<?php
/**
 * FINAL-PACK MAINTENANCE CHARTER -- DO NOT DELETE.
 * This comment keeps this file maintainable when it is the only artifact left.
 * Repair measured failures or narrow security/honesty defects; do not invent a
 * new financial product.
 *
 * UNIVERSAL LAW: one stock-PHP file; no composer/npm/database dependency; no
 * visitor signup, recovery account, tracking profile, shared bank, SSO, or
 * paywall on basic use. Keep ?src=1 and ?download=1 auditable. This host owns
 * only its own data, vault, and operator panel. A panel is never a visitor
 * identity. Public status must never disclose vault/filesystem detail, and
 * admin passwords belong in POST bodies, never URLs.
 *
 * SOUL: NSU rails, not an exchange. A stranger can make a disposable seed
 * wallet, preserve its words offline, buy NSU on the book, send it, or post
 * a signed intent in a transparent on-site book; any foreign settlement stays
 * directly between people. The system is experimental and honest about it.
 * KEEP WORKING: first-run wallet path, seed-only ownership, free basic
 * use, transfers, book, source/download, local advisory microbrains that are
 * transparent and fail-open, yearly wipe semantics, and site-local panel.
 * NEVER BECOME: custody/escrow, a CEX, market-maker authority, price oracle,
 * automatic accept/reject, shared sister ledger, pay-to-use rails, seed
 * recovery desk, renter mint, TradingView/Haveno cosplay, or a claim that an
 * unproven security path is proven.
 * CHANGE BOUNDARY: preserve the existing contract, unnumbered Wallet/Send/
 * Trade layout, and the distinction between browser evidence and real e2e
 * proof. Advisory text may explain local signals but may not decide a trade.
 * PROOF: PHP lint; numbered/pack parity; a safe state/first-run/book smoke;
 * preserve existing security/lock behavior; then live source parity.
 */
/**
 * DO NOT DELETE/REMOVE THIS BLOCK - NOSIGNUP.TRADE PRODUCT CONTRACT.
 * AUTHORITATIVE product sentences (must stay true in UI, not only Discord):
 *
 * ORIGINAL LAYOUT DNA (conform loosely — edit > invent):
 * - Classic three-band stage: Top ~65vh (search/wallet/book surface), Middle ~25vh (coach/stats),
 *   Bottom ~10vh (unnumbered tabs Wallet / Send / Trade book). White 1px borders, black void.
 * - Slide-in animations (left/right/up). DNA line: TRADE · NSU rails · orange burn.
 * - Empire entrance (chat DNA): Options · Mirrors · Donate + I AGREE ENTER; wipe facts in modal/coach
 *   NOT a permanent chrome wipe banner. Tabs never numbered 1/2/3.
 *
 * 0 PRIME: One file. No signup. Hard to kill. No course. No paywall on basics.
 * 1 FIRST RUN: Agree terms → get disposable wallet on entry → write 12 words
 *    offline → confirm → claim free starter NSU. Stranger must get this without help.
 * 2 SEED: Seed is the only password. No recovery desk. Losing seed loses coins.
 * 3 NSU: Genesis+treasury = world-population-scaled optimum (not infinite mint).
 *    MASTER FAUCET: genesis supply lives in the treasury wallet (pop × 1000 NSU/human).
 *    That wallet IS the empire faucet for THIS site. Rewards = treasury transfers.
 *    Renters must NOT receive treasury.secret / site wallet seed.
 *    Optional donate path may grant NSU later; never a required purchase.
 * 4 RESET: Yearly wipe. ONLY user NSU wallet balances survive. Profit/ads/bids/
 *    orders/modifiers burn. Treasury re-anchors to (world_pop × optimum/human)
 *    so liquidity restarts with the size of the world - predictable flux by
 *    iteration+ephemerality; market has no structural reason to die. Wipe facts
 *    (WARNING NEXT RESET IN ___ DAYS) live in entry modal + coach — no chrome banner.
 *    Early window restarts.
 *    RENT SIPHON (scaffold): at wipe, remaining renter-side profit/ad piles on
 *    THIS crop feed the site treasury/master faucet path — renters never mint.
 * 5 BOOK: Signed intents; NSU leg on-site; foreign settle off-platform P2P.
 *    Empty book after genesis/wipe → loose bootstrap spread (kind=bootstrap_spread)
 *    around temp anchor 1.0 NOTE/NSU so discovery has a mid; makers tighten.
 *    Market P = book converge; donate buyback arms at P/2 (never fixed sticker).
 * 6 NO THROAT: Non-custodial ghost for visitors. Site-local renter panel is
 *    app-god-mode (incl. replace THIS file), not OS root. Independent wallets.
 * 7 SECURITY: Experimental until proven. Honest warnings > false guarantees.
 *    Today: browser_hmac_v1 + ecdsa_p256_v1 (register pubkey once, then signed ops
 *    without seed: transfer, order, cancel, fill, reputation, faucet claim).
 *    Legacy seed-addr wallets keep working; v2 pubkey-hash addr still planned.
 * 8 MIRRORS: Swarm later; this node is disposable; source must stay auditable.
 * 9 PANEL: /controlpanel or ?controlpanel=1 — paste THIS site's wallet seed
 *    (same as operator/treasury seed). No recovery desk. No password product path.
 *    Unlock: seed derives treasury_addr (owner). Later rent may use economy.operator_addr.
 * 10 ECONOMY: site-local ads; donate→NSU via book mid×k then 50% bid / 50% profit.
 *
 * Genesis+treasury NSU · disposable seed wallets · transfers · order book
 * No downloads · no Monero/Haveno · no TradingView · no CDN · no DB daemon
 * rev 2026-07-13g - wave7: chain RMW lock transfer/order/admin_pay/extract/lazy_accrue TOCTOU
 */
/**
 * FILE MAP (cells/trade.php — physical order; comments only, not a second spec):
 *   charter + PRODUCT CONTRACT ...... law / keep-working / never-become (above)
 *   constants + paths ............... NST_* · $ROOT/$DATA/$CHAIN/$VAULT
 *   identity / auth helpers ......... addr_from_seed · mac · ecdsa · nst_addr_v2 scaffold
 *   brains + wipe copy .............. nst_brain_* · nst_ephemerality_reel_segments
 *   chain / book / economy .......... locks · balances · bootstrap · faucet · ads
 *   E2 conservation ............... nst_conservation_* · freeze file · write gates
 *   panel / vault / admin ........... panel_seed_ok · require_admin · vault notes
 *   routes .......................... ?api=* · ?src/?download · ?controlpanel=1 (early exit)
 *   main HTML/CSS ................... Top/Mid/Bottom DNA · entry gate · unnumbered tabs
 *   client JS IIFE .................. wallet/session · book · ads · coach · gate boot
 * Edit this cell only; sync-pack writes root/pack 4.php. Do not hand-edit pack.
 */
declare(strict_types=1);

const NST_VERSION = '2026-07-13g';
/**
 * KING faucet liquid target / genesis = 24_000_000 NSU (operator 2026-07-15).
 * Micros = whole_NSU × 1e6. Fixed product supply (not live pop×1000).
 * Yearly wipe re-anchors liquid treasury to this target. User balances never seized.
 * Population crawl retained as metadata only. Protected PRODUCT CONTRACT text still
 * mentions world-scale wording; implementation law is 24M fixed.
 */
const NST_DECIMALS = 6;
const NST_GENESIS_TREASURY = '24000000000000'; // 24_000_000 NSU
const NST_MAX_SUPPLY = '24000000000000'; // soft display cap = same scale
/** Legacy metadata constant only (old pop-scale docs); liquid target ignores this. */
const NST_OPTIMUM_MICROS_PER_HUMAN = '1000000000000';
/** Fail-open world population if crawl/cache unavailable (UN-scale estimate). */
const NST_POP_FALLBACK = 8200000000;
/** Cache TTL for crawled population (seconds). */
const NST_POP_CACHE_SECS = 604800; // 7 days
const NST_FAUCET_MICROS = '5000000';
const NST_ORDER_MAX = 200;
const NST_DATA = 'data';
const NST_MOD_DAILY_MICROS = '100000'; // 0.1 NSU per day
const NST_RESET_SECS = 31536000; // 365 days - yearly superstructure
const NST_EARLY_WINDOW_SECS = 2592000; // 30 days after each yearly reset
/** P3a rent quote: price = RENT_NSU_PER_DAY * days_left (whole NSU → micros). Payment settle = later residual. */
const NST_RENT_NSU_PER_DAY = 1000;
const NST_RENT_QUOTE_TTL_SECS = 1800; // 30 minutes
/** Dead address for treasury excess burn on re-anchor (not a user). */
const NST_BURN_ADDR = 'nsu-burn-v1-population-anchor';
/** When book mid missing: gift_nsu = external_amount * K (external in same unit as mid quote). */
const NST_DONATE_K = '1';
const NST_AD_MAX_PNG = 220000; // bytes - site-local weighted board
const NST_AD_MAX_W = 2400;
const NST_AD_MAX_H = 2400;
const NST_AD_MIN_W = 16;
const NST_AD_MIN_H = 16;
/** Public static donate rails (tentative; vault holds private seeds). */
const NST_DONATE_BTC = 'bc1qqnu6n0jztxl4f6krv7klradghle09uhyu7uymz';
const NST_DONATE_XMR = '8Ab24DppUvcdtHfm7K8gTqdBTmPCBiak1GwxgPm1C3osYVQL2QdC1C8GMwggKF77RKKzDgP2R8E3VH8ifetsKms5AqkVyVg';
const NST_DONATE_LTC = 'ltc1qlpdy8qzejcmjdn6vwarpyz8djdlk780w4qkwyp';
/** Operator / recruit contact (not an account desk). */
const NST_CONTACT_EMAIL = 'buysellfreetrade@proton.me';
/**
 * LORD rent GRANT path — RETIRED 2026-07-16 (NSU_VIABILITY_V1 CUT #4 / atomic P2).
 * Rent is PAYMENT TO treasury only (pay-to-treasury + payer-key bind = P3, not this ship).
 * Constants below are DEAD; nst_lord_rent_credit_compute is dead code; admin_rent_claim returns 410.
 * Do not re-enable treasury→LORD credit or server-generated LORD seeds.
 *
 * KING faucet liquid scale = NST_KING_FAUCET_START_NSU (24_000_000).
 */
const LORD_RENT_CREDIT_LEGACY = 10000; // DEAD — retired flat placeholder (whole NSU)
const NST_KING_FAUCET_START_NSU = 24000000; // whole NSU — genesis + re-anchor target
/** @deprecated DEAD grant formula — do not use for product rent */
const LORD_RENT_PCT_BPS = 50;
/** @deprecated DEAD grant formula */
const LORD_RENT_FLAT_BASE_NSU = 2500;
/** @deprecated DEAD grant formula */
const LORD_RENT_FLAT_PERF_BPS = 100;
/** @deprecated DEAD grant formula */
const LORD_RENT_FLAT_PERF_CAP_NSU = 50000;
/** @deprecated DEAD grant formula */
const LORD_RENT_MIN_NSU = 1000;
/** @deprecated DEAD grant formula */
const LORD_RENT_MAX_NSU = 500000;
/** @deprecated DEAD — was API field compat for grant credit */
const LORD_RENT_CREDIT = LORD_RENT_CREDIT_LEGACY;
/** When paid creatives empty (or luck roll): site-local house discovery ads. */
const NST_HOUSE_AD_CHANCE = 18; // percent chance to show house even if paid pool exists
/**
 * Bootstrap discovery book (temp anchor only — market P still converges from live book).
 * Anchor 1.0 NOTE/NSU = 1_000_000 micros; loose BUY half / SELL 1.5x.
 * Size each side ≈ treasury / NST_BOOTSTRAP_DENOM (0.1% when denom=1000).
 */
const NST_BOOTSTRAP_ANCHOR_PX = '1000000'; // 1.0 NOTE per NSU (micros)
const NST_BOOTSTRAP_BUY_PX = '500000';    // 0.5
const NST_BOOTSTRAP_SELL_PX = '1500000';  // 1.5
const NST_BOOTSTRAP_DENOM = 1000;         // amount = floor(treasury/denom) per side
/**
 * OPERATOR_GO §4 / E2a: KING real fillable SELL ladder (NOT bootstrap_spread).
 * Three rungs around discovery anchor; small fixed size so book has TAKE-able asks.
 * Each SELL arms C2 half-BID via nst_treasury_half_bid_from_sell.
 */
const NST_LADDER_AMT_NSU = '100'; // 100 NSU per rung (micros via parse_amt)
const NST_LADDER_AMT_MAX_NSU = '1000'; // hard cap per rung (anti-drain)
const NST_LADDER_PX_LO = '1000000';  // 1.0 NOTE/NSU
const NST_LADDER_PX_MID = '1250000'; // 1.25
const NST_LADDER_PX_HI = '1500000';  // 1.5
/** E2: throttle full conservation replay (seconds). Freeze file always honored. */
const NST_CONSERVATION_RECHECK_SECS = 300;

/** Wallet Inbox v0: short-lived sealed notices (mail≠mint). Aligned with bid ephemerality. */
const NST_INBOX_TTL_SECS = 604800; // 7 days default
const NST_INBOX_MAX_CT_HEX = 8192;
const NST_INBOX_ALG = 'ecdh_p256_hkdf_sha256_aes256gcm_v1';

$ROOT = __DIR__;
$DATA = $ROOT . DIRECTORY_SEPARATOR . NST_DATA;
$CHAIN = $DATA . DIRECTORY_SEPARATOR . 'chain.jsonl';
$TFILE = $DATA . DIRECTORY_SEPARATOR . 'treasury.secret'; // KING vault seed (only minter)
$SITE_SEED_FILE = $DATA . DIRECTORY_SEPARATOR . 'site.seed'; // trade panel wallet seed (not mint)
$META  = $DATA . DIRECTORY_SEPARATOR . 'meta.json';
$ECON  = $DATA . DIRECTORY_SEPARATOR . 'economy.json';
$ADS   = $DATA . DIRECTORY_SEPARATOR . 'ads';
$ADMIN_HASH_FILE = $DATA . DIRECTORY_SEPARATOR . 'admin.pass.hash';
$ADMIN_PASS_FILE = $DATA . DIRECTORY_SEPARATOR . 'admin.pass.txt'; // legacy plaintext migrate
$MODS_FILE = $DATA . DIRECTORY_SEPARATOR . 'modifiers.json';
$OP_ADDR_FILE = $DATA . DIRECTORY_SEPARATOR . 'operator.addr'; // site panel addr (≠ treasury/KING on fresh genesis)
/** P3b: durable open rent quotes (JSON map). Not chain; settle residual reads this. */
$RENT_QUOTES_FILE = $DATA . DIRECTORY_SEPARATOR . 'rent_quotes.json';
$VAULT = dirname($ROOT) . DIRECTORY_SEPARATOR . 'vault'; // sibling of html/

function j($x): string { return json_encode($x, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); }
function norm_seed(string $s): string { return strtolower(trim(preg_replace('/\s+/', ' ', $s) ?? '')); }
/** Path under durable $DATA — same path strings for L0/L1 money/identity (never RAM). */
function nst_data_file(string $name): string {
    global $DATA;
    return $DATA . DIRECTORY_SEPARATOR . $name;
}
/**
 * Ephemeral dir for regenerable L3 only (world_pop cache).
 * Prefer /dev/shm when present+writable; else durable $DATA/ephemeral/.
 * DENYLIST stays on disk: chain, treasury.secret, site.seed, rent_quotes, economy,
 * modifiers, operator.addr, admin.pass.hash, conservation.freeze, pubkey SoT.
 */
function nst_ephemeral_dir(): string {
    global $DATA;
    static $cached = null;
    if ($cached !== null) {
        return $cached;
    }
    if (is_dir('/dev/shm') && is_writable('/dev/shm')) {
        $d = '/dev/shm/nosignup_trade_ephemeral';
        if ((is_dir($d) || @mkdir($d, 0700, true)) && is_writable($d)) {
            return $cached = $d;
        }
    }
    $d = $DATA . DIRECTORY_SEPARATOR . 'ephemeral';
    if (!is_dir($d)) {
        @mkdir($d, 0755, true);
    }
    return $cached = $d;
}
/** First two hex chars of addr (256 fan-out). Fallback crc32%256 if short. */
function nst_addr_shard2(string $addr): string {
    $a = preg_replace('/[^a-f0-9]/', '', strtolower($addr)) ?? '';
    if (strlen($a) >= 2) {
        return substr($a, 0, 2);
    }
    return sprintf('%02x', abs(crc32($a)) % 256);
}
/** Legacy addr (v1): hash of seed. Future dual: ECDSA P-256 pubkey-hash addr + this legacy. */
function addr_from_seed(string $seed): string { return hash('sha256', 'nsu-addr-v1|' . norm_seed($seed)); }
/** HMAC for browser_hmac_v1 (key includes seed → seed still needed to verify). */
function mac_sign(string $seed, string $msg): string { return hash_hmac('sha256', $msg, 'nsu-mac-v1|' . norm_seed($seed)); }
/** ECDSA P-256 dual-path: seed-off-wire spend after pubkey registered for legacy addr. */
function nst_pubkey_path(string $addr): string {
    global $DATA;
    $a = preg_replace('/[^a-f0-9]/', '', strtolower($addr)) ?? '';
    $aa = nst_addr_shard2($a);
    $dir = $DATA . DIRECTORY_SEPARATOR . 'keys' . DIRECTORY_SEPARATOR . $aa;
    if (!is_dir($dir)) {
        @mkdir($dir, 0755, true);
    }
    return $dir . DIRECTORY_SEPARATOR . 'pubkey_' . $a . '.spki';
}
/** Pre-footprint flat path (read fallback only; writes go to keys/{aa}/). */
function nst_pubkey_path_legacy(string $addr): string {
    global $DATA;
    return $DATA . DIRECTORY_SEPARATOR . 'pubkey_' . preg_replace('/[^a-f0-9]/', '', strtolower($addr)) . '.spki';
}
function nst_addr_v2_from_spki_bin(string $spki): string {
    return hash('sha256', 'nsu-addr-v2|' . bin2hex($spki));
}
/** IEEE P1363 (r||s, 64 bytes for P-256) → DER SEQUENCE for openssl_verify. */
function nst_ecdsa_p1363_to_der(string $p1363): ?string {
    if (strlen($p1363) !== 64) return null;
    $encInt = function (string $x): string {
        $x = ltrim($x, "\x00");
        if ($x === '') $x = "\x00";
        if ((ord($x[0]) & 0x80) !== 0) $x = "\x00" . $x;
        return "\x02" . chr(strlen($x)) . $x;
    };
    $r = $encInt(substr($p1363, 0, 32));
    $s = $encInt(substr($p1363, 32, 32));
    $seq = $r . $s;
    return "\x30" . chr(strlen($seq)) . $seq;
}
/** True when host can verify ECDSA P-256 (OpenSSL extension). */
function nst_ecdsa_openssl_ready(): bool {
    return function_exists('openssl_verify') && function_exists('openssl_pkey_get_public');
}
function nst_ecdsa_verify_p256(string $spkiBin, string $msg, string $sigP1363Hex): bool {
    if (!nst_ecdsa_openssl_ready()) return false;
    $sigRaw = @hex2bin(strtolower(preg_replace('/[^a-f0-9]/', '', $sigP1363Hex) ?? ''));
    if ($sigRaw === false || strlen($sigRaw) !== 64) return false;
    $der = nst_ecdsa_p1363_to_der($sigRaw);
    if ($der === null) return false;
    $pem = "-----BEGIN PUBLIC KEY-----\n" . chunk_split(base64_encode($spkiBin), 64, "\n") . "-----END PUBLIC KEY-----\n";
    $pub = @openssl_pkey_get_public($pem);
    if ($pub === false) return false;
    $ok = openssl_verify($msg, $der, $pub, OPENSSL_ALGO_SHA256);
    return $ok === 1;
}
function nst_load_registered_spki(string $addr): ?string {
    $p = nst_pubkey_path($addr);
    if (!is_file($p)) {
        $p = nst_pubkey_path_legacy($addr);
    }
    if (!is_file($p)) return null;
    $hex = trim((string)@file_get_contents($p));
    $bin = @hex2bin(strtolower(preg_replace('/[^a-f0-9]/', '', $hex) ?? ''));
    return ($bin !== false && strlen($bin) > 40) ? $bin : null;
}
function nst_save_registered_spki(string $addr, string $spkiBin): bool {
    if (strlen($spkiBin) < 40) return false;
    return @file_put_contents(nst_pubkey_path($addr), bin2hex($spkiBin), LOCK_EX) !== false;
}

/**
 * WALLET INBOX v0 — address-keyed sealed mail (edit>invent on ECDSA/SPKI DNA).
 * KEY SEPARATION (documented):
 *   - Signing key (ECDSA P-256): existing register_pubkey path (random key, AES-wrapped
 *     at salt nsu-ecdsa-wrap-v1). Signs spends AND signs sealed inbox blobs.
 *   - Encryption key (ECDH P-256): NEW, seed-derived (PBKDF2 salt nsu-ecdh-enc-v1,
 *     120000 iters → 32-byte scalar → PKCS8). Registered at encpub_<addr>.spki.
 *     Distinct file + salt so sign≠encrypt. Recipient unlocks seed → re-derives priv → decrypts.
 * TRUE E2E: sender (KING panel client) encrypts; server stores OPAQUE ciphertext only.
 * Honesty: experimental until isolated e2e proof; never claim proven if plaintext touched server.
 * Mail ≠ mint: no NSU mint/balance change on seal/list/fetch/decrypt.
 */
function nst_encpub_path(string $addr): string {
    global $DATA;
    $a = preg_replace('/[^a-f0-9]/', '', strtolower($addr)) ?? '';
    $aa = nst_addr_shard2($a);
    $dir = $DATA . DIRECTORY_SEPARATOR . 'keys' . DIRECTORY_SEPARATOR . $aa;
    if (!is_dir($dir)) {
        @mkdir($dir, 0755, true);
    }
    return $dir . DIRECTORY_SEPARATOR . 'encpub_' . $a . '.spki';
}
/** Pre-footprint flat path (read fallback only). */
function nst_encpub_path_legacy(string $addr): string {
    global $DATA;
    return $DATA . DIRECTORY_SEPARATOR . 'encpub_' . preg_replace('/[^a-f0-9]/', '', strtolower($addr)) . '.spki';
}
function nst_load_registered_enc_spki(string $addr): ?string {
    $p = nst_encpub_path($addr);
    if (!is_file($p)) {
        $p = nst_encpub_path_legacy($addr);
    }
    if (!is_file($p)) return null;
    $hex = trim((string)@file_get_contents($p));
    $bin = @hex2bin(strtolower(preg_replace('/[^a-f0-9]/', '', $hex) ?? ''));
    return ($bin !== false && strlen($bin) > 40) ? $bin : null;
}
function nst_save_registered_enc_spki(string $addr, string $spkiBin): bool {
    if (strlen($spkiBin) < 40) return false;
    return @file_put_contents(nst_encpub_path($addr), bin2hex($spkiBin), LOCK_EX) !== false;
}
/**
 * Wallet inbox blob path — sharded under data/inbox/{aa}/ (256 fan-out).
 * Filename keeps inbox_{addr}_{id}.blob so list/burn globs stay unambiguous.
 */
function nst_inbox_blob_path(string $addr, string $id): string {
    global $DATA;
    $a = preg_replace('/[^a-f0-9]/', '', strtolower($addr)) ?? '';
    $i = preg_replace('/[^a-f0-9]/', '', strtolower($id)) ?? '';
    $aa = nst_addr_shard2($a);
    $dir = $DATA . DIRECTORY_SEPARATOR . 'inbox' . DIRECTORY_SEPARATOR . $aa;
    if (!is_dir($dir)) {
        @mkdir($dir, 0755, true);
    }
    return $dir . DIRECTORY_SEPARATOR . 'inbox_' . $a . '_' . $i . '.blob';
}
/** Pre-footprint flat blob path (list/burn migration only). */
function nst_inbox_blob_path_legacy(string $addr, string $id): string {
    global $DATA;
    $a = preg_replace('/[^a-f0-9]/', '', strtolower($addr)) ?? '';
    $i = preg_replace('/[^a-f0-9]/', '', strtolower($id)) ?? '';
    return $DATA . DIRECTORY_SEPARATOR . 'inbox_' . $a . '_' . $i . '.blob';
}
function nst_inbox_sign_body(array $b): string {
    return implode('|', [
        'inbox_seal', '1',
        (string)($b['to'] ?? ''),
        (string)($b['from'] ?? ''),
        (string)($b['id'] ?? ''),
        (string)($b['ts'] ?? ''),
        (string)($b['exp'] ?? ''),
        (string)($b['eph_pub'] ?? ''),
        (string)($b['iv'] ?? ''),
        (string)($b['ct'] ?? ''),
    ]);
}
/** Collect inbox blob paths for addr: sharded inbox/{aa}/ + legacy flat (migration). */
function nst_inbox_glob_for_addr(string $addr): array {
    global $DATA;
    $a = preg_replace('/[^a-f0-9]/', '', strtolower($addr)) ?? '';
    if (strlen($a) !== 64) return [];
    $files = [];
    $aa = nst_addr_shard2($a);
    $shardDir = $DATA . DIRECTORY_SEPARATOR . 'inbox' . DIRECTORY_SEPARATOR . $aa;
    if (is_dir($shardDir)) {
        foreach (glob($shardDir . DIRECTORY_SEPARATOR . 'inbox_' . $a . '_*.blob') ?: [] as $f) {
            $files[] = $f;
        }
    }
    // Legacy flat data/inbox_{addr}_*.blob (pre-footprint)
    foreach (glob($DATA . DIRECTORY_SEPARATOR . 'inbox_' . $a . '_*.blob') ?: [] as $f) {
        $files[] = $f;
    }
    return array_values(array_unique($files));
}
/** List non-expired sealed blobs for addr (metadata only; ct still opaque). */
function nst_inbox_list_for_addr(string $addr): array {
    $a = preg_replace('/[^a-f0-9]/', '', strtolower($addr)) ?? '';
    if (strlen($a) !== 64) return [];
    $out = [];
    $now = time();
    foreach (nst_inbox_glob_for_addr($a) as $f) {
        $raw = (string)@file_get_contents($f);
        $j = json_decode($raw, true);
        if (!is_array($j)) continue;
        $exp = (int)($j['exp'] ?? 0);
        if ($exp > 0 && $exp < $now) {
            @unlink($f);
            continue;
        }
        $out[] = [
            'id' => (string)($j['id'] ?? ''),
            'to' => (string)($j['to'] ?? ''),
            'from' => (string)($j['from'] ?? ''),
            'ts' => (int)($j['ts'] ?? 0),
            'exp' => $exp,
            'kind' => (string)($j['kind'] ?? 'king_note'),
            'alg' => (string)($j['alg'] ?? ''),
            'bytes' => strlen($raw),
            'honesty' => (string)($j['honesty'] ?? 'experimental · sealed mail · not proven e2e'),
        ];
    }
    usort($out, static fn($x, $y) => ($y['ts'] ?? 0) <=> ($x['ts'] ?? 0));
    return $out;
}
/**
 * Yearly wipe / epoch burn: sealed notices die with bids (balances survive).
 * CRITICAL: must recurse inbox/{aa}/ shards — missed burn = stale blob regression.
 * Also burns legacy flat data/inbox_*.blob.
 */
function nst_inbox_burn_all(): int {
    global $DATA;
    $n = 0;
    // Legacy flat
    foreach (glob($DATA . DIRECTORY_SEPARATOR . 'inbox_*.blob') ?: [] as $f) {
        if (@unlink($f)) {
            $n++;
        }
    }
    // Sharded tree: data/inbox/{aa}/inbox_*.blob
    $root = $DATA . DIRECTORY_SEPARATOR . 'inbox';
    if (is_dir($root)) {
        foreach (glob($root . DIRECTORY_SEPARATOR . '*', GLOB_ONLYDIR) ?: [] as $dir) {
            foreach (glob($dir . DIRECTORY_SEPARATOR . 'inbox_*.blob') ?: [] as $f) {
                if (@unlink($f)) {
                    $n++;
                }
            }
        }
        // Any blobs directly under inbox/ (defensive)
        foreach (glob($root . DIRECTORY_SEPARATOR . 'inbox_*.blob') ?: [] as $f) {
            if (@unlink($f)) {
                $n++;
            }
        }
    }
    return $n;
}

/**
 * INBOX auto-wire (money-adjacent): SERVER-COMPOSED notices of PUBLIC book events.
 * Honesty floor: this is NOT private E2E — the server sees the (public) content and
 * ECDH-encrypts for delivery only. KING hand-sealed client-encrypt notes remain the
 * only true-E2E path. Mail ≠ mint: never writes chain balances.
 * Money-safety: call ONLY after money ops commit; always fail-open (try/catch).
 */
function nst_inbox_ec_ready(): bool {
    return function_exists('openssl_pkey_new')
        && function_exists('openssl_pkey_derive')
        && function_exists('openssl_encrypt')
        && function_exists('hash_hkdf')
        && defined('OPENSSL_KEYTYPE_EC');
}
/** Export P-256 public key as SPKI hex (uncompressed). Fail → ''. */
function nst_inbox_spki_hex_from_pkey($pkey): string {
    if ($pkey === false || $pkey === null) return '';
    $det = @openssl_pkey_get_details($pkey);
    if (!is_array($det)) return '';
    if (isset($det['ec']['x'], $det['ec']['y'])) {
        $x = $det['ec']['x'];
        $y = $det['ec']['y'];
        if (strlen($x) < 32) $x = str_pad($x, 32, "\0", STR_PAD_LEFT);
        if (strlen($y) < 32) $y = str_pad($y, 32, "\0", STR_PAD_LEFT);
        if (strlen($x) > 32) $x = substr($x, -32);
        if (strlen($y) > 32) $y = substr($y, -32);
        $hdr = @hex2bin('3059301306072a8648ce3d020106082a8648ce3d030107034200');
        if ($hdr === false) return '';
        return bin2hex($hdr . "\x04" . $x . $y);
    }
    $pem = (string)($det['key'] ?? '');
    $b64 = preg_replace('/-----BEGIN PUBLIC KEY-----|-----END PUBLIC KEY-----|\s+/', '', $pem) ?? '';
    $bin = base64_decode($b64, true);
    return ($bin !== false && strlen($bin) > 40) ? bin2hex($bin) : '';
}
/**
 * Server-side ECDH→HKDF→AES-GCM seal (same wire as client inbox v0).
 * @return array{eph_pub:string,iv:string,ct:string}|null
 */
function nst_inbox_server_ecdh_seal(string $recipientSpkiBin, string $plaintext): ?array {
    if (!nst_inbox_ec_ready() || strlen($recipientSpkiBin) < 50) return null;
    try {
        $pem = "-----BEGIN PUBLIC KEY-----\n" . chunk_split(base64_encode($recipientSpkiBin), 64, "\n") . "-----END PUBLIC KEY-----\n";
        $their = @openssl_pkey_get_public($pem);
        if ($their === false) return null;
        $opts = ['private_key_type' => OPENSSL_KEYTYPE_EC, 'curve_name' => 'prime256v1'];
        $cnf = getenv('OPENSSL_CONF');
        if (is_string($cnf) && $cnf !== '' && is_file($cnf)) {
            $opts['config'] = $cnf;
        }
        $eph = @openssl_pkey_new($opts);
        if ($eph === false) return null;
        $shared = @openssl_pkey_derive($their, $eph);
        if ($shared === false || $shared === '') return null;
        $key = hash_hkdf('sha256', $shared, 32, 'nsu-inbox-v1', '');
        if (!is_string($key) || strlen($key) !== 32) return null;
        $iv = random_bytes(12);
        $tag = '';
        $ct = @openssl_encrypt($plaintext, 'aes-256-gcm', $key, OPENSSL_RAW_DATA, $iv, $tag, '', 16);
        if ($ct === false || strlen($tag) !== 16) return null;
        $ephHex = nst_inbox_spki_hex_from_pkey($eph);
        if (strlen($ephHex) < 100) return null;
        return [
            'eph_pub' => strtolower($ephHex),
            'iv' => bin2hex($iv),
            'ct' => bin2hex($ct . $tag),
        ];
    } catch (Throwable $e) {
        return null;
    }
}
/**
 * Best-effort deliver a server_notice to $toAddr if enc-pubkey registered.
 * Fail-open: any error → skipped; never throws; never touches balances.
 * @param array<string,mixed> $publicFacts public book facts only (no seeds/keys)
 * @return array{ok:bool,skipped?:bool,reason?:string,id?:string}
 */
function nst_inbox_deliver_server_notice(string $toAddr, string $event, array $publicFacts): array {
    try {
        $to = preg_replace('/[^a-f0-9]/', '', strtolower($toAddr)) ?? '';
        if (strlen($to) !== 64) {
            return ['ok' => false, 'skipped' => true, 'reason' => 'bad_addr'];
        }
        $spki = nst_load_registered_enc_spki($to);
        if ($spki === null) {
            return ['ok' => false, 'skipped' => true, 'reason' => 'no_enc_pubkey'];
        }
        // Strip anything that must never appear in a notice (defense in depth).
        $safeFacts = [];
        foreach ($publicFacts as $k => $v) {
            $kk = preg_replace('/[^a-z0-9_]/', '', strtolower((string)$k)) ?? '';
            if ($kk === '' || in_array($kk, ['seed', 'secret', 'treasury_secret', 'priv', 'private_key', 'pkcs8'], true)) {
                continue;
            }
            if (is_scalar($v) || $v === null) {
                $safeFacts[$kk] = $v;
            } else {
                $safeFacts[$kk] = substr(j($v), 0, 400);
            }
        }
        $payload = [
            'kind' => 'server_notice',
            'event' => $event,
            'facts' => $safeFacts,
            'note' => 'server-composed notice of a public book event — encrypted for delivery, not a private secret; the event is public on the book',
            'e2e' => false,
            'server_composed' => true,
            'mail_not_mint' => true,
        ];
        $plaintext = j($payload);
        if (strlen($plaintext) > 1800) {
            $plaintext = substr($plaintext, 0, 1800);
        }
        $sealed = nst_inbox_server_ecdh_seal($spki, $plaintext);
        if ($sealed === null) {
            return ['ok' => false, 'skipped' => true, 'reason' => 'crypto_unavailable'];
        }
        if (strlen($sealed['ct']) > NST_INBOX_MAX_CT_HEX) {
            return ['ok' => false, 'skipped' => true, 'reason' => 'ct_too_large'];
        }
        $ts = time();
        $ttl = NST_INBOX_TTL_SECS;
        $exp = $ts + $ttl;
        $factId = (string)($safeFacts['id'] ?? $safeFacts['order_id'] ?? $safeFacts['quote_id'] ?? '');
        $id = substr(hash('sha256', 'server_notice|v1|' . $event . '|' . $to . '|' . $factId . '|' . (string)$ts . '|' . bin2hex(random_bytes(4))), 0, 32);
        $from = '';
        try {
            $from = strtolower(addr_from_seed(treasury_secret()));
        } catch (Throwable $e) {
            $from = str_repeat('0', 64);
        }
        $blob = [
            'v' => 1,
            'id' => $id,
            'to' => $to,
            'from' => $from,
            'ts' => $ts,
            'ttl' => $ttl,
            'exp' => $exp,
            'eph_pub' => $sealed['eph_pub'],
            'iv' => $sealed['iv'],
            'ct' => $sealed['ct'],
            'alg' => NST_INBOX_ALG,
            'kind' => 'server_notice',
            'event' => $event,
            'mail_not_mint' => true,
            'server_composed' => true,
            'honesty' => 'server-composed notice of a public book event — encrypted for delivery, not a private secret; the event is public on the book',
            'sig_mode' => 'server_mac',
        ];
        try {
            $sec = treasury_secret();
            $blob['sig'] = mac_sign($sec, nst_inbox_sign_body($blob));
        } catch (Throwable $e) {
            $blob['sig'] = '';
        }
        $path = nst_inbox_blob_path($to, $id);
        if (@file_put_contents($path, j($blob), LOCK_EX) === false) {
            return ['ok' => false, 'skipped' => true, 'reason' => 'disk'];
        }
        return ['ok' => true, 'id' => $id, 'to' => $to, 'kind' => 'server_notice', 'event' => $event];
    } catch (Throwable $e) {
        return ['ok' => false, 'skipped' => true, 'reason' => 'exception'];
    }
}
/** After fill commits: notify maker + taker (public fill facts). Fail-open. */
function nst_inbox_notify_fill(array $fill): void {
    try {
        $facts = [
            'event' => 'fill',
            'order_id' => (string)($fill['order_id'] ?? ''),
            'pair' => (string)($fill['pair'] ?? ''),
            'side' => (string)($fill['side'] ?? ''),
            'amount' => (string)($fill['amount_fmt'] ?? $fill['amount'] ?? ''),
            'price' => (string)($fill['price_fmt'] ?? $fill['price'] ?? ''),
            'maker' => (string)($fill['maker'] ?? ''),
            'taker' => (string)($fill['taker'] ?? ''),
            'ts' => (int)($fill['ts'] ?? time()),
            'id' => (string)($fill['order_id'] ?? '') . '|' . (string)($fill['ts'] ?? '') . '|' . (string)($fill['taker'] ?? ''),
        ];
        $maker = preg_replace('/[^a-f0-9]/', '', strtolower((string)($fill['maker'] ?? ''))) ?? '';
        $taker = preg_replace('/[^a-f0-9]/', '', strtolower((string)($fill['taker'] ?? ''))) ?? '';
        if (strlen($maker) === 64) {
            nst_inbox_deliver_server_notice($maker, 'fill', $facts);
        }
        if (strlen($taker) === 64 && $taker !== $maker) {
            nst_inbox_deliver_server_notice($taker, 'fill', $facts);
        }
    } catch (Throwable $e) {
        // fail-open
    }
}
/** After half-BID arms: notify treasury-sell context (public book floor). Fail-open. */
function nst_inbox_notify_half_bid(?array $sellOrder, array $halfBid): void {
    try {
        if (!empty($halfBid['skipped'])) {
            return;
        }
        $facts = [
            'event' => 'half_bid_armed',
            'half_bid_id' => (string)($halfBid['id'] ?? ''),
            'paired_sell_id' => (string)($halfBid['paired_sell_id'] ?? ($sellOrder['id'] ?? '')),
            'pair' => (string)($halfBid['pair'] ?? ($sellOrder['pair'] ?? '')),
            'amount' => (string)($halfBid['amount_fmt'] ?? $halfBid['amount'] ?? ''),
            'price' => (string)($halfBid['price_fmt'] ?? $halfBid['price'] ?? ''),
            'side' => 'buy',
            'order_kind' => 'treasury_half_bid',
            'ts' => (int)($halfBid['ts'] ?? time()),
            'id' => (string)($halfBid['id'] ?? ''),
        ];
        $to = preg_replace('/[^a-f0-9]/', '', strtolower((string)($sellOrder['addr'] ?? $halfBid['addr'] ?? ''))) ?? '';
        if (strlen($to) === 64) {
            nst_inbox_deliver_server_notice($to, 'half_bid_armed', $facts);
        }
    } catch (Throwable $e) {
        // fail-open
    }
}
/** After rent settle commits: notify payer. Fail-open. */
function nst_inbox_notify_rent_settle(array $settle): void {
    try {
        if (empty($settle['settled'])) {
            return;
        }
        $payer = preg_replace('/[^a-f0-9]/', '', strtolower((string)($settle['payer'] ?? ''))) ?? '';
        $lease = is_array($settle['lease'] ?? null) ? $settle['lease'] : [];
        $facts = [
            'event' => 'rent_settle',
            'site' => (string)($settle['site'] ?? $lease['site'] ?? ''),
            'quote_id' => (string)($settle['quote_id'] ?? $lease['quote_id'] ?? ''),
            'payer' => $payer,
            'amount' => (string)($lease['amount_fmt'] ?? $lease['amount'] ?? ''),
            'ts' => (int)($lease['rented_at'] ?? time()),
            'id' => (string)($settle['quote_id'] ?? ''),
        ];
        if (strlen($payer) === 64) {
            nst_inbox_deliver_server_notice($payer, 'rent_settle', $facts);
        }
    } catch (Throwable $e) {
        // fail-open
    }
}
/** After rent refund commits: notify payer. Fail-open. */
function nst_inbox_notify_rent_refund(?array $refund): void {
    try {
        if (!is_array($refund) || empty($refund['refunded'])) {
            return;
        }
        $tx = is_array($refund['tx'] ?? null) ? $refund['tx'] : [];
        $payer = preg_replace('/[^a-f0-9]/', '', strtolower((string)($tx['to'] ?? ''))) ?? '';
        $facts = [
            'event' => 'rent_refund',
            'quote_id' => (string)($refund['quote_id'] ?? $tx['quote_id'] ?? ''),
            'reason' => (string)($refund['reason'] ?? $tx['rent_refund_reason'] ?? ''),
            'amount' => (string)($tx['amount_fmt'] ?? $tx['amount'] ?? ''),
            'payer' => $payer,
            'ts' => (int)($tx['ts'] ?? time()),
            'id' => (string)($tx['rent_refund_of_nonce'] ?? $tx['nonce'] ?? ''),
        ];
        if (strlen($payer) === 64) {
            nst_inbox_deliver_server_notice($payer, 'rent_refund', $facts);
        }
    } catch (Throwable $e) {
        // fail-open
    }
}


/**
 * Dual-path actor: ECDSA seed-off-wire candidate OR require_seed.
 * Registry state decides: if acting addr has a stored SPKI, seed/HMAC is refused
 * (ECDSA-only). ECDSA candidate when seed empty and pubkey+ecdsa_sig present →
 * addr from POST[$addrKey] (falls back to POST[from] then POST[addr]).
 * Signature verified later via nst_auth_sig.
 *
 * @return array{addr:string,seed:?string,ecdsa:bool,spki_hex:string,ecdsa_sig:string}
 */
function nst_actor(string $addrKey = 'from'): array {
    $seedRaw = trim((string)($_POST['seed'] ?? ''));
    $spkiHex = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['pubkey'] ?? '')) ?? '');
    $ecdsaSig = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['ecdsa_sig'] ?? '')) ?? '');
    if ($seedRaw === '' && $spkiHex !== '' && $ecdsaSig !== '') {
        $addr = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST[$addrKey] ?? ''))) ?? '';
        if (strlen($addr) !== 64) {
            $addr = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['from'] ?? ''))) ?? '';
        }
        if (strlen($addr) !== 64) {
            $addr = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['addr'] ?? ''))) ?? '';
        }
        if (strlen($addr) !== 64) {
            api_out(['ok' => false, 'err' => 'bad addr'], 400);
        }
        return [
            'addr' => $addr,
            'seed' => null,
            'ecdsa' => true,
            'spki_hex' => $spkiHex,
            'ecdsa_sig' => $ecdsaSig,
        ];
    }
    [$seed, $addr] = require_seed();
    // ATOM1: registered SPKI ⇒ refuse seed/HMAC spend (path by registry, not seed emptiness)
    if (nst_load_registered_spki($addr) !== null) {
        api_out(['ok' => false, 'err' => 'address is ECDSA-registered; sign with your key, do not post seed'], 403);
    }
    return [
        'addr' => $addr,
        'seed' => $seed,
        'ecdsa' => false,
        'spki_hex' => '',
        'ecdsa_sig' => '',
    ];
}

/**
 * Verify signature over $body for an nst_actor() result.
 * ECDSA: registered SPKI + P-256 P1363 sig (override via $ecdsaSigOverride for secondary legs).
 * HMAC: optional client_sig ($clientSigKey) → browser_hmac_v1; else server_mac.
 *
 * @return array{sig_mode:string,sig:string,pubkey:string,seed_on_wire:bool}
 */
function nst_auth_sig(array $actor, string $body, string $clientSigKey = 'client_sig', ?string $ecdsaSigOverride = null): array {
    if (!empty($actor['ecdsa'])) {
        $spkiHex = (string)($actor['spki_hex'] ?? '');
        $ecdsaSig = $ecdsaSigOverride !== null
            ? strtolower(preg_replace('/[^a-f0-9]/', '', $ecdsaSigOverride) ?? '')
            : (string)($actor['ecdsa_sig'] ?? '');
        $spki = @hex2bin($spkiHex);
        if ($spki === false || strlen($spki) < 50) {
            api_out(['ok' => false, 'err' => 'bad pubkey'], 400);
        }
        $reg = nst_load_registered_spki((string)$actor['addr']);
        if ($reg === null || !hash_equals($reg, $spki)) {
            api_out(['ok' => false, 'err' => 'pubkey not registered — unlock with seed once'], 403);
        }
        if ($ecdsaSig === '' || !nst_ecdsa_verify_p256($spki, $body, $ecdsaSig)) {
            api_out(['ok' => false, 'err' => 'bad ecdsa signature'], 400);
        }
        return [
            'sig_mode' => 'ecdsa_p256_v1',
            'sig' => $ecdsaSig,
            'pubkey' => $spkiHex,
            'seed_on_wire' => false,
        ];
    }
    $seed = (string)($actor['seed'] ?? '');
    if ($seed === '') {
        api_out(['ok' => false, 'err' => 'Need your 12-word seed'], 400);
    }
    $expect = mac_sign($seed, $body);
    $clientSig = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST[$clientSigKey] ?? ''))) ?? '';
    $sigMode = 'server_mac';
    if ($clientSig !== '') {
        if (strlen($clientSig) !== 64 || !hash_equals($expect, $clientSig)) {
            api_out(['ok' => false, 'err' => 'bad client signature — re-unlock and retry'], 400);
        }
        $sigMode = 'browser_hmac_v1';
    }
    return [
        'sig_mode' => $sigMode,
        'sig' => $expect,
        'pubkey' => '',
        'seed_on_wire' => true,
    ];
}

function dec_ok(string $a): bool { return (bool)preg_match('/^[0-9]+$/', $a); }
function dec_norm(string $a): string { $a = ltrim($a, '0'); return $a === '' ? '0' : $a; }
function dec_cmp(string $a, string $b): int {
    $a = dec_norm($a); $b = dec_norm($b);
    if (strlen($a) !== strlen($b)) return strlen($a) < strlen($b) ? -1 : 1;
    return $a <=> $b;
}
function dec_add(string $a, string $b): string {
    $a = dec_norm($a); $b = dec_norm($b);
    if (function_exists('bcadd')) return bcadd($a, $b, 0);
    $i = strlen($a) - 1; $j = strlen($b) - 1; $c = 0; $r = '';
    while ($i >= 0 || $j >= 0 || $c) {
        $s = $c + ($i >= 0 ? (int)$a[$i--] : 0) + ($j >= 0 ? (int)$b[$j--] : 0);
        $r = (string)($s % 10) . $r; $c = intdiv($s, 10);
    }
    return dec_norm($r);
}
function dec_sub(string $a, string $b): string {
    if (dec_cmp($a, $b) < 0) return '-1';
    if (function_exists('bcsub')) return bcsub(dec_norm($a), dec_norm($b), 0);
    $a = str_pad(dec_norm($a), max(strlen($a), strlen($b)), '0', STR_PAD_LEFT);
    $b = str_pad(dec_norm($b), strlen($a), '0', STR_PAD_LEFT);
    $c = 0; $r = '';
    for ($i = strlen($a) - 1; $i >= 0; $i--) {
        $d = (int)$a[$i] - $c - (int)$b[$i];
        if ($d < 0) { $d += 10; $c = 1; } else { $c = 0; }
        $r = (string)$d . $r;
    }
    return dec_norm($r);
}
function dec_mul_small(string $a, int $m): string {
    if (function_exists('bcmul')) return bcmul(dec_norm($a), (string)$m, 0);
    $a = dec_norm($a); $c = 0; $r = '';
    for ($i = strlen($a) - 1; $i >= 0; $i--) {
        $p = (int)$a[$i] * $m + $c;
        $r = (string)($p % 10) . $r; $c = intdiv($p, 10);
    }
    while ($c > 0) { $r = (string)($c % 10) . $r; $c = intdiv($c, 10); }
    return dec_norm($r);
}
function fmt_amt(string $micros): string {
    $micros = dec_norm($micros);
    if (strlen($micros) <= NST_DECIMALS) {
        $whole = '0'; $frac = str_pad($micros, NST_DECIMALS, '0', STR_PAD_LEFT);
    } else {
        $whole = substr($micros, 0, -NST_DECIMALS);
        $frac = substr($micros, -NST_DECIMALS);
    }
    $frac = rtrim($frac, '0');
    return $frac === '' ? $whole : "$whole.$frac";
}
function parse_amt(string $h): ?string {
    $h = trim($h);
    if (!preg_match('/^\d+(\.\d{1,' . NST_DECIMALS . '})?$/', $h)) return null;
    if (strpos($h, '.') === false) return dec_mul_small($h, (int)str_pad('1', NST_DECIMALS + 1, '0'));
    [$w, $f] = explode('.', $h, 2);
    $f = str_pad($f, NST_DECIMALS, '0', STR_PAD_RIGHT);
    return dec_add(dec_mul_small($w === '' ? '0' : $w, (int)str_pad('1', NST_DECIMALS + 1, '0')), dec_norm($f));
}

