'+
      '<input value="'+esc(csv)+'" oninput="CEE20.field(\''+nodeId+'\','+fieldIndex+',\'allowed_values_csv\',this.value)" placeholder="e.g. 1, 2, 3, 5, 8, 13">'+
      '<div class="small-muted">Select mode: dropdown of these numbers only. Free: normal number input. Storage is always one integer.</div>'+
    '</div>';
  }

  /* Client-side formula preview (mirrors backend PEMDAS + hyphenated indexed names).
     Server remains authoritative on save; this is live UI only. */
  function ceeFormulaTokenize(formula){
    var s=String(formula||"").trim(), i=0, n=s.length, tokens=[];
    while(i<n){
      var c=s.charAt(i);
      if(c===" "||c==="\t"||c==="\n"||c==="\r"){i++;continue;}
      if(c==="("){tokens.push({t:"lparen"});i++;continue;}
      if(c===")"){tokens.push({t:"rparen"});i++;continue;}
      if(c==="`"){
        i++;
        var qs=i;
        while(i<n&&s.charAt(i)!=="`")i++;
        if(i>=n)return {error:"Unclosed backtick in formula identifier"};
        tokens.push({t:"id",v:s.slice(qs,i)});
        i++;
        continue;
      }
      if(c==="+"||c==="*"||c==="/"){tokens.push({t:"op",v:c});i++;continue;}
      if(c==="-"){tokens.push({t:"op",v:c});i++;continue;}
      if((c>="0"&&c<="9")||c==="."){
        var start=i;
        while(i<n){var ch=s.charAt(i);if((ch>="0"&&ch<="9")||ch===".")i++;else break;}
        var num=Number(s.slice(start,i));
        if(!isFinite(num))return {error:"Invalid number in formula"};
        tokens.push({t:"number",v:num});
        continue;
      }
      if((c>="a"&&c<="z")||(c>="A"&&c<="Z")||c==="_"){
        var start2=i;
        while(i<n){
          var ch2=s.charAt(i);
          if((ch2>="a"&&ch2<="z")||(ch2>="A"&&ch2<="Z")||(ch2>="0"&&ch2<="9")||ch2==="_"){i++;continue;}
          if(ch2==="-"&&i+1<n){
            var nxt=s.charAt(i+1);
            if((nxt>="a"&&nxt<="z")||(nxt>="A"&&nxt<="Z")||(nxt>="0"&&nxt<="9")||nxt==="_"){i++;continue;}
          }
          break;
        }
        tokens.push({t:"id",v:s.slice(start2,i)});
        continue;
      }
      return {error:"Unexpected character '"+c+"' in formula"};
    }
    return {tokens:tokens};
  }
  function ceeFormulaOpPrec(op){return (op==="*"||op==="/")?2:(op==="+"||op==="-")?1:0;}
  function ceeFormulaToRpn(tokens){
    var output=[], ops=[];
    for(var ti=0;ti<tokens.length;ti++){
      var tok=tokens[ti];
      if(tok.t==="number"||tok.t==="id"){output.push(tok);continue;}
      if(tok.t==="op"){
        while(ops.length&&ops[ops.length-1].t==="op"&&ceeFormulaOpPrec(ops[ops.length-1].v)>=ceeFormulaOpPrec(tok.v))
          output.push(ops.pop());
        ops.push(tok);continue;
      }
      if(tok.t==="lparen"){ops.push(tok);continue;}
      if(tok.t==="rparen"){
        while(ops.length&&ops[ops.length-1].t!=="lparen")output.push(ops.pop());
        if(!ops.length||ops[ops.length-1].t!=="lparen")return {error:"Mismatched parentheses in formula"};
        ops.pop();continue;
      }
      return {error:"Invalid token in formula"};
    }
    while(ops.length){
      if(ops[ops.length-1].t==="lparen")return {error:"Mismatched parentheses in formula"};
      output.push(ops.pop());
    }
    return {rpn:output};
  }
  function ceeFormulaLookup(name, values){
    var raw=values[name];
    if(raw==null||raw==="")return 0;
    if(typeof raw==="number")return isFinite(raw)?raw:0;
    var n=Number(String(raw).trim());
    return isFinite(n)?n:0;
  }
  function ceeFormulaEvalRpn(rpn, values){
    var stack=[];
    for(var i=0;i<rpn.length;i++){
      var tok=rpn[i];
      if(tok.t==="number"){stack.push(tok.v);continue;}
      if(tok.t==="id"){stack.push(ceeFormulaLookup(tok.v, values));continue;}
      if(tok.t==="op"){
        if(stack.length<2)return {error:"Formula is missing operands"};
        var b=stack.pop(), a=stack.pop(), res;
        if(tok.v==="+")res=a+b;
        else if(tok.v==="-")res=a-b;
        else if(tok.v==="*")res=a*b;
        else if(tok.v==="/"){if(b===0)return {error:"Division by zero"};res=a/b;}
        else return {error:"Unknown operator"};
        stack.push(res);continue;
      }
      return {error:"Invalid RPN token"};
    }
    if(stack.length!==1)return {error:"Formula did not reduce to a single value"};
    return {value:stack[0]};
  }
  function ceeEvaluateFormula(formula, values){
    var tok=ceeFormulaTokenize(formula);
    if(tok.error)return tok;
    if(!tok.tokens||!tok.tokens.length)return {value:0};
    var rpn=ceeFormulaToRpn(tok.tokens);
    if(rpn.error)return rpn;
    return ceeFormulaEvalRpn(rpn.rpn, values);
  }
  function ceeCollectRecordFormValues(){
    var values={};
    document.querySelectorAll("[data-record-field]").forEach(function(el){
      var key=el.getAttribute("data-record-field");
      if(!key)return;
      var type=el.getAttribute("data-record-field-type")||"text";
      var v=el.value;
      if(type==="integer"||type==="number")v=(v===""||v==null)?"":Number(v);
      values[key]=v;
    });
    document.querySelectorAll("[data-calculated-field]").forEach(function(el){
      var key=el.getAttribute("data-calculated-field");
      if(!key)return;
      var v=el.value;
      if(v==="—"||v==="")values[key]="";
      else{var n=Number(v);values[key]=isFinite(n)?n:v;}
    });
    return values;
  }
  function refreshCalculatedFields(){
    var form=model.drafts&&model.drafts.record&&model.drafts.record.form;
    if(!form||!Array.isArray(form.fields))return;
    var calcs=form.fields.filter(function(f){return fieldIsCalculated(f)&&!fieldIsRetired(f)&&!!(f.name||f.field_key);});
    if(!calcs.length)return;
    var values=ceeCollectRecordFormValues();
    /* Multi-pass so calc-on-calc (CoD before WSJF) resolves in the preview. */
    for(var pass=0;pass<Math.max(1,calcs.length);pass++){
      calcs.forEach(function(f){
        var key=f.name||f.field_key;
        var formula=String(f.formula||"");
        var el=document.querySelector('[data-calculated-field="'+key.replace(/"/g,'\\"')+'"]');
        if(!el)return;
        if(!formula){el.value="—";values[key]="";return;}
        var result=ceeEvaluateFormula(formula, values);
        if(result.error){
          el.value="—";
          el.title="Formula error: "+result.error+" (final value still computed on save)";
          values[key]="";
          return;
        }
        var num=result.value;
        var ftype=String(f.type||"integer").toLowerCase();
        var disp=(ftype==="integer"||ftype==="number")?String(Math.round(num)):String(num);
        el.value=disp;
        el.title="Live preview from formula. Final value is computed on save (server authoritative).";
        values[key]=Number(disp);
      });
    }
  }
  function fileFieldLevelBase(){
    var d=model.drafts&&model.drafts.record,w=d&&model.browses[d.browseId],lv=w&&model.byId[w.levelId];
    return lv?levelBase(lv):"";
  }
  function parseFileFieldValue(raw){
    if(raw==null||raw==="")return {filename:"",content_hash:"",size_bytes:0};
    if(typeof raw==="object"&&!Array.isArray(raw))
      return {filename:String(raw.filename||""),content_hash:String(raw.content_hash||""),size_bytes:Number(raw.size_bytes||0)||0};
    var s=String(raw);
    if(s.charAt(0)==="{"){
      try{
        var o=JSON.parse(s);
        return {filename:String(o.filename||""),content_hash:String(o.content_hash||""),size_bytes:Number(o.size_bytes||0)||0};
      }catch(_e){}
    }
    return {filename:s,content_hash:"",size_bytes:0};
  }
  function formatFileFieldValue(meta){
    meta=meta||{};
    return JSON.stringify({
      filename:String(meta.filename||""),
      content_hash:String(meta.content_hash||""),
      size_bytes:Number(meta.size_bytes||0)||0
    });
  }
  function fileFieldDisplayName(raw){return parseFileFieldValue(raw).filename||"";}
  function setFileAttachHashDisplay(ctl, hash){
    if(!ctl)return;
    var hashEl=ctl.querySelector(".file-attach-hash");
    if(!hashEl)return;
    var h=String(hash||"");
    if(h){
      hashEl.textContent=h;
      hashEl.classList.remove("is-empty");
      hashEl.title="SHA-256 content hash (read-only)";
    }else{
      hashEl.textContent="— (hash available after save)";
      hashEl.classList.add("is-empty");
      hashEl.title="Content hash is recorded on save";
    }
  }
  function fileToBase64(file){
    return new Promise(function(resolve,reject){
      var reader=new FileReader();
      reader.onload=function(){
        var s=String(reader.result||"");
        var i=s.indexOf(",");
        resolve(i>=0?s.slice(i+1):s);
      };
      reader.onerror=function(){reject(reader.error||new Error("read failed"));};
      reader.readAsDataURL(file);
    });
  }
  function fileSha256Hex(file){
    return new Promise(function(resolve,reject){
      var reader=new FileReader();
      reader.onload=function(){
        crypto.subtle.digest("SHA-256", reader.result).then(function(buf){
          resolve(Array.from(new Uint8Array(buf)).map(function(x){return x.toString(16).padStart(2,"0");}).join(""));
        }).catch(reject);
      };
      reader.onerror=function(){reject(reader.error||new Error("read failed"));};
      reader.readAsArrayBuffer(file);
    });
  }
  async function uploadRecordAttachment(subjectId, file, base){
    base=base||fileFieldLevelBase();
    if(!base)throw new Error("No instance base for attachment upload");
    if(!subjectId)throw new Error("subject_id required for attachment upload");
    if(!file)throw new Error("No file selected");
    if(file.size>10*1024*1024)throw new Error("File exceeds 10MB limit");
    var b64=await fileToBase64(file);
    var contentHash="";
    try{contentHash=await fileSha256Hex(file);}catch(_e){console.warn("content hash failed",_e);}
    var result=await postJson(base+"/api/enterprise/attachments/upload",{
      subject_id:String(subjectId),
      filename:file.name,
      content_base64:b64,
      content_hash:contentHash,
      operator:operator()
    });
    if(!result||result.ok===false)throw new Error((result&&(result.error||result.message))||"Upload failed");
    return formatFileFieldValue({
      filename:result.filename||file.name,
      content_hash:result.content_hash||contentHash,
      size_bytes:result.size_bytes!=null?result.size_bytes:file.size
    });
  }
  async function deleteRecordAttachment(subjectId, filename, base){
    if(!filename)return;
    base=base||fileFieldLevelBase();
    if(!base||!subjectId)return;
    try{
      await postJson(base+"/api/enterprise/attachments/delete",{
        subject_id:String(subjectId),
        filename:String(filename),
        operator:operator()
      });
    }catch(e){console.warn("attachment delete CU failed",e);}
  }
  function wireRecordFormFileFields(){
    var d=model.drafts&&model.drafts.record;
    if(!d)return;
    if(!d.pendingFiles)d.pendingFiles={};
    if(!d.clearFiles)d.clearFiles={};
    document.querySelectorAll(".file-attach-control").forEach(function(ctl){
      var key=ctl.getAttribute("data-file-field");
      if(!key)return;
      var hidden=ctl.querySelector("[data-record-field]");
      var nameEl=ctl.querySelector(".file-attach-name");
      var picker=ctl.querySelector(".file-attach-picker");
      var clearBtn=ctl.querySelector(".file-attach-clear");
      var dlBtn=ctl.querySelector(".file-attach-download");
      if(picker)picker.onchange=function(){
        var f=this.files&&this.files[0];
        if(!f)return;
        d.pendingFiles[key]=f;
        d.clearFiles[key]=false;
        if(hidden)hidden.value=formatFileFieldValue({filename:f.name,content_hash:"",size_bytes:f.size});
        if(nameEl){nameEl.textContent=f.name+" (pending save)";nameEl.classList.remove("is-empty");nameEl.title=f.name;}
        setFileAttachHashDisplay(ctl, "");
        /* Optional: show client hash before save for operator confidence */
        fileSha256Hex(f).then(function(h){setFileAttachHashDisplay(ctl, h);}).catch(function(){});
      };
      if(clearBtn)clearBtn.onclick=function(){
        d.pendingFiles[key]=null;
        d.clearFiles[key]=true;
        if(hidden)hidden.value="";
        if(nameEl){nameEl.textContent="No file attached";nameEl.classList.add("is-empty");nameEl.title="No file";}
        if(picker)picker.value="";
        setFileAttachHashDisplay(ctl, "");
      };
      if(dlBtn){
        var setDlHref=function(){
          var meta=parseFileFieldValue(hidden&&hidden.value);
          var fname=meta.filename;
          var rec=d.record;
          var sid=rec?recordId(rec):"";
          var base=fileFieldLevelBase();
          if(fname&&sid&&base){
            dlBtn.setAttribute("href", base+"/api/enterprise/attachments/download?subject_id="+encodeURIComponent(sid)+"&filename="+encodeURIComponent(fname));
            dlBtn.setAttribute("target","_blank");
            dlBtn.setAttribute("rel","noopener");
          }else{
            dlBtn.setAttribute("href","#");
            dlBtn.removeAttribute("target");
          }
        };
        setDlHref();
        dlBtn.onclick=function(ev){
          var meta=parseFileFieldValue(hidden&&hidden.value);
          var fname=meta.filename;
          var rec=d.record;
          var sid=rec?recordId(rec):"";
          var base=fileFieldLevelBase();
          if(!fname||!sid||!base){
            if(ev)ev.preventDefault();
            toast("Save the record first so the attachment is bound to a subject id, then Download.","err");
            return false;
          }
          setDlHref();
          /* let the browser follow href (new tab) */
        };
      }
    });
  }

  function wireRecordFormCalculatedPreview(){
    var root=document.querySelector("#edit-modal .form-grid")||document.querySelector(".form-grid");
    if(!root||root.getAttribute("data-calc-wired")==="1")return;
    root.setAttribute("data-calc-wired","1");
    root.addEventListener("input", function(e){
      var t=e.target;
      if(!t)return;
      if(t.getAttribute&&(t.getAttribute("data-record-field")||t.getAttribute("data-calculated-field")))
        refreshCalculatedFields();
    });
    root.addEventListener("change", function(e){
      var t=e.target;
      if(!t)return;
      if(t.getAttribute&&t.getAttribute("data-record-field"))
        refreshCalculatedFields();
    });
    refreshCalculatedFields();
  }

  function recordFieldHtml(f,value,form,levelId){
    form=ensureDraftSchemaIds(form||{fields:[f]});
    var name=f.name||f.field_key,label=f.label||name,type=f.type||"text",v=value==null?"":value;
    var helpButton='<button type="button" class="help-dot" title="Field help" onclick="event.preventDefault();event.stopPropagation();openFieldHelp(\''+esc(form.form_design_id)+'\',\''+esc(f.field_id)+'\',\''+esc(label)+'\',\''+esc(levelId||'')+'\',\''+esc(form.hub_id||'')+'\',this)">?</button>';
    var labelHtml='<span class="field-label-help"><span>'+esc(label)+'</span>'+helpButton+'</span>';
    /* Calculated fields are server-authoritative. Show the stored value read-only;
       never emit a data-record-field input so user edits cannot override the formula. */
    if(fieldIsCalculated(f)){
      var disp=v==null||v===""?"—":String(v);
      var formula=String(f.formula||"");
      return '<div class="field"><label>'+labelHtml+' <span class="small-muted">(calculated · live)</span></label><input data-calculated-field="'+esc(name)+'" data-calculated-formula="'+esc(formula)+'" value="'+esc(disp)+'" readonly title="Live preview from formula. Final value is computed on save (server authoritative)." style="opacity:.85;cursor:default"></div>';
    }
    if(type==="file"||type==="attachment"){
      var meta=parseFileFieldValue(v);
      var fname=meta.filename||"";
      var empty=!fname;
      var stored=empty?"":formatFileFieldValue(meta);
      var hash=meta.content_hash||"";
      var tip=fname?(fname+(hash?" · sha256 "+hash.slice(0,12)+"…":"")):"No file";
      return '<div class="field full"><label>'+labelHtml+' <span class="small-muted">(one file)</span></label>'+
        '<div class="file-attach-control" data-file-field="'+esc(name)+'">'+
          '<input type="hidden" data-record-field="'+esc(name)+'" data-record-field-type="file" value="'+esc(stored)+'">'+
          '<span class="file-attach-name'+(empty?' is-empty':'')+'" title="'+esc(tip)+'">'+(empty?'No file attached':esc(fname))+'</span>'+
          '<div class="file-attach-actions">'+
            '<input type="file" class="file-attach-picker" accept=".png,.jpg,.jpeg,.gif,.webp,.pdf,.txt,.log,.csv,.json,.docx,.xlsx,.zip,image/*,application/pdf,text/*">'+
            (empty?'':'<a class="btn file-attach-download" href="#" role="button" title="Download attached file">Download</a>')+
            (empty?'':'<button type="button" class="btn danger file-attach-clear" title="Clear">Clear</button>')+
          '</div>'+
          '<div class="file-attach-hash-row">'+
            '<span class="file-attach-hash-label">Content hash (SHA-256, read-only)</span>'+
            '<div class="file-attach-hash'+(hash?'':' is-empty')+'" title="SHA-256 of file bytes">'+(hash?esc(hash):'— (hash available after save)')+'</div>'+
          '</div>'+
          '<div class="small-muted" style="width:100%">Max 10MB. Allowed: png jpg gif webp pdf txt log csv json docx xlsx zip. One file per field — add another File attach field for a second file.</div>'+
        '</div></div>';
    }
    /* v31c6 (claude): the personality file's real field types (see PERSONALITY_LEVEL_FORMS)
       are boolean/markdown/multi_select/integer/list<integer> — the generic starter form's
       types (checkbox/textarea/select) were the only ones handled here, so every
       personality-derived field silently fell through to a plain text input. This is the
       MVP-blocking gap for "CRUD framed by the imported personality file": form_design
       already carries the right fields (fixed earlier), but the record editor wasn't
       rendering their types correctly. Mirrors the type handling openEditor's level_info
       branch already does correctly (data-level-field), just applied to data-record-field. */
    if(type==="checkbox"||type==="boolean"){var boolTrue=booleanValueIsTrue(v),boolLabels=booleanFieldLabels(f);return '<div class="field"><label>'+labelHtml+'</label><select data-record-field="'+esc(name)+'" data-record-field-type="'+esc(type)+'"><option value="true"'+(boolTrue?" selected":"")+'>'+esc(boolLabels.trueLabel)+'</option><option value="false"'+(!boolTrue?" selected":"")+'>'+esc(boolLabels.falseLabel)+'</option></select></div>';}
    if(type==="textarea"||type==="markdown"){
      var mdId="recfield-md-"+name.replace(/[^a-zA-Z0-9_-]/g,"_");
      return '<div class="field full" data-md-field="'+esc(name)+'" data-md-field-id="'+mdId+'"><label>'+labelHtml+'</label>'+markdownTextareaHtml(mdId,name,v)+'</div>';
    }
    if(type==="select"||type==="multi_select"){
      var opts=activeSelectOptions(f);
      var optIds=opts.map(function(o,i){return String(stableOptionId(f,o,i));});
      var selectedVals=type==="multi_select"?multiSelectValues(v):[String(unwrapScalarSelectValue(v))];
      /* v31c316 (claude): a stored option id can legitimately be a real,
         canonical Chandra id (see v31c134) that simply isn't in THIS
         session's currently-loaded f.options -- the option may have been
         retired/reallocated since the record was written, or this browse's
         formDesign may just be stale relative to the server. Previously,
         when nothing matched, no <option> got `selected`, so the browser
         silently defaulted el.value to whichever option happened to be
         first in the list -- and saveBusinessRecord()/tpDuplicateFormValues
         read that el.value straight off the DOM. Simply opening the record
         and saving, without ever touching this field, silently rewrote it
         to an arbitrary option: a real data-integrity gap in a system
         where every write is supposed to be deliberate and attributable.
         Now an unmatched id is always rendered as an explicit, selected/
         checked placeholder that preserves the real id -- left untouched,
         a re-save keeps the original value byte-for-byte; touched, it's a
         deliberate, visible replacement instead of an invisible default. */
      function staleOptionLabel(id){var s=String(id);return "\u26a0 Unrecognized option (id "+esc(s.slice(0,8))+"\u2026"+esc(s.slice(-6))+")";}
      var staleTitle="This id is no longer among the field's current options. Left as-is, it is preserved on save; pick or check a current option to replace it deliberately.";
      if(type==="multi_select"){
        var staleVals=selectedVals.filter(function(x){return x!==""&&x!=null&&optIds.indexOf(String(x))<0;});
        return '<div class="field full"><label>'+labelHtml+'</label><div class="multi-select-checklist" data-record-multi-field="'+esc(name)+'">'+
          opts.map(function(o,i){var value=stableOptionId(f,o,i),label=selectOptionLabel(o);return '<label class="multi-select-option"><input type="checkbox" data-record-multi-option="'+esc(name)+'" value="'+esc(value)+'"'+(selectedVals.indexOf(String(value))>=0?" checked":"")+'><span>'+esc(label)+'</span></label>';}).join("")+
          staleVals.map(function(sv){return '<label class="multi-select-option multi-select-option-stale" title="'+esc(staleTitle)+'"><input type="checkbox" data-record-multi-option="'+esc(name)+'" value="'+esc(sv)+'" checked><span>'+staleOptionLabel(sv)+'</span></label>';}).join("")+
          '</div></div>';
      }
      var currentVal=selectedVals[0];
      var hasMatch=currentVal!=null&&currentVal!==""&&optIds.indexOf(String(currentVal))>=0;
      var staleOptionHtml=(!hasMatch&&currentVal!=null&&currentVal!=="")?('<option value="'+esc(currentVal)+'" selected title="'+esc(staleTitle)+'">'+staleOptionLabel(currentVal)+'</option>'):'';
      return '<div class="field"><label>'+labelHtml+'</label><select data-record-field="'+esc(name)+'" data-record-field-type="'+esc(type)+'">'+staleOptionHtml+opts.map(function(o,i){var value=stableOptionId(f,o,i),label=selectOptionLabel(o);return '<option value="'+esc(value)+'"'+(hasMatch&&selectedVals.indexOf(String(value))>=0?" selected":"")+'>'+esc(label)+'</option>';}).join("")+'</select></div>';
    }
    if(type==="date"){
      /* v31c135 (claude): previously fell through to the generic free-text
         input below -- nothing stopped "5/9/26" or "May 9 2026" from being
         typed and stored, which breaks lexicographic index ordering (the
         only reliable sort key for a date is a fixed-width, zero-padded
         string). type="date" makes the browser itself the correction mask:
         it can only emit/accept canonical YYYY-MM-DD, which already sorts
         identically to YYYYMMDD since the separators sit at the same
         position in every value. isoDateValue() salvages any legacy
         freeform value already sitting in a record instead of showing it
         blank. */
      return '<div class="field"><label>'+labelHtml+'</label><input type="date" data-record-field="'+esc(name)+'" data-record-field-type="'+esc(type)+'" value="'+esc(isoDateValue(v))+'"></div>';
    }
    if(type==="integer"){
      if(!fieldIsCalculated(f)&&integerEntryMode(f)==="select"){
        var allowed=integerAllowedValues(f);
        if(allowed.length){
          var cur=v==null||v===""?"":String(v);
          var opts=allowed.map(function(n){var s=String(n);return '<option value="'+esc(s)+'"'+(cur===s?" selected":"")+'>'+esc(s)+'</option>';}).join("");
          if(cur!==""&&allowed.indexOf(Number(cur))<0)
            opts='<option value="'+esc(cur)+'" selected>'+esc(cur)+' (not in allowed list)</option>'+opts;
          return '<div class="field"><label>'+labelHtml+' <span class="small-muted">(select)</span></label><select data-record-field="'+esc(name)+'" data-record-field-type="'+esc(type)+'"><option value="">—</option>'+opts+'</select></div>';
        }
      }
      return '<div class="field"><label>'+labelHtml+'</label><input type="number" data-record-field="'+esc(name)+'" data-record-field-type="'+esc(type)+'" value="'+esc(v)+'"></div>';
    }
    if(type==="list<integer>")return '<div class="field full"><label>'+labelHtml+' <span class="small-muted">(comma-separated numbers)</span></label><input data-record-field="'+esc(name)+'" data-record-field-type="'+esc(type)+'" value="'+esc(integerListDisplay(v))+'"></div>';
    return '<div class="field"><label>'+labelHtml+'</label><input data-record-field="'+esc(name)+'" data-record-field-type="'+esc(type)+'" value="'+esc(v)+'"'+((f.text_case&&f.text_case!=="none")?' oninput="this.value=applyTextCase(this.value,\''+f.text_case+'\')"':'')+'></div>';
  }

