# Jyotisha Web Design System

`CLAUDE_DESIGN.md` 只作上游参照，不是实现合同。本文件写已经上线的界面。不要删那份参照文件。

## 1. 组件一律用 shadcn base-nova，令牌如下

控件放在 `src/components/ui`，一律用 shadcn base-nova。缺的组件用固定版本的 shadcn CLI 加，不手抄，也不改组件的行为。图标只用 Lucide。动效只用 Motion，时长和曲线用下一节的预设。可拖宽、可收起的分栏用 react-resizable-panels；侧栏右缘和对话右栏左缘这两处单边拖宽改用 `useDragWidth`（2026-10-27，BUG-1456）。拖动排序用 dnd-kit。跨组件状态用 Zustand。

`globals.css` 在 Tailwind 的下一行引入 `shadcn/tailwind.css`。长相不换：下面的色板就是令牌，映射成 shadcn 的 `--background`、`--primary` 等。深色跟着已有的 `--color-*`，不另抄一套。星盘、星图的 SVG 绘制，以及那一刻的天空这张画布，仍按后面的章节手绘。


### Palette

| Role | Token | Value | Usage |
|---|---|---:|---|
| Canvas | `--color-canvas` | `#fbfaf7` | Main reading surface, inputs, light controls |
| Page floor | `--color-canvas-soft` | `#f3f2ee` | App background and quiet secondary bands |
| Warm surface | `--color-canvas-muted` | `#ebe9e3` | Cards, user messages, table headings |
| Strong neutral | `--color-canvas-strong` | `#e1ded6` | Pressed and emphasized neutral surfaces |
| Sidebar glass | `--color-sidebar` | `rgba(235, 233, 227, .86)` | Desktop navigation only |
| Sidebar solid | `--color-sidebar-solid` | `#ebe9e3` | Mobile drawer, and any reduced-transparency surface |
| Selected surface | `--color-selected` | `rgba(255, 255, 255, .62)` | Current navigation and raised light rows |
| Ink | `--color-ink` | `#1d1d1f` | Headlines and primary text |
| Body | `--color-ink-strong` | `#32322f` | Strong body copy |
| Secondary text | `--color-ink-secondary` | `#5f5f59` | Supporting copy and labels, section headings |
| Tertiary text | `--color-ink-tertiary` | `#6a6963` | Hints, metadata, empty-state copy |
| Primary action (text rank) | `--color-action` | `#a9583e` | Links, tinted labels, icons — anything the user reads |
| Primary action (fill rank) | `--color-action-strong` | `#cc785c` | Avatar fills, the active session rail, rings, carets, checked radios — never a button with a label |
| Solid button fill | `--color-action-fill` / `--color-on-action-fill` | `#a9583e` / `#fbfaf7` (dark `#8f4a33` / `#f2f0ea`) | Every solid primary button: `<Button>` default, `.button-primary`, the send / stop control, the calendar's selected day (BUG-1079) |
| Primary soft | `--color-action-soft` | `#f7ece5` | Editorial emphasis without a dark block |
| Primary active | `--color-action-hover` | `#8f4630` | Hover and pressed action |
| Dark punctuation | `--color-surface-dark` | `#1d1d1f` | Compact primary buttons and user-authored emphasis only |
| On dark | `--color-on-dark` | `#fbfaf7` | Text on compact dark controls |
| Hairline | `--color-border` | `#d8d6cf` | Default separators and controls |
| Strong hairline | `--color-border-strong` | `#b8b5ad` | Inputs and higher-contrast dividers |
| Success | `--color-success` | `#28633e` | Available and completed states |
| Warning | `--color-warning` | `#b07b22` | Caution states |
| Error | `--color-danger` | `#9a2f2f` | Errors and destructive actions |
| Accessible focus | `--color-focus` | `#cc785c` | Keyboard focus and input focus |

The personal report reuses the product palette. `--report-*` tokens exist so
print can pin a light sheet independently of the screen theme; they are the
canvas, hairline, and action colors, not a second visual identity. Nothing
outside `.personal-report-*` and `.report-center-*` may use them.

| Role | Token | Value | Usage |
|---|---|---:|---|
| Report paper | `--report-paper` | `#fbfaf7` | Same as `--color-canvas`; the reading sheet |
| Report rule | `--report-rule` | `#d8d6cf` | Same as `--color-border`; rules inside the sheet |
| Report accent | `--report-accent` | `#85432f` | **Deliberately not the app accent.** Kept at the old deep brown; see the note below. |

Rules: neutrals stay warm; the action color is scarce; roughly ninety percent of the interface remains light. Dark ink is punctuation, never a page-scale surface. No raw color may appear in UI styles outside these tokens and their documented alpha mixes.

### shadcn aliases (2026-10-24, K0)

`globals.css` imports `shadcn/tailwind.css` on the line after Tailwind. Semantic variables on the light `:root` point at the palette above. Dark mode follows because those aliases read `--color-*` tokens the dark blocks already override. The aliases are not copied into the dark blocks.

| shadcn | Points at |
|---|---|
| `--background` / `--foreground` | `--color-canvas` / `--color-ink` |
| `--card`, `--secondary`, `--muted` | `--color-canvas-muted` |
| `--primary` / `--primary-foreground` | `--color-action-fill` / `--color-on-action-fill` |
| `--accent` | `--color-selected` |
| `--destructive` | `--color-danger` |
| `--border` / `--input` | `--color-border` / `--color-border-strong` |
| `--ring` | `--color-focus` |
| `--sidebar` | `--color-sidebar` |
| `--radius` | `12px`, the same length as `--radius-lg`. `--radius-sm` and `--radius-md` stay 8px |

`@theme` `--color-border` and `--color-input` stay the light hexes `#d8d6cf` and `#b8b5ad`. `border-border` and `border-input` already paint the outline button, popover, and textarea. Pointing those theme values at `var()` would restyle them in dark mode. Semantic `--border` and `--input` do follow the theme, for components added from here on.

Tailwind `bg-primary` stays the locked alias `--color-action` (text rank). Semantic `--primary`, which new shadcn components read, is `--color-action-fill`. In dark mode those are different colors (`#d78064` and `#8f4a33`).

New controls live in `src/components/ui` and are the shadcn base-nova components. Outside that folder, lint rejects a new native `button`, `dialog`, `select`, checkbox or radio `input`, the dialog/menu/tab/listbox roles, `createPortal`, and a short list of characters used as icons. Chart and star-map SVG drawings are exempt from the icon rule only: `personal-report/vedic-chart-svg.tsx` and `chart-page/western-wheel-svg.tsx`. Buttons in those files are still rejected. `frontend/eslint/ui-primitive-whitelist.json` may only shrink. After K7 it keeps two files that cannot move without changing locked behavior: `birth-sky/birth-sky-converge.tsx` (the sky drawing uses a native dialog stage) and `rectification-agentic-chat.tsx` (the board peek is portaled into the header, not a dialog).

### Where the action color appears

The accent has **two ranks**, because one hex cannot do both jobs. Claude coral
`#cc785c` measures **3.14:1** against the `#fbfaf7` canvas — fine for a fill or a
border, not for text. And 53 of the 62 accent call sites are `color:`, including
the markdown links inside assistant answers.

- `--color-action` (`#a9583e`) is the **text and icon rank**: 4.85:1 on canvas.
  It is the same coral darkened, not the old brown returning.
- `--color-action-strong` (`#cc785c`) is the **fill rank**, where the 3:1
  non-text threshold applies: button and avatar fills, the send/stop control, the
  2px active-session rail, the focus ring, the typing caret, checked radios.

Solid buttons have their own pair, `--color-action-fill` / `--color-on-action-fill`
(BUG-1079, product decision 2026-09-28). The earlier accepted gap — white on
`#cc785c` on `.button-primary` at 3.14:1 on canvas — is **withdrawn**: every solid
primary button is `#fbfaf7` on `#a9583e` (4.85:1) in light and `#f2f0ea` on
`#8f4a33` (5.77:1) in dark, hover `#8f4630` / 6% ink mixed in. The login and
onboarding buttons are one step darker than claude.ai; the product owner accepted
that for readable labels. `#cc785c` keeps its non-button jobs above.

Why two button systems used to disagree: an unlayered `button { color: inherit; }`
in `globals.css` beat Tailwind's layered `text-primary-foreground`, so every solid
`<Button>` rendered the page ink on clay (3.33:1 light, 2.57:1 dark). That rule is
gone (Tailwind's preflight already inherits colour in `@layer base`). Do not add
unlayered element rules for `button` colour; they silently override every
component utility.

Scarce is still a budget. The sidebar spends it in exactly three places, and a
fourth needs a reason:

1. `新建对话` — the one high-signal action in the nav, as tinted text and icon on
   a transparent row (`--color-action`, deepening to `--color-action-hover`).
   Never a filled block: a full-width terracotta surface would break the
   ninety-percent-light rule.
2. The 2px bar on the active session (`--sidebar-ring`, which follows
   `--color-focus`).
3. The profile initial's circle (`--color-action-strong`), which only renders
   when the account has no uploaded avatar.

2 and 3 both disappear on a new account with an avatar — no sessions, no
initial — which is how the sidebar ended up with no accent pixel at all. Item 1
is what guarantees the nav still has a visual anchor in that state. `我的报告`
and every section label stay neutral on purpose; giving them color too would
flatten the hierarchy the accent exists to create.

**The report is not on this system.** `--report-accent` stays `#85432f` while the
app moved to coral. The report is a printed-paper surface, not app chrome; coral
reads washed out on the cream sheet. The two palettes are now independent on
purpose — do not "fix" the mismatch.

The glass surface assumes a light backdrop. The mobile drawer floats above the
scrim instead, so the translucency darkened it to `#E3E1DC` and flattened the
warmth; the drawer takes `--color-sidebar-solid` and drops `backdrop-filter`.

Hierarchy inside the nav comes from ink rank, not hue: section headings sit on
`--color-ink-secondary`, their body and empty-state copy on
`--color-ink-tertiary`. Both used to share tertiary, which is why the nav read
as one flat grey. Empty sections name the next step in that same neutral copy
rather than adding a second tinted call to action.

### Dark theme

The dark theme is a role-preserving restatement of the palette, not an inversion.
Every themeable token is redefined; `frontend/tests/dark-theme-contract.test.ts`
fails if one is missed.