/* ---- TINY PURPOSE BRAINS (hand-crafted, in-file, no external deps) ----
 * Each brain does ONE job. Sentience = many small coherent specialists,
 * not one cloud oracle. Fail open when unsure. */
/** Brain: memo_risk - bag-of-words scam/phishing score in [0,1]. Fail open. */
function nst_brain_memo_risk(string $text): array {
    $t = strtolower($text);
    $hits = [];
    $bad = [
        'seed phrase' => 0.35, 'private key' => 0.4, 'send all' => 0.25, 'double your' => 0.3,
        'airdrop claim' => 0.25, 'connect wallet' => 0.2, 'verify wallet' => 0.25,
        'urgent' => 0.1, 'guaranteed' => 0.15, '100x' => 0.2, 'giveaway' => 0.1,
    ];
    $score = 0.0;
    foreach ($bad as $k => $w) {
        if ($k !== '' && str_contains($t, $k)) {
            $score += $w;
            $hits[] = $k;
        }
    }
    if ($score > 1.0) $score = 1.0;
    return ['brain' => 'memo_risk', 'score' => round($score, 3), 'hits' => $hits, 'flag' => $score >= 0.45];
}
/** Brain: order_sanity - soft checks on side/amount/price; never blocks alone. */
function nst_brain_order_sanity(string $side, string $amount, string $price): array {
    $notes = [];
    $score = 0.0;
    if (!in_array($side, ['buy', 'sell'], true)) {
        $notes[] = 'side';
        $score += 0.5;
    }
    if (dec_cmp($amount, '0') <= 0) {
        $notes[] = 'amount';
        $score += 0.4;
    }
    if (dec_cmp($price, '0') <= 0) {
        $notes[] = 'price';
        $score += 0.4;
    }
    // huge size relative to max supply micros is absurd
    if (strlen(dec_norm($amount)) > 18) {
        $notes[] = 'amount_huge';
        $score += 0.3;
    }
    if ($score > 1.0) $score = 1.0;
    return ['brain' => 'order_sanity', 'score' => round($score, 3), 'notes' => $notes, 'flag' => $score >= 0.5];
}
/**
 * Brain: wipe_copy + ephemerality reel - explicit yearly law for news-reel banner.
 * Segments are short so the reel can use larger type on Android (screen efficiency).
 * Coherence: same facts as gate risks / YEAR_WIPE vault note / EMPIRE_ECONOMICS.
 *
 * @return list<string>
 */
function nst_ephemerality_reel_segments(int $daysLeft, ?array $extra = null): array {
    $d = max(0, $daysLeft);
    $segs = [
        'WARNING | NEXT YEARLY WIPE IN ' . $d . ' DAYS',
        'EPHEMERALITY | this crop forgets on purpose every year',
        'SURVIVES | ONLY your NSU wallet balances (ledger)',
        'BURNS | profit pile | ad stakes | creatives | open orders | mods | panel loot',
        'RE-KEYS | panel password dies at year end (leaks only hurt until wipe)',
        'TREASURY | re-anchors to 24_000_000 NSU KING faucet (liquid gas, not your coins)',
        'VALUE | THIS server owner sets local k / value note | not mirrors | not a global bank',
        'MIRRORS | free tributaries only | help the network | zero cut | no value authority | no daily faucet wage until hits are parent-verifiable | host because the swarm is hard to kill',
        'EARLY DRIP | permanent 0.1 NSU/day only if you unlock in first 30 days after reset',
        'SEED | your 12 words are the only password | no desk | no refunds',
    ];
    if (is_array($extra)) {
        foreach ($extra as $s) {
            $s = trim((string)$s);
            if ($s !== '') $segs[] = $s;
        }
    }
    return $segs;
}
/** Single-line join (legacy callers / static SSR). */
function nst_brain_wipe_copy(int $daysLeft): string {
    return implode('  |  ', nst_ephemerality_reel_segments($daysLeft));
}
/**
 * Brain: ad_png - PNG magic + IHDR geometry + byte budget.
 * Hard reject: corrupt / wrong magic / out-of-range dimensions / oversize bytes.
 * Soft flag: extreme aspect or huge pixel count (still may serve). Fail open on soft only.
 */
function nst_brain_ad_png(string $bin): array {
    $len = strlen($bin);
    if ($len < 33) {
        return ['brain' => 'ad_png', 'ok' => false, 'err' => 'png too small', 'score' => 1.0, 'notes' => ['tiny'], 'flag' => true];
    }
    if ($len > NST_AD_MAX_PNG) {
        return ['brain' => 'ad_png', 'ok' => false, 'err' => 'png too big (max ' . NST_AD_MAX_PNG . 'b)', 'score' => 1.0, 'notes' => ['bytes'], 'flag' => true, 'bytes' => $len];
    }
    if (substr($bin, 0, 8) !== "\x89PNG\r\n\x1a\n") {
        return ['brain' => 'ad_png', 'ok' => false, 'err' => 'not a PNG', 'score' => 1.0, 'notes' => ['magic'], 'flag' => true];
    }
    if (substr($bin, 12, 4) !== 'IHDR') {
        return ['brain' => 'ad_png', 'ok' => false, 'err' => 'missing IHDR', 'score' => 1.0, 'notes' => ['ihdr'], 'flag' => true];
    }
    $w = unpack('N', substr($bin, 16, 4))[1];
    $h = unpack('N', substr($bin, 20, 4))[1];
    $bit = ord($bin[24]);
    $color = ord($bin[25]);
    if ($w < NST_AD_MIN_W || $h < NST_AD_MIN_H) {
        return ['brain' => 'ad_png', 'ok' => false, 'err' => 'min ' . NST_AD_MIN_W . 'x' . NST_AD_MIN_H, 'w' => $w, 'h' => $h, 'score' => 1.0, 'notes' => ['min'], 'flag' => true];
    }
    if ($w > NST_AD_MAX_W || $h > NST_AD_MAX_H) {
        return ['brain' => 'ad_png', 'ok' => false, 'err' => 'max ' . NST_AD_MAX_W . 'x' . NST_AD_MAX_H, 'w' => $w, 'h' => $h, 'score' => 1.0, 'notes' => ['max'], 'flag' => true];
    }
    $notes = [];
    $score = 0.0;
    $ratio = $w / max(1, $h);
    if ($ratio > 12.0 || $ratio < (1.0 / 12.0)) {
        $notes[] = 'extreme_aspect';
        $score += 0.35;
    }
    if (($w * $h) > 2000000) {
        $notes[] = 'megapixels';
        $score += 0.25;
    }
    if (!in_array($color, [0, 2, 3, 4, 6], true)) {
        $notes[] = 'color_type';
        $score += 0.5;
    }
    if ($bit !== 8 && $bit !== 16 && $bit !== 4 && $bit !== 2 && $bit !== 1) {
        $notes[] = 'bit_depth';
        $score += 0.2;
    }
    // Prefer board-friendly widths (soft)
    if ($w < 120 && $h < 60) {
        $notes[] = 'tiny_display';
        $score += 0.15;
    }
    if ($score > 1.0) {
        $score = 1.0;
    }
    return [
        'brain' => 'ad_png',
        'ok' => true,
        'score' => round($score, 3),
        'notes' => $notes,
        'flag' => $score >= 0.5,
        'w' => $w,
        'h' => $h,
        'bit_depth' => $bit,
        'color_type' => $color,
        'bytes' => $len,
        'ratio' => round($ratio, 3),
    ];
}
/** Brain: href_risk - click-through URL scheme + soft phishing tokens. Hard reject non-http(s). */
function nst_brain_href_risk(string $href): array {
    $href = trim($href);
    if ($href === '') {
        return ['brain' => 'href_risk', 'ok' => true, 'score' => 0.0, 'hits' => [], 'flag' => false];
    }
    if (preg_match('#^(javascript|data|file|vbscript):#i', $href)) {
        return ['brain' => 'href_risk', 'ok' => false, 'err' => 'blocked scheme', 'score' => 1.0, 'hits' => ['scheme'], 'flag' => true];
    }
    if (!preg_match('#^https?://#i', $href)) {
        return ['brain' => 'href_risk', 'ok' => false, 'err' => 'href must be http(s)', 'score' => 1.0, 'hits' => ['scheme'], 'flag' => true];
    }
    $t = strtolower($href);
    $hits = [];
    $bad = [
        'seed' => 0.2, 'privatekey' => 0.3, 'wallet-connect' => 0.15, 'airdrop' => 0.15,
        'double-your' => 0.25, 'free-money' => 0.2, 'bit.ly' => 0.1, 'tinyurl' => 0.1,
    ];
    $score = 0.0;
    foreach ($bad as $k => $w) {
        if (str_contains($t, $k)) {
            $score += $w;
            $hits[] = $k;
        }
    }
    if ($score > 1.0) {
        $score = 1.0;
    }
    return ['brain' => 'href_risk', 'ok' => true, 'score' => round($score, 3), 'hits' => $hits, 'flag' => $score >= 0.45];
}
/** Brain: pair_sane - soft book pair text (NSU/NOTE etc); never blocks alone. */
function nst_brain_pair_sane(string $pair): array {
    $p = strtoupper(trim($pair));
    $notes = [];
    $score = 0.0;
    if ($p === '' || !preg_match('#^[A-Z0-9]{2,12}/[A-Z0-9]{2,12}$#', $p)) {
        $notes[] = 'format';
        $score += 0.4;
    }
    if (str_contains($p, 'SEED') || str_contains($p, 'HTTP')) {
        $notes[] = 'token';
        $score += 0.4;
    }
    if ($score > 1.0) {
        $score = 1.0;
    }
    return ['brain' => 'pair_sane', 'score' => round($score, 3), 'notes' => $notes, 'flag' => $score >= 0.5, 'pair' => $p];
}

function boot_data(): void {
    global $DATA, $CHAIN, $TFILE, $META;
    if (!is_dir($DATA)) @mkdir($DATA, 0755, true);
    $ht = $DATA . '/.htaccess';
    if (!is_file($ht)) @file_put_contents($ht, "Require all denied\nDeny from all\n");
    $idx = $DATA . '/index.html';
    if (!is_file($idx)) @file_put_contents($idx, '');
    if (!is_file($CHAIN)) @file_put_contents($CHAIN, '');
}
function read_chain(): array {
    global $CHAIN;
    if (!is_file($CHAIN)) return [];
    $out = [];
    $fh = fopen($CHAIN, 'rb');
    if (!$fh) return [];
    while (($line = fgets($fh)) !== false) {
        $line = trim($line);
        if ($line === '') continue;
        $j = json_decode($line, true);
        if (is_array($j)) $out[] = $j;
    }
    fclose($fh);
    return $out;
}
function append_row(array $row): bool {
    global $CHAIN;
    // E2 FREEZE: block every chain append while conservation freeze is sticky.
    if (function_exists('nst_conservation_is_frozen') && nst_conservation_is_frozen()) {
        return false;
    }
    $fh = fopen($CHAIN, 'ab+');
    if (!$fh) return false;
    if (!flock($fh, LOCK_EX)) { fclose($fh); return false; }
    $ok = fwrite($fh, j($row) . "\n") !== false;
    fflush($fh);
    flock($fh, LOCK_UN);
    fclose($fh);
    return $ok;
}
/**
 * Exclusive chain read-modify-write. Holds LOCK_EX for the whole callback so
 * fill/faucet/transfer/order/admin_pay/extract/lazy_accrue races cannot double-spend.
 * Callback: fn(array $rows, callable(array):bool $append): mixed
 * Do NOT call append_row() inside — use $append only (same fd / non-deadlocking).
 * Returns null if the chain file cannot be opened/locked.
 */
function nst_with_chain_lock(callable $fn) {
    global $CHAIN;
    boot_data();
    $fh = @fopen($CHAIN, 'c+b');
    if (!$fh) return null;
    if (!flock($fh, LOCK_EX)) {
        fclose($fh);
        return null;
    }
    try {
        rewind($fh);
        $rows = [];
        while (($line = fgets($fh)) !== false) {
            $line = trim($line);
            if ($line === '') continue;
            $j = json_decode($line, true);
            if (is_array($j)) $rows[] = $j;
        }
        fseek($fh, 0, SEEK_END);
        $append = function (array $row) use ($fh, &$rows): bool {
            // E2 FREEZE: refuse append while sticky freeze file is present.
            if (function_exists('nst_conservation_is_frozen') && nst_conservation_is_frozen()) {
                return false;
            }
            $ok = fwrite($fh, j($row) . "\n") !== false;
            if ($ok) {
                fflush($fh);
                $rows[] = $row;
            }
            return $ok;
        };
        return $fn($rows, $append);
    } finally {
        flock($fh, LOCK_UN);
        fclose($fh);
    }
}
/**
 * Exclusive file lock helper (durable files: rent_quotes, etc.).
 * Callback: fn(resource $fh): mixed — file opened c+b, pointer undefined.
 * Free claim faucet retired 410 — no cooldown file.
 */
function nst_with_file_lock(string $path, callable $fn) {
    $dir = dirname($path);
    if (!is_dir($dir)) {
        @mkdir($dir, 0755, true);
    }
    $fh = @fopen($path, 'c+b');
    if (!$fh) return null;
    if (!flock($fh, LOCK_EX)) {
        fclose($fh);
        return null;
    }
    try {
        return $fn($fh);
    } finally {
        flock($fh, LOCK_UN);
        fclose($fh);
    }
}
function balances(array $rows): array {
    $b = [];
    foreach ($rows as $r) {
        $t = $r['type'] ?? '';
        if ($t === 'genesis' || $t === 'treasury_reanchor') {
            foreach ($r['outputs'] ?? [] as $o) {
                $a = $o['addr'] ?? ''; $m = $o['amount'] ?? '0';
                if ($a && dec_ok($m)) $b[$a] = dec_add($b[$a] ?? '0', $m);
            }
            // explicit treasury burn leg (excess liquid above 24_000_000 NSU KING target)
            if ($t === 'treasury_reanchor' && !empty($r['burn_amount']) && dec_ok((string)$r['burn_amount'])) {
                $ta = (string)($r['treasury_addr'] ?? '');
                $bm = (string)$r['burn_amount'];
                if ($ta !== '' && dec_cmp($b[$ta] ?? '0', $bm) >= 0) {
                    $b[$ta] = dec_sub($b[$ta] ?? '0', $bm);
                    $burn = NST_BURN_ADDR;
                    $b[$burn] = dec_add($b[$burn] ?? '0', $bm);
                }
            }
        } elseif ($t === 'transfer') {
            $f = $r['from'] ?? ''; $to = $r['to'] ?? ''; $m = $r['amount'] ?? '0';
            if (!$f || !$to || !dec_ok($m)) continue;
            if (dec_cmp($b[$f] ?? '0', $m) < 0) continue; // skip invalid historical
            $b[$f] = dec_sub($b[$f] ?? '0', $m);
            $b[$to] = dec_add($b[$to] ?? '0', $m);
        }
    }
    return $b;
}

/* ========================================================================
 * E2 CONSERVATION INVARIANT + FREEZE + int-micros audit (NSU-V1-SIMPLE STEP 1)
 * ADDITIVE ONLY. Does not alter balances()/transfer/faucet/order bodies.
 * On mismatch or non-integer money fields: sticky FREEZE file → all chain
 * writes reject → write APIs 503 conservation_freeze + loud red banner.
 * ======================================================================== */

/** True iff $m is a non-negative integer decimal string (micros). Same law as dec_ok. */
function nst_int_micros_ok(string $m): bool {
    return dec_ok($m);
}

/**
 * Audit money-bearing fields on chain rows for non-integer micros.
 * @return array{ok:bool,violations:list<array{i:int,type:string,field:string,value:string}>}
 */
function nst_audit_int_micros(array $rows): array {
    $violations = [];
    $check = static function (int $i, string $type, string $field, $raw) use (&$violations): void {
        if ($raw === null) {
            $violations[] = ['i' => $i, 'type' => $type, 'field' => $field, 'value' => ''];
            return;
        }
        $v = is_string($raw) || is_int($raw) ? (string)$raw : '';
        if ($v === '' || !nst_int_micros_ok($v)) {
            $violations[] = ['i' => $i, 'type' => $type, 'field' => $field, 'value' => $v];
        }
    };
    foreach ($rows as $i => $r) {
        if (!is_array($r)) {
            continue;
        }
        $t = (string)($r['type'] ?? '');
        if ($t === 'genesis' || $t === 'treasury_reanchor') {
            foreach ($r['outputs'] ?? [] as $j => $o) {
                if (!is_array($o)) {
                    continue;
                }
                $check((int)$i, $t, 'outputs[' . $j . '].amount', $o['amount'] ?? null);
            }
            if ($t === 'treasury_reanchor' && array_key_exists('burn_amount', $r)) {
                $check((int)$i, $t, 'burn_amount', $r['burn_amount']);
            }
        } elseif ($t === 'transfer' || $t === 'fill') {
            if (array_key_exists('amount', $r)) {
                $check((int)$i, $t, 'amount', $r['amount']);
            }
        } elseif ($t === 'order') {
            if (array_key_exists('amount', $r)) {
                $check((int)$i, $t, 'amount', $r['amount']);
            }
            if (array_key_exists('price', $r)) {
                $check((int)$i, $t, 'price', $r['price']);
            }
        }
    }
    return ['ok' => $violations === [], 'violations' => $violations];
}

/**
 * Replay conservation: expected issued vs Σ balances().
 * Expected = genesis outputs + treasury_reanchor credit outputs only.
 * Burn stays in total (NST_BURN_ADDR). Transfers conserve.
 *
 * @return array{ok:bool,observed_sum:string,expected_issued:string,balances_sum:string,int_ok:bool,detail:array}
 */
function nst_conservation_replay(array $rows): array {
    $expected = '0';
    $genesisN = 0;
    $genesisSum = '0';
    $reanchorCreditN = 0;
    $reanchorCreditSum = '0';
    foreach ($rows as $r) {
        if (!is_array($r)) {
            continue;
        }
        $t = (string)($r['type'] ?? '');
        if ($t === 'genesis') {
            $genesisN++;
            foreach ($r['outputs'] ?? [] as $o) {
                if (!is_array($o)) {
                    continue;
                }
                $m = (string)($o['amount'] ?? '0');
                if (!nst_int_micros_ok($m)) {
                    continue;
                }
                $expected = dec_add($expected, $m);
                $genesisSum = dec_add($genesisSum, $m);
            }
        } elseif ($t === 'treasury_reanchor') {
            foreach ($r['outputs'] ?? [] as $o) {
                if (!is_array($o)) {
                    continue;
                }
                $m = (string)($o['amount'] ?? '0');
                if (!nst_int_micros_ok($m) || dec_cmp($m, '0') <= 0) {
                    continue;
                }
                $expected = dec_add($expected, $m);
                $reanchorCreditSum = dec_add($reanchorCreditSum, $m);
                $reanchorCreditN++;
            }
        }
    }

    $bal = balances($rows);
    $observed = '0';
    $nonzeroAddrs = 0;
    foreach ($bal as $addr => $amt) {
        $a = (string)$amt;
        if (!nst_int_micros_ok($a)) {
            return [
                'ok' => false,
                'observed_sum' => '0',
                'expected_issued' => $expected,
                'balances_sum' => '0',
                'int_ok' => false,
                'detail' => [
                    'err' => 'balance_non_int',
                    'addr' => (string)$addr,
                    'amount' => $a,
                ],
            ];
        }
        $observed = dec_add($observed, $a);
        if (dec_cmp($a, '0') > 0) {
            $nonzeroAddrs++;
        }
    }

    $intAudit = nst_audit_int_micros($rows);
    $match = dec_cmp($observed, $expected) === 0;
    $ok = $match && !empty($intAudit['ok']);
    $diff = '0';
    if (!$match) {
        $diff = dec_cmp($observed, $expected) > 0
            ? dec_sub($observed, $expected)
            : ('-' . dec_sub($expected, $observed));
    }

    return [
        'ok' => $ok,
        'observed_sum' => $observed,
        'expected_issued' => $expected,
        'balances_sum' => $observed,
        'int_ok' => !empty($intAudit['ok']),
        'detail' => [
            'match' => $match,
            'diff' => $diff,
            'genesis_rows' => $genesisN,
            'genesis_sum' => $genesisSum,
            'reanchor_credit_legs' => $reanchorCreditN,
            'reanchor_credit_sum' => $reanchorCreditSum,
            'nonzero_addrs' => $nonzeroAddrs,
            'burn_addr' => NST_BURN_ADDR,
            'burn_bal' => (string)($bal[NST_BURN_ADDR] ?? '0'),
            'int_violations' => $intAudit['violations'],
            'note' => 'expected=genesis+reanchor credits; burn moves to NST_BURN_ADDR (stays in total)',
        ],
    ];
}

function nst_conservation_freeze_path(): string {
    global $DATA;
    boot_data();
    return $DATA . DIRECTORY_SEPARATOR . 'conservation.freeze.json';
}

/** @return array{frozen?:bool,ts?:int,reason?:string,observed?:string,expected?:string}|null */
function nst_conservation_freeze_read(): ?array {
    $p = nst_conservation_freeze_path();
    if (!is_file($p)) {
        return null;
    }
    $j = json_decode((string)@file_get_contents($p), true);
    return is_array($j) ? $j : ['frozen' => true, 'reason' => 'unreadable_freeze_file'];
}

function nst_conservation_is_frozen(): bool {
    $j = nst_conservation_freeze_read();
    if ($j === null) {
        return false;
    }
    // Fail closed: freeze file present with missing frozen key still blocks.
    if (array_key_exists('frozen', $j)) {
        return !empty($j['frozen']);
    }
    return true;
}

/** Sticky freeze until operator deletes file (no public unfreeze API). */
function nst_conservation_freeze_set(array $report, string $reason = 'conservation_mismatch'): bool {
    boot_data();
    $payload = [
        'frozen' => true,
        'ts' => time(),
        'reason' => $reason,
        'observed' => (string)($report['observed_sum'] ?? $report['observed'] ?? '0'),
        'expected' => (string)($report['expected_issued'] ?? $report['expected'] ?? '0'),
        'detail' => $report['detail'] ?? null,
        'version' => NST_VERSION,
    ];
    return @file_put_contents(nst_conservation_freeze_path(), j($payload), LOCK_EX) !== false;
}

/** Operator/test only — remove freeze file. Not auto-called on healthy check. */
function nst_conservation_freeze_clear(): bool {
    $p = nst_conservation_freeze_path();
    if (!is_file($p)) {
        return true;
    }
    return @unlink($p);
}

/**
 * Run conservation replay; FREEZE on mismatch or int-micros fail.
 * Sticky: never auto-clears freeze (silent heal forbidden).
 */
function nst_conservation_check_and_maybe_freeze(array $rows): array {
    $rep = nst_conservation_replay($rows);
    $rep['checked_ts'] = time();
    $rep['frozen'] = nst_conservation_is_frozen();
    $rep['freeze_written'] = false;
    if (empty($rep['ok'])) {
        $why = empty($rep['int_ok']) ? 'int_micros_violation' : 'conservation_mismatch';
        $rep['freeze_written'] = nst_conservation_freeze_set($rep, $why);
        $rep['frozen'] = true;
    }
    // Best-effort meta stamp (freeze file is authority).
    $m = load_meta();
    $m['last_conservation_ts'] = (int)$rep['checked_ts'];
    $m['last_conservation_ok'] = !empty($rep['ok']);
    $m['last_conservation_observed'] = (string)$rep['observed_sum'];
    $m['last_conservation_expected'] = (string)$rep['expected_issued'];
    save_meta($m);
    return $rep;
}

/** Early reject for write APIs. 503 + err conservation_freeze. */
function nst_require_writes_unfrozen(): void {
    if (!nst_conservation_is_frozen()) {
        return;
    }
    $fr = nst_conservation_freeze_read() ?? [];
    api_out([
        'ok' => false,
        'err' => 'conservation_freeze',
        'frozen' => true,
        'reason' => (string)($fr['reason'] ?? 'conservation_mismatch'),
        'observed_fmt' => isset($fr['observed']) && nst_int_micros_ok((string)$fr['observed'])
            ? fmt_amt((string)$fr['observed']) : null,
        'expected_fmt' => isset($fr['expected']) && nst_int_micros_ok((string)$fr['expected'])
            ? fmt_amt((string)$fr['expected']) : null,
        'freeze_ts' => (int)($fr['ts'] ?? 0),
        'note' => 'WRITES FROZEN — ledger conservation check failed on this host. Transfers, claims, and book posts are paused until the chain balances match again. Read-only view still works. Experimental rails — not insured, not a bank.',
    ], 503);
}

/**
 * Throttled boot check. Always honors freeze file.
 * @return array public-safe conservation snapshot
 */
function nst_conservation_boot_check(array $rows, bool $force = false): array {
    $frozen = nst_conservation_is_frozen();
    $meta = load_meta();
    $last = (int)($meta['last_conservation_ts'] ?? 0);
    $age = $last > 0 ? (time() - $last) : PHP_INT_MAX;
    $need = $force || $last < 1 || $age >= NST_CONSERVATION_RECHECK_SECS;

    if ($frozen && !$force) {
        $fr = nst_conservation_freeze_read() ?? [];
        return [
            'ok' => false,
            'frozen' => true,
            'sum_fmt' => isset($fr['observed']) && nst_int_micros_ok((string)$fr['observed'])
                ? fmt_amt((string)$fr['observed']) : null,
            'expected_fmt' => isset($fr['expected']) && nst_int_micros_ok((string)$fr['expected'])
                ? fmt_amt((string)$fr['expected']) : null,
            'checked_ts' => (int)($fr['ts'] ?? $last),
            'throttled' => true,
            'reason' => (string)($fr['reason'] ?? 'conservation_freeze'),
        ];
    }

    if (!$need && !$frozen) {
        $obs = (string)($meta['last_conservation_observed'] ?? '');
        $exp = (string)($meta['last_conservation_expected'] ?? '');
        $okMeta = !empty($meta['last_conservation_ok']);
        if ($obs !== '' && $exp !== '' && nst_int_micros_ok($obs) && nst_int_micros_ok($exp)) {
            return [
                'ok' => $okMeta,
                'frozen' => false,
                'sum_fmt' => fmt_amt($obs),
                'expected_fmt' => fmt_amt($exp),
                'checked_ts' => $last,
                'throttled' => true,
            ];
        }
    }

    $rep = nst_conservation_check_and_maybe_freeze($rows);
    return [
        'ok' => !empty($rep['ok']),
        'frozen' => !empty($rep['frozen']),
        'sum_fmt' => fmt_amt((string)$rep['observed_sum']),
        'expected_fmt' => fmt_amt((string)$rep['expected_issued']),
        'checked_ts' => (int)$rep['checked_ts'],
        'throttled' => false,
        'int_ok' => !empty($rep['int_ok']),
        'detail' => $rep['detail'] ?? null,
    ];
}

/** Public-facing conservation object for api=state / HTML. */
function nst_conservation_public_view(?array $bootSnap = null): array {
    if (is_array($bootSnap)) {
        return [
            'ok' => !empty($bootSnap['ok']),
            'frozen' => !empty($bootSnap['frozen']) || nst_conservation_is_frozen(),
            'sum_fmt' => $bootSnap['sum_fmt'] ?? null,
            'expected_fmt' => $bootSnap['expected_fmt'] ?? null,
            'checked_ts' => (int)($bootSnap['checked_ts'] ?? 0),
        ];
    }
    $frozen = nst_conservation_is_frozen();
    $fr = $frozen ? (nst_conservation_freeze_read() ?? []) : [];
    $meta = load_meta();
    $obs = (string)($fr['observed'] ?? $meta['last_conservation_observed'] ?? '');
    $exp = (string)($fr['expected'] ?? $meta['last_conservation_expected'] ?? '');
    return [
        'ok' => !$frozen && !empty($meta['last_conservation_ok']),
        'frozen' => $frozen,
        'sum_fmt' => ($obs !== '' && nst_int_micros_ok($obs)) ? fmt_amt($obs) : null,
        'expected_fmt' => ($exp !== '' && nst_int_micros_ok($exp)) ? fmt_amt($exp) : null,
        'checked_ts' => (int)($fr['ts'] ?? $meta['last_conservation_ts'] ?? 0),
    ];
}

/**
 * World population metadata only (not used for supply scale).
 * Liquid genesis / re-anchor = fixed 24_000_000 NSU KING faucet.
 * Fail-open sources:
 * 1) data/world_pop.override (operator integer — durable, not ephemeral)
 * 2) ephemeral world_pop.json cache if fresh (prefer /dev/shm; else data/ephemeral/)
 * 3) crawl allowlisted public stats (World Bank WLD SP.POP.TOTL)
 * 4) NST_POP_FALLBACK constant
 * Never blocks wipe/genesis if network dies — fixed 24_000_000 NSU still lands.
 * Cache is regenerable L3 only; losing it triggers recompute — never money SoT.
 *
 * @return array{pop:int,source:string,ts:int,cached:bool}
 */
function nst_world_pop_cache_path(): string {
    return nst_ephemeral_dir() . DIRECTORY_SEPARATOR . 'world_pop.json';
}
function nst_world_population(): array {
    global $DATA;
    boot_data();
    $override = $DATA . DIRECTORY_SEPARATOR . 'world_pop.override';
    if (is_file($override)) {
        $n = (int)trim((string)@file_get_contents($override));
        if ($n >= 1000000 && $n <= 50000000000) {
            return ['pop' => $n, 'source' => 'override', 'ts' => time(), 'cached' => false];
        }
    }
    $cache = nst_world_pop_cache_path();
    if (is_file($cache)) {
        $j = json_decode((string)@file_get_contents($cache), true);
        if (is_array($j) && !empty($j['pop']) && !empty($j['ts'])) {
            $age = time() - (int)$j['ts'];
            if ($age >= 0 && $age < NST_POP_CACHE_SECS && (int)$j['pop'] >= 1000000) {
                return [
                    'pop' => (int)$j['pop'],
                    'source' => (string)($j['source'] ?? 'cache'),
                    'ts' => (int)$j['ts'],
                    'cached' => true,
                ];
            }
        }
    }
    $crawled = nst_crawl_world_population();
    if ($crawled !== null) {
        $edir = dirname($cache);
        if (!is_dir($edir)) {
            @mkdir($edir, 0755, true);
        }
        @file_put_contents($cache, j($crawled), LOCK_EX);
        return $crawled + ['cached' => false];
    }
    return [
        'pop' => NST_POP_FALLBACK,
        'source' => 'fallback_constant',
        'ts' => time(),
        'cached' => false,
    ];
}
/** @return array{pop:int,source:string,ts:int}|null */
function nst_crawl_world_population(): ?array {
    if (!ini_get('allow_url_fopen') && !function_exists('curl_init')) {
        return null;
    }
    // World Bank: total population, world aggregate, most recent value
    $url = 'https://api.worldbank.org/v2/country/WLD/indicator/SP.POP.TOTL?format=json&per_page=5&mrv=5';
    $raw = nst_http_get_limited($url, 6);
    if ($raw === null || $raw === '') return null;
    $j = json_decode($raw, true);
    if (!is_array($j) || !isset($j[1]) || !is_array($j[1])) return null;
    foreach ($j[1] as $row) {
        if (!is_array($row)) continue;
        $v = $row['value'] ?? null;
        if ($v === null || $v === '') continue;
        $n = (int)$v;
        if ($n >= 1000000000 && $n <= 50000000000) {
            return [
                'pop' => $n,
                'source' => 'worldbank:SP.POP.TOTL',
                'ts' => time(),
            ];
        }
    }
    return null;
}
function nst_http_get_limited(string $url, int $timeoutSec): ?string {
    $host = parse_url($url, PHP_URL_HOST);
    if (!is_string($host) || !preg_match('/^(api\.worldbank\.org)$/i', $host)) {
        return null; // allowlist only - no open SSRF
    }
    if (function_exists('curl_init')) {
        $ch = curl_init($url);
        if ($ch === false) return null;
        curl_setopt_array($ch, [
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_CONNECTTIMEOUT => $timeoutSec,
            CURLOPT_TIMEOUT => $timeoutSec,
            CURLOPT_USERAGENT => 'nosignup.trade-pop/1.0',
            CURLOPT_SSL_VERIFYPEER => true,
        ]);
        $body = curl_exec($ch);
        $code = (int)curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);
        if ($body === false || $code >= 400) return null;
        return (string)$body;
    }
    $ctx = stream_context_create([
        'http' => [
            'timeout' => $timeoutSec,
            'header' => "User-Agent: nosignup.trade-pop/1.0\r\n",
        ],
        'ssl' => ['verify_peer' => true, 'verify_peer_name' => true],
    ]);
    $body = @file_get_contents($url, false, $ctx);
    return $body === false ? null : (string)$body;
}
/**
 * Optimum liquid treasury micros = fixed KING faucet start (24_000_000 NSU).
 * $pop retained for API compatibility / metadata; not used for supply scale.
 */
function nst_optimum_treasury_micros(int $pop = 0): string {
    $m = parse_amt((string)(int)NST_KING_FAUCET_START_NSU);
    if ($m !== null && dec_ok($m) && dec_cmp($m, '0') > 0) {
        return $m;
    }
    return NST_GENESIS_TREASURY;
}
/**
 * After wipe (or first genesis): set treasury liquid to 24_000_000 NSU target.
 * - If treasury below target → credit (epoch mint / top-up) - not a continuous faucet mint
 * - If treasury above target → burn excess from treasury only
 * User balances never touched. Soft max_supply soft-updates to max(legacy, target).
 *
 * @return array{pop:int,source:string,target:string,before:string,after:string,action:string}
 */
function nst_treasury_reanchor_to_population(string $reason): array {
    ensure_genesis_secret_only();
    $sec = trim((string)file_get_contents($GLOBALS['TFILE']));
    $taddr = addr_from_seed($sec);
    $popInfo = nst_world_population();
    $pop = (int)$popInfo['pop'];
    $target = nst_optimum_treasury_micros($pop);
    $bal = balances(read_chain());
    $before = (string)($bal[$taddr] ?? '0');
    $ts = time();
    $action = 'hold';
    $row = [
        'type' => 'treasury_reanchor',
        'ver' => 2,
        'ts' => $ts,
        'reason' => $reason,
        'population' => $pop,
        'population_source' => (string)$popInfo['source'],
        'faucet_start_nsu' => NST_KING_FAUCET_START_NSU,
        'target_micros' => $target,
        'target_fmt' => fmt_amt($target),
        'treasury_before_fmt' => fmt_amt($before),
        'treasury_addr' => $taddr,
        'outputs' => [],
        'burn_amount' => '0',
        'note' => 'treasury re-anchor: liquid KING faucet targets 24_000_000 NSU; user balances untouched',
    ];
    $cmp = dec_cmp($before, $target);
    if ($cmp < 0) {
        $delta = dec_sub($target, $before);
        $row['outputs'] = [['addr' => $taddr, 'amount' => $delta]];
        $row['action'] = 'credit';
        $row['delta_fmt'] = fmt_amt($delta);
        $action = 'credit';
    } elseif ($cmp > 0) {
        $delta = dec_sub($before, $target);
        $row['burn_amount'] = $delta;
        $row['action'] = 'burn';
        $row['delta_fmt'] = fmt_amt($delta);
        $action = 'burn';
    } else {
        $row['action'] = 'hold';
        $row['delta_fmt'] = '0';
    }
    $body = 'reanchor|' . $reason . '|' . $pop . '|' . $target . '|' . $before . '|' . $action . '|' . $ts;
    $row['sig'] = mac_sign($sec, $body);
    if ($action !== 'hold') {
        append_row($row);
    } else {
        // still log hold for audit (no balance change)
        append_row($row);
    }
    $afterBal = balances(read_chain());
    $after = (string)($afterBal[$taddr] ?? '0');
    $m = load_meta();
    $m['population'] = $pop;
    $m['population_source'] = (string)$popInfo['source'];
    $m['population_ts'] = (int)$popInfo['ts'];
    $m['treasury_target_micros'] = $target;
    $m['treasury_reanchor_ts'] = $ts;
    // soft cap display: KING faucet target (24_000_000 NSU fixed product scale)
    $m['soft_max_supply_micros'] = $target;
    save_meta($m);
    return [
        'pop' => $pop,
        'source' => (string)$popInfo['source'],
        'target' => $target,
        'before' => $before,
        'after' => $after,
        'action' => $action,
    ];
}
/**
 * Generate a 12-word site-local seed (same product surface as user wallets).
 * Used for: (KING) treasury/master faucet at genesis; (LORD) operator panel seed on rent.
 * KING seed never goes to renters. LORD seed never unlocks faucet/mint.
 */
function nst_generate_site_seed(): string {
    // 12-word site seed (not BIP39). Product surface matches user wallets.
    // Word pool is small + high entropy bytes — site-local only.
    static $wl = [
        'able','acid','aged','also','aqua','arch','area','army','atom','aunt','auto','avoid',
        'axis','baby','band','bank','bare','barn','base','bean','bear','belt','bike','bind',
        'bird','bite','blue','boat','body','bold','bolt','bone','book','boot','born','bowl',
        'brass','brave','bread','brick','brief','bring','broad','broke','brown','brush','build','bulk',
        'burn','burst','bush','busy','cable','cage','cake','calm','camp','cane','cape','card',
        'care','cart','case','cash','cast','cave','cell','cent','chat','chef','chin','chip',
        'city','clap','clay','clip','club','coal','coat','code','coil','coin','cold','come',
        'cook','cool','cope','copy','cord','core','corn','cost','cove','crab','crew','crop',
        'crow','cube','cult','curb','cure','curl','dark','dart','dash','data','dawn','deal',
        'dear','deck','deep','deer','desk','dial','dice','diet','dine','dirt','disc','dock',
        'dome','done','door','dose','down','draw','drip','drop','drum','dual','duck','dune',
        'dusk','dust','duty','each','earn','east','easy','echo','edge','edit','else','emit',
        'epic','even','ever','evil','exit','face','fact','fade','fail','fair','fall','fame',
        'farm','fast','fate','fear','feed','feel','fern','file','fill','film','find','fine',
        'fire','firm','fish','flag','flat','flee','flip','flow','foam','foil','fold','font',
        'food','fool','foot','ford','fork','form','fort','foul','four','free','frog','from',
        'fuel','full','fund','fuse','gain','game','gate','gear','gene','gift','girl','give',
        'glad','glow','glue','goal','goat','gold','golf','good','grab','grad','gram','gray',
        'grid','grim','grin','grip','grow','gulf','guru','hail','hair','half','hall','hand',
        'hang','hard','harm','harp','hate','have','hawk','haze','head','heal','heap','heat',
        'heed','heel','held','help','herb','here','hero','hide','high','hill','hint','hire',
        'hold','hole','home','hood','hook','hope','horn','host','hour','huge','hull','hung',
        'hunt','hurt','icon','idea','idle','inch','info','into','iron','item','jade','jail',
        'jazz','join','joke','jump','june','jury','just','keen','keep','kept','kick','kind',
        'king','kite','knee','knew','knit','knot','know','lace','lack','lady','lake','lamp',
        'land','lane','last','late','lava','lawn','lead','leaf','lean','left','lend','lens',
    ];
    $n = count($wl);
    $bytes = random_bytes(12);
    $out = [];
    for ($i = 0; $i < 12; $i++) {
        $out[] = $wl[ord($bytes[$i]) % $n];
    }
    return implode(' ', $out);
}
/**
 * Shared vault note writer — file body is caller-owned; never mixes KING/SITE/ADMIN secrets.
 * Each role builds its own $body; this only ensures dir + 0600 write.
 */
function nst_vault_write_note(string $filename, string $body): void {
    $d = vault_dir();
    if (!is_dir($d) && !@mkdir($d, 0700, true)) {
        return;
    }
    @chmod($d, 0700);
    $path = $d . DIRECTORY_SEPARATOR . $filename;
    @file_put_contents($path, $body, LOCK_EX);
    @chmod($path, 0600);
}
/**
 * Vault note for KING: data/treasury.secret only. Never to renters/lords.
 * E3: distinct from trade panel site.seed (11-wallet: KING is the 11th, only minter).
 */
function nst_vault_king_seed_note(string $seed): void {
    $body = "NOSIGNUP.TRADE KING / MASTER FAUCET SEED (OWNER ONLY — HIDDEN VAULT)\n"
        . "Role: empire KING vault wallet. ONLY minter for THIS trade HQ.\n"
        . "File: data/treasury.secret · Unlocks faucet/mint (require_faucet_auth).\n"
        . "Also unlocks /controlpanel as owner override. Lords NEVER receive this.\n"
        . "Genesis / re-anchor liquid = " . NST_KING_FAUCET_START_NSU . " NSU. NO RECOVERY.\n"
        . "11-wallet model: this is the 11th seed (hidden KING), not a site panel.\n"
        . "Generated: " . gmdate('c') . "\n\n"
        . trim($seed) . "\n";
    nst_vault_write_note('KING_FAUCET_SEED.txt', $body);
}
/** @deprecated name kept: writes KING vault note (not panel). */
function nst_vault_site_seed_note(string $seed): void {
    nst_vault_king_seed_note($seed);
}
/**
 * Vault note for trade SITE PANEL wallet (one of 10 crop panels). Not a mint.
 */
function nst_vault_panel_seed_note(string $seed): void {
    $body = "NOSIGNUP.TRADE SITE PANEL WALLET SEED (THIS CROP ONLY)\n"
        . "Role: /controlpanel unlock + site operator wallet for trade.\n"
        . "File: data/site.seed · Does NOT mint. Lords never mint; KING alone mints.\n"
        . "After public rent pay: economy.operator_addr may become the LORD payer key.\n"
        . "Generated: " . gmdate('c') . "\n\n"
        . trim($seed) . "\n";
    nst_vault_write_note('SITE_WALLET_SEED.txt', $body);
}
/**
 * Ensure trade panel site.seed exists (distinct from KING treasury.secret on fresh genesis).
 * Do not invent a second key on pre-E3 installs that already genesi'd without site.seed —
 * only call from the fresh-genesis path.
 */
function ensure_panel_site_seed_only(): string {
    global $SITE_SEED_FILE;
    boot_data();
    if (!is_file($SITE_SEED_FILE) || trim((string)@file_get_contents($SITE_SEED_FILE)) === '') {
        $seed = nst_generate_site_seed();
        file_put_contents($SITE_SEED_FILE, $seed, LOCK_EX);
        @chmod($SITE_SEED_FILE, 0600);
        nst_vault_panel_seed_note($seed);
        return $seed;
    }
    $seed = trim((string)@file_get_contents($SITE_SEED_FILE));
    if ($seed !== '') {
        nst_vault_panel_seed_note($seed);
    }
    return $seed;
}
/**
 * On fresh genesis: operator.addr = panel site.seed addr (≠ KING treasury).
 * File is public-ish addr only (not secret). Economy.operator_addr may diverge for rent later.
 * Legacy (no site.seed): falls back to treasury addr so pre-E3 installs keep working.
 */
function nst_ensure_operator_addr(?string $addr = null): string {
    global $OP_ADDR_FILE, $SITE_SEED_FILE, $TFILE;
    boot_data();
    if ($addr === null || $addr === '') {
        if (is_file($OP_ADDR_FILE)) {
            $have = strtolower(trim((string)@file_get_contents($OP_ADDR_FILE)));
            if (preg_match('/^[a-f0-9]{64}$/', $have)) {
                return $have;
            }
        }
        // Prefer panel site.seed (E3 distinct panel wallet); else KING treasury (legacy conflation).
        if (isset($SITE_SEED_FILE) && is_file($SITE_SEED_FILE)) {
            $psec = trim((string)@file_get_contents($SITE_SEED_FILE));
            if ($psec !== '') {
                $addr = addr_from_seed($psec);
            }
        }
        if (($addr === null || $addr === '') && is_file($TFILE)) {
            $sec = trim((string)@file_get_contents($TFILE));
            if ($sec !== '') {
                $addr = addr_from_seed($sec);
            }
        }
    }
    if ($addr === null || $addr === '' || !preg_match('/^[a-f0-9]{64}$/', $addr)) {
        return '';
    }
    $addr = strtolower($addr);
    if (!is_file($OP_ADDR_FILE) || trim((string)@file_get_contents($OP_ADDR_FILE)) === '') {
        file_put_contents($OP_ADDR_FILE, $addr . "\n", LOCK_EX);
        @chmod($OP_ADDR_FILE, 0644);
    }
    return $addr;
}
/**
 * Panel unlock addresses (E3):
 * - KING treasury seed (owner override; still not a lord mint path)
 * - trade panel site.seed (site admin door; no mint)
 * - economy.operator_addr (LORD after rent pay-bind)
 * Never ship treasury.secret to renters.
 *
 * @return list<string>
 */
function panel_unlock_addrs(): array {
    $out = [];
    global $TFILE, $SITE_SEED_FILE;
    if (is_file($TFILE)) {
        $sec = trim((string)@file_get_contents($TFILE));
        if ($sec !== '') {
            $out[] = addr_from_seed($sec);
        }
    }
    if (isset($SITE_SEED_FILE) && is_file($SITE_SEED_FILE)) {
        $psec = trim((string)@file_get_contents($SITE_SEED_FILE));
        if ($psec !== '') {
            $pa = addr_from_seed($psec);
            if (!in_array($pa, $out, true)) {
                $out[] = $pa;
            }
        }
    }
    $e = load_economy();
    $op = strtolower(trim((string)($e['operator_addr'] ?? '')));
    if (preg_match('/^[a-f0-9]{64}$/', $op) && !in_array($op, $out, true)) {
        // rent path: LORD payer key unlocks panel without treasury secret
        $out[] = $op;
    }
    return $out;
}
/** True if seed derives KING, site panel, or economy.operator_addr (LORD). */
function panel_seed_ok(string $seed): bool {
    $seed = norm_seed($seed);
    if ($seed === '') {
        return false;
    }
    $addr = addr_from_seed($seed);
    foreach (panel_unlock_addrs() as $a) {
        if (hash_equals($a, $addr)) {
            return true;
        }
    }
    return false;
}
/** True if seed derives the treasury master faucet (KING) only — not LORD operator. */
function treasury_seed_ok(string $seed): bool {
    $seed = norm_seed($seed);
    if ($seed === '') {
        return false;
    }
    global $TFILE;
    if (!is_file($TFILE)) {
        return false;
    }
    $sec = trim((string)@file_get_contents($TFILE));
    if ($sec === '') {
        return false;
    }
    return hash_equals(addr_from_seed($sec), addr_from_seed($seed));
}
/**
 * Faucet / mint authority (KING): treasury seed ONLY.
 * LORD operator seed never unlocks faucet, treasury reveal, free-form pay, rent claim,
 * or profit extract. Legacy admin.pass.hash may still unlock the *panel* via require_admin
 * (one-release migrate), but MUST NOT mint — a renter who can set/change the panel password
 * would otherwise escalate to faucet (isolation hole closed 2026-07-15).
 */
function require_faucet_auth(): void {
    $seed = (string)($_POST['seed'] ?? '');
    if ($seed !== '' && treasury_seed_ok($seed)) {
        return;
    }
    api_out(['ok' => false, 'err' => 'faucet auth'], 401);
}
/**
 * DEAD — former market-value LORD rent GRANT compute (treasury → LORD).
 * Kept only so old call sites / tests that reference the symbol do not fatals until full prune.
 * Product rent must NOT call this for live settlement (admin_rent_claim is 410).
 * @param string $treasuryMicros remaining treasury balance (micros)
 * @param string $lastProfitMicros prior epoch profit pile at wipe (micros), or '0'
 * @return array{ok:bool,micros?:string,credit_nsu?:string,parts?:array,err?:string}
 */
function nst_lord_rent_credit_compute(string $treasuryMicros, string $lastProfitMicros = '0'): array {
    $treasuryMicros = dec_norm($treasuryMicros);
    $lastProfitMicros = dec_norm($lastProfitMicros);
    if (!dec_ok($treasuryMicros) || !dec_ok($lastProfitMicros)) {
        return ['ok' => false, 'err' => 'bad amounts'];
    }
    // percent of remaining faucet
    $pctPart = '0';
    if (LORD_RENT_PCT_BPS > 0 && dec_cmp($treasuryMicros, '0') > 0) {
        $pctPart = dec_div_small(dec_mul_small($treasuryMicros, (int)LORD_RENT_PCT_BPS), 10000);
    }
    $flatBase = parse_amt((string)(int)LORD_RENT_FLAT_BASE_NSU);
    if ($flatBase === null) {
        return ['ok' => false, 'err' => 'flat base invalid'];
    }
    $perfPart = '0';
    if (LORD_RENT_FLAT_PERF_BPS > 0 && dec_cmp($lastProfitMicros, '0') > 0) {
        $perfPart = dec_div_small(dec_mul_small($lastProfitMicros, (int)LORD_RENT_FLAT_PERF_BPS), 10000);
        $cap = parse_amt((string)(int)LORD_RENT_FLAT_PERF_CAP_NSU);
        if ($cap !== null && dec_cmp($perfPart, $cap) > 0) {
            $perfPart = $cap;
        }
    }
    $total = dec_add(dec_add($pctPart, $flatBase), $perfPart);
    $minM = parse_amt((string)(int)LORD_RENT_MIN_NSU);
    $maxM = parse_amt((string)(int)LORD_RENT_MAX_NSU);
    if ($minM !== null && dec_cmp($total, $minM) < 0) {
        $total = $minM;
    }
    if ($maxM !== null && dec_cmp($total, $maxM) > 0) {
        $total = $maxM;
    }
    if (dec_cmp($total, '1') < 0) {
        return ['ok' => false, 'err' => 'credit too small'];
    }
    // whole NSU display (floor micros / 1e6)
    $creditNsu = dec_div_small($total, (int)str_pad('1', NST_DECIMALS + 1, '0'));
    return [
        'ok' => true,
        'micros' => $total,
        'credit_nsu' => $creditNsu,
        'parts' => [
            'pct_bps' => LORD_RENT_PCT_BPS,
            'pct_micros' => $pctPart,
            'pct_fmt' => fmt_amt($pctPart),
            'flat_base_nsu' => LORD_RENT_FLAT_BASE_NSU,
            'flat_base_fmt' => fmt_amt($flatBase),
            'flat_perf_bps' => LORD_RENT_FLAT_PERF_BPS,
            'flat_perf_micros' => $perfPart,
            'flat_perf_fmt' => fmt_amt($perfPart),
            'last_profit_fmt' => fmt_amt($lastProfitMicros),
            'treasury_fmt' => fmt_amt($treasuryMicros),
            'min_nsu' => LORD_RENT_MIN_NSU,
            'max_nsu' => LORD_RENT_MAX_NSU,
            'legacy_flat_placeholder' => LORD_RENT_CREDIT_LEGACY,
            'faucet_start_nsu_narrative' => NST_KING_FAUCET_START_NSU,
        ],
    ];
}
/** @deprecated prefer nst_lord_rent_credit_compute with live treasury */
function nst_lord_rent_credit_micros(): ?string {
    $c = nst_lord_rent_credit_compute('0', '0');
    return !empty($c['ok']) ? (string)$c['micros'] : null;
}
/** Ensure KING treasury.secret exists without double-genesis. New installs get 12-word KING seed. */
function ensure_genesis_secret_only(): void {
    global $TFILE;
    boot_data();
    if (!is_file($TFILE) || trim((string)@file_get_contents($TFILE)) === '') {
        $seed = nst_generate_site_seed();
        file_put_contents($TFILE, $seed, LOCK_EX);
        @chmod($TFILE, 0600);
        nst_vault_site_seed_note($seed);
    }
}
function fill_amounts(array $rows): array {
    $filled = [];
    foreach ($rows as $r) {
        if (($r['type'] ?? '') === 'fill' && !empty($r['order_id'])) {
            $filled[$r['order_id']] = dec_add($filled[$r['order_id']] ?? '0', $r['amount'] ?? '0');
        }
    }
    return $filled;
}
function open_orders(array $rows): array {
    $live = [];
    $cancelled = [];
    $filled = fill_amounts($rows);
    foreach ($rows as $r) {
        $t = $r['type'] ?? '';
        if ($t === 'order') $live[$r['id']] = $r;
        if ($t === 'cancel' && !empty($r['order_id'])) $cancelled[$r['order_id']] = true;
    }
    $now = time();
    $out = [];
    foreach ($live as $id => $o) {
        if (!empty($cancelled[$id])) continue;
        if (($o['expiry'] ?? 0) < $now) continue;
        $rem = dec_sub($o['amount'] ?? '0', $filled[$id] ?? '0');
        if (dec_cmp($rem, '1') < 0) continue;
        $o['remaining'] = $rem;
        $o['remaining_fmt'] = fmt_amt($rem);
        $out[] = $o;
    }
    usort($out, function ($a, $b) {
        $c = dec_cmp($a['price'] ?? '0', $b['price'] ?? '0');
        if (($a['side'] ?? '') === 'buy') $c = -$c; // buys high first
        if ($c !== 0) return $c;
        return ($a['ts'] ?? 0) <=> ($b['ts'] ?? 0);
    });
    return $out;
}
/** NSU locked in open sell orders (pair starts with NSU) */
function reserved_nsu(array $rows, string $addr): string {
    $sum = '0';
    foreach (open_orders($rows) as $o) {
        if (($o['addr'] ?? '') !== $addr) continue;
        if (($o['side'] ?? '') !== 'sell') continue;
        $pair = strtoupper($o['pair'] ?? '');
        if (!str_starts_with($pair, 'NSU')) continue;
        $sum = dec_add($sum, $o['remaining'] ?? '0');
    }
    return $sum;
}
function available_nsu(array $bal, array $rows, string $addr): string {
    $have = $bal[$addr] ?? '0';
    $res = reserved_nsu($rows, $addr);
    $av = dec_sub($have, $res);
    return dec_cmp($av, '0') < 0 ? '0' : $av;
}
function rep_scores(array $rows): array {
    // latest edge per (rater,rated)
    $edges = [];
    foreach ($rows as $r) {
        if (($r['type'] ?? '') !== 'reputation') continue;
        $k = ($r['rater'] ?? '') . '>' . ($r['rated'] ?? '');
        $prev = $edges[$k] ?? null;
        if (!$prev || ($r['ts'] ?? 0) >= ($prev['ts'] ?? 0)) $edges[$k] = $r;
    }
    $score = [];
    foreach ($edges as $e) {
        $rated = $e['rated'] ?? '';
        $s = (int)($e['score'] ?? 0);
        if ($rated === '' || $s < -10 || $s > 10) continue;
        $score[$rated] = ($score[$rated] ?? 0) + $s;
    }
    return $score;
}

/* ---- meta / epochs / modifiers / admin (data/*.txt inaccessible via .htaccess) ---- */
function load_meta(): array {
    global $META;
    if (!is_file($META)) return [];
    $j = json_decode((string)file_get_contents($META), true);
    return is_array($j) ? $j : [];
}
function save_meta(array $m): void {
    global $META;
    file_put_contents($META, j($m), LOCK_EX);
}
/** Site-local economy: profit pile + ad bid stake (not empire-wide). */
function load_economy(): array {
    global $ECON;
    $def = [
        'profit_micros' => '0',
        'ad_bid_micros' => '0',
        'donate_k' => NST_DONATE_K,
        'value_note' => '',
        'bids' => [],
        'donations' => [],
    ];
    if (!is_file($ECON)) return $def;
    $j = json_decode((string)file_get_contents($ECON), true);
    if (!is_array($j)) return $def;
    return array_merge($def, $j);
}
function save_economy(array $e): void {
    global $ECON;
    file_put_contents($ECON, j($e), LOCK_EX);
}
function ads_dir(): string {
    global $ADS;
    if (!is_dir($ADS)) @mkdir($ADS, 0755, true);
    $ht = $ADS . DIRECTORY_SEPARATOR . '.htaccess';
    // creatives served only via ?api=ad_img - deny direct if under web (belt)
    if (!is_file($ht)) @file_put_contents($ht, "Require all denied\nDeny from all\n");
    return $ADS;
}
/**
 * Yearly reset wipe (product intent = Chinese New Year epoch boundary).
 * ONLY user NSU wallet balances survive (chain history).
 * Superstructure is burned so a leaked/brute-forced panel password can only
 * steal for the remainder of the epoch - not forever.
 *
 * CNY / epoch inferences (operator 2026-07-15):
 * - Rent is an epoch lease: LORD operator seed + rented flag die at wipe.
 * - KING faucet re-anchors; next rent grant uses remaining faucet + last-year profit.
 * - User balances survive (no seizure); open orders / ads / profit piles do not.
 * - Password product path (if any residual) is re-keyed; seed-panel is product door.
 *
 * Wiped: profit pile, ad stakes/bids, ad creatives, donate credit log, rent lease.
 * Not wiped: transfer ledger (balances). Real-chain vault seeds stay offline
 * (operator must move external funds; site does not auto-sweep chains).
 * Admin panel password: AUTOMATICALLY rotated on wipe so leaked passwords die
 * at year boundary; new cleartext lands in vault/ only.
 */
function economy_on_epoch_roll(int $fromN, int $toN): void {
    $prev = load_economy();
    $oldProfit = (string)($prev['profit_micros'] ?? '0');
    $oldAd = (string)($prev['ad_bid_micros'] ?? '0');
    $oldBids = is_array($prev['bids'] ?? null) ? count($prev['bids']) : 0;
    $oldLordCredit = (string)($prev['lord_credit_micros'] ?? '0');

    // burn site-local superstructure; end renter lease; stash last-year performance
    $e = [
        'profit_micros' => '0',
        'ad_bid_micros' => '0',
        'donate_k' => (string)($prev['donate_k'] ?? NST_DONATE_K),
        'bids' => [],
        'donations' => [],
        'epoch_n' => $toN,
        'rolled_from' => $fromN,
        'roll_ts' => time(),
        'wipe' => 'balances_only_survive',
        'wipe_calendar' => 'chinese_new_year_epoch',
        // CNY: renter lease ends — new year needs new purchase + new LORD seed
        'rented' => false,
        'operator_addr' => '',
        'rented_at' => 0,
        'lord_credit_micros' => '0',
        // performance inputs for next rent grant formula
        'last_epoch_profit_micros' => $oldProfit,
        'last_epoch_ad_bid_micros' => $oldAd,
        'last_epoch_lord_credit_micros' => $oldLordCredit,
        'last_epoch_n' => $fromN,
    ];
    save_economy($e);
    // clear public operator.addr file so panel falls back to KING treasury until re-rent
    global $OP_ADDR_FILE;
    if (isset($OP_ADDR_FILE) && is_file($OP_ADDR_FILE)) {
        @file_put_contents($OP_ADDR_FILE, '', LOCK_EX);
    }

    // delete ad PNGs under data/ads/
    $dir = ads_dir();
    foreach (glob($dir . DIRECTORY_SEPARATOR . '*.png') ?: [] as $f) {
        @unlink($f);
    }

    // cancel open orders so book does not survive as superstructure
    $ts = time();
    $nCancel = 0;
    foreach (open_orders(read_chain()) as $o) {
        $oid = (string)($o['id'] ?? '');
        $addr = (string)($o['addr'] ?? '');
        if ($oid === '' || $addr === '') continue;
        append_row([
            'type' => 'cancel', 'ver' => 1, 'order_id' => $oid, 'addr' => $addr,
            'ts' => $ts, 'sig' => 'year_wipe', 'auth' => 'epoch_roll',
            'note' => 'yearly wipe - open orders do not survive',
        ]);
        $nCancel++;
    }

    // permanent early modifiers do not survive - only balances
    global $MODS_FILE;
    if (is_file($MODS_FILE)) {
        @file_put_contents($MODS_FILE, '{}', LOCK_EX);
    }

    // Wallet Inbox v0: sealed notices burn with superstructure (balances survive).
    nst_inbox_burn_all();

    // kill leaked panel passwords: mint new admin key into vault
    $newPass = bin2hex(random_bytes(12));
    $rotated = false;
    try {
        // set hash + vault without api_out (inline)
        global $ADMIN_HASH_FILE, $ADMIN_PASS_FILE;
        $hash = password_hash($newPass, PASSWORD_DEFAULT);
        if ($hash !== false) {
            file_put_contents($ADMIN_HASH_FILE, $hash . "\n", LOCK_EX);
            @chmod($ADMIN_HASH_FILE, 0600);
            if (is_file($ADMIN_PASS_FILE)) @unlink($ADMIN_PASS_FILE);
            vault_write_operator($newPass);
            $rotated = true;
            @file_put_contents(
                vault_dir() . DIRECTORY_SEPARATOR . 'YEAR_WIPE.txt',
                "Year wipe epoch $fromN -> $toN at " . gmdate('c') . "\n"
                . "New admin password in ADMIN_PASSWORD.txt\n"
                . "Old panel passwords are dead.\n"
                . "ONLY user NSU balances survived on the ledger.\n",
                LOCK_EX
            );
        }
    } catch (Throwable $ex) {
        $rotated = false;
    }

    // Liquid restart: treasury → fixed 24_000_000 NSU KING faucet target. Users keep coins.
    $anchor = ['action' => 'skipped', 'pop' => 0, 'source' => '', 'target' => '0', 'before' => '0', 'after' => '0'];
    try {
        $anchor = nst_treasury_reanchor_to_population('year_wipe_epoch_' . $fromN . '_to_' . $toN);
    } catch (Throwable $ex) {
        $anchor['action'] = 'error';
    }