  /* v31 (claude): Flood Test Data -- context-specific because it reads the
     CURRENT form's actual field list (model.drafts.record.form.fields,
     the same real _form_design-derived schema recordFieldHtml renders
     from) rather than filling a generic hardcoded set of inputs. Type
     drives correctness (select/multi_select pick from the field's real
     options, integer/list<integer> generate numbers, boolean coin-flips);
     field name/label drives a light semantic guess for free-text fields
     (name/email/phone/etc.) purely as a readability nicety for whoever's
     eyeballing test records afterward -- not load-bearing for the CRUD
     path being tested. Fills inputs in place; does not submit -- Append
     Record CU stays a separate, deliberate action. */
  function floodValueFor(f,levelLabel){
    var name=String(f.name||f.field_key||"").toLowerCase(), label=String(f.label||"").toLowerCase(), type=f.type||"text";
    var hay=name+" "+label;
    if(type==="checkbox"||type==="boolean") return Math.random()<0.5?"true":"false";
    if(type==="integer") return Math.floor(Math.random()*1000);
    if(type==="list<integer>") return [Math.floor(Math.random()*100),Math.floor(Math.random()*100),Math.floor(Math.random()*100)];
    if(type==="select"||type==="multi_select"){
      var opts=activeSelectOptions(f);
      if(!opts.length) return "";
      if(type==="multi_select"){
        var n=1+Math.floor(Math.random()*Math.min(2,opts.length));
        var pick=opts.slice().sort(function(){return Math.random()-0.5;}).slice(0,n);
        return pick.map(function(o){return stableOptionId(f,o,opts.indexOf(o));});
      }
      var one=opts[Math.floor(Math.random()*opts.length)];
      return stableOptionId(f,one,opts.indexOf(one));
    }
    /* v31 (claude): pattern-matched by field NAME/LABEL shape, not tied to
       any one Level's schema -- these patterns (dates, currency, percent,
       regulatory-ID-shaped codes) recur across FINRA/FFIEC/HIPAA/NERC/CMMC
       verticals even though the exact field names differ per Level's
       personality-derived form_design. Cheapest lever available without a
       richer field schema (checked: no example/placeholder/category metadata
       exists on fields today, just name/label/type/options) or a network
       call -- just broader regexes than the original small word list. */
    if(/date|_at$|expir|effective/.test(hay)){
      var d=new Date(Date.now()-Math.floor(Math.random()*3e10));
      return d.toISOString().slice(0,10);
    }
    if(/amount|balance|revenue|\baum\b|\bvalue\b|price|fee/.test(hay))
      return "$"+(Math.floor(Math.random()*9000000)+1000).toLocaleString();
    if(/rate|percent|pct|ratio/.test(hay))
      return (Math.random()*100).toFixed(2)+"%";
    if(/\bein\b|tax_id|taxid/.test(hay))
      return String(10+Math.floor(Math.random()*89))+"-"+String(1000000+Math.floor(Math.random()*8999999));
    if(/cusip/.test(hay))
      return Math.random().toString(36).slice(2,11).toUpperCase();
    if(/\bssn\b/.test(hay))
      return "XXX-XX-"+String(1000+Math.floor(Math.random()*8999));
    if(/\bcrd\b|\bcik\b|license|registration/.test(hay))
      return String(100000+Math.floor(Math.random()*899999));
    var pools={
      name:["Aurora Ridge Co.","Blackwater Holdings","Cobalt Peak LLC","Meridian Fabrication","Vantage Point Group"],
      email:["flood.test1@example.com","qa.sample2@example.com","record.check3@example.com"],
      phone:["555-0101","555-0142","555-0199"],
      address:["100 Test Ave, Suite 4","42 Sample Street"],
      city:["Springfield","Rivertown","Fairview"]
    };
    for(var key in pools){ if(hay.indexOf(key)!==-1) return pools[key][Math.floor(Math.random()*pools[key].length)]; }
    var ctx=levelLabel?(" — "+levelLabel):"";
    if(/description|notes|comment/.test(hay))
      return "Flood test data"+ctx+" — generated for CRUD/chain verification, safe to delete ("+Math.random().toString(36).slice(2,7)+").";
    if(type==="textarea"||type==="markdown") return "Flood test content"+ctx+" "+Math.random().toString(36).slice(2,8)+".";
    if(name==="name") return (levelLabel||"Test Record")+" — Flood "+Math.random().toString(36).slice(2,7).toUpperCase();
    return "Flood "+Math.random().toString(36).slice(2,8);
  }
  function floodTestData(){
    var d=model.drafts.record;
    if(!d||!d.form){ toast("No form loaded.","err"); return; }
    var w=model.browses[d.browseId], lv=w&&model.byId[w.levelId];
    var levelLabel=lv?(lv.rawLabel||lv.label||""):"";
    (d.form.fields||[]).forEach(function(f){
      var name=f.name||f.field_key, type=f.type||"text";
      if(!name) return;
      if(fieldIsCalculated(f)||fieldIsRetired(f)||f.system_managed===true||f.read_only===true)return;
      if(String(f.type||"").toLowerCase()==="file"||String(f.type||"")==="attachment")return;
      var v=floodValueFor(f,levelLabel);
      if(type==="select"||type==="multi_select"||type==="select-multiple"||type==="boolean"||type==="checkbox"||f.required===true||f.mandatory===true){
        var floodOpts=(type==="select"||type==="multi_select"||type==="select-multiple")?activeSelectOptions(f):[];
        console.groupCollapsed('[CEE field diagnostic] Flood Data — '+String(f.label||name));
        console.log('field',f);
        console.log('field_name',name);
        console.log('field_id',f.field_id||f.id||'');
        console.log('field_type',type);
        console.log('required',f.required===true||f.mandatory===true);
        if(floodOpts.length)console.log('active_options',floodOpts.map(function(o,i){return {index:i,id:stableOptionId(f,o,i),label:o.label||o.name||o.value||'',raw:o};}));
        console.log('flood_value',v,'javascript_type',typeof v);
        if((type==="boolean"||type==="checkbox")&&(f.required===true||f.mandatory===true)&&String(v).toLowerCase()==="false")
          console.warn('[CEE required boolean diagnostic] Required boolean was answered false. This is a present answer and must not be treated as missing by backend validation.');
        console.groupEnd();
      }
      if(type==="markdown"){
        var wrap=document.querySelector('[data-md-field="'+String(name).replace(/"/g,'\\"')+'"]');
        var mdId=wrap&&wrap.getAttribute("data-md-field-id");
        var mdEl=mdId&&document.getElementById(mdId);
        if(mdEl){ mdEl.value=v; mdRefreshPreview(mdId); }
        return;
      }
      var el=document.querySelector('[data-record-field="'+String(name).replace(/"/g,'\\"')+'"]');
      if(type!=="multi_select"&&!el) return;
      if(type==="checkbox"||type==="boolean") el.value=(v===true||String(v).toLowerCase()==="true"||String(v).toLowerCase()==="yes")?"true":"false";
      else if(type==="multi_select"){
        var vals=Array.isArray(v)?v.map(String):[String(v)];
        var group=document.querySelector('[data-record-multi-field="'+String(name).replace(/"/g,'\\"')+'"]');
        if(group)Array.from(group.querySelectorAll('input[type="checkbox"]')).forEach(function(cb){cb.checked=vals.indexOf(cb.value)>=0;});
      }else if(type==="list<integer>") el.value=integerListDisplay(v);
      else el.value=v;
    });
    toast("Form flooded with test data"+(levelLabel?" for "+levelLabel:"")+".","ok");
  }
  function ceeDisplayTimestamp(value){
    if(value===null||value===undefined||value==="")return "";
    var raw=value,d;
    if(typeof raw==="number"||/^\d+$/.test(String(raw))){
      var n=Number(raw);
      if(!isFinite(n)||n<=0)return "";
      d=new Date(n<100000000000? n*1000:n);
    }else d=new Date(raw);
    return isNaN(d.getTime())?String(raw):d.toLocaleString();
  }

  /* ChatGPT 20260720-08: read-only record view for the workhorse browse. */
  /* v31c325 (claude): a modal is the shared #edit-modal singleton -- only
     one can ever be showing, so "open a window per tagged record and
     cascade them" was structurally impossible as a modal. Rebuilt as a
     real floating window using the same chrome as Browse windows
     (.browse-win/.browse-hdr/.browse-body, makeDraggable, setBrowseActive,
     renderBrowseChips, closeBusinessBrowse via a lightweight model.browses
     entry -- the same pattern openDeletedRecordsBrowse already uses for a
     non-Browse floating window) so multiple viewers coexist, each
     independently draggable/focusable/closeable, with taskbar chips.
     cascadeIndex/baseLeft/baseTop let a caller open several as one visual
     group (offset from each other) without moving or otherwise touching
     any other window already open -- the cascade is purely relative
     positioning for windows THIS call is creating, nothing else. Opening
     the same record twice focuses the existing window instead of
     duplicating it. */
  function openRecordViewer(browseId,r,opts){
    opts=opts||{};
    var id="record-view-"+recordId(r);
    if(document.getElementById(id)){setBrowseActive(id);return;}
    var w=model.browses[browseId],lv=model.byId[w.levelId];
    var values=Object.assign({},r&&r.values||{},r||{});
    var cascadeIndex=opts.cascadeIndex||0,wrap=12,ci=cascadeIndex%wrap,row=Math.floor(cascadeIndex/wrap),step=28;
    var baseLeft=opts.baseLeft!=null?opts.baseLeft:60,baseTop=opts.baseTop!=null?opts.baseTop:60;
    var left=baseLeft+ci*step+row*160,top=baseTop+ci*step;
    var el=document.createElement("div");
    el.className="browse-win record-view-win";el.id=id;
    el.style.left=left+"px";el.style.top=top+"px";el.style.width="520px";el.style.height="480px";
    /* v31c328 (claude): was title+close only -- missing the scope label
       and maximize/restore toggle every other .browse-win header carries.
       toggleBusinessBrowseSize is already fully generic (only touches
       model.browses[id] and the .browse-win/.browse-max-btn DOM, both of
       which this window has), so this is a straight reuse, not new
       maximize logic. */
    el.innerHTML='<div class="browse-hdr"><span class="browse-title">Loading\u2026</span><span class="browse-scope">loading</span><button class="browse-max-btn" title="Maximize window to workspace" aria-label="Maximize window">\u25a1</button><button class="browse-close">\u00d7</button></div><div class="browse-body"><div class="small-muted" style="padding:12px">Loading record form\u2026</div></div>';
    document.getElementById("mdi-layer").appendChild(el);
    model.browses[id]={id:id,title:"View record",records:[],selected:-1,recordView:true,viewLevelId:w.levelId,viewParentId:w.parentId||null,viewRecord:r};
    renderBrowseChips();setBrowseActive(id);
    makeDraggable(el,el.querySelector(".browse-hdr"));
    el.querySelector(".browse-max-btn").onclick=function(e){e.stopPropagation();toggleBusinessBrowseSize(id);};
    el.querySelector(".browse-close").onclick=function(){closeBusinessBrowse(id);};
    (async function(){
      var body=el.querySelector(".browse-body"),titleEl=el.querySelector(".browse-title"),scopeEl=el.querySelector(".browse-scope");
      var form=await businessFormFor(w.levelId);
      if(!document.getElementById(id))return;
      if(!form||form._read_error){body.innerHTML='<div class="small-muted" style="color:var(--red);padding:12px">The Hub form design could not be loaded.</div>';return;}
      var displayName=String(browseRecordDisplay(r,form)||"Record");
      if(model.browses[id])model.browses[id].title="View: "+displayName;
      titleEl.textContent="View: "+displayName;titleEl.title=displayName;
      if(scopeEl)scopeEl.textContent=String((lv&&(lv.rawLabel||lv.label))||"");
      renderBrowseChips();
      var rows=(form.fields||[]).filter(function(f){return !fieldIsRetired(f);}).map(function(f){
        var name=f.name||f.field_key,label=f.label||name,v=values[name],type=String(f.type||"").toLowerCase();
        if(type==="list<integer>")v=integerListDisplay(v);else if(Array.isArray(v))v=v.join(", ");
        if(v===true||String(v).toLowerCase()==="true")v="Yes";else if(v===false||String(v).toLowerCase()==="false")v="No";
        return '<div class="record-view-label">'+esc(label)+'</div><div class="record-view-value">'+esc(v==null?"":v)+'</div>';
      }).join("");
      var lifecycle=String(r.status||"active").toLowerCase();
      var lifecycleLabel=(lifecycle==="deactivated"||lifecycle==="deleted")?"Deleted record":(lifecycle==="restored"?"Restored record":"Active record");
      body.innerHTML='<div class="record-view-shell">'+
        '<div class="record-view-summary"><span class="record-lifecycle '+esc(lifecycle)+'">'+esc(lifecycleLabel)+'</span><span class="record-view-name" title="'+esc(displayName)+'">'+esc(displayName)+'</span></div>'+
        '<div class="record-view-fields">'+rows+'</div>'+
        '<details class="record-metadata"><summary>Record Metadata</summary><div class="record-metadata-grid">'+
          '<div class="record-metadata-key">Record ID</div><div class="record-metadata-value">'+esc(recordId(r))+'</div>'+
          ((r.deleted_id||"")?'<div class="record-metadata-key">Delete ID</div><div class="record-metadata-value">'+esc(r.deleted_id)+'</div>':'')+
          ((r.deleted_at||"")?'<div class="record-metadata-key">Deleted At</div><div class="record-metadata-value">'+esc(ceeDisplayTimestamp(r.deleted_at))+'</div>':'')+
          '<div class="record-metadata-key">Latest CU</div><div class="record-metadata-value">'+esc(recordTail(r))+'</div>'+
        '</div></details>'+
        '<div class="record-view-footer"><button class="btn" id="'+id+'-chain-btn">View Chain</button></div>'+
      '</div>';
      var chain=document.getElementById(id+"-chain-btn");
      if(chain)chain.onclick=function(){openChainBrowse(browseId,r);};
    })();
  }