Three states, the standard pattern: with no attribute the page follows the OS
through `prefers-color-scheme`; `data-theme="dark"` or `data-theme="light"` on the
root element pins a choice and wins in both directions. Plain CSS cannot share a
declaration list, so the dark palette is written twice — once inside the media
query, once under the attribute — and a contract test asserts the two copies stay
identical.

| Role | Light | Dark | Why it is not an inversion |
|---|---|---|---|
| Page floor | `#f3f2ee` | `#1a1a19` | On light, raised surfaces step *down* in lightness; on dark they step *up*. The floor is the darkest surface in dark mode, the second-lightest in light mode. |
| Reading surface | `#fbfaf7` | `#262624` | Warm, never neutral black. A cool grey would change the product's identity rather than its brightness. |
| Warm card | `#ebe9e3` | `#30302d` | One step above the reading surface in both themes, by opposite directions. |
| Primary action | `#a9583e` | `#d78064` | Two ranks on light (text `#a9583e`, fill `#cc785c`) collapse to one on dark: `#d78064` already reads on `#262624`, where the light values do not. |
| Action hover | `#8f4630` | `#e59273` | Hover darkens on light and lightens on dark. |
| Dark punctuation | `#1d1d1f` | `#f2f0ea` | A dark block on a light page becomes a light block on a dark page; the token name describes the light-theme value, the role is "highest-contrast block". |
| Semantic hues | `#9a2f2f` / `#28633e` / `#b07b22` | `#e08573` / `#74b189` / `#d8a758` | Lifted for contrast; their `-muted` pairs stop being pale washes and become dark tints of the same hue. |
| Scrim | `rgba(29,29,31,.34)` | `rgba(0,0,0,.58)` | A scrim has to darken a surface that is already dark. |
| Shadow | low alpha | ~5× alpha | Without a light ground to fall on, a soft shadow registers as nothing. |

Contrast is asserted, not assumed: eight inks (ink, ink-strong, ink-secondary,
ink-tertiary, action, danger, success, warning) must all clear 4.5:1 against
four dark surfaces (canvas-soft, canvas, canvas-muted, sidebar-solid). The four
neutral surfaces must increase in lightness in floor → canvas → muted → strong
order. Adding a text or surface token means adding it to that 32-pair matrix;
checking only the reading surface is not enough.

**Surfaces that do not follow the theme, on purpose:**

- The payment QR keeps literal white in both themes. Scanners need the light
  modules to actually be light.
- `@media print` keeps white paper.
- The admin is antd + Refine and stays light. Re-skinning `admin.css` alone would
  give a dark shell around light antd components, which reads as broken; doing it
  properly means switching antd to `theme.darkAlgorithm` as well, and that is a
  separate change.

**The control** is a radio group inside the account menu (avatar → 外观), so it
keeps menu semantics: arrow keys reach it and the current choice is announced.
Three options, matching the three states — 浅色, 深色, 跟随系统. Picking one does
not close the menu, so the change is visible where it was made.

"跟随系统" **removes** `data-theme` rather than writing a third value; the media
query has nothing to match otherwise. The choice is stored under `jyotisha-theme`
and re-applied by a synchronous script at the top of `<head>` — it must not be
deferred, or every load flashes the other theme before hydration. Blocked storage
degrades to following the OS. The preference is per-device, not per-account, and
is read through an external store so a change in one tab reaches the others.

## 动效

动效用 Motion 预设，数据在 `src/lib/motion/presets.ts`。曲线 `--ease-out` 是 `cubic-bezier(.22, 1, .36, 1)`。回弹是 `cubic-bezier(.34, 1.56, .64, 1)`。调用处包在 `LazyMotion` 里，特性包 `domAnimation` 用到才加载，并尊重 `MotionConfig reducedMotion="user"`。减少动态时去掉位移和缩放，淡入不超过 150ms。点数变化在减少动态时立刻换数字。

只动 `transform`、`opacity` 和颜色。循环只留给正在进行的等待，见后面的等待节。侧栏收起和展开不播过渡：Sidebar state changes are immediate. 思考步骤的高度仍是同一元素上 180ms 的 `grid-template-rows`。消息行入场仍是 `chat-message-row.tsx` 里的 160ms，不改用下面 `sendMessage` 的 260ms。启程专用的时长和回弹写在后面的「新用户启程」，不改这张表。

| 预设 | 用在哪 | 时长 | 曲线 | 方向 |
| --- | --- | --- | --- | --- |
| press | 按下 | 120ms | ease-out | 无位移 |
| pageEnter | 翻页进入 | 280ms | ease-out | 纵向 16px，跟随侧栏顺序 |
| pageExit | 翻页离开 | 150ms | ease-out | 无位移 |
| selectionFollow | 当前项高亮滑动 | 260ms | ease-out | 跟布局，不另加位移 |
| tabSwitch | 页签内容 | 260ms | ease-out | 横向，跟随控件 |
| chartType | 换盘型，星体移宫 | 440ms | ease-out | 调用方量实际位移 |
| personSwitch | 换人，格线重画 | 300ms，跟上 800ms | ease-out | 无预设位移 |
| dateTurn | 翻日期 | 260ms | ease-out | 横向，跟随控件 |
| sendMessage | 从输入框送出（消息行入场仍是 160ms） | 260ms | ease-out | 从输入框 |
| sessionSwitch | 换会话 | 200ms | ease-out | 交叉淡入 |
| listReorder | 列表补位 | 260ms，离开 280ms | ease-out | 纵向 |
| dialog | 弹窗 | 220ms，离开 160ms | ease-out | 从触发处，带缩放 |
| drawer | 抽屉 | 280ms，离开 200ms | ease-out | 从边缘 |
| toast | 顶部提示 | 320ms | 回弹 | 向下 |
| numberChange | 点数数字滚动 | 360ms | ease-out | 变少向下，变多向上 |
| localeSwitch | 中英切换 | 320ms，错开 40ms | ease-out | 交叉淡入 |
| disclosure | 展开和收起 | 240ms | ease-out | 纵向 |

## Atmosphere & Identity

Jyotisha feels like a private reading room: warm, editorial, grounded, and quiet enough for reflective conversation. The signature is a pale parchment canvas, translucent warm-gray navigation, fine neutral hairlines, and restrained deep-brown accents. Serif display type gives astrological guidance the gravity of a considered essay rather than a generic chatbot.

## 3. Typography

### Font stacks

- Display (headings): `"Jyotisha Serif SC", var(--font-inter, Inter), -apple-system, BlinkMacSystemFont, "Segoe UI", "PingFang SC", "Microsoft YaHei", sans-serif` — the body stack with the self-hosted heading serif in front (2026-09-28, TASK-serif-headings-20260928). **CJK 标题用自托管 Jyotisha Serif SC；绝不落到系统宋体。**
  - The face is Noto Serif SC SemiBold (SIL OFL 1.1), renamed per the OFL Reserved Font Name clause and cut into 30 `unicode-range` woff2 slices under `src/app/fonts/serif-sc/` by `scripts/fonts/build_serif_slices.py`. Coverage: 《通用规范汉字表》 level 1 + 2 (6500 characters), Basic Latin, CJK / full-width punctuation, digits and common symbols. A character outside that set renders in the sans stack.
  - Slices are served from `public/fonts/serif-sc/` under content-hashed names (`jyotisha-serif-sc-NN.<sha256[:10]>.woff2`) with `Cache-Control: public, max-age=31536000, immutable` (next.config.ts), and never fetched from Google Fonts. Until 2026-09-30 they were bundled by Next (`/_next/static/media/`), whose URLs carry the per-deploy `?dpl=`, so every release downloaded them again (BUG-1128, TASK-home-first-load-20260930 T3-b); a URL now keeps its bytes across releases. The browser downloads only the slices whose characters appear in a heading on the page: measured 220–226 KB on `/login` and the signed-out home, ≈236 KB on a signed-in home greeting, ≈490 KB for a full long-form report (PROGRESS-serif-headings-20260928).
  - One weight ships. The `@font-face` rules declare `font-weight: 500 700`, so the existing display rules at 500 and 600 hit SemiBold without per-rule changes; do not add a second weight file.
  - `font-display: swap`, no preload: a heading paints in the sans stack first and swaps when its slice arrives. No waiting state, no hidden text.
  - Mixed headings stay in one face: the slice set carries Latin, so “D10 事业盘怎么读” is serif end to end (the reason Newsreader was rejected in BUG-737 does not apply).
  - The stack may name only loadable families (next/font/local, the serif-sc `@font-face` list, or the system-face whitelist) and must not contain `Songti SC`, `STSong`, `SimSun`, `Noto Serif CJK SC` or end in generic `serif` — pinned by `font-stack-loadable-contract.test.ts`. BUG-737 is why: an unloaded serif head sent every CJK heading to SimSun on Windows.
  - The `@font-face` list lives in its own file (`serif-sc.css`, ≈22 KB gzip of `unicode-range` data) imported by `src/app/site-styles.ts` next to `globals.css`, so admin never loads it.
  - Deliberate sans headings (pinned by `serif-headings-contract.test.ts`): the rectification narrative's `h2`/`h3` (`.conversational-narrative .message-markdown h2, h3`, body face 600), report chart-card titles (`.personal-report-chart-card h3`), the home loading screen title (`.app-loading-content strong`, 「正在载入账户 / 正在准备对话」, 2026-09-30, BUG-1129), all admin UI, and the root boundary pages below.
  - The loading screen uses the body face only: it paints before the bundle runs, so a serif title would start 3–4 slice downloads (≈130–170 KB) that compete with the first-screen JS. No web font is requested for it before the page `load` event. Chat body, buttons, tables, inputs and labels are body text and stay sans.
- Body/UI: `var(--font-inter, Inter), -apple-system, BlinkMacSystemFont, "Segoe UI", "PingFang SC", "Microsoft YaHei", sans-serif`. Inter is loaded with `next/font/local` from `src/app/fonts/InterVariable-latin.woff2` (`display: "swap"`, CSS variable `--font-inter`) so Windows/Linux no longer silently fall back past a never-requested Inter, and image builds do not call fonts.googleapis.com. `StyreneB` was removed from the head of this stack for the same reason as Tiempos: it never loaded, so it was dead configuration that made the stack look intentional.
- Code/data: `"JetBrains Mono", "SFMono-Regular", Consolas, monospace`, exposed as `--font-mono`.
- Root boundary pages (`error.tsx`, `not-found.tsx`, `forbidden.tsx`, `global-error.tsx`) sit in the shared root layout segment and must not import `globals.css` — importing it would drag the chat stylesheet onto every admin route. They therefore cannot read `--font-mono` or any token, and inline their own values: a system stack for body text and `ui-monospace, SFMono-Regular, Menlo, monospace` for code. Keep those literals in step with the stacks above by hand. They do not load the heading serif either: their titles stay in the inline sans stack by design (TASK-serif-headings-20260928), not by omission.

### Scale

| Token | Size | Weight | Line height | Tracking | Usage |
|---|---:|---:|---:|---:|---|
| `--type-display-lg` | `48px` | 400 | 1.1 | `-1px` | Desktop page titles |
| `--type-display-md` | `36px` | 400 | 1.15 | `-.5px` | Dialog and mobile page titles |
| `--type-display-sm` | `28px` | 400 | 1.2 | `-.3px` | Section titles |
| `--type-title-lg` | `22px` | 500 | 1.3 | 0 | Prominent UI titles |
| `--type-title-md` | `18px` | 500 | 1.4 | 0 | Card and message headings |
| `--type-title-sm` | `16px` | 500 | 1.4 | 0 | List titles |
| `--type-body-md` | `16px` | 400 | 1.55 | 0 | Default reading text |
| `--type-body-sm` | `14px` | 400 | 1.55 | 0 | Compact UI text |
| `--type-caption` | `13px` | 500 | 1.4 | 0 | Labels and metadata |
| `--type-overline` | `12px` | 500 | 1.4 | `1.5px` | Eyebrows and badges |

Display headings use `--font-display` (self-hosted Jyotisha Serif SC, sans fallback) at weight 500; the `--type-display-*` rows above list 400 from the earlier serif era, but every display rule now carries 500 or 600 (BUG-737), which the SemiBold face covers. Body copy never drops below 14px; 12–13px is reserved for short labels and metadata. No product UI text is smaller than `--type-overline` (12px). Product UI uses three font weights: 400 (display and body), 500 (UI titles, labels, buttons), and 600 (emphasis only). CJK text uses `text-wrap: pretty`, **except answer prose** (`.message p`, `.message-markdown`), which wraps plainly since 2026-10-06 (BUG-1252): WebKit — every iPhone browser — applies `pretty` to the whole paragraph, so answer lines came out evenly short with a blank strip on the right, and each streamed character re-broke the lines above it. The first-run onboarding bubbles keep their own phrase-protected rule. Display text uses `text-wrap: balance`.