    // Book was wiped empty — re-seed loose discovery spread (no live orders to protect).
    $boot = ['ok' => false];
    try {
        $boot = nst_bootstrap_spread_if_empty();
    } catch (Throwable $ex) {
        $boot = ['ok' => false, 'err' => 'bootstrap_exception'];
    }

    append_row([
        'type' => 'economy_year_wipe', 'ver' => 2, 'ts' => $ts,
        'from_epoch' => $fromN, 'to_epoch' => $toN,
        'wiped_profit_fmt' => fmt_amt($oldProfit),
        'wiped_ad_bid_fmt' => fmt_amt($oldAd),
        'wiped_bids' => $oldBids,
        'orders_cancelled' => $nCancel,
        'admin_rotated' => $rotated,
        'population' => $anchor['pop'] ?? 0,
        'population_source' => $anchor['source'] ?? '',
        'treasury_target_fmt' => isset($anchor['target']) ? fmt_amt((string)$anchor['target']) : null,
        'treasury_reanchor' => $anchor['action'] ?? null,
        'treasury_after_fmt' => isset($anchor['after']) ? fmt_amt((string)$anchor['after']) : null,
        'bootstrap_spread' => !empty($boot['ok']) && empty($boot['skipped']),
        'bootstrap_note' => $boot['reason'] ?? ($boot['amount_fmt'] ?? null),
        'siphon_note' => 'profit/ad superstructure burns into re-anchor path; renters never mint; user balances only survive',
        'note' => 'yearly reset: ONLY wallet balances survive; superstructure wiped (rent siphon/burn into re-anchor); admin re-keyed; treasury re-anchored; bootstrap spread if book empty',
    ]);

    @file_put_contents(
        vault_dir() . DIRECTORY_SEPARATOR . 'YEAR_WIPE.txt',
        "Year wipe epoch $fromN -> $toN at " . gmdate('c') . "\n"
        . "New admin password in ADMIN_PASSWORD.txt\n"
        . "Old panel passwords are dead.\n"
        . "ONLY user NSU balances survived on the ledger.\n"
        . "Rent siphon: profit/ad piles wiped; liquidity restarts via treasury re-anchor (renters never mint).\n"
        . "CNY epoch: LORD rent lease ended; operator_addr cleared; next renter gets new seed + new grant.\n"
        . "Last-year profit stashed for next LORD rent flat-performance term: " . fmt_amt($oldProfit) . " NSU.\n"
        . "Treasury re-anchor: action=" . ($anchor['action'] ?? '?')
        . " pop=" . ($anchor['pop'] ?? '?')
        . " source=" . ($anchor['source'] ?? '?')
        . " target_fmt=" . (isset($anchor['target']) ? fmt_amt((string)$anchor['target']) : '?')
        . " after_fmt=" . (isset($anchor['after']) ? fmt_amt((string)$anchor['after']) : '?') . "\n"
        . "KING faucet re-anchor target = " . NST_KING_FAUCET_START_NSU . " NSU (fixed product scale).\n"
        . "Rent grant = % remaining faucet + flat(base+last year perf).\n",
        FILE_APPEND
    );
}
/**
 * House / empire discovery ads (text). Compartment-local board only.
 * Recruits sister nosignup.* faces + rare aligned no-signup free tools.
 * Not a shared ad exchange - each site's pick is independent.
 */
function house_ad_roster(): array {
    return [
        ['id' => 'house_chat', 'href' => 'https://nosignup.chat/', 'label' => 'nosignup.chat - free peer chat, no account', 'weight' => 3],
        ['id' => 'house_work', 'href' => 'https://nosignup.work/', 'label' => 'nosignup.work - jobs & resumes, no signup', 'weight' => 2],
        ['id' => 'house_market', 'href' => 'https://nosignup.market/', 'label' => 'nosignup.market - classifieds, no signup', 'weight' => 2],
        ['id' => 'house_date', 'href' => 'https://nosignup.date/', 'label' => 'nosignup.date - personals map, no signup', 'weight' => 2],
        ['id' => 'house_fun', 'href' => 'https://nosignup.fun/', 'label' => 'nosignup.fun - media organism, no signup', 'weight' => 2],
        ['id' => 'house_info', 'href' => 'https://nosignup.info/', 'label' => 'nosignup.info - free modules, no signup', 'weight' => 2],
        ['id' => 'house_com', 'href' => 'https://nosignup.com/', 'label' => 'nosignup.com - free forever pinwheel map', 'weight' => 2],
        ['id' => 'house_org', 'href' => 'https://nosignup.org/', 'label' => 'nosignup.org - free forever MIRROR pinwheel', 'weight' => 2],
        ['id' => 'house_net', 'href' => 'https://nosignup.net/', 'label' => 'nosignup.net - Morse train, free practice', 'weight' => 2],
        ['id' => 'house_trade', 'href' => 'https://nosignup.trade/', 'label' => 'nosignup.trade - disposable NSU wallet, no signup', 'weight' => 3],
        // recruit free/no-signup creatives (email house; not a second economy)
        ['id' => 'house_recruit', 'href' => 'mailto:buysellfreetrade@proton.me?subject=free%2Fno-signup%20PNG%20house%20ad', 'label' => 'Free/no-signup PNG house ad → buysellfreetrade@proton.me', 'weight' => 2],
        // aligned free no-signup directory (external; spirit match, not a dependency)
        ['id' => 'house_fns', 'href' => 'https://freenosignup.com/', 'label' => 'freenosignup.com - free tools, no account (aligned)', 'weight' => 1],
    ];
}
function house_ad_pick(): array {
    $pool = house_ad_roster();
    $total = 0;
    foreach ($pool as $h) {
        $total += max(1, (int)($h['weight'] ?? 1));
    }
    $r = random_int(1, max(1, $total));
    $acc = 0;
    $pick = $pool[0];
    foreach ($pool as $h) {
        $acc += max(1, (int)($h['weight'] ?? 1));
        if ($r <= $acc) {
            $pick = $h;
            break;
        }
    }
    return [
        'id' => (string)$pick['id'],
        'active' => true,
        'house' => true,
        'stake_micros' => '0',
        'stake_fmt' => 'house',
        'href' => (string)$pick['href'],
        'label' => (string)$pick['label'],
        'creative_url' => '',
        'creative_file' => '',
    ];
}
/** Weighted random active bid that has a creative (site-local board). */
function ad_pick_weighted(): ?array {
    $e = load_economy();
    $pool = [];
    $totalW = 0;
    foreach ($e['bids'] ?? [] as $b) {
        if (empty($b['active'])) continue;
        $has = !empty($b['creative_url']) || !empty($b['creative_file']);
        if (!$has) continue;
        $stake = (string)($b['stake_micros'] ?? '0');
        // weight ≈ stake / 0.01 NSU (10000 micros) at least 1
        $w = 1;
        if (function_exists('bcdiv')) {
            $w = max(1, (int)bcdiv($stake, '10000', 0));
        } else {
            $w = max(1, (int)floor(((float)$stake) / 10000));
        }
        if ($w > 1000000) $w = 1000000;
        $pool[] = [$b, $w];
        $totalW += $w;
    }
    // Allotted luck: empty board → house discovery; else rare house roll (empire gossip)
    if ($totalW < 1 || !$pool) {
        return house_ad_pick();
    }
    if (random_int(1, 100) <= NST_HOUSE_AD_CHANCE) {
        return house_ad_pick();
    }
    $r = random_int(1, $totalW);
    $acc = 0;
    foreach ($pool as [$b, $w]) {
        $acc += $w;
        if ($r <= $acc) return $b;
    }
    return $pool[count($pool) - 1][0];
}
/** Integer half of a micros string (floor). */
function dec_half(string $a): string {
    $a = dec_norm($a);
    if (function_exists('bcdiv')) return dec_norm(bcdiv($a, '2', 0));
    $half = '';
    $carry = 0;
    for ($i = 0; $i < strlen($a); $i++) {
        $n = $carry * 10 + (int)$a[$i];
        $half .= (string)intdiv($n, 2);
        $carry = $n % 2;
    }
    return dec_norm($half);
}
/** Floor-divide decimal string by small positive int (e.g. treasury/1000 = 0.1%). */
function dec_div_small(string $a, int $d): string {
    $a = dec_norm($a);
    if ($d <= 1) return $a;
    if (function_exists('bcdiv')) return dec_norm(bcdiv($a, (string)$d, 0));
    $n = '';
    $rem = 0;
    for ($i = 0; $i < strlen($a); $i++) {
        $cur = $rem * 10 + (int)$a[$i];
        $n .= (string)intdiv($cur, $d);
        $rem = $cur % $d;
    }
    return dec_norm($n);
}
/**
 * Bootstrap loose-spread order book when there are ZERO open orders.
 * Temp discovery only: anchor 1.0 NOTE/NSU → BUY @ 0.5, SELL @ 1.5 (micros).
 * Amount ≈ 0.1% of treasury each side so market makers can tighten.
 * kind=bootstrap_spread. Does NOT cancel live orders — only posts if book empty.
 * Discovery quotes only: fill API rejects kind=bootstrap_spread (not free NSU).
 *
 * MASTER FAUCET: treasury holds genesis supply (24_000_000 NSU KING start).
 * That wallet IS the empire faucet wallet for THIS site. Renters must NOT get
 * treasury.secret / site wallet seed (panel unlock material for owner only).
 *
 * @return array{ok:bool,skipped?:bool,reason?:string,err?:string,n?:int,posted?:int,amount_fmt?:string}
 */
function nst_bootstrap_spread_if_empty(): array {
    global $TFILE;
    boot_data();
    $chain = read_chain();
    $hasG = false;
    foreach ($chain as $r) {
        if (($r['type'] ?? '') === 'genesis') {
            $hasG = true;
            break;
        }
    }
    if (!$hasG) {
        return ['ok' => false, 'skipped' => true, 'reason' => 'no_genesis'];
    }
    $open = open_orders($chain);
    if (count($open) > 0) {
        return ['ok' => true, 'skipped' => true, 'reason' => 'open_orders', 'n' => count($open)];
    }
    if (!is_file($TFILE)) {
        return ['ok' => false, 'err' => 'no_treasury_secret'];
    }
    $sec = trim((string)@file_get_contents($TFILE));
    if ($sec === '') {
        return ['ok' => false, 'err' => 'empty_treasury_secret'];
    }
    $addr = addr_from_seed($sec);
    $bal = balances($chain);
    $have = (string)($bal[$addr] ?? '0');
    $amt = dec_div_small($have, NST_BOOTSTRAP_DENOM);
    if (dec_cmp($amt, '1') < 0) {
        return ['ok' => false, 'err' => 'treasury_too_small', 'have_fmt' => fmt_amt($have)];
    }
    // sell side locks NSU; with empty book all liquid is available
    if (dec_cmp($have, $amt) < 0) {
        return ['ok' => false, 'err' => 'insufficient', 'have_fmt' => fmt_amt($have)];
    }
    $buyPx = NST_BOOTSTRAP_BUY_PX;
    $sellPx = NST_BOOTSTRAP_SELL_PX;
    $anchor = NST_BOOTSTRAP_ANCHOR_PX;
    $ts = time();
    $expiry = $ts + 30 * 86400;
    $pair = 'NSU/NOTE';
    $posted = 0;
    foreach ([['buy', $buyPx], ['sell', $sellPx]] as [$side, $px]) {
        $id = hash('sha256', $addr . '|bootstrap|' . $side . '|' . $ts . '|' . $amt . '|' . $px . '|' . bin2hex(random_bytes(4)));
        $body = implode('|', ['order', '1', $id, $addr, $side, $pair, $amt, $px, (string)$expiry, (string)$ts]);
        $row = [
            'type' => 'order', 'ver' => 1, 'id' => $id, 'addr' => $addr,
            'side' => $side, 'pair' => $pair,
            'amount' => $amt, 'amount_fmt' => fmt_amt($amt),
            'price' => $px, 'price_fmt' => fmt_amt($px),
            'expiry' => $expiry, 'ts' => $ts,
            'sig' => mac_sign($sec, $body),
            'kind' => 'bootstrap_spread',
            'anchor_px' => $anchor,
            'note' => 'loose discovery spread around temp anchor 1.0 NOTE/NSU; makers should tighten',
        ];
        if (!append_row($row)) {
            return ['ok' => false, 'err' => 'disk', 'posted' => $posted];
        }
        $posted++;
    }
    append_row([
        'type' => 'bootstrap_spread', 'ver' => 1, 'ts' => $ts,
        'buy_px' => $buyPx, 'sell_px' => $sellPx, 'anchor_px' => $anchor,
        'amount' => $amt, 'amount_fmt' => fmt_amt($amt),
        'treasury_addr' => $addr,
        'note' => 'seeded empty book: BUY@0.5 SELL@1.5 around 1.0; ~0.1% treasury each side; P still book-converge',
    ]);
    return [
        'ok' => true,
        'posted' => $posted,
        'amount_fmt' => fmt_amt($amt),
        'buy_px_fmt' => fmt_amt($buyPx),
        'sell_px_fmt' => fmt_amt($sellPx),
        'anchor_px_fmt' => fmt_amt($anchor),
    ];
}
/**
 * Converged market price P (NOTE micros per 1 NSU). Never a fixed sticker.
 * both sides → mid; else best bid; else best ask; else null (wait for market).
 */
function book_mid_micros(array $chain): ?string {
    $orders = open_orders($chain);
    $bids = array_values(array_filter($orders, fn($o) => ($o['side'] ?? '') === 'buy'));
    $asks = array_values(array_filter($orders, fn($o) => ($o['side'] ?? '') === 'sell'));
    usort($bids, fn($a, $b) => dec_cmp((string)($b['price'] ?? '0'), (string)($a['price'] ?? '0')));
    usort($asks, fn($a, $b) => dec_cmp((string)($a['price'] ?? '0'), (string)($b['price'] ?? '0')));
    if ($bids && $asks) {
        $sum = dec_add($bids[0]['price'] ?? '0', $asks[0]['price'] ?? '0');
        return dec_half($sum);
    }
    if ($bids) return dec_norm((string)($bids[0]['price'] ?? '0'));
    if ($asks) return dec_norm((string)($asks[0]['price'] ?? '0'));
    return null;
}
/** Buyback floor price = P/2 from market convergence. */
function nst_buyback_price_micros(array $chain): ?string {
    $p = book_mid_micros($chain);
    if ($p === null || dec_cmp($p, '2') < 0) return null;
    $half = dec_half($p);
    return dec_cmp($half, '1') < 0 ? '1' : $half;
}
/**
 * Arm treasury BUY order at converged P/2 for nsuAmount micros.
 * Stable floor: market sets P; we only bid half. No fixed list price.
 * Fail-open if no mid yet (returns err, does not block gift).
 */
function nst_arm_buyback_bids(string $nsuAmountMicros, string $reason): array {
    $nsuAmountMicros = dec_norm($nsuAmountMicros);
    if (dec_cmp($nsuAmountMicros, '1') < 0) return ['ok' => false, 'err' => 'amount'];
    $chain = read_chain();
    $px = nst_buyback_price_micros($chain);
    if ($px === null) return ['ok' => false, 'err' => 'no_market_converge', 'note' => 'wait for book; P is never fixed'];
    $sec = treasury_secret();
    $addr = addr_from_seed($sec);
    $ts = time();
    $expiry = $ts + 30 * 86400;
    $pair = 'NSU/NOTE';
    $id = hash('sha256', $addr . '|buyback|' . $ts . '|' . $nsuAmountMicros . '|' . $px . '|' . bin2hex(random_bytes(4)));
    $body = implode('|', ['order', '1', $id, $addr, 'buy', $pair, $nsuAmountMicros, $px, (string)$expiry, (string)$ts]);
    $row = [
        'type' => 'order', 'ver' => 1, 'id' => $id, 'addr' => $addr,
        'side' => 'buy', 'pair' => $pair,
        'amount' => $nsuAmountMicros, 'amount_fmt' => fmt_amt($nsuAmountMicros),
        'price' => $px, 'price_fmt' => fmt_amt($px),
        'expiry' => $expiry, 'ts' => $ts,
        'sig' => mac_sign($sec, $body),
        'kind' => 'buyback_floor',
        'reason' => substr($reason, 0, 80),
        'note' => 'stable floor: BUY at market_P/2 (P from book convergence)',
    ];
    if (!append_row($row)) return ['ok' => false, 'err' => 'disk'];
    return [
        'ok' => true,
        'order' => $row,
        'converge_p_fmt' => fmt_amt(book_mid_micros(read_chain()) ?? '0'),
        'buyback_px_fmt' => fmt_amt($px),
    ];
}
/**
 * OPERATOR_GO §3c: treasury BUY at half the sell price, same pair/amount.
 * Idempotent id = sha256(sellId|treasury_half_bid). Signed with treasury seed.
 * Quote-side NOTE settles off-chain (settle_ref belief) — same rail as any book BID.
 * Does not mint; open BID alone does not move balances (conservation held).
 *
 * @return array{ok:bool,order?:array,skipped?:bool,reason?:string,err?:string}
 */
function nst_treasury_half_bid_from_sell(string $sellId, string $pair, string $amount, string $sellPrice, int $expiry, int $ts, array $chain, callable $append, string $tsec, string $taddr): array {
    $sellId = preg_replace('/[^a-f0-9]/', '', strtolower($sellId)) ?? '';
    if (strlen($sellId) !== 64) return ['ok' => false, 'err' => 'bad sell id'];
    $amount = dec_norm($amount);
    $sellPrice = dec_norm($sellPrice);
    if (dec_cmp($amount, '1') < 0 || dec_cmp($sellPrice, '1') < 0) return ['ok' => false, 'err' => 'amount/price'];
    $halfPx = dec_half($sellPrice);
    if (dec_cmp($halfPx, '1') < 0) $halfPx = '1';
    $pair = strtoupper(trim($pair));
    if ($pair === '') $pair = 'NSU/NOTE';
    $bidId = hash('sha256', $sellId . '|treasury_half_bid');
    foreach ($chain as $r) {
        if (($r['type'] ?? '') === 'order' && ($r['id'] ?? '') === $bidId) {
            return ['ok' => true, 'skipped' => true, 'reason' => 'already', 'order' => $r];
        }
    }
    // Seed/addr MUST be pre-read outside nst_with_chain_lock — never call treasury_secret()/ensure_genesis under LOCK_EX (deadlock).
    $sec = $tsec;
    $addr = strtolower($taddr);
    if ($sec === '' || strlen($addr) !== 64) return ['ok' => false, 'err' => 'no treasury material'];
    $body = implode('|', ['order', '1', $bidId, $addr, 'buy', $pair, $amount, $halfPx, (string)$expiry, (string)$ts]);
    $row = [
        'type' => 'order', 'ver' => 1, 'id' => $bidId, 'addr' => $addr,
        'side' => 'buy', 'pair' => $pair,
        'amount' => $amount, 'amount_fmt' => fmt_amt($amount),
        'price' => $halfPx, 'price_fmt' => fmt_amt($halfPx),
        'expiry' => $expiry, 'ts' => $ts,
        'sig' => mac_sign($sec, $body),
        'kind' => 'treasury_half_bid',
        'paired_sell_id' => $sellId,
        'note' => 'OPERATOR_GO §3c: half-price treasury BID floor paired to treasury SELL',
    ];
    if (!$append($row)) return ['ok' => false, 'err' => 'disk'];
    return ['ok' => true, 'order' => $row];
}
/**
 * OPERATOR_GO §4 E2a: KING places a small REAL fillable SELL-ask ladder.
 * Not bootstrap_spread (those stay discovery-only / non-fillable).
 * Each SELL is an ordinary book order signed by treasury → C2 half-BID arms.
 * Deterministic ids (sha256 taddr|treasury_ladder_v1|price) → re-call is idempotent.
 * Seed/addr MUST be pre-read outside nst_with_chain_lock (same deadlock law as C2).
 *
 * @return array{ok:bool,posted?:int,skipped?:int,orders?:array,half_bids?:array,err?:string,amount_fmt?:string}
 */
function nst_treasury_ask_ladder(string $tsec, string $taddr, ?string $amountMicros = null): array {
    $tsec = (string)$tsec;
    $taddr = strtolower(trim($taddr));
    if ($tsec === '' || strlen($taddr) !== 64) {
        return ['ok' => false, 'err' => 'no treasury material'];
    }
    $amt = $amountMicros !== null && $amountMicros !== ''
        ? dec_norm($amountMicros)
        : parse_amt(NST_LADDER_AMT_NSU);
    if ($amt === null || dec_cmp($amt, '1') < 0) {
        return ['ok' => false, 'err' => 'amount'];
    }
    $amtMax = parse_amt(NST_LADDER_AMT_MAX_NSU);
    if ($amtMax !== null && dec_cmp($amt, $amtMax) > 0) {
        return ['ok' => false, 'err' => 'amount exceeds ladder cap', 'max_fmt' => fmt_amt($amtMax)];
    }
    $prices = [NST_LADDER_PX_LO, NST_LADDER_PX_MID, NST_LADDER_PX_HI];
    $pair = 'NSU/NOTE';
    $ts = time();
    $expiry = $ts + 30 * 86400;
    $out = nst_with_chain_lock(function (array $chain, callable $append) use (
        $tsec, $taddr, $amt, $prices, $pair, $ts, $expiry
    ) {
        $bal = balances($chain);
        $have = (string)($bal[$taddr] ?? '0');
        $av = available_nsu($bal, $chain, $taddr);
        $need = '0';
        foreach ($prices as $px) {
            $need = dec_add($need, $amt);
        }
        if (dec_cmp($av, $need) < 0) {
            return [
                'ok' => false,
                'err' => 'insufficient available NSU',
                'available_fmt' => fmt_amt($av),
                'need_fmt' => fmt_amt($need),
                'treasury_fmt' => fmt_amt($have),
            ];
        }
        $nOpen = 0;
        foreach (open_orders($chain) as $o) {
            if (($o['addr'] ?? '') === $taddr) {
                $nOpen++;
            }
        }
        // Each new sell + half-BID needs 2 slots; leave headroom under 20.
        $slotsNeeded = count($prices) * 2;
        if ($nOpen + $slotsNeeded > 20) {
            return ['ok' => false, 'err' => 'too many open orders', 'open' => $nOpen];
        }
        $posted = 0;
        $skipped = 0;
        $orders = [];
        $halfBids = [];
        foreach ($prices as $px) {
            $px = dec_norm($px);
            if (dec_cmp($px, '1') < 0) {
                continue;
            }
            $id = hash('sha256', $taddr . '|treasury_ladder_v1|' . $px);
            $exists = false;
            foreach ($chain as $r) {
                if (($r['type'] ?? '') === 'order' && ($r['id'] ?? '') === $id) {
                    $exists = true;
                    break;
                }
            }
            if ($exists) {
                $skipped++;
                continue;
            }
            $body = implode('|', ['order', '1', $id, $taddr, 'sell', $pair, $amt, $px, (string)$expiry, (string)$ts]);
            $row = [
                'type' => 'order', 'ver' => 1, 'id' => $id, 'addr' => $taddr,
                'side' => 'sell', 'pair' => $pair,
                'amount' => $amt, 'amount_fmt' => fmt_amt($amt),
                'price' => $px, 'price_fmt' => fmt_amt($px),
                'expiry' => $expiry, 'ts' => $ts,
                'sig' => mac_sign($tsec, $body),
                'kind' => 'treasury_ladder',
                'note' => 'OPERATOR_GO §4: KING real fillable SELL ladder (buy path); not bootstrap discovery',
            ];
            if (!$append($row)) {
                return ['ok' => false, 'err' => 'disk', 'posted' => $posted, 'orders' => $orders];
            }
            $hb = nst_treasury_half_bid_from_sell(
                $id,
                $pair,
                $amt,
                $px,
                $expiry,
                $ts,
                $chain,
                $append,
                $tsec,
                $taddr
            );
            if (empty($hb['ok'])) {
                return [
                    'ok' => false,
                    'err' => 'treasury half-bid failed after ladder sell',
                    'detail' => $hb['err'] ?? 'unknown',
                    'posted' => $posted,
                    'order' => $row,
                ];
            }
            $posted++;
            $orders[] = $row;
            if (!empty($hb['order'])) {
                $halfBids[] = $hb['order'];
            }
            // Keep open-count honest for later rungs in same lock.
            $nOpen += 2;
        }
        return [
            'ok' => true,
            'posted' => $posted,
            'skipped' => $skipped,
            'orders' => $orders,
            'half_bids' => $halfBids,
            'amount_fmt' => fmt_amt($amt),
            'prices_fmt' => array_map('fmt_amt', $prices),
            'note' => 'Real fillable treasury asks on book; visitors TAKE ORDER / ?api=fill. NOTE settles off-chain (settle_ref).',
        ];
    });
    if ($out === null) {
        return ['ok' => false, 'err' => 'disk'];
    }
    return $out;
}
/**
 * Donate → NSU gift (mid×k or direct), then 50% profit pile / 50% ad-bid stake.
 * Faucet free gas does NOT use this path.
 */
function economy_credit_donate(string $toAddr, string $nsuMicros, string $txid, string $asset, string $extAmt): array {
    $nsuMicros = dec_norm($nsuMicros);
    if (dec_cmp($nsuMicros, '1') < 0) return ['ok' => false, 'err' => 'gift too small'];
    $sec = treasury_secret();
    $from = addr_from_seed($sec);
    // half ad stake / half profit pile; then arm BUYBACK at market P/2 for the ad half
    // (stable floor: P converges from book — never a fixed sticker price)
    $half = dec_half($nsuMicros);
    $bidPart = $half;
    $profitPart = dec_sub($nsuMicros, $bidPart);

    $ts = time();
    $nonce = bin2hex(random_bytes(8));
    $memo = 'donate:gift:' . substr($txid !== '' ? $txid : 'honor', 0, 40);
    $tbody = implode('|', ['transfer', '1', $from, $toAddr, $nsuMicros, $nonce, (string)$ts, $memo]);
    $row = [
        'type' => 'transfer', 'ver' => 1, 'from' => $from, 'to' => $toAddr,
        'amount' => $nsuMicros, 'amount_fmt' => fmt_amt($nsuMicros),
        'nonce' => $nonce, 'ts' => $ts, 'memo' => $memo,
        'sig' => mac_sign($sec, $tbody), 'kind' => 'donate_gift',
        'txid' => substr($txid, 0, 128), 'asset' => substr($asset, 0, 16),
    ];
    $splitRow = [
        'type' => 'economy_split', 'ver' => 1, 'ts' => $ts,
        'gift_fmt' => fmt_amt($nsuMicros), 'profit_fmt' => fmt_amt($profitPart),
        'ad_bid_fmt' => fmt_amt($bidPart), 'txid' => substr($txid, 0, 128),
        'note' => '50% profit pile / 50% site ad bid (donate path); buyback arms at market P/2',
    ];
    $creditOut = nst_with_chain_lock(function (array $chain, callable $append) use (
        $from, $toAddr, $nsuMicros, $nonce, $row, $splitRow, $bidPart, $profitPart, $ts, $txid, $asset, $extAmt
    ) {
        $bal = balances($chain);
        $have = $bal[$from] ?? '0';
        if (dec_cmp($have, $nsuMicros) < 0) {
            return ['ok' => false, 'err' => 'treasury insufficient', 'have_fmt' => fmt_amt($have)];
        }
        foreach ($chain as $r) {
            if (($r['type'] ?? '') === 'transfer' && ($r['from'] ?? '') === $from && ($r['nonce'] ?? '') === $nonce) {
                return ['ok' => false, 'err' => 'nonce replay'];
            }
        }
        if (!$append($row)) return ['ok' => false, 'err' => 'disk'];

        $e = load_economy();
        $e['profit_micros'] = dec_add((string)($e['profit_micros'] ?? '0'), $profitPart);
        $e['ad_bid_micros'] = dec_add((string)($e['ad_bid_micros'] ?? '0'), $bidPart);
        $bid = [
            'id' => hash('sha256', $toAddr . '|' . $ts . '|' . $bidPart . '|' . $nonce),
            'stake_micros' => $bidPart,
            'stake_fmt' => fmt_amt($bidPart),
            'ts' => $ts,
            'from_donate' => true,
            'txid' => substr($txid, 0, 128),
            'active' => true,
        ];
        if (!isset($e['bids']) || !is_array($e['bids'])) $e['bids'] = [];
        $e['bids'][] = $bid;
        if (count($e['bids']) > 200) $e['bids'] = array_slice($e['bids'], -200);
        if (!isset($e['donations']) || !is_array($e['donations'])) $e['donations'] = [];
        $e['donations'][] = [
            'ts' => $ts, 'to' => $toAddr, 'gift_micros' => $nsuMicros, 'gift_fmt' => fmt_amt($nsuMicros),
            'profit' => $profitPart, 'ad_bid' => $bidPart, 'txid' => substr($txid, 0, 128),
            'asset' => substr($asset, 0, 16), 'ext' => substr($extAmt, 0, 40),
        ];
        if (count($e['donations']) > 200) $e['donations'] = array_slice($e['donations'], -200);
        save_economy($e);
        if (!$append($splitRow)) {
            return ['ok' => false, 'err' => 'disk'];
        }
        return [
            'ok' => true,
            'tx' => $row,
            'gift_fmt' => fmt_amt($nsuMicros),
            'profit_fmt' => fmt_amt($profitPart),
            'ad_bid_fmt' => fmt_amt($bidPart),
            'economy' => [
                'profit_fmt' => fmt_amt((string)$e['profit_micros']),
                'ad_bid_fmt' => fmt_amt((string)$e['ad_bid_micros']),
            ],
        ];
    });
    if ($creditOut === null) return ['ok' => false, 'err' => 'disk'];
    if (empty($creditOut['ok'])) return $creditOut;

    // Lock floor: treasury BUY at converged P/2 for the ad-half quantity (fail-open if no book yet)
    $bb = nst_arm_buyback_bids($bidPart, 'donate_buyback');
    if (!empty($bb['ok'])) {
        append_row([
            'type' => 'buyback_arm', 'ver' => 1, 'ts' => time(),
            'amount_fmt' => fmt_amt($bidPart),
            'buyback_px_fmt' => $bb['buyback_px_fmt'] ?? null,
            'order_id' => $bb['order']['id'] ?? null,
            'note' => 'market-converged P/2 floor bid (not fixed list price)',
        ]);
    }

    return [
        'ok' => true,
        'tx' => $creditOut['tx'] ?? $row,
        'gift_fmt' => $creditOut['gift_fmt'] ?? fmt_amt($nsuMicros),
        'profit_fmt' => $creditOut['profit_fmt'] ?? fmt_amt($profitPart),
        'ad_bid_fmt' => $creditOut['ad_bid_fmt'] ?? fmt_amt($bidPart),
        'buyback' => $bb,
        'price_policy' => 'market_converge_P_then_bid_P_over_2',
        'economy' => $creditOut['economy'] ?? null,
    ];
}
/** Convert external amount + book mid → NSU micros. mid = quote per 1 NSU (in micros of quote). */
function donate_nsu_from_external(string $extHuman, ?string $midMicros, string $k): ?string {
    $ext = parse_amt($extHuman);
    if ($ext === null || dec_cmp($ext, '1') < 0) return null;
    // If mid present: nsu = ext / mid * k  (all integer micros)
    // ext and mid same decimal basis (6). nsu_micros = ext * 1e6 / mid * k ≈ ext/mid when k=1
    // Actually both are already micros: nsu = floor(ext * k / mid) when mid is price in quote-micros per NSU unit?
    // price_fmt "2" means 2 NOTE per NSU → price micros = 2000000. amount 1 NSU = 1000000 micros.
    // gift NSU micros = ext_micros * 1e6 / mid_micros ... use: nsu = ext / mid * 10^0 in unit space.
    // unit: nsu_units = ext_units / mid_units * k → micros: nsu_m = ext_m * k / mid_m * 10^6 / 10^6 = ext*k/mid
    if ($midMicros !== null && dec_cmp($midMicros, '1') > 0) {
        if (function_exists('bcmul') && function_exists('bcdiv')) {
            $num = bcmul($ext, $k, 0);
            return dec_norm(bcdiv($num, $midMicros, 0));
        }
        // fallback float for small values only
        $n = (float)$ext * (float)$k / (float)$midMicros;
        if ($n < 1) return null;
        return dec_norm((string)(int)floor($n));
    }
    // no mid: nsu = ext * k
    if (function_exists('bcmul')) return dec_norm(bcmul($ext, $k, 0));
    return dec_mul_small($ext, max(1, (int)$k));
}
function ensure_meta_epochs(): array {
    $m = load_meta();
    $now = time();
    if (empty($m['epoch_start'])) {
        $m['epoch_start'] = $now;
        $m['epoch_n'] = 1;
    }
    // advance yearly reset windows until current; roll economy stakes forward
    while (($m['epoch_start'] + NST_RESET_SECS) <= $now) {
        $fromN = (int)($m['epoch_n'] ?? 1);
        $m['epoch_start'] = (int)$m['epoch_start'] + NST_RESET_SECS;
        $m['epoch_n'] = $fromN + 1;
        economy_on_epoch_roll($fromN, (int)$m['epoch_n']);
    }
    if (empty($m['created'])) $m['created'] = $now;
    $m['version'] = NST_VERSION;
    save_meta($m);
    return $m;
}
function epoch_info(): array {
    $m = ensure_meta_epochs();
    $start = (int)$m['epoch_start'];
    $end = $start + NST_RESET_SECS;
    $winEnd = $start + NST_EARLY_WINDOW_SECS;
    $now = time();
    return [
        'epoch_n' => (int)($m['epoch_n'] ?? 1),
        'epoch_start' => $start,
        'epoch_end' => $end,
        'early_window_end' => $winEnd,
        'in_early_window' => $now >= $start && $now < $winEnd,
        'secs_to_window_end' => max(0, $winEnd - $now),
        'secs_to_reset' => max(0, $end - $now),
    ];
}
/** Rentable crop ids (empire ten). Quotes only — settle/bind is a later residual. */
function nst_rent_site_ids(): array {
    return ['com', 'org', 'net', 'trade', 'chat', 'work', 'market', 'date', 'fun', 'info'];
}
/** Path to durable rent quote map (data/rent_quotes.json). */
function nst_rent_quotes_path(): string {
    global $RENT_QUOTES_FILE;
    return $RENT_QUOTES_FILE;
}
/**
 * Exclusive RMW on rent_quotes.json via flock.
 * Callback: fn(array $state): array — return new full state to write (or same).
 * State shape: ['quotes' => [quote_id => row, ...], 'updated' => ts]
 * @return mixed callback result, or null on lock/open failure
 */
function nst_with_rent_quotes_lock(callable $fn) {
    boot_data();
    $path = nst_rent_quotes_path();
    return nst_with_file_lock($path, function ($fh) use ($fn) {
        rewind($fh);
        $raw = stream_get_contents($fh);
        $state = ['quotes' => [], 'updated' => 0];
        if (is_string($raw) && trim($raw) !== '') {
            $j = json_decode($raw, true);
            if (is_array($j)) {
                $state = array_merge($state, $j);
                if (!isset($state['quotes']) || !is_array($state['quotes'])) {
                    $state['quotes'] = [];
                }
            }
        }
        $ret = $fn($state);
        // If callback returned a state-shaped array with quotes, persist it.
        if (is_array($ret) && isset($ret['quotes']) && is_array($ret['quotes'])) {
            $ret['updated'] = time();
            $toWrite = $ret;
            unset($toWrite['_last']); // never persist helper side-channel
            $blob = j($toWrite);
            ftruncate($fh, 0);
            rewind($fh);
            if (fwrite($fh, $blob) === false) {
                return null;
            }
            fflush($fh);
        }
        return $ret;
    });
}
/** Drop expired open quotes; keep paid ~7d for first-paid-wins / audit; thrift cap. */
function nst_rent_quotes_prune(array $state, int $now): array {
    $quotes = $state['quotes'] ?? [];
    if (!is_array($quotes)) {
        $quotes = [];
    }
    $kept = [];
    $paidKeepSecs = 7 * 86400;
    foreach ($quotes as $id => $row) {
        if (!is_array($row)) {
            continue;
        }
        $st = (string)($row['status'] ?? 'open');
        $qid = (string)($row['quote_id'] ?? $id);
        if ($qid === '') {
            continue;
        }
        if ($st === 'paid') {
            $paidTs = (int)($row['paid_ts'] ?? 0);
            if ($paidTs > 0 && ($now - $paidTs) > $paidKeepSecs) {
                continue;
            }
            $kept[$qid] = $row;
            continue;
        }
        if ($st !== 'open') {
            continue;
        }
        $exp = (int)($row['expires'] ?? 0);
        if ($exp > 0 && $exp < $now) {
            continue;
        }
        $kept[$qid] = $row;
    }
    // Cap: prefer paid + newest open; hard ceiling 250 rows
    if (count($kept) > 250) {
        uasort($kept, static function ($a, $b) {
            $sa = (string)($a['status'] ?? '');
            $sb = (string)($b['status'] ?? '');
            if ($sa === 'paid' && $sb !== 'paid') {
                return -1;
            }
            if ($sb === 'paid' && $sa !== 'paid') {
                return 1;
            }
            return ((int)($b['created'] ?? 0)) <=> ((int)($a['created'] ?? 0));
        });
        $kept = array_slice($kept, 0, 250, true);
    }
    $state['quotes'] = $kept;
    return $state;
}
/**
 * Persist one open quote. Returns stored row or null.
 * @param array $row must include quote_id, site, pay_to, amount, memo, expires, …
 */
function nst_rent_quote_store(array $row): ?array {
    $qid = (string)($row['quote_id'] ?? '');
    if ($qid === '' || !preg_match('/^[a-f0-9]{16,64}$/', $qid)) {
        return null;
    }
    $now = time();
    $out = nst_with_rent_quotes_lock(function (array $state) use ($row, $qid, $now) {
        $state = nst_rent_quotes_prune($state, $now);
        $row['status'] = 'open';
        $row['created'] = (int)($row['created'] ?? $now);
        $state['quotes'][$qid] = $row;
        // Return full state so lock helper writes; also stash row for return via side channel
        $state['_last'] = $row;
        return $state;
    });
    if (!is_array($out) || empty($out['_last']) || !is_array($out['_last'])) {
        return null;
    }
    return $out['_last'];
}
/** Lookup quote by id (open non-expired, or paid). For settle residual / verify. */
function nst_rent_quote_get(string $quoteId): ?array {
    $quoteId = strtolower(preg_replace('/[^a-f0-9]/', '', $quoteId) ?? '');
    if ($quoteId === '') {
        return null;
    }
    $now = time();
    $found = null;
    nst_with_rent_quotes_lock(function (array $state) use ($quoteId, $now, &$found) {
        $state = nst_rent_quotes_prune($state, $now);
        $row = $state['quotes'][$quoteId] ?? null;
        if (is_array($row)) {
            $st = (string)($row['status'] ?? '');
            if ($st === 'paid') {
                $found = $row;
            } elseif ($st === 'open') {
                $exp = (int)($row['expires'] ?? 0);
                if ($exp <= 0 || $exp >= $now) {
                    $found = $row;
                }
            }
        }
        return $state; // write pruned state
    });
    return $found;
}
/** Parse memo rent:{site}:{quote_id}. */
function nst_rent_parse_memo(string $memo): ?array {
    $memo = trim($memo);
    if (!preg_match('/^rent:([a-z]+):([a-f0-9]{16,64})$/i', $memo, $m)) {
        return null;
    }
    return ['site' => strtolower($m[1]), 'quote_id' => strtolower($m[2])];
}
/** Settle failure reasons that should auto-refund the payer (P3d). */
function nst_rent_refundable_reason(string $reason): bool {
    return in_array($reason, [
        'already_paid',
        'amount_mismatch',
        'quote_missing',
        'quote_expired',
        'quote_not_open',
        'site_mismatch',
        'pay_to_mismatch',
        'already_leased',
        'bad_site',
    ], true);
}
/**
 * P3d: refund a failed rent pay from treasury → original payer (conserved).
 * Idempotent per inbound transfer nonce (memo rent:refund:{qid}:{nonce}).
 * @param array $failedTx original inbound transfer to treasury
 * @param array $settle result of nst_rent_try_settle_transfer
 * @return array{ok:bool,refunded?:bool,reason?:string,tx?:array,err?:string}
 */
function nst_rent_auto_refund(array $failedTx, array $settle): array {
    if (!empty($settle['settled'])) {
        return ['ok' => true, 'refunded' => false, 'reason' => 'settled_no_refund'];
    }
    $why = (string)($settle['reason'] ?? '');
    if (!nst_rent_refundable_reason($why)) {
        return ['ok' => true, 'refunded' => false, 'reason' => 'not_refundable:' . $why];
    }
    if (function_exists('nst_conservation_is_frozen') && nst_conservation_is_frozen()) {
        return ['ok' => false, 'refunded' => false, 'err' => 'writes frozen'];
    }
    $payer = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($failedTx['from'] ?? '')) ?? '');
    $amount = dec_norm((string)($failedTx['amount'] ?? '0'));
    $inNonce = substr((string)($failedTx['nonce'] ?? ''), 0, 64);
    $parsed = nst_rent_parse_memo((string)($failedTx['memo'] ?? ''));
    $qid = $parsed['quote_id'] ?? 'unknown';
    if (strlen($payer) !== 64 || !dec_ok($amount) || dec_cmp($amount, '1') < 0 || $inNonce === '') {
        return ['ok' => false, 'refunded' => false, 'err' => 'bad_failed_tx'];
    }
    $sec = treasury_secret();
    $from = strtolower(addr_from_seed($sec));
    $taddr = strtolower(treasury_addr());
    if ($from !== $taddr) {
        return ['ok' => false, 'refunded' => false, 'err' => 'treasury_mismatch'];
    }
    // Idempotent refund nonce derived from inbound nonce (stable).
    $refundNonce = substr(hash('sha256', 'rent-refund-v1|' . $inNonce), 0, 32);
    $refundMemo = 'rent:refund:' . $qid . ':' . $inNonce;
    $ts = time();
    $body = implode('|', ['transfer', '1', $from, $payer, $amount, $refundNonce, (string)$ts, $refundMemo]);
    $row = [
        'type' => 'transfer',
        'ver' => 1,
        'from' => $from,
        'to' => $payer,
        'amount' => $amount,
        'amount_fmt' => fmt_amt($amount),
        'nonce' => $refundNonce,
        'ts' => $ts,
        'memo' => $refundMemo,
        'sig' => mac_sign($sec, $body),
        'sig_mode' => 'server_mac',
        'kind' => 'rent_refund',
        'rent_refund_of_nonce' => $inNonce,
        'rent_refund_reason' => $why,
        'quote_id' => $qid,
    ];
    $out = nst_with_chain_lock(function (array $chain, callable $append) use ($from, $payer, $amount, $refundNonce, $inNonce, $row) {
        foreach ($chain as $r) {
            if (($r['type'] ?? '') !== 'transfer') {
                continue;
            }
            // already refunded this inbound pay
            if ((string)($r['rent_refund_of_nonce'] ?? '') === $inNonce) {
                return ['ok' => true, 'refunded' => false, 'reason' => 'already_refunded', 'tx' => $r];
            }
            if ((string)($r['nonce'] ?? '') === $refundNonce && strtolower((string)($r['from'] ?? '')) === $from) {
                return ['ok' => true, 'refunded' => false, 'reason' => 'already_refunded', 'tx' => $r];
            }
        }
        $bal = balances($chain);
        $have = $bal[$from] ?? '0';
        if (dec_cmp($have, $amount) < 0) {
            return [
                'ok' => false,
                'refunded' => false,
                'err' => 'treasury insufficient for refund',
                'have_fmt' => fmt_amt($have),
                'need_fmt' => fmt_amt($amount),
            ];
        }
        if (!$append($row)) {
            return ['ok' => false, 'refunded' => false, 'err' => 'disk'];
        }
        return [
            'ok' => true,
            'refunded' => true,
            'tx' => $row,
            'treasury_bal_fmt' => fmt_amt(dec_sub($have, $amount)),
            'payer_credit_fmt' => fmt_amt($amount),
        ];
    });
    if ($out === null) {
        return ['ok' => false, 'refunded' => false, 'err' => 'disk'];
    }
    $out['reason'] = $why;
    $out['law'] = 'auto-refund failed rent pay · conserved · idempotent per inbound nonce';
    return $out;
}
/**
 * P3c: try to settle a rent payment from an on-chain transfer row.
 * first-paid-wins · memo+amount+pay_to match · bind operator_addr = payer (no server seed).
 * P3d: caller may auto-refund when reason is refundable.
 * @param array $tx transfer row (from,to,amount,memo,nonce,ts,…)
 * @return array{settled:bool,reason?:string,site?:string,payer?:string,quote_id?:string,lease?:array}
 */
function nst_rent_try_settle_transfer(array $tx): array {
    $parsed = nst_rent_parse_memo((string)($tx['memo'] ?? ''));
    if ($parsed === null) {
        return ['settled' => false, 'reason' => 'not_rent_memo'];
    }
    $site = $parsed['site'];
    $qid = $parsed['quote_id'];
    if (!in_array($site, nst_rent_site_ids(), true)) {
        return ['settled' => false, 'reason' => 'bad_site'];
    }
    $to = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($tx['to'] ?? '')) ?? '');
    $from = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($tx['from'] ?? '')) ?? '');
    $amount = dec_norm((string)($tx['amount'] ?? '0'));
    if (strlen($to) !== 64 || strlen($from) !== 64 || !dec_ok($amount) || dec_cmp($amount, '1') < 0) {
        return ['settled' => false, 'reason' => 'bad_tx_fields'];
    }
    $taddr = strtolower(treasury_addr());
    if ($to !== $taddr) {
        return ['settled' => false, 'reason' => 'not_to_treasury'];
    }
    $result = ['settled' => false, 'reason' => 'lock_failed'];
    $lockRet = nst_with_rent_quotes_lock(function (array $state) use ($site, $qid, $from, $to, $amount, $taddr, $tx, &$result) {
        $now = time();
        $state = nst_rent_quotes_prune($state, $now);
        $row = $state['quotes'][$qid] ?? null;
        if (!is_array($row)) {
            $result = ['settled' => false, 'reason' => 'quote_missing'];
            return $state;
        }
        $st = (string)($row['status'] ?? 'open');
        if ($st === 'paid') {
            $result = [
                'settled' => false,
                'reason' => 'already_paid',
                'winner' => (string)($row['payer'] ?? ''),
                'quote_id' => $qid,
            ];
            return $state;
        }
        if ($st !== 'open') {
            $result = ['settled' => false, 'reason' => 'quote_not_open', 'status' => $st];
            return $state;
        }
        $exp = (int)($row['expires'] ?? 0);
        if ($exp > 0 && $exp < $now) {
            $result = ['settled' => false, 'reason' => 'quote_expired'];
            return $state;
        }
        if (strtolower((string)($row['site'] ?? '')) !== $site) {
            $result = ['settled' => false, 'reason' => 'site_mismatch'];
            return $state;
        }
        if (strtolower((string)($row['pay_to'] ?? '')) !== $taddr) {
            $result = ['settled' => false, 'reason' => 'pay_to_mismatch'];
            return $state;
        }
        if (dec_cmp(dec_norm((string)($row['amount'] ?? '0')), $amount) !== 0) {
            $result = ['settled' => false, 'reason' => 'amount_mismatch', 'expected' => (string)($row['amount'] ?? '0'), 'got' => $amount];
            return $state;
        }
        // trade crop: refuse if already leased to someone else
        $e = load_economy();
        if ($site === 'trade') {
            $opHave = strtolower(trim((string)($e['operator_addr'] ?? '')));
            $rented = !empty($e['rented']) && $opHave !== '' && $opHave !== $taddr;
            if ($rented) {
                $result = ['settled' => false, 'reason' => 'already_leased', 'operator_addr' => $opHave];
                return $state;
            }
        }
        $row['status'] = 'paid';
        $row['payer'] = $from;
        $row['paid_ts'] = $now;
        $row['paid_tx'] = [
            'from' => $from,
            'to' => $to,
            'amount' => $amount,
            'nonce' => (string)($tx['nonce'] ?? ''),
            'ts' => (int)($tx['ts'] ?? $now),
            'memo' => (string)($tx['memo'] ?? ''),
        ];
        $state['quotes'][$qid] = $row;
        $lease = [
            'operator_addr' => $from,
            'rented_at' => $now,
            'quote_id' => $qid,
            'site' => $site,
            'epoch_n' => (int)($row['epoch_n'] ?? 0),
            'amount' => $amount,
            'amount_fmt' => fmt_amt($amount),
        ];
        if ($site === 'trade') {
            $e['rented'] = true;
            $e['operator_addr'] = $from;
            $e['rented_at'] = $now;
            $e['rent_quote_id'] = $qid;
            $e['rent_payer'] = $from;
        }
        if (!isset($e['leases']) || !is_array($e['leases'])) {
            $e['leases'] = [];
        }
        $e['leases'][$site] = $lease;
        save_economy($e);
        if ($site === 'trade') {
            global $OP_ADDR_FILE;
            boot_data();
            file_put_contents($OP_ADDR_FILE, $from . "\n", LOCK_EX);
            @chmod($OP_ADDR_FILE, 0644);
        }
        $result = [
            'settled' => true,
            'site' => $site,
            'payer' => $from,
            'quote_id' => $qid,
            'lease' => $lease,
            'law' => 'first-paid-wins · operator_addr = payer key · no server LORD seed',
        ];
        return $state;
    });
    if ($lockRet === null) {
        return ['settled' => false, 'reason' => 'lock_failed'];
    }
    return $result;
}
/**
 * Scan chain for a transfer that pays a given open quote (or any open quote if id empty).
 * Idempotent: already-paid quotes report already_paid.
 */
function nst_rent_settle_scan(?string $quoteId = null): array {
    $quoteId = $quoteId !== null ? strtolower(preg_replace('/[^a-f0-9]/', '', $quoteId) ?? '') : '';
    $chain = read_chain();
    $taddr = strtolower(treasury_addr());
    $attempts = [];
    $settled = null;
    foreach (array_reverse($chain) as $r) {
        if (($r['type'] ?? '') !== 'transfer') {
            continue;
        }
        if (strtolower((string)($r['to'] ?? '')) !== $taddr) {
            continue;
        }
        $parsed = nst_rent_parse_memo((string)($r['memo'] ?? ''));
        if ($parsed === null) {
            continue;
        }
        if ($quoteId !== '' && $parsed['quote_id'] !== $quoteId) {
            continue;
        }
        $out = nst_rent_try_settle_transfer($r);
        $refund = null;
        if (empty($out['settled']) && nst_rent_refundable_reason((string)($out['reason'] ?? ''))) {
            $refund = nst_rent_auto_refund($r, $out);
        }
        // Fail-open server_notice after money/rent residual commits (scan path).
        try {
            if (!empty($out['settled'])) {
                nst_inbox_notify_rent_settle($out);
            }
            if (is_array($refund) && !empty($refund['refunded'])) {
                nst_inbox_notify_rent_refund($refund);
            }
        } catch (Throwable $e) {
            // never abort settle/refund residual
        }
        $attempts[] = [
            'quote_id' => $parsed['quote_id'],
            'from' => (string)($r['from'] ?? ''),
            'result' => $out,
            'refund' => $refund,
        ];
        if (!empty($out['settled'])) {
            $settled = $out;
            break;
        }
        if (count($attempts) >= 40) {
            break;
        }
    }
    return [
        'ok' => true,
        'settled' => $settled !== null,
        'lease' => $settled['lease'] ?? null,
        'settle' => $settled,
        'attempts' => $attempts,
        'law' => 'scan · settle first-paid-wins · auto-refund failed rent pays (P3d)',
    ];
}
/**
 * Public rent quote (P3a+P3b). No chain write, no seed, no operator bind.
 * amount = NST_RENT_NSU_PER_DAY * days_left (days_left = ceil(secs_to_reset/86400), min 1).
 * P3b: persists open quote under flock for later settle match.
 * @return array JSON-ready
 */
function nst_rent_quote_public(string $site, string $treasuryAddr): array {
    $site = strtolower(trim($site));
    if ($site === '' || $site === 'this' || $site === 'me') {
        $site = 'trade';
    }
    $allowed = nst_rent_site_ids();
    if (!in_array($site, $allowed, true)) {
        return [
            'ok' => false,
            'http' => 400,
            'err' => 'bad site',
            'sites' => $allowed,
        ];
    }
    $ep = epoch_info();
    $secs = (int)($ep['secs_to_reset'] ?? 0);
    $daysLeft = (int)max(1, (int)ceil($secs / 86400));
    $amountNsu = (int)NST_RENT_NSU_PER_DAY * $daysLeft;
    $amountMicros = parse_amt((string)$amountNsu);
    if ($amountMicros === null || dec_cmp($amountMicros, '1') < 0) {
        return ['ok' => false, 'http' => 500, 'err' => 'rent amount invalid'];
    }
    // This crop's economy only tracks trade lease today; other sites quote as free until multi-lease store.
    $e = load_economy();
    $op = strtolower(trim((string)($e['operator_addr'] ?? '')));
    $t = strtolower($treasuryAddr);
    $rentedHere = !empty($e['rented']) && $op !== '' && $op !== $t;
    if ($site === 'trade' && $rentedHere) {
        return [
            'ok' => true,
            'quoted' => false,
            'site' => $site,
            'leased' => true,
            'leased_until' => (int)($ep['epoch_end'] ?? 0),
            'operator_addr' => $op,
            'rented_at' => (int)($e['rented_at'] ?? 0),
            'err' => 'already leased',
            'law' => 'Occupied crop: no new quote until epoch wipe (or future multi-lease free).',
        ];
    }
    $now = time();
    $ttl = (int)NST_RENT_QUOTE_TTL_SECS;
    if ($ttl < 60) {
        $ttl = 1800;
    }
    $quoteId = bin2hex(random_bytes(12));
    $memo = 'rent:' . $site . ':' . $quoteId;
    $expires = $now + $ttl;
    $storeRow = [
        'quote_id' => $quoteId,
        'site' => $site,
        'pay_to' => $treasuryAddr,
        'amount' => $amountMicros,
        'amount_nsu' => (string)$amountNsu,
        'nsu_per_day' => (int)NST_RENT_NSU_PER_DAY,
        'days_left' => $daysLeft,
        'memo' => $memo,
        'expires' => $expires,
        'created' => $now,
        'epoch_n' => (int)($ep['epoch_n'] ?? 0),
        'epoch_end' => (int)($ep['epoch_end'] ?? 0),
        'status' => 'open',
    ];
    $stored = nst_rent_quote_store($storeRow);
    if ($stored === null) {
        return [
            'ok' => false,
            'http' => 500,
            'err' => 'quote store failed',
            'durable' => false,
            'settle' => false,
        ];
    }
    return [
        'ok' => true,
        'quoted' => true,
        'site' => $site,
        'leased' => false,
        'quote_id' => $quoteId,
        'pay_to' => $treasuryAddr,
        'amount' => $amountMicros,
        'amount_fmt' => fmt_amt($amountMicros),
        'amount_nsu' => (string)$amountNsu,
        'nsu_per_day' => (int)NST_RENT_NSU_PER_DAY,
        'days_left' => $daysLeft,
        'memo' => $memo,
        'expires' => $expires,
        'expires_in_secs' => $ttl,
        'epoch_n' => (int)($ep['epoch_n'] ?? 0),
        'epoch_end' => (int)($ep['epoch_end'] ?? 0),
        'durable' => true,
        'settle' => false,
        'law' => 'Quote durable on this host (P3b data/rent_quotes.json). Pay-to-treasury settle + payer-key bind not shipped.',
    ];
}
function load_mods(): array {
    global $MODS_FILE;
    if (!is_file($MODS_FILE)) return [];
    $j = json_decode((string)file_get_contents($MODS_FILE), true);
    return is_array($j) ? $j : [];
}
function save_mods(array $mods): void {
    global $MODS_FILE;
    file_put_contents($MODS_FILE, j($mods), LOCK_EX);
}
function grant_early_modifier(string $addr): array {
    $ep = epoch_info();
    $mods = load_mods();
    if (!empty($mods[$addr]['permanent'])) {
        return ['granted' => false, 'reason' => 'already', 'mod' => $mods[$addr]];
    }
    if (!$ep['in_early_window']) {
        return ['granted' => false, 'reason' => 'outside_window', 'epoch' => $ep];
    }
    $now = time();
    $mods[$addr] = [
        'permanent' => true,
        'daily_micros' => NST_MOD_DAILY_MICROS,
        'granted_ts' => $now,
        'granted_epoch' => $ep['epoch_n'],
        'last_accrual_ts' => $now, // start accruing from grant moment
    ];
    save_mods($mods);
    // public record (no secrets)
    append_row([
        'type' => 'modifier_grant',
        'ver' => 1,
        'addr' => $addr,
        'daily_fmt' => '0.1',
        'ts' => $now,
        'epoch_n' => $ep['epoch_n'],
        'note' => 'permanent early-access modifier (30d window after yearly reset)',
    ]);
    return ['granted' => true, 'mod' => $mods[$addr], 'epoch' => $ep];
}
/** Lazy catch-up: pay floor(days elapsed)*0.1 from treasury if permanent modifier */
function lazy_accrue(string $addr): array {
    $modsPeek = load_mods();
    if (empty($modsPeek[$addr]['permanent'])) {
        return ['ok' => true, 'paid_fmt' => '0', 'reason' => 'no_modifier'];
    }
    $nowPeek = time();
    $lastPeek = (int)($modsPeek[$addr]['last_accrual_ts'] ?? $nowPeek);
    if ($lastPeek > $nowPeek) $lastPeek = $nowPeek;
    if (intdiv($nowPeek - $lastPeek, 86400) < 1) {
        return ['ok' => true, 'paid_fmt' => '0', 'reason' => 'too_soon', 'next_in' => 86400 - (($nowPeek - $lastPeek) % 86400)];
    }
    $sec = treasury_secret();
    $from = addr_from_seed($sec);
    // Chain RMW + re-load mods under lock so concurrent unlocks cannot double-pay days.
    $out = nst_with_chain_lock(function (array $chain, callable $append) use ($addr, $from, $sec) {
        $mods = load_mods();
        if (empty($mods[$addr]['permanent'])) {
            return ['ok' => true, 'paid_fmt' => '0', 'reason' => 'no_modifier'];
        }
        $now = time();
        $last = (int)($mods[$addr]['last_accrual_ts'] ?? $now);
        if ($last > $now) $last = $now;
        $days = intdiv($now - $last, 86400);
        if ($days < 1) {
            return ['ok' => true, 'paid_fmt' => '0', 'reason' => 'too_soon', 'next_in' => 86400 - (($now - $last) % 86400)];
        }
        $pay = dec_mul_small(NST_MOD_DAILY_MICROS, $days);
        $bal = balances($chain);
        $have = $bal[$from] ?? '0';
        if (dec_cmp($have, $pay) < 0) {
            // whole days treasury can afford only (lazy ketchup, no partial-day mint)
            $daysCan = 0;
            $payCan = '0';
            for ($d = 1; $d <= $days; $d++) {
                $try = dec_mul_small(NST_MOD_DAILY_MICROS, $d);
                if (dec_cmp($try, $have) > 0) break;
                $daysCan = $d;
                $payCan = $try;
            }
            if ($daysCan < 1) {
                return ['ok' => false, 'err' => 'treasury empty', 'paid_fmt' => '0'];
            }
            $days = $daysCan;
            $pay = $payCan;
        }
        $ts = $now;
        $nonce = bin2hex(random_bytes(8));
        $memo = 'modifier:daily:' . $days . 'd';
        $tbody = implode('|', ['transfer', '1', $from, $addr, $pay, $nonce, (string)$ts, $memo]);
        $row = [
            'type' => 'transfer', 'ver' => 1, 'from' => $from, 'to' => $addr,
            'amount' => $pay, 'amount_fmt' => fmt_amt($pay),
            'nonce' => $nonce, 'ts' => $ts, 'memo' => $memo,
            'sig' => mac_sign($sec, $tbody), 'kind' => 'modifier_accrual',
        ];
        if (!$append($row)) {
            return ['ok' => false, 'err' => 'disk'];
        }
        // advance last_accrual by whole days only (while still holding chain lock)
        $mods[$addr]['last_accrual_ts'] = $last + ($days * 86400);
        save_mods($mods);
        return ['ok' => true, 'paid_fmt' => fmt_amt($pay), 'days' => $days, 'tx' => $row];
    });
    if ($out === null) {
        return ['ok' => false, 'err' => 'disk', 'paid_fmt' => '0'];
    }
    return $out;
}
function vault_dir(): string {
    global $VAULT, $ROOT;
    $candidates = [
        $VAULT,
        $ROOT . DIRECTORY_SEPARATOR . 'vault', // fallback if sibling not writable
    ];
    foreach ($candidates as $d) {
        if (is_dir($d) || @mkdir($d, 0700, true)) {
            if (is_dir($d) && is_writable($d)) return $d;
        }
    }
    return $candidates[0];
}
/** Write human-only vault material. PHP auth uses HASH only (ethos: vault not hot-path). */
function vault_write_operator(string $plainPass, array $walletSeeds = []): void {
    $d = vault_dir();
    @chmod($d, 0700);
    $readme = "NOSIGNUP.TRADE VAULT - ROOT/OPERATOR ONLY\n"
        . "Not served by nginx (keep outside html/ or deny).\n"
        . "ADMIN_PASSWORD.txt = legacy key-combo operator console (Ctrl+Alt+Shift+N), NOT /controlpanel.\n"
        . "/controlpanel unlocks with panel site.seed (SITE_WALLET_SEED.txt); KING mint is treasury.secret + KING_FAUCET_SEED.txt.\n"
        . "Web auth stores hash in data/admin.pass.hash; clear admin password lives here for root pull.\n"
        . "Optional WALLET_SEEDS.txt only if operator seeds were passed at write time.\n"
        . "Site wallet seed does not rotate on yearly wipe; admin password is re-keyed at wipe.\n"
        . "Generated: " . gmdate('c') . "\n";
    @file_put_contents($d . DIRECTORY_SEPARATOR . 'README.txt', $readme, LOCK_EX);
    @file_put_contents($d . DIRECTORY_SEPARATOR . 'ADMIN_PASSWORD.txt', $plainPass . "\n", LOCK_EX);
    @chmod($d . DIRECTORY_SEPARATOR . 'ADMIN_PASSWORD.txt', 0600);
    if ($walletSeeds) {
        $w = '';
        foreach ($walletSeeds as $k => $v) $w .= strtoupper((string)$k) . "=" . trim((string)$v) . "\n";
        @file_put_contents($d . DIRECTORY_SEPARATOR . 'WALLET_SEEDS.txt', $w, LOCK_EX);
        @chmod($d . DIRECTORY_SEPARATOR . 'WALLET_SEEDS.txt', 0600);
    }
    // deny via htaccess if vault accidentally under web root
    $ht = $d . DIRECTORY_SEPARATOR . '.htaccess';
    if (!is_file($ht)) @file_put_contents($ht, "Require all denied\nDeny from all\n");
}
function admin_pass_is_set(): bool {
    global $ADMIN_HASH_FILE, $ADMIN_PASS_FILE;
    if (is_file($ADMIN_HASH_FILE) && trim((string)file_get_contents($ADMIN_HASH_FILE)) !== '') return true;
    // legacy plaintext
    return is_file($ADMIN_PASS_FILE) && trim((string)file_get_contents($ADMIN_PASS_FILE)) !== '';
}
function admin_pass_set(string $pass, bool $alsoVault = true): void {
    global $ADMIN_HASH_FILE, $ADMIN_PASS_FILE;
    $pass = trim($pass);
    if (strlen($pass) < 8) api_out(['ok' => false, 'err' => 'admin pass min 8 chars'], 400);
    $hash = password_hash($pass, PASSWORD_DEFAULT);
    if ($hash === false) api_out(['ok' => false, 'err' => 'hash fail'], 500);
    file_put_contents($ADMIN_HASH_FILE, $hash . "\n", LOCK_EX);
    @chmod($ADMIN_HASH_FILE, 0600);
    // remove legacy plaintext from web data if present
    if (is_file($ADMIN_PASS_FILE)) @unlink($ADMIN_PASS_FILE);
    if ($alsoVault) vault_write_operator($pass);
}
function admin_ok(?string $pass): bool {
    global $ADMIN_HASH_FILE, $ADMIN_PASS_FILE;
    if ($pass === null || $pass === '') return false;
    $pass = trim($pass);
    if (is_file($ADMIN_HASH_FILE)) {
        $h = trim((string)file_get_contents($ADMIN_HASH_FILE));
        if ($h !== '' && password_verify($pass, $h)) return true;
    }
    // migrate legacy plaintext once
    if (is_file($ADMIN_PASS_FILE)) {
        $have = trim((string)file_get_contents($ADMIN_PASS_FILE));
        if ($have !== '' && hash_equals($have, $pass)) {
            admin_pass_set($pass, true);
            return true;
        }
    }
    return false;
}
/**
 * Panel gate (U7 product path): site wallet seed (KING treasury OR LORD operator_addr)
 * OR one-release legacy admin_pass.hash migrate. No visitor login. No recovery.
 * Mint/faucet surfaces use require_faucet_auth() instead — renters never mint.
 */
function require_admin(): void {
    // Charter: admin secrets belong in POST bodies, never URLs (no GET seed/pass).
    $seed = (string)($_POST['seed'] ?? '');
    if ($seed !== '' && panel_seed_ok($seed)) {
        return;
    }
    $p = (string)($_POST['admin_pass'] ?? '');
    if (!admin_ok($p)) {
        api_out(['ok' => false, 'err' => 'admin auth'], 401);
    }
}
/**
 * Genesis: mint 24_000_000 NSU to KING treasury (MASTER FAUCET for this site).
 * E3: also birth a DISTINCT trade panel site.seed; operator.addr := panel addr (≠ treasury).
 * KING seed: data/treasury.secret + vault KING_FAUCET_SEED.txt (only minter).
 * Panel seed: data/site.seed + vault SITE_WALLET_SEED.txt (admin door; no mint).
 * Pre-E3 installs (had genesis, no site.seed): stay on treasury=panel conflation fallback.
 * Renters must NOT receive treasury.secret. Population fields metadata only.
 */
function ensure_genesis(): void {
    global $TFILE, $META, $CHAIN;
    boot_data();
    $hadGenesis = false;
    foreach (read_chain() as $r) {
        if (($r['type'] ?? '') === 'genesis') {
            $hadGenesis = true;
            break;
        }
    }
    if ($hadGenesis) {
        // Do not invent site.seed on legacy empires (would orphan operator offline paper).
        nst_ensure_operator_addr();
        nst_bootstrap_spread_if_empty();
        return;
    }
    ensure_genesis_secret_only();
    $sec = trim((string)file_get_contents($TFILE));
    $taddr = addr_from_seed($sec);
    // Distinct panel wallet (one of 10 crop panels); never holds genesis mint.
    $panelSeed = ensure_panel_site_seed_only();
    $panelAddr = $panelSeed !== '' ? addr_from_seed($panelSeed) : $taddr;
    $ts = time();
    $popInfo = nst_world_population();
    $pop = (int)$popInfo['pop'];
    $treasuryAmt = nst_optimum_treasury_micros($pop);
    // fail-open: if crawl returned absurd, still land a working treasury
    if ($treasuryAmt === '0' || !dec_ok($treasuryAmt)) {
        $treasuryAmt = NST_GENESIS_TREASURY;
    }
    $body = 'genesis|1|' . $treasuryAmt . '|' . $taddr . '|' . $pop . '|' . $ts;
    $row = [
        'type' => 'genesis', 'ver' => 2, 'ts' => $ts,
        'max_supply' => $treasuryAmt, // soft: liquid scale = 24_000_000 NSU KING faucet at birth
        'outputs' => [['addr' => $taddr, 'amount' => $treasuryAmt]],
        'treasury_addr' => $taddr,
        'panel_addr' => $panelAddr,
        'population' => $pop,
        'population_source' => (string)$popInfo['source'],
        'optimum_micros_per_human' => NST_OPTIMUM_MICROS_PER_HUMAN, // legacy metadata only; not supply law
        // MASTER FAUCET: KING address holds genesis supply for THIS site only.
        // Panel site.seed is distinct (no mint). Renters must not receive treasury.secret.
        'note' => 'NSU genesis MASTER FAUCET: treasury = 24_000_000 NSU on KING; panel site.seed distinct; rewards = treasury transfers only; yearly re-anchor on wipe; KING seed unlocks faucet',
        'sig' => mac_sign($sec, $body),
    ];
    append_row($row);
    $m = load_meta();
    $m['version'] = NST_VERSION;
    $m['treasury'] = $taddr;
    $m['panel_addr'] = $panelAddr;
    $m['created'] = $m['created'] ?? $ts;
    $m['population'] = $pop;
    $m['population_source'] = (string)$popInfo['source'];
    $m['population_ts'] = (int)$popInfo['ts'];
    $m['treasury_target_micros'] = $treasuryAmt;
    $m['soft_max_supply_micros'] = $treasuryAmt;
    if (empty($m['epoch_start'])) {
        $m['epoch_start'] = $ts;
        $m['epoch_n'] = 1;
    }
    save_meta($m);
    // E3: site panel wallet is operator at birth; KING treasury is separate minter.
    nst_ensure_operator_addr($panelAddr);
    nst_vault_king_seed_note($sec);
    ensure_meta_epochs();
    // Seed discovery book: loose BUY/SELL around temp 1.0 if no open orders.
    nst_bootstrap_spread_if_empty();
}
function treasury_secret(): string { ensure_genesis(); global $TFILE; return trim((string)file_get_contents($TFILE)); }
function treasury_addr(): string { return addr_from_seed(treasury_secret()); }
function api_out(array $x, int $c = 200): void {
    http_response_code($c);
    header('Content-Type: application/json; charset=UTF-8');
    header('Cache-Control: no-store');
    echo j($x);
    exit;
}
function require_seed(): array {
    $seed = norm_seed((string)($_POST['seed'] ?? ''));
    $parts = explode(' ', $seed);
    if (count($parts) < 12) api_out(['ok' => false, 'err' => 'Need your 12-word seed'], 400);
    return [$seed, addr_from_seed($seed)];
}