  async function openRecordEditor(browseId,r,options){
    options=options||{};
    var w=model.browses[browseId],lv=model.byId[w.levelId],duplicateSource=options.duplicateSource||null,isDuplicate=!!duplicateSource;
    if(isDuplicate&&isDeletedBusinessRecord(duplicateSource)){toast("Deleted records cannot be duplicated.","err");return;}
    var editorVerb=r?"Edit ":(isDuplicate?"Duplicate ":"Add ");
    modal(editorVerb+lv.label+' record' ,'<div class="small-muted">Loading record form…</div><div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="closeEditModal()">Close</button></div>');
    var form=await businessFormFor(w.levelId);
    if(form&&form._read_error){
      var retryFn="cee_retry_"+Math.random().toString(36).slice(2,9);
      window[retryFn]=function(){delete window[retryFn];closeEditModal();openRecordEditor(browseId,r,options);};
      modal("Form Design Could Not Be Loaded",
        '<div class="card"><div class="card-body">'+
        '<div class="small-muted" style="color:var(--red)">'+esc(lv.rawLabel||lv.label)+'\u2019s form design failed to load due to a backend error -- this is NOT the same as having no form design, so no "Define Form" option is offered here (defining a new one now could conflict with whatever is already stored). A bug report was filed automatically.</div>'+
        '<div class="small-muted" style="margin-top:8px;font-family:var(--mono);font-size:11px">'+esc(form._read_error_detail||"")+'</div>'+
        '<div class="action-row" style="justify-content:flex-end;margin-top:10px"><button class="btn" onclick="closeEditModal()">Close</button><button class="btn primary" onclick="'+retryFn+'()">Retry</button></div>'+
        '</div></div>');
      return;
    }
    if(!form){
      modal("Define Form Required",
        '<div class="card"><div class="card-body">'+
        '<div class="small-muted">'+esc(lv.rawLabel||lv.label)+' has no form design yet \u2014 no records can be created until one is published.</div>'+
        '<div class="action-row" style="justify-content:flex-end;margin-top:10px"><button class="btn" onclick="closeEditModal()">Close</button><button class="btn primary" onclick="closeEditModal();openDefineFormDialog(\''+esc(w.levelId)+'\',function(){refreshBusinessBrowse(\''+esc(browseId)+'\');})">Define Form</button></div>'+
        '</div></div>');
      return;
    }
    var sourceForValues=r||duplicateSource;var values=Object.assign({},sourceForValues&&sourceForValues.values||{},sourceForValues||{});if(isDuplicate){try{values=JSON.parse(JSON.stringify(values));}catch(_copyError){values=Object.assign({},values);}}
    /* ChatGPT 20260720-01: preserve the authoritative form-design and Level
       identity so business-record Field Help resolves the same context_id
       written and read by Form Designer. Do not let recordFieldHtml create a
       temporary form_design_id for this persisted form. */
    /* Active schema only — retired fields stay on Form Definition for audit but never on add/edit. */
    var html=(form.fields||[]).filter(function(f){return !fieldIsRetired(f);}).map(function(f){return recordFieldHtml(f,values[f.name||f.field_key],form,w.levelId);}).join("");
    model.drafts.record={browseId:browseId,record:r,form:form,mode:(r?"edit":(isDuplicate?"duplicate":"add")),duplicateSourceId:isDuplicate?recordId(duplicateSource):"",duplicateSourceTail:isDuplicate?recordTail(duplicateSource):""};
    modal(editorVerb+lv.label+' record',
      '<div class="card"><div class="card-body">'+
      '<div class="small-muted" style="margin-bottom:10px">Form: '+esc(form.name||"Business Record")+
      ' · source: '+esc(form.source||"unknown")+'</div>'+
      (isDuplicate?'<div class="small-muted" style="margin-bottom:10px">New record draft copied from '+esc(browseRecordDisplay(duplicateSource,form))+' · source record '+esc(recordId(duplicateSource))+'</div>':'')+
      '<div class="form-grid">'+html+'</div>'+
      '<div class="kv" style="margin-top:10px"><span class="k">Loaded tail</span><span class="tail-hash">'+esc(r?recordTail(r):(isDuplicate?("new genesis · copied from tail "+recordTail(duplicateSource)):"first write"))+'</span></div>'+
      '<div class="action-row" style="justify-content:flex-end"><button class="btn" onclick="CEE20.floodTestData()">Flood Test Data</button><button class="btn" onclick="closeEditModal()">Close</button><button class="btn primary" id="cee-save-record-btn" onclick="CEE20.saveRecord()">Append Record CU</button></div></div></div>');
    try{wireRecordFormCalculatedPreview();}catch(_e){}
    try{wireRecordFormFileFields();}catch(_e){}
  }
  /* v31 (claude): the actual gate-opening step -- publishes a Hub's
     first (or revised) form-design CU. starterBusinessForm supplies an
     editable starting template; this is a raw JSON fields-array editor
     (power-user level, not a drag-and-drop field designer) -- honest
     v1 scope, not pretending to be more polished than it is. */
  function openDefineFormDialog(levelId, refreshFn){
    var lv=model.byId[levelId];
    var hubId=hubIdForLevel(lv);
    var template=starterBusinessForm(levelId);
    modal("Define Form — "+esc(lv.rawLabel||lv.label),
      '<div class="card"><div class="card-body">'+
      '<div class="small-muted" style="margin-bottom:8px">No records can be created in this Hub until a form design is published. Edit the fields below (JSON array: name/label/type/required/indexed/options), then Publish.</div>'+
      '<textarea id="formdesign-fields" style="width:100%;min-height:220px;font-family:var(--mono);font-size:11px">'+esc(JSON.stringify(template.fields,null,2))+'</textarea>'+
      '<div class="action-row" style="justify-content:flex-end;margin-top:10px"><button class="btn" onclick="closeEditModal()">Close</button><button class="btn primary" onclick="CEE20.saveFormDesign(\''+esc(levelId)+'\')">Publish Form Design</button></div>'+
      '</div></div>');
    model.drafts.formDesign={levelId:levelId, hubId:hubId, refreshFn:refreshFn};
  }
  async function saveFormDesign(levelId){
    var d=model.drafts.formDesign; if(!d) return;
    var lv=model.byId[levelId];
    var base=levelBase(lv);
    var raw=(document.getElementById("formdesign-fields")||{}).value||"[]";
    var fields;
    try{ fields=JSON.parse(raw); }catch(e){ toast("Fields must be valid JSON: "+(e.message||e),"err"); return; }
    if(!Array.isArray(fields)||!fields.length){ toast("Define at least one field.","err"); return; }
    var payload={name:(lv.rawLabel||lv.label)+" Business Record Form", source:"hub-form-design-cu", fields:fields};
    var saveUrl=base+"/api/enterprise/hub/form-design/save";
    var saveBody={hub_id:d.hubId, fields_json:JSON.stringify(payload), operator:operator()};
    try{
      var resp=await fetch(saveUrl,{
        method:"POST", cache:"no-store",
        headers:{"Content-Type":"application/json","Accept":"application/json"},
        body:JSON.stringify(saveBody)
      });
      var txt=await resp.text(),j=null;
      try{j=JSON.parse(txt);}catch(parseError){}
      if(j && j.ok===true){
        toast("Form design published.","ok");
        closeEditModal();
        if(d.refreshFn) d.refreshFn();
      }else{
        var detail=(j&&(j.error||j.message))||
          ("HTTP "+resp.status+" response: "+(j?JSON.stringify(j):txt.slice(0,1000)));
        if(window.ceeCaptureDiagnostic)window.ceeCaptureDiagnostic(
          "http-error",detail,
          {url:saveUrl,status:resp.status,response_json:j,response_text:txt,request_body:saveBody}
        );
        toast("Form design save failed: "+detail,"err");
      }
    }catch(e){
      if(window.ceeCaptureDiagnostic)window.ceeCaptureDiagnostic(
        "http-error",(e&&e.message)||String(e),
        {url:saveUrl,request_body:saveBody,stack:e&&e.stack}
      );
      toast("Form design save failed: "+(e.message||e),"err");
    }
  }
  async function saveBusinessRecord(){
    var d=model.drafts.record,w=model.browses[d.browseId],lv=model.byId[w.levelId],r=d.record,values={};
    document.querySelectorAll("[data-record-field]").forEach(function(el){
      var key=el.getAttribute("data-record-field");
      var type=el.getAttribute("data-record-field-type")||"text";
      var v;
      if(el.multiple) v=Array.from(el.selectedOptions).map(function(o){return o.value;});
      else v=el.value;
      if(type==="checkbox"||type==="boolean") v=(v==="true");
      /* v31c134 (claude): select/multi_select values are option IDs, which
         are canonical Chandra ids (64-char hex strings) now that
         assignAuthoritativeSchemaIds runs after optionsCsv->options
         normalization (see saveForm). Number(hexString) is NaN, which
         JSON.stringify collapses to null -- coercing here silently dropped
         every select/multi_select value on record submit. Keep them as the
         opaque id strings the option objects actually carry. */
      else if(type==="select") v=(v===""?null:v);
      else if(type==="multi_select") v=(Array.isArray(v)?v:[]).filter(function(x){return x!==""&&x!=null;});
      else if(type==="integer") v=(v===""?null:Number(v));
      else if(type==="list<integer>") v=integerListValues(v);
      values[key]=v;
    });
    document.querySelectorAll("[data-record-multi-field]").forEach(function(group){
      var key=group.getAttribute("data-record-multi-field");
      values[key]=Array.from(group.querySelectorAll('input[type="checkbox"]:checked'))
        .map(function(el){return el.value;});
    });
    /* v31 (claude): markdown fields use the real rich editor
       (markdownTextareaHtml) instead of a plain textarea -- its own
       canonical <textarea> doesn't carry data-record-field (it's a
       shared, page-agnostic component, not wired to this page's own
       collection convention), so those values are read separately here
       via the data-md-field wrapper markers recordFieldHtml adds. */
    document.querySelectorAll("[data-md-field]").forEach(function(wrap){
      var key=wrap.getAttribute("data-md-field");
      var mdId=wrap.getAttribute("data-md-field-id");
      var el=document.getElementById(mdId);
      if(el) values[key]=el.value;
    });
    /* v31 (claude): personality-derived schemas commonly don't use the
       literal key "name" for their title field (e.g. firm_name,
       legal_name) -- values.name was silently undefined for those, and
       this fell straight to "(unnamed)"/"New Record" even though the
       actual title field had a real value sitting in `values` under a
       different key. Fall back to the form's first field before giving
       up -- first-field-as-title is a common enough form convention and
       is the only signal available without richer per-field metadata
       (checked earlier: no is_name/primary flag exists on fields today). */
    var requiredDefinitions=(d.form.fields||[]).filter(function(field){return field.required===true||field.mandatory===true;});
    requiredDefinitions.forEach(function(field){
      var key=field.name||field.field_key||"";
      var t=String(field.type||field.field_type||"text").toLowerCase();
      var submitted=values[key];
      var present=Object.prototype.hasOwnProperty.call(values,key);
      console.groupCollapsed('[CEE required-field diagnostic] POST — '+String(field.label||key));
      console.log('field',field);
      console.log('field_name',key);
      console.log('field_type',t);
      console.log('property_present',present);
      console.log('submitted_value',submitted,'javascript_type',typeof submitted);
      if((t==="boolean"||t==="checkbox")&&present&&(submitted===false||String(submitted).toLowerCase()==="false"))
        console.warn('[CEE required boolean diagnostic] This field has a valid explicit No/false answer. Backend required validation must test key presence, not truthiness.');
      if(!present||submitted===null||submitted===undefined||submitted==="")
        console.error('[CEE required-field diagnostic] Required field is actually absent or blank in the POST value map.');
      console.groupEnd();
    });
    var selectDefinitions=(d.form.fields||[]).filter(function(field){
      var t=String(field.type||field.field_type||"").toLowerCase();
      return t==="select"||t==="multi_select"||t==="select-multiple";
    }).map(function(field){
      return {
        name:field.name||field.field_key||"",
        field_id:field.field_id||field.id||"",
        type:field.type||field.field_type||"",
        options:field.options||[],
        submitted_value:values[field.name||field.field_key||""]
      };
    });
    selectDefinitions.forEach(function(sd){
      var submitted=sd.submitted_value;
      var validIds=(sd.options||[]).filter(function(o){return !o.retired&&String(o.status||"active").toLowerCase()!=="retired";})
        .map(function(o){return String(stableOptionId(sd,o,(sd.options||[]).indexOf(o)));});
      var submittedIds=Array.isArray(submitted)?submitted.map(String):(submitted==null||submitted===""?[]:[String(submitted)]);
      var unknown=submittedIds.filter(function(id){return validIds.indexOf(id)<0;});
      console.groupCollapsed('[CEE Select diagnostic] POST — '+String(sd.name||sd.field_id||'select'));
      console.log('definition',sd);
      console.log('submitted_value',submitted);
      console.log('submitted_ids',submittedIds);
      console.log('valid_option_ids',validIds);
      console.log('unknown_submitted_ids',unknown);
      if(!submittedIds.length)console.warn('[CEE Select diagnostic] No Select value will be submitted for this field. A required-field validator may report it as required.');
      if(unknown.length)console.error('[CEE Select diagnostic] Submitted Select value is not present in the current persisted option set.',{unknown_ids:unknown,valid_ids:validIds});
      console.groupEnd();
    });
    ceeRecordDebug("saveBusinessRecord collected form state",{
      browse_id:d.browseId,
      level_id:w.levelId,
      hub_id:hubIdForLevel(lv),
      is_update:!!r,
      values:values,
      select_definitions:selectDefinitions,
      form:d.form
    });
    var titleValue=values.name;
    if(!titleValue){
      var firstField=(d.form.fields||[])[0];
      if(firstField) titleValue=values[firstField.name||firstField.field_key];
    }
    var base=levelBase(lv);
    var hubId=hubIdForLevel(lv);
    var pendingFiles=(d.pendingFiles&&typeof d.pendingFiles==="object")?d.pendingFiles:{};
    var clearFiles=(d.clearFiles&&typeof d.clearFiles==="object")?d.clearFiles:{};
    var fileFieldKeys=(d.form.fields||[]).filter(function(f){
      var t=String(f.type||"").toLowerCase();
      return (t==="file"||t==="attachment")&&!fieldIsRetired(f)&&!fieldIsCalculated(f);
    }).map(function(f){return f.name||f.field_key;}).filter(Boolean);
    /* File field values are filenames only. Bytes go through attachments API after we have subject_id. */
    fileFieldKeys.forEach(function(k){
      if(clearFiles[k]&&!(pendingFiles[k]))values[k]=null;
      /* Pending uploads set values[k] after upload returns hash-bearing JSON. */
    });
    var result, responseRecord, subjectId;
    if(r){
      subjectId=recordId(r);
      /* Upload / soft-delete attachments before the record CU so values reflect the final filenames. */
      for(var fi=0;fi<fileFieldKeys.length;fi++){
        var fk=fileFieldKeys[fi];
        var prevMeta=parseFileFieldValue((r.values&&r.values[fk]!=null)?r.values[fk]:r[fk]);
        var prevName=prevMeta.filename||"";
        if(clearFiles[fk]&&prevName){
          await deleteRecordAttachment(subjectId, prevName, base);
          values[fk]=null;
        }
        if(pendingFiles[fk]){
          if(prevName&&prevName!==pendingFiles[fk].name)await deleteRecordAttachment(subjectId, prevName, base);
          values[fk]=await uploadRecordAttachment(subjectId, pendingFiles[fk], base);
        }
      }
      var loadedTail=recordTail(r);
      if(!loadedTail){
        throw new Error("This record has no loaded tail hash. Close the form, Refresh the browse, and open the record again before saving.");
      }
      var payload={
        subject_id:subjectId,
        loaded_tail_hash:loadedTail,
        values:values,
        operator:operator()
      };
      result=await postJson(base+"/api/enterprise/records/update",payload);
      responseRecord=(result&&result.record)||result||null;
    }else{
      /* Create record first (file fields may be provisional filenames), then upload bytes, then update filenames if needed. */
      var payload={
        hub_id:hubId,
        parent_subject_id:w.parentId||null,
        level_number:lv.level_number,
        target_level_number:lv.level_number,
        name:titleValue||recordName(r||{})||"New Record",
        values:values,
        operator:operator()
      };
      result=await postJson(base+"/api/enterprise/records/create",payload);
      responseRecord=(result&&result.record)||result||null;
      subjectId=String((responseRecord&&(responseRecord.subject_id||responseRecord.record_id||responseRecord.id))||(result&&(result.subject_id||result.record_id||result.id))||"");
      var needFileUpdate=false;
      if(subjectId){
        for(var fj=0;fj<fileFieldKeys.length;fj++){
          var fk2=fileFieldKeys[fj];
          if(pendingFiles[fk2]){
            values[fk2]=await uploadRecordAttachment(subjectId, pendingFiles[fk2], base);
            needFileUpdate=true;
          }
        }
        if(needFileUpdate){
          var tail2=String(
            (responseRecord&&(responseRecord.tail_hash||responseRecord.tailHash||responseRecord.cu_id||responseRecord.tail_cu_id))||
            (result&&(result.tail_hash||result.cu_id||result.tail_cu_id))||
            ""
          );
          if(!tail2){
            throw new Error("Record was created but its tail hash was missing from the create response; cannot attach files safely. Refresh browse and edit the new row.");
          }
          var upd=await postJson(base+"/api/enterprise/records/update",{
            subject_id:subjectId,
            loaded_tail_hash:tail2,
            values:values,
            operator:operator()
          });
          responseRecord=(upd&&upd.record)||responseRecord;
          result=upd||result;
        }
      }
    }
    var createdId=!r?String(subjectId||(responseRecord&&(responseRecord.subject_id||responseRecord.record_id||responseRecord.id))||""):"";
    d.pendingFiles={};d.clearFiles={};
    closeEditModal();
    /* Single-row refresh from create/update response (includes server-calculated fields). No full browse list reload. */
    var applied=false;
    if(responseRecord){
      applied=applyBrowseRecordFromServer(w.id, responseRecord, {isCreate:!r});
    }
    if(!applied){
      /* Fallback only when response omitted record payload */
      await refreshBusinessBrowse(w.id);
      if(!r&&createdId){
        var createdIndex=(w.records||[]).findIndex(function(item){return recordId(item)===createdId;});
        if(createdIndex>=0){selectBrowseRow(w.id,createdIndex);scrollBrowseCurrentRecordIntoView(w.id);}
      }
    }else if(!r&&createdId){
      var idx2=(w.records||[]).findIndex(function(item){return recordId(item)===createdId;});
      if(idx2<0&&(w.findActive||(w.omittedIds&&w.omittedIds.size)))toast("Record saved, but it is outside the current found set.","ok");
    }
    if(!(d.mode==="duplicate"&&!r&&createdId&&(w.records||[]).findIndex(function(item){return recordId(item)===createdId;})<0&&(w.findActive||w.omittedIds&&w.omittedIds.size)))toast(d.mode==="duplicate"?"Duplicate record genesis CU appended.":"Business record CU appended.","ok");
  }
  async function restoreRecordAtAuthority(r,options){
    options=options||{};
    var base=(r&&r._authority_base)||options.authoritativeBase||"";
    if(!base&&options.level)base=levelBase(options.level);
    if(!base)throw new Error("Authoritative record instance is unavailable.");
    return postJson(base+"/api/enterprise/records/restore",{
      record_id:(r&&r.record_id)||recordId(r),
      loaded_tail_hash:recordTail(r),
      operator:operator()
    });
  }
  async function restoreBusinessRecord(browseId,r){
    var w=model.browses[browseId],lv=w&&model.byId[w.levelId];
    var label=browseRecordDisplay(r,w&&w.formDesign)||recordName(r);
    if(!confirm("Restore "+label+" to the active record set?"))return;
    var priorIndex=w&&w.selected>=0?w.selected:0;
    try{
      await restoreRecordAtAuthority(r,{level:lv});
      toast("Record restored by CU append.","ok");
      await refreshBusinessBrowse(browseId);
      /* Deleted view removes the restored row. Preserve a useful nearby selection.
         All view keeps selection by canonical record_id through normal refresh. */
      if(w&&String(w.lifecycleView||"active").toLowerCase()==="deleted"&&w.records.length&&w.selected<0){
        selectBrowseRow(browseId,Math.min(priorIndex,w.records.length-1));
      }
    }catch(e){
      if(e&&e.data&&e.data.error==="stale-tail")alert("Record Changed\n\nThis record changed after it was loaded. Refresh the Deleted view and retry.");
      else toast("Restore failed: "+(e.message||e),"err");
    }
  }
  /* v31c324 (claude): bulk counterpart to restoreBusinessRecord, same
     pattern as softDeleteRecords -- one confirm, one summary toast, one
     refresh, delegating to the single-record path when there's only one. */
  async function restoreBusinessRecords(browseId,records){
    if(!records.length)return;
    if(records.length===1)return restoreBusinessRecord(browseId,records[0]);
    var w=model.browses[browseId],lv=w&&model.byId[w.levelId];
    if(!confirm("Restore "+records.length+" tagged records to the active record set?"))return;
    var ok=0,failures=[];
    for(var i=0;i<records.length;i++){
      var r=records[i];
      try{await restoreRecordAtAuthority(r,{level:lv});ok++;}
      catch(e){
        var label=browseRecordDisplay(r,w&&w.formDesign)||recordName(r);
        failures.push(label+": "+((e&&e.data&&e.data.error==="stale-tail")?"changed after load, refresh and retry":(e&&e.message||e)));
      }
    }
    if(failures.length)toast(ok+" restored, "+failures.length+" failed: "+failures.slice(0,3).join("; ")+(failures.length>3?" \u2026":""),"err");
    else toast(ok+" records restored by CU append.","ok");
    await refreshBusinessBrowse(browseId);
  }

  function lifecycleInstanceTargets(){
    var seen={},targets=[];
    Object.keys(model.byId).forEach(function(k){
      var n=model.byId[k];if(!n||n.type!=="level")return;
      var base=String(levelBase(n)||"").replace(/\/+$/,"");if(!base||seen[base])return;seen[base]=true;
      targets.push({base:base,seedLevel:n,authorityKind:"level"});
    });
    return targets;
  }

  function archivedLifecycleInstanceTargets(){
    /*
     * v31c336: Deleted Records and Archived Records have different routing.
     * Deleted business-record discovery remains worker-only. Archive entries
     * may also live on the current spine (notably Test Plans), so only the
     * Archived Records browse adds the spine origin.
     */
    var seen={},targets=[],spineBase=String(window.location.origin||"").replace(/\/+$/,"");
    if(spineBase){
      seen[spineBase]=true;
      targets.push({base:spineBase,seedLevel:null,authorityKind:"spine"});
    }
    lifecycleInstanceTargets().forEach(function(t){
      if(!t||!t.base||seen[t.base])return;
      seen[t.base]=true;targets.push(t);
    });
    return targets;
  }
  function lifecycleRecordNode(r,target){
    var hubId=r.hub_id||"",node=model.byId[hubId];if(node)return node;
    var levelId=r.level_id||hubId||("lifecycle-hub-"+Math.random().toString(36).slice(2));
    node={id:levelId,type:"sub-hub",label:r.table_name||hubId||"Business Table",rawLabel:r.table_name||hubId||"Business Table",business_hub_id:hubId,hubId:hubId,levelId:levelId,instance_address:target.base,owningInstance:target.base,children:[]};register(node);return node;
  }
  async function archiveDeletedRecordAtAuthority(r,options){
    options=options||{};var base=(r&&r._authority_base)||options.authoritativeBase||"";
    if(!base)throw new Error("Authoritative record instance is unavailable.");
    return postJson(base+"/api/enterprise/records/archive",{
      record_id:(r&&r.record_id)||recordId(r),
      loaded_tail_hash:recordTail(r),
      archive_context:"deleted-records",
      archive_hub:"deleted-records-archive",
      operator:operator()
    });
  }
  async function restoreArchivedRecordToDeletedAtAuthority(r,options){
    options=options||{};var base=(r&&r._authority_base)||options.authoritativeBase||"";
    if(!base)throw new Error("Authoritative archive instance is unavailable.");
    return postJson(base+"/api/enterprise/records/restore-to-deleted",{
      archive_entry_id:r&&((r.archive_entry_id||r.archive_id||r.archived_id)),
      loaded_tail_hash:recordTail(r),
      archive_context:"deleted-records",
      archive_hub:"deleted-records-archive",
      operator:operator()
    });
  }
  function deletedLifecycleItemKey(item){
    if(!item)return "";
    if(item.kind==="business-record")return "business-record:"+recordId(item.record);
    if(item.kind==="saved-search")return "saved-search:"+String(item.search&&item.search.search_id||"");
    if(item.kind==="test-plan")return "test-plan:"+String(item.plan&&(item.plan.subject_id||item.plan.plan_id||item.plan.cu_id)||"");
    return String(item.kind||"object")+":"+String(item.archive_entry_id||item.object_id||"");
  }
  function deletedLifecycleItemLabel(item){
    if(!item)return "Deleted object";
    if(item.kind==="business-record")return browseRecordDisplay(item.record,item.form)||recordName(item.record);
    if(item.kind==="saved-search")return item.search&&item.search.name||"Unnamed Search";
    if(item.kind==="test-plan")return item.plan&&(item.plan.title||item.plan.plan_id||item.plan.subject_id)||"Untitled Test Plan";
    return item.label||item.record_name||item.object_id||"Deleted object";
  }
  function lifecycleArchivedArtifact(item){
    if(item.kind==="saved-search"){
      var catalog=JSON.parse(JSON.stringify(item.state.artifact||{}));
      var found=false;
      (catalog.searches||[]).forEach(function(s){
        if(s&&s.search_id===item.search.search_id){
          s.status="archived";s.archived_at=new Date().toISOString();s.updated_at=s.archived_at;found=true;
        }
      });
      if(!found)throw new Error("Saved Search is no longer present in the loaded catalog.");
      catalog.updated_at=new Date().toISOString();
      return catalog;
    }
    if(item.kind==="test-plan"){
      var plan=JSON.parse(JSON.stringify(item.plan||{}));
      plan.status="archived";plan.archived_at=new Date().toISOString();
      return plan;
    }
    return null;
  }
  async function archiveDeletedLifecycleItem(item){
    if(!item)throw new Error("Deleted lifecycle object is unavailable.");
    if(item.kind==="business-record")
      return archiveDeletedRecordAtAuthority(item.record,{authoritativeBase:item.sourceBase||item.record._authority_base});
    var base=item.kind==="saved-search"?(item.state&&item.state.base):(item.kind==="test-plan"?"":(item.sourceBase||""));
    if(item.kind!=="test-plan"&&!base)throw new Error("Authoritative lifecycle instance is unavailable.");
    var source=item.kind==="saved-search"?item.state.artifact:item.plan;
    var archived=lifecycleArchivedArtifact(item);
    return postJson(base+"/api/enterprise/records/archive",{
      object_type:item.kind,
      object_id:item.kind==="saved-search"?item.search.search_id:(item.plan.subject_id||item.plan.plan_id||item.plan.cu_id),
      source_subject_id:item.kind==="saved-search"?item.state.subject:(item.plan.subject_id||""),
      loaded_tail_hash:item.kind==="saved-search"?item.state.tail:(item.plan.tail_hash||item.plan.latest_tail||item.plan.cu_id||""),
      archive_context:"deleted-records",
      archive_hub:"deleted-records-archive",
      source_deleted_artifact:source,
      source_archived_artifact:archived,
      operator:operator()
    });
  }

  async function runLifecycleTaggedMutation(opts){
    var rows=opts.rows||[];if(!rows.length){toast(opts.emptyMessage||"Tag at least one record first.","err");return;}
    if(!confirm(opts.confirmText(rows.length)))return;
    var ok=0,failures=[];
    for(var i=0;i<rows.length;i++){
      var item=rows[i];
      try{await opts.mutate(item.record,{authoritativeBase:item.sourceBase||item.record._authority_base});ok++;}
      catch(e){failures.push((browseRecordDisplay(item.record,item.form)||recordName(item.record))+": "+(e&&e.message||e));}
    }
    if(failures.length)toast(ok+" completed, "+failures.length+" failed: "+failures.slice(0,3).join("; ")+(failures.length>3?" …":""),"err");
    else toast(opts.successText(ok),"ok");
    await opts.reload();
  }