One documented exception: the thinking text inside a timeline step (`.consultation-run-timeline__thinking`) and the fallback thinking trace (`.message-thinking-body`) render at 13px. They are working notes shown on request inside a collapsed row, not reading copy; the answer itself never inherits that size.

## 4. Spacing & Layout

The base unit is 4px. Tokens are `--space-1: 4px`, `--space-2: 8px`, `--space-3: 12px`, `--space-4: 16px`, `--space-5: 20px`, `--space-6: 24px`, `--space-8: 32px`, `--space-10: 40px`, `--space-12: 48px`, `--space-16: 64px`, and `--space-24: 96px`. `--consult-think-answer-gap` is `var(--space-3)` (12px): it is the only gap between the thinking bar and the answer body. Both `.consultation-thinking-report` and `.message-stage-and-answer` use it; do not write a second value on either path.

Radii have two visual steps. Controls use 8px (`--radius-md`; `--radius-xs` and `--radius-sm` alias that value). Cards and sheets use 12px (`--radius-lg`; `--radius-xl` aliases it). Circles stay `50%`; pills stay `999px`.

- Chat reading width: 760px for the welcome/composer and 900px for long answers. Both chat surfaces share the 900px transcript width; the rectification session no longer narrows it to 720px.
- Admin content width: 1200px, centered.
- Desktop shell: 288px sidebar plus flexible reading panel.
- Layout breakpoints: mobile below 768px, tablet 768–1023px, desktop 1024px and above. These three decide the shell — sidebar mode, grid columns, drawer versus rail. CSS `@media` width cuts must follow `sidebarViewportForWidth` in `frontend/src/lib/sidebar-state.ts` (768 / 1024), not the other way around. The allowlist lives as a comment at the top of `globals.css` and is locked by `frontend/tests/viewport-breakpoint-contract.test.ts`.
- Allowed `@media` widths: 480 (small phone), 640/641 (content grids: membership, rectification candidates, intake card), 767/768 (mobile/tablet), 860 (report TOC, content width of the third column), 1023/1024 (tablet/desktop). Do not add a new width without updating that list and the contract test in the same change.
- All full-height surfaces use `100dvh`, but never as the only declaration. A `dvh` length is dropped whole by an engine that does not know the unit, and a `height` that vanishes falls back to the content height — which is how the settings dialog started resizing per pane (BUG-698). Write the plain `vh` value as the base and upgrade inside `@supports (height: 1dvh)`. Do **not** use the duplicate-declaration form `height: 100vh; height: 100dvh;`: Lightning CSS (Tailwind v4's minifier) collapses duplicate declarations of one property and keeps only the last, so the fallback never reaches the browser. Locked by `frontend/tests/viewport-unit-fallback-contract.test.ts`. Touch targets: on a coarse pointer the hit is 44×44; the visual control may stay smaller. Message-action icons stay 26×26; a fine pointer keeps the 27×34 overlay, a coarse pointer opens gap and bottom margin to 20px so a 44×44 overlay does not eat the next button or the follow-up pills. Locked by `frontend/tests/touch-target-contract.test.ts`.

## 5. Components

### Brand mark

- **Structure:** image-backed mark plus serif wordmark.
- **Variants:** light canvas, dark sidebar.
- **States:** static; never animated.
- **Accessibility:** decorative image is hidden when adjacent text names the product.

### Button

- **Implementation:** report surfaces and the billing pane use `@/components/ui/button`. Login, onboarding, and birth-time dialogs still use `.button-primary` / `.button-secondary`, which share the same 44px height, 8px radius, and action tokens. Those CSS classes stay until those surfaces can move without growing `page.tsx`.
- **Variants:** ink primary, cream secondary, text, circular icon, deep-brown emphasis.
- **Solid primary (BUG-1079, 2026-09-28):** one look site-wide — `<Button>` default, `.button-primary`, the composer send / stop control and the calendar's selected day all read `--color-action-fill` / `--color-on-action-fill` (light `#fbfaf7` on `#a9583e` 4.85:1, dark `#f2f0ea` on `#8f4a33` 5.77:1). `.danger-primary` keeps its own label colour (7.13:1 / 6.04:1).
- **Disabled:** solid buttons turn neutral grey — `--color-action-fill-disabled` (`--color-canvas-strong`) with `--color-on-action-fill-disabled` (`--color-ink-tertiary`) at opacity 1, never a faded clay. Outline, ghost, secondary, icon and chip buttons keep the 45% fade (`<Button>` via `disabled:opacity-45`, raw `<button>` via `button:disabled:where(:not([data-slot="button"]))`).
- **Spacing:** 44px minimum height; radii 8px for standard and full radius for icon-only.
- **States:** default, hover, active, focus-visible, disabled, loading.
- **Motion:** 120ms transform/color; active translates by 1px or scales to .98.

### Input and composer

- **Structure:** a column, not a row — warm canvas field on top, the composer's own bottom row beneath it. The row carries the model picker on the left and the send/stop control on the right, with the character count inline beside it.
- **No tool strip below the composer.** `.composer-footer` used to sit under the field at a permanent `min-height: 44px`, holding the model picker and a count that only appears near the cap — so most of the time it was 44px of empty chrome on every screen. The row is inside the box now and only renders what it has. A single line of copy (`.composer-ai-notice`, 2026-10-14) sits under the box: it is not a tool row, has no 44px slot, and on a narrow screen it stays one line and ellipsizes instead of wrapping over the send control.
- **States:** default, hover, focus with deep-brown ring, disabled only for structural reasons (readonly, session loading, onboarding, the other surface open, **a rectification session whose surface is not yet open**), invalid. Generating does not disable the textarea; the send control becomes stop. On a rectification session the ordinary composer is only a disabled field with placeholder「正在打开生时校正…」; if opening failed, a「重新打开生时校正」button sits above it. No spinner.
- **Queue:** one pending card (`.composer-queue`) sits above the field while an answer is in flight. Copy: “已排队，回答结束后发出”, plus the text and a 44px “撤回”. A second Enter appends to the same card with a newline. Successful settlement sends it; stop, failure, or recovery puts the text back in the field. The send button is disabled while a card is waiting. No spinner.
- **Accessibility:** persistent label where practical; composer has an explicit accessible label.
- **One composer:** the rectification surface renders the same `ChatComposer` as the main chat; there is no second composer. A surface that owns its own draft passes it as `value`; the main chat reads the draft store. Both count down from the same 500-character ceiling through `CharacterRemaining`, which the composer renders inline and only once `characterRemainingVisible()` is true — it no longer has a permanent container. Controls that belong to the composer go through the `toolbar` slot. The only thing under the box is the one-line AI notice, not another control.
- **Inner field corners:** the textarea inside `.composer` has `border-radius: 0`. Rounding stays on the outer `.composer` only. The field has no horizontal padding, so a radius on the textarea itself clips the first glyph's left edge (BUG-1311).

### Answer start anchor

Both chat surfaces pin a new turn at its head instead of following the last streamed token.

- **Head:** the user row of this turn. When this turn has no user row (rectification choice tap, opening, auto-continue) the head is the new assistant row.
- **Pin:** on send (and on those rectification new-turn entries) the scroller places that row at the top with a `space-4` gap and then holds still while the reply grows downward.
- **Spacer:** the last turn's entry — the `.message-list` child that holds the assistant row, its `.message-actions`, follow-up chips and (rectification) delivery card — gets `min-height: calc(var(--conversation-viewport) - var(--latest-turn-head-height))` plus `align-content: start`, both variables written onto the scroller by `useConversationScrollAnchor`. The spacer trails the whole turn: the actions row sits right under the text at its own `margin: -4px 0 8px`, and the empty space comes after it (BUG-1042; the assistant row itself never carries the spacer — that pushed the actions half a screen down). `align-content: start` keeps the rectification wrap's grid rows from stretching into the space. Not sticky, and `.conversation`'s `padding-bottom` is unchanged. The spacer lasts until the next send; switching sessions clears it.
- **Release:** the pin holds until the reader scrolls — a wheel, a touch drag, a scroll key outside a text field, or a press on the scroller's own scrollbar, followed by a scroll within 1s. Scrolling back to within 96px of the bottom then resumes following; scrolling up leaves the viewport where they put it. Where the pin happens to rest never releases it: the rectification surface rests 94px from the bottom (its spacer plus the jump-chip clearance), inside the threshold, and treating that as "back at the bottom" dragged long rectification replies to their last line (BUG-1044). Taps on buttons inside a message do not count.
- **History:** opening another session still lands on the newest content once. That includes the first session on page load (refresh, `?c=` deep link, boot landing): the scroller only mounts after the loading screen, and the hook attaches its scroll listener and resize observer whenever the scroller element appears, not only when `active` or the session key changes (BUG-1043). Without that, a directly opened session showed “跳到最新” under a short reply and never followed.
- **Jump to latest:** if the growing turn (or the reader scrolling) leaves more than 96px below the fold, the shared chip appears; pressing it sticks to the bottom for the rest of the turn.

### Jump to latest

- **Structure:** one pill button (`JumpToLatestButton`) with a down arrow and the label “跳到最新”, shared by both chat surfaces.
- **Placement:** hangs off the composer wrap's top edge (`.jump-to-latest`, absolute, `bottom: 100%`) so it never reflows the transcript or the composer. It occupies a 56px band above the composer — the 44px target plus the `space-3` the overlay holds under itself — and the transcript has to reserve that band **plus** one more `space-3` below its last item, or the last tappable row reads as covered and its centre is where the chip's only `pointer-events: auto` area sits (BUG-919). On the rectification surface that reservation is `.message-list { padding-bottom: calc(var(--rectification-jump-clearance) + var(--space-3)) }`, and `.conversation` carries the matching `scroll-padding-block-end`. Full non-overlap at every scroll position would cost `conversationAnchorThreshold` (96px) on top of the band, i.e. 152px of trailing void; that was rejected — the chip only appears once the reader has scrolled up past that threshold.
- **Visibility:** shown when the last turn extends more than 96px below the fold — either because the reader scrolled up, or because this turn grew past the viewport while pinned at its head — and hidden again once they return to the bottom or press it. Sending a question pins the turn head; pressing the control re-anchors to the bottom.
- **Surface:** canvas fill, hairline border, `--shadow-elevated`; hover uses the warm card surface. No utility-class shadows.
- **Accessibility:** a real button in document order with a visible label matching its accessible name, 44px target, and the focus ring; the icon is decorative.

### Ayanamsa preference

The self-profile editor in 星盘资料 (`ChartLibraryPanel`) owns the ayanamsa radios. Personal 个人资料 stays account basics only.