/* -------- Public source (?src=1 / ?download=1) - no auth, before APIs -------- */
if (isset($_GET['src']) || isset($_GET['download']) || (isset($_GET['api']) && (string)$_GET['api'] === 'src')) {
    $raw = (string)file_get_contents(__FILE__);
    header('Content-Type: text/plain; charset=UTF-8');
    header('X-Content-Type-Options: nosniff');
    header('Cache-Control: no-store');
    header('X-NS-Sha256: ' . hash('sha256', $raw));
    header('Content-Disposition: attachment; filename="index.php"');
    header('Content-Length: ' . (string)strlen($raw));
    echo $raw;
    exit;
}

/* -------- API -------- */
$api = $_GET['api'] ?? $_POST['api'] ?? '';
if ($api !== '') {
    ensure_genesis();
    $chain = read_chain();
    $bal = balances($chain);
    $taddr = treasury_addr();
    // E2: honor freeze always; full recheck on force=1 or throttle expiry
    $forceConserve = ((string)($_GET['force'] ?? $_POST['force'] ?? '') === '1');
    $nstConserveSnap = nst_conservation_boot_check($chain, $forceConserve);

    if ($api === 'state') {
        $orders = open_orders($chain);
        $bids = array_values(array_filter($orders, fn($o) => ($o['side'] ?? '') === 'buy'));
        $asks = array_values(array_filter($orders, fn($o) => ($o['side'] ?? '') === 'sell'));
        // Side-local sort (open_orders mixed comparator is not best-bid/best-ask safe).
        usort($bids, fn($a, $b) => dec_cmp((string)($b['price'] ?? '0'), (string)($a['price'] ?? '0')));
        usort($asks, fn($a, $b) => dec_cmp((string)($a['price'] ?? '0'), (string)($b['price'] ?? '0')));
        // Single source of P: same helper as SSR / buyback (never fixed sticker).
        $convergeP = book_mid_micros($chain);
        $mid = $convergeP !== null ? fmt_amt($convergeP) : null;
        $ep = epoch_info();
        $meta = load_meta();
        $pop = (int)($meta['population'] ?? 0);
        $target = (string)($meta['treasury_target_micros'] ?? '');
        if ($target === '' || !dec_ok($target)) {
            $pi = nst_world_population();
            $pop = (int)$pi['pop'];
            $target = nst_optimum_treasury_micros($pop);
        }
        $bootstrapSpreadActive = false;
        foreach ($orders as $o) {
            if (($o['kind'] ?? '') === 'bootstrap_spread') {
                $bootstrapSpreadActive = true;
                break;
            }
        }
        $bbPx = nst_buyback_price_micros($chain);
        api_out([
            'ok' => true,
            'version' => NST_VERSION,
            'price_policy' => 'market_converge',
            'bootstrap_spread_active' => $bootstrapSpreadActive,
            'buyback_note' => 'donate buyback arms at market P/2 (not fixed sticker)',
            'market_p_fmt' => $mid,
            'buyback_px_fmt' => $bbPx !== null ? fmt_amt($bbPx) : null,
            'panel_unlock' => 'site_wallet_seed',
            // browser_hmac_v1: client HMAC with seed still on wire (fallback).
            // ecdsa_p256_v1: register_pubkey once, then signed ops omit seed.
            'client_sign' => 'browser_hmac_or_ecdsa_p256',
            'sig_mode' => 'ecdsa_p256_or_browser_hmac_or_server_mac',
            'seed_on_wire' => 'unless_ecdsa_registered',
            'seed_off_wire' => 'ecdsa_after_register_pubkey',
            'asymmetric_plan' => 'ECDSA_P256_register_pubkey_then_seed_off_wire',
            'ecdsa_spend' => 'register_pubkey_then_signed_ops_without_seed',
            'ecdsa_ops' => ['transfer', 'order', 'cancel', 'fill', 'reputation'],
            'wallet_inbox' => 'v0+autowire experimental · address-keyed sealed mail · mail not mint',
            'inbox_e2e' => 'client_encrypt_server_ciphertext_only · experimental · not proven e2e',
            'inbox_server_notice' => 'server-composed public book facts · encrypted for delivery · NOT private E2E',
            'inbox_key_sep' => 'ECDSA_sign≠ECDH_enc (encpub_ vs pubkey_)',
            // Soft surface: hosts without OpenSSL cannot verify ECDSA (HMAC fallback still works).
            'ecdsa_server' => nst_ecdsa_openssl_ready() ? 'openssl_available' : 'openssl_unavailable',
            'ecdsa_verify_ready' => nst_ecdsa_openssl_ready(),
            'max_supply_fmt' => fmt_amt((string)($meta['soft_max_supply_micros'] ?? NST_MAX_SUPPLY)),
            'genesis_supply_nsu' => NST_KING_FAUCET_START_NSU, // fixed 24_000_000 NSU KING faucet
            'supply_law' => 'fixed_24_000_000_NSU_KING_faucet; not live pop×1000; population/optimum_* metadata only',
            'treasury_addr' => $taddr,
            'treasury_bal_fmt' => fmt_amt($bal[$taddr] ?? '0'),
            'treasury_target_fmt' => fmt_amt($target),
            'population' => $pop,
            'population_source' => (string)($meta['population_source'] ?? ''),
            'optimum_nsu_per_human' => fmt_amt(NST_OPTIMUM_MICROS_PER_HUMAN), // legacy metadata only
            'chain_len' => count($chain),
            'book' => ['bids' => array_slice($bids, 0, 30), 'asks' => array_slice($asks, 0, 30), 'mid' => $mid],
            'recent' => array_slice($chain, -50),
            'epoch' => $ep,
            'admin_pass_set' => admin_pass_is_set(),
            'early_daily_fmt' => fmt_amt(NST_MOD_DAILY_MICROS),
            'economy' => (function () use ($chain) {
                $e = load_economy();
                $midM = book_mid_micros($chain);
                $bbM = nst_buyback_price_micros($chain);
                return [
                    'profit_fmt' => fmt_amt((string)($e['profit_micros'] ?? '0')),
                    'ad_bid_fmt' => fmt_amt((string)($e['ad_bid_micros'] ?? '0')),
                    'mid_fmt' => $midM !== null ? fmt_amt($midM) : null,
                    'buyback_px_fmt' => $bbM !== null ? fmt_amt($bbM) : null,
                    'donate_k' => (string)($e['donate_k'] ?? NST_DONATE_K),
                    'value_note' => (string)($e['value_note'] ?? ''),
                    'value_authority' => 'this_server_owner',
                    'mirrors_role' => 'free_tributaries',
                ];
            })(),
            'conservation' => nst_conservation_public_view($nstConserveSnap),
            'writes_frozen' => nst_conservation_is_frozen(),
            'self_hash_hint' => 'sha256 of this index.php on disk - compute offline to verify release',
        ]);
    }

    if ($api === 'balance') {
        $a = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_REQUEST['addr'] ?? '')));
        if (strlen($a) !== 64) api_out(['ok' => false, 'err' => 'bad addr'], 400);
        $b = $bal[$a] ?? '0';
        $res = reserved_nsu($chain, $a);
        $av = available_nsu($bal, $chain, $a);
        $reps = rep_scores($chain);
        // history for addr
        $hist = [];
        foreach (array_reverse($chain) as $r) {
            if (($r['type'] ?? '') === 'transfer' && (($r['from'] ?? '') === $a || ($r['to'] ?? '') === $a)) {
                $hist[] = $r;
                if (count($hist) >= 40) break;
            }
            if (($r['type'] ?? '') === 'order' && ($r['addr'] ?? '') === $a) {
                $hist[] = $r;
                if (count($hist) >= 40) break;
            }
            if (($r['type'] ?? '') === 'fill' && (($r['maker'] ?? '') === $a || ($r['taker'] ?? '') === $a)) {
                $hist[] = $r;
                if (count($hist) >= 40) break;
            }
            if (($r['type'] ?? '') === 'reputation' && (($r['rater'] ?? '') === $a || ($r['rated'] ?? '') === $a)) {
                $hist[] = $r;
                if (count($hist) >= 40) break;
            }
            if (($r['type'] ?? '') === 'modifier_grant' && ($r['addr'] ?? '') === $a) {
                $hist[] = $r;
                if (count($hist) >= 40) break;
            }
        }
        $mods = load_mods();
        $mod = $mods[$a] ?? null;
        api_out([
            'ok' => true,
            'addr' => $a,
            'balance' => $b,
            'balance_fmt' => fmt_amt($b),
            'reserved' => $res,
            'reserved_fmt' => fmt_amt($res),
            'available' => $av,
            'available_fmt' => fmt_amt($av),
            'rep_score' => $reps[$a] ?? 0,
            'history' => $hist,
            'has_modifier' => !empty($mod['permanent']),
            'modifier' => $mod ? [
                'permanent' => !empty($mod['permanent']),
                'daily_fmt' => fmt_amt((string)($mod['daily_micros'] ?? NST_MOD_DAILY_MICROS)),
                'granted_ts' => (int)($mod['granted_ts'] ?? 0),
                'granted_epoch' => (int)($mod['granted_epoch'] ?? 0),
                'last_accrual_ts' => (int)($mod['last_accrual_ts'] ?? 0),
            ] : null,
            'epoch' => epoch_info(),
        ]);
    }

    if ($api === 'addr' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        [$seed, $addr] = require_seed();
        $grant = grant_early_modifier($addr);
        $acc = lazy_accrue($addr);
        api_out([
            'ok' => true,
            'addr' => $addr,
            'modifier_grant' => $grant,
            'accrual' => $acc,
            'epoch' => epoch_info(),
        ]);
    }

    if ($api === 'accrue' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        [$seed, $addr] = require_seed();
        $grant = grant_early_modifier($addr);
        $acc = lazy_accrue($addr);
        $bal = balances(read_chain());
        api_out([
            'ok' => true,
            'addr' => $addr,
            'modifier_grant' => $grant,
            'accrual' => $acc,
            'balance_fmt' => fmt_amt($bal[$addr] ?? '0'),
            'available_fmt' => fmt_amt(available_nsu($bal, read_chain(), $addr)),
            'has_modifier' => !empty(load_mods()[$addr]['permanent']),
        ]);
    }

    // Register ECDSA P-256 SPKI for legacy addr (seed proves ownership once; later spends can omit seed).
    if ($api === 'register_pubkey' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        if (!nst_ecdsa_openssl_ready()) {
            api_out([
                'ok' => false,
                'err' => 'ecdsa verify unavailable (openssl extension required)',
                'ecdsa_server' => 'openssl_unavailable',
            ], 503);
        }
        [$seed, $addr] = require_seed();
        $spkiHex = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['pubkey'] ?? '')) ?? '');
        $spki = @hex2bin($spkiHex);
        if ($spki === false || strlen($spki) < 50) {
            api_out(['ok' => false, 'err' => 'bad pubkey'], 400);
        }
        $ts = (int)($_POST['ts'] ?? 0);
        if ($ts < 1) {
            $ts = time();
        } elseif (abs($ts - time()) > 600) {
            api_out(['ok' => false, 'err' => 'clock skew — refresh and retry'], 400);
        }
        $proof = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['ecdsa_sig'] ?? '')) ?? '');
        $body = implode('|', ['register_pubkey', '1', $addr, $spkiHex, (string)$ts]);
        if ($proof === '' || !nst_ecdsa_verify_p256($spki, $body, $proof)) {
            api_out(['ok' => false, 'err' => 'bad ecdsa proof for pubkey'], 400);
        }
        if (!nst_save_registered_spki($addr, $spki)) {
            api_out(['ok' => false, 'err' => 'disk'], 500);
        }
        api_out([
            'ok' => true,
            'addr' => $addr,
            'pubkey_registered' => true,
            'sig_mode' => 'ecdsa_p256_v1',
            'note' => 'Pubkey stored. Spend may omit seed when ECDSA path works (experimental · not proven e2e); HMAC/seed still real fallback',
        ]);
    }

    // --- Wallet Inbox v0: enc-pubkey registry + sealed mail (ciphertext only) ---
    if ($api === 'register_enc_pubkey' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        [$seed, $addr] = require_seed();
        $spkiHex = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['enc_pubkey'] ?? $_POST['pubkey'] ?? '')) ?? '');
        $spki = @hex2bin($spkiHex);
        if ($spki === false || strlen($spki) < 50) {
            api_out(['ok' => false, 'err' => 'bad enc pubkey'], 400);
        }
        if (!nst_save_registered_enc_spki($addr, $spki)) {
            api_out(['ok' => false, 'err' => 'disk'], 500);
        }
        api_out([
            'ok' => true,
            'addr' => $addr,
            'enc_pubkey_registered' => true,
            'key_usage' => 'ECDH_P256_encrypt_only',
            'distinct_from' => 'ECDSA_P256_sign (register_pubkey)',
            'note' => 'Encryption SPKI stored. Seal/decrypt experimental · not proven e2e until isolated proof',
            'mail_not_mint' => true,
        ]);
    }

    // Public fetch of encryption SPKI (needed by sender to seal; not a secret).
    if ($api === 'inbox_enc_pubkey') {
        $addr = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_GET['addr'] ?? $_POST['addr'] ?? ''))) ?? '';
        if (strlen($addr) !== 64) api_out(['ok' => false, 'err' => 'bad addr'], 400);
        $spki = nst_load_registered_enc_spki($addr);
        if ($spki === null) {
            api_out(['ok' => false, 'err' => 'no enc pubkey registered', 'addr' => $addr], 404);
        }
        api_out([
            'ok' => true,
            'addr' => $addr,
            'enc_pubkey' => bin2hex($spki),
            'alg' => NST_INBOX_ALG,
            'note' => 'Public encryption key only · experimental wallet inbox v0',
        ]);
    }

    /**
     * KING seal: accept PRE-ENCRYPTED blob only (ct + eph_pub + iv + sig).
     * Server NEVER accepts plaintext for storage. require_faucet_auth.
     * Mail ≠ mint: no chain row, no balance change.
     */
    if ($api === 'inbox_seal' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        require_faucet_auth();
        // Refuse accidental plaintext legs (honesty floor).
        foreach (['plaintext', 'note', 'body', 'message', 'msg'] as $ban) {
            if (isset($_POST[$ban]) && trim((string)$_POST[$ban]) !== '') {
                api_out([
                    'ok' => false,
                    'err' => 'plaintext not accepted — encrypt client-side; server stores ciphertext only',
                    'honesty' => 'refuse_server_plaintext_seal',
                ], 400);
            }
        }
        $to = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['to'] ?? ''))) ?? '';
        if (strlen($to) !== 64) api_out(['ok' => false, 'err' => 'bad to'], 400);
        if (nst_load_registered_enc_spki($to) === null) {
            api_out(['ok' => false, 'err' => 'recipient has no enc pubkey — they must unlock wallet once'], 400);
        }
        $from = strtolower(addr_from_seed(treasury_secret()));
        $id = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['id'] ?? ''))) ?? '';
        if ($id === '') $id = bin2hex(random_bytes(8));
        if (strlen($id) < 8 || strlen($id) > 64) api_out(['ok' => false, 'err' => 'bad id'], 400);
        $ts = (int)($_POST['ts'] ?? time());
        if (abs($ts - time()) > 600) api_out(['ok' => false, 'err' => 'clock skew — refresh and retry'], 400);
        $ttl = (int)($_POST['ttl'] ?? NST_INBOX_TTL_SECS);
        if ($ttl < 60) $ttl = 60;
        if ($ttl > NST_INBOX_TTL_SECS * 4) $ttl = NST_INBOX_TTL_SECS * 4;
        $exp = $ts + $ttl;
        $eph = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['eph_pub'] ?? '')) ?? '');
        $iv = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['iv'] ?? '')) ?? '');
        $ct = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['ct'] ?? '')) ?? '');
        if (strlen($eph) < 100 || strlen($iv) !== 24 || strlen($ct) < 32) {
            api_out(['ok' => false, 'err' => 'bad ciphertext fields (eph_pub/iv/ct)'], 400);
        }
        if (strlen($ct) > NST_INBOX_MAX_CT_HEX) api_out(['ok' => false, 'err' => 'ct too large'], 400);
        $blob = [
            'v' => 1,
            'id' => $id,
            'to' => $to,
            'from' => $from,
            'ts' => $ts,
            'ttl' => $ttl,
            'exp' => $exp,
            'eph_pub' => $eph,
            'iv' => $iv,
            'ct' => $ct,
            'alg' => NST_INBOX_ALG,
            'kind' => 'king_note',
            'mail_not_mint' => true,
            'honesty' => 'experimental · sealed wallet mail · server ciphertext only · not proven e2e',
        ];
        $signBody = nst_inbox_sign_body($blob);
        $sig = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['sig'] ?? $_POST['ecdsa_sig'] ?? '')) ?? '');
        $sigMode = strtolower(trim((string)($_POST['sig_mode'] ?? '')));
        $spkiHex = strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['pubkey'] ?? '')) ?? '');
        if ($sigMode === 'ecdsa_p256_v1' || ($sig !== '' && $spkiHex !== '' && nst_ecdsa_openssl_ready())) {
            $spki = @hex2bin($spkiHex);
            if ($spki === false || strlen($spki) < 50) api_out(['ok' => false, 'err' => 'bad sender pubkey'], 400);
            $reg = nst_load_registered_spki($from);
            if ($reg === null || !hash_equals($reg, $spki)) {
                // Allow seal-time register: if KING posts matching seed-proven from, require proof over register body first is separate.
                // Here: if no registry, accept SPKI only when ECDSA verifies AND from matches treasury (KING seed already checked).
                if ($reg !== null && !hash_equals($reg, $spki)) {
                    api_out(['ok' => false, 'err' => 'sender pubkey not registered for treasury addr'], 403);
                }
                if ($reg === null) {
                    nst_save_registered_spki($from, $spki);
                }
            }
            if ($sig === '' || !nst_ecdsa_verify_p256($spki, $signBody, $sig)) {
                api_out(['ok' => false, 'err' => 'bad ecdsa seal signature'], 400);
            }
            $blob['sig'] = $sig;
            $blob['sig_mode'] = 'ecdsa_p256_v1';
            $blob['sender_spki'] = bin2hex($spki);
        } else {
            // Experimental HMAC fallback (seed already on wire for faucet auth) — labeled.
            $seed = (string)($_POST['seed'] ?? '');
            $expect = mac_sign($seed, $signBody);
            if ($sig !== '' && !hash_equals($expect, $sig)) {
                api_out(['ok' => false, 'err' => 'bad hmac seal signature'], 400);
            }
            if ($sig === '') $sig = $expect;
            $blob['sig'] = $sig;
            $blob['sig_mode'] = 'server_mac';
            $blob['honesty'] = 'experimental · sealed mail · HMAC seal (seed on wire for KING auth) · ciphertext-only store · not proven e2e';
        }
        $path = nst_inbox_blob_path($to, $id);
        if (@file_put_contents($path, j($blob), LOCK_EX) === false) {
            api_out(['ok' => false, 'err' => 'disk'], 500);
        }
        api_out([
            'ok' => true,
            'id' => $id,
            'to' => $to,
            'from' => $from,
            'exp' => $exp,
            'stored' => basename($path),
            'mail_not_mint' => true,
            'server_plaintext' => false,
            'sig_mode' => $blob['sig_mode'],
            'honesty' => $blob['honesty'],
            'note' => 'Opaque ciphertext stored only · recipient decrypts client-side with seed-derived ECDH key',
        ]);
    }

    // List own sealed blobs (seed or ECDSA actor).
    if ($api === 'inbox_list' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        $actor = nst_actor('addr');
        $addr = $actor['addr'];
        // Light auth: list is not secret metadata-only; still require ownership of addr.
        if (!empty($actor['ecdsa'])) {
            $body = implode('|', ['inbox_list', '1', $addr, (string)(int)($_POST['ts'] ?? time())]);
            nst_auth_sig($actor, $body);
        }
        $items = nst_inbox_list_for_addr($addr);
        api_out([
            'ok' => true,
            'addr' => $addr,
            'count' => count($items),
            'items' => $items,
            'mail_not_mint' => true,
            'honesty' => 'experimental · list returns metadata + ids; ct only via inbox_fetch · not proven e2e',
        ]);
    }

    // Fetch one sealed blob (opaque fields for client decrypt).
    if ($api === 'inbox_fetch' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        $actor = nst_actor('addr');
        $addr = $actor['addr'];
        $id = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['id'] ?? ''))) ?? '';
        if ($id === '') api_out(['ok' => false, 'err' => 'need id'], 400);
        if (!empty($actor['ecdsa'])) {
            $body = implode('|', ['inbox_fetch', '1', $addr, $id, (string)(int)($_POST['ts'] ?? time())]);
            nst_auth_sig($actor, $body);
        }
        $path = nst_inbox_blob_path($addr, $id);
        if (!is_file($path)) {
            $path = nst_inbox_blob_path_legacy($addr, $id);
        }
        if (!is_file($path)) api_out(['ok' => false, 'err' => 'not found'], 404);
        $j = json_decode((string)@file_get_contents($path), true);
        if (!is_array($j) || (string)($j['to'] ?? '') !== $addr) {
            api_out(['ok' => false, 'err' => 'not found'], 404);
        }
        $exp = (int)($j['exp'] ?? 0);
        if ($exp > 0 && $exp < time()) {
            @unlink($path);
            api_out(['ok' => false, 'err' => 'expired'], 410);
        }
        api_out([
            'ok' => true,
            'blob' => [
                'v' => (int)($j['v'] ?? 1),
                'id' => (string)($j['id'] ?? ''),
                'to' => (string)($j['to'] ?? ''),
                'from' => (string)($j['from'] ?? ''),
                'ts' => (int)($j['ts'] ?? 0),
                'exp' => $exp,
                'eph_pub' => (string)($j['eph_pub'] ?? ''),
                'iv' => (string)($j['iv'] ?? ''),
                'ct' => (string)($j['ct'] ?? ''),
                'sig' => (string)($j['sig'] ?? ''),
                'sig_mode' => (string)($j['sig_mode'] ?? ''),
                'sender_spki' => (string)($j['sender_spki'] ?? ''),
                'alg' => (string)($j['alg'] ?? NST_INBOX_ALG),
                'kind' => (string)($j['kind'] ?? 'king_note'),
                'honesty' => (string)($j['honesty'] ?? 'experimental'),
            ],
            'mail_not_mint' => true,
            'server_plaintext' => false,
            'note' => 'Decrypt client-side with seed-derived ECDH key · experimental · not proven e2e',
        ]);
    }


    if ($api === 'transfer' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        $to = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['to'] ?? '')));
        $micros = parse_amt(trim((string)($_POST['amount'] ?? '')));
        $memo = substr(trim((string)($_POST['memo'] ?? '')), 0, 120);
        $nonce = substr(trim((string)($_POST['nonce'] ?? bin2hex(random_bytes(8)))), 0, 64);
        if (strlen($to) !== 64) api_out(['ok' => false, 'err' => 'bad to'], 400);
        if ($micros === null || dec_cmp($micros, '1') < 0) api_out(['ok' => false, 'err' => 'bad amount'], 400);
        $ts = (int)($_POST['ts'] ?? 0);
        if ($ts < 1) {
            $ts = time();
        } elseif (abs($ts - time()) > 600) {
            api_out(['ok' => false, 'err' => 'clock skew — refresh and retry'], 400);
        }

        // Dual-path: ECDSA seed-off-wire OR seed + optional browser HMAC.
        $actor = nst_actor('from');
        $from = $actor['addr'];
        if ($from === $to) api_out(['ok' => false, 'err' => 'self'], 400);
        $body = implode('|', ['transfer', '1', $from, $to, $micros, $nonce, (string)$ts, $memo]);
        $auth = nst_auth_sig($actor, $body);
        $sigMode = $auth['sig_mode'];
        $rowSig = $auth['sig'];
        $spkiHex = $auth['pubkey'];
        $risk = nst_brain_memo_risk($memo);
        $row = [
            'type' => 'transfer', 'ver' => 1, 'from' => $from, 'to' => $to,
            'amount' => $micros, 'amount_fmt' => fmt_amt($micros),
            'nonce' => $nonce, 'ts' => $ts, 'memo' => $memo,
            'sig' => $rowSig,
            'sig_mode' => $sigMode,
        ];
        if ($sigMode === 'ecdsa_p256_v1' && $spkiHex !== '') {
            $row['pubkey'] = $spkiHex;
        }
        if (!empty($risk['flag'])) $row['memo_risk'] = $risk;
        // Exclusive RMW: concurrent transfers cannot both pass available_nsu and overdraw.
        $xferOut = nst_with_chain_lock(function (array $chain, callable $append) use ($from, $to, $micros, $nonce, $row) {
            foreach ($chain as $r) {
                if (($r['type'] ?? '') === 'transfer' && ($r['from'] ?? '') === $from && ($r['nonce'] ?? '') === $nonce) {
                    return ['ok' => false, 'http' => 400, 'err' => 'nonce replay'];
                }
            }
            $bal = balances($chain);
            $av = available_nsu($bal, $chain, $from);
            if (dec_cmp($av, $micros) < 0) {
                return [
                    'ok' => false,
                    'http' => 400,
                    'err' => 'insufficient available',
                    'have_fmt' => fmt_amt($bal[$from] ?? '0'),
                    'available_fmt' => fmt_amt($av),
                ];
            }
            if (!$append($row)) {
                return ['ok' => false, 'http' => 500, 'err' => 'disk'];
            }
            return [
                'ok' => true,
                'tx' => $row,
                'balance_fmt' => fmt_amt(dec_sub($bal[$from] ?? '0', $micros)),
            ];
        });
        if ($xferOut === null) {
            api_out(['ok' => false, 'err' => 'disk'], 500);
        }
        if (empty($xferOut['ok'])) {
            $http = (int)($xferOut['http'] ?? 400);
            unset($xferOut['http']);
            api_out($xferOut, $http);
        }
        // P3c/d: rent memo → try settle; on refundable failure, auto-refund payer from treasury.
        $txRow = is_array($xferOut['tx'] ?? null) ? $xferOut['tx'] : $row;
        $rentSettle = nst_rent_try_settle_transfer($txRow);
        $rentRefund = null;
        if (empty($rentSettle['settled']) && nst_rent_refundable_reason((string)($rentSettle['reason'] ?? ''))) {
            $rentRefund = nst_rent_auto_refund($txRow, $rentSettle);
        }
        // Rent notices AFTER settle/refund commit; fail-open (public lease facts).
        try {
            if (!empty($rentSettle['settled'])) {
                nst_inbox_notify_rent_settle($rentSettle);
            }
            if (is_array($rentRefund) && !empty($rentRefund['refunded'])) {
                nst_inbox_notify_rent_refund($rentRefund);
            }
        } catch (Throwable $e) {
            // never abort a committed transfer/rent op
        }
        api_out([
            'ok' => true,
            'tx' => $xferOut['tx'],
            'sig_mode' => $sigMode,
            'seed_on_wire' => $auth['seed_on_wire'],
            'balance_fmt' => $xferOut['balance_fmt'],
            'brains' => ['memo_risk' => $risk],
            'rent' => $rentSettle,
            'rent_refund' => $rentRefund,
        ]);
    }

    /** Free claim retired — always 410. No mint, no transfer. */
    if ($api === 'faucet' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        api_out([
            'ok' => false,
            'err' => 'Free NSU claim retired — buy NSU on the order book (Trade book tab)',
            'law' => 'OPERATOR_GO 2026-07-16: KING path SELL/BUY only; free giveaway OUT. '
                . 'Site use stays free (wallet, view, post). NSU is the tradeable coin, not a free drip.',
            'free_claim' => 'retired',
            'next' => 'place a buy order on the book · ?api=order side=buy',
        ], 410);
    }

    if ($api === 'order' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        $actor = nst_actor('addr');
        $addr = $actor['addr'];
        $side = strtolower(trim((string)($_POST['side'] ?? '')));
        $pair = strtoupper(trim((string)($_POST['pair'] ?? 'NSU/NOTE')));
        $amount = parse_amt(trim((string)($_POST['amount'] ?? '')));
        $price = parse_amt(trim((string)($_POST['price'] ?? '')));
        $expiry = (int)($_POST['expiry'] ?? (time() + 86400));
        if (!in_array($side, ['buy', 'sell'], true)) api_out(['ok' => false, 'err' => 'side'], 400);
        if ($amount === null || $price === null) api_out(['ok' => false, 'err' => 'amount/price'], 400);
        $sanity = nst_brain_order_sanity($side, $amount, $price);
        $pairBrain = nst_brain_pair_sane($pair);
        if ($expiry < time() + 60) $expiry = time() + 3600;
        if ($expiry > time() + 30 * 86400) $expiry = time() + 30 * 86400;
        // open-count + sell available re-checked under chain RMW lock below
        $ts = (int)($_POST['ts'] ?? 0);
        if ($ts < 1) {
            $ts = time();
        } elseif (abs($ts - time()) > 600) {
            api_out(['ok' => false, 'err' => 'clock skew — refresh and retry'], 400);
        }
        $idIn = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['order_id'] ?? ''))) ?? '';
        if (strlen($idIn) === 64) {
            $id = $idIn;
        } else {
            $id = hash('sha256', $addr . '|' . $ts . '|' . $side . '|' . $amount . '|' . $price . '|' . bin2hex(random_bytes(4)));
        }
        $body = implode('|', ['order', '1', $id, $addr, $side, $pair, $amount, $price, (string)$expiry, (string)$ts]);
        $auth = nst_auth_sig($actor, $body);
        $sigMode = $auth['sig_mode'];
        $row = [
            'type' => 'order', 'ver' => 1, 'id' => $id, 'addr' => $addr,
            'side' => $side, 'pair' => $pair,
            'amount' => $amount, 'amount_fmt' => fmt_amt($amount),
            'price' => $price, 'price_fmt' => fmt_amt($price),
            'expiry' => $expiry, 'ts' => $ts,
            'sig' => $auth['sig'],
            'sig_mode' => $sigMode,
        ];
        if ($sigMode === 'ecdsa_p256_v1' && $auth['pubkey'] !== '') {
            $row['pubkey'] = $auth['pubkey'];
        }
        if (!empty($sanity['flag'])) $row['order_sanity'] = $sanity;
        if (!empty($pairBrain['flag'])) $row['pair_sane'] = $pairBrain;
        // Exclusive RMW: concurrent sells cannot over-reserve; open-count + id uniqueness under lock.
        // OPERATOR_GO §3c: treasury/KING SELL on book immediately arms BID @ half (same pair).
        // Pre-read treasury material OUTSIDE chain lock (treasury_secret → ensure_genesis can append_row).
        $tsecForHalf = '';
        $taddrForHalf = '';
        try {
            $tsecForHalf = treasury_secret();
            $taddrForHalf = strtolower(addr_from_seed($tsecForHalf));
        } catch (Throwable $e) {
            $tsecForHalf = '';
            $taddrForHalf = '';
        }
        $isTreasurySell = ($side === 'sell' && $taddrForHalf !== '' && strtolower($addr) === $taddrForHalf
            && (($row['kind'] ?? '') !== 'bootstrap_spread'));
        $orderOut = nst_with_chain_lock(function (array $chain, callable $append) use (
            $addr, $side, $pair, $amount, $id, $row, $isTreasurySell, $expiry, $ts, $tsecForHalf, $taddrForHalf
        ) {
            foreach ($chain as $r) {
                if (($r['type'] ?? '') === 'order' && ($r['id'] ?? '') === $id) {
                    return ['ok' => false, 'http' => 400, 'err' => 'order_id already used'];
                }
            }
            $n = 0;
            foreach (open_orders($chain) as $o) {
                if (($o['addr'] ?? '') === $addr) $n++;
            }
            // Treasury SELL needs a free slot for the paired half-BID (two posts).
            $slotCap = $isTreasurySell ? 19 : 20;
            if ($n >= $slotCap) {
                return ['ok' => false, 'http' => 400, 'err' => 'too many open orders'];
            }
            if ($side === 'sell' && str_starts_with($pair, 'NSU')) {
                $bal = balances($chain);
                $av = available_nsu($bal, $chain, $addr);
                if (dec_cmp($av, $amount) < 0) {
                    return [
                        'ok' => false,
                        'http' => 400,
                        'err' => 'insufficient available NSU',
                        'available_fmt' => fmt_amt($av),
                    ];
                }
            }
            if (!$append($row)) {
                return ['ok' => false, 'http' => 500, 'err' => 'disk'];
            }
            $halfBid = null;
            if ($isTreasurySell) {
                $hb = nst_treasury_half_bid_from_sell(
                    (string)$id,
                    (string)$pair,
                    (string)$amount,
                    (string)($row['price'] ?? '0'),
                    (int)$expiry,
                    (int)$ts,
                    $chain,
                    $append,
                    (string)$tsecForHalf,
                    (string)$taddrForHalf
                );
                if (empty($hb['ok'])) {
                    return [
                        'ok' => false,
                        'http' => 500,
                        'err' => 'treasury half-bid failed after sell',
                        'detail' => $hb['err'] ?? 'unknown',
                        'order' => $row,
                    ];
                }
                $halfBid = $hb['order'] ?? null;
            }
            return ['ok' => true, 'order' => $row, 'half_bid' => $halfBid];
        });
        if ($orderOut === null) {
            api_out(['ok' => false, 'err' => 'disk'], 500);
        }
        if (empty($orderOut['ok'])) {
            $http = (int)($orderOut['http'] ?? 400);
            unset($orderOut['http']);
            api_out($orderOut, $http);
        }
        $outPayload = [
            'ok' => true,
            'order' => $orderOut['order'],
            'sig_mode' => $sigMode,
            'seed_on_wire' => $auth['seed_on_wire'],
            'brains' => ['order_sanity' => $sanity, 'pair_sane' => $pairBrain],
        ];
        if (!empty($orderOut['half_bid'])) {
            $outPayload['half_bid'] = $orderOut['half_bid'];
            $outPayload['half_bid_note'] = 'OPERATOR_GO §3c: treasury SELL armed paired BID @ half price';
        }
        // Half-BID armed notice: AFTER chain write, fail-open (public book floor).
        try {
            if (!empty($orderOut['half_bid']) && is_array($orderOut['half_bid'])) {
                $sellRow = is_array($orderOut['order'] ?? null) ? $orderOut['order'] : null;
                nst_inbox_notify_half_bid($sellRow, $orderOut['half_bid']);
            }
        } catch (Throwable $e) {
            // never abort a committed order/half-BID
        }
        api_out($outPayload);
    }

    if ($api === 'cancel' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        $actor = nst_actor('addr');
        $addr = $actor['addr'];
        $oid = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['order_id'] ?? '')));
        if (strlen($oid) !== 64) api_out(['ok' => false, 'err' => 'bad order_id'], 400);
        $chain = read_chain();
        $found = null;
        foreach ($chain as $r) {
            if (($r['type'] ?? '') === 'order' && ($r['id'] ?? '') === $oid) $found = $r;
        }
        if (!$found) api_out(['ok' => false, 'err' => 'not found'], 404);
        if (($found['addr'] ?? '') !== $addr) api_out(['ok' => false, 'err' => 'not owner'], 403);
        // Honesty: only open book rows may cancel (filled/cancelled/expired → not open).
        // Not a fund-lock invent: fill already rechecks open_orders under nst_with_chain_lock.
        $stillOpen = false;
        foreach (open_orders($chain) as $oLive) {
            if (($oLive['id'] ?? '') === $oid) { $stillOpen = true; break; }
        }
        if (!$stillOpen) {
            api_out(['ok' => false, 'err' => 'order not open'], 404);
        }
        $ts = (int)($_POST['ts'] ?? 0);
        if ($ts < 1) {
            $ts = time();
        } elseif (abs($ts - time()) > 600) {
            api_out(['ok' => false, 'err' => 'clock skew — refresh and retry'], 400);
        }
        $body = implode('|', ['cancel', '1', $oid, $addr, (string)$ts]);
        $auth = nst_auth_sig($actor, $body);
        $sigMode = $auth['sig_mode'];
        $row = [
            'type' => 'cancel', 'ver' => 1, 'order_id' => $oid, 'addr' => $addr,
            'ts' => $ts, 'sig' => $auth['sig'], 'sig_mode' => $sigMode,
        ];
        if ($sigMode === 'ecdsa_p256_v1' && $auth['pubkey'] !== '') {
            $row['pubkey'] = $auth['pubkey'];
        }
        if (!append_row($row)) api_out(['ok' => false, 'err' => 'disk'], 500);
        api_out(['ok' => true, 'cancel' => $row, 'sig_mode' => $sigMode, 'seed_on_wire' => $auth['seed_on_wire']]);
    }

    // Take a live order: move NSU leg when pair starts with NSU
    // sell order: maker sells NSU -> transfer maker->taker
    // buy order: maker buys NSU -> transfer taker->maker (taker must hold NSU)
    // Chain exclusive RMW under LOCK_EX so concurrent fills cannot over-debit maker.
    if ($api === 'fill' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        $actor = nst_actor('taker');
        $taker = $actor['addr'];
        $oid = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['order_id'] ?? '')));
        $qtyH = trim((string)($_POST['amount'] ?? ''));
        $settle = substr(trim((string)($_POST['settle_ref'] ?? '')), 0, 160);
        if (strlen($oid) !== 64) api_out(['ok' => false, 'err' => 'bad order_id'], 400);
        // Pre-read for auth body qty (signatures bind amount). Remaining re-checked under lock.
        $chainPeek = read_chain();
        $ordersPeek = open_orders($chainPeek);
        $foundPeek = null;
        foreach ($ordersPeek as $o) if (($o['id'] ?? '') === $oid) { $foundPeek = $o; break; }
        if (!$foundPeek) api_out(['ok' => false, 'err' => 'order not open'], 404);
        // Bootstrap BUY/SELL are temp mid discovery only — never a free NSU faucet path.
        if (($foundPeek['kind'] ?? '') === 'bootstrap_spread') {
            api_out([
                'ok' => false,
                'err' => 'Bootstrap discovery quote — not fillable. Post your own order or take a real maker.',
                'kind' => 'bootstrap_spread',
            ], 400);
        }
        $maker = (string)($foundPeek['addr'] ?? '');
        if ($maker === $taker) api_out(['ok' => false, 'err' => 'self fill'], 400);
        $remPeek = $foundPeek['remaining'] ?? '0';
        $qty = $qtyH === '' ? $remPeek : parse_amt($qtyH);
        if ($qty === null || dec_cmp($qty, '1') < 0) api_out(['ok' => false, 'err' => 'bad amount'], 400);
        if (dec_cmp($qty, $remPeek) > 0) api_out(['ok' => false, 'err' => 'over remaining', 'remaining_fmt' => fmt_amt($remPeek)], 400);
        $pair = strtoupper((string)($foundPeek['pair'] ?? ''));
        $side = (string)($foundPeek['side'] ?? '');
        $ts = (int)($_POST['ts'] ?? 0);
        if ($ts < 1) {
            $ts = time();
        } elseif (abs($ts - time()) > 600) {
            api_out(['ok' => false, 'err' => 'clock skew — refresh and retry'], 400);
        }
        $nonce = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['nonce'] ?? ''))) ?? '';
        if (strlen($nonce) < 8) {
            $nonce = bin2hex(random_bytes(8));
        }
        $memo = 'fill:' . substr($oid, 0, 12);
        $tx = null;
        $txAuth = null;
        if (str_starts_with($pair, 'NSU')) {
            if ($side === 'sell') {
                $from = $maker; $to = $taker;
            } elseif ($side === 'buy') {
                $from = $taker; $to = $maker;
            } else {
                api_out(['ok' => false, 'err' => 'side'], 400);
            }
            $tbody = implode('|', ['transfer', '1', $from, $to, $qty, $nonce, (string)$ts, $memo]);
            // For sell: maker already authorized via open sell order sig.
            // For buy: taker spends — ECDSA or browser HMAC on transfer body (signed before lock).
            if ($side === 'sell') {
                $tx = [
                    'type' => 'transfer', 'ver' => 1, 'from' => $maker, 'to' => $taker,
                    'amount' => $qty, 'amount_fmt' => fmt_amt($qty),
                    'nonce' => $nonce, 'ts' => $ts, 'memo' => $memo,
                    'sig' => $foundPeek['sig'] ?? '',
                    'auth' => 'open_sell_order',
                    'order_id' => $oid,
                ];
            } else {
                // ECDSA: require dedicated tx_ecdsa_sig (do not reuse fill ecdsa_sig).
                $txEcdsaOverride = !empty($actor['ecdsa'])
                    ? strtolower(preg_replace('/[^a-f0-9]/', '', (string)($_POST['tx_ecdsa_sig'] ?? '')) ?? '')
                    : null;
                $txAuth = nst_auth_sig($actor, $tbody, 'tx_client_sig', $txEcdsaOverride);
                $tx = [
                    'type' => 'transfer', 'ver' => 1, 'from' => $taker, 'to' => $maker,
                    'amount' => $qty, 'amount_fmt' => fmt_amt($qty),
                    'nonce' => $nonce, 'ts' => $ts, 'memo' => $memo,
                    'sig' => $txAuth['sig'],
                    'sig_mode' => $txAuth['sig_mode'],
                    'auth' => $txAuth['sig_mode'] === 'ecdsa_p256_v1' ? 'taker_ecdsa' : 'taker_seed',
                    'order_id' => $oid,
                ];
                if ($txAuth['sig_mode'] === 'ecdsa_p256_v1' && $txAuth['pubkey'] !== '') {
                    $tx['pubkey'] = $txAuth['pubkey'];
                }
            }
        }
        $fbody = implode('|', ['fill', '1', $oid, $maker, $taker, $qty, $settle, (string)$ts]);
        $fillAuth = nst_auth_sig($actor, $fbody);
        $sigMode = $fillAuth['sig_mode'];