  async function openDeletedRecordsBrowse(){
    var id="deleted-records-universal";if(document.getElementById(id)){setBrowseActive(id);return;}
    var el=document.createElement("div");el.className="browse-win";el.id=id;el.style.left="42px";el.style.top="34px";el.style.width="1110px";el.style.height="580px";
    el.innerHTML='<div class="browse-hdr"><span class="browse-title">Deleted Records</span><span class="browse-scope">all authoritative instances</span><button class="browse-max-btn" title="Maximize browse to canvas" aria-label="Maximize browse">□</button><button class="browse-close">×</button></div><div class="browse-tools"><div class="browse-command-group"><button class="icon-toolbar-btn universal-deleted-refresh" title="Refresh deleted records"><svg viewBox="0 0 20 20"><path d="M16 10a6 6 0 1 1-1.8-4.3"/><polyline points="16 3.5 16 6.5 13 6.5"/></svg><span class="icon-toolbar-label">Refresh</span></button><button class="icon-toolbar-btn primary universal-deleted-undelete" disabled title="Undelete selected records"><svg viewBox="0 0 20 20"><path d="M5 10h9"/><polyline points="10 6 14 10 10 14"/><path d="M4 15.5h12"/></svg><span class="icon-toolbar-label">Undelete</span></button><button class="icon-toolbar-btn universal-deleted-archive" disabled title="Archive selected deleted records"><svg viewBox="0 0 20 20"><rect x="3" y="4" width="14" height="4" rx="1"/><path d="M5 8v7.5h10V8"/><path d="M8 11h4"/></svg><span class="icon-toolbar-label">Archive</span></button><button class="icon-toolbar-btn universal-open-archived" title="Open Archived Records browse"><svg viewBox="0 0 20 20"><rect x="3.5" y="3.5" width="13" height="13" rx="1"/><path d="M7 9h6M7 12h4"/></svg><span class="icon-toolbar-label">Archived</span></button><div class="toolbar-sep"></div><button class="icon-toolbar-btn universal-diagnostics-toggle" title="Toggle diagnostics panel"><svg viewBox="0 0 20 20"><circle cx="10" cy="10" r="6.5"/><path d="M10 6.5v4.2"/><circle cx="10" cy="13.2" r=".8" fill="currentColor" stroke="none"/></svg><span class="icon-toolbar-label">Diagnostics</span></button></div><input class="browse-search" placeholder="Search deleted records"></div><div class="browse-body"><table class="browse-table"><colgroup><col data-col-key="deleted-tag" style="width:42px"><col data-col-key="deleted-type" style="width:130px"><col data-col-key="deleted-level" style="width:180px"><col data-col-key="deleted-table" style="width:190px"><col data-col-key="deleted-record" style="width:250px"><col data-col-key="deleted-id" style="width:220px"><col data-col-key="deleted-at" style="width:170px"><col data-col-key="deleted-action" style="width:190px"></colgroup><thead><tr><th data-col-key="deleted-tag" class="browse-select-cell"><input type="checkbox" class="universal-select-all" aria-label="Tag all visible deleted objects"></th><th data-col-key="deleted-type"><span>Type</span><span class="browse-col-resizer" aria-hidden="true"></span></th><th data-col-key="deleted-level"><span>Level</span><span class="browse-col-resizer" aria-hidden="true"></span></th><th data-col-key="deleted-table"><span>Table</span><span class="browse-col-resizer" aria-hidden="true"></span></th><th data-col-key="deleted-record"><span>Record</span><span class="browse-col-resizer" aria-hidden="true"></span></th><th data-col-key="deleted-id"><span>Delete ID</span><span class="browse-col-resizer" aria-hidden="true"></span></th><th data-col-key="deleted-at"><span>Deleted At</span><span class="browse-col-resizer" aria-hidden="true"></span></th><th data-col-key="deleted-action"><span>Action</span></th></tr></thead><tbody><tr><td colspan="8" class="small-muted" style="padding:18px">Loading…</td></tr></tbody></table><pre class="universal-deleted-diagnostics" style="display:none;white-space:pre-wrap;margin:8px;padding:10px;border:1px solid var(--border);background:var(--bg2);font:10px/1.45 var(--mono);max-height:180px;overflow:auto"></pre></div><div class="browse-statusbar"><span class="browse-status-main">Loading…</span></div>';
    document.getElementById("mdi-layer").appendChild(el);model.browses[id]={id:id,title:"Deleted Records",records:[],selected:-1,universalDeleted:true,columnWidths:{},tagged:new Set()};renderBrowseChips();setBrowseActive(id);makeDraggable(el,el.querySelector(".browse-hdr"));setBrowseTableWidth(el.querySelector("table.browse-table"));installBrowseColumnSplitters(id);
    el.querySelector(".browse-max-btn").onclick=function(e){e.stopPropagation();toggleBusinessBrowseSize(id);};
    el.querySelector(".browse-hdr").ondblclick=function(e){if(!e.target.closest("button,label,input"))toggleBusinessBrowseSize(id);};
    el.querySelector(".browse-close").onclick=function(){closeBusinessBrowse(id);};
    if(typeof ceeAddDetachButton==="function")ceeAddDetachButton(id);
    var w=model.browses[id],undeleteBtn=el.querySelector(".universal-deleted-undelete"),archiveBtn=el.querySelector(".universal-deleted-archive"),selectAll=el.querySelector(".universal-select-all");
    function taggedItems(){return (w.records||[]).filter(function(x){return w.tagged.has(deletedLifecycleItemKey(x));});}
    function updateTagged(){var tagged=taggedItems();undeleteBtn.disabled=!tagged.length;archiveBtn.disabled=!tagged.length;var visible=Array.from(el.querySelectorAll('tbody tr[data-tag-key]')).filter(function(tr){return tr.style.display!=="none";}),checked=visible.filter(function(tr){return w.tagged.has(tr.dataset.tagKey);}).length;selectAll.checked=!!visible.length&&checked===visible.length;selectAll.indeterminate=checked>0&&checked<visible.length;}
    el.querySelector(".browse-search").oninput=function(){var q=String(this.value||"").toLowerCase();el.querySelectorAll("tbody tr[data-search]").forEach(function(tr){tr.style.display=tr.dataset.search.indexOf(q)>=0?"":"none";});updateTagged();};
    el.querySelector(".universal-diagnostics-toggle").onclick=function(){var d=el.querySelector(".universal-deleted-diagnostics");d.style.display=d.style.display==="none"?"block":"none";};
    el.querySelector(".universal-open-archived").onclick=openArchivedRecordsBrowse;
    selectAll.onchange=function(){el.querySelectorAll('tbody tr[data-tag-key]').forEach(function(tr){if(tr.style.display==="none")return;if(selectAll.checked)w.tagged.add(tr.dataset.tagKey);else w.tagged.delete(tr.dataset.tagKey);var cb=tr.querySelector(".universal-row-tag");if(cb)cb.checked=selectAll.checked;});updateTagged();};
    async function undeleteDeletedLifecycleItem(item){
      if(item.kind==="business-record"){
        return restoreRecordAtAuthority(item.record,{
          authoritativeBase:item.sourceBase||item.record._authority_base
        });
      }
      if(item.kind==="saved-search"){
        var x=item.search;
        var current=item.state.artifact.searches.find(function(s){
          return s.search_id===x.search_id;
        });
        if(!current)throw new Error("Deleted Saved Search is no longer present in the authoritative catalog.");
        current.status="active";
        current.deleted_at="";
        current.updated_at=savedSearchNow();
        item.state.artifact.updated_at=savedSearchNow();
        return saveSavedSearchCatalog(item.state,"restore");
      }
      if(item.kind==="test-plan"){
        var p=item.plan||{},subjectId=p.subject_id||p._subject_id||"";
        if(!subjectId)throw new Error("Deleted Test Plan subject identity is unavailable.");
        var sexpr='(optrestore :subject-ids ('+tpLispString(subjectId)+') :operator '+tpLispString(operator())+')';
        var response=await fetch(testPlansApiBase()+"/optrestore",{
          method:"POST",
          headers:{"Content-Type":"text/plain; charset=utf-8"},
          body:sexpr
        });
        var raw=await response.text(),result;
        try{result=JSON.parse(raw);}catch(parseError){
          throw new Error("Non-JSON optrestore response: "+raw.slice(0,240));
        }
        if(!response.ok||!result.ok)throw new Error(result.error||("HTTP "+response.status));
        if(Number(result.failed_count||0)>0||Number(result.missing_count||0)>0){
          var rr=(result.results||[])[0]||{};
          throw new Error(rr.error||rr.status||"Test Plan restore failed.");
        }
        return result;
      }
      throw new Error("Unsupported deleted object type: "+String(item.kind||"unknown"));
    }

    undeleteBtn.onclick=async function(){
      var rows=taggedItems();
      if(!rows.length){toast("Tag at least one deleted object first.","err");return;}
      if(!confirm("Undelete "+rows.length+" tagged object"+(rows.length===1?"":"s")+" to Active?"))return;
      var ok=0,failures=[];
      for(var i=0;i<rows.length;i++){
        try{await undeleteDeletedLifecycleItem(rows[i]);ok++;}
        catch(e){failures.push(deletedLifecycleItemLabel(rows[i])+": "+(e&&e.message||e));}
      }
      if(failures.length)toast(ok+" undeleted, "+failures.length+" failed: "+failures.slice(0,3).join("; ")+(failures.length>3?" …":""),"err");
      else toast(ok+" object"+(ok===1?"":"s")+" undeleted by CU append.","ok");
      await load();
    };
    archiveBtn.onclick=async function(){var rows=taggedItems();if(!rows.length){toast("Tag at least one deleted object first.","err");return;}if(!confirm("Archive "+rows.length+" tagged deleted object"+(rows.length===1?"":"s")+" into the deleted-record archive Hub?"))return;var ok=0,failures=[];for(var i=0;i<rows.length;i++){try{await archiveDeletedLifecycleItem(rows[i]);ok++;}catch(e){failures.push(deletedLifecycleItemLabel(rows[i])+": "+(e&&e.message||e));}}if(failures.length)toast(ok+" archived, "+failures.length+" failed: "+failures.slice(0,3).join("; ")+(failures.length>3?" …":""),"err");else toast(ok+" deleted object"+(ok===1?"":"s")+" archived by CU append.","ok");await load();};
    function levelNameFor(lv){return lv&&(lv.rawLabel||lv.label||("Level "+(lv.level_number||"")))||"";}
    function savedSearchTargets(){var seen={},out=[];Object.keys(model.byId).forEach(function(k){var n=model.byId[k];if(!n||(n.type!=="level"&&n.type!=="sub-hub"))return;var hub=hubIdForLevel(n),base=levelBase(n);if(!hub||!base)return;var subject=String(hub)+"::saved-search-catalog",key=base+"|"+subject;if(seen[key])return;seen[key]=true;out.push({base:base,subject:subject,hubId:String(hub),levelId:n.id,levelName:levelNameFor(n)||"—",tableName:n.rawLabel||n.label||String(hub)});});return out;}
    function inspectDeletedSearch(item){var x=item.search,requests=(x.requests||[]).length,criteria=(x.requests||[]).reduce(function(n,r){return n+(r.criteria||[]).length;},0);modal("Deleted Saved Search · "+(x.name||"Unnamed Search"),'<div class="card"><div class="card-body"><div class="saved-search-grid"><label>Name<input readonly value="'+esc(x.name||"")+'"></label><label>Status<input readonly value="Deleted"></label><label class="full">Description<textarea readonly>'+esc(x.description||"")+'</textarea></label><label>Level<input readonly value="'+esc(item.levelName||"")+'"></label><label>Table<input readonly value="'+esc(item.tableName||"")+'"></label><label>Lifecycle scope<input readonly value="'+esc(x.lifecycle_scope||"active")+'"></label><label>Parent scope<input readonly value="'+esc(x.parent_mode||"hub")+'"></label><label>Definition<input readonly value="'+requests+' requests · '+criteria+' criteria"></label><label>Deleted at<input readonly value="'+esc(ceeDisplayTimestamp(x.deleted_at||""))+'"></label><label class="full">Search ID<input readonly value="'+esc(x.search_id||"")+'"></label></div><div class="action-row" style="justify-content:flex-end;margin-top:12px"><button class="btn" id="deleted-search-chain">View Chain</button><button class="btn" onclick="closeEditModal()">Close</button></div></div></div>');document.getElementById("deleted-search-chain").onclick=function(){openUniversalChainViewer({base:item.state.base,subjectId:item.state.subject,title:"Saved Searches · "+item.tableName,detailKind:"generic"});};}
    async function load(){
      var tbody=el.querySelector("tbody"),status=el.querySelector(".browse-status-main"),diag=el.querySelector(".universal-deleted-diagnostics");tbody.innerHTML='<tr><td colspan="8" class="small-muted" style="padding:18px">Querying lifecycle sources…</td></tr>';status.textContent="Querying lifecycle sources…";diag.textContent="";w.tagged.clear();updateTagged();
      var rows=[],diagnostics=[],targets=lifecycleInstanceTargets(),failed=0;
      for(var i=0;i<targets.length;i++){var t=targets[i];status.textContent="Querying instance "+(i+1)+" of "+targets.length+": "+t.base;try{var response=await getJson(t.base+"/api/enterprise/records/deleted"),recs=normalizeRecords(response);diagnostics.push("BUSINESS OK · "+t.base+" · "+recs.length+" deleted");for(var j=0;j<recs.length;j++){var r=recs[j],node=lifecycleRecordNode(r,t),form=null;try{form=await businessFormFor(node.id);}catch(formError){diagnostics.push("FORM WARNING · "+(r.table_name||r.hub_id)+" · "+String((formError&&formError.message)||formError));}r._authority_base=t.base;rows.push({kind:"business-record",levelId:node.id,levelName:r.level_name||levelNameFor(t.seedLevel)||"—",tableName:r.table_name||node.label||r.hub_id||"—",record:r,form:form,sourceBase:t.base});}}catch(e){failed++;diagnostics.push("BUSINESS FAILED · "+t.base+" · "+String((e&&e.message)||e));}}
      var catalogs=savedSearchTargets();for(var c=0;c<catalogs.length;c++){var ct=catalogs[c];try{var cj=await getJson(ct.base+"/api/enterprise/level-system/latest?subject_id="+encodeURIComponent(ct.subject)),artifact=decodeArtifact(cj);if(!artifact||artifact.artifact_type!=="saved-search-catalog"||!Array.isArray(artifact.searches))continue;var state={base:ct.base,subject:ct.subject,artifact:artifact,tail:cj.tail_hash||cj.tail||cj.cu_id||""},deleted=artifact.searches.filter(function(x){return x&&x.status==="deleted";});deleted.forEach(function(x){rows.push({kind:"saved-search",levelId:ct.levelId,levelName:ct.levelName,tableName:ct.tableName,search:x,state:state});});}catch(e){if(!/404|not found|no current/i.test(String((e&&e.message)||e))){failed++;diagnostics.push("SEARCH FAILED · "+ct.tableName+" · "+String((e&&e.message)||e));}}}
      try{var tj=await getJson(testPlansApiBase()+"/deleted"),deletedPlans=(tj.plans||[]);deletedPlans.forEach(function(p){rows.push({kind:"test-plan",levelId:"",levelName:"—",tableName:"Test Plans",plan:p});});}catch(e){failed++;diagnostics.push("TEST PLANS FAILED · "+String((e&&e.message)||e));}
      rows.sort(function(a,b){var an=a.kind==="saved-search"?(a.search.name||""):(a.kind==="test-plan"?(a.plan.title||a.plan.plan_id||""):recordName(a.record)),bn=b.kind==="saved-search"?(b.search.name||""):(b.kind==="test-plan"?(b.plan.title||b.plan.plan_id||""):recordName(b.record));return (a.kind+"\0"+a.levelName+"\0"+a.tableName+"\0"+an).localeCompare(b.kind+"\0"+b.levelName+"\0"+b.tableName+"\0"+bn);});w.records=rows;tbody.innerHTML="";
      if(!rows.length)tbody.innerHTML='<tr><td colspan="8" class="small-muted" style="padding:18px;text-align:center">No deleted lifecycle objects found.</td></tr>';
      rows.forEach(function(item){
        if(item.kind==="test-plan"){var p=item.plan,label=p.title||p.plan_id||p.subject_id||"Untitled Test Plan",tr=document.createElement("tr"),tagKey=deletedLifecycleItemKey(item);tr.dataset.kind="test-plan";tr.dataset.tagKey=tagKey;tr.dataset.search=("test plan "+label+" "+(p.plan_id||"")).toLowerCase();tr.innerHTML='<td class="browse-select-cell"><input type="checkbox" class="universal-row-tag" aria-label="Tag deleted Test Plan"></td><td>Test Plan</td><td>—</td><td>Test Plans</td><td>'+esc(label)+'</td><td class="tail-hash">'+esc(p.cu_id||"—")+'</td><td>'+esc(ceeDisplayTimestamp(p.cu_published_at||""))+'</td><td><div class="action-row"><button class="btn deleted-row-chain">Chain</button><button class="btn deleted-row-restore">Undelete</button></div></td>';tr.querySelector(".universal-row-tag").onchange=function(e){e.stopPropagation();if(this.checked)w.tagged.add(tagKey);else w.tagged.delete(tagKey);updateTagged();};tr.querySelector(".deleted-row-chain").onclick=function(e){e.stopPropagation();openUniversalChainViewer({base:"",subjectId:p.subject_id,title:label,detailKind:"test-plan"});};tr.querySelector(".deleted-row-restore").onclick=async function(e){e.stopPropagation();try{await undeleteDeletedLifecycleItem(item);toast("Test Plan undeleted.","ok");await load();}catch(err){toast("Undelete failed: "+(err.message||err),"err");}};tbody.appendChild(tr);return;}
        if(item.kind==="saved-search"){var x=item.search,label=x.name||"Unnamed Search",tr=document.createElement("tr"),tagKey=deletedLifecycleItemKey(item);tr.dataset.kind="saved-search";tr.dataset.tagKey=tagKey;tr.dataset.search=("saved search "+item.levelName+" "+item.tableName+" "+label).toLowerCase();tr.innerHTML='<td class="browse-select-cell"><input type="checkbox" class="universal-row-tag" aria-label="Tag deleted Saved Search"></td><td>Saved Search</td><td>'+esc(item.levelName)+'</td><td>'+esc(item.tableName)+'</td><td>'+esc(label)+'</td><td class="tail-hash">'+esc(x.search_id||"—")+'</td><td>'+esc(ceeDisplayTimestamp(x.deleted_at||x.updated_at||""))+'</td><td><div class="action-row"><button class="btn deleted-row-chain">Chain</button><button class="btn deleted-row-restore">Undelete</button></div></td>';tr.querySelector(".universal-row-tag").onchange=function(e){e.stopPropagation();if(this.checked)w.tagged.add(tagKey);else w.tagged.delete(tagKey);updateTagged();};tr.onclick=function(e){if(!e.target.closest("button,input"))inspectDeletedSearch(item);};tr.querySelector(".deleted-row-chain").onclick=function(e){e.stopPropagation();openUniversalChainViewer({base:item.state.base,subjectId:item.state.subject,title:"Saved Searches · "+item.tableName,detailKind:"generic"});};tr.querySelector(".deleted-row-restore").onclick=async function(e){e.stopPropagation();try{var current=item.state.artifact.searches.find(function(s){return s.search_id===x.search_id;});current.status="active";current.deleted_at="";current.updated_at=savedSearchNow();item.state.artifact.updated_at=savedSearchNow();await saveSavedSearchCatalog(item.state,"restore");toast("Saved Search undeleted.","ok");load();}catch(err){toast("Undelete failed: "+(err.message||err),"err");}};tbody.appendChild(tr);return;}
        var tr=document.createElement("tr"),label=browseRecordDisplay(item.record,item.form),rid=recordId(item.record),tagKey=deletedLifecycleItemKey(item);tr.dataset.kind="business-record";tr.dataset.recordId=rid;tr.dataset.tagKey=tagKey;tr.dataset.search=("business record "+item.levelName+" "+item.tableName+" "+label).toLowerCase();tr.innerHTML='<td class="browse-select-cell"><input type="checkbox" class="universal-row-tag" aria-label="Tag record"></td><td>Business Record</td><td>'+esc(item.levelName)+'</td><td>'+esc(item.tableName)+'</td><td>'+esc(label)+'</td><td class="tail-hash">'+esc(item.record.deleted_id||"—")+'</td><td>'+esc(ceeDisplayTimestamp(item.record.deleted_at||item.record.updated||item.record.created_at||""))+'</td><td><div class="action-row"><button class="btn deleted-row-chain">Chain</button><button class="btn deleted-row-restore">Undelete</button></div></td>';
        tr.querySelector(".universal-row-tag").onchange=function(e){e.stopPropagation();if(this.checked)w.tagged.add(tagKey);else w.tagged.delete(tagKey);updateTagged();};tr.onclick=function(e){if(e.target.closest("button,input"))return;var pseudo="deleted-readonly-"+rid;model.browses[pseudo]={id:pseudo,levelId:item.levelId,formDesign:item.form,records:[item.record],selected:0};openRecordViewer(pseudo,item.record);delete model.browses[pseudo];};tr.querySelector(".deleted-row-chain").onclick=function(e){e.stopPropagation();openUniversalChainViewer({base:item.sourceBase||item.record._authority_base,subjectId:item.record.subject_id||recordSubjectId(item.record),title:label,detailKind:"business-record"});};tr.querySelector(".deleted-row-restore").onclick=async function(e){e.stopPropagation();try{await restoreRecordAtAuthority(item.record,{authoritativeBase:item.sourceBase||item.record._authority_base});toast("Record undeleted.","ok");load();}catch(err){toast("Undelete failed: "+(err.message||err),"err");}};tbody.appendChild(tr);
      });
      diag.textContent=diagnostics.join("\n");status.textContent=rows.length+" deleted object"+(rows.length===1?"":"s")+" · all displayed objects archivable"+(failed?" · "+failed+" failures":"");updateTagged();
    }
    el.querySelector(".universal-deleted-refresh").onclick=load;load();
  }
  window.openDeletedRecordsBrowse=openDeletedRecordsBrowse;