- **Structure:** six 44px stacked radios reused from `.theme-preference-option`, plus a caption under the group. Raman is marked 默认. Each option has a one-line description; selected rows show the same `Check` as the theme panel.
- **Values (2026-09-28):** `raman` (default) / `lahiri` / `kp` / `true_citra` / `true_pushya` / `fagan_bradley`, shown as Raman（默认）/ Lahiri / KP / True Citra / True Pushya / Fagan-Bradley. Only values the engine already supports (`scripts/ayanamsa_utils.py`); Djwhal Khul and Sassanian are supported by the engine but deliberately not offered. The label is spelled True Citra, matching the engine's `ayanamsa_display` that the chart page parameter table shows. Copy lives in `frontend/src/lib/ayanamsa.ts`; `profiles_ayanamsa_check` lists the same six.
- **Hint:** “之后的咨询、报告、星盘库、每日星语和新开的生时校正会按新岁差算；已经开始的那次校正仍按开始时的岁差。”（BUG-1310）
- **Placement:** after `ProfileFields` on the self-profile form only. Not on other-chart save, not on `page.tsx`.
- **States:** default, hover, selected (`aria-checked` only), keyboard focus. Switching does not clear a confirmed birth minute.

### Rectification surface

The birth-time rectification session is the consultation transcript plus a house board; questions live inside the assistant message that asked them. It shares every waiting vocabulary with the consultation surface; nothing here spins or says "loading" after the reveal.

- **Reveal:** the surface mounts once per session/Case binding. Opening a Case (homepage card, sidebar row, deep link or refresh) reads the turns and the snapshot in one Case request before the switch, under the same 4-second budget as the home reveal (`RECTIFICATION_OPEN_HYDRATE_TIMEOUT_MS` is `BOOTSTRAP_PREPARE_TIMEOUT_MS`); a session selected at bootstrap is hydrated during the prepare phase. The entry shows a static note meanwhile (card footer “正在打开…”, sidebar row “打开中”, `cursor: progress`) and the previous view stays put. Turns and snapshot are initial state; anything that arrives later is a prop or state update, never a remount. A late or failed read still reveals, with the composer notice “校正记录没有完全加载，可以继续”.
- **States** — what the transcript's trailing entry and the composer show:

| State | Trailing entry | Composer |
|---|---|---|
| `opening` | live row “正在读取你的出生资料，准备第一个问题…”, then tool labels | enabled (typing queues), stop visible |
| `empty` | “这段校正还没有开始。” and one primary action “开始提问” | enabled |
| `question-live` | the asking message carries the embedded card or the spoken stem. An active spoken or choice focus without `asked_turn_id` hangs on the last assistant message, same text column. A deterministic reply streams “ack + stem” so the stem is readable before the card arrives; once the snapshot attaches the card, the bubble drops that sentence on the live transcript as well as on refresh (BUG-1045) | enabled, placeholder points at the card |
| `question-gap`, persisted question | the snapshot's current question hangs on the latest settled assistant message (the client does this too, not only GET), and any other copy of the same `focus_id` comes off: one focus, one card (BUG-1046). The host question row (`data-testid="persisted-question"`) appears only when no assistant message can carry the prompt: there is none, or the latest one already carries a different question | enabled, placeholder “请回答上面的问题…” |
| `question-live`, after a failed tap | the tapped option is taken back (question active again, nothing selected), the card remounts tappable, the Case is re-read, and the error line is “这次没提交上，请再点一次。” — never a second copy of the card below (BUG-1046) | enabled |
| `question-gap`, retries left | one timeline live row “正在准备下一个问题…”, refetching on a 2s timer up to two retries | enabled |
| `question-gap`, retries spent | “没有拿到下一个问题。” and a 44px “接着问” | enabled |
| `question-gap`, collect waiting | no “没有拿到下一个问题”; the last assistant line already has the precise gap. Never while the latest assistant message still carries an unanswerable tap question — that is the repair exit below (BUG-917) | enabled, placeholder “再说一件带年月的事” |
| `question-gap`, dead card on the last message | the latest assistant message carries a tap question with no answer and no live card (its focus was superseded, or GET has no card): the card is not drawn at all, and the gap is the repair exit “没有拿到下一个问题。” + “接着问”. A greyed, unclickable A/B/C/D never appears next to the collect-wait placeholder | enabled, generic placeholder |
| `question-gap`, delivered | no current question, or the current question is a dead choice card, and the session already delivered a range (`completed_with_range` / `provisional_range` / adopt outcomes, or `tied_first`); range card or range line plus an exit note. Never “没有拿到下一个问题。” | enabled |
| `verified_idle` | one closing line `postAdoptVerifyDone` under the still-visible range card (same assistant column); no spinner, no reload | enabled |
| `typed-pending` | the live row reads “收到，正在对照你的档案…” from the frame the answer is sent, then follows `turn.progress`: “正在记下这件事…” → “正在重新对照盘面…” → “正在准备下一个问题…” (BUG-1047). A running tool step shows the same stage line; finished steps keep their done labels. None of it survives the settle | enabled (typing queues), stop visible |
| `choice-pending` | the answered card (`data-selected` fill, a top row “正在记录…”) and the same live row from “正在记录本次选择…” through the follow-up turn | enabled (typing queues), stop visible |
| `candidates` | one range-delivery card titled “目前范围 …（对照了 N 件经历）”, a caption under the title. A subtitle “最可能 HH:MM” (the representative minute) sits under the title (D3, 2026-09-26), only when the percentages are shown (first column ≥ 5 points ahead). The card appears once the refresh, the skip retry and the seven targeted kinds have been asked, or the reader said there is nothing more to add. Guided boundary windows are asked when they come up (at most two per Case, D1 2026-09-26) but an unasked window no longer holds the card (D2 2026-09-26). The precision gate (range ≤ 10 minutes, top-two gap > 3 points, no exact tie) is reported as `precision_gate_met` but never gates the card on its own: meeting it skips no remaining line, and failing it adds no marker to the card once there is nothing left to ask. No free-text invite. Optional “再答两道参考题微调排序” only when unused D9/D10 remain; if those were already asked and the top two are still within one point, a line “这两分钟按现有信息分不开，参考题已经用过.”; then up to three compare columns (highest posterior first; “更像这个” adopts); a closed “查看验证报告” fold. On a normal convergence, unused style questions are asked before this card. Exhausted and closed-ceiling exits still deliver the card if a style question cannot be rendered, once the precision gate or the “nothing more” stop is met. When the result is a delivery outcome but adoption is not allowed (`can_adopt` false, or the outcome is outside the adopt set, such as `completed_with_range`), the card stays and has no adopt button and no “采用后按…排盘” line. The button appears only for an adopt outcome with `can_adopt` true. After adoption the card stays and shows “已采用”. | enabled |
| `guided-collect` | a named yes/no card then an entry card. A window whose boundary track carries a domain (D9 / D10 Narayana) asks “YYYY 年 M 到 M 月之间，有没有<那一类事>？”; every other window asks openly — “YYYY 年 M 到 M 月之间，有没有什么事，比如<two or three still-open kinds>？” — and one window is asked once, whatever label it carries. The entry card is seven type chips (an open window defaults to the first still-open kind) plus a month-granularity date picker (day optional, years from birth year to this year); submitting writes “YYYY 年 M 月（D 日），<领域标签>方面有一件事”, never the question’s example list. Composer stays enabled. | enabled (typing still records), stop visible |
| `adopting` | “正在采用 HH:MM…” until the adopt message arrives (server-written with the first post-adopt check, BUG-1146; idempotent accept still runs the follow-up turn) | enabled (typing queues), stop visible |
| `confirmed` | “已确认校正时间：HH:MM” | enabled |
| `readonly` | “该校正已结束，只能查看历史。” and “再次校正” | disabled |
| stopped | the row settles with what streamed; a grey caption “已停止，已生成的内容保留；本次不会扣点。” under the body, never `role="alert"` | enabled |

- **Message actions:** a settled rectification reply carries 赞 / 踩 / 复制 only; there is no 重新生成 (BUG-1056). Ordinary consultation keeps it.
- **Rules:** a follow-up turn continues on the live row already in place; `busy` never drops in the middle of a chain. No copy may ask the reader to wait for the server; a gap is a live row with retries, then a repair button. A hydration that timed out is the same gap. A 402 shows “校正点数不足，正在前往兑换…” for 600ms before the page leaves.
- **Board:** before any candidate exists the header clock shows the declared birth minute and the body names it by source — “出生记录时间 HH:MM”, “你填的大概时间 HH:MM”, or “你给的时间段” — then “回答几个问题后，这里会显示宫位随时间的变化.”; the column narrows to `minmax(16rem, 18rem)` (`is-board-empty`) and widens once a result arrives. No house table is invented for the declared time; the snapshot API does not provide one. The range card may add a caption comparing the declared clock to the current range (“与你填的大概时间相差 N 分钟”, or a hospital-record offset with no preference).
- **Accessibility:** the sidebar opening note sets `aria-busy`; the live row is the timeline row (`role="status"` shimmer label); the repair and start actions are real 44px buttons.