        $fillOut = nst_with_chain_lock(function (array $chain, callable $append) use (
            $oid, $taker, $maker, $qty, $settle, $ts, $pair, $side, $tx, $fillAuth, $sigMode, $nonce
        ) {
            $orders = open_orders($chain);
            $found = null;
            foreach ($orders as $o) if (($o['id'] ?? '') === $oid) { $found = $o; break; }
            if (!$found) {
                return ['ok' => false, 'http' => 404, 'err' => 'order not open'];
            }
            if (($found['kind'] ?? '') === 'bootstrap_spread') {
                return [
                    'ok' => false,
                    'http' => 400,
                    'err' => 'Bootstrap discovery quote — not fillable. Post your own order or take a real maker.',
                    'kind' => 'bootstrap_spread',
                ];
            }
            if ((string)($found['addr'] ?? '') !== $maker) {
                return ['ok' => false, 'http' => 400, 'err' => 'order changed — refresh book'];
            }
            if ((string)($found['side'] ?? '') !== $side || strtoupper((string)($found['pair'] ?? '')) !== $pair) {
                return ['ok' => false, 'http' => 400, 'err' => 'order changed — refresh book'];
            }
            $rem = $found['remaining'] ?? '0';
            if (dec_cmp($qty, $rem) > 0) {
                return ['ok' => false, 'http' => 400, 'err' => 'over remaining', 'remaining_fmt' => fmt_amt($rem)];
            }
            // Reject identical fill packet replay (sell leg has no client-bound nonce on fill body).
            foreach ($chain as $r) {
                if (($r['type'] ?? '') !== 'fill') continue;
                if (($r['order_id'] ?? '') !== $oid) continue;
                if (($r['taker'] ?? '') !== $taker) continue;
                if ((int)($r['ts'] ?? 0) !== $ts) continue;
                if (dec_norm((string)($r['amount'] ?? '0')) !== dec_norm($qty)) continue;
                return ['ok' => false, 'http' => 400, 'err' => 'fill replay — refresh book'];
            }
            $txRow = $tx;
            if (str_starts_with($pair, 'NSU')) {
                $bal = balances($chain);
                if ($side === 'sell') {
                    $have = $bal[$maker] ?? '0';
                    if (dec_cmp($have, $qty) < 0) {
                        return ['ok' => false, 'http' => 400, 'err' => 'maker lacks NSU'];
                    }
                } elseif ($side === 'buy') {
                    $av = available_nsu($bal, $chain, $taker);
                    if (dec_cmp($av, $qty) < 0) {
                        return ['ok' => false, 'http' => 400, 'err' => 'insufficient available NSU', 'available_fmt' => fmt_amt($av)];
                    }
                }
                // Same nonce uniqueness as transfer API (buy-leg replay must not re-spend).
                if ($txRow) {
                    $txFrom = (string)($txRow['from'] ?? '');
                    $txNonce = (string)($txRow['nonce'] ?? $nonce);
                    if ($txFrom !== '' && $txNonce !== '') {
                        foreach ($chain as $r) {
                            if (($r['type'] ?? '') === 'transfer' && ($r['from'] ?? '') === $txFrom && ($r['nonce'] ?? '') === $txNonce) {
                                return ['ok' => false, 'http' => 400, 'err' => 'nonce replay'];
                            }
                        }
                    }
                    // Refresh sell-order sig from live row under lock (maker re-auth not required).
                    if ($side === 'sell') {
                        $txRow['sig'] = $found['sig'] ?? ($txRow['sig'] ?? '');
                    }
                    if (!$append($txRow)) {
                        return ['ok' => false, 'http' => 500, 'err' => 'disk tx'];
                    }
                }
            }
            $fill = [
                'type' => 'fill', 'ver' => 1, 'order_id' => $oid,
                'maker' => $maker, 'taker' => $taker,
                'side' => $side, 'pair' => $pair,
                'amount' => $qty, 'amount_fmt' => fmt_amt($qty),
                'price' => $found['price'] ?? '0', 'price_fmt' => $found['price_fmt'] ?? '',
                'settle_ref' => $settle,
                'ts' => $ts,
                'taker_sig' => $fillAuth['sig'],
                'sig_mode' => $sigMode,
            ];
            if ($sigMode === 'ecdsa_p256_v1' && $fillAuth['pubkey'] !== '') {
                $fill['pubkey'] = $fillAuth['pubkey'];
            }
            if (!$append($fill)) {
                return ['ok' => false, 'http' => 500, 'err' => 'disk fill'];
            }
            return [
                'ok' => true,
                'fill' => $fill,
                'transfer' => $txRow,
                'sig_mode' => $sigMode,
                'seed_on_wire' => $fillAuth['seed_on_wire'],
            ];
        });
        if ($fillOut === null) {
            api_out(['ok' => false, 'err' => 'disk fill'], 500);
        }
        if (empty($fillOut['ok'])) {
            $http = (int)($fillOut['http'] ?? 400);
            unset($fillOut['http']);
            api_out($fillOut, $http);
        }
        // Money-adjacent server_notice: AFTER fill commits, OUTSIDE chain lock, fail-open.
        try {
            if (is_array($fillOut['fill'] ?? null)) {
                nst_inbox_notify_fill($fillOut['fill']);
            }
        } catch (Throwable $e) {
            // never abort a committed fill
        }
        api_out($fillOut);
    }

    if ($api === 'reputation' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        $actor = nst_actor('rater');
        $rater = $actor['addr'];
        $rated = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['rated'] ?? '')));
        $score = (int)($_POST['score'] ?? 0);
        $ctx = substr(trim((string)($_POST['context'] ?? '')), 0, 160);
        if (strlen($rated) !== 64) api_out(['ok' => false, 'err' => 'bad rated'], 400);
        if ($rated === $rater) api_out(['ok' => false, 'err' => 'self'], 400);
        if ($score < -10 || $score > 10) api_out(['ok' => false, 'err' => 'score -10..10'], 400);
        $ts = (int)($_POST['ts'] ?? 0);
        if ($ts < 1) {
            $ts = time();
        } elseif (abs($ts - time()) > 600) {
            api_out(['ok' => false, 'err' => 'clock skew — refresh and retry'], 400);
        }
        $body = implode('|', ['reputation', '1', $rater, $rated, (string)$score, $ctx, (string)$ts]);
        $auth = nst_auth_sig($actor, $body);
        $sigMode = $auth['sig_mode'];
        $row = [
            'type' => 'reputation', 'ver' => 1,
            'rater' => $rater, 'rated' => $rated,
            'score' => $score, 'context' => $ctx, 'ts' => $ts,
            'sig' => $auth['sig'],
            'sig_mode' => $sigMode,
        ];
        if ($sigMode === 'ecdsa_p256_v1' && $auth['pubkey'] !== '') {
            $row['pubkey'] = $auth['pubkey'];
        }
        if (!append_row($row)) api_out(['ok' => false, 'err' => 'disk'], 500);
        $scores = rep_scores(read_chain());
        api_out([
            'ok' => true,
            'edge' => $row,
            'rated_total' => $scores[$rated] ?? 0,
            'sig_mode' => $sigMode,
            'seed_on_wire' => $auth['seed_on_wire'],
        ]);
    }

    if ($api === 'audit') {
        $n = max(1, min(500, (int)($_GET['n'] ?? 100)));
        $chain = read_chain();
        $rep = nst_conservation_check_and_maybe_freeze($chain);
        api_out([
            'ok' => true,
            'n' => count($chain),
            'tail' => array_slice($chain, -$n),
            'conservation' => [
                'ok' => !empty($rep['ok']),
                'frozen' => !empty($rep['frozen']) || nst_conservation_is_frozen(),
                'sum_fmt' => fmt_amt((string)$rep['observed_sum']),
                'expected_fmt' => fmt_amt((string)$rep['expected_issued']),
                'checked_ts' => (int)$rep['checked_ts'],
                'int_ok' => !empty($rep['int_ok']),
                'detail' => $rep['detail'] ?? null,
            ],
        ]);
    }

    if ($api === 'conservation') {
        $chain = read_chain();
        $force = ((string)($_GET['force'] ?? $_POST['force'] ?? '1') !== '0');
        $rep = $force
            ? nst_conservation_check_and_maybe_freeze($chain)
            : null;
        if ($rep === null) {
            $snap = nst_conservation_boot_check($chain, false);
            api_out(['ok' => true, 'conservation' => nst_conservation_public_view($snap)]);
        }
        api_out([
            'ok' => true,
            'conservation' => [
                'ok' => !empty($rep['ok']),
                'frozen' => !empty($rep['frozen']) || nst_conservation_is_frozen(),
                'sum_fmt' => fmt_amt((string)$rep['observed_sum']),
                'expected_fmt' => fmt_amt((string)$rep['expected_issued']),
                'checked_ts' => (int)$rep['checked_ts'],
                'int_ok' => !empty($rep['int_ok']),
                'detail' => $rep['detail'] ?? null,
                'freeze_path_basename' => 'conservation.freeze.json',
            ],
        ]);
    }

    if ($api === 'selfhash') {
        api_out([
            'ok' => true,
            'version' => NST_VERSION,
            'sha256' => @hash_file('sha256', __FILE__) ?: null,
            'file' => basename(__FILE__),
        ]);
    }

    /* ---- Operator console (key-combo UI + password; secrets in data/*.txt) ---- */
    if ($api === 'admin_status') {
        $eStat = load_economy();
        $opStat = strtolower(trim((string)($eStat['operator_addr'] ?? '')));
        $rentedStat = !empty($eStat['rented']) && $opStat !== '' && $opStat !== strtolower($taddr);
        api_out([
            'ok' => true,
            'admin_pass_set' => admin_pass_is_set(),
            'site' => 'trade',
            'version' => NST_VERSION,
            'epoch' => epoch_info(),
            'mods_count' => count(load_mods()),
            'treasury_addr' => $taddr,
            'treasury_bal_fmt' => fmt_amt($bal[$taddr] ?? '0'),
            'chain_len' => count($chain),
            'rented' => $rentedStat,
            'operator_addr' => $opStat !== '' ? $opStat : $taddr,
            'lord_rent_grant' => 'retired',
            'lord_rent_credit_legacy' => null,
            'rent_quote_api' => 'rent_quote',
            'rent_quote_get_api' => 'rent_quote_get',
            'rent_settle_api' => 'rent_settle',
            'rent_quotes_durable' => true,
            'rent_settle' => 'transfer_memo_first_paid_wins',
            'rent_nsu_per_day' => (int)NST_RENT_NSU_PER_DAY,
            'lord_rent_formula' => [
                'status' => 'retired_grant_path',
                'law' => 'rent is payment TO treasury (NSU_VIABILITY_V1); ?api=rent_quote live; pay-bind settle next',
                'nsu_per_day' => (int)NST_RENT_NSU_PER_DAY,
                'faucet_start_nsu_narrative' => NST_KING_FAUCET_START_NSU,
            ],
            'last_epoch_profit_fmt' => fmt_amt((string)($eStat['last_epoch_profit_micros'] ?? '0')),
            'panel_door' => 'E3: trade panel site.seed or KING treasury (owner) or LORD operator_addr; faucet=KING only; legacy admin.pass.hash migrate only',
        ]);
    }

    if ($api === 'admin_setup' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        if (admin_pass_is_set()) {
            api_out(['ok' => false, 'err' => 'already set - use admin_login'], 400);
        }
        // KING-only: LORD must not mint a panel password that looks like operator authority.
        // Seed exists at genesis — no unauthenticated land-grab of the legacy password door.
        $seed = (string)($_POST['seed'] ?? '');
        if ($seed === '' || !treasury_seed_ok($seed)) {
            api_out(['ok' => false, 'err' => 'admin auth'], 401);
        }
        $pass = (string)($_POST['admin_pass'] ?? '');
        admin_pass_set($pass, true);
        // No absolute vault path on first-setup response (filesystem paths stay off unauth JSON).
        // Auth'd admin_login may still return the operator path hint for controlpanel.
        api_out([
            'ok' => true,
            'msg' => 'hash in data/admin.pass.hash; clear password also written to vault/ (operator only); password unlocks panel only — faucet is treasury seed',
        ]);
    }

    if ($api === 'admin_login' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        require_admin();
        $e = load_economy();
        $mid = book_mid_micros($chain);
        api_out([
            'ok' => true,
            'msg' => 'ok',
            'epoch' => epoch_info(),
            'mods_count' => count(load_mods()),
            'treasury_addr' => $taddr,
            'treasury_bal_fmt' => fmt_amt($bal[$taddr] ?? '0'),
            'chain_len' => count($chain),
            'vault_hint' => vault_dir(),
            'site' => 'trade',
            'version' => NST_VERSION,
            'economy' => [
                'profit_fmt' => fmt_amt((string)($e['profit_micros'] ?? '0')),
                'ad_bid_fmt' => fmt_amt((string)($e['ad_bid_micros'] ?? '0')),
                'donate_k' => (string)($e['donate_k'] ?? NST_DONATE_K),
                'value_note' => (string)($e['value_note'] ?? ''),
                'value_authority' => 'this_server_owner',
                'mirrors_role' => 'free_tributaries',
                'mid_fmt' => $mid !== null ? fmt_amt($mid) : null,
                'bids_n' => is_array($e['bids'] ?? null) ? count($e['bids']) : 0,
            ],
            'donate_addrs' => [
                'btc' => NST_DONATE_BTC,
                'xmr' => NST_DONATE_XMR,
                'ltc' => NST_DONATE_LTC,
            ],
        ]);
    }

    /** Renter sets local NSU value policy (k + public note). Not a global peg. Mirrors do not inherit. */
    if ($api === 'admin_set_value' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        require_admin();
        $e = load_economy();
        $k = trim((string)($_POST['donate_k'] ?? ''));
        if ($k !== '') {
            if (!preg_match('/^\d+(\.\d{1,8})?$/', $k) || (float)$k <= 0) {
                api_out(['ok' => false, 'err' => 'donate_k must be positive number'], 400);
            }
            $e['donate_k'] = $k;
        }
        if (array_key_exists('value_note', $_POST)) {
            $note = trim((string)$_POST['value_note']);
            if (strlen($note) > 240) $note = substr($note, 0, 240);
            $e['value_note'] = $note;
        }
        save_economy($e);
        api_out([
            'ok' => true,
            'msg' => 'local value policy saved - this server owner only; mirrors stay free tributaries',
            'donate_k' => (string)($e['donate_k'] ?? NST_DONATE_K),
            'value_note' => (string)($e['value_note'] ?? ''),
            'value_authority' => 'this_server_owner',
            'mirrors_role' => 'free_tributaries',
        ]);
    }

    if ($api === 'admin_change_pass' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        // KING-only rotate: LORD cannot re-key a password door (even though faucet is seed-only).
        require_faucet_auth();
        $new = (string)($_POST['new_pass'] ?? '');
        admin_pass_set($new, true);
        api_out(['ok' => true, 'msg' => 'password rotated; vault updated if writable; password is panel migrate only — not faucet']);
    }

    if ($api === 'admin_reveal' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        // KING / legacy only — LORD must never receive treasury.secret (CONTRACT §3).
        require_faucet_auth();
        global $TFILE, $MODS_FILE, $META, $CHAIN, $ADMIN_HASH_FILE;
        api_out([
            'ok' => true,
            'admin_pass' => null, // cleartext only in vault/ for root pull
            'admin_pass_note' => 'Legacy clear password may be in vault/ADMIN_PASSWORD.txt (root pull). Product door is site seed.',
            'treasury_secret' => treasury_secret(),
            'treasury_addr' => $taddr,
            'vault_dir' => vault_dir(),
            'paths' => [
                'admin_hash' => basename($ADMIN_HASH_FILE),
                'treasury_secret' => basename($TFILE),
                'modifiers' => basename($MODS_FILE),
                'meta' => basename($META),
                'chain' => basename($CHAIN),
            ],
            'note' => 'KING faucet material. Renters never receive this. OS root stays SSH. Host compromise = game over for this crop.',
        ]);
    }

    // Renter utter control: read/replace THIS index.php (app god-mode, not OS root)
    if ($api === 'admin_get_source' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        require_admin();
        $raw = (string)file_get_contents(__FILE__);
        api_out([
            'ok' => true,
            'bytes' => strlen($raw),
            'sha256' => hash('sha256', $raw),
            'source' => $raw,
            'warning' => 'Saving a broken file can kill this site until SSH restore.',
        ]);
    }
    if ($api === 'admin_put_source' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        require_admin();
        $src = (string)($_POST['source'] ?? '');
        if (strlen($src) < 100) api_out(['ok' => false, 'err' => 'source too short'], 400);
        if (strpos($src, '<?php') === false) api_out(['ok' => false, 'err' => 'must look like PHP'], 400);
        $bak = __FILE__ . '.bak.' . time();
        @copy(__FILE__, $bak);
        if (file_put_contents(__FILE__, $src, LOCK_EX) === false) {
            api_out(['ok' => false, 'err' => 'write failed - check perms'], 500);
        }
        api_out([
            'ok' => true,
            'msg' => 'index.php replaced',
            'backup' => basename($bak),
            'sha256' => hash('sha256', $src),
            'bytes' => strlen($src),
        ]);
    }

    if ($api === 'admin_pay' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        // Free-form treasury pay = KING faucet authority (not LORD panel seed alone).
        require_faucet_auth();
        $to = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['to'] ?? '')));
        $micros = parse_amt(trim((string)($_POST['amount'] ?? '')));
        $memo = substr(trim((string)($_POST['memo'] ?? 'admin:pay')), 0, 120);
        if (strlen($to) !== 64) api_out(['ok' => false, 'err' => 'bad to'], 400);
        if ($micros === null || dec_cmp($micros, '1') < 0) api_out(['ok' => false, 'err' => 'bad amount'], 400);
        $sec = treasury_secret();
        $from = addr_from_seed($sec);
        $ts = time();
        $nonce = bin2hex(random_bytes(8));
        $body = implode('|', ['transfer', '1', $from, $to, $micros, $nonce, (string)$ts, $memo]);
        $row = [
            'type' => 'transfer', 'ver' => 1, 'from' => $from, 'to' => $to,
            'amount' => $micros, 'amount_fmt' => fmt_amt($micros),
            'nonce' => $nonce, 'ts' => $ts, 'memo' => $memo,
            'sig' => mac_sign($sec, $body), 'kind' => 'admin_pay',
        ];
        $payOut = nst_with_chain_lock(function (array $chain, callable $append) use ($from, $to, $micros, $nonce, $row) {
            foreach ($chain as $r) {
                if (($r['type'] ?? '') === 'transfer' && ($r['from'] ?? '') === $from && ($r['nonce'] ?? '') === $nonce) {
                    return ['ok' => false, 'http' => 400, 'err' => 'nonce replay'];
                }
            }
            $bal = balances($chain);
            $have = $bal[$from] ?? '0';
            if (dec_cmp($have, $micros) < 0) {
                return ['ok' => false, 'http' => 400, 'err' => 'treasury insufficient', 'have_fmt' => fmt_amt($have)];
            }
            if (!$append($row)) {
                return ['ok' => false, 'http' => 500, 'err' => 'disk'];
            }
            return ['ok' => true, 'tx' => $row, 'treasury_bal_fmt' => fmt_amt(dec_sub($have, $micros))];
        });
        if ($payOut === null) {
            api_out(['ok' => false, 'err' => 'disk'], 500);
        }
        if (empty($payOut['ok'])) {
            $http = (int)($payOut['http'] ?? 400);
            unset($payOut['http']);
            api_out($payOut, $http);
        }
        api_out($payOut);
    }

    /**
     * OPERATOR_GO §4 / E2a: KING seeds real fillable SELL-ask ladder on the book.
     * Not free giveaway — visitors BUY by filling these asks (NOTE settle_ref off-chain).
     * Each treasury SELL auto-arms C2 half-BID. Lords cannot call (require_faucet_auth).
     */
    if ($api === 'admin_treasury_ladder' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        require_faucet_auth();
        // Pre-read treasury material OUTSIDE chain lock (deadlock law; same as C2 half-bid).
        $tsec = treasury_secret();
        $taddr = strtolower(addr_from_seed($tsec));
        $amtIn = trim((string)($_POST['amount'] ?? ''));
        $amtMicros = null;
        if ($amtIn !== '') {
            $amtMicros = parse_amt($amtIn);
            if ($amtMicros === null || dec_cmp($amtMicros, '1') < 0) {
                api_out(['ok' => false, 'err' => 'bad amount'], 400);
            }
        }
        $ladder = nst_treasury_ask_ladder($tsec, $taddr, $amtMicros);
        if (empty($ladder['ok'])) {
            $http = 400;
            $err = (string)($ladder['err'] ?? '');
            if ($err === 'disk' || str_contains($err, 'half-bid failed')) {
                $http = 500;
            }
            api_out($ladder, $http);
        }
        // Ladder half-BID notices: AFTER money/book writes, fail-open.
        try {
            $hbList = is_array($ladder['half_bids'] ?? null) ? $ladder['half_bids'] : [];
            $ordList = is_array($ladder['orders'] ?? null) ? $ladder['orders'] : [];
            foreach ($hbList as $i => $hb) {
                if (!is_array($hb)) continue;
                $sell = is_array($ordList[$i] ?? null) ? $ordList[$i] : null;
                nst_inbox_notify_half_bid($sell, $hb);
            }
        } catch (Throwable $e) {
            // never abort a committed ladder
        }
        api_out($ladder);
    }

    /** Credit a donate: gift NSU to addr (mid×k or direct), 50/50 profit/ad-bid accounting */
    if ($api === 'admin_donate_credit' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        // Donate gifts pull from treasury faucet — KING only (CONTRACT §3).
        require_faucet_auth();
        $to = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['to'] ?? '')));
        if (strlen($to) !== 64) api_out(['ok' => false, 'err' => 'bad to'], 400);
        $txid = substr(trim((string)($_POST['txid'] ?? '')), 0, 128);
        $asset = strtoupper(substr(trim((string)($_POST['asset'] ?? 'BTC')), 0, 16));
        $ext = trim((string)($_POST['ext_amount'] ?? ''));
        $direct = trim((string)($_POST['nsu_amount'] ?? ''));
        $e = load_economy();
        $k = (string)($e['donate_k'] ?? NST_DONATE_K);
        $mid = book_mid_micros(read_chain());
        if ($direct !== '') {
            $nsu = parse_amt($direct);
        } else {
            $nsu = donate_nsu_from_external($ext !== '' ? $ext : '0', $mid, $k);
        }
        if ($nsu === null || dec_cmp($nsu, '1') < 0) {
            api_out(['ok' => false, 'err' => 'bad amount', 'mid_fmt' => $mid !== null ? fmt_amt($mid) : null, 'k' => $k], 400);
        }
        $r = economy_credit_donate($to, $nsu, $txid, $asset, $ext !== '' ? $ext : $direct);
        if (empty($r['ok'])) api_out($r, isset($r['err']) && str_contains((string)$r['err'], 'treasury') ? 503 : 400);
        $r['mid_fmt'] = $mid !== null ? fmt_amt($mid) : null;
        $r['k'] = $k;
        api_out($r);
    }

    /** Extract profit pile → pay operator addr from treasury; reduce profit accounting */
    if ($api === 'admin_extract_profit' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        // Treasury debit = faucet authority (KING only). LORD spends funded wallet, never treasury.secret.
        require_faucet_auth();
        $to = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['to'] ?? '')));
        $micros = parse_amt(trim((string)($_POST['amount'] ?? '')));
        if (strlen($to) !== 64) api_out(['ok' => false, 'err' => 'bad to'], 400);
        if ($micros === null || dec_cmp($micros, '1') < 0) api_out(['ok' => false, 'err' => 'bad amount'], 400);
        $sec = treasury_secret();
        $from = addr_from_seed($sec);
        $ts = time();
        $nonce = bin2hex(random_bytes(8));
        $memo = 'profit:extract';
        $body = implode('|', ['transfer', '1', $from, $to, $micros, $nonce, (string)$ts, $memo]);
        $row = [
            'type' => 'transfer', 'ver' => 1, 'from' => $from, 'to' => $to,
            'amount' => $micros, 'amount_fmt' => fmt_amt($micros),
            'nonce' => $nonce, 'ts' => $ts, 'memo' => $memo,
            'sig' => mac_sign($sec, $body), 'kind' => 'profit_extract',
        ];
        // Chain lock covers treasury debit; re-load economy under lock so pile cannot double-extract.
        $exOut = nst_with_chain_lock(function (array $chain, callable $append) use ($from, $to, $micros, $nonce, $row) {
            $e = load_economy();
            $pile = (string)($e['profit_micros'] ?? '0');
            if (dec_cmp($pile, $micros) < 0) {
                return ['ok' => false, 'http' => 400, 'err' => 'profit pile too small', 'have_fmt' => fmt_amt($pile)];
            }
            foreach ($chain as $r) {
                if (($r['type'] ?? '') === 'transfer' && ($r['from'] ?? '') === $from && ($r['nonce'] ?? '') === $nonce) {
                    return ['ok' => false, 'http' => 400, 'err' => 'nonce replay'];
                }
            }
            $bal = balances($chain);
            $have = $bal[$from] ?? '0';
            if (dec_cmp($have, $micros) < 0) {
                return ['ok' => false, 'http' => 400, 'err' => 'treasury insufficient', 'have_fmt' => fmt_amt($have)];
            }
            if (!$append($row)) {
                return ['ok' => false, 'http' => 500, 'err' => 'disk'];
            }
            $e['profit_micros'] = dec_sub($pile, $micros);
            save_economy($e);
            return [
                'ok' => true,
                'tx' => $row,
                'profit_fmt' => fmt_amt((string)$e['profit_micros']),
                'treasury_bal_fmt' => fmt_amt(dec_sub($have, $micros)),
            ];
        });
        if ($exOut === null) {
            api_out(['ok' => false, 'err' => 'disk'], 500);
        }
        if (empty($exOut['ok'])) {
            $http = (int)($exOut['http'] ?? 400);
            unset($exOut['http']);
            api_out($exOut, $http);
        }
        api_out($exOut);
    }

    if ($api === 'economy') {
        $e = load_economy();
        $mid = book_mid_micros(read_chain());
        $active = array_values(array_filter($e['bids'] ?? [], fn($b) => !empty($b['active'])));
        $withCreative = 0;
        foreach ($active as $b) {
            if (!empty($b['creative_url']) || !empty($b['creative_file'])) $withCreative++;
        }
        api_out([
            'ok' => true,
            'profit_fmt' => fmt_amt((string)($e['profit_micros'] ?? '0')),
            'ad_bid_fmt' => fmt_amt((string)($e['ad_bid_micros'] ?? '0')),
            'donate_k' => (string)($e['donate_k'] ?? NST_DONATE_K),
            'mid_fmt' => $mid !== null ? fmt_amt($mid) : null,
            'epoch_n' => (int)(load_meta()['epoch_n'] ?? 1),
            'donate_addrs' => [
                'btc' => NST_DONATE_BTC,
                'xmr' => NST_DONATE_XMR,
                'ltc' => NST_DONATE_LTC,
            ],
            'active_bids' => $active,
            'bids_with_creative' => $withCreative,
        ]);
    }

    /** Public catalogue of in-file purpose brains (no secrets; ethos visibility). */
    if ($api === 'brains') {
        api_out([
            'ok' => true,
            'site' => 'trade',
            'version' => NST_VERSION,
            'doctrine' => 'tiny in-file specialists only; no external LLM APIs; fail open when unsure',
            'brains' => [
                ['id' => 'memo_risk', 'job' => 'scam tokens in transfer memos', 'mode' => 'soft flag'],
                ['id' => 'order_sanity', 'job' => 'side/amount/price sanity', 'mode' => 'soft flag'],
                ['id' => 'pair_sane', 'job' => 'book pair format NSU/NOTE…', 'mode' => 'soft flag'],
                ['id' => 'wipe_copy', 'job' => 'balances-only year wipe banner copy', 'mode' => 'coherence'],
                ['id' => 'ad_png', 'job' => 'PNG magic+IHDR geometry + byte budget', 'mode' => 'hard reject + soft flag'],
                ['id' => 'href_risk', 'job' => 'http(s) click-through schemes', 'mode' => 'hard scheme + soft phishing'],
                ['id' => 'year_wipe_rekey', 'job' => 'rotate panel password into vault on epoch roll', 'mode' => 'automatic'],
                ['id' => 'house_ads', 'job' => 'weighted house discovery when empty + luck slice', 'mode' => 'allotted random'],
                ['id' => 'bootstrap_spread', 'job' => 'loose BUY@0.5/SELL@1.5 around 1.0 if zero open orders', 'mode' => 'seed discovery only'],
                ['id' => 'panel_seed', 'job' => 'controlpanel unlock via site wallet seed (treasury)', 'mode' => 'no recovery'],
            ],
            'contact' => NST_CONTACT_EMAIL,
            'ad_png_rules' => [
                'max_bytes' => NST_AD_MAX_PNG,
                'min_w' => NST_AD_MIN_W,
                'max_w' => NST_AD_MAX_W,
                'min_h' => NST_AD_MIN_H,
                'max_h' => NST_AD_MAX_H,
                'formats' => ['PNG only'],
            ],
            'wipe' => 'ONLY user wallet balances survive yearly wipe; profit/ads/orders burn',
        ]);
    }

    /** Weighted random creative for site-local adboard (paid bids + house discovery) */
    if ($api === 'ad_pick') {
        $b = ad_pick_weighted();
        if (!$b) {
            api_out(['ok' => true, 'empty' => true, 'msg' => 'no creatives']);
        }
        $house = !empty($b['house']);
        $img = null;
        if (!$house && !empty($b['creative_url'])) {
            $img = ['type' => 'url', 'src' => $b['creative_url']];
        } elseif (!$house && !empty($b['creative_file'])) {
            $img = ['type' => 'api', 'src' => '?api=ad_img&id=' . urlencode((string)$b['id']) . '&v=' . (int)($b['creative_ts'] ?? 0)];
        }
        $pngBrain = $b['png_brain'] ?? null;
        api_out([
            'ok' => true,
            'empty' => false,
            'house' => $house,
            'label' => $b['label'] ?? '',
            'bid_id' => $b['id'] ?? '',
            'stake_fmt' => $house ? 'house' : ($b['stake_fmt'] ?? fmt_amt((string)($b['stake_micros'] ?? '0'))),
            'img' => $img,
            'href' => $b['href'] ?? '',
            'png_w' => $b['png_w'] ?? ($pngBrain['w'] ?? null),
            'png_h' => $b['png_h'] ?? ($pngBrain['h'] ?? null),
            'png_bytes' => $b['png_bytes'] ?? ($pngBrain['bytes'] ?? null),
            'png_flag' => !empty($pngBrain['flag']),
            'png_notes' => $pngBrain['notes'] ?? [],
            'recruit' => NST_CONTACT_EMAIL,
        ]);
    }

    if ($api === 'ad_img') {
        $id = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_GET['id'] ?? '')));
        if (strlen($id) < 16) {
            http_response_code(404);
            exit;
        }
        $path = ads_dir() . DIRECTORY_SEPARATOR . $id . '.png';
        if (!is_file($path)) {
            http_response_code(404);
            exit;
        }
        header('Content-Type: image/png');
        header('Cache-Control: public, max-age=300');
        readfile($path);
        exit;
    }

    /** Attach creative to a bid (URL and/or PNG base64). Site-local board only. */
    if ($api === 'admin_ad_creative' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        nst_require_writes_unfrozen();
        require_admin();
        $id = preg_replace('/[^a-f0-9]/', '', strtolower((string)($_POST['bid_id'] ?? '')));
        $url = trim((string)($_POST['creative_url'] ?? ''));
        $href = trim((string)($_POST['href'] ?? ''));
        $b64 = (string)($_POST['png_base64'] ?? '');
        if (strlen($id) < 16) api_out(['ok' => false, 'err' => 'bad bid_id'], 400);
        $brains = [];
        if ($href !== '') {
            $hrefBrain = nst_brain_href_risk($href);
            $brains['href_risk'] = $hrefBrain;
            if (empty($hrefBrain['ok'])) {
                api_out(['ok' => false, 'err' => (string)($hrefBrain['err'] ?? 'bad href'), 'brains' => $brains], 400);
            }
        }
        if ($url !== '') {
            $urlBrain = nst_brain_href_risk($url);
            $brains['creative_url'] = $urlBrain;
            if (empty($urlBrain['ok'])) {
                api_out(['ok' => false, 'err' => (string)($urlBrain['err'] ?? 'bad creative_url'), 'brains' => $brains], 400);
            }
        }
        $pngMeta = null;
        $e = load_economy();
        $found = false;
        foreach ($e['bids'] as &$b) {
            if (($b['id'] ?? '') !== $id) continue;
            $found = true;
            if ($url !== '') {
                $b['creative_url'] = substr($url, 0, 500);
            }
            if ($href !== '') {
                $b['href'] = substr($href, 0, 500);
                if (!empty($brains['href_risk']['flag'])) {
                    $b['href_flag'] = $brains['href_risk'];
                }
            }
            if ($b64 !== '') {
                if (str_starts_with($b64, 'data:image/png;base64,')) {
                    $b64 = substr($b64, strlen('data:image/png;base64,'));
                } elseif (str_starts_with($b64, 'data:image/')) {
                    api_out(['ok' => false, 'err' => 'PNG only (no JPEG/GIF/WebP data URLs)', 'brains' => $brains], 400);
                }
                $bin = base64_decode($b64, true);
                if ($bin === false) {
                    api_out(['ok' => false, 'err' => 'bad base64', 'brains' => $brains], 400);
                }
                $pngBrain = nst_brain_ad_png($bin);
                $brains['ad_png'] = $pngBrain;
                if (empty($pngBrain['ok'])) {
                    api_out(['ok' => false, 'err' => (string)($pngBrain['err'] ?? 'png reject'), 'brains' => $brains], 400);
                }
                $dir = ads_dir();
                $fp = $dir . DIRECTORY_SEPARATOR . $id . '.png';
                if (file_put_contents($fp, $bin, LOCK_EX) === false) {
                    api_out(['ok' => false, 'err' => 'disk ad', 'brains' => $brains], 500);
                }
                @chmod($fp, 0644);
                $b['creative_file'] = $id . '.png';
                $b['png_w'] = $pngBrain['w'] ?? null;
                $b['png_h'] = $pngBrain['h'] ?? null;
                $b['png_bytes'] = $pngBrain['bytes'] ?? strlen($bin);
                $b['png_brain'] = $pngBrain;
                $pngMeta = $pngBrain;
                // prefer local file over url when both set
            }
            $b['creative_ts'] = time();
            break;
        }
        unset($b);
        if (!$found) api_out(['ok' => false, 'err' => 'bid not found', 'brains' => $brains], 404);
        save_economy($e);
        $msg = 'creative set';
        if ($pngMeta && !empty($pngMeta['flag'])) {
            $msg .= ' (soft flag: ' . implode(',', $pngMeta['notes'] ?? []) . ')';
        }
        api_out(['ok' => true, 'msg' => $msg, 'bid_id' => $id, 'png' => $pngMeta, 'brains' => $brains]);
    }

    if ($api === 'admin_backup' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        require_admin();
        $wantSecrets = !empty($_POST['include_secrets']);
        if ($wantSecrets) {
            // treasury.secret in export is KING-only (CONTRACT §3).
            require_faucet_auth();
        }
        $chain = read_chain();
        $mods = load_mods();
        $meta = load_meta();
        api_out([
            'ok' => true,
            'version' => NST_VERSION,
            'exported_ts' => time(),
            'meta' => $meta,
            'epoch' => epoch_info(),
            'mods' => $mods,
            'chain_len' => count($chain),
            'chain' => $chain,
            'treasury_addr' => $taddr,
            'include_secrets' => $wantSecrets,
            'treasury_secret' => $wantSecrets ? treasury_secret() : null,
            'admin_pass' => null,
            'admin_pass_note' => 'product door is site seed; legacy clear password only in vault/ if ever set',
        ]);
    }

    /**
     * Public rent quote (P3a+P3b / NSU_VIABILITY E3 quote half).
     * GET or POST ?api=rent_quote&site=trade|com|… — no auth, no chain write, no bind.
     * Persists open quote to data/rent_quotes.json under flock (P3b).
     */
    if ($api === 'rent_quote') {
        $siteQ = (string)($_GET['site'] ?? $_POST['site'] ?? $_REQUEST['site'] ?? 'trade');
        $q = nst_rent_quote_public($siteQ, $taddr);
        $http = (int)($q['http'] ?? 200);
        unset($q['http']);
        api_out($q, $http > 0 ? $http : 200);
    }

    /**
     * Lookup durable quote (P3b). Open or paid.
     * GET ?api=rent_quote_get&quote_id=
     */
    if ($api === 'rent_quote_get') {
        $qid = (string)($_GET['quote_id'] ?? $_POST['quote_id'] ?? $_REQUEST['quote_id'] ?? '');
        $row = nst_rent_quote_get($qid);
        if ($row === null) {
            api_out(['ok' => false, 'err' => 'quote not found or expired', 'settle' => false], 404);
        }
        api_out([
            'ok' => true,
            'quote' => $row,
            'durable' => true,
            'paid' => ((string)($row['status'] ?? '') === 'paid'),
            'law' => 'Lookup only — pay via transfer to treasury with exact memo+amount.',
        ]);
    }

    /**
     * P3c: settle rent from chain evidence (scan transfers). Optional quote_id filter.
     * GET|POST ?api=rent_settle&quote_id=  — no auth; first-paid-wins already on transfer path.
     */
    if ($api === 'rent_settle') {
        $qidS = (string)($_GET['quote_id'] ?? $_POST['quote_id'] ?? $_REQUEST['quote_id'] ?? '');
        $scan = nst_rent_settle_scan($qidS !== '' ? $qidS : null);
        api_out($scan, !empty($scan['settled']) ? 200 : 200);
    }

    /** Rent grant path retired — always 410 after KING auth. No treasury credit. */
    if ($api === 'admin_rent_claim' && $_SERVER['REQUEST_METHOD'] === 'POST') {
        require_faucet_auth();
        api_out([
            'ok' => false,
            'err' => 'rent grant path retired',
            'law' => 'Rent is payment TO treasury only (not a grant FROM faucet). '
                . 'Server no longer spawns LORD seeds or credits renters from treasury. '
                . 'Public quotes: ?api=rent_quote&site=… (durable) · settle/bind still next residual.',
            'lord_rent_grant' => 'retired',
            'next' => 'rent_quote durable (live) · pay-bind settle (not shipped)',
        ], 410);
    }

    api_out(['ok' => false, 'err' => 'unknown api'], 404);
}

/* -------- /controlpanel — site wallet seed unlock (no recovery) -------- */
ensure_genesis();
$wantPanel = isset($_GET['controlpanel'])
    || (isset($_SERVER['REQUEST_URI']) && preg_match('#/controlpanel/?(\?|$)#', (string)$_SERVER['REQUEST_URI']));
if ($wantPanel && (string)($_GET['api'] ?? $_POST['api'] ?? '') === '') {
    header('Content-Type: text/html; charset=UTF-8');
    header('X-Content-Type-Options: nosniff');
    header('Cache-Control: no-store');
    $v = NST_VERSION;
    $panelSeed = '';
    $unlocked = false;
    $loginErr = '';
    // POST seed → derive addr; unlock if treasury (owner) or economy.operator_addr (rent later)
    if (strtoupper((string)($_SERVER['REQUEST_METHOD'] ?? 'GET')) === 'POST') {
        $panelSeed = norm_seed((string)($_POST['seed'] ?? ''));
        if ($panelSeed === '') {
            $loginErr = 'Paste this site\'s wallet seed (12 words). No recovery.';
        } elseif (!panel_seed_ok($panelSeed)) {
            $loginErr = 'Seed does not unlock this site panel (must match site wallet / treasury).';
            $panelSeed = '';
        } else {
            $unlocked = true;
        }
    }
    $esc = static function (string $s): string {
        return htmlspecialchars($s, ENT_QUOTES, 'UTF-8');
    };
    echo '<!DOCTYPE html><html data-ns-site="trade" lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1">';
    echo '<title>Trade Control Panel</title><style>';
    echo 'body{margin:0;background:#0a0800;color:#fff;font-family:Arial,Helvetica,sans-serif;border-top:4px solid #c80}';
    echo '.wrap{max-width:960px;margin:0 auto;padding:16px}h1{font-size:18px;letter-spacing:1px;text-transform:uppercase;color:#fc6}';
    echo 'input,textarea{width:100%;box-sizing:border-box;background:#0a0a0a;color:#fff;border:1px solid #c80;padding:10px;margin:6px 0;font-family:Consolas,monospace}';
    echo 'textarea{min-height:100px;font-size:13px}textarea#src{min-height:280px;font-size:11px}';
    echo 'button{background:#532;color:#fff;border:1px solid #fc6;padding:10px 14px;cursor:pointer;margin:4px 4px 4px 0;text-transform:uppercase}';
    echo 'button.d{background:#400}.msg{margin:8px 0;padding:10px;border:1px solid #444;font-size:13px}';
    echo '.ok{border-color:#2a6}.err{border-color:#a33}.warn{border-color:#a60;background:rgba(80,40,0,.3)}';
    echo '.stat{display:flex;justify-content:space-between;border-bottom:1px solid #543;padding:4px 0;font-size:13px}';
    echo '.dna{font-size:11px;letter-spacing:2px;color:#c80;margin:0 0 8px;text-transform:uppercase}';
    echo '#panel{display:' . ($unlocked ? 'block' : 'none') . '}#loginBox{display:' . ($unlocked ? 'none' : 'block') . '}</style></head><body><div class="wrap">';
    echo '<p class="dna">DNA · TRADE · NSU rails · orange burn</p>';
    echo '<h1>Nosignup.Trade · Control Panel</h1>';
    echo '<p class="warn msg"><b>Paste this site\'s operator seed (no recovery).</b> Fresh genesis: panel = <code>data/site.seed</code> (not mint); KING faucet = <code>data/treasury.secret</code> (only minter). '
        . 'After public rent pay (visitor pays treasury exact quote), <b>payer key</b> becomes LORD for the epoch — no server-spawned LORD seed. '
        . 'UTTER control of THIS crop (including replacing this file). Not OS root. '
        . 'Genesis supply lives in treasury (24_000_000 NSU KING faucet). '
        . 'Renters must not receive treasury secret. Yearly wipe: ONLY user balances survive; book re-seeds loose bootstrap spread; superstructure burns.</p>';
    echo '<div id="loginBox"><form method="post" action="?controlpanel=1" autocomplete="off">';
    echo '<label for="seedIn">Site operator seed (12 words · U7 panel door)</label>';
    echo '<textarea id="seedIn" name="seed" rows="3" placeholder="paste 12 words" required></textarea>';
    echo '<button type="submit">Unlock panel</button>';
    if ($loginErr !== '') {
        echo '<div class="msg err">' . $esc($loginErr) . '</div>';
    }
    echo '</form><p class="msg" style="font-size:12px;opacity:.85">Panel: <code>data/site.seed</code> + vault <code>SITE_WALLET_SEED.txt</code>. KING (mint only): <code>data/treasury.secret</code> + vault <code>KING_FAUCET_SEED.txt</code>. After rent: LORD = payer key (economy.operator_addr). No recovery desk. No password product path.</p></div>';
    echo '<div id="panel"><div class="stat"><span>Version</span><span id="pVer">-</span></div>';
    echo '<div class="stat"><span>Treasury (master faucet)</span><span id="pTbal">-</span></div>';
    echo '<div class="stat"><span>Profit pile</span><span id="pProfit">-</span></div>';
    echo '<div class="stat"><span>Ad bid stake</span><span id="pAd">-</span></div>';
    echo '<div class="stat"><span>Book mid / k</span><span id="pMid">-</span></div>';
    echo '<div class="stat"><span>Value note</span><span id="pValNote" style="max-width:55%;text-align:right">-</span></div>';
    echo '<div class="stat"><span>Chain / epoch</span><span id="pMeta">-</span></div>';
    echo '<div class="stat"><span>Vault hint</span><span id="pVault" class="mono" style="word-break:break-all">-</span></div>';
    echo '<p class="msg" style="font-size:12px"><button type="button" id="btnLock">Lock panel (clear seed from memory)</button></p>';
    echo '<h2>NSU value (this server owner only)</h2>';
    echo '<p class="warn msg" style="font-size:12px"><b>Value authority = you (owner of THIS crop).</b> Set donate <code>k</code> (gift ≈ external÷mid×k) and a public value note. <b>Mirrors are free tributaries</b> — no value authority. Market P = book mid; donate buyback arms at P/2.</p>';
    echo '<input id="valK" placeholder="donate k (e.g. 1)"><input id="valNote" placeholder="public value note (max 240 chars)">';
    echo '<button type="button" id="btnVal">Save local value policy</button><div id="valMsg" class="msg"></div>';
    echo '<h2>Year-end wipe checklist (operator)</h2>';
    echo '<p class="warn msg" style="font-size:12px">ONLY wallet balances survive. Profit/ads/orders burn. Site wallet seed does NOT rotate (still your paper). Bootstrap book re-seeds if empty. Tick boxes local only.</p>';
    echo '<div id="yeCheck" style="font-size:13px;line-height:1.75;border:1px solid #444;padding:10px;margin:8px 0">';
    echo '<label><input type="checkbox" data-ye="backup"> Download ledger JSON backup before epoch boundary</label><br>';
    echo '<label><input type="checkbox" data-ye="extract"> Extract any profit you still need (pile burns)</label><br>';
    echo '<label><input type="checkbox" data-ye="ads"> Expect ad creatives/bids to vanish at wipe</label><br>';
    echo '<label><input type="checkbox" data-ye="orders"> Warn users open orders cancel at wipe</label><br>';
    echo '<label><input type="checkbox" data-ye="seed"> Confirm site wallet seed still offline (no recovery)</label><br>';
    echo '<label><input type="checkbox" data-ye="hubs"> Spot-check hub strips still say balances-only</label><br>';
    echo '<label><input type="checkbox" data-ye="early"> Note early drip window (first 30 days)</label></div>';
    echo '<button type="button" id="btnYeClear">Clear checklist (local only)</button>';
    echo '<h2>Rent / LORD (grant path retired · quote live)</h2>';
    echo '<p class="warn msg" style="font-size:12px"><b>RETIRED:</b> treasury→LORD market grant + server-spawned LORD seed are <b>gone</b> (atomic P2). '
        . '<b>P3a–c live:</b> <code>?api=rent_quote</code> · durable store · pay treasury with exact memo+amount · '
        . 'first-paid-wins binds <code>operator_addr</code> to <b>payer key</b> (no server LORD seed). '
        . 'Lookup <code>rent_quote_get</code> · rescan <code>rent_settle</code>. '
        . 'Failed rent pays (wrong amount / already paid / expired / …) <b>auto-refund</b> to payer (P3d). '
        . 'Faucet start narrative still <b>' . (int)NST_KING_FAUCET_START_NSU . ' NSU</b>. Renters never mint. '
        . '<b>Never email treasury.secret.</b></p>';
    echo '<button type="button" id="btnRentClaim" disabled title="Grant path retired">Claim rent (retired — use rent_quote + pay next)</button>';
    echo '<div id="rentMsg" class="msg">Grant path retired · try ?api=rent_quote&amp;site=trade (no settle yet)</div>';
    echo '<pre id="rentSeedBox" class="msg" style="display:none;white-space:pre-wrap;word-break:break-word;font-size:12px"></pre>';
    echo '<div id="rentCheck" style="font-size:13px;line-height:1.75;border:1px solid #444;padding:10px;margin:8px 0">';
    echo '<label><input type="checkbox" data-rent="paid"> NSU rent payment TO treasury noted offline (P3)</label><br>';
    echo '<label><input type="checkbox" data-rent="opseed"> LORD key = payer key (no server seed ceremony)</label><br>';
    echo '<label><input type="checkbox" data-rent="opaddr"> operator_addr bind only after valid pay (P3)</label><br>';
    echo '<label><input type="checkbox" data-rent="deliver"> No recovery desk promised</label><br>';
    echo '<label><input type="checkbox" data-rent="nomint"> Renter confirmed: cannot mint; master faucet stays KING</label><br>';
    echo '<label><input type="checkbox" data-rent="ads"> Ads + value policy (k/note) explained as site-local only</label><br>';
    echo '<label><input type="checkbox" data-rent="wipe"> Yearly wipe: balances-only; leases void</label><br>';
    echo '<label><input type="checkbox" data-rent="vault"> Vault/ root-only; web never serves vault/</label></div>';
    echo '<button type="button" id="btnRentClear">Clear rent checklist (local only)</button>';
    echo '<h2>Credit donate → NSU gift (50/50 split)</h2>';
    echo '<p style="font-size:12px;opacity:.85">Gifts NSU from treasury master faucet (nsu_amount OR ext_amount÷mid×k), then 50% profit / 50% ad-bid + buyback at P/2. Free faucet claims do not use this path.</p>';
    echo '<input id="donTo" placeholder="recipient 64-hex addr"><input id="donNsu" placeholder="NSU amount (direct, optional)">';
    echo '<input id="donExt" placeholder="external amount if using mid (optional)"><input id="donTx" placeholder="txid / honor ref">';
    echo '<input id="donAsset" value="BTC" placeholder="asset"><button type="button" id="btnDon">Credit donate gift</button><div id="donMsg" class="msg"></div>';
    echo '<h2>Extract profit</h2><input id="exTo" placeholder="operator 64-hex"><input id="exAmt" placeholder="amount NSU">';
    echo '<button type="button" id="btnEx">Extract from profit pile</button><div id="exMsg" class="msg"></div>';
    echo '<h2>Ad creative (site-local weighted board)</h2>';
    echo '<p style="font-size:12px;opacity:.85">PNG only. Max ' . NST_AD_MAX_PNG . 'b · ' . NST_AD_MIN_W . '-' . NST_AD_MAX_W . '×' . NST_AD_MIN_H . '-' . NST_AD_MAX_H . ' px. House discovery fills empty boards. Invite: ' . $esc(NST_CONTACT_EMAIL) . '</p>';
    echo '<input id="adBid" placeholder="bid id (hex)"><input id="adUrl" placeholder="https://… creative URL (optional)">';
    echo '<input id="adHref" placeholder="click-through https://… (optional)"><textarea id="adPng" placeholder="PNG only: data:image/png;base64,… or raw base64" style="min-height:80px"></textarea>';
    echo '<button type="button" id="btnAd">Set creative</button><div id="adMsg" class="msg"></div>';
    echo '<h2>Treasury pay (master faucet)</h2><input id="payTo" placeholder="to addr 64-hex"><input id="payAmt" placeholder="amount NSU"><input id="payMemo" value="admin:pay">';
    echo '<button type="button" id="btnPay">Pay</button><div id="payMsg" class="msg"></div>';
    echo '<h2>Source (utter control)</h2><p style="font-size:12px;opacity:.8">Load → edit → save replaces this site file. Broken save can kill the site until SSH restore from .bak.</p>';
    echo '<button type="button" id="btnLoad">Load source</button><button type="button" class="d" id="btnSave">Save source</button>';
    echo '<div id="srcMsg" class="msg"></div><textarea id="src" spellcheck="false"></textarea>';
    echo '<h2>Sealed wallet inbox (KING · experimental)</h2>';
    echo '<p class="warn msg" style="font-size:12px"><b>Mail ≠ mint.</b> KING hand-seal = true client-encrypt E2E path. Auto fill/half-BID/rent notices = server-composed public facts (encrypted for delivery, NOT private E2E). '
        . 'Server stores <b>opaque ciphertext only</b> — paste plaintext only in this browser; encryption runs client-side when WebCrypto works. '
        . 'Not social mail. Not proven e2e. Blobs burn at yearly wipe / TTL.</p>';
    echo '<input id="inboxTo" placeholder="recipient 64-hex addr"><textarea id="inboxNote" placeholder="short sealed note (max ~400 chars)" style="min-height:70px"></textarea>';
    echo '<button type="button" id="btnInboxSeal">Seal note to addr</button><div id="inboxMsg" class="msg"></div>';
    echo '<h2>Backup</h2><button type="button" id="btnBak">Download ledger JSON</button>';
    echo '<p style="margin-top:20px"><a href="./" style="color:#8cf">← back to trade</a></p></div></div>';
    // Seed stays in memory for API auth only after successful POST unlock (not echoed into form).
    echo '<script>(function(){var S=' . ($unlocked ? j($panelSeed) : 'null') . ';function $(i){return document.getElementById(i)}';
    echo 'function msg(id,ok,t){var e=$(id);if(!e)return;e.className="msg "+(ok?"ok":"err");e.textContent=t}';
    echo 'async function api(name,data){var b=new URLSearchParams();b.set("api",name);if(S)b.set("seed",S);if(data)Object.keys(data).forEach(function(k){b.set(k,data[k])});';
    echo 'return (await fetch("?api="+encodeURIComponent(name),{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:b.toString()})).json()}';
    echo 'function fillEcon(r){var e=r.economy||{};$("pProfit").textContent=(e.profit_fmt||"0")+" NSU";$("pAd").textContent=(e.ad_bid_fmt||"0")+" NSU";';
    echo '$("pMid").textContent=(e.mid_fmt!=null?("mid "+e.mid_fmt):"mid -")+" · k="+(e.donate_k||"1");';
    echo 'var vn=e.value_note||"";if($("pValNote"))$("pValNote").textContent=vn||"(none - optional public note)";if($("valK")&&!$("valK").dataset.touched)$("valK").value=e.donate_k||"1";if($("valNote")&&!$("valNote").dataset.touched)$("valNote").value=vn}';
    echo 'if($("valK"))$("valK").oninput=function(){this.dataset.touched="1"};if($("valNote"))$("valNote").oninput=function(){this.dataset.touched="1"};';
    echo 'if($("btnVal"))$("btnVal").onclick=async function(){var r=await api("admin_set_value",{donate_k:$("valK").value.trim(),value_note:$("valNote").value.trim()});msg("valMsg",!!r.ok,r.ok?(r.msg+" k="+r.donate_k):(r.err||"fail"));if(r.ok){fillEcon({economy:{donate_k:r.donate_k,value_note:r.value_note,profit_fmt:$("pProfit").textContent.replace(/ NSU$/,""),ad_bid_fmt:$("pAd").textContent.replace(/ NSU$/,"")}})}};';
    echo 'var YE="nst_ye_check_v1";function yeLoad(){var s={};try{s=JSON.parse(localStorage.getItem(YE)||"{}")||{}}catch(e){}document.querySelectorAll("#yeCheck input[data-ye]").forEach(function(el){el.checked=!!s[el.getAttribute("data-ye")];el.onchange=function(){var o={};try{o=JSON.parse(localStorage.getItem(YE)||"{}")||{}}catch(e){}o[el.getAttribute("data-ye")]=el.checked;try{localStorage.setItem(YE,JSON.stringify(o))}catch(e){}}})}';
    echo 'var RC="nst_rent_check_v1";function rentLoad(){var s={};try{s=JSON.parse(localStorage.getItem(RC)||"{}")||{}}catch(e){}document.querySelectorAll("#rentCheck input[data-rent]").forEach(function(el){el.checked=!!s[el.getAttribute("data-rent")];el.onchange=function(){var o={};try{o=JSON.parse(localStorage.getItem(RC)||"{}")||{}}catch(e){}o[el.getAttribute("data-rent")]=el.checked;try{localStorage.setItem(RC,JSON.stringify(o))}catch(e){}}})}';
    echo 'async function afterLogin(r){$("panel").style.display="block";$("loginBox").style.display="none";$("pVer").textContent=r.version||"' . $v . '";';
    echo '$("pTbal").textContent=(r.treasury_bal_fmt||"-")+" NSU";var ep=r.epoch||{};$("pMeta").textContent="len "+(r.chain_len||"?")+" · epoch #"+(ep.epoch_n||"?");';
    echo '$("pVault").textContent=r.vault_hint||"-";fillEcon(r);yeLoad();rentLoad()}';
    echo 'if($("btnLock"))$("btnLock").onclick=function(){S=null;location.href="?controlpanel=1"};';
    echo 'if($("btnDon"))$("btnDon").onclick=async function(){var r=await api("admin_donate_credit",{to:$("donTo").value.trim(),nsu_amount:$("donNsu").value.trim(),ext_amount:$("donExt").value.trim(),txid:$("donTx").value.trim(),asset:$("donAsset").value.trim()||"BTC"});';
    echo 'msg("donMsg",!!r.ok,r.ok?("gift "+r.gift_fmt+" · profit +"+r.profit_fmt+" · ad +"+r.ad_bid_fmt):(r.err||"fail"));if(r.ok&&r.economy){fillEcon({economy:r.economy})}};';
    echo 'if($("btnEx"))$("btnEx").onclick=async function(){var r=await api("admin_extract_profit",{to:$("exTo").value.trim(),amount:$("exAmt").value.trim()});msg("exMsg",!!r.ok,r.ok?("left profit "+r.profit_fmt):(r.err||"fail"));if(r.ok)$("pProfit").textContent=r.profit_fmt+" NSU"};';
    echo 'if($("btnAd"))$("btnAd").onclick=async function(){var r=await api("admin_ad_creative",{bid_id:$("adBid").value.trim(),creative_url:$("adUrl").value.trim(),href:$("adHref").value.trim(),png_base64:$("adPng").value.trim()});var extra="";if(r.ok&&r.png)extra=" · "+r.png.w+"x"+r.png.h+" "+r.png.bytes+"b"+(r.png.flag?" FLAG:"+((r.png.notes||[]).join(",")||"y"):"");msg("adMsg",!!r.ok,r.ok?(r.msg+extra):(r.err||"fail"))};';
    echo 'if($("btnPay"))$("btnPay").onclick=async function(){var r=await api("admin_pay",{to:$("payTo").value.trim(),amount:$("payAmt").value.trim(),memo:$("payMemo").value.trim()});msg("payMsg",!!r.ok,r.ok?("paid treasury now "+r.treasury_bal_fmt):(r.err||"fail"))};';
    echo 'if($("btnLoad"))$("btnLoad").onclick=async function(){var r=await api("admin_get_source");msg("srcMsg",!!r.ok,r.ok?("loaded "+r.bytes+"b sha "+(r.sha256||"").slice(0,16)):(r.err||"fail"));if(r.ok)$("src").value=r.source};';
    echo 'if($("btnSave"))$("btnSave").onclick=async function(){if(!confirm("Replace site file? Keep SSH backup ready."))return;var r=await api("admin_put_source",{source:$("src").value});msg("srcMsg",!!r.ok,r.ok?(r.msg+" bak="+r.backup):(r.err||"fail"))};';
    echo 'async function inboxBufHex(buf){return Array.from(new Uint8Array(buf)).map(function(x){return("0"+x.toString(16)).slice(-2)}).join("")}'
    . 'function inboxHexBuf(hex){var u=new Uint8Array((hex||"").length/2);for(var i=0;i<u.length;i++)u[i]=parseInt(hex.substr(i*2,2),16);return u.buffer}'
    . 'async function inboxSealClient(to,note){'
    . 'if(!window.crypto||!crypto.subtle)throw new Error("WebCrypto required for client-side seal");'
    . 'var meta=await (await fetch("?api=inbox_enc_pubkey&addr="+encodeURIComponent(to))).json();'
    . 'if(!meta.ok)throw new Error(meta.err||"no enc pubkey");'
    . 'var their=await crypto.subtle.importKey("spki",inboxHexBuf(meta.enc_pubkey),{name:"ECDH",namedCurve:"P-256"},false,[]);'
    . 'var eph=await crypto.subtle.generateKey({name:"ECDH",namedCurve:"P-256"},true,["deriveBits"]);'
    . 'var bits=await crypto.subtle.deriveBits({name:"ECDH",public:their},eph.privateKey,256);'
    . 'var hk=await crypto.subtle.importKey("raw",bits,"HKDF",false,["deriveKey"]);'
    . 'var aes=await crypto.subtle.deriveKey({name:"HKDF",hash:"SHA-256",salt:new Uint8Array(0),info:new TextEncoder().encode("nsu-inbox-v1")},hk,{name:"AES-GCM",length:256},false,["encrypt"]);'
    . 'var iv=crypto.getRandomValues(new Uint8Array(12));'
    . 'var ct=await crypto.subtle.encrypt({name:"AES-GCM",iv:iv},aes,new TextEncoder().encode(String(note).slice(0,400)));'
    . 'var ephPub=await crypto.subtle.exportKey("spki",eph.publicKey);'
    . 'return {eph_pub:await inboxBufHex(ephPub),iv:await inboxBufHex(iv),ct:await inboxBufHex(ct)};'
    . '}'
    . 'if($("btnInboxSeal"))$("btnInboxSeal").onclick=async function(){'
    . 'try{var to=$("inboxTo").value.trim().toLowerCase().replace(/[^a-f0-9]/g,"");var note=$("inboxNote").value;'
    . 'if(to.length!==64){msg("inboxMsg",false,"bad recipient addr");return}'
    . 'if(!note||!String(note).trim()){msg("inboxMsg",false,"empty note");return}'
    . 'var sealed=await inboxSealClient(to,note);'
    . 'var ts=Math.floor(Date.now()/1000);var id=await inboxBufHex(crypto.getRandomValues(new Uint8Array(8)));'
    . 'var r=await api("inbox_seal",{to:to,id:id,ts:String(ts),ttl:String(604800),eph_pub:sealed.eph_pub,iv:sealed.iv,ct:sealed.ct,sig_mode:"server_mac"});'
    . 'msg("inboxMsg",!!r.ok,r.ok?("sealed id="+r.id+" exp="+r.exp+" · "+(r.honesty||"ciphertext only")):(r.err||"fail"));'
    . 'if(r.ok)$("inboxNote").value="";'
    . '}catch(e){msg("inboxMsg",false,String(e.message||e))}};'
    . 'if($("btnBak"))$("btnBak").onclick=async function(){var r=await api("admin_backup",{});if(!r.ok){alert(r.err||"fail");return}var a=document.createElement("a");a.href=URL.createObjectURL(new Blob([JSON.stringify(r,null,2)],{type:"application/json"}));a.download="nst-backup-"+Date.now()+".json";a.click()};';
    echo 'if($("btnYeClear"))$("btnYeClear").onclick=function(){try{localStorage.removeItem(YE)}catch(e){}document.querySelectorAll("#yeCheck input[data-ye]").forEach(function(el){el.checked=false})};';
    echo 'if($("btnRentClear"))$("btnRentClear").onclick=function(){try{localStorage.removeItem(RC)}catch(e){}document.querySelectorAll("#rentCheck input[data-rent]").forEach(function(el){el.checked=false})};';
    echo 'if($("btnRentClaim"))$("btnRentClaim").onclick=async function(){var r=await api("admin_rent_claim",{});var box=$("rentSeedBox");if(box)box.style.display="none";';
    echo 'msg("rentMsg",false,(r&&r.err)?r.err:"rent grant path retired");};';
    if ($unlocked) {
        echo 'api("admin_login",{}).then(function(r){if(r&&r.ok)afterLogin(r);else msg("valMsg",false,r&&r.err?r.err:"auth fail")});';
    }
    echo '})();</script></body></html>';
    exit;
}