  async function openArchivedRecordsBrowse(){
    var id="archived-records-universal";if(document.getElementById(id)){setBrowseActive(id);return;}
    var el=document.createElement("div");el.className="browse-win";el.id=id;el.style.left="66px";el.style.top="54px";el.style.width="1070px";el.style.height="560px";
    el.innerHTML='<div class="browse-hdr"><span class="browse-title">Archived Records</span><span class="browse-scope">deleted-records archive Hub</span><button class="browse-max-btn" title="Maximize browse to canvas" aria-label="Maximize browse">□</button><button class="browse-close">×</button></div><div class="browse-tools"><div class="browse-command-group"><button class="icon-toolbar-btn archived-refresh" title="Refresh archived records"><svg viewBox="0 0 20 20"><path d="M16 10a6 6 0 1 1-1.8-4.3"/><polyline points="16 3.5 16 6.5 13 6.5"/></svg><span class="icon-toolbar-label">Refresh</span></button><button class="icon-toolbar-btn primary archived-restore" disabled title="Restore selected to Deleted Records"><svg viewBox="0 0 20 20"><path d="M7 4H4v3"/><path d="M4 7a6.5 6.5 0 1 0 2-4.5"/><path d="M10 7v5l3 2"/></svg><span class="icon-toolbar-label">Restore</span></button><div class="toolbar-sep"></div><button class="icon-toolbar-btn archived-diagnostics-toggle" title="Toggle diagnostics panel"><svg viewBox="0 0 20 20"><circle cx="10" cy="10" r="6.5"/><path d="M10 6.5v4.2"/><circle cx="10" cy="13.2" r=".8" fill="currentColor" stroke="none"/></svg><span class="icon-toolbar-label">Diagnostics</span></button></div><input class="browse-search" placeholder="Search archived records"></div><div class="browse-body"><table class="browse-table"><colgroup><col style="width:42px"><col style="width:135px"><col style="width:180px"><col style="width:190px"><col style="width:270px"><col style="width:220px"><col style="width:180px"><col style="width:130px"></colgroup><thead><tr><th class="browse-select-cell"><input type="checkbox" class="archived-select-all" aria-label="Tag all visible archived objects"></th><th>Type</th><th>Level</th><th>Table</th><th>Record</th><th>Archive ID</th><th>Archived At</th><th>Action</th></tr></thead><tbody><tr><td colspan="8" class="small-muted" style="padding:18px">Loading…</td></tr></tbody></table><pre class="archived-diagnostics" style="display:none;white-space:pre-wrap;margin:8px;padding:10px;border:1px solid var(--border);background:var(--bg2);font:10px/1.45 var(--mono);max-height:180px;overflow:auto"></pre></div><div class="browse-statusbar"><span class="browse-status-main">Loading…</span></div>';
    document.getElementById("mdi-layer").appendChild(el);model.browses[id]={id:id,title:"Archived Records",records:[],selected:-1,universalArchived:true,columnWidths:{},tagged:new Set()};renderBrowseChips();setBrowseActive(id);makeDraggable(el,el.querySelector(".browse-hdr"));setBrowseTableWidth(el.querySelector("table.browse-table"));
    el.querySelector(".browse-max-btn").onclick=function(e){e.stopPropagation();toggleBusinessBrowseSize(id);};
    el.querySelector(".browse-hdr").ondblclick=function(e){if(!e.target.closest("button,label,input"))toggleBusinessBrowseSize(id);};
    el.querySelector(".browse-close").onclick=function(){closeBusinessBrowse(id);};
    if(typeof ceeAddDetachButton==="function")ceeAddDetachButton(id);
    var w=model.browses[id],restoreBtn=el.querySelector(".archived-restore"),selectAll=el.querySelector(".archived-select-all");
    function taggedItems(){return (w.records||[]).filter(function(x){var r=x.record||{};return w.tagged.has(r.archive_entry_id||r.archive_id||r.archived_id||r.object_id||recordId(r));});}
    function updateTagged(){restoreBtn.disabled=!taggedItems().length;var visible=Array.from(el.querySelectorAll("tbody tr[data-record-id]")).filter(function(tr){return tr.style.display!=="none";}),checked=visible.filter(function(tr){return w.tagged.has(tr.dataset.recordId);}).length;selectAll.checked=!!visible.length&&checked===visible.length;selectAll.indeterminate=checked>0&&checked<visible.length;}
    el.querySelector(".browse-close").onclick=function(){closeBusinessBrowse(id);};el.querySelector(".browse-search").oninput=function(){var q=String(this.value||"").toLowerCase();el.querySelectorAll("tbody tr[data-search]").forEach(function(tr){tr.style.display=tr.dataset.search.indexOf(q)>=0?"":"none";});updateTagged();};el.querySelector(".archived-diagnostics-toggle").onclick=function(){var d=el.querySelector(".archived-diagnostics");d.style.display=d.style.display==="none"?"block":"none";};
    selectAll.onchange=function(){el.querySelectorAll("tbody tr[data-record-id]").forEach(function(tr){if(tr.style.display==="none")return;if(selectAll.checked)w.tagged.add(tr.dataset.recordId);else w.tagged.delete(tr.dataset.recordId);tr.querySelector(".archived-row-tag").checked=selectAll.checked;});updateTagged();};
    restoreBtn.onclick=function(){runLifecycleTaggedMutation({rows:taggedItems(),emptyMessage:"Tag at least one archived record first.",confirmText:function(n){return "Restore "+n+" archived record"+(n===1?"":"s")+" to Deleted status?";},mutate:restoreArchivedRecordToDeletedAtAuthority,successText:function(n){return n+" record"+(n===1?"":"s")+" restored to Deleted by CU append.";},reload:load});};
    async function load(){var tbody=el.querySelector("tbody"),status=el.querySelector(".browse-status-main"),diag=el.querySelector(".archived-diagnostics"),rows=[],diagnostics=[],targets=archivedLifecycleInstanceTargets(),failed=0;tbody.innerHTML='<tr><td colspan="8" class="small-muted" style="padding:18px">Querying deleted-record archive Hubs…</td></tr>';w.tagged.clear();updateTagged();for(var i=0;i<targets.length;i++){var t=targets[i];try{var response=await getJson(t.base+"/api/enterprise/records/archived?archive_context=deleted-records"),recs=normalizeRecords(response);diagnostics.push("ARCHIVE OK · "+t.base+" · "+recs.length);for(var j=0;j<recs.length;j++){var r=recs[j],node=lifecycleRecordNode(r,t),form=null;try{form=await businessFormFor(node.id);}catch(e){}r._authority_base=t.base;rows.push({levelId:node.id,levelName:r.level_name||(t.seedLevel&&(t.seedLevel.rawLabel||t.seedLevel.label))||"—",tableName:r.table_name||node.label||"—",record:r,form:form,sourceBase:t.base});}}catch(e){failed++;diagnostics.push("ARCHIVE FAILED · "+t.base+" · "+String((e&&e.message)||e));}}w.records=rows;tbody.innerHTML="";if(!rows.length)tbody.innerHTML='<tr><td colspan="8" class="small-muted" style="padding:18px;text-align:center">No objects in the deleted-record archive context.</td></tr>';rows.forEach(function(item){var r=item.record,kind=r.object_type||r.kind||"business-record",rid=r.archive_entry_id||r.archive_id||r.archived_id||r.object_id||recordId(r),label=r.object_label||r.label||r.record_name||browseRecordDisplay(r,item.form),typeLabel=kind==="saved-search"?"Saved Search":(kind==="test-plan"?"Test Plan":"Business Record"),tr=document.createElement("tr");tr.dataset.recordId=rid;tr.dataset.search=(typeLabel+" "+item.levelName+" "+item.tableName+" "+label+" "+rid).toLowerCase();tr.innerHTML='<td class="browse-select-cell"><input type="checkbox" class="archived-row-tag" aria-label="Tag archived object"></td><td>'+esc(typeLabel)+'</td><td>'+esc(item.levelName)+'</td><td>'+esc(item.tableName)+'</td><td>'+esc(label)+'</td><td class="tail-hash">'+esc(r.archive_id||r.archived_id||"—")+'</td><td>'+esc(ceeDisplayTimestamp(r.archived_at||r.updated||""))+'</td><td><button class="btn archived-row-chain">Chain</button></td>';tr.querySelector(".archived-row-tag").onchange=function(e){e.stopPropagation();if(this.checked)w.tagged.add(rid);else w.tagged.delete(rid);updateTagged();};tr.onclick=function(e){if(e.target.closest("button,input"))return;var pseudo="archived-readonly-"+rid;model.browses[pseudo]={id:pseudo,levelId:item.levelId,formDesign:item.form,records:[r],selected:0};openRecordViewer(pseudo,r);delete model.browses[pseudo];};tr.querySelector(".archived-row-chain").onclick=function(e){e.stopPropagation();openUniversalChainViewer({base:item.sourceBase,subjectId:r.subject_id||recordSubjectId(r),title:label,detailKind:"business-record"});};tbody.appendChild(tr);});diag.textContent=diagnostics.join("\n");status.textContent=rows.length+" archived object"+(rows.length===1?"":"s")+(failed?" · "+failed+" failures":"");updateTagged();}
    el.querySelector(".archived-refresh").onclick=load;load();
  }
  window.openArchivedRecordsBrowse=openArchivedRecordsBrowse;

  async function softDeleteRecord(browseId,r){
    if(!confirm("Soft delete "+recordName(r)+"? The CU history will be preserved."))return;
    var w=model.browses[browseId],lv=model.byId[w.levelId],base=levelBase(lv);
    var payload={
      subject_id:recordId(r),
      loaded_tail_hash:recordTail(r),
      operator:operator()
    };
    await postJson(base+"/api/enterprise/records/delete",payload);
    toast("Record soft-deleted by CU append.","ok");await refreshBusinessBrowse(browseId);
  }
  /* v31c324 (claude): bulk counterpart to softDeleteRecord for a tagged
     found-set selection of more than one record. One confirm naming the
     count (not N separate confirms), one summary toast, one refresh at
     the end. Delegates to the exact same single-record path when there's
     only one, so there's one source of truth for the actual delete call. */
  async function softDeleteRecords(browseId,records){
    if(!records.length)return;
    if(records.length===1)return softDeleteRecord(browseId,records[0]);
    if(!confirm("Soft delete "+records.length+" tagged records? The CU history will be preserved for each."))return;
    var w=model.browses[browseId],lv=model.byId[w.levelId],base=levelBase(lv),ok=0,failures=[];
    for(var i=0;i<records.length;i++){
      var r=records[i];
      try{await postJson(base+"/api/enterprise/records/delete",{subject_id:recordId(r),loaded_tail_hash:recordTail(r),operator:operator()});ok++;}
      catch(e){failures.push(recordName(r)+": "+(e&&e.message||e));}
    }
    if(failures.length)toast(ok+" deleted, "+failures.length+" failed: "+failures.slice(0,3).join("; ")+(failures.length>3?" \u2026":""),"err");
    else toast(ok+" records soft-deleted by CU append.","ok");
    await refreshBusinessBrowse(browseId);
  }

  /* v31 (claude): the <chain> button -- backend (ent-spoke-chain-browser.lisp)
     was always real and ready; business records just never had any CU
     history to show until records became genuinely CU-backed. Two real
     bugs fixed earlier this session, both moot now that records are
     Spokes (ent-crud.lisp v3): the old double "hub-hub-" subject_id
     prefix only ever existed because records were Hubs, and the
     missing-instance-routing bug (this query hitting CEE's own origin
     instead of the record's owning worker instance via levelBase(lv)).
     recordId(r) is now a genuine spoke subject_id (spk-record-<uuid>)
     with no prefix concerns at all -- nothing to get wrong there anymore.
     Newest-first per the backend's own ordering (seq 1 = tail/newest);
     shown in that same order here rather than re-sorted. Read-only by
     design -- this is evidence navigation, not an editing surface. */
  function cuIdTimestamp(cuId){
    var hex=String(cuId||"").replace(/-/g,"").toLowerCase();
    if(!/^[0-9a-f]{32}$/.test(hex))return null;
    var ms=parseInt(hex.slice(0,12),16);
    if(!Number.isFinite(ms))return null;
    var d=new Date(ms);
    if(!Number.isFinite(d.getTime()))return null;
    return {milliseconds:ms,date:d,label:d.toLocaleString()};
  }

  async function openChainBrowse(browseId,r){
    var w=model.browses[browseId],lv=w&&model.byId[w.levelId];
    var base=(r&&r._authority_base)||((lv&&levelBase(lv))||"");
    var subjectId=recordId(r);
    var chainTitle=String(browseRecordDisplay(r,w&&w.formDesign)||recordName(r));
    return openUniversalChainViewer({parentWinId:browseId,base:base,subjectId:subjectId,title:chainTitle,detailKind:"business-record"});
  }

  window.copyActiveFormDraft=async function(){var d=model.drafts[activeFormEditorNodeId];if(!d)return;try{await navigator.clipboard.writeText(JSON.stringify(d,null,2));toast('Form draft copied.','ok');}catch(e){toast('Could not copy draft.','err');}};
  window.refreshActiveFormTemplate=function(){var n=model.byId[activeFormEditorNodeId];if(n)openEditor(n);};
  window.CEE20={
    /* ChatGPT 20260720-04: generated inline Form Designer handlers execute in global scope. */
    deriveIndexedName:function(label){return deriveIndexedName(label);},
    edit:function(id){var n=model.byId[id];if(n)openEditor(n);},
    openBrowse:function(levelId,parentId){openBusinessBrowse(levelId,parentId||null);},
    testInstance:function(id){testCeeInstanceNode(id);},openInstanceDiagnostics:function(id){var n=model.byId[id];if(!n)return;window.openInstanceDiagnostics({base:(function(raw){raw=String(raw||"").trim();if(!raw)return "";return /^https?:\/\//i.test(raw)?raw.replace(/\/$/,""):"http://"+raw.replace(/\/$/,"")})(n.instance_address),instance_id:n.instance_id||"",instance_name:n.instance_name||n.label||"Worker Instance",instance_address:n.instance_address||"",role:"worker",configured_description:"",nodeId:id});},
    floodTestData:function(){floodTestData();try{refreshCalculatedFields();}catch(_e){}},
    saveSubHub:function(levelId){saveSubHub(levelId);},
    saveFormDesign:function(levelId){saveFormDesign(levelId);},
    saveRecord:async function(){
      console.log("[CEE record debug] Save button invoked.");
      var btn=document.getElementById("cee-save-record-btn");
      var idleLabel="Append Record CU";
      var d=model.drafts&&model.drafts.record;
      var pendingFiles=(d&&d.pendingFiles&&typeof d.pendingFiles==="object")?d.pendingFiles:{};
      var hasAttachments=Object.keys(pendingFiles).some(function(k){return !!pendingFiles[k];});
      var busyLabel=hasAttachments?"Uploading attachments…":"Saving…";
      var timeoutMs=hasAttachments?90000:45000;
      function setSaveBusy(busy,label){
        if(!btn)return;
        if(busy){
          btn.disabled=true;
          btn.setAttribute("aria-busy","true");
          btn.innerHTML='<span class="lb-spinner" aria-hidden="true"></span><span>'+(label||busyLabel)+'</span>';
        }else{
          btn.disabled=false;
          btn.removeAttribute("aria-busy");
          btn.textContent=idleLabel;
        }
      }
      if(btn&&btn.getAttribute("aria-busy")==="true")return;
      setSaveBusy(true,busyLabel);
      var timedOut=false;
      var timer=setTimeout(function(){
        timedOut=true;
        console.error("[CEE record debug] Save timed out after "+timeoutMs+"ms");
      },timeoutMs);
      try{
        await Promise.race([
          saveBusinessRecord(),
          new Promise(function(_,reject){
            setTimeout(function(){
              reject(new Error("Save timed out after "+Math.round(timeoutMs/1000)+"s. The upload or record CU may still be running on the server — Refresh the browse before retrying."));
            },timeoutMs);
          })
        ]);
        if(!timedOut)console.log("[CEE record debug] Save completed successfully.");
      }catch(e){
        console.error("[CEE record debug] Save failed before completion.",e);
        var msg=String((e&&e.message)||e||"");
        var data=e&&e.data;
        if(msg.indexOf("stale-tail")>=0||(data&&data.error==="stale-tail")){
          toast("Record changed since you opened it (stale tail). Close this form, click Refresh on the browse, then edit again.","err");
        }else{
          toast("Record save failed: "+msg,"err");
        }
      }finally{
        clearTimeout(timer);
        setSaveBusy(false);
      }
    },

    saveInfo:async function(id){
      var n=model.byId[id],lv=model.byId[n.levelId];
      /* v31c3 (claude): matches the corrected level-info editor above --
         writes {values:{name,status,description}}, not the old
         personality-field-list iteration. source_personality_id removed:
         level_info is explicitly not personality-derived, so tying it to
         a specific personality file was itself part of the bug. */
      var values={
        name:(document.querySelector('[data-level-field="name"]')||{}).value||"",
        status:(document.querySelector('[data-level-field="status"]')||{}).value||"active",
        description:(document.getElementById('level-info-description')||{}).value||""
      };
      var artifact={
        artifact_type:"level-info",
        level_id:n.levelId,
        level_number:lv.level_number,
        values:values
      };
      await save(n,artifact);
      lv.rawLabel=values.name;
      lv.label="Level "+lv.level_number+" — "+values.name;
      renderTree();
      showDetail(lv);
    },
    primaryDisplay:function(id,i,on){
      var d=model.drafts[id];if(!d||!d.fields[i])return;
      if(on)d.fields.forEach(function(f,idx){f.primary_display=(idx===i);});
      else d.fields[i].primary_display=false;
      drawFormEditor(model.byId[id]);
    },
    field:function(id,i,k,v){
      var d=model.drafts[id];if(!d||!d.fields[i])return;
      var f=d.fields[i];
      if(fieldIsRetired(f)){
        toast("Retired fields are read-only. Add a new field to supersede.","err");
        drawFormEditor(model.byId[id]);
        return;
      }
      if((k==="label"||k==="name")&&f.field_id&&(d._persisted_field_ids||[]).indexOf(f.field_id)>=0){
        toast("Can't edit Label on a published field — its indexed name is a live schema key. Retire it and add a new field instead.","err");
        drawFormEditor(model.byId[id]);
        return;
      }
      if(k==="allowed_values_csv"){
        f.allowed_values_csv=v;
        f.allowed_values=String(v||"").split(/[,\s]+/).map(function(x){return Number(String(x).trim());}).filter(function(n){return isFinite(n);});
        return;
      }
      if(k==="entry_mode"){
        if(fieldIsCalculated(f)){toast("Entry mode does not apply to calculated fields.","err");drawFormEditor(model.byId[id]);return;}
        f.entry_mode=(String(v).toLowerCase()==="select")?"select":"free";
        drawFormEditor(model.byId[id]);
        return;
      }
      if(k==="calculated"){
        f.calculated=!!v;
        if(f.calculated){
          if(!formulaCompatibleType(f.type||"")){
            f.type="integer";
          }
          delete f.entry_mode;delete f.allowed_values;delete f.allowed_values_csv;delete f.number_preset;
          if(f.formula==null)f.formula="";
        }else{
          /* keep formula text in case user toggles back */
        }
        drawFormEditor(model.byId[id]);
        return;
      }
      if(k==="formula"){
        f.formula=String(v||"");
        return;
      }
      f[k]=v;
      if(k==="type"){
        if(!formulaCompatibleType(f.type||"")&&fieldIsCalculated(f)){
          f.calculated=false;
          toast("Calculated cleared — formulas require Number (integer) type.","err");
        }
        var t=String(f.type||"").toLowerCase();
        if(t==="file"||t==="attachment"){
          f.calculated=false;
          if(f.formula)f.formula="";
          delete f.entry_mode;delete f.allowed_values;delete f.allowed_values_csv;delete f.number_preset;
        }
        drawFormEditor(model.byId[id]);
      }
    },
    insertFormulaToken:function(id,i,token){
      var d=model.drafts[id],f=d&&d.fields&&d.fields[i];if(!f||!token)return;
      if(fieldIsRetired(f)){toast("Retired fields are read-only.","err");return;}
      if(f.field_id&&(d._persisted_field_ids||[]).indexOf(f.field_id)>=0){
        toast("Published calculated formula is locked. Retire and add a new field to change it.","err");
        return;
      }
      var el=document.getElementById("fc-formula-"+id+"-"+i);
      var cur=(el&&typeof el.value==="string")?el.value:(f.formula||"");
      /* Field refs are backtick-quoted so hyphens in indexed names are unambiguous.
         Operators arrive already spaced from the Operator dropdown. */
      var piece=token;
      var isOp=/^\s*[+\-*/()]\s*$/.test(token)||token==="("||token===")";
      if(!isOp){
        var key=String(token).trim();
        if(key.charAt(0)!=="`")piece="`"+key+"`";
      }
      var next=cur+piece;
      f.formula=next;
      if(el)el.value=next;
      drawFormEditor(model.byId[id]);
    },
    clearFormula:function(id,i){
      var d=model.drafts[id],f=d&&d.fields&&d.fields[i];if(!f)return;
      if(fieldIsRetired(f)){toast("Retired fields are read-only.","err");return;}
      if(f.field_id&&(d._persisted_field_ids||[]).indexOf(f.field_id)>=0){
        toast("Published calculated formula is locked. Retire and add a new field to change it.","err");
        return;
      }
      f.formula="";
      drawFormEditor(model.byId[id]);
    },
    applyIntegerPreset:function(id,i,presetKey){
      var d=model.drafts[id],f=d&&d.fields&&d.fields[i];if(!f||!presetKey)return;
      if(String(f.type||"")!=="integer"||fieldIsCalculated(f)){toast("Presets apply only to input integer fields.","err");return;}
      var p=INTEGER_NUMBER_PRESETS[presetKey];
      if(!p){toast("Unknown preset","err");return;}
      f.entry_mode="select";
      f.allowed_values=p.values.slice();
      f.allowed_values_csv=p.values.join(", ");
      f.number_preset=presetKey;
      drawFormEditor(model.byId[id]);
      toast("Applied "+p.label,"ok");
    },
    formName:function(id,v){model.drafts[id].name=v;},
    addField:function(id){
      model.drafts[id].fields.push({field_id:newDraftSchemaId(),name:deriveIndexedName("New Field"),label:"New Field",type:"text",required:false,indexed:false,sort:"asc",index_kind:"single",index_group:"",index_order:1,index_purpose:""});
      drawFormEditor(model.byId[id]);
    },
    /* v31c132 (claude): Testing utility -- appends one field per supported
       data type in a single click, each with a default field-help entry describing what that type
       exercises. Strictly for the testing platform -- existing fields are
       left untouched, test fields are always appended after them. Field
       help is registered client-side (registerDynamicHelp) against each new
       field's draft schema id, so "? help" shows useful default text
       immediately; like any other field, publish (Append Form Design CU)
       is still required to persist the field itself. */
    addTypeTestFields:function(id){
      var n=model.byId[id];if(!n)return;
      var d=ensureDraftSchemaIds(model.drafts[id]);
      var lv=model.byId[n.levelId];
      var hubId=d.hub_id||hubIdForLevel(lv);
      /* v31c137 (claude): every Hub that runs this utility previously got
         IDENTICAL field names (test-text, test-select-single, ...), since
         they're derived from identical labels. Two test Hubs (e.g. Test
         table 100 and Test table 101) then share the same field key --
         if any option/field validation on the backend resolves "defined
         options for this field" by name rather than strictly by
         (hub_id, field_id), one Hub's freshly-allocated, genuinely valid
         option ID can get checked against a DIFFERENT Hub's option set
         and rejected. A short per-batch suffix makes every test field
         this button creates unique across every Hub it's ever run on,
         closing that collision off regardless of how the backend scopes
         its lookup. */
      var suffix=Math.random().toString(36).slice(2,6);
      var TYPES=[
        ["text","Text","TEST FIELD -- Text. Single-line string input. Exercises basic text storage/retrieval, the Case toggle's text-case transforms, and indexed-name derivation from the Label."],
        ["markdown","Markdown (rich text)","TEST FIELD -- Markdown (rich text). Multi-line rich-text input. Exercises markdown rendering/storage and larger text payloads."],
        ["select","Select (single)","TEST FIELD -- Select (single). Single-choice dropdown backed by canonical numeric option IDs. Exercises option publish (id/label/indexed_name/status), record-time ID submission, and label display."],
        ["multi_select","Select (multiple)","TEST FIELD -- Select (multiple). Multi-choice selection backed by canonical numeric option IDs. Exercises multi-value storage and comma-separated option handling."],
        ["integer","Number (integer)","TEST FIELD -- Number (integer). Whole-number input. Exercises numeric validation and storage."],
        ["list<integer>","Number list","TEST FIELD -- Number list. Comma-separated list of whole numbers. Exercises list<integer> parsing/display (integerListDisplay) and storage."],
        ["boolean","Yes / No","TEST FIELD -- Yes / No. Boolean toggle rendered as a Yes/No select. Exercises boolean coercion on read and write."],
        ["date","Date","TEST FIELD -- Date. Date input. Exercises date storage and display."],
        ["file","File attach","TEST FIELD -- File attach. One file per field; upload via attachments API bound to the record subject_id. Add another file field if a second attachment is required."]
      ];
      TYPES.forEach(function(t){
        var type=t[0],typeLabel=t[1],helpBody=t[2];
        var label="TEST -- "+typeLabel+" ("+suffix+")";
        var fieldId=newDraftSchemaId();
        var field={field_id:fieldId,name:deriveIndexedName(label),label:label,type:type,required:false,indexed:false,sort:"asc",index_kind:"single",index_group:"",index_order:1,index_purpose:""};
        /* v31c136 (claude): distinct labels from the select field's, so
           their derived indexed_names can't collide if option uniqueness
           is scoped beyond the individual field server-side. */
        if(type==="select")field.optionsCsv="Option A, Option B, Option C";
        if(type==="multi_select")field.optionsCsv="Choice One, Choice Two, Choice Three";
        d.fields.push(field);
        registerDynamicHelp({
          context_id:fieldHelpContextId(d.form_design_id,fieldId),
          context_type:"form_field",
          form_design_id:d.form_design_id,
          field_id:fieldId,
          field_label:label,
          title:label,
          level_id:n.levelId||"",
          hub_id:hubId||"",
          default_body:helpBody,
          tags:["Field Help","Testing",typeLabel]
        });
      });
      drawFormEditor(n);
      toast("Added one test field per data type ("+TYPES.length+") with default help.","ok");
    },
    removeField:function(id,i){
      var d=model.drafts[id],f=d&&d.fields&&d.fields[i];if(!d||!f)return;
      if(fieldIsRetired(f)){toast("Field is already retired.","err");return;}
      if((d._persisted_field_ids||[]).indexOf(f.field_id)>=0){
        f.retired=true;
        f.status="retired";
        d._retired_fields=d._retired_fields||[];
        if(!d._retired_fields.some(function(x){return x.field_id===f.field_id;}))
          d._retired_fields.push(Object.assign({},f));
        drawFormEditor(model.byId[id]);
        toast("Field retired. Stays on Form Definition with retired=true; browse/find/forms ignore it.","ok");
        return;
      }
      d.fields.splice(i,1);drawFormEditor(model.byId[id]);
    },
    /* v31c317 (claude): per-row option identity handlers. optionLabel edits
       a row's label IN PLACE -- id untouched, so existing records that
       already resolved that id still resolve to the (now-updated) label,
       exactly the "changed" case. optionAdd appends a fresh placeholder
       row (id:"" until saveForm/assignAuthoritativeSchemaIds allocates a
       real 256-bit Chandra id) -- "added". optionRetireToggle flips
       status only and never removes the row -- "deleted" is retire-only,
       so a record holding that id stays resolvable forever instead of
       going permanently unrecoverable. optionBulkAdd is the non-
       destructive replacement for the old CSV textbox: it only ever adds
       rows for labels not already present (case-insensitive); it never
       edits, retires, or removes anything that's already there. */
    optionAdd:function(id,i){
      var d=model.drafts[id],f=d&&d.fields&&d.fields[i];if(!f)return;
      if(!Array.isArray(f.options))f.options=[];
      f.options.push({id:"",label:"",indexed_name:"",status:"active",order:f.options.length});
      drawFormEditor(model.byId[id]);
    },
    optionLabel:function(id,i,j,v){
      var d=model.drafts[id],f=d&&d.fields&&d.fields[i],o=f&&Array.isArray(f.options)&&f.options[j];if(!o)return;
      o.label=v;o.indexed_name=deriveIndexedName(v);
    },
    optionRetireToggle:function(id,i,j){
      var d=model.drafts[id],f=d&&d.fields&&d.fields[i],o=f&&Array.isArray(f.options)&&f.options[j];if(!o)return;
      o.status=(String(o.status||"active").toLowerCase()==="retired")?"active":"retired";
      drawFormEditor(model.byId[id]);
    },
    optionBulkAdd:function(id,i){
      var d=model.drafts[id],f=d&&d.fields&&d.fields[i];if(!f)return;
      var text=window.prompt("Add options (comma-separated). Existing options are never touched, renamed, or removed.","");
      if(text==null)return;
      var labels=String(text).split(",").map(function(x){return x.trim();}).filter(Boolean);
      if(!labels.length)return;
      if(!Array.isArray(f.options))f.options=[];
      var existing={};
      f.options.forEach(function(o){existing[String(o.label||"").trim().toLowerCase()]=true;});
      labels.forEach(function(label){
        var key=label.toLowerCase();
        if(existing[key])return;
        existing[key]=true;
        f.options.push({id:"",label:label,indexed_name:deriveIndexedName(label),status:"active",order:f.options.length});
      });
      drawFormEditor(model.byId[id]);
    },
    saveForm:async function(id){
      var n=model.byId[id],d=ensureDraftSchemaIds(model.drafts[id]);
      /* v31c133 (claude): must run BEFORE assignAuthoritativeSchemaIds. Select
      /* v31c317 (claude): saveForm used to rebuild f.options from scratch by
         diffing optionsCsv TEXT against the old array every publish
         (selectOptionRecordsFromCsv) -- silently dropping (not retiring)
         any option whose current label text wasn't in the CSV box,
         including already-retired ones, and resetting status to "active"
         for whatever it kept. f.options is now edited directly and in
         place by the per-row editor (CEE20.optionAdd/optionLabel/
         optionRetireToggle), so there's nothing to rebuild here -- just
         normalize shape and drop any placeholder row the user added but
         never labeled. */
      (d.fields||[]).forEach(function(f){
        if(f.type==="textarea")f.type="markdown";
        if(f.type==="select"||f.type==="multi_select"){
          normalizeFieldOptions(f);
          f.options=f.options.filter(function(o){return String(o.label||"").trim()!=="";});
          delete f.optionsCsv;
        }else{delete f.options;delete f.optionsCsv;}
        if(!(f.type==="text"||!f.type))delete f.text_case;
        if(fieldIsRetired(f)){f.retired=true;f.status="retired";}
        if(f.type==="integer"&&!fieldIsCalculated(f)){
          f.entry_mode=integerEntryMode(f);
          f.allowed_values=integerAllowedValues(f);
          f.allowed_values_csv=f.allowed_values.join(", ");
        }else if(f.type!=="integer"){
          delete f.entry_mode;delete f.allowed_values;delete f.allowed_values_csv;delete f.number_preset;
        }
        if(fieldIsCalculated(f)){
          f.calculated=true;
          f.formula=String(f.formula||"");
          delete f.entry_mode;delete f.allowed_values;delete f.allowed_values_csv;delete f.number_preset;
        }else{
          delete f.calculated;delete f.formula;delete f.calc_depends_on;delete f.calc_eval_order;
        }
      });
      try{
        await assignAuthoritativeSchemaIds(n,d);
      }catch(e){
        d._save_notice='<div class="card" style="border-color:var(--red);margin-bottom:10px"><div class="card-body"><strong>Form template was not saved.</strong><div class="small-muted" style="margin-top:5px">'+esc(e.message||e)+'</div></div></div>';
        drawFormEditor(n);return;
      }