### Birth time intake

- **Structure:** birth date, then three radio rows for “你对这个时间有多确定”——医院记录精确到分钟、家人记得大概时间、只知道时段或完全不知道。家人那档再给四个范围按钮（差不多准 / 前后半小时 / 前后一小时 / 前后两小时 = ±15/30/60/120）。存量 `family_exact` 档案显示成「差不多准」。之后只露出该档需要的钟点、时段或线索字段。
- **Surface:** choice rows use the warm canvas and hairline system; the selected row uses `--color-action-soft` with a deep-brown border, never a dark promotional card.
- **States:** no source selected, source selected, source-specific details incomplete, ready to continue, assessing, rectifying, candidate saved, confirmed.
- **Copy:** labels describe what the user actually knows. “完全不清楚” starts rectification from remembered events and compares declared periods before any minute grid; it does not defer correction. Candidate results explicitly distinguish a reported time, a candidate range, and an active chart time.
- **Accessibility:** native radio inputs remain focusable, every conditional field has a persistent label, status text uses live regions, and the complete flow is keyboard operable.
- **Motion:** source-dependent fields enter with the existing 180ms opacity/vertical reveal; reduced-motion removes the translation.
- **Life-event evidence:** after deterministic questionnaire completion, render three structured event rows by default and allow up to six. Each row uses a domain select, a precision select, and a matching year/month/day control; free-form descriptions are not part of scoring.
- **Candidate result:** keep the reported range, candidate interval, and active-time status visually separate. Delivery shows one range card: title “目前范围 HH:MM–HH:MM（对照了 N 件经历）”, a caption “还能再收窄：如果记得 …” under the title while collect lines remain open, a subtitle “最可能 HH:MM” (only when the percentages are shown), up to three compare columns (time, D9/D10/nakshatra traits, event-fit counts, next-12-month windows, “更像这个”; “相对可能性 N%” on every column only when the first column leads the second by ≥ 5 points, otherwise no numbers and one card line “这几个时刻目前区分不开，补一件带年月的经历能帮助分开。”), and the representative-minute boundary. When the top two columns are within 3 percentage points and the seven collect lines are closed, the card body (not the caption) invites one more dated event of any kind, with examples outside those lines. Collect copy “现在还剩 HH:MM–HH:MM 里 N 个候选” uses the same `credible_range` as the timeline “目前范围”, not the first/last active candidate minute. An eight-method report sits in a closed `<details>` fold. Support numbers stay on the house board. Low confidence keeps evidence editing open; medium offers save or add evidence; high uses a separate confirmation action and never labels a column as the true birth time.
- **Evidence accessibility:** every row keeps visible labels, validation errors use live regions, add/remove controls retain 44px targets, and scoring/confirmation loading states disable duplicate submission without hiding the existing evidence.
- **One-question guide:** the guided journey renders only the persisted `nextAction` and one server-selected question. A deterministic question is visible immediately; Agent wording may replace it without changing the question identity, domain, precision request, progress, or permissions. The composer explicitly permits an approximate year. Spoken collect does not render skip chips; typing 「没有」 still declines the domain and 「记不清」 still skips it. Stop on spoken collect is not a composer button: `CHOICE_STOP_LABEL` (“先这样，先看当前范围”) stays on choice cards, and generating turns keep “停止回答”. The readonly range line is a status sentence, not a stop control. Discriminator cards fold “为什么问这题” under the stem. Hovering or selecting an option does not reveal an `answer_impact` time line. The method sentence (`vargaSentence`) lives in the expanded activity timeline, not in the spoken bubble. The composer has no `rectification-step-state` status sentence and no `rectification-composer-meta`.
- **Draft review:** natural-language answers become one inline review card. The evidence domain is read-only and uses its Chinese label; precision controls which exact year, month, or day input is available. Incomplete drafts keep edit and skip paths visible, while confirmation is disabled until the structured date is valid. Status and errors use polite or assertive live regions without clearing the persisted journey.
- **Scoring and retry:** `score_pending` is a quiet progress surface with cancellable bounded polling and no manual compare control. `retry_scoring` preserves the confirmed evidence and exposes one explicit retry action. Refresh and device changes resume from the persisted action rather than inferring progress from copy.
- **Guided candidate states:** low confidence presents the saved candidate range and either another evidence question or a safe finish; medium confidence can save the range but never apply a representative minute; high confidence names both “候选时间” and “当前排盘使用时间” before explicit confirmation; ready states that the current chart time changed while the original report remains preserved. No state calls a candidate the true birth minute.
- **Guided responsive/accessibility contract:** body copy remains at least 14px, labels at least 12px, and all controls at least 44px. Focus is always visible, the composer is keyboard operable, semantic Chinese phrases remain together at 390px, and reduced-motion removes entrance translation while retaining state changes.

### Birth place picker

- **Composition:** three cascading Base UI Selects — province, city, district — over the bundled China administrative dataset. There is no free-text search and no overseas provider in this surface.
- **Level collapsing:** a level that offers no choice is not rendered. Municipalities and special administrative regions skip the repeated city level; prefecture cities without districts complete at the city; a province with neither lower level completes at the province.
- **Unsure escape hatch:** any city that has districts leads its district list with “不确定，用市区中心”, so browsing never dead-ends. A stored empty district resumes as that choice.
- **Precision copy:** the picker states that county-level precision is enough for a chart, so a village or township birth is not treated as missing data.
- **Value:** administrative codes, the node centre coordinate, and the IANA zone are all persisted. Coordinates come from the dataset; the zone is resolved once per chosen place through the chart engine rather than per keystroke.
- **States:** nothing chosen, partially chosen, resolving the zone, resolved, and zone service unavailable with an explicit retry. An unresolved zone is never reported upward as a usable birth place.
- **Saved profiles:** mounting an already-saved place neither refetches nor reports a change, so opening the profile dialog cannot look like a location edit. Changing the birth date does invalidate the stored offset and resolves the zone again.
- **Accessibility:** every level keeps a visible label, an explicit trigger name, and the 44px target from the select recipe; status text uses a polite live region.

### Birth date picker

- **Composition:** shadcn outline Button trigger, Base UI Popover, and a single-select React DayPicker Calendar.
- **Range:** local dates from 1900-01-01 through today; future dates are disabled. Month and year dropdowns provide direct navigation, with newest years first.
- **Value:** display Chinese long dates while emitting the existing `YYYY-MM-DD` profile value without UTC conversion.
- **States:** empty, open, selected, focus-visible, disabled confirmed profile, and unavailable date.
- **Accessibility:** visible label, explicit trigger naming, 44px targets, keyboard calendar navigation, focus return, and collision-safe popup positioning.

### Model selector

- **Structure:** a compact text trigger sits below the composer and opens an upward popover aligned to its left edge. The trigger shows only the active model name; each option shows only its model name and radio selection state.
- **Width:** the popover is capped at 180px with viewport collision protection.
- **Surface:** canvas trigger with no card treatment; the popover uses the elevated canvas recipe, warm hairlines, and one selected-surface row. The action color is reserved for the selected indicator and focus ring.
- **States:** closed, open, hover, focus-visible, selected, disabled, and unavailable catalog. Selecting a model closes the popover and only affects later messages in the current conversation.
- **Accessibility:** the trigger and every option meet the 44px touch target; options are a native radio group, with a small roving-focus fallback so Tab, arrow keys, Space, and screen readers consistently expose the selected model inside the popover.
- **Motion:** the popup enters over 120ms with opacity and a 4px vertical translation; reduced-motion removes the translation.

### Chat header

- One line, 46px on desktop. Sidebar trigger, session title, and the credit pill. It was 68px and carried a second line reading `分析对象：{盘名}`.
- Ordinary consultation, and the chart, ephemeris and report pages: the person is a rounded button beside the title (`.chat-profile-picker-trigger`, still `.chat-header-chart`). Light canvas fill, a hairline, and a chevron, so the name reads as something you can press. The accessible name is `当前星盘：{人物名}`; the visible text is only the current person's name. Click, Enter, and Space open a popover. `aria-expanded` and `aria-controls` point at that popover. Escape, an outside click, and a successful choice close it and return focus to the button with `preventScroll: true`; focus must not move the chat panel or transcript. The button and each row are at least 44px. The popover uses the elevated canvas, warm hairline, and the same 120ms opacity-plus-4px motion as the model selector; reduced motion drops the translation. When the archive is under 20 people, the list ends with a hairline and `＋ 新增一个人`, which opens `/people?add=1` (the add form). At 20 people that row is absent.
- Issue #150 (2026-10-28): after the name the trigger shows `· {date time · city}` (`.chat-profile-picker-detail`, secondary ink, ellipsizes first) once the selected person is loaded and complete; the accessible name becomes `当前星盘：{名字}，{date time · city}`. The phone chat header (≤640px) hides the detail. Each row is a two-column grid (`.chat-profile-picker-row`: the choice, then a 44×44 `⋯` menu `.chat-profile-picker-more`). The row copy is the name plus a pill badge (`.chat-profile-picker-badge`: muted canvas, caption size; 本人 or the relation, empty reads 其他) over `date time · city`. The menu holds `编辑` (`/people?self=1` or `/people?edit=<id>`, which opens that person's edit dialog) and, for others only, `删除`: the same count read, AlertDialog sentence and DELETE as the people page (`lib/person-delete.ts`), falling back to self if the current person was deleted. Delete is disabled while an answer is being written. The chat-side chart panel (`.chat-chart-switcher`) carries the same picker full width above the drawing; the drawing sits behind its own memo so the picker's repaints never redraw it.
- Before the first message the list selects a person and updates that empty session's binding. Self is the visible default. After the first message the current person stays selected; another person offers only `新建会话并使用此人物` and does not rebind the old session. That action waits until the current request ends.
- Loading shows the small orbit (`OrbitWaiting`, 2026-09-30), with `人物列表还在读` for screen readers only. Failure reads `人物列表暂时读不出来` with `重试`. When the people API itself fails, the popover reads `暂时读不到其他人` and lists only the signed-in person; history stays on that person and the page does not drop into the recoverable error screen. An incomplete row reads `这份资料还不完整，补全后才能看盘` and cannot be chosen (its `⋯` still offers 编辑). A deleted person reads `资料已删除 · {名字}`; the old session stays readable and sending is blocked. None of these states use a spinner.
- Rectification and daily horoscope do not get this control. Their quiet note, when present, remains the static `.chat-header-chart` span and still drops out below 768px. The person button stays on narrow screens and ellipsizes so the header remains one line.
- The chart page birth line is a button (`.chart-birth-line`) under the person's name in the page head (`.chart-page-head-meta`, 13px tertiary, as in the signed prototype; it left the top bar on 2026-10-28, BUG-1470, because on a phone it wrapped the bar to two lines): `日期 时间 · 地点` and a pen. The name is not repeated. The whole row opens an editor on this page. Self can change every field. Someone else's already-saved birth time stays locked. The sentence `填报的出生时间保存后不能再改` appears once, beside that field, and is not repeated in the form description. Changing the date, time, or place shows `改了出生时间、日期或地点，之前生时校正采用的时间会作废，星盘改按你新填的时间排。` Saving uses the shared other-person write (self still goes through the account). The editor is a component-library dialog (2026-10-25, K3). A click inside the form, including its padding, does not close it or drop unsaved edits. Escape and a click on the backdrop do close it. The fields stay the shared profile form used by the people page, so this page does not grow a second set of fields. Below 768px that row wraps onto a second line and the chart header grows to fit it. The editor's code is not in `/chart`'s first load: it loads on the click and is warmed when the pen row is hovered or focused, and nothing is drawn while it arrives (no placeholder; BUG-1469). The people page's add / edit form likewise stays out of `/people`'s first load and is fetched right after the page mounts.
- With the composer strip gone as well, the two pieces of permanent chrome went from 68 + 148 to 46 + 124 px.
- On viewports ≤767px the header row is 52px plus the safe-area inset. The credit control (`.credit-balance`) is a normal outline button, 44px, with a coins icon and the number; 点 stays in the accessible name. The rectification 「当前盘面」 chip stays 40px. The shared `::before` hit area stays inset -2px. The onboarding checklist trigger stays 32px.
- Window-level scroll is reset by `ViewportScrollLock` after the on-screen keyboard closes, so the header cannot be left above the screen.

### Navigation item

- **Structure:** title is the session name. Rectification titles show the result: `生时校正 · HH:MM` when a time is confirmed (confirmed wins over accepted) or only accepted, `生时校正 · HH:MM–HH:MM` (en dash) when only `candidate_range` is a clock pair, otherwise `生时校正`. Daily rhythm stays `今日节奏 · M月D日`. Subtitle is always `M月D日 HH:MM` in Asia/Shanghai from `updated_at` (last activity), plus ` · <chart name>` when the chart is not the account holder. Same-day duplicates are not uniquified with wall-clock `HH:MM`. Display, sort, grouping, and cursor all use `updated_at`.
- **States:** default, hover, current, focus, disabled.
- **Hierarchy:** section labels stay tertiary; session titles and primary actions use ink so history rows do not collapse into the same gray as “收藏对话 / 历史对话”. History groups use the overline token for “今天 / 昨天 / 最近 7 天 / 最近 30 天 / 更早”. When the chart is not the account holder, a secondary line shows the chart name under the title. A session title is named when it is created; opening a stored session must not rename it. `updatedAt` advances only on conversation activity, including rectification turns, choice, adopt, and stop. Opening, refresh, and metadata PATCH do not bump it. A `?c=` that is not on the loaded page is looked up with `GET /api/sessions/{id}` before anyone may say it was deleted. Locked by `frontend/tests/session-open-preserves-identity.test.ts` and `frontend/tests/session-lookup-unlisted.test.ts`.
- **Request behavior:** existing sessions remain selectable for reading while a request is active; creating or sending another request stays locked until the active request settles.
- **Surface:** translucent warm-gray sidebar. Current and hover fill the whole `.sidebar-session` — title and the ⋯ share one chip. The menu trigger has no canvas of its own. A drag handle sits on the row only when that list can be reordered.