/* -------- HTML -------- */
// ensure_genesis already called for panel path; safe again
ensure_genesis();
$chainSsr = read_chain();
$taddr = treasury_addr();
$tbal = fmt_amt(balances($chainSsr)[$taddr] ?? '0');
// E2 conservation boot (HTML): honor freeze; recheck if stale
$nstConserveSnap = nst_conservation_boot_check($chainSsr, false);
$nstConservePub = nst_conservation_public_view($nstConserveSnap);
$nstFrozen = !empty($nstConservePub['frozen']);
// SSR market P + buyback P/2 (same helpers as ?api=state) so strip is honest before JS
$ssrP = book_mid_micros($chainSsr);
$ssrP2 = nst_buyback_price_micros($chainSsr);
$ssrP_fmt = $ssrP !== null ? fmt_amt($ssrP) : '-';
$ssrP2_fmt = $ssrP2 !== null ? fmt_amt($ssrP2) : '-';
$ssrBoot = false;
foreach (open_orders($chainSsr) as $oSsr) {
    if (($oSsr['kind'] ?? '') === 'bootstrap_spread') {
        $ssrBoot = true;
        break;
    }
}
$selfHash = @hash_file('sha256', __FILE__) ?: 'unavailable';
header('Content-Type: text/html; charset=UTF-8');
header('X-Content-Type-Options: nosniff');
header('Cache-Control: no-store');
?><!DOCTYPE html>
<html data-ns-site="trade" data-ns-ver="<?= htmlspecialchars(NST_VERSION) ?>" lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Nosignup.Trade</title>
<style>
/* TRADE-QOL3 layout: simple mobile · Send/Receive split · no donate · fit-viewport + modals · Alcor buy/sell */
body { margin:0; min-height:100dvh; height:100%; background:#000; color:#fff; font-family:system-ui,-apple-system,Segoe UI,Arial,Helvetica,sans-serif; box-sizing:border-box; }
*,*::before,*::after{box-sizing:border-box}
@keyframes slideInUp{from{transform:translateY(4%)}to{transform:none}}
@keyframes slideInRight{from{opacity:.4}to{opacity:1}}
@keyframes slideInLeft{from{opacity:.4}to{opacity:1}}

/* Slim sticky header */
.TopMenu{
  position:fixed; top:0; left:0; width:100%; z-index:20; background:#000;
  border-bottom:1px solid #fff; animation:slideInLeft .45s ease-out;
  display:flex; flex-direction:column;
}
.top-status{
  display:flex; gap:clamp(6px,1.5vw,12px); align-items:center; justify-content:space-between;
  padding:clamp(6px,1.2vh,10px) clamp(8px,2vw,14px); font-size:clamp(11px,2.4vmin,13px); flex-wrap:wrap;
}
.top-status .brand{display:flex;flex-direction:column;gap:2px;min-width:0}
.top-status .brand strong{letter-spacing:1px;text-transform:uppercase;font-size:clamp(13px,2.8vmin,16px)}
.top-status .brand .tag{opacity:.72;font-size:clamp(10px,2.2vmin,12px)}
.top-tools{display:flex;gap:6px;flex-wrap:wrap;align-items:center}
.top-tools button,.hdr-btn{
  min-height:40px; padding:6px 10px; border:1px solid rgba(255,255,255,.45); border-radius:8px;
  background:rgba(255,255,255,.05); color:#e8eef6; font-weight:800; font-size:clamp(11px,2.4vmin,13px);
  cursor:pointer; letter-spacing:.03em;
}
.top-tools button:hover,.hdr-btn:hover{background:rgba(255,255,255,.12);border-color:#ffcc55}
.epoch-pill{
  border:1px solid rgba(255,204,85,.55); color:#fc6; background:rgba(60,35,0,.45);
  padding:4px 10px; border-radius:999px; font-size:clamp(10px,2.2vmin,12px); font-weight:800; white-space:nowrap;
}

/* Legacy market-row class (TRADE-QOL2: full market tools moved into Trade book .tab-market) */
.market-row{
  display:flex; flex-wrap:wrap; gap:clamp(6px,1.2vw,12px); align-items:center;
  padding:clamp(4px,1vh,8px) clamp(8px,2vw,14px); border-top:1px solid #333;
  font-size:clamp(11px,2.3vmin,13px); background:rgba(12,12,18,.9);
}
.market-row .mk{display:flex;gap:6px;align-items:baseline;white-space:nowrap}
.market-row .mk b{color:#ffcc55}
.market-row .search-wrap{flex:1 1 180px; min-width:min(100%,160px); display:flex; gap:6px}
.market-row .search-input{
  flex:1; min-height:36px; font-size:clamp(13px,2.6vmin,16px); border:1px solid #555; border-radius:8px;
  background:#0a0a0a; color:#fff; padding:0 10px;
}
.market-row .search-button{
  min-height:36px; min-width:72px; background:#333; border:1px solid #666; border-radius:8px;
  color:#fff; font-size:13px; cursor:pointer; padding:0 12px;
}
.market-row .search-button:hover{background:#555}

/* Legacy class hooks kept for JS-free fallbacks */
.TopMenuSearchInputContainer{display:none}
.TopMenuSearchOutputContainer{display:none}
.value-strip{display:none} /* moved into Options */

/* TRADE-FIX: desktop stage/column max-width so content is a card, not full-bleed sprawl */
@media (min-width:900px){
  .hm-body{
    max-width:min(720px,100%);
    width:100%;
    margin-left:auto;
    margin-right:auto;
  }
  .top-status{
    max-width:min(720px,100%);
    margin-left:auto;
    margin-right:auto;
    width:100%;
  }
  /* Book / SR / wallet columns stay within stage card */
  .wallet-primary,.book-wrap-qol3,.sr-pane,.recv-card,.send-form{
    max-width:100%;
  }
  .book-actions .btn,.qol3-row .btn{
    /* prevent absurd flat full-width primary actions on ultra-wide */
    max-width:100%;
  }
}
/* TRADE-QOL2: stage = normal-flow single active tab (NO absolute overlay bleed) */
.MiddleMenu{
  position:fixed; left:0; right:0; top:var(--hdr-h, 4.5rem); bottom:calc(var(--tab-h, 3.4rem) + var(--foot-h, 3.2rem));
  border:none; animation:slideInRight .4s ease-out; z-index:3; background:#000;
  display:flex; flex-direction:column; padding:0; overflow:hidden;
}
/* Wallet stats live INSIDE Wallet tab — not a persistent sibling behind panels */
.stage-stats{
  display:flex; flex-wrap:wrap; gap:4px 12px; padding:8px 0 10px; margin:0 0 10px;
  border-bottom:1px solid #333;
  font-size:clamp(11px,2.2vmin,13px); background:transparent; flex-shrink:0;
}
.stage-stats .stat{border:none;padding:2px 0;flex:1 1 40%;min-width:140px;border-bottom:1px solid #333}
#midMsg{padding:0 10px;flex-shrink:0}
/* Slim always-visible market P in header (context); full market tools live in Trade book */
.price-pill{
  border:1px solid rgba(255,204,85,.4); color:#ffcc55; background:rgba(40,28,0,.4);
  padding:4px 10px; border-radius:999px; font-size:clamp(10px,2.2vmin,12px); font-weight:800; white-space:nowrap;
}
.price-pill .muted{color:rgba(255,255,255,.55);font-weight:600;margin-right:4px}
.tab-market{
  display:flex; flex-wrap:wrap; gap:clamp(6px,1.2vw,12px); align-items:center;
  padding:8px 0 10px; margin:0 0 10px; border-bottom:1px solid #333;
  font-size:clamp(11px,2.3vmin,13px);
}
.tab-market .mk{display:flex;gap:6px;align-items:baseline;white-space:nowrap}
.tab-market .mk b{color:#ffcc55}
.tab-market .search-wrap{flex:1 1 180px; min-width:min(100%,160px); display:flex; gap:6px}
.tab-market .search-input{
  flex:1; min-height:36px; font-size:clamp(13px,2.6vmin,16px); border:1px solid #555; border-radius:8px;
  background:#0a0a0a; color:#fff; padding:0 10px;
}
.tab-market .search-button{
  min-height:36px; min-width:72px; background:#333; border:1px solid #666; border-radius:8px;
  color:#fff; font-size:13px; cursor:pointer; padding:0 12px;
}
.tab-market .search-button:hover{background:#555}
.wallet-coach{margin:0 0 10px}

/* Tab bar — always one active; no collapse */
.BottomMenu{
  position:fixed; left:0; right:0; bottom:var(--foot-h, 3.2rem); width:100%; height:var(--tab-h, 3.4rem); min-height:48px;
  border-top:1px solid #fff; border-bottom:1px solid #333; animation:slideInUp .4s ease-out; z-index:30;
  display:flex; margin:0; padding:0; background:#000;
}
.MenuButtonContainer{
  width:33.33%; height:100%; border-right:1px solid #fff; position:relative;
}
.MenuButtonContainer:last-child{border-right:none}
.RadioToggle{position:absolute; opacity:0; pointer-events:none}
.label1,.label2,.label3{
  position:absolute; inset:0; cursor:pointer; display:flex; align-items:center; justify-content:center;
  font-size:clamp(12px,2.8vmin,15px); font-weight:bold; text-transform:uppercase; letter-spacing:1px;
  text-shadow:1px 1px 0 #000;
}
.label1{background:rgba(179,0,0,.55)}
.label2{background:rgba(0,128,0,.55)}
.label3{background:rgba(0,0,200,.55)}
.label1:hover{background:rgba(179,0,0,.75)}
.label2:hover{background:rgba(0,128,0,.75)}
.label3:hover{background:rgba(0,0,200,.75)}
/* Active tab emphasis via body data-tab */
body[data-tab="1"] .label1{background:rgba(220,30,30,.85); box-shadow:inset 0 -3px 0 #fff}
body[data-tab="2"] .label2{background:rgba(20,160,40,.85); box-shadow:inset 0 -3px 0 #fff}
body[data-tab="3"] .label3{background:rgba(40,60,220,.85); box-shadow:inset 0 -3px 0 #fff}

/* TRADE-QOL3: tab panels NORMAL FLOW — one visible, fit viewport, NO main-tab scrollbar */
.HiddenMenu1,.HiddenMenu2,.HiddenMenu3{
  display:none; position:relative; inset:auto; z-index:auto;
  border:none; background:#000; flex-direction:column; overflow:hidden;
  flex:1 1 auto; min-height:0; width:100%; height:100%;
}
.HiddenMenu1.is-open,.HiddenMenu2.is-open,.HiddenMenu3.is-open,
#menu1.is-open,#menu2.is-open,#menu3.is-open{display:flex}
/* <!-- closed --> removed — one tab always open */
.CloseMenuButton1,.CloseMenuButton2,.CloseMenuButton3{display:none!important}
.hm-body{
  flex:1 1 auto; overflow:hidden; min-height:0; height:100%;
  padding:clamp(1.5%,2vmin,2.5%); border:none;
  display:flex; flex-direction:column; gap:clamp(4px,1vh,10px);
}
.hm-red{background:rgba(80,0,0,.28)}
.hm-green{background:rgba(0,50,0,.28)}
.hm-blue{background:rgba(0,0,60,.28)}
/* QOL3 primary actions — big targets, plain words */
.qol3-h2{margin:0;font-size:clamp(16px,4.2vmin,20px);letter-spacing:.04em;text-transform:uppercase}
.qol3-row{display:flex;flex-wrap:wrap;gap:clamp(6px,1.5vw,10px);align-items:stretch}
.qol3-row .btn{flex:1 1 40%;min-height:clamp(48px,8vh,56px);font-size:clamp(13px,3.2vmin,16px)}
.qol3-btn-max{flex:0 0 auto!important;min-width:clamp(64px,18vw,88px)!important}
.sr-toggle{display:flex;width:100%;border:1px solid #fff;border-radius:10px;overflow:hidden;flex-shrink:0}
.sr-toggle button{
  flex:1;min-height:clamp(44px,7.5vh,52px);border:0;background:rgba(255,255,255,.06);color:#ccc;
  font-weight:900;font-size:clamp(14px,3.4vmin,17px);letter-spacing:.04em;text-transform:uppercase;cursor:pointer;
}
.sr-toggle button.on{background:rgba(20,140,40,.75);color:#fff}
.sr-pane{display:none;flex:1 1 auto;min-height:0;overflow:hidden;flex-direction:column;gap:clamp(6px,1.2vh,12px)}
.sr-pane.on{display:flex}
.recv-card{
  flex:1;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:clamp(8px,1.5vh,14px);
  text-align:center;padding:clamp(8px,2vmin,16px);border:1px solid rgba(255,255,255,.35);border-radius:12px;
  background:rgba(0,40,0,.35);min-height:0;
}
.recv-label{font-size:clamp(12px,2.8vmin,14px);opacity:.85;letter-spacing:.06em;text-transform:uppercase}
.recv-addr{
  width:100%;font-family:ui-monospace,Consolas,monospace;font-size:clamp(14px,3.6vmin,18px);line-height:1.35;
  word-break:break-all;padding:clamp(10px,2vmin,16px);border:1px dashed #8f8;border-radius:10px;background:#0a120a;
  color:#cfc;min-height:clamp(52px,10vh,80px);display:flex;align-items:center;justify-content:center;
  cursor:pointer;-webkit-tap-highlight-color:rgba(140,255,140,.15);user-select:all;
}
.recv-addr:focus{outline:2px solid #8f8;outline-offset:2px}
.recv-addr:active{border-style:solid;background:#0e1a0e}
.recv-copy-msg{min-height:1.2em;font-size:clamp(12px,2.8vmin,14px);line-height:1.35;margin:0;color:#aaa}
.recv-copy-msg.ok{color:#8f8;font-weight:700}
.recv-copy-msg.err{color:#f88;font-weight:700}
#btnCopy.copy-ok{background:rgba(20,120,40,.75);border-color:#8f8}
.recv-nowallet{font-size:clamp(14px,3.4vmin,17px);line-height:1.4;color:#edc;max-width:36em}
.recv-nowallet b{color:#fff}
.send-form{display:flex;flex-direction:column;gap:clamp(4px,1vh,8px);flex:1;min-height:0;overflow:hidden}
.send-form label.f{margin:0}
.send-form input.f{min-height:clamp(44px,7vh,52px);font-size:clamp(15px,3.5vmin,18px)}
.send-confirm{
  display:none;flex-direction:column;gap:8px;padding:clamp(10px,2vmin,14px);
  border:1px solid #fc6;border-radius:10px;background:rgba(60,40,0,.45);
}
.send-confirm.on{display:flex}
.send-confirm .sc-line{font-size:clamp(14px,3.2vmin,16px);line-height:1.4;word-break:break-all}
.book-actions{display:flex;gap:clamp(6px,1.5vw,12px);flex-shrink:0}
.book-actions .btn{flex:1;min-height:clamp(52px,9vh,64px);font-size:clamp(16px,4vmin,20px);font-weight:950}
.book-actions .btn.buy-on{background:rgba(20,100,40,.85);border-color:#8f8}
.book-actions .btn.sell-on{background:rgba(120,30,20,.85);border-color:#f88}
.book-form{display:flex;flex-direction:column;gap:clamp(3px,.8vh,6px);flex-shrink:0}
.book-form input.f, .book-form select.f{min-height:clamp(40px,6.5vh,48px);font-size:clamp(14px,3.2vmin,16px)}
.book-wrap-qol3{
  flex:1 1 auto;min-height:0;overflow:hidden;margin:0;border:1px solid #333;border-radius:8px;
  display:flex;flex-direction:column;
}
.book-wrap-qol3 table{width:100%;font-size:clamp(11px,2.6vmin,13px)}
.book-wrap-qol3 thead{flex-shrink:0}
.book-wrap-qol3 tbody tr td{padding:clamp(6px,1.2vh,10px) 4px}
.wallet-primary{flex:1 1 auto;min-height:0;overflow:hidden;display:flex;flex-direction:column;gap:clamp(4px,1vh,8px)}
.wallet-primary .seed{font-size:clamp(13px,3vmin,16px);max-height:18vh;overflow:hidden}
.wallet-primary textarea.f{min-height:clamp(48px,8vh,64px);max-height:12vh}
.modal-tools-btn{min-height:clamp(44px,7vh,52px)!important;font-size:clamp(12px,2.8vmin,14px)!important}
/* entry tools = Options + Mirrors only (support modal removed from trade) */
.ns-entry-tools-2btn button:nth-child(1){left:0!important;width:47%!important}
.ns-entry-tools-2btn button:nth-child(2){left:53%!important;width:47%!important}
.ns-entry-tools-2btn button:nth-child(3){display:none!important}

/* Footer: demoted adboard (revenue, secondary) */
.site-footer{
  position:fixed; left:0; right:0; bottom:0; height:var(--foot-h, 3.2rem); min-height:48px; z-index:25;
  border-top:1px solid #333; background:#050508; display:flex; flex-direction:column; justify-content:center;
  padding:2px 8px; overflow:hidden;
}
.site-footer .ad-board{border:none;min-height:0;max-height:44px;background:transparent;padding:0}
.site-footer .ad-board img{max-height:36px}
.site-footer .ad-recruit{font-size:clamp(9px,1.8vmin,11px)!important;opacity:.45;margin:0!important;text-align:center}

/* TRADE-QOL2: panels stay relative/normal-flow inside stage (no overlay siblings) */
.MiddleMenu .HiddenMenu1,.MiddleMenu .HiddenMenu2,.MiddleMenu .HiddenMenu3{position:relative;z-index:auto}

label.f{display:block;margin:8px 0 4px;font-size:12px;opacity:.9}
input.f,textarea.f,select.f{
  width:100%; background:#0a0a0a; color:#fff; border:1px solid #fff; padding:10px;
  font-family:Consolas,monospace; font-size:14px;
}
textarea.f{min-height:64px}
.row{display:flex;flex-wrap:wrap;gap:8px;margin-top:10px}
.btn{
  background:#222; color:#fff; border:1px solid #fff; padding:clamp(10px,1.5vh,14px) clamp(12px,2vw,16px); cursor:pointer;
  font-size:clamp(13px,3vmin,16px); text-transform:uppercase; min-height:clamp(44px,7vh,52px); border-radius:8px;
}
.btn:hover{background:#444}
.btn.p{background:#143}
.btn.d{background:#400}
.seed{border:1px dashed #fff;padding:12px;margin:10px 0;font-family:Consolas,monospace;font-size:15px;line-height:1.5;word-spacing:.3em;background:#0d0d0d}
.ok,.err,.warn{padding:10px;margin:8px 0;font-size:13px}
.ok{border:1px solid #2a6;background:rgba(0,60,30,.4)}
.err{border:1px solid #a33;background:rgba(80,0,0,.4)}
.warn{border:1px solid #a60;background:rgba(80,40,0,.35)}
.mono{font-family:Consolas,monospace;font-size:12px;word-break:break-all}
.muted{opacity:.7;font-size:12px}
.stat{display:flex;justify-content:space-between;gap:8px;padding:4px 0;border-bottom:1px solid #333;font-size:13px}
table{width:100%;border-collapse:collapse;font-size:12px;font-family:Consolas,monospace}
th,td{border-bottom:1px solid #333;padding:5px 4px;text-align:left}
.badge{border:1px solid #fff;padding:2px 8px;font-size:11px}
.badge.on{background:#164}
/* .top-status redefined in TRADE-QOL shell */ .top-status-legacy{display:none}
.book-wrap{max-height:none;overflow:hidden} /* QOL3: primary book uses .book-wrap-qol3 */
.book-buy-strip{margin:0 0 8px;padding:10px 12px;border:1px solid rgba(255,204,85,.55);border-radius:8px;background:rgba(80,50,0,.35);font-size:clamp(12px,2.2vmin,14px);line-height:1.4;color:#f2e6c8}
.book-buy-strip strong{color:#ffcc55;letter-spacing:.02em}
.book-buy-strip.live{border-color:rgba(80,200,120,.55);background:rgba(0,50,30,.4);color:#d8f0e0}
.book-buy-strip.live strong{color:#8f8}
.book-buy-strip.empty{border-color:rgba(200,140,60,.5);background:rgba(60,35,0,.4)}
.book-buy-strip .bb-cta{display:inline-block;margin-top:6px}
.book-buy-strip button{min-height:44px}
.ad-board{
  border-bottom:1px solid #fff; min-height:52px; max-height:90px;
  display:flex; align-items:center; justify-content:center; gap:10px;
  background:rgba(20,20,40,.5); padding:4px 8px; overflow:hidden;
}
.ad-board img{max-height:80px; max-width:min(70vw,420px); object-fit:contain; border:1px solid #666}
.ad-board a{color:#8cf; font-size:11px}
.ad-board .ad-meta{font-size:10px; opacity:.7}
.ad-board.empty{font-size:11px; opacity:.55}
.ad-board a.ad-house{display:inline-block;padding:8px 12px;border:1px solid #c80;color:#fc6;text-decoration:none;font-size:12px;letter-spacing:.3px;max-width:min(90vw,480px)}
.ad-board a.ad-house:hover{background:rgba(200,128,0,.15);color:#fff}
.coach{
  border:1px solid #fff; padding:10px; margin:0 0 8px; background:rgba(20,40,20,.45);
  font-size:13px; line-height:1.45;
}
.coach .steps{margin:6px 0 0;padding:0;display:flex;flex-direction:column;gap:5px}
.coach .steps div{margin:0;padding:0}
.coach .risk{margin:6px 0 0;font-size:12px;opacity:.85;color:#edc}
.coach .cta{margin-top:8px}
.risk-1{font-size:12px;line-height:1.35;color:#edc;margin:0 0 10px}
.step-tag{display:inline-block;border:1px solid #fff;padding:1px 6px;margin-right:6px;font-size:11px}
.btn.big{font-size:clamp(15px,3.6vmin,18px);padding:clamp(12px,2vh,16px) clamp(14px,2vw,18px);width:100%;text-align:center;min-height:clamp(52px,9vh,64px)}
.pulse{animation:pulse 1.4s ease-in-out infinite}
@keyframes pulse{0%,100%{border-color:#fff}50%{border-color:#4a4}}
@media (prefers-reduced-motion:reduce){
  .TopMenu,.MiddleMenu,.BottomMenu{animation:none!important}
  .pulse{animation:none!important}
  .ns-entry-box{animation:none!important}
}
/* consent + how-to modal (wipe lives inside the box, not over the site) */
.modal-bg{
  display:none; position:fixed; inset:0; z-index:10000; background:rgba(0,0,0,.94);
  align-items:center; justify-content:center; padding:16px;
  -webkit-backdrop-filter:blur(8px); backdrop-filter:blur(8px);
}
.modal-bg.show{display:flex}
.modal-box{
  width:min(560px,100%); max-height:92vh; overflow:auto;
  background:linear-gradient(180deg,#120c00 0%,#000 50%);
  border:1px solid #fff; padding:0 0 18px; color:#fff;
  box-shadow:0 0 0 1px rgba(255,255,255,.25),0 28px 90px rgba(0,0,0,.9),0 0 50px rgba(200,128,0,.18);
  position:relative;
}
.modal-box::before{content:"";display:block;height:4px;background:linear-gradient(90deg,#c80,#fff,#c80)}
.modal-box .ns-gate-inner{padding:16px 18px 0}
.modal-box .ns-gate-kicker{margin:0 0 8px;font-size:10px;letter-spacing:2.2px;text-transform:uppercase;color:#c80}
/* Wipe honesty on coach wipe-line only — no chrome marquee strip. */
.coach .wipe-line{margin:6px 0 0;font-size:12px;line-height:1.4;color:#fc6;opacity:.95}
.coach .wipe-line b{color:#fff}
.value-strip,.opt-value-strip{font:clamp(12px,3.2vmin,14px)/1.35 Arial,Helvetica,sans-serif;padding:6px 10px;border:1px solid #333;border-radius:8px;background:rgba(40,20,0,.35);color:#edc;display:flex;flex-wrap:wrap;gap:8px 14px;align-items:center;margin:8px 0}
.value-strip b{color:#fc6;font-weight:700}
.value-strip .muted{opacity:.75}
.value-strip[hidden]{display:none}/* stage copy hidden; VALUE policy lives in Options (.opt-value-strip keeps flex) */
.modal-box h2{margin:0 0 10px;font-size:18px;text-transform:uppercase;letter-spacing:1.5px}
.modal-box h3{margin:14px 0 6px;font-size:12px;text-transform:uppercase;letter-spacing:1.5px;color:#c80}
.modal-box p{font-size:13px;line-height:1.5;margin:0 0 10px;color:#e8e8e8}
.modal-box ol.howto{margin:0 0 12px 18px;padding:0;font-size:14px;line-height:1.5}
.modal-box ol.howto li{margin:6px 0}
.modal-box .check{display:flex;gap:10px;align-items:flex-start;margin:12px 0;font-size:13px}
.modal-box .check input{margin-top:3px;width:18px;height:18px;flex-shrink:0;accent-color:#c80}
/* operator console (hidden until Ctrl+Alt+Shift+N) */
#adminConsole{
  display:none; position:fixed; inset:0; z-index:10001; background:rgba(0,0,0,.94);
  flex-direction:column; border:1px solid #fff;
}
#adminConsole.show{display:flex}
#adminConsole .ac-head{
  display:flex; align-items:center; gap:10px; padding:10px 12px;
  border-bottom:1px solid #fff; flex-shrink:0;
}
#adminConsole .ac-body{flex:1; overflow:auto; padding:12px}
#adminConsole .secret-box{
  border:1px dashed #a60; background:rgba(80,40,0,.25); padding:10px;
  font-family:Consolas,monospace; font-size:12px; word-break:break-all; margin:8px 0;
}
/* E2 conservation FREEZE banner — overlay only when frozen; zero footprint healthy */
#nsConserveFreeze{
  display:none; position:fixed; top:0; left:0; right:0; z-index:2147483646;
  width:100%; box-sizing:border-box;
  background:#5a0000; color:#fff; border-bottom:1px solid #f66;
  padding:0.6% 2%; max-height:8vh;
  font:700 clamp(11px,2.4vmin,14px)/1.3 Arial,Helvetica,sans-serif;
  text-align:center; letter-spacing:.02em;
  box-shadow:0 8px 28px rgba(0,0,0,.85);
}
#nsConserveFreeze.show{display:block}
#nsConserveFreeze b{color:#ff0}
body.ns-conserve-frozen{padding-top:0}
body.ns-conserve-frozen .TopMenu{top:min(8vh,3.2rem)}
body.ns-conserve-frozen{--freeze-h:min(8vh,3.2rem)}
#nsConserveFreeze:focus{outline:2px solid #fcc; outline-offset:2px}
</style>
<style>
/* === EMPIRE ENTRY MODAL (chat DNA: tools + desc + enter; no banner) === */
.ns-entry{display:none;position:fixed;inset:0;z-index:99999;background:rgba(0,0,0,.97);align-items:center;justify-content:center;padding:clamp(8px,1.5vmin,16px);-webkit-backdrop-filter:blur(8px);backdrop-filter:blur(8px);font-family:system-ui,-apple-system,Segoe UI,Arial,sans-serif}
.ns-entry.show{display:flex}
.ns-entry-box{width:min(96vw,720px);height:min(94vh,100dvh,920px);max-height:min(94vh,100dvh);display:flex;flex-direction:column;gap:clamp(6px,1.2vh,12px);padding:clamp(12px,2.2vmin,22px);box-sizing:border-box;background:linear-gradient(180deg,#0e0e14 0%,#000 55%);border:2px solid rgba(255,255,255,.75);border-radius:16px;color:#eef2f8;box-shadow:0 0 0 1px rgba(255,255,255,.18),0 28px 90px rgba(0,0,0,.9),0 0 50px rgba(204,136,0,.2);position:relative;overflow:hidden}
.ns-entry-box::before{content:"";position:absolute;left:0;right:0;top:0;height:4px;background:linear-gradient(90deg,#c80,#fff,#c80);z-index:2}
.ns-entry-tools{display:grid;grid-template-columns:1fr 1fr 1fr;gap:clamp(6px,1.5vw,12px);min-height:clamp(48px,9vh,64px);flex-shrink:0;margin-top:4px}
.ns-entry-tools button{border:1px solid rgba(255,255,255,.45);border-radius:12px;background:rgba(255,255,255,.05);color:#d8e2ee;font-weight:900;font-size:clamp(13px,2.8vmin,17px);cursor:pointer;letter-spacing:.02em}
.ns-entry-tools button:hover{background:rgba(255,255,255,.1);color:#fff}
.ns-entry-kicker{margin:0;text-align:center;font-size:clamp(10px,1.6vmin,12px);letter-spacing:.18em;text-transform:uppercase;color:#c80;font-weight:800;flex-shrink:0}
.ns-entry-title{margin:0;text-align:center;font-size:clamp(1.45rem,5.2vmin,2.35rem);font-weight:950;line-height:1.05;color:#fff;text-shadow:0 0 18px rgba(204,136,0,.4);flex-shrink:0}
.ns-entry-features{list-style:none;margin:0;padding:0;flex:1;min-height:0;overflow:auto;display:flex;flex-direction:column;gap:clamp(6px,1.1vh,10px)}
.ns-entry-features li{flex:1;display:flex;flex-direction:column;justify-content:center;padding:clamp(8px,1.4vh,12px) clamp(10px,2vw,14px);border:1px solid rgba(204,136,0,.27);border-radius:10px;background:rgba(255,255,255,.04);text-align:center;font-size:clamp(12px,2.15vmin,15px);line-height:1.25}
.ns-entry-features strong{display:block;color:#fff;font-weight:900;margin-bottom:2px;font-size:1.05em}
.ns-entry-features span{color:#c9d3e0}
.ns-entry-risk{margin:0;text-align:center;font-size:clamp(11px,2vmin,13px);font-weight:800;color:#c2ccd9;padding:clamp(6px,1vh,10px) 4px 0;border-top:1px solid rgba(255,255,255,.16);flex-shrink:0;line-height:1.3}
.ns-entry-enter{flex-shrink:0;min-height:clamp(52px,11vh,72px);border:2px solid #c80;border-radius:12px;background:#420;color:#fff;font-weight:950;font-size:clamp(16px,3.4vmin,22px);letter-spacing:.1em;cursor:pointer;text-transform:uppercase;display:flex;align-items:center;justify-content:center;gap:.6em;box-shadow:0 0 24px rgba(204,136,0,.33)}
.ns-entry-enter small{font-size:1em;letter-spacing:.14em}
.ns-entry-enter:hover{filter:brightness(1.15)}
.ns-sub{display:none;position:fixed;inset:0;z-index:100000;background:rgba(0,0,0,.88);align-items:center;justify-content:center;padding:14px}
.ns-sub.show{display:flex}
.ns-sub-box{width:min(520px,96vw);max-height:90vh;overflow:auto;background:#0d0d12;border:1px solid #fff;border-radius:14px;padding:16px 18px;color:#eee;font:13px/1.45 system-ui,Arial,sans-serif;position:relative}
.ns-sub-box h3{margin:0 0 10px;font-size:16px;letter-spacing:.08em;text-transform:uppercase}
.ns-sub-box p{margin:0 0 8px;color:#ccc}
.ns-sub-box a{color:#8cf;word-break:break-all}
.ns-sub-box ul{margin:8px 0 0 18px;padding:0}
.ns-sub-box .addr{display:block;margin:8px 0;padding:10px;border:1px solid #444;border-radius:8px;background:#111;font:12px/1.35 ui-monospace,monospace;word-break:break-all;cursor:pointer}
.ns-sub-box .addr b{display:block;color:#aaa;font-size:10px;letter-spacing:.12em;margin-bottom:4px}
.ns-sub-box .close-x{position:absolute;top:8px;right:10px;border:0;background:transparent;color:#fff;font-size:22px;cursor:pointer;line-height:1}
.ns-sub-box .ns-sub-close{width:100%;margin-top:12px;padding:12px;border:1px solid #fff;background:#222;color:#fff;cursor:pointer;text-transform:uppercase;font-weight:800;border-radius:8px}
/* trade gateModal uses ns-entry; keep .modal-bg.show compatibility */
.modal-bg.ns-entry{background:rgba(0,0,0,.97)}
.modal-bg.ns-entry:not(.show){display:none}
</style>
<style data-ns-entry-polish="1">
.ns-entry{z-index:2147483000}
.ns-entry-box{animation:nsEntryIn .28s ease-out}
@keyframes nsEntryIn{from{opacity:0;transform:scale(.97) translateY(8px)}to{opacity:1;transform:none}}
.ns-entry-tools button{transition:background .15s,transform .12s,border-color .15s;min-height:48px}
.ns-entry-tools button:active{transform:scale(.98)}
.ns-entry-tools button:hover{border-color:rgba(255,255,255,.75)}
.ns-entry-enter{transition:filter .15s,transform .12s,box-shadow .15s}
.ns-entry-enter:active{transform:scale(.99)}
.ns-entry-features li{transition:border-color .15s,background .15s}
.ns-sub{z-index:2147483001}
.ns-sub-box .close-x{
  width:40px;height:40px;border-radius:10px;
  background:rgba(255,255,255,.06)!important;
  border:1px solid rgba(255,255,255,.25)!important;
  font-size:20px!important;line-height:1;color:#fff
}
.ns-sub-box .close-x:hover{background:rgba(255,255,255,.12)!important}
.ns-sub-box .addr:hover{border-color:#8cf}
.ns-entry.hidden,.ns-entry:not(.show){display:none!important}
body.ns-entered .ns-entry{display:none!important}
.age-verification-overlay.ns-entry{display:none;background:rgba(0,0,0,.97);border:0;text-shadow:none;font-size:inherit}
.age-verification-overlay.ns-entry.show{display:flex}
.age-verification-overlay.ns-entry.hidden{display:none!important}
.modal-bg.ns-entry{display:none}
.modal-bg.ns-entry.show{display:flex!important}
</style>
</head>
<body<?= !empty($nstFrozen) ? ' class="ns-conserve-frozen"' : '' ?>>
<?php if (!empty($nstFrozen)): ?>
<div id="nsConserveFreeze" class="show" role="alert" aria-live="assertive" tabindex="0">
  <b>WRITES FROZEN</b> — ledger conservation check failed on this host.
  Transfers, claims, and book posts are paused until the chain balances match again.
  Read-only view still works. Experimental rails — not insured, not a bank.
  <?php if (!empty($nstConservePub['sum_fmt']) || !empty($nstConservePub['expected_fmt'])): ?>
  · observed <b><?= htmlspecialchars((string)($nstConservePub['sum_fmt'] ?? '?')) ?></b>
  ≠ expected <b><?= htmlspecialchars((string)($nstConservePub['expected_fmt'] ?? '?')) ?></b>
  <?php endif; ?>
</div>
<?php else: ?>
<div id="nsConserveFreeze" role="alert" aria-live="assertive" hidden></div>
<?php endif; ?>

<!-- TRADE-QOL2: slim header+P · self-contained tabs · normal-flow stage (NO TradingView) -->
<div class="TopMenu" id="topChrome">
  <?php
    $ep0 = epoch_info();
    $days0 = (int)max(0, ceil(((int)($ep0['secs_to_reset'] ?? 0)) / 86400));
    $e0 = load_economy();
    $vn0 = trim((string)($e0['value_note'] ?? ''));
    // No chrome wipe banner (user intent): wipe facts live in entry modal + slim epoch pill.
    // Reel brain (nst_ephemerality_reel_segments / ?api=brains wipe_copy) remains.
  ?>
  <div class="top-status">
    <div class="brand">
      <strong>Nosignup.Trade</strong>
      <span class="tag">free disposable wallet · no signup</span>
    </div>
    <span class="price-pill" title="Book mid price (context)"><span class="muted">P</span><b id="mid"><?= htmlspecialchars($ssrP_fmt) ?></b></span>
    <span class="epoch-pill" id="epochPill" title="Yearly wipe — ONLY wallet balances survive">RESET IN <b><?= (int)$days0 ?></b>d</span>
    <div class="top-tools" aria-label="Site tools">
      <button type="button" class="hdr-btn" id="nsHdrOptBtn">Options</button>
      <button type="button" class="hdr-btn" id="nsHdrMirBtn">Mirrors</button>
      <span class="badge" id="lock">LOCKED</span>
    </div>
  </div>
  <!-- TRADE-QOL2: full market tools (buyback/treasury/search) live inside Trade book tab — no chrome bleed -->
  <!-- VALUE strip IDs preserved for JS refresh; content lives in Options (hidden here) -->
  <div class="value-strip" id="valueStrip" hidden title="Local value policy - this server owner only" aria-hidden="true">
    <span><b>VALUE</b> set by <b>this server owner</b></span>
    <span class="muted">k=<b id="pubK"><?= htmlspecialchars((string)($e0['donate_k'] ?? NST_DONATE_K)) ?></b></span>
    <span class="muted" id="pubValNote"><?= $vn0 !== '' ? htmlspecialchars($vn0) : 'no public note yet' ?></span>
    <span class="muted">P=<b id="pubP"><?= htmlspecialchars($ssrP_fmt) ?></b></span>
    <span class="muted">buyback P/2=<b id="pubP2"><?= htmlspecialchars($ssrP2_fmt) ?></b></span>
    <span class="muted" id="pubBoot"<?= $ssrBoot ? '' : ' hidden' ?>>bootstrap spread on book</span>
    <span class="muted">mirrors = <b>free tributaries</b> (zero cut · no price power · no daily faucet wage until hits parent-verifiable · host because swarm is hard to kill)</span>
  </div>
</div>

<!-- STAGE: TRADE-QOL2 normal-flow single tab (no persistent overlay siblings) -->
<div class="MiddleMenu" id="stageShell">
  <div id="midMsg"></div>

  <!-- Tab panels: exactly one visible in document flow after ENTER (Wallet default) -->
  <div class="HiddenMenu1 hm-red is-open" id="menu1" role="tabpanel" aria-labelledby="toggle1">
  <div class="hm-body">
    <h2 class="qol3-h2">Wallet</h2>
    <!-- Honesty ONCE (default tab) — plain words; jargon cut -->
    <div class="coach wallet-coach" id="coachBox">
      <p class="risk" style="margin:0">Your password / 12 words is the only key · no recovery · use only money you can lose · yearly wipe · experimental.</p>
      <p class="wipe-line" id="coachWipeLine" style="margin:4px 0 0">WARNING NEXT RESET IN <b><?= (int)$days0 ?></b> DAYS · ONLY wallet balances survive (orders/ads/profit burn)</p>
    </div>
    <div class="stage-stats" id="walletSnapshot" aria-label="Wallet snapshot">
      <div class="stat"><span>Your address</span><span class="mono" id="myaddr">-</span></div>
      <div class="stat"><span>Balance</span><span id="mybal">-</span></div>
      <div class="stat"><span>Rep</span><span id="myrep">-</span></div>
      <div class="stat"><span>Bonus</span><span id="mymod">-</span></div>
      <div class="stat"><span>Epoch</span><span id="epochStat">-</span></div>
      <div class="stat"><span>Treasury</span><span class="mono" id="taddr"><?= htmlspecialchars($taddr) ?></span></div>
    </div>
    <div class="wallet-primary">
      <p class="risk-1" style="margin:0">New? Tap a little, then <b>GET FREE WALLET</b>. Write the 12 words on paper. Retype to unlock.</p>
      <input class="f" id="ent" autocomplete="off" placeholder="type or tap a little, then continue…" aria-label="Optional random input">
      <button type="button" class="btn p big pulse" id="btnOpen">GET FREE WALLET</button>
      <div class="qol3-row">
        <button type="button" class="btn" id="btnRefresh">Refresh</button>
        <button type="button" class="btn d" id="btnWipe">Wipe session</button>
      </div>
      <div id="mOpen"></div>
      <div id="seedOnce" style="display:none">
        <div class="warn"><b>Write these 12 words on paper now.</b> Close without writing = permanent loss.</div>
        <div class="seed" id="seedBox"></div>
        <label class="f">Retype all 12 words</label>
        <textarea class="f" id="seedConf" placeholder="word1 word2 … word12" autocomplete="off"></textarea>
        <button type="button" class="btn p big" id="btnConf">CONFIRM · unlock</button>
        <div id="mConf"></div>
      </div>
      <label class="f">Already have your 12 words?</label>
      <textarea class="f" id="seedUn" placeholder="twelve words" autocomplete="off"></textarea>
      <button type="button" class="btn p big" id="btnUn">Unlock with seed</button>
      <div id="mUn"></div>
      <div class="qol3-row">
        <button type="button" class="btn modal-tools-btn" id="btnOpenHist">History</button>
        <button type="button" class="btn modal-tools-btn" id="btnOpenInbox">Sealed inbox</button>
      </div>
    </div>
    <!-- hist + inbox live in modals (IDs preserved for JS) -->
    <div id="hist" class="mono muted" hidden aria-hidden="true">Unlock to load history.</div>
    <div id="inboxList" class="mono muted" hidden aria-hidden="true">Unlock to list sealed notices.</div>
    <div id="mInbox" hidden></div>
  </div>
</div>

  <div class="HiddenMenu2 hm-green" id="menu2" role="tabpanel" aria-labelledby="toggle2">
  <div class="hm-body">
    <h2 class="qol3-h2">Send / Receive</h2>
    <div class="sr-toggle" role="tablist" aria-label="Send or Receive">
      <button type="button" class="on" id="srBtnRecv" aria-selected="true">Receive</button>
      <button type="button" id="srBtnSend" aria-selected="false">Send</button>
    </div>
    <!-- RECEIVE: big address = receipt; no-wallet points to red Wallet tab -->
    <div class="sr-pane on" id="srPaneRecv" role="tabpanel">
      <div class="recv-card" id="recvHaveWallet" hidden>
        <div class="recv-label">Your address (your receipt)</div>
        <div class="recv-addr mono" id="recvAddr" role="button" tabindex="0" title="Tap address to copy">-</div>
        <button type="button" class="btn p big" id="btnCopy" aria-live="polite">COPY ADDRESS</button>
        <div id="mCopy" class="recv-copy-msg" role="status" aria-live="polite"></div>
        <p class="muted" style="margin:0;font-size:clamp(11px,2.4vmin,13px)">Share this so people can send you NSU. Tap address or COPY.</p>
      </div>
      <div class="recv-card" id="recvNoWallet">
        <p class="recv-nowallet">Get your wallet first — <b>Wallet</b> tab (bottom-left, the big red <b>WALLET</b> button).</p>
        <button type="button" class="btn p big" id="btnGoWalletFromRecv">Open Wallet tab</button>
      </div>
    </div>
    <!-- SEND: paste address + amount + SEND + confirm -->
    <div class="sr-pane" id="srPaneSend" role="tabpanel">
      <div class="coach" id="earnCoach" style="flex-shrink:0;margin:0;padding:clamp(6px,1vh,10px);font-size:clamp(12px,2.6vmin,14px)">
        <strong>Need NSU?</strong> Buy on the <b>Trade book</b> (blue tab) → take a sell.
      </div>
      <div class="send-form">
        <label class="f">Their address</label>
        <input class="f mono" id="to" autocomplete="off" placeholder="paste their address">
        <label class="f">Amount (NSU)</label>
        <div class="qol3-row">
          <input class="f" id="amt" placeholder="1.0" style="flex:1 1 auto">
          <button type="button" class="btn qol3-btn-max" id="btnMaxAmt" title="Use full balance">MAX</button>
        </div>
        <details style="margin:0">
          <summary class="muted" style="cursor:pointer;font-size:clamp(11px,2.4vmin,13px)">Optional note</summary>
          <input class="f" id="memo" maxlength="120" placeholder="short note (optional)">
        </details>
        <button type="button" class="btn p big" id="btnSend">SEND</button>
        <div class="send-confirm" id="sendConfirm" aria-live="polite">
          <div class="sc-line" id="sendConfirmText">Confirm send?</div>
          <div class="qol3-row">
            <button type="button" class="btn p big" id="btnSendConfirm">YES, SEND</button>
            <button type="button" class="btn d" id="btnSendCancel">Cancel</button>
          </div>
        </div>
        <div id="mSend"></div>
        <button type="button" class="btn modal-tools-btn" id="btnOpenRent" style="margin-top:auto">Rent a site…</button>
      </div>
    </div>
    <!-- hidden stubs so economy JS null-guards stay happy (donate UI removed) -->
    <span id="donBtc" hidden></span><span id="donLtc" hidden></span><span id="donXmr" hidden></span><span id="econPub" hidden></span>
    <!-- rent controls live in modal; IDs preserved -->
    <div id="rentMount" hidden>
      <select class="f" id="rentSite">
        <option value="trade">trade (this site)</option>
        <option value="com">com</option><option value="org">org</option><option value="net">net</option>
        <option value="chat">chat</option><option value="work">work</option><option value="market">market</option>
        <option value="date">date</option><option value="fun">fun</option><option value="info">info</option>
      </select>
      <button type="button" class="btn p" id="btnRentQuote">Get rent quote</button>
      <button type="button" class="btn" id="btnRentPay" disabled>Pay rent (exact)</button>
      <div id="mRent" class="mono muted"></div>
      <div id="rentQuoteBox" style="display:none">
        <div class="stat"><span>Site</span><span id="rqSite">-</span></div>
        <div class="stat"><span>Amount</span><span id="rqAmt">-</span></div>
        <div class="stat"><span>Days left</span><span id="rqDays">-</span></div>
        <div class="stat"><span>Pay to</span><span class="mono" id="rqPay">-</span></div>
        <div class="stat"><span>Memo</span><span class="mono" id="rqMemo">-</span></div>
        <div class="stat"><span>Expires</span><span id="rqExp">-</span></div>
        <div class="stat"><span>Quote id</span><span class="mono" id="rqId">-</span></div>
      </div>
    </div>
  </div>
</div>

  <div class="HiddenMenu3 hm-blue" id="menu3" role="tabpanel" aria-labelledby="toggle3">
  <div class="hm-body">
    <h2 class="qol3-h2">Trade book</h2>
    <div class="tab-market" id="marketRow" aria-label="Market snapshot" style="flex-shrink:0;padding:0 0 6px;margin:0">
      <div class="mk"><span class="muted">P</span> <b id="midBook"><?= htmlspecialchars($ssrP_fmt) ?></b></div>
      <div class="mk"><span class="muted">Floor</span> <b id="buybackPx"><?= $ssrP2_fmt !== '-' ? ('P/2 = ' . htmlspecialchars($ssrP2_fmt)) : '—' ?></b></div>
      <div class="mk"><span class="muted">Pool</span> <b id="tbal"><?= htmlspecialchars($tbal) ?></b></div>
      <div class="search-wrap" style="display:none" aria-hidden="true">
        <input type="search" class="search-input" id="search-input" placeholder="pair" autocomplete="off">
        <button type="button" class="search-button" id="search-btn">Search</button>
      </div>
    </div>
    <div id="bookBuyStrip" class="book-buy-strip empty" role="status" aria-live="polite" style="flex-shrink:0;margin:0;padding:clamp(6px,1vh,10px)">
      <strong>Buy NSU</strong> — No live sells yet. Buying opens when sells appear.
    </div>
    <div class="book-actions" style="flex-shrink:0">
      <button type="button" class="btn buy-on" id="btnSideBuy">BUY</button>
      <button type="button" class="btn" id="btnSideSell">SELL</button>
    </div>
    <div class="book-form" id="bookPlaceForm">
      <select class="f" id="side" aria-label="Side" style="display:none"><option value="buy" selected>Buy</option><option value="sell">Sell</option></select>
      <input class="f" id="pair" value="NSU/NOTE" aria-label="Pair" style="display:none">
      <label class="f">Amount (NSU)</label>
      <input class="f" id="oamt" placeholder="10">
      <label class="f">Price</label>
      <input class="f" id="opx" placeholder="1">
      <button type="button" class="btn p big" id="btnOrder">PLACE BUY</button>
      <div id="mOrder"></div>
    </div>
    <div class="book-wrap-qol3" aria-label="Open orders on the book">
      <table>
        <thead><tr><th>Side</th><th>Pair</th><th>Qty</th><th>Price</th><th></th></tr></thead>
        <tbody id="bookBody"><tr><td colspan="5" class="muted">Loading…</td></tr></tbody>
      </table>
    </div>
    <div class="qol3-row" style="flex-shrink:0">
      <button type="button" class="btn modal-tools-btn" id="btnOpenMyOrders">My open orders</button>
      <button type="button" class="btn modal-tools-btn" id="btnOpenBookMore">More…</button>
    </div>
    <!-- coach + extras moved out of primary view; IDs kept for JS -->
    <div class="coach" id="bookCoach" hidden aria-hidden="true"></div>
    <input class="f" id="settleRef" placeholder="optional settle note" hidden>
    <div id="myOrders" class="mono" hidden></div>
    <div id="bookMoreMount" hidden>
      <label class="f">Rate someone</label>
      <input class="f mono" id="rated" placeholder="their address">
      <label class="f">Score (-10 to +10)</label>
      <input class="f" id="rscore" type="number" min="-10" max="10" value="1">
      <label class="f">Note</label>
      <input class="f" id="rctx" maxlength="160">
      <button type="button" class="btn p" id="btnRep">Post rating</button>
      <div id="mRep"></div>
      <button type="button" class="btn" id="btnAudit">Load public audit</button>
      <div id="audit" class="mono muted" style="max-height:30vh;overflow:auto;margin-top:8px"></div>
    </div>
  </div>
</div>
</div><!-- /stageShell -->