      var indexes=[];
      (d.fields||[]).filter(function(f){return !!f.indexed&&!fieldIsRetired(f);}).forEach(function(f){
        if((f.index_kind||"single")==="single"){
          indexes.push({
            index_id:"idx_"+f.name,
            kind:"single",
            fields:[f.name],
            sort:[f.sort||"asc"],
            purpose:f.index_purpose||"find_sort"
          });
        }
      });
      var groups={};
      (d.fields||[]).filter(function(f){return f.indexed&&f.index_kind==="composite"&&f.index_group;}).forEach(function(f){
        (groups[f.index_group]||(groups[f.index_group]=[])).push(f);
      });
      Object.keys(groups).forEach(function(g){
        var ordered=groups[g].slice().sort(function(a,b){return Number(a.index_order||1)-Number(b.index_order||1);});
        indexes.push({
          index_id:"idx_"+g,
          kind:"composite",
          fields:ordered.map(function(f){return f.name;}),
          sort:ordered.map(function(f){return f.sort||"asc";}),
          purpose:ordered.map(function(f){return f.index_purpose||"";}).filter(Boolean).join(",")||"find_sort"
        });
      });

      var artifact={artifact_type:"level-form-design",form_design_id:d.form_design_id,level_id:n.levelId,name:d.name||"Form",fields:(d.fields||[]).map(function(f){var c=Object.assign({},f);delete c.optionsCsv;return c;}),indexes:indexes,index_policy:{equality_prefix_required:true,range_field_must_be_last:true,explicit_composites_only:true,automatic_polling:false}};
      try{await save(n,artifact,{keepOpen:true});}
      catch(e){if(e.data&&e.data.error==='stale-tail'){d._save_notice='<div class="card" style="border-color:var(--red);margin-bottom:10px"><div class="card-body"><strong>This form template changed while you were editing it.</strong><div class="small-muted" style="margin-top:5px">The template was not saved. Refresh the template before making a fresh edit.</div><div class="action-row"><button class="btn" onclick="copyActiveFormDraft()">Copy My Draft</button><button class="btn primary" onclick="refreshActiveFormTemplate()">Refresh Template</button></div></div></div>';drawFormEditor(n);return;}throw e;}
      d._persisted_field_ids=(d.fields||[]).map(function(f){return f.field_id;});d._form_was_persisted=true;
      var retired=(d._retired_fields||[]).slice(),results=[];
      for(var ri=0;ri<retired.length;ri++){
        var rf=retired[ri],meta=fieldHelpMeta(d.form_design_id,rf.field_id,rf.label||rf.name,n.levelId,d.hub_id||hubIdForLevel(model.byId[n.levelId]));
        try{
          var latest=normalizeArtifactResponse(await getJson(helpContextsApi("latest")+"?context_id="+encodeURIComponent(meta.context_id)));
          var tail=(latest&&latest.tail_hash)||'',ha=latest&&latest.artifact;
          if(!tail){results.push('— '+(rf.label||rf.name)+' — no associated help context');continue;}
          if(ha&&ha.status==='retired'){results.push('✓ '+(rf.label||rf.name)+' help already retired');continue;}
          await postJson(helpContextsApi("save"),{context_id:meta.context_id,subject_id:(latest&&latest.subject_id)||'',action:'soft-delete',title:(ha&&ha.title)||rf.label||rf.name,scope:(ha&&ha.scope)||'enterprise-editor',default_body:(ha&&ha.default_body)||'',user_body:(ha&&ha.user_body)||'',tags_json:JSON.stringify(contextHelpTags(meta,ha)),status:'retired',context_type:'form_field',form_design_id:d.form_design_id,field_id:rf.field_id,field_label:rf.label||rf.name,level_id:n.levelId,hub_id:meta.hub_id||'',loaded_tail_hash:tail,operator:operator()});
          results.push('✓ '+(rf.label||rf.name)+' help retired');
        }catch(e){results.push('✕ '+(rf.label||rf.name)+' help retirement failed'+((e.data&&e.data.error==='stale-tail')?' — refresh required':''));}
      }
      d._retired_fields=[];
      d._save_notice='<div class="card" style="margin-bottom:10px"><div class="card-body"><strong>Form template saved.</strong>'+(results.length?'<div class="small-muted" style="margin-top:5px">Retired field help:<br>'+results.map(esc).join('<br>')+'</div>':'')+'</div></div>';
      renderTree();showDetail(n);
      if(n._openBrowseAfterFirstFormSave){
        n._openBrowseAfterFirstFormSave=false;
        var parentId=n._newTableParentId||"";
        var parentName=n._newTableParentName||"";
        var sourceBrowseId=n._newTableSourceBrowseId||"";
        closeEditModal();
        openBusinessBrowse(n.levelId,parentId||null,parentName||null,sourceBrowseId||null,null);
        if(!parentId) toast("Table is ready. Select a parent record before adding related records.","ok");
      }else{
        drawFormEditor(n);
      }
    }
  };

  function setHeader(payload){
    /* environmentLabel sync moved to loadTree(), before build() -- see
       comment there. By the time setHeader runs, context.environmentLabel
       is already correct. */
    var root=context.environmentRoot||"acceptance";
    var rootLabel=root==="production"?"Production":"Acceptance "+context.environmentLabel;
    var local=window.CEE_LOCAL_INSTANCE||{};
    var localName=local.instance_name||"Unnamed Spine Instance";
    var localId=local.instance_id||"identity unavailable";
    var purpose=String(local.instance_purpose||"spine").toUpperCase();
    document.getElementById("cee-instance-title").textContent=localName;
    document.getElementById("cee-health-badge").textContent=purpose;
    document.getElementById("tb-binding-name").textContent=(root==="production"?"PRODUCTION SPINE":"ACCEPTANCE SPINE — "+context.environmentLabel);
    document.getElementById("cee-instance-meta").textContent=
      localId+" · "+rootLabel+" · persisted spine · "+payload.level_count+" Levels · genesis "+payload.genesis_key;
  }
  async function hydrateLevelInfoLabels(){
    var levels=Object.keys(model.byId).map(function(id){return model.byId[id];})
      .filter(function(n){return n && n.type==="level";});

    await Promise.all(levels.map(async function(lv){
      /* Hub Info is the authoritative display source for the Level's canonical
         business Hub. Legacy level-info is consulted only when no hub-info CU
         exists, so older test spines remain readable without overriding a
         subsequently governed table name. */
      try{
        var hubInfo=await loadHubInfo({
          levelId:lv.id,
          hubId:hubIdForLevel(lv),
          instanceBase:normalizeInstanceBase(lv.instance_address||""),
          owningInstance:lv.instance_address||"",
          rawLabel:lv.rawLabel,
          label:lv.label,
          description:lv.description||""
        });
        if(hubInfo&&hubInfo.loaded_tail_hash&&hubInfo.name){
          applyHubDisplayNameToLevel(lv,hubInfo.name,hubInfo);
          return;
        }
      }catch(e){
        console.warn("Canonical Hub Info label hydration failed",e);
      }

      var info=model.byId[lv.id+"::info"];
      if(!info) return;
      try{
        var latest=await getJson("/api/enterprise/level-system/latest?subject_id="+encodeURIComponent(info.subjectId));
        var artifact=decodeArtifact(latest);
        var levelInfoName = (artifact && (artifact.name || artifact.label)) || "";
        if(levelInfoName){
          lv.rawLabel=levelInfoName;
          lv.label="Level "+lv.level_number+" — "+levelInfoName;
        }
        var tail=latest.tail_hash||latest.cu_id||artifact.tail_hash||artifact.cu_id||"";
        if(tail) info.tail=tail;
      }catch(e){
        // No Level Info CU yet; retain the persisted spine label.
      }
    }));
  }

  /* v31c3 (claude): readSpineManifest and the pre-fetch it fed into were
     removed here. That code assumed CEE needed to resolve "which spine is
     current" itself, via an /api/enterprise/spine/{root}/manifest endpoint
     that was never real -- confirmed once and for all by this exact
     404/SyntaxError showing up in a real browser console during testing,
     not just by static reading. The backend already does this correctly:
     /api/enterprise/tree/local, with no genesis_key and no environment_label
     supplied, resolves via ent-spine-current-genesis-key's own
     label-then-latest-overall fallback chain. CEE never needed to duplicate
     that logic client-side -- it just needed to stop sending a fabricated
     label, which the fix below (hasExplicitLabel) already handles. */
  async function loadTree(){
    var root=context.environmentRoot||"acceptance";
    var hasExplicitLabel=!!(params.get("environment_label") || params.get("acceptance_label"));
    var url="/api/enterprise/tree/local?environment_root="+encodeURIComponent(root);
    if(root==="acceptance"){
      if(hasExplicitLabel) url+="&environment_label="+encodeURIComponent(context.environmentLabel);
      if(context.genesisKey)url+="&genesis_key="+encodeURIComponent(context.genesisKey);
    }
    var payload=await getJson(url);
    model.payload=payload;
    /* v31c3 (claude): moved here from setHeader(), which ran too late --
       build() (right below) bakes the tree root's own label into
       model.root.label as a fixed string, using whatever
       context.environmentLabel was AT THAT MOMENT. setHeader() only fixes
       context.environmentLabel itself; it doesn't retrigger build(), so
       the tree root's "Acceptance Spine — UAT" label stayed stale forever
       even after the CEE title bar was correctly showing the real label.
       Sync before build() runs, not after, so every consumer of
       context.environmentLabel -- not just the ones setHeader happens to
       touch -- sees the corrected value. */
    if(payload && payload.environment_label){
      context.environmentLabel=payload.environment_label;
    }
    build(payload);
    await hydrateLevelInfoLabels();
    setHeader(payload);
    renderTree();
    Object.keys(model.byId).forEach(function(id){
      if(model.byId[id].type==="instance-header") testCeeInstanceNode(id, true);
    });
    showDetail(model.root);
  }
  /* v31 (claude): #tree-splitter had full CSS (hover glow, .dragging
     state, col-resize cursor, tooltip) but genuinely zero JS anywhere in
     this file wiring the actual drag -- not broken, never implemented.
     .workspace is a CSS grid (grid-template-columns: <left> 5px <right>),
     so dragging just needs to rewrite the first track width on
     mousemove. Persisted to localStorage matching the font-size/theme
     convention already used elsewhere here (ci-fs/ci-theme). */
  function initTreeSplitter(){
    var splitter=document.getElementById("tree-splitter");
    var workspace=document.querySelector(".workspace");
    if(!splitter||!workspace) return;
    var MIN=220, MAX_FRACTION=0.6;
    var saved=parseInt(localStorage.getItem("cee-tree-width")||"",10);
    if(saved && saved>=MIN) workspace.style.gridTemplateColumns=saved+"px 5px 1fr";
    var dragging=false, startX=0, startWidth=0;
    splitter.addEventListener("mousedown",function(e){
      dragging=true;
      startX=e.clientX;
      startWidth=document.getElementById("left-pane").getBoundingClientRect().width;
      splitter.classList.add("dragging");
      document.body.style.userSelect="none";
      e.preventDefault();
    });
    document.addEventListener("mousemove",function(e){
      if(!dragging) return;
      var maxWidth=workspace.getBoundingClientRect().width*MAX_FRACTION;
      var w=Math.min(maxWidth,Math.max(MIN,startWidth+(e.clientX-startX)));
      workspace.style.gridTemplateColumns=w+"px 5px 1fr";
    });
    document.addEventListener("mouseup",function(){
      if(!dragging) return;
      dragging=false;
      splitter.classList.remove("dragging");
      document.body.style.userSelect="";
      var w=document.getElementById("left-pane").getBoundingClientRect().width;
      localStorage.setItem("cee-tree-width",String(Math.round(w)));
    });
  }
  async function boot(){
    document.body.classList.add("acceptance-review-mode");applyTheme();applyFont();
    initTreeSplitter();
    loadEnvironmentStatus();
    try{
      window.CEE_LOCAL_INSTANCE=await getJson("/api/enterprise/self");
      var local=window.CEE_LOCAL_INSTANCE||{};
      document.getElementById("cee-instance-title").textContent=local.instance_name||"Unnamed Spine Instance";
      document.getElementById("cee-health-badge").textContent=String(local.instance_purpose||"spine").toUpperCase();
      document.getElementById("cee-instance-meta").textContent=(local.instance_id||"identity unavailable")+" · loading committed deployment map";
      var deploymentBuild=document.getElementById("chandra-build-version");if(deploymentBuild){deploymentBuild.textContent="BUILD "+String(local.version||"UNKNOWN");deploymentBuild.title="Backend build version "+String(local.version||"unknown")};window.CHANDRA_BUILD_VERSION=String(local.version||"unknown");
    }catch(identityError){
      window.CEE_LOCAL_INSTANCE={};
      console.warn("CEE local instance manifest unavailable",identityError);
    }
    try{await loadTree();}
    catch(e){document.getElementById("tree").innerHTML='<div style="color:var(--red)">'+esc(e.message||e)+'</div>';}
  }