### Sidebar shell

- **Composition:** provider, fixed header, one scroll-owning content region, fixed footer, trigger, rail, and flexible chat inset. `/`、`/chart`、`/ephemeris`、`/reports` share one `(app)` layout: one `SessionListProvider` and one `SidebarProvider`. The session list is fetched once per tab; walking between those four pages does not remount the sidebar or refetch `/api/sessions`.
- **Home registers shell controls** (new chat, select session, rename, pin, share, delete, account menu). The other three pages leave `controls` unset, so rows are links to `/?c=<id>`.
- **Trigger placement:** the single visible collapse/expand trigger sits beside the active session title in the chat header. The sidebar brand row has no duplicate trigger.
- **Desktop:** a resizable panel, default 288px at 1024px and above, drag range 200–360px. Dragging to the left edge collapses to the 64px rail. The open width is remembered per browser under `sidebar_width`. The 64px rail is not stored as that width.
- **Tablet:** 64px collapsed by default from 768px through 1023px. Expanding uses the same panel; with nothing stored yet the width starts at 240px, then follows `sidebar_width`.
- **Mobile:** no icon rail. A left sheet uses `min(86vw, 320px)` and closes through the sheet, a navigation choice, or Escape.
- **Collapsed content:** logo, new-chat action, the page actions, one history expansion action, and account avatar. Individual sessions do not become indistinguishable repeated icons.
- **Expanded content:** the header actions (new chat, 星盘, 星历, 我的报告), then **one flat list** under a single 「最近」 heading: pinned sessions as the first labelled group, then history grouped by recency.
  It used to be three stacked sections — a 星盘列表 chip grid and two `<details>` wrappers for 收藏对话 / 历史对话 — so the nav carried two collapse affordances before the first session row, and neither had anything worth collapsing. The chip grid went entirely: every chip, and the add button beside it, opened the same chart-library dialog that the account menu already offers, so a list of names provided no navigation. Chart data is managed from one place now (account menu → 星盘资料).
  The list sits at the nav's own gutter rather than indenting past a heading icon, because there is no longer a heading to align to. Actions and session rows share 18px icons, caption/body type, and ink/muted tokens; the 「收藏」 group label carries a 13px accent star as an inline marker, not a heading icon. Empty untitled sessions stay off the history list. Pin is favorite. Session row menu is rename, pin, share, and delete — not archive. The history list loads 40 rows at a time and silently appends the next page at the bottom.
- **Empty state:** one message, not one per section. 「暂无对话，点上方「新建对话」开始」 shows only when there is nothing at all; with no pins the 收藏 group simply does not render, so nothing says 「还没有收藏」 about a section that is not on screen.
- **Scroll ownership:** header and footer remain fixed; `SidebarContent` is the sole sidebar scroll owner.
- **Scrollbar:** `SidebarContent`, ordinary session `.conversation`, and the rectification house board use a quiet overlay scrollbar: transparent track, no `scrollbar-gutter`, and a 4px warm thumb mixed from `--color-ink`. The thumb stays transparent until hover or keyboard focus inside the scroller, then uses `color-mix(in srgb, var(--color-ink) 26%, transparent)`; thumb hover uses 40%. Increased contrast keeps the thumb visible; forced colors restore the system scrollbar.
- **Motion:** Sidebar state changes are immediate on desktop, tablet, and mobile. The 44px trigger keeps one stable 18px sidebar glyph and never enters an intermediate scale or opacity state.
- **Accessibility:** Command/Control+B shortcut outside editable controls, contextual trigger labels, 44px targets, focus return, collapsed-only tooltips, reduced-motion, reduced-transparency, and increased-contrast support.
- **State:** the desktop and tablet collapse state is remembered per browser under the `sidebar_state` localStorage key, so collapsing on `/` survives the walk to `/chart` and back. Nothing is stored until someone actually toggles it; with nothing stored the breakpoint defaults stand. The mobile drawer stays session-local and is never remembered — reopening it on every navigation is not a preference anyone set. localStorage rather than the shadcn `sidebar_state` cookie because `/`, `/chart` and `/ephemeris` are static routes and a server-read cookie would opt all three out of static rendering; the stored value is therefore applied in the same post-mount effect that already applied the breakpoint default, and costs no frame that default did not already cost.

### Message

- **Variants:** assistant editorial text on canvas; user text on warm card surface; streaming; error. Streaming uses a timeline of completed steps plus the current step; the thinking body expands while streaming, collapses when answer text appears, and is stored with the assistant message.
- **Identity:** neither role carries an avatar. The assistant reply is plain editorial text starting at the column edge; the user's turn is a right-aligned tinted bubble. The 32px Jyotisha logo used to sit beside every assistant message — at one avatar per turn it became the most repeated element in a long transcript, and it pushed the reply 44px in from the column the user reads down. `--assistant-content-inset` is `0px` now, so the follow-up chips and the run timeline line up with the reply text itself rather than with a mark that is gone. History: removed 2026-09-16 (R3), restored the same day after a real-device review because rectification narration had no visual owner (071317f7), removed again on 2026-10-06 at the product owner's request — on every surface, rectification and onboarding included. The rectification timeline bar and candidate cards use the same `0px` inset.
- **Typography:** assistant body `--type-body-md` (16px) with serif subheadings; user body 14px.
- **Tables:** three-column technique audit tables keep 状态 on one line. Below 768px they stack each row as title + status, then the note, instead of squeezing 已执行 into a vertical glyph column.
- **Follow-up:** the latest settled consultation answer may offer two or three grounded next questions under that answer. Clicking one sends it in the current session. The composer never hosts suggestion chips. If the answer does not support a grounded continuation, nothing is shown.
- **Motion:** a new row enters once, through the Motion tween in `chat-message-row.tsx` at the 160ms Message duration; there is no CSS entrance keyframe beside it. Motion loads with `import("motion")` only when the reader has not asked for reduced motion, and a row does not replay the entrance if that module has not arrived yet. The trailing assistant reply is one component (`LatestAssistantEntry`) from its first streamed token through settlement, so settling never remounts it and never replays the entrance. The 260ms send-message preset is data for a later issue and does not change this 160ms entrance.

#### Streaming states

Every assistant reply moves through the same states on both chat surfaces, and each state has exactly one visual. The step timeline (`ConsultationRunTimeline`) is the only activity surface. Its rows are only steps the run has actually taken — reading the method, calculating the chart, writing (one row per heading the answer has written), and model reasoning when present. The answer outline the server plans (`think.plan` / `thinking.section`) is never a row: it only details the calculate row (2026-10-01, BUG-1145; it used to show four outline rows that ticked done the moment the calculation started). Consultation thinking is complete `think.step` items (v1 `thinking.delta` still renders for one release). Rectification never shows thinking text: provider reasoning is dropped at the public boundary.

| State | When | Visible | Transition in |
|---|---|---|---|
| `queued` | request sent, no server event yet | timeline open with one live row “正在处理…” (spinner + shimmer label), summary “正在分析” | row enters with the message |
| `loading-method` | `skill.started` | live method row | label swap, 120ms fade |
| `calculating` | `tool.started` / chart activity | live calculate row; completed rows above it show the check marker | label swap, 120ms fade |
| `thinking` | `think.plan` / `think.step` (and v1 `thinking.section` / `thinking.delta`) | live think row; complete step text inside the row | label swap, 120ms fade |
| `composing` | first `answer.delta` | live write row; answer text below the timeline, released per frame | answer paragraphs appear as text, no per-token animation |
| `settled` | `run.completed` | summary becomes “已完成 N 步”, timeline collapses in place unless the reader opened or closed it themselves; actions and follow-ups appear | 180ms height transition, 120ms label fade |
| `stopped` | the reader pressed stop | whatever streamed stays; a grey caption under the body says the run stopped and was not billed | none |
| `failed` | `run.failed`, network loss | whatever was received stays in place; the message carries no inline banner — the notice goes to the composer notice / error line | none |

Text release is paced, not animated: the frame buffer commits at most once per animation frame and reveals `max(2, ⌈backlog ÷ 12⌉)` characters per frame, so a burst catches up in about twelve frames and a slow model never reads as stalled. The reader's own toggle on the timeline always wins over the state default. Under `prefers-reduced-motion: reduce` the collapse and the label fade are instant; the pacing stays, because it is content arrival rather than decoration.

### Secondary page shell

`/chart`, `/ephemeris`, `/reports` and `/reports/[reportId]` share the chat
shell. Each used to own a full-screen layout — a `*-shell` root, a `*-topbar`
with one 「返回对话」 link, and a `*-hero` with a page-sized h1 — three copies of
one skeleton, none of them carrying the sidebar.