<!-- TAB BAR: exactly one always active (Wallet default) -->
<form class="BottomMenu" action="javascript:void(0)" role="tablist" aria-label="Primary sections">
  <div class="MenuButtonContainer">
    <input type="radio" name="menuToggle" class="RadioToggle" id="toggle1" checked>
    <label for="toggle1" class="label1">Wallet</label>
  </div>
  <div class="MenuButtonContainer">
    <input type="radio" name="menuToggle" class="RadioToggle" id="toggle2">
    <label for="toggle2" class="label2">Send / Receive</label>
  </div>
  <div class="MenuButtonContainer">
    <input type="radio" name="menuToggle" class="RadioToggle" id="toggle3">
    <label for="toggle3" class="label3">Trade book</label>
  </div>
</form>

<!-- FOOTER: adboard demoted (revenue kept, not headlining) -->
<footer class="site-footer" id="siteFooter">
  <div class="ad-board empty" id="adBoard" title="Site-local adboard - weighted by donate bid stake · rotates 15–30s">site adboard · house discovery when empty · 15–30s rotate</div>
  <p class="ad-recruit">Free/no-signup PNG house ads → <a href="mailto:<?= htmlspecialchars(NST_CONTACT_EMAIL) ?>?subject=free%2Fno-signup%20PNG%20house%20ad" style="color:#8cf"><?= htmlspecialchars(NST_CONTACT_EMAIL) ?></a> · no account · this crop only</p>
</footer>

<!-- Opening modal: Options / Mirrors + ENTER (no banner) -->
<style data-ns-entry-designer="1">
/* Empire entrance: absolute-% real-estate (chat/fun/morse) — trade skin */
/* TRADE-FIX: desktop CARD cap (max-width min(480px,92vw)); phone ≤480px edge-to-edge */
.ns-entry{display:none!important;position:fixed;inset:0;z-index:2147483000;background:rgba(0,0,0,.97);-webkit-backdrop-filter:blur(10px);backdrop-filter:blur(10px);font-family:system-ui,-apple-system,Segoe UI,Arial,sans-serif;text-shadow:none}
.ns-entry.show,.age-verification-overlay.ns-entry.show,.modal-bg.ns-entry.show{
  display:flex!important;align-items:center!important;justify-content:center!important;
  padding:clamp(8px,1.5vmin,20px)!important;box-sizing:border-box;
}
.ns-entry.hidden,.ns-entry:not(.show),body.ns-entered .ns-entry{display:none!important}
.ns-entry-box{
  /* Desktop default: centered card, capped width — not full-viewport */
  position:relative!important;inset:auto!important;
  width:min(480px,92vw)!important;max-width:min(480px,92vw)!important;
  height:min(88vh,100dvh,680px)!important;max-height:min(88vh,100dvh,680px)!important;
  display:block!important;flex-direction:unset!important;gap:0!important;padding:0!important;margin:0!important;
  overflow:hidden;box-sizing:border-box;flex-shrink:0;
  background:linear-gradient(165deg,#0c0c12 0%,#050508 48%,#000 100%)!important;
  border:0.28vmin solid #ffcc55!important;border-radius:14px!important;color:#eef2f8!important;
  box-shadow:0 0 0 1px rgba(255,255,255,.12),0 0 3.5% rgba(255,204,85,.42),inset 0 0 8% rgba(0,0,0,.35)!important;
  animation:nsDesIn .32s cubic-bezier(.2,.8,.2,1) both;
}
@keyframes nsDesIn{from{opacity:0;transform:scale(.972)}to{opacity:1;transform:none}}
.ns-entry-box::before{content:"";position:absolute;left:0;right:0;top:0;height:0.55%;background:linear-gradient(90deg,#ffcc55,#fff,#fff);z-index:3;opacity:.95}
.ns-entry-tools,.ns-entry-head,.ns-entry-features,.ns-entry-risk,.ns-entry-enter,.ns-entry-minor{position:absolute!important;left:4%!important;right:4%!important;margin:0!important;box-sizing:border-box}
.ns-entry-tools{top:2.8%!important;height:9.2%!important;display:block!important;grid-template-columns:unset!important;gap:0!important;min-height:0!important}
.ns-entry-tools button{
  position:absolute!important;top:0!important;width:30%!important;height:100%!important;margin:0!important;padding:0 1%!important;
  border:0.14vmin solid rgba(255,255,255,.42)!important;border-radius:10px!important;
  background:rgba(255,255,255,.045)!important;color:#dce4ef!important;font-weight:900!important;
  font-size:clamp(12px,min(2.4vh,3.2vw),16px)!important;letter-spacing:.04em!important;cursor:pointer;text-transform:none;
  display:flex!important;align-items:center;justify-content:center;transition:background .15s,border-color .15s,transform .12s,color .15s;
  min-height:48px!important;/* touch floor */
}
.ns-entry-tools button:nth-child(1){left:0!important}
.ns-entry-tools button:nth-child(2){left:35%!important}
.ns-entry-tools button:nth-child(3){left:70%!important}
.ns-entry-tools button:hover{background:rgba(255,255,255,.1)!important;border-color:#ffcc55!important;color:#fff!important}
.ns-entry-tools button:active{transform:scale(.985)}
.ns-entry-head{top:13.5%!important;height:12%!important;text-align:center!important;display:block!important}
.ns-entry-kicker{
  position:absolute!important;left:0;right:0;top:0;height:30%;margin:0!important;padding:0;
  font-size:clamp(10px,min(1.9vh,2.4vw),12px)!important;letter-spacing:.18em!important;text-transform:uppercase!important;
  color:#ffcc55!important;font-weight:800!important;display:flex;align-items:flex-end;justify-content:center;
}
.ns-entry-title,.ns-entry-head h1{
  position:absolute!important;left:0;right:0;top:28%;height:72%;margin:0!important;padding:0;
  font-size:clamp(1.35rem,min(5.2vh,6.2vw),2.1rem)!important;font-weight:950!important;line-height:.95!important;color:#fff!important;
  text-shadow:0 0 2.2% rgba(255,204,85,.42)!important;display:flex;align-items:center;justify-content:center;
  letter-spacing:-.01em;
}
.ns-entry-features{
  top:26.5%!important;height:36%!important;list-style:none!important;margin:0!important;padding:0!important;
  display:block!important;overflow:visible!important;flex:unset!important;min-height:0!important;gap:0!important;
}
.ns-entry-features li{
  position:absolute!important;left:0!important;right:0!important;height:17.8%!important;
  flex:unset!important;display:flex!important;flex-direction:column!important;justify-content:center!important;
  padding:0.35% 2.2%!important;box-sizing:border-box;
  border:0.12vmin solid rgba(255,204,85,.32)!important;border-radius:8px!important;
  background:rgba(255,255,255,.035)!important;text-align:center!important;
  font-size:clamp(11px,min(2vh,3vw),14px)!important;line-height:1.08!important;overflow:hidden;
  transition:border-color .15s,background .15s;
}
.ns-entry-features li:nth-child(1){top:0!important}
.ns-entry-features li:nth-child(2){top:20.5%!important}
.ns-entry-features li:nth-child(3){top:41%!important}
.ns-entry-features li:nth-child(4){top:61.5%!important}
.ns-entry-features li:nth-child(5){top:82%!important}
.ns-entry-features li:nth-child(n+6){display:none!important}
.ns-entry-features strong{display:block;color:#fff;font-weight:900;margin:0 0 .15em;font-size:1.02em;letter-spacing:.02em}
.ns-entry-features span{display:block;color:#c5cfdb;font-weight:650}
.ns-entry-risk{
  top:64.5%!important;height:7%!important;margin:0!important;padding:0.4% 1%!important;
  border-top:0.12vmin solid rgba(255,255,255,.14)!important;border-bottom:none!important;
  font-size:clamp(11px,min(1.9vh,2.8vw),13px)!important;font-weight:800!important;color:#b8c2d0!important;
  text-align:center!important;line-height:1.2!important;
  display:flex!important;flex-direction:column!important;justify-content:center!important;align-items:center;
}
.ns-entry-risk span{display:block}
.ns-entry-enter{
  /* TRADE-FIX: taller primary so aspect stays sane on capped card (not a 1100px flat bar) */
  bottom:10%!important;height:16.5%!important;min-height:80px!important;width:auto!important;
  border:0.22vmin solid #ffcc55!important;border-radius:12px!important;background:rgba(100,70,10,.94)!important;
  color:#fff!important;font-weight:950!important;font-size:clamp(15px,min(3.2vh,4.2vw),20px)!important;
  letter-spacing:.12em!important;cursor:pointer;text-transform:uppercase!important;
  display:flex!important;align-items:center;justify-content:center;gap:3%;
  box-shadow:0 0 2.8% rgba(255,204,85,.42),inset 0 0 12% rgba(255,255,255,.05)!important;
  transition:filter .15s,transform .12s,box-shadow .15s;
}
.ns-entry-enter small{font-size:1em;letter-spacing:.14em;opacity:.95}
.ns-entry-enter:hover{filter:brightness(1.12);box-shadow:0 0 4% rgba(255,204,85,.42),inset 0 0 14% rgba(255,255,255,.07)!important}
.ns-entry-enter:active{transform:scale(.99)}
.ns-entry-minor{
  /* inset secondary leave — not a full-card flat bar (was aspect ~23 on 1280) */
  left:18%!important;right:18%!important;bottom:1.8%!important;height:8%!important;min-height:52px!important;margin:0!important;width:auto!important;
  border:0.14vmin solid #f66!important;border-radius:10px!important;background:rgba(70,0,0,.55)!important;
  color:#fcc!important;font-weight:800!important;font-size:clamp(12px,min(2vh,2.8vw),14px)!important;cursor:pointer;
  display:flex!important;align-items:center;justify-content:center;letter-spacing:.03em;
  transition:filter .15s,background .15s;
}
.ns-entry-minor:hover{filter:brightness(1.12);background:rgba(100,0,0,.62)!important}
/* Phone ≤480px: fill edge-to-edge (QOL3 mobile path — DO NOT regress) */
@media (max-width:480px){
  .ns-entry.show,.age-verification-overlay.ns-entry.show,.modal-bg.ns-entry.show{
    display:block!important;padding:0!important;align-items:stretch!important;justify-content:stretch!important;
  }
  .ns-entry-box{
    position:absolute!important;inset:1.4%!important;
    width:auto!important;height:auto!important;max-width:none!important;max-height:none!important;
    border-radius:1.6%!important;
  }
}
/* short phone: tighten type, keep same slots */
@media (max-height:560px){
  .ns-entry-title,.ns-entry-head h1{font-size:min(5.2vh,6.5vw)!important}
  .ns-entry-features li{font-size:min(1.85vh,3.1vw)!important}
  .ns-entry-kicker{font-size:min(1.65vh,2.3vw)!important;letter-spacing:.14em!important}
  .ns-entry-enter{min-height:72px!important}
}
@media (max-width:380px){
  .ns-entry-tools button{font-size:min(2.8vh,3.2vw)!important;letter-spacing:.02em!important}
}
</style>


<div class="modal-bg ns-entry show" id="gateModal" role="dialog" aria-modal="true" aria-labelledby="nsEntryTitle">
  <div class="ns-entry-box">
    <div class="ns-entry-tools ns-entry-tools-2btn" aria-label="Entry tools">
      <button type="button" id="nsOptBtn">Options</button>
      <button type="button" id="nsMirBtn">Mirrors</button>
    </div>
    <header class="ns-entry-head">
      <p class="ns-entry-kicker">NSU Rails · Experimental</p>
      <h1 class="ns-entry-title" id="nsEntryTitle">Nosignup.Trade</h1>
    </header>
    <ul class="ns-entry-features">
      <li><strong>Wallet</strong><span>Free 12-word disposable wallet — you hold the keys</span></li>
      <li><strong>Buy NSU</strong><span>Wallet → Trade book → take a live sell · free claim retired</span></li>
      <li><strong>Rent</strong><span>Pay treasury NSU · first-paid-wins · payer becomes LORD</span></li>
      <li><strong>Price</strong><span>Market P from book mid · buyback floor at P/2</span></li>
      <li><strong>Ephemeral</strong><span>Yearly wipe in <?= (int)$days0 ?>d · balances survive · orders/ads burn</span></li>
    </ul>
    <p class="ns-entry-risk"><span>Only password · no desk · experimental rails · not an exchange</span><span>Wipe facts live here — no chrome wipe banner</span></p>
    <button type="button" class="ns-entry-enter" id="gateEnter" aria-label="I agree enter"><span>I AGREE</span><small>ENTER</small></button>
    <button type="button" class="ns-entry-minor" id="nsMinorLeave">I am a minor — leave</button>

  </div>
</div>
<div class="ns-sub" id="nsOptModal" role="dialog" aria-modal="true"><div class="ns-sub-box"><button type="button" class="close-x" data-close="nsOptModal" aria-label="close">x</button><h3>Options</h3><p>Site options stay in <b>this browser</b> only. Not an account.</p><h3 style="margin-top:12px;font-size:13px">What is this?</h3><p>Peer-to-peer NSU intents — you hold the seed, not us. Experimental rails · not an exchange.</p><h3 style="margin-top:12px;font-size:13px">VALUE policy <span style="opacity:.7;font-weight:600">(this server owner)</span></h3><div class="opt-value-strip" id="optValueStrip" title="Local value policy - this server owner only"><span><b>VALUE</b> set by <b>this server owner</b></span> <span class="muted">k=<b id="optPubK"><?= htmlspecialchars((string)($e0['donate_k'] ?? NST_DONATE_K)) ?></b></span> <span class="muted" id="optPubValNote"><?= $vn0 !== '' ? htmlspecialchars($vn0) : 'no public note yet' ?></span> <span class="muted">P=<b id="optPubP"><?= htmlspecialchars($ssrP_fmt) ?></b></span> <span class="muted">buyback P/2=<b id="optPubP2"><?= htmlspecialchars($ssrP2_fmt) ?></b></span> <span class="muted" id="optPubBoot"<?= $ssrBoot ? '' : ' hidden' ?>>bootstrap spread on book</span> <span class="muted">mirrors = <b>free tributaries</b> (zero cut · no price power · no daily faucet wage until hits parent-verifiable · host because swarm is hard to kill)</span></div><p class="muted" style="font-size:12px;margin:8px 0">Live IDs <code>#pubK #pubP #pubP2 #pubBoot #pubValNote</code> still refresh from state for any tooling; Options mirrors them.</p><p><button type="button" id="nsOptDbg" style="width:100%;padding:12px;margin:6px 0;border:1px solid #0f0;background:#031;color:#0f0;font-weight:800;cursor:pointer">Toggle DBG overlay</button></p><p><a href="?src=1" target="_blank" rel="noopener">View source (?src=1)</a> · <a href="?download=1">Download index.php</a> · <a href="?api=brains" target="_blank" rel="noopener">?api=brains</a></p><p style="opacity:.75;font-size:12px">Clear entry agreement: <button type="button" id="nsOptReset" style="padding:6px 10px;cursor:pointer">Reset ENTER</button></p><button type="button" class="ns-sub-close" data-close="nsOptModal">Close</button></div></div>
<div class="ns-sub" id="nsMirModal" role="dialog" aria-modal="true"><div class="ns-sub-box"><button type="button" class="close-x" data-close="nsMirModal" aria-label="close">x</button><h3>Mirrors</h3><p><b>Free tributaries.</b> Host a copy · help the network · zero cut · no price power. Free mirrors are tributaries; no daily faucet wage until hits are parent-verifiable; host because the swarm is hard to kill. One <code>.php</code> file — drop on any PHP host.</p><p><a href="?download=1">↓ Download this file</a> · <a href="?src=1" target="_blank" rel="noopener">View source</a></p><p style="font-size:12px;opacity:.85;margin:8px 0 4px">Known public roots:</p><ul id="nsMirList"></ul><button type="button" class="ns-sub-close" data-close="nsMirModal">Close</button></div></div>

<!-- TRADE-QOL3 secondary content modals (keep all function IDs reachable) -->
<div class="ns-sub" id="nsHistModal" role="dialog" aria-modal="true"><div class="ns-sub-box"><button type="button" class="close-x" data-close="nsHistModal" aria-label="close">x</button><h3>History</h3><div id="histModalBody" class="mono muted" style="word-break:break-word;line-height:1.5">Unlock wallet to load history.</div><button type="button" class="ns-sub-close" data-close="nsHistModal">Close</button></div></div>
<div class="ns-sub" id="nsInboxModal" role="dialog" aria-modal="true"><div class="ns-sub-box"><button type="button" class="close-x" data-close="nsInboxModal" aria-label="close">x</button><h3>Sealed inbox</h3><p class="muted">Private notes to your address. Experimental.</p><div class="row"><button type="button" class="btn" id="btnInboxRefresh">Refresh sealed mail</button></div><div id="inboxModalBody" class="mono muted" style="margin-top:8px;font-size:12px;line-height:1.55;word-break:break-word">Unlock to list sealed notices.</div><div id="mInboxModal"></div><button type="button" class="ns-sub-close" data-close="nsInboxModal">Close</button></div></div>
<div class="ns-sub" id="nsMyOrdersModal" role="dialog" aria-modal="true"><div class="ns-sub-box"><button type="button" class="close-x" data-close="nsMyOrdersModal" aria-label="close">x</button><h3>My open orders</h3><p class="muted">Cancel on the board removes yours. Open orders burn at yearly wipe.</p><div id="myOrdersModalBody" class="mono">—</div><button type="button" class="ns-sub-close" data-close="nsMyOrdersModal">Close</button></div></div>
<div class="ns-sub" id="nsBookMoreModal" role="dialog" aria-modal="true"><div class="ns-sub-box"><button type="button" class="close-x" data-close="nsBookMoreModal" aria-label="close">x</button><h3>More book tools</h3><div id="bookMoreModalBody"></div><button type="button" class="ns-sub-close" data-close="nsBookMoreModal">Close</button></div></div>
<div class="ns-sub" id="nsRentModal" role="dialog" aria-modal="true"><div class="ns-sub-box"><button type="button" class="close-x" data-close="nsRentModal" aria-label="close">x</button><h3>Rent a site</h3><p class="muted">Pay treasury NSU · first exact pay wins · you become site renter (LORD). Price = <?= (int)NST_RENT_NSU_PER_DAY ?> NSU × days left.</p><div id="rentModalBody"></div><button type="button" class="ns-sub-close" data-close="nsRentModal">Close</button></div></div>
<!-- Operator console — U7 seed door (password path retired; legacy migrate only) -->
<div id="adminConsole">
  <div class="ac-head">
    <strong style="text-transform:uppercase;letter-spacing:1px">Operator console</strong>
    <span class="muted" id="acHint">Ctrl+Alt+Shift+N · site seed</span>
    <span style="flex:1"></span>
    <button type="button" class="btn d" id="acClose">Close</button>
  </div>
  <div class="ac-body">
    <div id="acLogin">
      <h3 style="margin-top:0">Unlock with site wallet seed</h3>
      <p class="muted">Product door is the <b>same 12-word site seed</b> as <code>/controlpanel</code> (U7). No recovery desk. Preferred surface: <a href="?controlpanel=1" style="color:#8cf">/controlpanel</a>. Host root compromise = game over — accepted.</p>
      <label class="f">Site wallet seed (12 words)</label>
      <input class="f" type="password" id="acSeed" autocomplete="off" placeholder="paste site seed">
      <div class="row"><button type="button" class="btn p" id="acBtnLogin">Unlock</button></div>
      <div id="acLoginMsg"></div>
      <details id="acLegacyWrap" style="margin-top:14px;opacity:.85">
        <summary style="cursor:pointer">Legacy password migrate (one-release debt only)</summary>
        <p class="muted" style="font-size:12px">Only if <code>data/admin.pass.hash</code> already exists from an older deploy. Not the product path. New installs use seed only.</p>
        <label class="f">Legacy admin password</label>
        <input class="f" type="password" id="acPass" autocomplete="current-password">
        <div class="row"><button type="button" class="btn" id="acBtnLegacy">Unlock with legacy password</button></div>
      </details>
    </div>
    <div id="acPanel" style="display:none">
      <h3 style="margin-top:0">Session</h3>
      <div class="stat"><span>Version</span><span id="acVer">-</span></div>
      <div class="stat"><span>Epoch</span><span id="acEpoch">-</span></div>
      <div class="stat"><span>Modifiers</span><span id="acMods">-</span></div>
      <div class="stat"><span>Treasury bal</span><span id="acTbal">-</span></div>
      <div class="stat"><span>Chain len</span><span id="acChain">-</span></div>
      <div class="stat"><span>Treasury addr</span><span class="mono" id="acTaddr">-</span></div>
      <div class="stat"><span>Rented</span><span id="acRented">-</span></div>
      <div class="row" style="margin-top:12px">
        <button type="button" class="btn p" id="acBtnReveal">Reveal faucet secret (KING)</button>
        <button type="button" class="btn" id="acBtnBackup">Backup JSON</button>
        <button type="button" class="btn" id="acBtnBackupSec">Backup + secrets (KING)</button>
        <button type="button" class="btn d" id="acBtnLogout">Lock</button>
      </div>
      <div id="acReveal" class="secret-box" style="display:none"></div>
      <hr style="border-color:#444;margin:16px 0">
      <h3 style="margin:0 0 8px">Treasury pay (KING faucet)</h3>
      <label class="f">To address</label>
      <input class="f mono" id="acPayTo" autocomplete="off">
      <label class="f">Amount NSU</label>
      <input class="f" id="acPayAmt" placeholder="1.0">
      <label class="f">Memo</label>
      <input class="f" id="acPayMemo" value="admin:pay" maxlength="120">
      <div class="row"><button type="button" class="btn p" id="acBtnPay">Pay from treasury</button></div>
      <div id="acPayMsg"></div>
      <hr style="border-color:#444;margin:16px 0">
      <h3 style="margin:0 0 8px">Buy-path ladder (KING)</h3>
      <p class="muted" style="font-size:12px">Posts small <b>real fillable</b> treasury SELL asks on the book (not bootstrap discovery). Visitors unlock a wallet → Trade book → <b>TAKE ORDER</b>. Each SELL arms a half-price BID floor. NOTE settles off-chain.</p>
      <label class="f">NSU per rung (optional; default 100)</label>
      <input class="f" id="acLadderAmt" placeholder="100" autocomplete="off">
      <div class="row"><button type="button" class="btn p" id="acBtnLadder">Seed treasury ask ladder</button></div>
      <div id="acLadderMsg"></div>
      <div id="acPanelMsg"></div>
    </div>
  </div>
</div>

<script>
(function(){
  'use strict';
  var WORDS=("able acid aged also aqua arch area army atom aunt auto avoid axis baby baker balance band bank bare barn base basic batch beach bean bear beat beauty become before begin behind being believe below belt bench best better between beyond bike bind biology bird birth bitter black blade blame blank blast bleak bless blind blood blossom blouse blue blur blush board boat body boil bomb bone bonus book boost border boring borrow boss bottom bounce box boy bracket brain brand brass brave bread breeze brick bridge brief bright bring brisk broccoli broken bronze broom brother brown brush bubble buddy budget buffalo build bulb bulk bullet bundle bunker burden burger burst bus business busy butter buyer buzz cabbage cabin cable cactus cage cake call calm camera camp canal cancel candy cannon canoe canvas canyon capable capital captain car carbon card cargo carpet carry cart case cash casino castle casual cat catalog catch category cattle caught cause caution cave ceiling celery cement census century cereal certain chair chalk champion change chaos chapter charge chase chat cheap check cheese chef cherry chest chicken chief child chimney choice choose chronic chuckle chunk churn cigar cinnamon circle citizen city civil claim clap clarify claw clay clean clerk clever click client cliff climb clinic clip clock clog close cloth cloud clown club clump cluster clutch coach coast coconut code coffee coil coin collect color column combine come comfort comic common company concert conduct confirm congress connect consider control convince cook cool copper copy coral core corn correct cost cotton couch country couple course cousin cover coyote crack cradle craft cram crane crash crater crawl crazy cream credit creek crew cricket crime crisp critic crop cross crouch crowd crucial cruel cruise crumble crunch crush cry crystal cube culture cup cupboard curious current curtain curve").split(/\s+/);
  var seed=null, addr=null, pending=null, pool=[], pairFilter='';
  var adminSeed=null, adminPass=null, lastMod=null, lastBal='0';
  var wipeDaysLeft=<?= (int)$days0 ?>;

  function $(i){return document.getElementById(i)}
  // TRADE-QOL2: header slim P (#mid) + book tab mirror (#midBook) stay in sync
  function setMidPx(txt){
    var a=$('mid'), b=$('midBook');
    if(a) a.textContent=txt;
    if(b) b.textContent=txt;
  }
  function norm(s){return (s||'').trim().toLowerCase().replace(/\s+/g,' ')}
  // HTML escape for any user-influenced field before innerHTML (book pair, hist memo/context).
  function esc(s){return String(s==null?'':s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;');}
  // Message body is plain text (escaped once here). Do not pass pre-escaped HTML fragments.
  function box(id,ok,t){$(id).innerHTML='<div class="'+(ok?'ok':'err')+'">'+esc(t)+'</div>'}
  /* Local advisory only — mirrors r.brains soft flags; never blocks; not a ban court. LI-TRADE-20260714 */
  function localBrainGuide(br, kind){
    if(!br||!br.flag) return '';
    var sc=(br.score!=null?String(br.score):'?');
    var parts=(kind==='hits'?(br.hits||[]):(br.notes||[]));
    var det=(parts&&parts.length)?parts.map(function(x){return String(x)}).join('+'):'flag';
    return 'local guide '+String(br.brain||kind)+' score '+sc+' · '+det;
  }
  function hasCoins(){ return (parseFloat(String(lastBal).replace(/[^0-9.]/g,''))||0) > 0; }
  function setLock(on){
    if(on){
      seed=null;addr=null;lastMod=null;lastBal='0';
      // Wipe must drop in-memory extra signing keys too (localStorage key packs stay per-addr; next unlock reloads).
      ecdsaPriv=null;ecdsaSpkiHex='';ecdsaReady=false;
      $('myaddr').textContent='-';$('mybal').textContent='-';if($('mymod'))$('mymod').textContent='-';
    }
    var e=$('lock'); e.textContent=on?'LOCKED':'UNLOCKED'; e.className='badge'+(on?'':' on');
    if(typeof updateCoach==='function') updateCoach();
    if(typeof syncRecvPane==='function') syncRecvPane();
  }
  function push(t,v){pool.push(t+':'+v+':'+performance.now()); if(pool.length>500) pool.splice(0,pool.length-500)}
  // First-run entropy: mouse + pointer/touch/scroll so phones can open a wallet without a mouse.
  // Primary seed bytes still come from crypto.getRandomValues; pool is supplementary mix-in.
  window.addEventListener('mousemove',function(e){if(pool.length%4===0)push('m',e.clientX+','+e.clientY)},{passive:true});
  window.addEventListener('pointermove',function(e){if(pool.length%3===0)push('p',e.clientX+','+e.clientY+','+(e.pointerType||''))},{passive:true});
  window.addEventListener('pointerdown',function(e){push('pd',(e.clientX||0)+','+(e.clientY||0)+','+(e.pointerType||'mouse'))},{passive:true});
  window.addEventListener('mousedown',function(e){push('md',e.clientX+','+e.clientY+','+(e.button||0))},{passive:true});
  window.addEventListener('touchstart',function(e){var t=e.touches&&e.touches[0]; if(t) push('ts',t.clientX+','+t.clientY);},{passive:true});
  window.addEventListener('touchmove',function(e){if(pool.length%2!==0)return; var t=e.touches&&e.touches[0]; if(t) push('tm',t.clientX+','+t.clientY);},{passive:true});
  window.addEventListener('scroll',function(){if(pool.length%5===0)push('sc',String(window.scrollY||0));},{passive:true});
  $('ent').oninput=function(){push('i',this.value)};
  // Seed the pool once on load (screen + clock) so one intentional tap can clear the first-run bar.
  try{ push('boot',String(screen.width||0)+'x'+String(screen.height||0)+'@'+String(Date.now())); }catch(e){ push('boot',String(Date.now())); }
  function fmtSecs(s){
    s=Math.max(0,parseInt(s,10)||0);
    var d=Math.floor(s/86400), h=Math.floor((s%86400)/3600), m=Math.floor((s%3600)/60);
    if(d>0) return d+'d '+h+'h';
    if(h>0) return h+'h '+m+'m';
    return m+'m';
  }
  function reelSegments(days, extra){
    // keep in lockstep with nst_ephemerality_reel_segments (PHP brain)
    var s=[
      'WARNING | NEXT YEARLY WIPE IN '+days+' DAYS',
      'EPHEMERALITY | this crop forgets on purpose every year',
      'SURVIVES | ONLY your NSU wallet balances (ledger)',
      'BURNS | profit pile | ad stakes | creatives | open orders | mods | panel loot',
      'RE-KEYS | panel password dies at year end (leaks only hurt until wipe)',
      'TREASURY | re-anchors to 24_000_000 NSU KING faucet (liquid gas, not your coins)',
      'VALUE | THIS server owner sets local k / value note | not mirrors | not a global bank',
      'MIRRORS | free tributaries only | help the network | zero cut | no value authority | no daily faucet wage until hits are parent-verifiable | host because the swarm is hard to kill',
      'EARLY DRIP | permanent 0.1 NSU/day only if you unlock in first 30 days after reset',
      'SEED | your 12 words are the only password | no desk | no refunds'
    ];
    if(extra&&extra.length) s=s.concat(extra);
    return s;
  }
  // fillNewsReel DOM painter removed (island gone); reelSegments stays lockstep scaffold with PHP brain.
  function wipeHonestyLine(days){
    var d=Math.max(0, parseInt(days,10)||0);
    return 'WARNING NEXT RESET IN <b>'+d+'</b> DAYS · ONLY wallet balances survive (orders/ads/profit burn)';
  }
  function renderEpoch(ep, st){
    if(!ep) return;
    if($('epochStat')){
      var win=ep.in_early_window?'OPEN '+fmtSecs(ep.secs_to_window_end)+' left':'closed';
      $('epochStat').textContent='#'+(ep.epoch_n||'?')+' · early '+win+' · reset '+fmtSecs(ep.secs_to_reset);
    }
    var days=Math.max(0, Math.ceil((ep.secs_to_reset||0)/86400));
    wipeDaysLeft=days;
    // No chrome wipe banner: days honesty stays on coach wipe-line (and entry modal SSR).
    var cwl=$('coachWipeLine'); if(cwl) cwl.innerHTML=wipeHonestyLine(days);
    // No TopMenu wipe chrome nodes (island removed); coach + entry modal carry wipe facts.
    var econ=(st&&st.economy)||{};
    if($('pubK') && econ.donate_k) $('pubK').textContent=econ.donate_k;
    if($('pubValNote')) $('pubValNote').textContent=econ.value_note||'no public note yet';
  }
  function renderMod(has, mod, accrual){
    if(!$('mymod')) return;
    if(has||(mod&&mod.permanent)){
      var extra='';
      if(accrual&&accrual.paid_fmt&&accrual.paid_fmt!=='0') extra=' · +'+accrual.paid_fmt+' caught up';
      $('mymod').textContent='PERMANENT 0.1 NSU/day'+extra;
    } else {
      $('mymod').textContent='none - unlock in first 30 days after yearly reset to grab it';
    }
  }
  function fillBookCoach(mode){
    var bc=$('bookCoach'); if(!bc) return;
    /* QOL3: book coach hidden from primary view; keep plain short copy for any tooling */
    bc.innerHTML='<strong>Buy or sell NSU on this book</strong><p class="risk">Take a live order, or place your own. Open orders burn at yearly wipe. Experimental.</p>';
  }
  function updateCoach(){
    var box=$('coachBox'); if(!box) return;
    var wipeHtml='<p class="wipe-line" id="coachWipeLine">'+wipeHonestyLine(wipeDaysLeft)+'</p>';
    var fillable=(typeof window.__nstFillableAsks==='number')?window.__nstFillableAsks:null;
    // null (pre-state) leans empty — live is ladder-unseeded; after state, 0 stays honest
    var emptyLive=(fillable===0 || fillable===null);
    // TRADE-QOL2: honesty once inside Wallet tab (#coachBox) — not behind other tabs
    if(!seed){
      box.innerHTML='<p class="risk" style="margin:0">Your password / 12 words is the only key · no recovery · use only money you can lose · yearly wipe · experimental.'+
        (emptyLive?' No live sells yet.':'')+
        '</p>'+wipeHtml;
      fillBookCoach(emptyLive?'empty':'locked');
      if(typeof syncRecvPane==='function') syncRecvPane();
    } else if(hasCoins()){
      box.innerHTML='<p class="risk" style="margin:0">Your password / 12 words is the only key · no recovery · use only money you can lose · yearly wipe · experimental.</p>'+wipeHtml;
      var ec=$('earnCoach');
      if(ec) ec.innerHTML='<strong>You have NSU</strong> — Send (green) or Trade book (blue).';
      fillBookCoach('has');
      if(typeof syncRecvPane==='function') syncRecvPane();
    } else {
      box.innerHTML='<p class="risk" style="margin:0">Your password / 12 words is the only key · no recovery · use only money you can lose · yearly wipe · experimental.'+
        (emptyLive?' No live sells yet.':'')+
        '</p>'+wipeHtml;
      var ec2=$('earnCoach');
      if(ec2) ec2.innerHTML=emptyLive
        ?('<strong>Need NSU?</strong> No live sells yet — open Trade book when sells appear.')
        :('<strong>Need NSU?</strong> Trade book (blue) → take a live sell.');
      fillBookCoach(emptyLive?'empty':'unlocked');
      if(typeof syncRecvPane==='function') syncRecvPane();
    }
  }

  // TRADE-QOL2: always exactly one tab open in normal flow — no collapse / no overlay bleed
  var __nstActiveTab=1;
  function closeMenus(){
    // obsolete collapse removed: re-open active tab (never leave zero-tab state)
    openMenu(__nstActiveTab||1);
  }
  function openMenu(n){
    n=parseInt(n,10)||1;
    if(n<1||n>3) n=1;
    __nstActiveTab=n;
    document.body.setAttribute('data-tab', String(n));
    ['toggle1','toggle2','toggle3'].forEach(function(id,i){
      var el=$(id); if(el) el.checked=((i+1)===n);
    });
    ['menu1','menu2','menu3'].forEach(function(id,i){
      var m=$(id); if(!m) return;
      var on=((i+1)===n);
      m.style.display=on?'flex':'none';
      if(on) m.classList.add('is-open'); else m.classList.remove('is-open');
    });
  }
  window.openMenu=openMenu;
  $('toggle1').onchange=function(){ if(this.checked) openMenu(1); else openMenu(__nstActiveTab||1); };
  $('toggle2').onchange=function(){ if(this.checked) openMenu(2); else openMenu(__nstActiveTab||1); };
  $('toggle3').onchange=function(){ if(this.checked) openMenu(3); else openMenu(__nstActiveTab||1); };
  // <!-- closed --> buttons removed from DOM (TRADE-QOL).

  async function shaHex(s){
    var d=await crypto.subtle.digest('SHA-256', new TextEncoder().encode(s));
    return Array.from(new Uint8Array(d)).map(function(x){return('0'+x.toString(16)).slice(-2)}).join('');
  }
  async function makeSeed(){
    var rnd=new Uint8Array(32); crypto.getRandomValues(rnd);
    var h=await shaHex([navigator.userAgent,Date.now(),pool.join('|'),$('ent').value||''].join('|'));
    var w=[];
    for(var i=0;i<12;i++) w.push(WORDS[(rnd[i]^parseInt(h.substr(i*2,2),16))%WORDS.length]);
    return w.join(' ');
  }
  function valid(s){
    var p=norm(s).split(' ');
    if(p.length<12) return false;
    for(var i=0;i<12;i++) if(WORDS.indexOf(p[i])<0) return false;
    return true;
  }
  async function api(name,data){
    var body=new URLSearchParams(); body.set('api',name);
    if(data) Object.keys(data).forEach(function(k){body.set(k,data[k])});
    return (await fetch('?api='+encodeURIComponent(name),{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded'},body:body.toString()})).json();
  }
  async function apiGet(name,q){
    var u='?api='+encodeURIComponent(name);
    if(q) Object.keys(q).forEach(function(k){u+='&'+encodeURIComponent(k)+'='+encodeURIComponent(q[k])});
    return (await fetch(u)).json();
  }

  function countFillableAsks(st){
    var asks=(st&&st.book&&st.book.asks)||[];
    var n=0;
    for(var i=0;i<asks.length;i++){
      var o=asks[i];
      // sell-side only; bootstrap discovery is not fillable
      if((o.side||'')==='buy') continue;
      if((o.kind||'')==='bootstrap_spread') continue;
      n++;
    }
    return n;
  }
  function updateBuyStrip(st){
    var el=$('bookBuyStrip'); if(!el) return;
    var n=countFillableAsks(st);
    var prev=window.__nstFillableAsks;
    window.__nstFillableAsks=n;
    if(n>0){
      el.className='book-buy-strip live';
      el.innerHTML='<strong>Buy NSU</strong> — <b>'+n+'</b> live fillable ask'+(n===1?'':'s')+' on the book. Unlock <b>Wallet</b> if needed → press <b>TAKE ORDER</b> on a sell/ladder row. NOTE settles off-chain · experimental · orders burn at wipe.'+
        '<div class="bb-cta"><button type="button" class="btn p" id="btnBuyStripOpen">Open Trade book · TAKE</button></div>';
      var b=$('btnBuyStripOpen'); if(b) b.onclick=function(){ openMenu(3); };
    } else {
      el.className='book-buy-strip empty';
      el.innerHTML='<strong>Buy NSU</strong> — No live fillable asks right now — buying opens when a live sell appears (operator ladder seed or peer SELL). Bootstrap quotes (if shown) are discovery only · not fillable. Free claim retired · not a free giveaway.';
    }
    // rebind coach only when fillable truth changes (avoid double rewrite every refresh)
    if(prev!==n && typeof updateCoach==='function') updateCoach();
  }
  function renderBook(st){
    var bids=(st.book&&st.book.bids)||[], asks=(st.book&&st.book.asks)||[];
    var rows=[].concat(asks.slice(0,15).reverse(), bids.slice(0,15));
    if(pairFilter){
      var f=pairFilter.toUpperCase();
      rows=rows.filter(function(o){return (o.pair||'').toUpperCase().indexOf(f)>=0});
    }
    updateBuyStrip(st);
    var fillable=countFillableAsks(st);
    if(!rows.length){
      $('bookBody').innerHTML='<tr><td colspan="5" class="muted">No open orders · no live fillable asks yet — buying opens when a live sell appears (ladder seed or peer SELL)</td></tr>';
    } else {
      $('bookBody').innerHTML=rows.map(function(o){
        var btns='';
        var isBoot=(o.kind==='bootstrap_spread');
        var isLadder=(o.kind==='treasury_ladder');
        var oid=esc(o.id), rem=esc(o.remaining_fmt||o.amount_fmt), maker=esc(o.addr||''), side=esc(o.side||'');
        if(addr&&o.addr===addr&&!isBoot) btns+='<button type="button" class="btn d" data-cancel="'+oid+'">Cancel</button>';
        // Bootstrap quotes form P only — not takeable (server also rejects). Real ladder asks ARE takeable.
        // Show TAKE even before unlock so strangers see the buy affordance (click → wallet if locked).
        if(!isBoot && (!addr || o.addr!==addr)) btns+='<button type="button" class="btn p" data-take="'+oid+'" data-rem="'+rem+'" data-maker="'+maker+'" data-side="'+side+'">TAKE ORDER</button>';
        if(isBoot) btns+='<span class="muted" title="discovery only — not fillable">discovery</span>';
        return '<tr><td>'+side+(isBoot?' · boot':(isLadder?' · ladder':''))+'</td><td>'+esc(o.pair)+'</td><td>'+rem+'</td><td>'+esc(o.price_fmt)+'</td><td>'+btns+'</td></tr>';
      }).join('');
      if(fillable===0){
        // honest banner row when only bootstrap / non-fillable quotes exist
        $('bookBody').innerHTML += '<tr><td colspan="5" class="muted">No live fillable asks right now — buying opens when a live sell appears (bootstrap rows above = discovery only)</td></tr>';
      }
      $('bookBody').querySelectorAll('[data-cancel]').forEach(function(b){
        b.onclick=async function(){
          if(!seed) return;
          try{
            var oid=b.getAttribute('data-cancel')||'';
            var ts=Math.floor(Date.now()/1000);
            var me=await nsAddrFromSeed(seed);
            var body=['cancel','1',oid,me,String(ts)].join('|');
            var r;
            if(ecdsaReady&&ecdsaPriv&&ecdsaSpkiHex){
              var ecdsa_sig=await ecdsaSignMsg(ecdsaPriv, body);
              r=await api('cancel',{addr:me,order_id:oid,ts:String(ts),pubkey:ecdsaSpkiHex,ecdsa_sig:ecdsa_sig});
            } else {
              var client_sig=await nsMacSign(seed, body);
              r=await api('cancel',{seed:seed,order_id:oid,ts:String(ts),client_sig:client_sig});
            }
            box('mOrder',!!r.ok,r.ok?('Cancelled your order (off the book)'+(r.sig_mode==='ecdsa_p256_v1'?' · signed (experimental)':(r.sig_mode==='browser_hmac_v1'?' · signed in browser':''))):('Could not cancel: '+(r.err||'fail')));
            refresh();
          }catch(e){ box('mOrder',false,String(e.message||e)); }
        };
      });
      $('bookBody').querySelectorAll('[data-take]').forEach(function(b){
        b.onclick=async function(){
          if(!seed){ box('mOrder',false,'Unlock wallet first (red tab) — then TAKE ORDER'); if($('midMsg')) box('midMsg',false,'Unlock Wallet (red) first — then TAKE ORDER to buy NSU'); openMenu(1); return; }
          try{
            var oid=b.getAttribute('data-take')||'';
            var amountH=b.getAttribute('data-rem')||'';
            var maker=(b.getAttribute('data-maker')||'').toLowerCase();
            var side=(b.getAttribute('data-side')||'').toLowerCase();
            var settle=($('settleRef')&&$('settleRef').value)||'';
            var qty=parseAmtMicros(amountH);
            if(!qty){ box('mOrder',false,'Bad fill amount'); return; }
            var ts=Math.floor(Date.now()/1000);
            var taker=await nsAddrFromSeed(seed);
            var fbody=['fill','1',oid,maker,taker,qty,settle,String(ts)].join('|');
            var payload={order_id:oid,amount:amountH,settle_ref:settle,ts:String(ts)};
            var nonce='', tbody='';
            // Buy side: taker spends NSU — also sign the transfer leg
            if(side==='buy'){
              nonce=Array.from(crypto.getRandomValues(new Uint8Array(8))).map(function(x){return('0'+x.toString(16)).slice(-2)}).join('');
              var memo='fill:'+oid.slice(0,12);
              tbody=['transfer','1',taker,maker,qty,nonce,String(ts),memo].join('|');
              payload.nonce=nonce;
            }
            if(ecdsaReady&&ecdsaPriv&&ecdsaSpkiHex){
              payload.taker=taker;
              payload.pubkey=ecdsaSpkiHex;
              payload.ecdsa_sig=await ecdsaSignMsg(ecdsaPriv, fbody);
              if(side==='buy'&&tbody) payload.tx_ecdsa_sig=await ecdsaSignMsg(ecdsaPriv, tbody);
            } else {
              payload.seed=seed;
              payload.client_sig=await nsMacSign(seed, fbody);
              if(side==='buy'&&tbody) payload.tx_client_sig=await nsMacSign(seed, tbody);
            }
            var r=await api('fill',payload);
            box('mOrder',!!r.ok,r.ok?('Took order · filled '+((r.fill&&r.fill.amount_fmt)||qty)+' NSU leg'+(r.sig_mode==='ecdsa_p256_v1'?' · signed (experimental)':(r.sig_mode==='browser_hmac_v1'?' · signed in browser':''))):('Could not take: '+(r.err||'fail')));
            if(r.ok) refresh();
          }catch(e){ box('mOrder',false,String(e.message||e)); }
        };
      });
    }
    var mid=(st.market_p_fmt!=null&&st.market_p_fmt!=='')?st.market_p_fmt:((st.book&&st.book.mid)?st.book.mid:null);
    var p2=(st.buyback_px_fmt!=null&&st.buyback_px_fmt!=='')?st.buyback_px_fmt:null;
    setMidPx(mid||'-');
    if($('buybackPx')) $('buybackPx').textContent=p2?('P/2 = '+p2):'P/2 when mid exists';
    if($('pubP')) $('pubP').textContent=mid||'-';
    if($('pubP2')) $('pubP2').textContent=p2||'-';
    if($('pubBoot')){
      if(st.bootstrap_spread_active){ $('pubBoot').hidden=false; $('pubBoot').textContent='bootstrap spread on book (temp discovery)'; }
      else { $('pubBoot').hidden=true; }
    }
    $('tbal').textContent=(st.treasury_bal_fmt||'-')+' NSU';
    renderEpoch(st.epoch, st);
    var all=[].concat(bids,asks).filter(function(o){return addr&&o.addr===addr});
    $('myOrders').textContent=all.length?all.map(function(o){return o.side+' '+o.pair+' '+o.remaining_fmt+' @ '+o.price_fmt}).join('\n'):'(none)';
  }

  async function refresh(){
    try{
      var st=await apiGet('state');
      if(!st.ok) return;
      renderBook(st);
      if(addr){
        var b=await apiGet('balance',{addr:addr});
        if(b.ok){
          var av=b.available_fmt||b.balance_fmt;
          var res=b.reserved_fmt||'0';
          lastBal=String(b.balance_fmt||'0');
          $('mybal').textContent=b.balance_fmt+' NSU (avail '+av+(res!=='0'?', res '+res:'')+')';
          $('myrep').textContent=String(b.rep_score!=null?b.rep_score:0);
          renderMod(!!b.has_modifier, b.modifier, null);
          if(b.epoch) renderEpoch(b.epoch, b);
          if(typeof updateCoach==='function') updateCoach();
          $('hist').innerHTML=(b.history||[]).map(function(r){
            if(r.type==='transfer') return esc(r.ts)+' TX '+(r.from===addr?'OUT':'IN')+' '+esc(r.amount_fmt)+' '+esc(r.memo||'');
            if(r.type==='order') return esc(r.ts)+' ORDER '+esc(r.side)+' '+esc(r.pair)+' '+esc(r.amount_fmt)+' @ '+esc(r.price_fmt);
            if(r.type==='fill') return esc(r.ts)+' FILL '+esc(r.side)+' '+esc(r.amount_fmt)+' order='+esc(String(r.order_id||'').slice(0,10));
            if(r.type==='reputation') return esc(r.ts)+' REP '+(r.rater===addr?'→':'←')+' '+esc(r.score)+' '+esc(r.context||'');
            if(r.type==='modifier_grant') return esc(r.ts)+' MOD permanent 0.1/day epoch='+esc(r.epoch_n);
            return esc(r.ts)+' '+esc(r.type||'');
          }).join('<br>')||'<span class="muted">No history</span>';
        }
      }
    }catch(e){}
  }

  // --- Extra sign key: register once with seed, then spend without seed on wire ---
  var ecdsaPriv=null, ecdsaSpkiHex='', ecdsaReady=false;
  function bufToHex(buf){return Array.from(new Uint8Array(buf)).map(function(x){return('0'+x.toString(16)).slice(-2)}).join('')}
  function hexToBuf(hex){var u=new Uint8Array((hex||'').length/2); for(var i=0;i<u.length;i++) u[i]=parseInt(hex.substr(i*2,2),16); return u.buffer}
  async function aesKeyFromSeed(s){
    var enc=new TextEncoder();
    var base=await crypto.subtle.importKey('raw', enc.encode(normSeed(s)), 'PBKDF2', false, ['deriveKey']);
    return crypto.subtle.deriveKey({name:'PBKDF2',salt:enc.encode('nsu-ecdsa-wrap-v1'),iterations:120000,hash:'SHA-256'}, base, {name:'AES-GCM',length:256}, false, ['encrypt','decrypt']);
  }
  async function ecdsaGenerate(){ return crypto.subtle.generateKey({name:'ECDSA', namedCurve:'P-256'}, true, ['sign','verify']); }
  async function ecdsaExportSpkiHex(pub){ return bufToHex(await crypto.subtle.exportKey('spki', pub)); }
  async function ecdsaSignMsg(priv, msg){ return bufToHex(await crypto.subtle.sign({name:'ECDSA', hash:'SHA-256'}, priv, new TextEncoder().encode(String(msg)))); }
  async function ecdsaPersist(legacyAddr, seedStr, keypair){
    var pkcs8=await crypto.subtle.exportKey('pkcs8', keypair.privateKey);
    var spkiHex=await ecdsaExportSpkiHex(keypair.publicKey);
    var aes=await aesKeyFromSeed(seedStr);
    var iv=crypto.getRandomValues(new Uint8Array(12));
    var ct=await crypto.subtle.encrypt({name:'AES-GCM',iv:iv}, aes, pkcs8);
    try{ localStorage.setItem('nst_ecdsa_v1_'+legacyAddr, JSON.stringify({v:1,spki:spkiHex,iv:bufToHex(iv),ct:bufToHex(ct)})); }catch(e){}
    ecdsaPriv=keypair.privateKey; ecdsaSpkiHex=spkiHex; ecdsaReady=true;
    return spkiHex;
  }
  async function ecdsaLoad(legacyAddr, seedStr){
    var raw=null; try{ raw=localStorage.getItem('nst_ecdsa_v1_'+legacyAddr); }catch(e){}
    if(!raw) return false;
    try{
      var packed=JSON.parse(raw);
      var aes=await aesKeyFromSeed(seedStr);
      var pkcs8=await crypto.subtle.decrypt({name:'AES-GCM',iv:new Uint8Array(hexToBuf(packed.iv))}, aes, new Uint8Array(hexToBuf(packed.ct)));
      ecdsaPriv=await crypto.subtle.importKey('pkcs8', pkcs8, {name:'ECDSA', namedCurve:'P-256'}, false, ['sign']);
      ecdsaSpkiHex=packed.spki; ecdsaReady=true; return true;
    }catch(e){ ecdsaPriv=null; ecdsaSpkiHex=''; ecdsaReady=false; return false; }
  }
  async function ecdsaEnsure(legacyAddr, seedStr){
    if(await ecdsaLoad(legacyAddr, seedStr)) return ecdsaSpkiHex;
    return ecdsaPersist(legacyAddr, seedStr, await ecdsaGenerate());
  }
  async function ecdsaRegister(legacyAddr, seedStr){
    var spki=await ecdsaEnsure(legacyAddr, seedStr);
    var ts=Math.floor(Date.now()/1000);
    var body=['register_pubkey','1',legacyAddr,spki,String(ts)].join('|');
    var ecdsa_sig=await ecdsaSignMsg(ecdsaPriv, body);
    return api('register_pubkey',{seed:seedStr,pubkey:spki,ts:String(ts),ecdsa_sig:ecdsa_sig});
  }