  /* v31c271: controlled bridge for detached-tab replay. This remains inside
     the primary CEE closure so private window constructors and MDI geometry
     helpers are never referenced from the detached-window script. */
  /* v31c326 (claude): extended for multiple items per tab (payload.items,
     was a single payload.descriptor). Each descriptor is replayed by the
     same type-dispatch as before, one at a time (a 350ms settle delay
     between each, same as the original single-window timing, before
     capturing which new model.browses id it produced). Exactly one item
     replays with the EXACT original behavior -- maximized, every sibling
     hidden, its own detach controls hidden -- so that well-tested path is
     byte-for-byte unchanged. More than one item skips maximizing/hiding
     entirely and instead leaves every window at a real position (an
     initial cascade via the same window.cascadeBrowses() any workspace
     tab already uses -- nothing new to get wrong there), then installs
     Cascade/Tile/Close All in the tab's toolbar next to Return to
     Workspace. Close All also closes the tab itself, per James. */
  window.CEE_REPLAY_DETACHED_DESCRIPTOR=function(payload){
    payload=payload||{};
    var items=Array.isArray(payload.items)?payload.items:(payload.descriptor?[{sourceId:payload.sourceId||"",title:payload.title||"",descriptor:payload.descriptor}]:[]);
    if(!items.length)throw new Error("No detachable window descriptors in payload.");
    var resultIds=new Array(items.length);
    function replayOne(item,onDone){
      var d=item.descriptor||{},before={};
      Object.keys(model.browses||{}).forEach(function(id){before[id]=true;});
      try{
        if(d.type==="business")openBusinessBrowse(d.levelId,d.parentId||null,d.title||"",null,null);
        else if(d.type==="deleted")openDeletedRecordsBrowse();
        else if(d.type==="archived")openArchivedRecordsBrowse();
        else if(d.type==="help-index")window.openHelpIndex(d.preselectId||"");
        else if(d.type==="bug-reports")window.openBugReports();
        else if(d.type==="test-plans")window.openTestPlans();
        else if(d.type==="test-plan-run")showTestPlanForm(d.sourceBrowseId||"",d.plan||{},d.tail||"",false,true);
        else if(d.type==="chain")openUniversalChainViewer({base:d.base,subjectId:d.subjectId,title:d.title,detailKind:d.detailKind});
        else if(d.type==="view"){
          /* v31c328 (claude): same pseudo-browse trick openDeletedRecordsBrowse's
             row click already uses -- openRecordViewer only needs browseId to
             read w.levelId/w.parentId, so a throwaway model.browses entry
             satisfies that without needing a real source browse open in this
             tab. Deleted synchronously right after the call; openRecordViewer
             has already read what it needs from it by then (window creation
             is synchronous, only the form fetch afterward is async). */
          var pseudo="detach-view-src-"+Math.random().toString(36).slice(2);
          model.browses[pseudo]={id:pseudo,levelId:d.levelId,parentId:d.parentId||null};
          openRecordViewer(pseudo,d.record||{});
          delete model.browses[pseudo];
        }
        else throw new Error("Unsupported detached window type: "+String(d.type||"unknown"));
      }catch(e){console.error("[CEE Detach] replay item failed",e,item);autoFileBugReport({title:"Detached tab: could not replay "+String((d&&d.type)||"window")+" ("+(e&&e.message||e)+")",severity:"High",context_id:"detach-replay-item",detail:{error:String((e&&e.stack)||e),item:item}});onDone(null,d.type);return;}
      setTimeout(function(){
        var ids=Object.keys(model.browses||{}).filter(function(id){return !before[id];});
        var id=(d.type==="test-plan-run"&&document.getElementById(tpRunWindowId()))
          ?tpRunWindowId()
          :(ids.length?ids[ids.length-1]:null);
        onDone(id,d.type);
      },450);
    }
    function runSequential(i){
      if(i>=items.length){afterAll();return;}
      replayOne(items[i],function(id,type){resultIds[i]={id:id,type:type};runSequential(i+1);});
    }
    function afterAll(){
      var valid=resultIds.filter(function(x){return x&&x.id;}),layer=document.getElementById("mdi-layer");
      if(!valid.length)return;
      if(valid.length===1){
        var id=valid[0].id,type=valid[0].type,el=document.getElementById(id);
        if(el&&layer){
          Object.keys(model.browses||{}).forEach(function(other){var oe=document.getElementById(other);if(oe&&other!==id)oe.style.display="none";});
          restoreMdiWindowState(id);
          el.classList.add("browse-maximized");
          applyBrowseGeometry(el,{left:0,top:0,width:layer.clientWidth,height:layer.clientHeight});
          if(type==="test-plan-run"){el.style.removeProperty("left");el.style.removeProperty("top");el.style.removeProperty("width");el.style.removeProperty("height");}
          var detach=el.querySelector(".browse-detach-btn");if(detach)detach.style.display="none";
          var cb=el.querySelector(".browse-detach-select");if(cb)cb.style.display="none";
          setBrowseActive(id);
        }
      }else{
        /* Multi-window detached tab: MDI canvas. Full-bleed CSS only applies to
           .browse-maximized; groups stay position:absolute with tile geometry. */
        var groupIds=valid.map(function(x){return x.id;});
        valid.forEach(function(x){
          var el=document.getElementById(x.id);if(!el)return;
          el.classList.remove("browse-maximized");
          el.style.display="";
          el.style.right="";el.style.bottom="";
          var detach=el.querySelector(".browse-detach-btn");if(detach)detach.style.display="none";
          var cb=el.querySelector(".browse-detach-select");if(cb)cb.style.display="none";
          var grp=el.querySelector(".browse-group-select");if(grp)grp.style.display="none";
        });
        function layoutGroup(){
          if(typeof ceeTileGroupWindows==="function")ceeTileGroupWindows(groupIds);
          else if(typeof ceeCascadeGroupWindows==="function")ceeCascadeGroupWindows(groupIds);
          else if(typeof window.tileBrowses==="function")window.tileBrowses();
          else if(typeof window.cascadeBrowses==="function")window.cascadeBrowses();
          setBrowseActive(groupIds[groupIds.length-1]);
        }
        /* Double rAF: wait until detached #mdi-layer has non-zero client box */
        requestAnimationFrame(function(){requestAnimationFrame(layoutGroup);});
        if(typeof ceeInstallGroupToolbar==="function")ceeInstallGroupToolbar(groupIds);
      }
    }
    runSequential(0);
  };
  /* v31c334 (claude): three real bugs from the first live test, per James.
     (1) Only reused window.cascadeBrowses/tileBrowses -- fine for tile
     (its math purely divides available space by column count, no forced
     minimum), but cascadeBrowses forces every window up to a ~560x380
     minimum, tuned for the main workspace's large business-browse
     windows. Compact 520x480 view windows only staggered 24px apart at
     that forced size, in a smaller detached-tab viewport, meant near-
     total overlap -- combined with bug (2) making both windows show
     identical error text, that reads as "only 1 window" even though both
     exist. Cascade here now preserves each window's OWN current size and
     just staggers position -- correct for a mixed-type/compact group,
     and doesn't touch the shared functions the main workspace still
     uses exactly as before. (2) was ceeWaitFor's readiness check, fixed
     above. (3): Close All and Return to Workspace both ultimately called
     window.close(), and ceeBootDetachedTab's beforeunload listener
     ALWAYS posts {type:"closed"} regardless of which button triggered
     it -- and the opener's onmessage handler treats "closed" as a
     safety-net RESTORE (un-parks the original windows, just without
     focusing them). That's correct behavior for an accidental/crash
     close, but wrong for a deliberate Close All, whose entire point is
     to discard the group, not bring it back. Added an explicit "discard"
     message posted before window.close(), a flag so the beforeunload
     listener doesn't ALSO send the restorative "closed" message right
     after, and ceeDiscardParkedWindows on the opener side to actually
     remove (not restore) every window sharing that token. */
  function ceeCascadeGroupWindows(ids){
    var layer=document.getElementById("mdi-layer");if(!layer)return;
    ids.forEach(function(id,i){
      var el=document.getElementById(id);if(!el)return;
      restoreMdiWindowState(id);
      var w=(typeof model!=="undefined"&&model.browses)?model.browses[id]:null;
      var width=parseInt(el.style.width,10)||el.offsetWidth||480,height=parseInt(el.style.height,10)||el.offsetHeight||360;
      applyBrowseGeometry(el,clampBrowseGeometry({left:24+i*28,top:20+i*28,width:width,height:height},layer));
      if(w)w.restoreGeometry=browseGeometry(el);
    });
  }
  function ceeTileGroupWindows(ids){
    var layer=document.getElementById("mdi-layer");if(!layer||!ids.length)return;
    var count=ids.length,cols=Math.ceil(Math.sqrt(count)),rows=Math.ceil(count/cols);
    var gap=6,usableW=Math.max(0,layer.clientWidth-gap*(cols+1)),usableH=Math.max(0,layer.clientHeight-gap*(rows+1));
    var baseW=Math.floor(usableW/cols),baseH=Math.floor(usableH/rows);
    ids.forEach(function(id,i){
      var el=document.getElementById(id),w=(typeof model!=="undefined"&&model.browses)?model.browses[id]:null;if(!el)return;
      restoreMdiWindowState(id);el.classList.add("browse-tiled");
      var col=i%cols,row=Math.floor(i/cols);
      var left=gap+col*(baseW+gap),top=gap+row*(baseH+gap);
      var width=(col===cols-1)?Math.max(0,layer.clientWidth-gap-left):baseW;
      var height=(row===rows-1)?Math.max(0,layer.clientHeight-gap-top):baseH;
      applyBrowseGeometry(el,{left:left,top:top,width:width,height:height});
      el.style.maxWidth=Math.max(0,layer.clientWidth-gap-left)+"px";
      el.style.maxHeight=Math.max(0,layer.clientHeight-gap-top)+"px";
      if(w)w.restoreGeometry=browseGeometry(el);
    });
  }
  function ceeInstallGroupToolbar(ids){
    var strip=document.querySelector(".mdi-strip");if(!strip)return;
    var titleEl=strip.querySelector(".mdi-title");if(titleEl)titleEl.textContent="Detached CEE Windows ("+ids.length+")";
    if(document.getElementById("cee-cascade-group"))return;
    var returnBtn=document.getElementById("cee-return-workspace");
    [["cee-cascade-group","Cascade","btn"],["cee-tile-group","Tile","btn"],["cee-close-all-group","Close All","btn danger"]].forEach(function(spec){
      var btn=document.createElement("button");btn.type="button";btn.id=spec[0];btn.className=spec[2];btn.textContent=spec[1];
      if(returnBtn)strip.insertBefore(btn,returnBtn);else strip.appendChild(btn);
    });
    function liveIds(){return ids.filter(function(mid){return document.getElementById(mid);});}
    var cascadeBtn=document.getElementById("cee-cascade-group");if(cascadeBtn)cascadeBtn.onclick=function(){
      liveIds().forEach(function(mid){var el=document.getElementById(mid);if(el)el.classList.remove("browse-maximized");});
      ceeCascadeGroupWindows(liveIds());
    };
    var tileBtn=document.getElementById("cee-tile-group");if(tileBtn)tileBtn.onclick=function(){
      liveIds().forEach(function(mid){var el=document.getElementById(mid);if(el)el.classList.remove("browse-maximized");});
      ceeTileGroupWindows(liveIds());
    };
    var closeAllBtn=document.getElementById("cee-close-all-group");if(closeAllBtn){
      closeAllBtn.title="Close every window in this tab, discard them from the main CEE workspace, and return focus there";
      closeAllBtn.onclick=function(){
        /* Close All = discard, not restore:
           1) tell opener to delete parked windows (not un-hide them)
           2) clear local windows in this tab
           3) focus the main CEE tab
           4) close this detached tab
           beforeunload must NOT post restorative "closed" — window.ceeExplicitDiscard guards that. */
        window.ceeExplicitDiscard=true;
        var token=window.ceeDetachedTabToken||"";
        try{if(token)localStorage.removeItem("cee-detach-payload:"+token);}catch(_e){}
        if(window.ceeDetachChannel&&token)window.ceeDetachChannel.postMessage({type:"discard",token:token});
        if(typeof window.closeAllBrowses==="function")window.closeAllBrowses();
        try{if(window.opener&&!window.opener.closed)window.opener.focus();}catch(_e){}
        setTimeout(function(){try{window.close();}catch(_e){}},60);
      };
    }
  }


  if(document.readyState==="loading")document.addEventListener("DOMContentLoaded",boot,{once:true});else boot();
})();


  // Chandra Governed Executor Framework v1 -----------------------------------
  // General application capability registry. Test Plan runners are consumers
  // of the same governed-execution idea; this registry is intentionally not
  // owned by the Test Plan subsystem and never accepts source code.
  const CEE_GOVERNED_EXECUTOR_REGISTRY = Object.freeze({
    "field.set-literal@v1":{id:"field.set-literal@v1",label:"Set literal",description:"Writes a configured literal value to a target field.",kind:"field",version:"v1",allowed_events:["on-create","on-validate","on-commit"],side_effect:"record-mutation",governance:"The literal and target field are parameters in the published Trigger Definition; no source code executes.",arbitrary_code:false},
    "field.set-timestamp@v1":{id:"field.set-timestamp@v1",label:"Set timestamp",description:"Writes the authoritative governed execution timestamp to a target field.",kind:"field",version:"v1",allowed_events:["on-create","on-commit"],side_effect:"record-mutation",governance:"The timestamp comes from the authoritative execution context, not client-supplied time.",arbitrary_code:false},
    "field.set-principal@v1":{id:"field.set-principal@v1",label:"Set principal",description:"Writes the active governed principal identity to a target field.",kind:"field",version:"v1",allowed_events:["on-create","on-commit"],side_effect:"record-mutation",governance:"The value is derived from the attributed invocation principal.",arbitrary_code:false},
    "field.set-uuid@v1":{id:"field.set-uuid@v1",label:"Set UUID",description:"Generates and writes a new governed UUID value.",kind:"field",version:"v1",allowed_events:["on-create","on-commit"],side_effect:"record-mutation",governance:"Generation is performed by the authoritative executor implementation.",arbitrary_code:false},
    "field.set-sequence@v1":{id:"field.set-sequence@v1",label:"Set sequence",description:"Allocates and writes an authoritative sequence value.",kind:"field",version:"v1",allowed_events:["on-create","on-commit"],side_effect:"record-mutation",governance:"Sequence allocation occurs in the authoritative execution context.",arbitrary_code:false},
    "field.normalize-uppercase@v1":{id:"field.normalize-uppercase@v1",label:"Normalize uppercase",description:"Normalizes a target text field to uppercase.",kind:"field",version:"v1",allowed_events:["on-validate","on-create","on-commit"],side_effect:"record-mutation",governance:"Normalization is deterministic and performed by the versioned executor.",arbitrary_code:false},
    "field.normalize-lowercase@v1":{id:"field.normalize-lowercase@v1",label:"Normalize lowercase",description:"Normalizes a target text field to lowercase.",kind:"field",version:"v1",allowed_events:["on-validate","on-create","on-commit"],side_effect:"record-mutation",governance:"Normalization is deterministic and performed by the versioned executor.",arbitrary_code:false},
    "validation.require@v1":{id:"validation.require@v1",label:"Require field",description:"Rejects validation when the configured field has no acceptable value.",kind:"validation",version:"v1",allowed_events:["on-validate"],side_effect:"validation-only",governance:"Produces a governed validation result; it does not create unrelated record mutations.",arbitrary_code:false},
    "validation.reject@v1":{id:"validation.reject@v1",label:"Reject operation",description:"Rejects the governed operation with the configured message.",kind:"validation",version:"v1",allowed_events:["on-validate"],side_effect:"validation-only",governance:"The rejection and reason are retained as governed execution evidence.",arbitrary_code:false}
  });
  window.CEE_GOVERNED_EXECUTOR_REGISTRY=CEE_GOVERNED_EXECUTOR_REGISTRY;
  window.ceeGovernedExecutorSpec=function(id){return CEE_GOVERNED_EXECUTOR_REGISTRY[String(id||"")]||null;};
  window.ceeGovernedExecutorCatalog=function(){return Object.keys(CEE_GOVERNED_EXECUTOR_REGISTRY).map(function(k){return Object.assign({},CEE_GOVERNED_EXECUTOR_REGISTRY[k]);});};
  window.ceeInvokeGovernedExecutor=async function(authorityBase,invocation){
    var p=Object.assign({},invocation||{}),id=String(p.executor||"");
    if(!CEE_GOVERNED_EXECUTOR_REGISTRY[id])throw new Error("Unsupported governed executor: "+id);
    if(p.code||p.script||p.javascript||p.shell||p.command)throw new Error("Free-form code is not permitted in governed executor invocations.");
    var base=String(authorityBase||"").replace(/\/$/,"");
    var r=await fetch(base+"/api/enterprise/executors/invoke",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(p)});
    var j=await r.json();
    if(!r.ok||!j||j.ok===false)throw new Error((j&&j.error)||("Governed executor HTTP "+r.status));
    return j;
  };
  window.ceeSaveTriggerDefinition=async function(authorityBase,hubId,definition,operator){
    var raw=JSON.stringify(definition||{}).toLowerCase();
    if(/\\\"(?:javascript|script|eval|shell|command|code)\\\"\\s*:/.test(raw))throw new Error("Free-form code is not permitted in Trigger Definitions.");
    var base=String(authorityBase||"").replace(/\/$/,"");
    var r=await fetch(base+"/api/enterprise/hub/trigger-definition/save",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({hub_id:hubId,definition:definition||{},operator:operator||"cee-acceptance-user"})});
    var j=await r.json();
    if(!r.ok||!j||j.ok===false)throw new Error((j&&j.error)||("Trigger Definition HTTP "+r.status));
    return j;
  };
  window.ceeLoadTriggerDefinition=async function(authorityBase,hubId){
    var base=String(authorityBase||"").replace(/\/$/,"");
    var r=await fetch(base+"/api/enterprise/hub/trigger-definition/latest?hub_id="+encodeURIComponent(hubId));
    var j=await r.json();
    if(!r.ok||!j||j.ok===false)throw new Error((j&&j.error)||("Trigger Definition HTTP "+r.status));
    return j;
  };

</script>


<script>
(function(){
  function diagEsc(v){return String(v==null?"":v).replace(/[&<>"']/g,function(c){return {"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"}[c]})}
  function diagBase(raw){raw=String(raw||"").trim();if(!raw)return "";return /^https?:\/\//i.test(raw)?raw.replace(/\/$/,""):"http://"+raw.replace(/\/$/,"")}
  function diagDuration(seconds){seconds=Math.max(0,Number(seconds)||0);var d=Math.floor(seconds/86400),h=Math.floor(seconds%86400/3600),m=Math.floor(seconds%3600/60),s=Math.floor(seconds%60);return (d?d+"d ":"")+String(h).padStart(2,"0")+":"+String(m).padStart(2,"0")+":"+String(s).padStart(2,"0")}
  function diagUuidDate(id){var hex=String(id||"").replace(/-/g,"");if(hex.length<12)return null;var ms=parseInt(hex.slice(0,12),16);var d=new Date(ms);return isNaN(d.getTime())?null:d}
  function diagDecode(row){var a=row&&(row.artifact||row.current||row.data||row);if(a&&typeof a.artifact_json==="string"){try{a=JSON.parse(a.artifact_json)}catch(_e){}}return a||{}}
  function diagModal(title,html){var t=document.getElementById("edit-title"),b=document.getElementById("edit-body"),back=document.getElementById("edit-backdrop"),m=document.getElementById("edit-modal");if(t)t.textContent=title;if(b)b.innerHTML=html;if(m)m.classList.add("artifact-history-modal");if(back)back.classList.add("show")}
  function diagToast(message,kind){if(typeof window.toast==="function"){window.toast(message,kind);return}console[kind==="err"?"error":"log"](message)}
  async function diagPostJson(url,body){var r=await fetch(url,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(body)}),text=await r.text(),data={};try{data=text?JSON.parse(text):{}}catch(_e){throw new Error("Invalid JSON response: "+text.slice(0,240))}if(!r.ok||data.ok===false)throw new Error(data.error||("HTTP "+r.status));return data}
  function diagInitSplitter(shell){var split=shell&&shell.querySelector(".artifact-history-split"),bar=shell&&shell.querySelector(".artifact-history-splitter"),left=shell&&shell.querySelector(".artifact-history-chain");if(!split||!bar||!left)return;var dragging=false,startX=0,startW=0;bar.addEventListener("pointerdown",function(e){dragging=true;startX=e.clientX;startW=left.getBoundingClientRect().width;bar.setPointerCapture(e.pointerId);e.preventDefault()});bar.addEventListener("pointermove",function(e){if(!dragging)return;var max=Math.max(260,split.getBoundingClientRect().width-280),w=Math.max(220,Math.min(max,startW+e.clientX-startX));split.style.gridTemplateColumns=w+"px 5px minmax(0,1fr)"});function stop(){dragging=false}bar.addEventListener("pointerup",stop);bar.addEventListener("pointercancel",stop)}

  window.openInstanceDiagnosticsForNode=function(id){
    if(window.CEE20 && typeof window.CEE20.openInstanceDiagnostics==="function"){
      return window.CEE20.openInstanceDiagnostics(id);
    }
    console.error("[CEE diagnostics] CEE20.openInstanceDiagnostics is unavailable.",{id:id});
    if(typeof diagToast==="function"){
      diagToast("Instance diagnostics handler is unavailable.","err");
    }
  };

  window.openLocalInstanceDiagnostics=function(){var m=window.CEE_LOCAL_INSTANCE||{};openInstanceDiagnostics({base:"",instance_id:m.instance_id,instance_name:m.instance_name||"Spine Instance",instance_address:m.configured_url||m.instance_url||location.origin,role:m.instance_purpose||"spine",configured_description:m.instance_description||""})};

  window.openInstanceDiagnostics=async function(target){
    target=target||{};var base=target.base||"";document.getElementById("edit-modal").classList.add("artifact-history-modal");
    diagModal("Instance Diagnostics · "+diagEsc(target.instance_name||target.instance_address||"Instance"),'<div class="small-muted" style="padding:14px">Loading health, manifest, modules, and cold-start evidence…</div>');
    try{
      var results=await Promise.all([
        fetch(base+"/api/health",{cache:"no-store"}).then(function(r){return r.json()}),
        fetch(base+"/api/enterprise/self",{cache:"no-store"}).then(function(r){return r.json()}).catch(function(){return {}}),
        fetch(base+"/api/enterprise/modules",{cache:"no-store"}).then(function(r){return r.json()}).catch(function(){return {modules:[]}})
      ]);
      var health=results[0]||{},self=results[1]||{},mods=results[2]||{};
      target.instance_id=self.instance_id||target.instance_id||health.instance_id||"";target.instance_name=self.instance_name||target.instance_name||health.instance_name||"Instance";target.configured_description=self.instance_description||target.configured_description||"";
      var subject=target.instance_id+"::cold-start",infoSubject=target.instance_id+"::instance-info";
      var chain=await fetch(base+"/api/enterprise/spoke-chain?subject_id="+encodeURIComponent(subject),{cache:"no-store"}).then(function(r){return r.json()}).catch(function(){return {chain:[]}});
      var info=await fetch(base+"/api/enterprise/level-system/latest?subject_id="+encodeURIComponent(infoSubject),{cache:"no-store"}).then(function(r){return r.json()}).catch(function(){return {}});
      var infoArtifact=diagDecode(info),operational=infoArtifact.description||((infoArtifact.values||{}).description)||"",infoTail=info.tail_hash||info.tail||info.cu_id||"";
      var rows=chain.chain||chain.rows||[];
      var moduleText=(mods.modules||[]).map(function(m){return m.name+" "+m.version}).join(" · ")||"No modules registered";
      var started=diagUuidDate(health.cold_start_cu_id);
      var listHtml=rows.map(function(row,i){var id=row.cu_id||row.id||("CU "+(i+1)),d=diagUuidDate(id);return '<button class="artifact-chain-item'+(i===0?' selected':'')+'" data-diag-index="'+i+'"><div class="chain-title">'+diagEsc(id)+'</div><div class="chain-meta">'+diagEsc(d?d.toLocaleString():"UUIDv7 time unavailable")+'</div></button>'}).join("")||'<div class="small-muted" style="padding:12px">No cold-start CUs returned.</div>';
      diagModal("Instance Diagnostics · "+target.instance_name,
        '<div class="artifact-history-shell" id="instance-diagnostics-shell">'+
        '<div style="padding:12px;border-bottom:1px solid var(--border);display:grid;grid-template-columns:repeat(4,minmax(150px,1fr));gap:10px">'+
        '<div><div class="artifact-ro-label">Health</div><div style="color:'+(health.ok&&health.db_open!==false?'var(--green)':'var(--red)')+';font-weight:700">'+(health.ok?(health.db_open===false?'DB CLOSED':'HEALTHY'):'UNAVAILABLE')+'</div></div>'+
        '<div><div class="artifact-ro-label">Uptime</div><div>'+diagDuration(health.uptime_seconds)+'</div></div>'+
        '<div><div class="artifact-ro-label">Started</div><div>'+diagEsc(started?started.toLocaleString():"Unavailable")+'</div></div>'+
        '<div><div class="artifact-ro-label">Role / Address</div><div>'+diagEsc(String(self.instance_purpose||target.role||"instance").toUpperCase())+' · '+diagEsc(self.configured_url||self.instance_url||target.instance_address||base||location.origin)+'</div></div>'+
        '<div style="grid-column:1/-1"><div class="artifact-ro-label">Instance ID</div><div class="tail-hash">'+diagEsc(target.instance_id||"Unavailable")+'</div></div>'+
        '<div style="grid-column:1/-1"><div class="artifact-ro-label">Configured description</div><div class="small-muted">'+diagEsc(target.configured_description||"—")+'</div></div>'+
        '<div style="grid-column:1/-1"><label class="artifact-ro-label" for="instance-operational-description">Operational description (CU-backed)</label><textarea id="instance-operational-description" style="width:100%;min-height:72px">'+diagEsc(operational)+'</textarea><div class="action-row" style="justify-content:flex-end;margin-top:6px"><button class="btn" id="instance-health-refresh">Refresh Health</button><button class="btn primary" id="instance-description-save">Append Description CU</button></div></div>'+
        '<div style="grid-column:1/-1"><div class="artifact-ro-label">Runtime modules</div><div class="small-muted">'+diagEsc(moduleText)+'</div></div></div>'+
        '<div class="artifact-history-split"><aside class="artifact-history-chain"><div class="artifact-ro-label">Cold restart chain</div>'+listHtml+'</aside><div class="artifact-history-splitter" role="separator"></div><section class="artifact-history-artifact" id="instance-diagnostic-cu"></section></div>'+
        '<div class="artifact-history-footer"><button class="btn" onclick="closeEditModal()">Close</button><button class="btn primary" id="instance-go-to-instance">Go To Instance</button></div></div>');
      var shell=document.getElementById("instance-diagnostics-shell"),host=document.getElementById("instance-diagnostic-cu");
      function select(i){
        var row=rows[i];
        shell.querySelectorAll("[data-diag-index]").forEach(function(b){
          b.classList.toggle("selected",Number(b.dataset.diagIndex)===i)
        });
        if(!row){
          host.innerHTML='<div class="small-muted">Select a CU.</div>';
          return;
        }
        var id=row.cu_id||row.id||"",published=diagUuidDate(id);
        var jsonText=JSON.stringify({
          cu_id:id,
          published_at:published?published.toISOString():"",
          operator:row.operator||"",
          tail_hash:row.tail_hash||row.hash||"",
          artifact:diagDecode(row)
        },null,2);
        host.innerHTML=
          '<div style="display:flex;align-items:center;justify-content:space-between;gap:8px;margin-bottom:8px">'+
            '<div class="artifact-ro-label" style="margin:0">Selected cold-start CU</div>'+
            '<button class="btn" type="button" id="instance-diagnostic-copy-json">Copy JSON</button>'+
          '</div>'+
          '<pre id="instance-diagnostic-json" style="white-space:pre-wrap;word-break:break-word">'+diagEsc(jsonText)+'</pre>';
        var copy=document.getElementById("instance-diagnostic-copy-json");
        if(copy)copy.onclick=async function(){
          try{
            if(navigator.clipboard&&window.isSecureContext){
              await navigator.clipboard.writeText(jsonText);
            }else{
              var ta=document.createElement("textarea");
              ta.value=jsonText;
              ta.setAttribute("readonly","");
              ta.style.position="fixed";
              ta.style.opacity="0";
              document.body.appendChild(ta);
              ta.select();
              if(!document.execCommand("copy"))throw new Error("Browser copy command failed.");
              ta.remove();
            }
            diagToast("Selected cold-start CU JSON copied.","ok");
          }catch(e){
            diagToast("Could not copy CU JSON: "+(e.message||e),"err");
          }
        };
      }
      shell.querySelectorAll("[data-diag-index]").forEach(function(b){b.onclick=function(){select(Number(b.dataset.diagIndex))}});select(0);
      var save=document.getElementById("instance-description-save");save.onclick=async function(){save.disabled=true;try{var description=document.getElementById("instance-operational-description").value;var body={subject_id:infoSubject,subject_type:"instance-info",action:"update",loaded_tail_hash:infoTail||"",operator:(window.CEE_OPERATOR||"cee-user"),artifact_json:JSON.stringify({instance_id:target.instance_id,description:description})};var r=await diagPostJson(base+"/api/enterprise/level-system/save",body);infoTail=r.tail_hash||r.tail||r.cu_id||infoTail;diagToast("Operational description appended.","ok")}catch(e){diagToast(e.message||e,"err")}finally{save.disabled=false}};
      document.getElementById("instance-health-refresh").onclick=function(){openInstanceDiagnostics(target)};
      var goToInstance=document.getElementById("instance-go-to-instance");
      if(goToInstance)goToInstance.onclick=function(){
        var raw=String(self.configured_url||self.instance_url||target.instance_address||base||location.origin||"").trim();
        if(!raw){diagToast("No configured instance URL is available.","err");return;}
        var url=/^https?:\/\//i.test(raw)?raw:("http://"+raw);
        var opened=window.open(url,"_blank","noopener");
        if(!opened)diagToast("The browser blocked the new instance tab.","err");
      };
      diagInitSplitter(shell);
    }catch(e){diagModal("Instance Diagnostics",'<div style="padding:14px;color:var(--red)">'+diagEsc(e.message||e)+'</div><div class="artifact-history-footer"><button class="btn" onclick="closeEditModal()">Close</button></div>')}
  };