- **Composition:** `app/(app)/layout.tsx` = `SessionListProvider` →
  `SidebarProvider` → `AppSidebar` → `SidebarInset.chat-panel.secondary-panel`
  (home registers its own inset class). `/chart`, `/ephemeris` and `/reports`
  share `SecondaryPageShell`: the same 46px `SecondaryHeader` (sidebar trigger,
  page name, a reserved note slot so a late birth line cannot collapse the row,
  up to two actions) and a `.secondary-page` body that always fills the
  remaining viewport. `.secondary-page` is a one-column grid whose column is
  `minmax(0, 1fr)`: it may shrink below its content, so a nowrap strip or a
  34rem table scrolls inside its own box and never widens the page (BUG-1083 —
  the implicit `auto` column let the chart page grow to 1101px on a 390px
  phone and cut the chart off; desktop was clipped on the right too). Waiting copy is centered in that cell; swapping in the
  tall content does not change the shell height. No spinner or 「正在加载」;
  skeletons are limited to the chart-page plot positions (§15, 2026-09-24). First-screen data for the three pages lives in a module-level
  cache; a second visit paints the last result immediately and refreshes in
  the background. Home follows the same rule for a client return (§9, warm
  snapshot, BUG-1040): the loading ring plays once per document load. Sidebar `pointerenter` / `pointerdown` prefetches that data
  (`<Link>` only prefetches JS). A tab that outlived a deploy compares
  `NEXT_PUBLIC_GIT_COMMIT` with `/api/health` `.deployment.gitCommit` on
  visibility and before navigation; a mismatch uses `window.location.assign`,
  a match keeps the client router.
- **Separate data and shell subscriptions.** `SessionListProvider` owns both,
  but Home reads only the session/account context and its stable registrar.
  Only AppShell subscribes to shell registration; it passes the original
  `children` through unchanged. Registering fresh controls/rows must not render
  their producer again: that feedback loop can starve client navigation.
  Business changes still publish current callbacks; Home unmount clears them.
  流式期间侧栏不随回答帧重渲染（BUG-1329）。
- **One sidebar component, two modes.** `AppSidebar` is the only sidebar in the
  product. `/` passes `controls`; the secondary layout does not, and without it
  the same markup renders read-only. There used to be a second component for
  these pages, and two components meant two shapes: its rows had no
  `.session-main`, so they lost the 44px minimum, the row padding and the 2px
  current-item marker, while `.session-row` still reserved a 44px column for a
  menu button it never rendered.
- **What read-only drops — exactly one thing.** The per-row menu trigger (and
  with it the reserved column, via `.session-row[data-readonly="true"]`).
  Everything else is the same element, the same class and the same size: brand
  row, 新建对话, the page actions, the flat 「最近」 list, the 56px
  `.profile-trigger` with its chevron. Rows are links to `/?c=<uuid>`.
  Renaming, pinning, archiving and deleting stay on `/`, backed by `Home()`'s
  optimistic-update and rollback layer, which is far more than these routes
  need.
- **The avatar opens the account menu on every page (2026-09-28,
  TASK-self-edit-avatar-menu-20260928 S2).** It used to be a plain link to `/`
  off the home page, so clicking the avatar on 星盘 / 星历 / 我的报告 / 星盘档案
  just left the page. Now it is the same `Menu.Root` everywhere — same popup,
  same identity block, same items. On `/` Home controls it and 个人资料 / 通用设置
  / 账户与点数 / 退出登录 open their dialogs in place. Elsewhere the menu keeps
  its own open state and those four entries are links to `/?account=<dialog>`:
  Home reads the intent once on mount, drops it from the address bar at once
  (a reload or Back never reopens it), and opens that dialog when its account
  is ready — no waiting state of its own. The theme choice is not a dialog and
  applies where the reader is. While the account is still being read the
  footer is the same 56px block, inert and without a link; signed out it is
  去登录. The dialogs themselves stay on `/`; moving them into every page would
  add a loading state to the home first frame (§ reveal rule), so it was not
  done.
- **New chat is not a home link.** The read-only 新建对话 action links to
  `/?new=1`; Home consumes that intent before activation and opens a fresh local
  consultation. It clears `new`, any `c`, and the login-return stub. Before the
  first question there is no saved session, no `?c=`, and no new history row.
  The first question uses the existing persistence flow. A reserved older
  consultation keeps recovering in the background without taking over this
  explicit new-chat landing or leaving its startup recovery notice there.
  A bare-home refresh keeps its existing landing rule.
  The same action and mobile drawer-close behavior are retained; no extra
  button, copy, loading state, or visual treatment is introduced.
- **Leaving the chat is a navigation, not a reload.** 星盘 / 星历 / 我的报告 are
  `AppLink` on every page, including `/`, where they used to be a full document
  load that threw away the React tree, the session list and the account. Only
  `/login` stays a hard exit, and `persistLoginSessionReturn()` still stashes the
  `?c=` before any of them. After a deploy, a stale tab's next `AppLink` is the
  hard exit: `window.location.assign`, not a silent client-router no-op.
- **Loading:** the sidebar renders its nav immediately and fills the list when
  `/api/sessions` returns. While that is in flight the list area carries static
  copy — never a skeleton, per the unified-loading ruling. A list read in the
  last 60 seconds is reused from memory and shown in the first frame; the entry
  is keyed by account, never persisted, dropped on any session write on `/` and
  on any 401.
- **Signed out:** the sidebar degrades to brand, nav, a 「登录后可以看到你的对话」
  line, and a 去登录 footer. It never renders an error state of its own.
- **Page name:** lives in the header, so none of these pages carries an `h1` any
  more. A page's own reassurance copy (the chart page's cost-and-speed eyebrow,
  for one) stays in the body; it is content, not chrome.

### Short waits on secondary pages (2026-09-30, BUG-1113)

The ephemeris, the report list and the people archive (2026-09-30) wait with one motion: the home loading screen's orbit ring at 40px (`OrbitWaiting`), centred in the page. No sentence is shown; the old 「……还没拿到。」 / 「人物列表还在读」 copy is kept only as the screen-reader status. The person picker popover shows the same orbit while its list loads. The chart page is the exception (BUG-1016): since 2026-09-30 the empty chart itself is the wait — faint still lines while the houses light up one after another in house order — with no orbit on top.

### 提示与报错：toast（2026-09-30）

Action results and errors never take page layout. They are toasts from `src/lib/notify.ts` (`notifySuccess` / `notifyInfo` / `notifyError`; chat notices keep `showChatNotice`, same toaster and durations).

- **Where:** top centre on every screen (`components/ui/sonner.tsx`, `position="top-center"`), 16px under the safe area; phones get 16px side gutters and full width. The composer lives at the bottom on phones, so the top is the only place that never covers it.
- **Look:** a compact `--color-canvas` card, 1px `--color-border`, `--radius-lg`, `--shadow-elevated`, body-sm text, a coloured icon (success `--color-success`, error `--color-danger`, info `--color-ink-secondary`). No left bar, no tinted background.
- **How long:** success and info 3s; errors 6s with a close button on the right; the staging fixed login code 10s. Messages from one surface share an id, so a new one replaces the last instead of stacking (login uses `auth-notice` / `auth-error`; typing dismisses the stale error).
- **Above modal dialogs:** a toast raised while a modal `<dialog>` is open (反馈与投诉, 导出, 协议更新, 那一刻的天空) moves the toaster into the top layer as a manual popover, re-shown on every toast, so it is never under the dialog's backdrop.
- **Errors held in flow state** (the birth-time guided flow) are said through `<ErrorToast message={error} />`: once per new message, id = message.
- **What stays in the page:** states that are the page's content, not a report about an action — a pane that failed to load with its own 重试 (chart, ephemeris, report list, report detail, the home bootstrap error, billing packages / payment status); empty states; the failed reply inside a conversation (`.error-message`) and the stopped-reply line; rectification progress and gap notes; the feedback dialog's done panel; a field's own validation inside the evidence draft card. What remains of `.form-error` is plain `--color-danger` caption text, no bar and no background; `.form-success` is gone.

### Login consent and the legal pages (2026-09-30)

- **Login (2026-10-25, K5):** email, password and the action buttons are component-library Input / Button. A six-digit code is InputOTP (slots `size-11`). 验证码登录 / 密码登录, and 动态验证码 / 恢复码 inside two-factor, are segmented tabs. 注册账号, 忘记密码 and 返回登录 are link-styled buttons. Backup codes stay one `.otp-input` field at 20px. Under the form, an unticked checkbox 「我已阅读并同意《用户协议》和《隐私政策》」 (component-library Checkbox, `.auth-consent`, caption size, links underlined, open in a new tab). Sending a code or a password sign-in with the box unticked does nothing but mark the box (a `--color-danger` outline, `.auth-consent.is-attention`) and raise the error toast 「请先阅读并勾选同意，再继续。」; ticking clears the mark. The operators' admin login (password-only, `/admin`) has no box. The login page is a three-row grid (`minmax(56px, 1fr) auto minmax(56px, 1fr)`, no vertical padding; the card's min-height is `min(680px, 100dvh - 128px)`): the card sits in the middle row, exactly centred, and the 56px floors keep the footer off the card on short windows, and the caption footer 用户协议 · 隐私政策 (plus the ICP number to beian.miit.gov.cn once configured) takes the bottom row, so it never pushes the card up (BUG-1122). Below 768px the rows are `1fr auto` and the footer sits under the full-height card.
- **Account menu:** a caption row at the very bottom, 「用户协议 · 隐私政策」, below 退出登录.
- **/terms and /privacy:** public, static, one 720px column on `--color-canvas-soft`; a top row with 「返回 Jyotisha」 and a link to the other document; while the text is a draft, a warning-tinted note 「草稿 · 版本 …，待律师审定」 above the title; h1 in the display face, h2 per section, bullet lists for enumerations.
- **Re-consent:** when a final version replaces the one a signed-in user accepted, one modal 「协议已更新」 with the same checkbox and 「同意并继续」; it cannot be dismissed without agreeing. Off while the documents are a draft.

### Content moderation (2026-09-30, compliance round)

- **Blocked input** comes back before the turn starts, as the same error notice a rejected send already uses (HTTP 400, `code: "content_blocked"`); nothing is added to the conversation and nothing is charged.
- **Blocked output** in 普通咨询 arrives as one `answer.delta` with `replace: true` at the end of the stream: the streamed answer is swapped for the one-line notice in place (no second bubble, no error styling), and the turn completes free through `complete_consultation_moderated`. 生时校正 uses its existing replace path and releases the turn's charge. The legacy text/plain runtime cannot replace in place; its stored reply is the notice.
- **Admin:** 「内容审核」 is a read-only list (time, side, verdict tag, route, categories, rule ids, provider, user id, request id) with a 14-day per-category count strip; it never shows user or model text.

### Personal report centre

- **Structure:** inside the app shell, not a page of its own. The name 「我的报告」 sits alone in the 46px header. The body opens with the **generate card** (`.report-center-create`, 2026-09-29, product sketch): a centred `--color-canvas` sheet, `--space-6` below the header (BUG-1103: it used to sit flush under it), with a file icon, the title 「完整本命报告」 (what you get), one line 「星盘、力量、大运、年运和瑜伽的完整数据，中英两版；生成后可离开，完成时下方自动出现。」 and the filled 「生成报告」 button (what it does) — title and button no longer say the same thing — the page's only generate entry; the header button was deleted rather than kept as a second one. Below it, 「过往的报告」 heads the **row list** of reports; with none yet, a single quiet line 「还没有个人报告。」 replaces the old second big empty card. The supporting paragraph (「有填报到分钟的出生时间即可生成……」) and the 「共 N 份 · 已完成 N 份」 overview line above it were removed on 2026-09-28 (TASK-self-edit-avatar-menu-20260928 S3, product: 「这里的提示去掉」); the minute requirement still lives in the 生成 button's hover title.
  It used to be a standalone full-screen route with a `report-center-shell` root, a `report-center-topbar` holding one 「返回对话」 link, and a `report-center-hero` with a page-sized h1 — the sidebar vanished the moment you opened it, and the only way back was that link.
- **Row list, not a card grid:** `.report-center-list` is one column of `.report-center-row`, hairline-separated by a 1px grid gap over a `--color-border` ground so each boundary is a single rule rather than two touching borders. A card grid costs one scan per card; past five or six reports the reader is looking for state, and a single column puts every status chip on the same x. D12.
- **Paging (2026-09-30, BUG-1124):** the list shows the newest 10; under it an outline 「加载更多」 button (centred, at least 160px; full width below 767px) brings the next 10. While that page loads the button reads 「加载中」 and is disabled — no spinner. It disappears when nothing older exists. A failed page is a toast 「更早的报告没读出来，再试一次。」, the list stays. The 3s poll while a report is generating and the 刷新 button re-read the first page only and merge it over the pages already opened, so a refresh never collapses the list back to 10. Entering 我的报告 shows the cached first page at once and revalidates behind it (BUG-1123); a cold entry keeps the one shared waiting state.
- **Row anatomy:** status chip, then the title at `--type-title-md`/500, then the meta line (creation time · depth · themes) at `--type-caption` with `tabular-nums`, then — for a ready report — its stored card summary, or for a failed one the failure reason. Actions sit right-aligned on the same row and wrap under the body at the global 767px cut.
- **Status chip:** a caption pill with a 5px `currentColor` dot and a text label. Ready uses `--color-success`, generating `--color-warning`, failed `--color-danger`; each background mixes the same token at 12%. No spinner. Ready rows use `--report-paper`; all other rows use `--color-canvas`.
- **Meta honesty:** the row says only what `GET /api/reports` returns. It carries no section or chart count, so the row does not claim one; inventing 「9 节 · 22 张盘」 on the client would be a made-up number (VOICE.md 第 2 条). If the endpoint ever projects per-section progress, it belongs on the generating row's note line.
- **Surface:** `--color-canvas-soft` floor; completed rows are paper, other rows canvas, with a warm hairline and `--radius-lg` on the list as a whole. No drop shadow.
- **Metadata and deletion:** full Chinese date · localized depth · localized themes; unknown IDs remain readable verbatim. Every row has a 44px top-right menu (component-library DropdownMenu, trigger class `report-center-menu`, Lucide ellipsis, accessible name 「报告更多操作」) containing only 「删除」. It opens 「确定删除这份报告？」 (AlertDialog) with 删除 / 取消, never `window.confirm`. While the delete is in flight the confirm button reads 「删除中…」. Failure stays in that row; success removes it and invalidates list cache. In-flight GET responses cannot resurrect a deleted row.
- **Width:** 900px centered, matching long-form chat reading. Rows stack at the global 767px cut.
- **Actions:** “生成报告” in the generate card is the one filled action. A ready row keeps only “查看报告”; export is selected inside the reader so the list does not duplicate that action. Generating copy is one-step (“正在生成报告，大约 10–30 秒”); there is no chapter-count progress. A failed row states the reason in place and offers no second generate entry — the card above already has one. Card summary is a deterministic excerpt of the Markdown 「摘要」 section, stored on the cover document at generation time.
- **States:** loading, empty, populated, generating, ready, failed, unauthorized, list error. First-screen loading uses `SecondaryPageShell` waiting copy 「报告列表还没拿到。」 — never a spinner, skeleton, or 「正在加载」. Export is local to the ready reader's drawer and never starts a second writing flow or fetch. Download failures raise an error toast and leave the drawer open; only success closes it and emits the 「已导出」 toast. A missing Markdown appendix is an old report: the detail page asks the reader to regenerate.
- **Accessibility:** generate, refresh, and row actions are 44px. The generating row's chip is a live region; a failed export is an alert.