  // --- Wallet Inbox v0: seed-derived ECDH encrypt key (distinct from ECDSA sign key) ---
  var ecdhPriv=null, ecdhSpkiHex='', ecdhReady=false;
  function p256Pkcs8FromD(d){
    // Minimal PKCS#8 ECPrivateKey P-256 (no public key field) for WebCrypto import.
    var head=new Uint8Array([0x30,0x41,0x02,0x01,0x00,0x30,0x13,0x06,0x07,0x2a,0x86,0x48,0xce,0x3d,0x02,0x01,0x06,0x08,0x2a,0x86,0x48,0xce,0x3d,0x03,0x01,0x07,0x04,0x27,0x30,0x25,0x02,0x01,0x01,0x04,0x20]);
    var out=new Uint8Array(head.length+32); out.set(head,0); out.set(d,head.length); return out.buffer;
  }
  async function ecdhKeypairFromSeed(seedStr){
    var enc=new TextEncoder();
    var base=await crypto.subtle.importKey('raw', enc.encode(normSeed(seedStr)), 'PBKDF2', false, ['deriveBits']);
    var bits=await crypto.subtle.deriveBits({name:'PBKDF2',salt:enc.encode('nsu-ecdh-enc-v1'),iterations:120000,hash:'SHA-256'}, base, 256);
    var d=new Uint8Array(bits);
    // Avoid all-zero scalar (astronomically rare); flip last byte if so.
    var allz=true; for(var i=0;i<d.length;i++) if(d[i]!==0){allz=false;break;}
    if(allz) d[31]=1;
    var priv=await crypto.subtle.importKey('pkcs8', p256Pkcs8FromD(d), {name:'ECDH', namedCurve:'P-256'}, true, ['deriveBits']);
    var jwk=await crypto.subtle.exportKey('jwk', priv);
    var pub=await crypto.subtle.importKey('jwk', {kty:'EC', crv:'P-256', x:jwk.x, y:jwk.y}, {name:'ECDH', namedCurve:'P-256'}, true, []);
    var spkiHex=bufToHex(await crypto.subtle.exportKey('spki', pub));
    ecdhPriv=priv; ecdhSpkiHex=spkiHex; ecdhReady=true;
    return spkiHex;
  }
  async function ecdhRegister(legacyAddr, seedStr){
    var spki=await ecdhKeypairFromSeed(seedStr);
    return api('register_enc_pubkey',{seed:seedStr,enc_pubkey:spki});
  }
  async function inboxDecryptBlob(blob){
    if(!ecdhPriv) throw new Error('ECDH key not ready — re-unlock');
    var their=await crypto.subtle.importKey('spki', hexToBuf(blob.eph_pub), {name:'ECDH', namedCurve:'P-256'}, false, []);
    var bits=await crypto.subtle.deriveBits({name:'ECDH', public:their}, ecdhPriv, 256);
    var hk=await crypto.subtle.importKey('raw', bits, 'HKDF', false, ['deriveKey']);
    var aes=await crypto.subtle.deriveKey({name:'HKDF', hash:'SHA-256', salt:new Uint8Array(0), info:new TextEncoder().encode('nsu-inbox-v1')}, hk, {name:'AES-GCM', length:256}, false, ['decrypt']);
    var pt=await crypto.subtle.decrypt({name:'AES-GCM', iv:new Uint8Array(hexToBuf(blob.iv))}, aes, new Uint8Array(hexToBuf(blob.ct)));
    return new TextDecoder().decode(pt);
  }
  async function inboxAuthBody(extra){
    var ts=Math.floor(Date.now()/1000);
    var body=Object.assign({addr:addr,ts:String(ts)}, extra||{});
    // Dual-path: registered-key addresses refuse seed (ATOM1) — sign when ready.
    if(ecdsaReady&&ecdsaPriv&&ecdsaSpkiHex){
      var op=extra&&extra.id?'inbox_fetch':'inbox_list';
      var msg=op==='inbox_fetch'
        ? ['inbox_fetch','1',addr,String(extra.id),String(ts)].join('|')
        : ['inbox_list','1',addr,String(ts)].join('|');
      body.pubkey=ecdsaSpkiHex;
      body.ecdsa_sig=await ecdsaSignMsg(ecdsaPriv, msg);
      // no seed
    } else {
      body.seed=seed;
    }
    return body;
  }
  async function inboxRefresh(){
    var box=$('inboxList'); var msg=$('mInbox');
    if(!box) return;
    if(!seed||!addr){ box.innerHTML='Unlock to list sealed notices.'; return; }
    try{
      var r=await api('inbox_list', await inboxAuthBody({}));
      if(!r.ok){ box.innerHTML=esc(r.err||'list failed'); return; }
      if(!r.count){ box.innerHTML='<span class="muted">No sealed notices</span>'; return; }
      box.innerHTML=(r.items||[]).map(function(it){
        var k=String(it.kind||'king_note');
        var kindLbl=k==='server_notice'?'server notice (public book · not private E2E)':k;
        return '<div style="border:1px solid #444;padding:8px;margin:6px 0">'
          +'<div>id '+esc(it.id)+' · '+esc(kindLbl)+' · from '+esc(String(it.from||'').slice(0,12))+'… · exp '+esc(it.exp)+'</div>'
          +'<div class="muted">'+esc(it.honesty||'experimental')+'</div>'
          +'<button type="button" class="btn" data-inbox-id="'+esc(it.id)+'">Decrypt</button>'
          +'<div class="mono" data-inbox-out="'+esc(it.id)+'" style="margin-top:6px"></div></div>';
      }).join('');
      box.querySelectorAll('[data-inbox-id]').forEach(function(btn){
        btn.onclick=async function(){
          var id=btn.getAttribute('data-inbox-id');
          var out=box.querySelector('[data-inbox-out="'+id+'"]');
          try{
            var f=await api('inbox_fetch', await inboxAuthBody({id:id}));
            if(!f.ok) throw new Error(f.err||'fetch fail');
            var text=await inboxDecryptBlob(f.blob);
            if(out) out.textContent=text;
            if(msg){ msg.className='ok'; msg.textContent='Decrypted · client-side · experimental'; }
          }catch(e){ if(out) out.textContent=String(e.message||e); if(msg){ msg.className='err'; msg.textContent=String(e.message||e);} }
        };
      });
    }catch(e){ box.innerHTML=esc(String(e.message||e)); }
  }
  if($('btnInboxRefresh')) $('btnInboxRefresh').onclick=function(){ inboxRefresh(); };
  async function session(s){
    seed=norm(s);
    lastBal='0';
    var r=await api('addr',{seed:seed});
    if(!r.ok) throw new Error(r.err||'Could not unlock wallet');
    addr=r.addr; setLock(false); $('myaddr').textContent=addr;
    ecdsaPriv=null; ecdsaSpkiHex=''; ecdsaReady=false;
    var ecdsaNote='';
    try{
      await ecdsaEnsure(addr, seed);
      var reg=await ecdsaRegister(addr, seed);
      if(reg && reg.ok){
        ecdsaReady=true;
      } else {
        // Do not claim seed-off-wire if server reject (e.g. OpenSSL missing) — force HMAC path.
        ecdsaReady=false;
        if(reg && (reg.ecdsa_server==='openssl_unavailable' || /openssl/i.test(String(reg.err||'')))){
          ecdsaNote='Extra signing unavailable · basic path still works (seed on wire)';
        } else {
          ecdsaNote='Extra signing setup failed · basic path (seed on wire)';
        }
      }
    }catch(e){
      ecdsaReady=false;
      ecdsaNote='Extra signing setup failed · basic path (seed on wire)';
      console.warn('ecdsa setup', e);
    }
    var ecdhNote='';
    try{
      ecdhPriv=null; ecdhSpkiHex=''; ecdhReady=false;
      var ereg=await ecdhRegister(addr, seed);
      if(ereg && ereg.ok){ ecdhReady=true; ecdhNote='Sealed inbox enc-key ready (experimental)'; }
      else { ecdhReady=false; ecdhNote='Enc-pubkey register failed · sealed inbox limited'; }
    }catch(e){ ecdhReady=false; ecdhNote='ECDH setup failed · sealed inbox limited'; console.warn('ecdh setup', e); }
    lastMod=r;
    var g=r.modifier_grant||{};
    var a=r.accrual||{};
    var bits=[];
    if(g.granted) bits.push('Early-access PERMANENT modifier granted (+0.1 NSU/day)');
    else if(g.reason==='already') bits.push('Permanent modifier already held');
    else if(g.reason==='outside_window') bits.push('Outside early window - no new modifier this year');
    if(a.ok&&a.paid_fmt&&a.paid_fmt!=='0') bits.push('Lazy accrue +'+a.paid_fmt+' NSU ('+(a.days||'?')+'d)');
    else if(a.reason==='too_soon'&&a.next_in!=null) bits.push('Next daily accrual in ~'+fmtSecs(a.next_in));
    if(ecdsaNote) bits.push(ecdsaNote);
    if(ecdhNote) bits.push(ecdhNote);
    bits.push('Next: Trade book → TAKE ORDER to buy NSU (or Send if you already have coins)');
    renderMod(!!(g.mod&&g.mod.permanent)||g.reason==='already'||g.granted, g.mod, a);
    if(r.epoch) renderEpoch(r.epoch, r);
    if(bits.length&&$('midMsg')) $('midMsg').innerHTML='<div class="ok">'+esc(bits.join(' · '))+'</div>';
    updateCoach();
    await refresh();
    try{ if(typeof inboxRefresh==='function') await inboxRefresh(); }catch(e){}
  }

  $('search-btn').onclick=function(){ pairFilter=$('search-input').value.trim(); refresh(); };
  $('search-input').onkeydown=function(e){ if(e.key==='Enter'){ e.preventDefault(); pairFilter=this.value.trim(); refresh(); } };

  $('btnOpen').onclick=async function(){
    try{
      // Count this press (mouse or touch) as intentional entropy for first-run.
      push('btn','open');
      var hasCsprng=!!(window.crypto&&crypto.getRandomValues);
      // With CSPRNG: one real gesture is enough. Without: need a few samples.
      if(pool.length<(hasCsprng?2:4)){
        box('mOpen',false,'Move, tap, scroll, or type a little first — then try again');
        return;
      }
      pending=await makeSeed();
      $('seedBox').textContent=pending; $('seedOnce').style.display='block'; $('seedConf').value='';
      box('mOpen',true,'Write the 12 words offline, then retype below to unlock');
    }catch(e){box('mOpen',false,String(e.message||e))}
  };
  function normSeed(s){return String(s||'').toLowerCase().trim().replace(/\s+/g,' ')}
  async function nsAddrFromSeed(seed){
    return shaHex('nsu-addr-v1|'+normSeed(seed));
  }
  async function nsMacSign(seed, msg){
    var enc=new TextEncoder();
    var keyRaw=enc.encode('nsu-mac-v1|'+normSeed(seed));
    var key=await crypto.subtle.importKey('raw', keyRaw, {name:'HMAC', hash:'SHA-256'}, false, ['sign']);
    var sig=await crypto.subtle.sign('HMAC', key, enc.encode(String(msg)));
    return Array.from(new Uint8Array(sig)).map(function(x){return('0'+x.toString(16)).slice(-2)}).join('');
  }
  function parseAmtMicros(h){
    h=String(h||'').trim();
    if(!/^\d+(\.\d{1,6})?$/.test(h)) return null;
    var w,f;
    if(h.indexOf('.')<0){ w=h; f='000000'; }
    else { var p=h.split('.'); w=p[0]===''?'0':p[0]; f=(p[1]||'').padEnd(6,'0').slice(0,6); }
    w=w.replace(/^0+(?=\d)/,''); if(w==='') w='0';
    var micros=w+f; micros=micros.replace(/^0+(?=\d)/,''); return micros===''?'0':micros;
  }
  $('btnConf').onclick=async function(){
    if(!pending||norm($('seedConf').value)!==norm(pending)){box('mConf',false,'Words do not match — check your paper');return;}
    try{
      await session(pending);pending=null;$('seedBox').textContent='(hidden after unlock)';
      box('mConf',true,'Unlocked. Seed stays in this tab only. Next: Trade book → TAKE ORDER to buy NSU');
      setTimeout(function(){ openMenu(3); }, 600);
    }catch(e){box('mConf',false,String(e.message||e))}
  };
  $('btnUn').onclick=async function(){
    var s=norm($('seedUn').value);
    if(!valid(s)){box('mUn',false,'Need all 12 words, spaced, from the wallet word list');return;}
    try{
      await session(s);
      box('mUn',true,hasCoins()
        ? 'Unlocked. Next: Send (green) or Trade book (blue).'
        : 'Unlocked. Next: Trade book (blue) → TAKE ORDER to buy NSU.');
    }catch(e){box('mUn',false,String(e.message||e))}
  };
  $('btnWipe').onclick=function(){
    pending=null;setLock(true);$('seedOnce').style.display='none';$('seedUn').value='';$('ent').value='';pool=[];
    updateCoach();
    box('mUn',true,'Browser session wiped. Your coins still exist if you still have the 12 words.');
  };
  /* TRADE-QOL3: SEND = confirm step then transfer (same api handlers) */
  var __pendingSend=null;
  function hideSendConfirm(){
    __pendingSend=null;
    var sc=$('sendConfirm'); if(sc) sc.classList.remove('on');
  }
  async function executeSend(p){
    if(!p||!seed){box('mSend',false,'Unlock a wallet first (red Wallet tab)');openMenu(1);return;}
    var to=p.to, amountH=p.amountH, memo=p.memo, micros=p.micros;
    var nonce=String(Date.now())+Math.random().toString(16).slice(2);
    var ts=Math.floor(Date.now()/1000);
    try{
      var from=await nsAddrFromSeed(seed);
      var body=['transfer','1',from,to,micros,nonce,String(ts),memo].join('|');
      var r;
      if(ecdsaReady&&ecdsaPriv&&ecdsaSpkiHex){
        var ecdsa_sig=await ecdsaSignMsg(ecdsaPriv, body);
        r=await api('transfer',{from:from,to:to,amount:amountH,memo:memo,nonce:nonce,ts:String(ts),pubkey:ecdsaSpkiHex,ecdsa_sig:ecdsa_sig});
      } else {
        var client_sig=await nsMacSign(seed, body);
        r=await api('transfer',{seed:seed,to:to,amount:amountH,memo:memo,nonce:nonce,ts:String(ts),client_sig:client_sig});
      }
      var msg='';
      if(r.ok){
        msg='Sent. Balance '+r.balance_fmt;
        if(r.brains&&r.brains.memo_risk&&r.brains.memo_risk.flag){
          var g=localBrainGuide(r.brains.memo_risk,'hits');
          if(g) msg+=' · '+g+' (advisory · not a ban)';
        }
      } else {
        msg=r.err||'fail';
        if(r.have_fmt) msg+=' have '+r.have_fmt;
        if(r.available_fmt) msg+=' avail '+r.available_fmt;
      }
      box('mSend',!!r.ok,msg);
      hideSendConfirm();
      if(r.ok) refresh();
    }catch(e){ box('mSend',false,String(e.message||e)); }
  }
  $('btnSend').onclick=function(){
    if(!seed){box('mSend',false,'Unlock a wallet first (red Wallet tab)');openMenu(1);return;}
    var to=$('to').value.trim().toLowerCase().replace(/[^a-f0-9]/g,'');
    var amountH=$('amt').value.trim();
    var memo=(($('memo')&&$('memo').value)||'').trim().slice(0,120);
    var micros=parseAmtMicros(amountH);
    if(!micros||micros==='0'){box('mSend',false,'Enter an amount');return;}
    if(to.length!==64){box('mSend',false,'That does not look like an address — paste their full address');return;}
    __pendingSend={to:to,amountH:amountH,memo:memo,micros:micros};
    var sc=$('sendConfirm'), st=$('sendConfirmText');
    if(st) st.textContent='Send '+amountH+' NSU to '+to.slice(0,10)+'…'+to.slice(-8)+'? This cannot be undone.';
    if(sc) sc.classList.add('on');
    box('mSend',true,'Check the confirm box, then tap YES, SEND.');
  };
  if($('btnSendConfirm')) $('btnSendConfirm').onclick=function(){ if(__pendingSend) executeSend(__pendingSend); };
  if($('btnSendCancel')) $('btnSendCancel').onclick=function(){ hideSendConfirm(); box('mSend',true,'Send cancelled.'); };
  /* ---- Rent a site (P3 rails: quote → exact transfer → settle/refund) ---- */
  var lastRentQuote=null;
  function rentMsg(ok,t){
    var e=$('mRent');
    if(!e) return;
    e.className='mono '+(ok?'ok':'err');
    e.style.color=ok?'#8f8':'#f88';
    e.textContent=t;
  }
  function showRentQuote(q){
    lastRentQuote=q&&q.quoted?q:null;
    var box=$('rentQuoteBox');
    var payBtn=$('btnRentPay');
    if(!box) return;
    if(!lastRentQuote){
      box.style.display='none';
      if(payBtn) payBtn.disabled=true;
      return;
    }
    box.style.display='block';
    if($('rqSite')) $('rqSite').textContent=String(q.site||'-');
    if($('rqAmt')) $('rqAmt').textContent=(q.amount_fmt||q.amount_nsu||'-')+' NSU';
    if($('rqDays')) $('rqDays').textContent=String(q.days_left!=null?q.days_left:'-');
    if($('rqPay')) $('rqPay').textContent=String(q.pay_to||'-');
    if($('rqMemo')) $('rqMemo').textContent=String(q.memo||'-');
    if($('rqId')) $('rqId').textContent=String(q.quote_id||'-');
    if($('rqExp')){
      var ex=Number(q.expires||0);
      $('rqExp').textContent=ex? (new Date(ex*1000).toISOString()+' · '+String(q.expires_in_secs||'?')+'s') : '-';
    }
    if(payBtn) payBtn.disabled=false;
  }
  if($('btnRentQuote')) $('btnRentQuote').onclick=async function(){
    try{
      var site=($('rentSite')&&$('rentSite').value)||'trade';
      var r=await api('rent_quote',{site:site});
      if(!r||!r.ok){ showRentQuote(null); rentMsg(false,(r&&r.err)||'quote failed'); return; }
      if(r.leased||r.quoted===false){
        showRentQuote(null);
        rentMsg(false,'Already leased until epoch'+(r.leased_until?(' · '+new Date(Number(r.leased_until)*1000).toISOString()):'')+(r.operator_addr?(' · op '+String(r.operator_addr).slice(0,12)+'…'):''));
        return;
      }
      showRentQuote(r);
      rentMsg(true,'Quote ready. Unlock wallet if needed, then Pay rent (exact amount + memo). Durable='+!!r.durable);
    }catch(e){ showRentQuote(null); rentMsg(false,String(e.message||e)); }
  };
  if($('btnRentPay')) $('btnRentPay').onclick=async function(){
    if(!lastRentQuote){ rentMsg(false,'Get a rent quote first'); return; }
    if(!seed){ rentMsg(false,'Unlock a wallet first (red tab)'); openMenu(1); return; }
    var to=String(lastRentQuote.pay_to||'').toLowerCase().replace(/[^a-f0-9]/g,'');
    var amountH=String(lastRentQuote.amount_nsu||'');
    var memo=String(lastRentQuote.memo||'');
    var micros=String(lastRentQuote.amount||'');
    if(to.length!==64||!amountH||!memo){ rentMsg(false,'Quote incomplete — get a new quote'); return; }
    var nonce=String(Date.now())+Math.random().toString(16).slice(2);
    var ts=Math.floor(Date.now()/1000);
    try{
      var from=await nsAddrFromSeed(seed);
      var body=['transfer','1',from,to,micros,nonce,String(ts),memo].join('|');
      var r;
      if(ecdsaReady&&ecdsaPriv&&ecdsaSpkiHex){
        var ecdsa_sig=await ecdsaSignMsg(ecdsaPriv, body);
        r=await api('transfer',{from:from,to:to,amount:amountH,memo:memo,nonce:nonce,ts:String(ts),pubkey:ecdsaSpkiHex,ecdsa_sig:ecdsa_sig});
      } else {
        var client_sig=await nsMacSign(seed, body);
        r=await api('transfer',{seed:seed,to:to,amount:amountH,memo:memo,nonce:nonce,ts:String(ts),client_sig:client_sig});
      }
      if(!r||!r.ok){
        rentMsg(false,(r&&r.err)||'pay failed'+(r&&r.available_fmt?(' · avail '+r.available_fmt):''));
        return;
      }
      var bits=['Paid. bal '+r.balance_fmt];
      if(r.rent&&r.rent.settled){
        bits.push('LEASED site='+(r.rent.site||'?')+' · you are LORD (payer key) · quote '+(r.rent.quote_id||'').slice(0,12)+'…');
        showRentQuote(null);
      } else if(r.rent){
        bits.push('settle:'+(r.rent.reason||'no'));
        if(r.rent_refund&&r.rent_refund.refunded) bits.push('auto-refunded');
        else if(r.rent_refund&&r.rent_refund.err) bits.push('refund err '+(r.rent_refund.err));
      }
      rentMsg(!!(r.rent&&r.rent.settled), bits.join(' · '));
      refresh();
    }catch(e){ rentMsg(false,String(e.message||e)); }
  };
  // Free claim UI retired (C3) — ?api=faucet returns 410; Free claim retired — buy NSU on the book.
  // public economy + donate rails
  apiGet('economy').then(function(e){
    if(!e||!e.ok) return;
    if($('econPub')) $('econPub').textContent='profit '+e.profit_fmt+' · ad-stake '+e.ad_bid_fmt+(e.mid_fmt?(' · mid '+e.mid_fmt):'')+(e.bids_with_creative!=null?(' · creatives '+e.bids_with_creative):'');
    if(e.donate_addrs){
      if($('donBtc')&&e.donate_addrs.btc) $('donBtc').textContent=e.donate_addrs.btc;
      if($('donLtc')&&e.donate_addrs.ltc) $('donLtc').textContent=e.donate_addrs.ltc;
      if($('donXmr')&&e.donate_addrs.xmr) $('donXmr').textContent=e.donate_addrs.xmr;
    }
  }).catch(function(){});
  // site-local weighted adboard — re-roll every 15–30s (luck slice; server weights pick)
  // SAFE zone: public read-only. Do not couple to wallet seed / order / signing paths.
  function loadAd(){
    var box=$('adBoard'); if(!box) return;
    apiGet('ad_pick').then(function(a){
      if(!a||!a.ok) return;
      if(a.empty){ box.className='ad-board empty'; box.textContent='site adboard · house discovery when empty · free/no-signup PNG via line below'; return; }
      box.className='ad-board';
      var src=(a.img&&a.img.src)||'';
      var href=a.href||'#';
      var label=a.label||'';
      // recruit email lives once in .ad-recruit footer - not on every house cell
      var meta=a.house?('house discovery · site-local · 15–30s'):'stake '+(a.stake_fmt||'')+' · site-local · 15–30s';
      if(a.png_w&&a.png_h) meta+=' · '+a.png_w+'×'+a.png_h;
      if(a.png_bytes) meta+=' · '+a.png_bytes+'b';
      if(a.png_flag) meta+=' · soft-flag';
      // use outer esc (same IIFE) — stronger escape (includes >); no nested shadow
      if(src){
        box.innerHTML='<a href="'+esc(href)+'" target="_blank" rel="noopener noreferrer"><img alt="ad" src="'+esc(src)+'"></a><span class="ad-meta">'+esc(meta)+'</span>';
      } else if(label){
        box.innerHTML='<a class="ad-house" href="'+esc(href)+'" target="_blank" rel="noopener noreferrer">'+esc(label)+'</a><span class="ad-meta">'+esc(meta)+'</span>';
      } else {
        box.textContent=meta;
      }
    }).catch(function(){});
  }
  function adRotateMs(){
    // 15000–30000 ms inclusive; true-ish entropy when available
    var span=15001;
    try{
      if(window.crypto&&crypto.getRandomValues){
        var u=new Uint32Array(1); crypto.getRandomValues(u);
        return 15000+(u[0]%span);
      }
    }catch(e){}
    return 15000+Math.floor(Math.random()*span);
  }
  function scheduleAd(){
    loadAd();
    setTimeout(scheduleAd, adRotateMs());
  }
  scheduleAd();
  function syncRecvPane(){
    var have=$('recvHaveWallet'), no=$('recvNoWallet'), ra=$('recvAddr');
    if(addr){
      if(have) have.hidden=false;
      if(no) no.hidden=true;
      if(ra) ra.textContent=addr;
      if($('myaddr')) $('myaddr').textContent=addr;
    } else {
      if(have) have.hidden=true;
      if(no) no.hidden=false;
      if(ra) ra.textContent='-';
    }
  }
  window.syncRecvPane=syncRecvPane;
  function setSrPane(which){
    var recv=which==='recv';
    var pr=$('srPaneRecv'), ps=$('srPaneSend'), br=$('srBtnRecv'), bs=$('srBtnSend');
    if(pr){ pr.classList.toggle('on', recv); }
    if(ps){ ps.classList.toggle('on', !recv); }
    if(br){ br.classList.toggle('on', recv); br.setAttribute('aria-selected', recv?'true':'false'); }
    if(bs){ bs.classList.toggle('on', !recv); bs.setAttribute('aria-selected', !recv?'true':'false'); }
    if(recv) syncRecvPane();
  }
  if($('srBtnRecv')) $('srBtnRecv').onclick=function(){ setSrPane('recv'); };
  if($('srBtnSend')) $('srBtnSend').onclick=function(){ setSrPane('send'); };
  if($('btnGoWalletFromRecv')) $('btnGoWalletFromRecv').onclick=function(){ openMenu(1); };
  function openNsSub(id){
    var m=$(id); if(!m) return;
    m.classList.add('show'); m.style.display='flex';
  }
  function mountInto(srcId, destId){
    var src=$(srcId), dest=$(destId);
    if(!src||!dest) return;
    if(src.parentNode!==dest) dest.appendChild(src);
    src.hidden=false; src.style.display='';
  }
  if($('btnOpenHist')) $('btnOpenHist').onclick=function(){
    var body=$('histModalBody'), h=$('hist');
    if(body&&h) body.innerHTML=h.innerHTML||h.textContent||'—';
    openNsSub('nsHistModal');
  };
  if($('btnOpenInbox')) $('btnOpenInbox').onclick=function(){
    /* btnInboxRefresh already in modal; mirror list from #inboxList */
    var body=$('inboxModalBody'), list=$('inboxList');
    if(body&&list) body.innerHTML=list.innerHTML||list.textContent||'—';
    openNsSub('nsInboxModal');
    if($('btnInboxRefresh')) try{ $('btnInboxRefresh').click(); }catch(e){}
  };
  if($('btnOpenMyOrders')) $('btnOpenMyOrders').onclick=function(){
    var body=$('myOrdersModalBody'), mo=$('myOrders');
    if(body&&mo) body.innerHTML=mo.innerHTML||mo.textContent||'(none)';
    openNsSub('nsMyOrdersModal');
  };
  if($('btnOpenBookMore')) $('btnOpenBookMore').onclick=function(){
    mountInto('bookMoreMount','bookMoreModalBody');
    openNsSub('nsBookMoreModal');
  };
  if($('btnOpenRent')) $('btnOpenRent').onclick=function(){
    mountInto('rentMount','rentModalBody');
    openNsSub('nsRentModal');
  };
  function setBookSide(side){
    side=(side==='sell')?'sell':'buy';
    if($('side')) $('side').value=side;
    var bb=$('btnSideBuy'), bs=$('btnSideSell'), bo=$('btnOrder');
    if(bb){ bb.classList.toggle('buy-on', side==='buy'); }
    if(bs){ bs.classList.toggle('sell-on', side==='sell'); }
    if(bo) bo.textContent=side==='sell'?'PLACE SELL':'PLACE BUY';
  }
  if($('btnSideBuy')) $('btnSideBuy').onclick=function(){ setBookSide('buy'); };
  if($('btnSideSell')) $('btnSideSell').onclick=function(){ setBookSide('sell'); };
  if($('btnMaxAmt')) $('btnMaxAmt').onclick=function(){
    var v=String(lastBal||'0').replace(/[^0-9.]/g,'');
    if($('amt')) $('amt').value=v&&v!=='0'?v:'';
  };
  /* RANDOM-IMPROVE: copy feedback stays on Receive (was mSend = invisible on Receive pane) */
  function copyRecvAddr(){
    if(!addr){
      var mc0=$('mCopy'); if(mc0){ mc0.className='recv-copy-msg err'; mc0.textContent='Get your wallet first (red Wallet tab)'; }
      return;
    }
    var t=addr;
    var btn=$('btnCopy');
    var mc=$('mCopy');
    function ok(){
      if(mc){ mc.className='recv-copy-msg ok'; mc.textContent='Address copied — paste it to share.'; }
      if(btn){
        btn.textContent='COPIED';
        btn.classList.add('copy-ok');
        clearTimeout(btn._copyT);
        btn._copyT=setTimeout(function(){ btn.textContent='COPY ADDRESS'; btn.classList.remove('copy-ok'); }, 1600);
      }
    }
    function fail(){
      if(mc){ mc.className='recv-copy-msg err'; mc.textContent='Copy failed — long-press the address and copy manually.'; }
    }
    if(navigator.clipboard&&navigator.clipboard.writeText){
      navigator.clipboard.writeText(t).then(ok).catch(function(){
        try{ var ta=document.createElement('textarea'); ta.value=t; ta.setAttribute('readonly',''); ta.style.position='fixed'; ta.style.opacity='0'; document.body.appendChild(ta); ta.select(); document.execCommand('copy'); document.body.removeChild(ta); ok(); }catch(e){ fail(); }
      });
    } else {
      try{ var ta=document.createElement('textarea'); ta.value=t; ta.setAttribute('readonly',''); ta.style.position='fixed'; ta.style.opacity='0'; document.body.appendChild(ta); ta.select(); document.execCommand('copy'); document.body.removeChild(ta); ok(); }catch(e){ fail(); }
    }
  }
  if($('btnCopy')) $('btnCopy').onclick=function(){ copyRecvAddr(); };
  if($('recvAddr')){
    $('recvAddr').onclick=function(){ if(addr) copyRecvAddr(); };
    $('recvAddr').onkeydown=function(e){
      if(!addr) return;
      if(e.key==='Enter'||e.key===' '){ e.preventDefault(); copyRecvAddr(); }
    };
  }
  /* after unlock/refresh, keep receive pane address in sync */
  var __oldSetLock=setLock;
  /* patch via refresh path: see syncRecvPane calls in updateCoach */
  $('btnOrder').onclick=async function(){
    if(!seed){box('mOrder',false,'Unlock wallet first (red tab) — then post buy/sell here');openMenu(1);return;}
    var side=($('side').value||'').toLowerCase();
    var pair=($('pair').value||'NSU/NOTE').trim().toUpperCase();
    var amountH=($('oamt').value||'').trim();
    var priceH=($('opx').value||'').trim();
    var amount=parseAmtMicros(amountH);
    var price=parseAmtMicros(priceH);
    if(!amount||amount==='0'||!price||price==='0'){box('mOrder',false,'Bad amount/price');return;}
    if(side!=='buy'&&side!=='sell'){box('mOrder',false,'Pick buy or sell');return;}
    var ts=Math.floor(Date.now()/1000);
    var expiry=ts+86400;
    try{
      var me=await nsAddrFromSeed(seed);
      var salt=Array.from(crypto.getRandomValues(new Uint8Array(4))).map(function(b){return('0'+b.toString(16)).slice(-2)}).join('');
      var order_id=await shaHex(me+'|'+ts+'|'+side+'|'+amount+'|'+price+'|'+salt);
      var body=['order','1',order_id,me,side,pair,amount,price,String(expiry),String(ts)].join('|');
      var r;
      if(ecdsaReady&&ecdsaPriv&&ecdsaSpkiHex){
        var ecdsa_sig=await ecdsaSignMsg(ecdsaPriv, body);
        r=await api('order',{addr:me,side:side,pair:pair,amount:amountH,price:priceH,ts:String(ts),expiry:String(expiry),order_id:order_id,pubkey:ecdsaSpkiHex,ecdsa_sig:ecdsa_sig});
      } else {
        var client_sig=await nsMacSign(seed, body);
        r=await api('order',{seed:seed,side:side,pair:pair,amount:amountH,price:priceH,ts:String(ts),expiry:String(expiry),order_id:order_id,client_sig:client_sig});
      }
      var msg='';
      if(r.ok){
        msg='Posted · waiting for someone to take it';

        var br=r.brains||{};
        var guides=[];
        if(br.order_sanity&&br.order_sanity.flag){ var g1=localBrainGuide(br.order_sanity,'notes'); if(g1) guides.push(g1); }
        if(br.pair_sane&&br.pair_sane.flag){ var g2=localBrainGuide(br.pair_sane,'notes'); if(g2) guides.push(g2); }
        if(guides.length) msg+=' · '+guides.join(' · ')+' (advisory · not a ban)';
      } else {
        msg='Could not post: '+(r.err||'fail')+(r.available_fmt?(' · avail '+r.available_fmt+' NSU'):'');
      }
      box('mOrder',!!r.ok,msg);
      if(r.ok) refresh();
    }catch(e){ box('mOrder',false,String(e.message||e)); }
  };
  $('btnRep').onclick=async function(){
    if(!seed){box('mRep',false,'Unlock first');return;}
    var rated=($('rated').value||'').trim().toLowerCase().replace(/[^a-f0-9]/g,'');
    var score=String($('rscore').value||'0');
    var ctx=($('rctx').value||'').trim().slice(0,160);
    if(rated.length!==64){box('mRep',false,'Need their full address to rate');return;}
    try{
      var rater=await nsAddrFromSeed(seed);
      var ts=Math.floor(Date.now()/1000);
      var body=['reputation','1',rater,rated,score,ctx,String(ts)].join('|');
      var r;
      if(ecdsaReady&&ecdsaPriv&&ecdsaSpkiHex){
        var ecdsa_sig=await ecdsaSignMsg(ecdsaPriv, body);
        r=await api('reputation',{rater:rater,rated:rated,score:score,context:ctx,ts:String(ts),pubkey:ecdsaSpkiHex,ecdsa_sig:ecdsa_sig});
      } else {
        var client_sig=await nsMacSign(seed, body);
        r=await api('reputation',{seed:seed,rated:rated,score:score,context:ctx,ts:String(ts),client_sig:client_sig});
      }
      box('mRep',!!r.ok,r.ok?('Rated. Their total score now '+r.rated_total+(r.sig_mode==='ecdsa_p256_v1'?' · signed (experimental)':(r.sig_mode==='browser_hmac_v1'?' · signed in browser':''))):('Err '+(r.err||'fail')));
      if(r.ok) refresh();
    }catch(e){ box('mRep',false,String(e.message||e)); }
  };
  $('btnAudit').onclick=async function(){
    var r=await apiGet('audit',{n:'80'});
    if(!r.ok){$('audit').textContent='err';return;}
    $('audit').textContent=(r.tail||[]).map(function(x){return JSON.stringify(x)}).join('\n');
  };
  $('btnRefresh').onclick=async function(){
    if(seed){
      try{
        var r=await api('accrue',{seed:seed});
        if(r.ok){
          renderMod(!!r.has_modifier, r.has_modifier?{permanent:true}:null, r.accrual);
          if(r.accrual&&r.accrual.paid_fmt&&r.accrual.paid_fmt!=='0'&&$('midMsg'))
            $('midMsg').innerHTML='<div class="ok">Lazy accrue +'+esc(r.accrual.paid_fmt)+' NSU</div>';
        }
      }catch(e){}
    }
    refresh();
  };
  window.addEventListener('beforeunload',function(){seed=null;pending=null;adminSeed=null;adminPass=null;ecdsaPriv=null;ecdsaSpkiHex='';ecdsaReady=false});

  /* ---- Gate show/hide owned by data-ns-entry-boot; main IIFE only exposes post-ENTER coach hook ---- */
  // Expose for entry-boot ENTER path (updateCoach + open Wallet once, no second onclick).
  window.__nsOnEnter=function(){
    try{ push('enter',String(Date.now())); }catch(e){}
    if(typeof updateCoach==='function') updateCoach();
    openMenu(1);
  };
  /* coach shortcut buttons removed (TRADE-QOL fluff cut) */

  /* ---- Operator console: Ctrl+Alt+Shift+N — U7 seed door ---- */
  function acAuthed(){ return !!(adminSeed || adminPass); }
  function acAuthBody(extra){
    var o=extra?Object.assign({},extra):{};
    if(adminSeed) o.seed=adminSeed;
    if(adminPass) o.admin_pass=adminPass;
    return o;
  }
  async function acRefreshStatus(){
    try{
      var st=await apiGet('admin_status');
      if(!st.ok) return st;
      var open=acAuthed();
      if($('acLogin')) $('acLogin').style.display=open?'none':'block';
      if($('acPanel')) $('acPanel').style.display=open?'block':'none';
      if(open){
        $('acVer').textContent=st.version||'-';
        var ep=st.epoch||{};
        $('acEpoch').textContent='#'+(ep.epoch_n||'?')+' early='+(ep.in_early_window?'yes':'no');
        $('acMods').textContent=String(st.mods_count!=null?st.mods_count:0);
        $('acTbal').textContent=(st.treasury_bal_fmt||'-')+' NSU';
        $('acChain').textContent=String(st.chain_len!=null?st.chain_len:0);
        $('acTaddr').textContent=st.treasury_addr||'-';
        if($('acRented')) $('acRented').textContent=st.rented?'yes (LORD operator_addr)':'no (KING holds panel+faucet)';
      }
      return st;
    }catch(e){ return {ok:false,err:String(e)}; }
  }
  function openAdmin(){
    $('adminConsole').classList.add('show');
    acRefreshStatus();
  }
  function closeAdmin(){
    $('adminConsole').classList.remove('show');
    if($('acReveal')){ $('acReveal').style.display='none'; $('acReveal').textContent=''; }
  }
  $('acClose').onclick=closeAdmin;
  window.addEventListener('keydown',function(e){
    push('k',e.key);
    // Ctrl+Alt+Shift+N
    if(e.ctrlKey&&e.altKey&&e.shiftKey&&(e.key==='N'||e.key==='n')){
      e.preventDefault();
      if($('adminConsole').classList.contains('show')) closeAdmin();
      else openAdmin();
    }
    if(e.key==='Escape'&&$('adminConsole').classList.contains('show')) closeAdmin();
  });
  if($('acBtnLogin')) $('acBtnLogin').onclick=async function(){
    var s=String($('acSeed').value||'').trim();
    if(!s){ box('acLoginMsg',false,'Paste this site wallet seed'); return; }
    var r=await api('admin_login',{seed:s});
    box('acLoginMsg',!!r.ok,r.ok?'Unlocked with site seed':('Err '+(r.err||'')));
    if(r.ok){ adminSeed=s; adminPass=null; $('acSeed').value=''; await acRefreshStatus(); }
  };
  if($('acBtnLegacy')) $('acBtnLegacy').onclick=async function(){
    var p=$('acPass').value;
    if(!p){ box('acLoginMsg',false,'Legacy password empty'); return; }
    var r=await api('admin_login',{admin_pass:p});
    box('acLoginMsg',!!r.ok,r.ok?'Unlocked with legacy password (migrate debt)':('Err '+(r.err||'')));
    if(r.ok){ adminPass=p; adminSeed=null; $('acPass').value=''; await acRefreshStatus(); }
  };
  if($('acBtnLogout')) $('acBtnLogout').onclick=function(){
    adminSeed=null; adminPass=null;
    if($('acReveal')){ $('acReveal').style.display='none'; $('acReveal').textContent=''; }
    box('acPanelMsg',true,'Locked (memory wiped)');
    acRefreshStatus();
  };
  if($('acBtnReveal')) $('acBtnReveal').onclick=async function(){
    if(!acAuthed()) return;
    var r=await api('admin_reveal',acAuthBody());
    if(!r.ok){ box('acPanelMsg',false,'Err '+(r.err||'')+' (KING faucet seed required)'); return; }
    var lines=[
      'treasury.secret: '+r.treasury_secret,
      'treasury addr: '+r.treasury_addr,
      '',
      r.note||''
    ];
    $('acReveal').style.display='block';
    $('acReveal').textContent=lines.join('\n');
    box('acPanelMsg',true,'Faucet secret revealed (KING only — not Linux root)');
  };
  function downloadJson(obj, name){
    var blob=new Blob([JSON.stringify(obj,null,2)],{type:'application/json'});
    var a=document.createElement('a');
    a.href=URL.createObjectURL(blob);
    a.download=name;
    a.click();
    setTimeout(function(){URL.revokeObjectURL(a.href)},2000);
  }
  if($('acBtnBackup')) $('acBtnBackup').onclick=async function(){
    if(!acAuthed()) return;
    var r=await api('admin_backup',acAuthBody({include_secrets:''}));
    if(!r.ok){ box('acPanelMsg',false,'Err '+(r.err||'')); return; }
    downloadJson(r,'nst-backup-'+Date.now()+'.json');
    box('acPanelMsg',true,'Backup downloaded (no secrets)');
  };
  if($('acBtnBackupSec')) $('acBtnBackupSec').onclick=async function(){
    if(!acAuthed()) return;
    if(!confirm('Include treasury secret in the JSON file? KING only.')) return;
    var r=await api('admin_backup',acAuthBody({include_secrets:'1'}));
    if(!r.ok){ box('acPanelMsg',false,'Err '+(r.err||'')+' (KING faucet required)'); return; }
    downloadJson(r,'nst-backup-SECRETS-'+Date.now()+'.json');
    box('acPanelMsg',true,'Backup+secrets downloaded - store offline');
  };
  if($('acBtnPay')) $('acBtnPay').onclick=async function(){
    if(!acAuthed()) return;
    var r=await api('admin_pay',acAuthBody({
      to:$('acPayTo').value.trim(),
      amount:$('acPayAmt').value.trim(),
      memo:$('acPayMemo').value.trim()||'admin:pay'
    }));
    box('acPayMsg',!!r.ok,r.ok?('Paid. Treasury now '+r.treasury_bal_fmt):('Err '+(r.err||'')+(r.have_fmt?(' have '+r.have_fmt):'')));
    if(r.ok){ await acRefreshStatus(); refresh(); }
  };
  if($('acBtnLadder')) $('acBtnLadder').onclick=async function(){
    if(!acAuthed()) return;
    var body=acAuthBody({});
    var a=($('acLadderAmt')&&$('acLadderAmt').value||'').trim();
    if(a) body.amount=a;
    var r=await api('admin_treasury_ladder',body);
    if(!r.ok){
      box('acLadderMsg',false,'Err '+(r.err||'')+(r.available_fmt?(' avail '+r.available_fmt):'')+(r.detail?(' · '+r.detail):''));
      return;
    }
    var n=r.posted!=null?r.posted:0;
    var sk=r.skipped!=null?r.skipped:0;
    var px=(r.prices_fmt&&r.prices_fmt.length)?r.prices_fmt.join(' / '):'ladder';
    box('acLadderMsg',true,'Ladder: posted '+n+' real ask(s)'+(sk?(' · skipped '+sk+' already on chain'):'')+' · '+((r.amount_fmt)||'')+' NSU @ '+px+' · half-bids armed · visitors TAKE ORDER on Trade book');
    if(r.ok){ await acRefreshStatus(); refresh(); }
  };

  setLock(true);
  updateCoach();
  openMenu(1); // TRADE-QOL: Wallet tab active by default (pre-ENTER too; gate covers until agree)
  // TRADE-QOL2: measure header/tab/footer — stage hosts one normal-flow panel
  (function layoutChrome(){
    function measure(){
      var h=$('topChrome'), f=$('siteFooter'), t=document.querySelector('.BottomMenu');
      if(h) document.documentElement.style.setProperty('--hdr-h', h.offsetHeight+'px');
      if(f) document.documentElement.style.setProperty('--foot-h', f.offsetHeight+'px');
      if(t) document.documentElement.style.setProperty('--tab-h', t.offsetHeight+'px');
    }
    measure();
    window.addEventListener('resize', measure);
    setTimeout(measure, 50);
  })();
  // Header Options/Mirrors → same modals as entry tools (support modal removed TRADE-QOL3)
  function wireHdr(btnId, modalId){
    var b=$(btnId); if(!b||b.__hdrWired) return;
    b.__hdrWired=1;
    b.onclick=function(){
      var m=document.getElementById(modalId);
      if(m){ m.classList.add('show'); m.style.display='flex'; }
    };
  }
  wireHdr('nsHdrOptBtn','nsOptModal');
  wireHdr('nsHdrMirBtn','nsMirModal');
  // Mirror value-strip refresh into Options mirrors when state updates pub* ids
  (function syncOptValueIds(){
    var pairs=[['pubK','optPubK'],['pubP','optPubP'],['pubP2','optPubP2'],['pubValNote','optPubValNote'],['pubBoot','optPubBoot']];
    if(typeof MutationObserver==='undefined') return;
    pairs.forEach(function(p){
      var src=document.getElementById(p[0]), dst=document.getElementById(p[1]);
      if(!src||!dst) return;
      var mo=new MutationObserver(function(){
        if(p[0]==='pubBoot'){
          if(src.hasAttribute('hidden')) dst.setAttribute('hidden',''); else dst.removeAttribute('hidden');
          dst.textContent=src.textContent;
        } else if(src.querySelector('b')) {
          var b=dst.querySelector('b'); if(b) b.textContent=src.querySelector('b').textContent;
          else dst.innerHTML=src.innerHTML;
        } else {
          dst.textContent=src.textContent;
        }
      });
      mo.observe(src,{childList:true,characterData:true,subtree:true,attributes:true});
    });
  })();
  refresh();
  // self-hash ping
  apiGet('selfhash').then(function(h){
    if(h&&h.ok) console.log('release', h.version, h.sha256);
  }).catch(function(){});
})();
</script>

<!-- ns-fab + orphan #nsMirror removed — entry modal Options/Mirrors is the structure (nsMirModal) -->

<script data-ns-entry-boot="1">
(function(){
  if (window.__NS_ENTRY_BOOT__) return;
  window.__NS_ENTRY_BOOT__ = 1;
  var KEY = 'nst_gate_v1';
  var GATE_ID = 'gateModal';
  var ENTER_ID = 'gateEnter';
  var MIRRORS = [
    'https://nosignup.com/','https://nosignup.org/','https://nosignup.net/',
    'https://nosignup.trade/','https://nosignup.chat/','https://nosignup.work/',
    'https://nosignup.market/','https://nosignup.date/','https://nosignup.fun/','https://nosignup.info/'
  ];
  function el(id){ return document.getElementById(id); }
  function hideGate(){
    var g = el(GATE_ID);
    if (!g) return;
    g.classList.remove('show');
    g.classList.add('hidden');
    g.style.display = 'none';
    document.body.classList.add('ns-entered');
  }
  function showGate(){
    var g = el(GATE_ID);
    if (!g) return;
    // Must clear ns-entered — CSS body.ns-entered .ns-entry { display:none !important }
    // otherwise Options → Reset ENTER cannot re-open the gate after first agree.
    document.body.classList.remove('ns-entered');
    g.classList.add('show');
    g.classList.remove('hidden');
    g.style.display = 'flex';
  }
  function openSub(id){
    var m = el(id);
    if (m) { m.classList.add('show'); m.style.display = 'flex'; }
  }
  function closeSub(id){
    var m = el(id);
    if (m) { m.classList.remove('show'); m.style.display = 'none'; }
  }
  function copyText(t){
    t = String(t || '');
    if (!t) return;
    if (navigator.clipboard && navigator.clipboard.writeText) {
      navigator.clipboard.writeText(t).catch(function(){});
      return;
    }
    try {
      var i = document.createElement('textarea');
      i.value = t; i.style.position = 'fixed'; i.style.opacity = '0';
      document.body.appendChild(i); i.select(); document.execCommand('copy');
      document.body.removeChild(i);
    } catch (e) {}
  }
  /* Every page load: gate required (no durable localStorage skip). */
  try { localStorage.removeItem(KEY); } catch (e) {}
  showGate();

  var enter = el(ENTER_ID);
  if (enter && !enter.__nsWired) {
    enter.__nsWired = 1;
    enter.addEventListener('click', function(){
      /* consent is this page load only — not stored */
      hideGate();
      // Prefer app hook once (wallet open + coach). Fallback if main script missing.
      if (window.__nsOnEnter) {
        try { window.__nsOnEnter(); } catch (e) {}
      } else {
        if (typeof updateCoach === 'function') { try { updateCoach(); } catch (e) {} }
        if (typeof openMenu === 'function') { try { openMenu(1); } catch (e) {} }
      }
    });
  }

  var minorLeave = el('nsMinorLeave');
  if (minorLeave && !minorLeave.__nsWired) {
    minorLeave.__nsWired = 1;
    minorLeave.addEventListener('click', function(){
      window.location.href = 'https://www.khanacademy.org/';
    });
  }

  var list = el('nsMirList');
  if (list) {
    list.innerHTML = MIRRORS.map(function(u){
      return '<li><a href="'+u+'" target="_blank" rel="noopener">'+u+'</a></li>';
    }).join('');
  }

  var ob = el('nsOptBtn');
  if (ob && !ob.__nsWired) { ob.__nsWired = 1; ob.addEventListener('click', function(){ openSub('nsOptModal'); }); }
  var mb = el('nsMirBtn');
  if (mb && !mb.__nsWired) { mb.__nsWired = 1; mb.addEventListener('click', function(){ openSub('nsMirModal'); }); }
  /* TRADE-QOL3: support button/modal removed from trade (moves to entrance later) */

  document.querySelectorAll('[data-close]').forEach(function(b){
    if (b.__nsWired) return;
    b.__nsWired = 1;
    b.addEventListener('click', function(){ closeSub(b.getAttribute('data-close')); });
  });
  document.querySelectorAll('.ns-sub').forEach(function(m){
    if (m.__nsWired) return;
    m.__nsWired = 1;
    m.addEventListener('click', function(e){
      if (e.target === m) { m.classList.remove('show'); m.style.display = 'none'; }
    });
  });
  document.querySelectorAll('.addr[data-copy], .d-addr[data-copy]').forEach(function(node){
    if (node.__nsWired) return;
    node.__nsWired = 1;
    node.addEventListener('click', function(){
      copyText(node.getAttribute('data-copy') || '');
      node.style.outline = '1px solid #8f8';
      setTimeout(function(){ node.style.outline = ''; }, 700);
    });
  });
  var rd = el('nsOptReset');
  if (rd && !rd.__nsWired) {
    rd.__nsWired = 1;
    rd.addEventListener('click', function(){
      try { localStorage.removeItem(KEY); } catch (e) {}
      showGate();
    });
  }
  var dg = el('nsOptDbg');
  if (dg && !dg.__nsWired) {
    dg.__nsWired = 1;
    dg.addEventListener('click', function(){
      // Prefer explicit toggle (avoids double-click no-op if FAB also wired).
      if (typeof window.__nsDbgToggle === 'function') { window.__nsDbgToggle(); return; }
      var f = el('nsDbgFab');
      if (f) f.click();
    });
  }
  // Minor exit: live control is #nsMinorLeave (wired above); no ageMinorButton node.
})();
</script>
<script>
/* NOSIGNUP empire debug DNA -- toggleable; copy-paste for model handoff. Opt-in only. */
(function(){
  if (window.__NS_EMPIRE_DBG__) return;
  window.__NS_EMPIRE_DBG__ = 1;
  var KEY = 'ns_empire_dbg_v1';
  var SITE = (document.documentElement.getAttribute('data-ns-site')
    || (location.hostname || '').replace(/^www\./,'')
    || 'nosignup');
  var VER = (document.documentElement.getAttribute('data-ns-ver') || '');
  var errs = [];
  var logs = [];
  function pushErr(m){ errs.unshift(String(m).slice(0,240)); if(errs.length>12) errs.pop(); }
  function pushLog(m){ logs.unshift(String(m).slice(0,200)); if(logs.length>20) logs.pop(); }
  window.addEventListener('error', function(e){
    pushErr((e && e.message ? e.message : 'error') + (e && e.filename ? ' @'+e.filename+':'+(e.lineno||'') : ''));
    if (window.__nsDbgRender) window.__nsDbgRender();
  });
  window.addEventListener('unhandledrejection', function(e){
    var r = e && e.reason; pushErr('promise: ' + (r && r.message ? r.message : r));
    if (window.__nsDbgRender) window.__nsDbgRender();
  });
  var open = false;
  try { open = localStorage.getItem(KEY) === '1'; } catch (e) {}
  function lsKeys(){
    var out = [];
    try {
      for (var i = 0; i < localStorage.length; i++) {
        var k = localStorage.key(i);
        if (!k) continue;
        if (/^ns|nosignup|nsm_|nsd_|nsw_|nst_|nsn_|nsi_|nsc_|nso_|fun|NSF/i.test(k)) {
          var v = localStorage.getItem(k);
          out.push(k + '=' + String(v == null ? '' : v).slice(0,80));
        }
      }
    } catch (e) { out.push('(localStorage blocked)'); }
    return out.slice(0, 40);
  }
  function report(){
    var lines = [];
    lines.push('=== NOSIGNUP EMPIRE DEBUG (copy for model handoff) ===');
    lines.push('site=' + SITE + (VER ? ' ver=' + VER : ''));
    lines.push('url=' + location.href);
    lines.push('ts=' + new Date().toISOString());
    lines.push('ua=' + navigator.userAgent);
    lines.push('vp=' + window.innerWidth + 'x' + window.innerHeight + ' dpr=' + (window.devicePixelRatio || 1));
    lines.push('online=' + (navigator.onLine ? '1' : '0') + ' lang=' + (navigator.language || ''));
    lines.push('--- localStorage (ns*) ---');
    var lk = lsKeys(); lines.push(lk.length ? lk.join('\n') : '(none)');
    lines.push('--- recent errors ---');
    lines.push(errs.length ? errs.join('\n') : '(none)');
    lines.push('--- notes ---');
    lines.push(logs.length ? logs.join('\n') : '(none)');
    lines.push('=== END ===');
    return lines.join('\n');
  }
  function ensureUi(){
    if (document.getElementById('nsDbgFab')) return;
    var fab = document.createElement('button');
    fab.type = 'button';
    fab.id = 'nsDbgFab';
    fab.textContent = 'DBG';
    fab.title = 'Debug overlay â€” Ctrl+Alt+D. Copy report for AI handoff.';
    fab.setAttribute('aria-label', 'Toggle debug overlay');
    fab.style.cssText = 'position:fixed;left:8px;bottom:8px;z-index:2147483646;min-width:44px;min-height:44px;padding:0 10px;border:1px solid #0f0;background:rgba(0,0,0,.85);color:#0f0;font:700 12px/1 monospace;cursor:pointer;border-radius:4px;opacity:.55;display:none';
    fab.onmouseenter = function(){ fab.style.opacity = '1'; };
    fab.onmouseleave = function(){ fab.style.opacity = open ? '1' : '.55'; };
    var panel = document.createElement('div');
    panel.id = 'nsDbgPanel';
    panel.style.cssText = 'display:none;position:fixed;left:8px;bottom:56px;z-index:2147483646;width:min(420px,92vw);max-height:min(50vh,420px);overflow:auto;background:rgba(0,0,0,.92);color:#0f0;font:11px/1.35 monospace;padding:10px;border:1px solid #0f0;border-radius:6px;white-space:pre-wrap;word-break:break-word;box-shadow:0 8px 32px rgba(0,0,0,.5)';
    var bar = document.createElement('div');
    bar.style.cssText = 'display:flex;gap:8px;margin-bottom:8px;position:sticky;top:0;background:rgba(0,0,0,.95);padding-bottom:6px';
    var copy = document.createElement('button');
    copy.type = 'button';
    copy.textContent = 'COPY REPORT';
    copy.style.cssText = 'flex:1;min-height:40px;border:1px solid #0f0;background:#031;color:#0f0;font:700 12px monospace;cursor:pointer';
    var close = document.createElement('button');
    close.type = 'button';
    close.textContent = 'CLOSE';
    close.style.cssText = 'min-height:40px;padding:0 12px;border:1px solid #0f0;background:#000;color:#0f0;font:700 12px monospace;cursor:pointer';
    var pre = document.createElement('div');
    pre.id = 'nsDbgBody';
    bar.appendChild(copy);
    bar.appendChild(close);
    panel.appendChild(bar);
    panel.appendChild(pre);
    function render(){
      pre.textContent = report();
    }
    window.__nsDbgRender = render;
    window.__nsDbgNote = function(m){ pushLog(m); render(); };
    function setOpen(v){
      open = !!v;
      try { localStorage.setItem(KEY, open ? '1' : '0'); } catch (e) {}
      panel.style.display = open ? 'block' : 'none';
      // FAB only visible after opt-in (Options Toggle DBG or Ctrl+Alt+D)
      fab.style.display = open ? '' : 'none';
      fab.style.opacity = open ? '1' : '.55';
      fab.style.borderColor = open ? '#8f8' : '#0f0';
      if (open) render();
    }
    window.__nsDbgToggle = function(){ setOpen(!open); };
    window.__nsDbgSet = function(v){ setOpen(!!v); };
    fab.onclick = function(e){ e.preventDefault(); setOpen(!open); };
    close.onclick = function(){ setOpen(false); };
    copy.onclick = function(){
      var t = report();
      function ok(){ copy.textContent = 'COPIED'; setTimeout(function(){ copy.textContent = 'COPY REPORT'; }, 1200); }
      if (navigator.clipboard && navigator.clipboard.writeText) {
        navigator.clipboard.writeText(t).then(ok).catch(function(){
          var ta = document.createElement('textarea'); ta.value = t; document.body.appendChild(ta); ta.select();
          try { document.execCommand('copy'); ok(); } catch (e) {}
          document.body.removeChild(ta);
        });
      } else {
        var ta = document.createElement('textarea'); ta.value = t; document.body.appendChild(ta); ta.select();
        try { document.execCommand('copy'); ok(); } catch (e) {}
        document.body.removeChild(ta);
      }
    };
    document.addEventListener('keydown', function(e){
      if (e.ctrlKey && e.altKey && (e.key === 'd' || e.key === 'D')) {
        e.preventDefault();
        setOpen(!open);
      }
    });
    function mount(){
      if (!document.body) return;
      document.body.appendChild(fab);
      document.body.appendChild(panel);
      setOpen(open);
    }
    if (document.body) mount();
    else document.addEventListener('DOMContentLoaded', mount);
  }
  if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', ensureUi);
  else ensureUi();
})();
</script>
</body>
</html>