  /* v31c271: Added detachable Test Plan Run windows. The loaded plan, tail,
     and assertion state snapshot are carried into the detached-tab replay.
     Hybrid MDI/SDI trial. Supported MDI windows may be replayed in
     a dedicated browser tab. The original workspace window is parked, not
     destroyed, so Return to Workspace restores its exact local state. */
  window.ceeDetachChannel=(typeof BroadcastChannel!=="undefined")?new BroadcastChannel("cee-detached-windows-v1"):null;
  window.ceeDetachedTabToken="";
  /* v31c334 (claude): set true by Close All's handler right before it
     posts {type:"discard"} and calls window.close(), so the beforeunload
     listener below knows not to ALSO post the restorative {type:"closed"}
     -- see ceeInstallGroupToolbar and ceeBootDetachedTab. */
  window.ceeExplicitDiscard=false;
  function ceeWorkspaceModel(){return window.CEE_WORKSPACE_MODEL||null;}
  function ceeRefreshWorkspaceChips(){
    if(typeof window.CEE_RENDER_BROWSE_CHIPS==="function")window.CEE_RENDER_BROWSE_CHIPS();
  }
  function ceeFocusWorkspaceWindow(id){
    if(typeof window.CEE_SET_BROWSE_ACTIVE==="function")window.CEE_SET_BROWSE_ACTIVE(id);
  }

  /* v31c328 (claude): record-view windows need the record's own data
     embedded in the descriptor, not just an id -- a detached tab is a
     fresh page load with a totally separate model.browses, so there's no
     original browse window there to look the record up from the way
     "business" replay looks up a levelId in its own (also freshly
     rebuilt) model.byId. Stored on the model entry at creation time
     (viewLevelId/viewParentId/viewRecord) specifically so this has
     something to read. Checked before the levelId check below since a
     record-view window doesn't set w.levelId itself (deliberately, so it
     was never mistaken for a business browse). */
  function ceeDetachDescriptor(id,w){
    if(!w)return null;
    if(w.recordView)return {type:"view",levelId:w.viewLevelId||"",parentId:w.viewParentId||null,record:w.viewRecord||null,title:w.title||""};
    if(w.levelId)return {type:"business",levelId:w.levelId,parentId:w.parentId||null,title:w.title||""};
    if(w.universalDeleted)return {type:"deleted"};
    if(w.universalArchived)return {type:"archived"};
    if(w.kind==="help-index")return {type:"help-index",preselectId:w.selectedTopic||""};
    if(w.kind==="bug-reports")return {type:"bug-reports"};
    if(w.kind==="test-plans")return {type:"test-plans"};
    if(w.kind==="test-plan-run")return {type:"test-plan-run",plan:w.detachPlan||{},tail:w.loadedTail||"",sourceBrowseId:w.sourceBrowseId||""};
    if(w.kind==="universal-chain")return {type:"chain",base:w.base||"",subjectId:w.subjectId||"",title:String(w.title||"").replace(/^Chain\s+—\s+/,""),detailKind:w.detailKind||""};
    return null;
  }
  function ceeDetachToken(){return "cee-detach-"+Date.now().toString(36)+"-"+Math.random().toString(36).slice(2);}
  function ceeDetachUrl(token){var u=new URL(window.location.href);u.searchParams.set("cee_detached",token);return u.toString();}
  function ceeAddDetachButton(id){
    var m=ceeWorkspaceModel(),w=m&&m.browses?m.browses[id]:null,el=document.getElementById(id);if(!w||!el||el.dataset.ceeDetachReady==="1")return;
    var descriptor=ceeDetachDescriptor(id,w);if(!descriptor)return;
    var hdr=el.querySelector(".browse-hdr"),close=hdr&&hdr.querySelector(".browse-close");if(!hdr)return;if(hdr.querySelector(".browse-detach-btn")){el.dataset.ceeDetachReady="1";return;}
    /* Window chrome: Detach sits with Max/Close on the RIGHT */
    var b=document.createElement("button");b.type="button";b.className="browse-detach-btn";b.textContent="↗";
    b.title="Detach to Tab (with any windows tagged Group)";b.setAttribute("aria-label","Detach to Tab");
    b.onclick=function(e){e.preventDefault();e.stopPropagation();ceeDetachToTab(id);};
    var maxBtn=hdr.querySelector(".browse-max-btn");
    hdr.insertBefore(b, maxBtn||close||null);
    /* Group tag: LEFT of title — labeled so it is not mistaken for maximize */
    var wrap=document.createElement("label");wrap.className="browse-group-select";
    wrap.title="Tag this window for group detach. Tag several, then click Detach (↗) on any one.";
    var cb=document.createElement("input");cb.type="checkbox";cb.className="browse-detach-select";
    cb.setAttribute("aria-label","Tag window for group detach");
    cb.onclick=function(e){e.stopPropagation();};cb.onmousedown=function(e){e.stopPropagation();};
    var lab=document.createElement("span");lab.textContent="Group";
    wrap.appendChild(cb);wrap.appendChild(lab);
    wrap.onclick=function(e){e.stopPropagation();};
    wrap.onmousedown=function(e){e.stopPropagation();};
    hdr.insertBefore(wrap, hdr.firstChild);
    el.dataset.ceeDetachReady="1";
  }
  function ceeInstallDetachButtons(){var m=ceeWorkspaceModel();if(!m||!m.browses)return;Object.keys(m.browses).forEach(ceeAddDetachButton);}
  /* v31c326 (claude): ceeDetachToTab now checks every window's checkbox
     before deciding what to detach: none checked -> detach just the
     clicked window (byte-identical to the prior single-window behavior,
     including the already-detached-just-focus-it shortcut, so the common/
     tested path is unchanged); one or more checked -> detach that whole
     checked set together, regardless of whether the clicked window itself
     is among them. Payload shape changed from a single `descriptor` to an
     `items` array so CEE_REPLAY_DETACHED_DESCRIPTOR can replay any number
     of windows into the new tab; see that function for the single-vs-
     multi replay split. */
  window.ceeDetachToTab=function(id){
    var m=ceeWorkspaceModel();if(!m||!m.browses)return;
    var checkedIds=Object.keys(m.browses).filter(function(bid){
      var w=m.browses[bid],e=document.getElementById(bid),cb=e&&e.querySelector(".browse-detach-select");
      return w&&w.mode!=="detached"&&cb&&cb.checked;
    });
    var targetIds=checkedIds.length?checkedIds:[id];
    if(targetIds.length===1){
      var onlyW=m.browses[targetIds[0]];
      if(onlyW&&onlyW.mode==="detached"&&onlyW.detachedPopup&&!onlyW.detachedPopup.closed){onlyW.detachedPopup.focus();return;}
    }
    var items=[],titles=[];
    targetIds.forEach(function(tid){
      var w=m.browses[tid];if(!w)return;
      var d=ceeDetachDescriptor(tid,w);if(!d)return;
      items.push({sourceId:tid,title:w.title||"CEE",descriptor:d});
      titles.push(w.title||"CEE");
    });
    if(!items.length){toast(checkedIds.length?"None of the checked windows are detachable yet.":"This window type is not detachable yet.","err");return;}
    var token=ceeDetachToken(),payload={token:token,items:items,title:titles.length>1?(titles.length+" windows"):titles[0],createdAt:new Date().toISOString()};
    localStorage.setItem("cee-detach-payload:"+token,JSON.stringify(payload));
    var popup=window.open(ceeDetachUrl(token),"_blank");
    if(!popup){toast("The browser blocked the detached tab. Allow pop-ups for this CEE origin and try again.","err");return;}
    items.forEach(function(item){
      var w=m.browses[item.sourceId],e=document.getElementById(item.sourceId);if(!w||!e)return;
      w.mode="detached";w.detachedToken=token;w.detachedPopup=popup;e.style.display="none";
      var cb=e.querySelector(".browse-detach-select");if(cb)cb.checked=false;
    });
    ceeRefreshWorkspaceChips();
    console.info("[CEE Detach] detached",payload);
  };
  /* v31c326 (claude): was Object.keys(...).some(...), which stops at the
     FIRST matching window. Harmless for a single-window token (there was
     only ever one match), but a group detach shares one token across
     every window in the group -- .some() would restore only one of them
     and silently strand the rest in "detached" limbo (hidden, with no
     popup left to bring them back). Changed to restore every match. */
  function ceeReturnParkedWindow(token,focus){
    var m=ceeWorkspaceModel();if(!m||!m.browses)return;
    var restoredIds=[];
    Object.keys(m.browses).forEach(function(id){
      var w=m.browses[id];if(!w||w.detachedToken!==token)return;
      w.mode="mdi";w.detachedToken="";w.detachedPopup=null;
      var el=document.getElementById(id);if(el)el.style.display="";
      restoredIds.push(id);
    });
    if(restoredIds.length){ceeRefreshWorkspaceChips();if(focus!==false)ceeFocusWorkspaceWindow(restoredIds[restoredIds.length-1]);}
  }
  /* v31c334 (claude): Close All's whole point is to discard the group --
     unlike ceeReturnParkedWindow (a restore, used both for the deliberate
     Return button and as an accidental-close safety net), this actually
     removes the parked windows from the opener's model.browses instead
     of un-hiding them. */
  function ceeDiscardParkedWindows(token){
    var m=ceeWorkspaceModel();if(!m||!m.browses)return;
    var toRemove=Object.keys(m.browses).filter(function(id){var w=m.browses[id];return w&&w.detachedToken===token;});
    if(!toRemove.length)return;
    toRemove.forEach(function(id){
      var w=m.browses[id],el=document.getElementById(id);
      if(w){w.detachedPopup=null;w.detachedToken="";w.mode="mdi";}
      if(el)el.remove();
      delete m.browses[id];
    });
    if(typeof ceeRefreshWorkspaceChips==="function")ceeRefreshWorkspaceChips();
    else if(typeof window.CEE_RENDER_BROWSE_CHIPS==="function")window.CEE_RENDER_BROWSE_CHIPS();
    console.info("[CEE Detach] discarded parked windows for token",token,toRemove);
  }
  if(window.ceeDetachChannel)window.ceeDetachChannel.onmessage=function(ev){
    var m=ev.data||{};
    if(m.type==="discard"){
      /* Close All from detached tab: destroy parked windows, keep focus here */
      ceeDiscardParkedWindows(String(m.token||""));
      try{window.focus();}catch(_e){}
      return;
    }
    if(m.type==="return"||m.type==="closed"){
      /* Return to Workspace or crash/safety close: restore parked windows */
      ceeReturnParkedWindow(String(m.token||""),m.type==="return");
      if(m.type==="return"){try{window.focus();}catch(_e){}}
      return;
    }
    if(m.type==="close-all"&&window.ceeDetachedTabToken){
      try{window.close();}catch(_e){}
    }
  };
  function ceeDetachedChrome(token,title){
    document.documentElement.classList.add("cee-detached-tab");
    document.title="CEE · "+String(title||"Detached Window");
    var strip=document.querySelector(".mdi-strip");
    if(strip){strip.innerHTML='<span class="mdi-title">Detached CEE Window</span><span style="flex:1"></span><button class="btn primary" id="cee-return-workspace">Return to Workspace</button>';}
    var btn=document.getElementById("cee-return-workspace");if(btn)btn.onclick=function(){
      if(window.ceeDetachChannel)window.ceeDetachChannel.postMessage({type:"return",token:token});
      try{window.close();}catch(_e){}
    };
  }
  /* v31c327 (claude): James -- "make sure bug reports are generated using
     the bug report workflow in place." Audited it: autoFileBugReport
     exists and works (CU-backed, same save path as the manual form) but
     had exactly one call site before this. Everywhere else, a failure
     just relies on console-capture + the person noticing the REPORT BUG
     badge and clicking it -- fine inside the normal workspace, but
     html.cee-detached-tab hides .topbar entirely, and REPORT BUG lives in
     .topbar. Every failure point in this detach subsystem specifically
     was therefore invisible with no recovery path the moment it happened
     inside a detached tab -- exactly the risk surface this whole feature
     just added. Wired the four silent-console-only failure points below
     to actually file, so open-beta breakage here produces a real,
     triaged, CU-backed report instead of a console line nobody in a
     stripped-down tab can ever see or click through to. */
  function ceeWaitFor(test,done,attempt){
    attempt=attempt||0;if(test()){done();return;}
    if(attempt>240){
      console.error("[CEE Detach] timed out waiting for detached replay prerequisites");
      autoFileBugReport({title:"Detached tab: replay prerequisites never became ready",severity:"High",context_id:"detach-replay",detail:"ceeWaitFor exceeded 240 attempts (~12s) waiting for mdi-layer/model.byId/business-level prerequisites in a detached tab. token="+String(window.ceeDetachedTabToken||"")});
      return;
    }
    setTimeout(function(){ceeWaitFor(test,done,attempt+1);},50);
  }
  function ceeNewestBrowseId(before){var m=ceeWorkspaceModel();if(!m||!m.browses)return "";var ids=Object.keys(m.browses).filter(function(id){return !before[id];});return ids.length?ids[ids.length-1]:"";}
  function ceeReplayDetached(payload){
    if(typeof window.CEE_REPLAY_DETACHED_DESCRIPTOR!=="function"){
      console.error("[CEE Detach] replay bridge unavailable");
      autoFileBugReport({title:"Detached tab: replay bridge unavailable",severity:"High",context_id:"detach-replay",detail:"window.CEE_REPLAY_DETACHED_DESCRIPTOR was not a function when a detached tab tried to replay its payload. token="+String((payload&&payload.token)||"")});
      return;
    }
    try{
      window.CEE_REPLAY_DETACHED_DESCRIPTOR(payload);
    }catch(e){
      console.error("[CEE Detach] replay failed",e,payload);
      autoFileBugReport({title:"Detached tab: replay threw "+(e&&e.message||e),severity:"High",context_id:"detach-replay",detail:{error:String((e&&e.stack)||e),payload:payload}});
      throw e;
    }
  }
  function ceeBootDetachedTab(){
    var token=new URL(window.location.href).searchParams.get("cee_detached");if(!token)return;
    window.ceeDetachedTabToken=token;
    var raw=localStorage.getItem("cee-detach-payload:"+token),payload=null;
    try{payload=raw?JSON.parse(raw):null;}catch(_e){}
    if(!payload){
      console.error("[CEE Detach] payload missing",token);
      autoFileBugReport({title:"Detached tab opened with no payload",severity:"High",context_id:"detach-boot",detail:"localStorage had no cee-detach-payload for token "+String(token)+". The tab has nothing to replay and no visible UI to explain why (topbar hidden in a detached tab)."});
      return;
    }
    ceeDetachedChrome(token,payload.title);
    ceeWaitFor(function(){
      var m=ceeWorkspaceModel(),items=Array.isArray(payload.items)?payload.items:[];
      if(!(document.getElementById("mdi-layer")&&m&&m.byId))return false;
      return items.every(function(item){var d=item&&item.descriptor||{};return (d.type!=="business"&&d.type!=="view")||!!m.byId[d.levelId];});
    },function(){
      console.info("[CEE Detach] replay prerequisites ready",payload.items);
      ceeReplayDetached(payload);
    });
    window.addEventListener("beforeunload",function(){if(window.ceeDetachChannel&&!window.ceeExplicitDiscard)window.ceeDetachChannel.postMessage({type:"closed",token:token});});
  }
  var ceeDetachObserver=new MutationObserver(function(){ceeInstallDetachButtons();});
  var ceeDetachLayer=document.getElementById("mdi-layer");if(ceeDetachLayer)ceeDetachObserver.observe(ceeDetachLayer,{childList:true,subtree:true});

  if(!new URL(window.location.href).searchParams.get("cee_detached")){
    var ceeWorkspaceExitBroadcast=false;
    function ceeCloseAllDetachedTabs(){
      if(ceeWorkspaceExitBroadcast)return;
      ceeWorkspaceExitBroadcast=true;
      if(window.ceeDetachChannel){
        try{window.ceeDetachChannel.postMessage({type:"close-all",at:Date.now()});}catch(_e){}
      }
    }
    window.addEventListener("beforeunload",ceeCloseAllDetachedTabs,{capture:true});
    window.addEventListener("pagehide",ceeCloseAllDetachedTabs,{capture:true});
  }

  setTimeout(function(){ceeInstallDetachButtons();ceeBootDetachedTab();},0);

})();
</script>
<script>

window.openInstanceManifest=async function(){
  var backdrop=document.getElementById("instance-manifest-backdrop");
  var grid=document.getElementById("instance-manifest-grid");
  if(!backdrop||!grid)return;
  backdrop.classList.add("show");
  grid.innerHTML='<div class="k">Status</div><div class="v">Loading local instance manifest…</div>';
  try{
    var r=await fetch("/api/enterprise/self",{cache:"no-store"});
    var text=await r.text(),m={};
    try{m=text?JSON.parse(text):{}}catch(_e){throw new Error("Manifest endpoint returned invalid JSON")};
    if(!r.ok||m.ok===false)throw new Error(m.error||("HTTP "+r.status));
    var rows=[
      ["Instance name",m.instance_name||"—"],["Instance ID",m.instance_id||"—"],
      ["Purpose",String(m.instance_purpose||"—").toUpperCase()],["Description",m.instance_description||"—"],
      ["Configured URL",m.configured_url||m.instance_url||"—"],["Host / Port",(m.host||"—")+" / "+(m.port??"—")],
      ["Database directory",m.db_dir||"—"],["Main page",m.main_page||"—"],
      ["Build version",m.version||"—"],["Contact",m.instance_contact||"—"],
      ["Manifest source",m.manifest_source||"chandra.conf + persistent instance identity"]
    ];
    grid.innerHTML=rows.map(function(row){return '<div class="k">'+manifestEsc(row[0])+'</div><div class="v">'+manifestEsc(String(row[1]))+'</div>'}).join('');
  }catch(e){grid.innerHTML='<div class="k">Error</div><div class="v" style="color:var(--red)">'+manifestEsc(e.message||String(e))+'</div>'}
};
window.closeInstanceManifest=function(){var b=document.getElementById("instance-manifest-backdrop");if(b)b.classList.remove("show")};
function manifestEsc(v){return String(v??"").replace(/[&<>"']/g,function(c){return {"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"}[c]})}

</script>

<script>
(function(){
  console.warn("[CEE v31c334 debug] loaded", {
    href: window.location.href,
    loaded_at: new Date().toISOString()
  });

  window.addEventListener("error", function(ev){
    console.error("[CEE v31c334 debug] window error", ev.error || ev.message || ev);
  });

  window.addEventListener("unhandledrejection", function(ev){
    console.error("[CEE v31c334 debug] unhandled rejection", ev.reason);
  });

  document.addEventListener("click", function(ev){
    var el = ev.target && ev.target.closest
      ? ev.target.closest("button,input[type=button],input[type=submit],[role=button]")
      : null;
    if(!el) return;
    var label = String(el.innerText || el.value || el.getAttribute("aria-label") || "").trim();
    if(/save|create|add|submit/i.test(label)){
      console.warn("[CEE v31c334 debug] captured action click", {
        label: label,
        id: el.id || "",
        className: el.className || "",
        type: el.type || "",
        onclick: el.getAttribute("onclick") || "",
        dataset: Object.assign({}, el.dataset || {})
      });
    }
  }, true);

  document.addEventListener("submit", function(ev){
    console.warn("[CEE v31c271 debug] captured form submit", {
      form_id: ev.target && ev.target.id || "",
      action: ev.target && ev.target.action || "",
      method: ev.target && ev.target.method || ""
    });
  }, true);
})();
</script>

  </div>
</div>
</body>
</html>