### Personal report reader

- **Buttons on the report surfaces:** the BUG-1078 report-only override (2026-09-28) was replaced the same day by the site-wide solid-button pair (BUG-1079, see Button); report buttons look as before. Outline buttons there (the header 「生成报告」 while submitting) now fade like outline buttons elsewhere instead of the report-only grey. The selected export preset is `--color-canvas-muted` + `--color-ink` + a `--color-ink-secondary` edge, not the `--color-action-soft` fill (a red-brown block in dark mode).
- **导出报告 sheet (redesigned 2026-09-30, product: 「分块导出太丑」):** a component-library Sheet. Desktop slides in from the right (`data-side="right"`, width `min(520px, 92vw)`, max 520px). Below 767px it slides up from the bottom (`data-side="bottom"`, up to 85dvh). App colours only. Top to bottom: title 「导出报告」 with a × (读屏名「关闭导出」); segmented tabs for language (`aria-label="导出语言"`, 中文 / English) only when an English edition exists. They start on the edition being read and do not switch the page. There is no AI caption. Without an English edition, opening the sheet raises one info toast (id `report-export-english`) saying why. Then two segmented tabs (`aria-label="导出范围"`) 「整篇报告」 (subline counts 章正文 / 张分盘 / 张核对表) and 「自选章节」 (the second tab also carries 「只带走需要的部分」); only in 自选, a plain checklist grouped 正文 / 分盘 / 核对表, each group one tri-state checkbox (✓ / − / empty) plus a chevron, 正文 open and the other groups folded. Rows are borderless 44px lines, no per-block character counts. The footer button does not show a file size: 「导出整篇」 / 「导出 N 项」 / disabled 「先勾选要导出的部分」. Selected states (issue #90, 2026-10-21, overrides the 2026-09-30 neutral rule): the scope card's border and radio dot, checked / mixed boxes, and the selected language segment use `--color-action-strong` (text `--color-action`); backgrounds stay neutral; never `--color-action-soft` or `--color-action-fill` (BUG-1078: no dark red-brown block in dark mode). The language segment and the 整篇 / 自选 cards (`report-export-mode`) match `[data-active]` or `[aria-selected="true"]`, the same mark the chart-page tabs use. They do not look for `aria-checked` or `aria-pressed` alone. Escape, backdrop or × dismisses; focus returns without scrolling. No spinner, clipboard or extra fetch.
- **Export selection:** 整篇 = every block of the chosen edition; 自选 starts with all 正文 chapters ticked. Switching the sheet's language resets the checklist to that edition's chapters (block ids differ per edition). Presets 常用 / 全部分盘 / 仅核对表 and 全选 were retired with the redesign.
- **Export content:** full body alone remains byte-identical to the retired ordinary Markdown export. Selected chart/table blocks append new content; selecting all groups is not byte-identical to body-only. D13 requires safe SVG in each chart, reusing the projected engine SVG or the existing hook-free Vedic drawing; offline fallback uses readable monochrome glyphs/legend and presentation attributes. No chart JSON fences or internal audit fields. Fact-table labels/precision/subtables match the reader. Full body uses the historical filename; excerpt adds `-节选`. The existing downloader appends `.md`. Chinese chart house lines use `SIGN_ZH`（白羊、金牛……，不带「座」）. English chart house lines keep the English sign name.

- **Structure:** inside the app shell, like every other secondary page — `/reports/[reportId]` was the last standalone full-screen route, and opening a report used to drop the reader out of the app entirely. 「个人报告」 sits in the 46px header; below it the reader owns its own scroll boundary, carrying the sticky screen chrome (back and the labelled 「导出」 button) and then the longform Markdown body beside a persistent TOC rail. Every phase — loading, generating, timed-out, and each error — renders inside the same shell, so the way back is always the rail. The five-chapter writer document is storage-only and is not rendered. Reports without Markdown show “旧版本报告，请重新生成”.
- **TOC levels (2026-09-29):** chapters (`##`) are `--color-ink` at weight 600 with `--space-3` above each new chapter; sections (`###`) are indented `--space-5` and stay `--color-ink-secondary`. The two levels read apart without relying on the current-item pill.
- **中文 / English (2026-09-29):** reports generated since the English edition carry both editions; the action bar shows segmented tabs (`.report-language-switch`, `aria-label="报告语言"`, 中文 / English, the same raised slot as the chart-type strip) before 「导出」. The selected segment keeps a neutral background; its text is `--color-action` and a 1px inset edge is `--color-action-strong`, matched on `[data-active]` or `[aria-selected="true"]`. Reports without an English edition show no switch at all rather than a disabled one. The edition lives in the URL (`?lang=en`, read by the server page, written with `history.replaceState`), so refresh and shared links keep it. Switching remounts the article, TOC and fact tables for that edition and sets `lang` on the reader body; chrome (header, rail, 到底部) stays Chinese. Charts draw the same glyphs; only the legend reads `Su Mo …` / 「bar = retrograde」.
- **导出框里的英文版提示 (2026-10-25, K5 / D8):** the caption and the 「切到 English」 band are gone. A report without an English edition still raises one info toast (id `report-export-english`) when the sheet opens. Switching the sheet's language still resets the checklist to that edition's blocks; the file name still gains `-EN`.
- **Opening a report (2026-09-30, BUG-1106):** one waiting screen, `ReportOpening` — the 46px header 「个人报告」 over a centred spinner and 「正在加载报告…」. The route's `loading.tsx` and the reader's first fetch both render it, so nothing swaps or jumps between them.
- **Phones (2026-09-30, BUG-1107):** the action bar is one row, about 53px: an arrow-only back link (screen readers still hear 「返回报告中心」), the 中文 / English pill at 36px segments, and 「导出」 at 40px. In the export sheet below 767px the sheet slides up from the bottom and may take up to 85dvh. There is no description line and no file size. 关闭 is a × icon (accessible name 「关闭导出」).
- **Switching editions keeps your place (BUG-1108):** the chapter at the top of the reader is remembered; the new edition renders every chapter up to it at once and scrolls back to it.
- **判断不了的分盘提示 (2026-10-01, BUG-1139):** for a segment-v1 adoption whose card left D9/D10 undetermined, the longform body carries one plain paragraph directly under each such chart heading and its 数值位置表 heading — no new component, no blockquote, no colour. Under a chart heading it becomes the chart card's caption (`report-chart-grid-rehype.ts::parseCard` accepts exactly one paragraph between heading and fence), so the chart grid never splits. Added before the snapshot hash; legacy reports are untouched.
- **到底部 / 回到顶部:** one floating control (`.report-edge-jump`, a component-library Button `variant="outline"` with class `report-edge-jump__button` and Lucide ArrowDown / ArrowUp, fixed bottom-right, same look as the chat's 跳到最新). It reads 「到底部」 until the reader is within 480px of the end, then 「回到顶部」 — never both. Sections below the fold mount lazily, so the click first mounts every section synchronously (`flushSync`) and then scrolls to `scrollHeight`, landing on the real end in one click. It is not a scroll follower and owns no anchor; it is hidden on paper.
- **Long full-data reports (2026-10-08):** when the Markdown is longer than 200,000 characters and has more than one chapter, the reader shows one chapter at a time. The TOC and 「上一章 / 下一章」 (44px, screen only) change the chapter; the article carries `data-chapter-index` so a 中文 / English switch returns to the same chapter. 「到底部」 opens the last chapter. Shorter reports keep the lazy-section reader. There is no full-text search. Print still mounts every chapter. Markdown download stays on the existing 「导出」 sheet.
- **TOC rail:** a persistent right-hand column built from the outline's own `##`/`###` ids — no second slugger, and nothing that touches the chart-grid rehype pass. It is sticky under the report's own action bar, highlights the section in view via `IntersectionObserver`, and marks it with `aria-current="location"` plus a 2px `--color-action` bar. Placement is explicit (`grid-column: 2`) rather than DOM-ordered, so the narrow-screen drawer can stay first in the source. Below 860px the rail is gone and what remains is the collapsed 「目录」 drawer.
- **Paper stays paper:** the rail reads in the app palette because it is chrome. `--report-paper` / `--report-rule` / `--report-accent` are the document's own, deliberately out of step with the app accent, and nothing in this surface puts them on chrome or takes chrome colour onto the page. D11, continuing D3.
- **Surface:** page floor `--color-canvas-soft`; the Markdown article is a `--color-canvas` sheet with a hairline and `--radius-lg`. Print flattens the sheet, hides chrome and the TOC, and pins the light palette.
- **Print inside the shell:** printing takes the whole document, so the reader ships a second `media="print"` stylesheet that hides the sidebar and the 46px header **and unlocks them**: `.chat-app` / `.chat-panel` are `height: 100%; overflow: hidden`, which would otherwise clip a nine-section report to one page. It lives on the component rather than in `globals.css` so it exists only while the reader is mounted and no other surface has to know about it. The `@page` rule is unchanged.
- **Typography:** Markdown `h2` uses `--type-display-sm` serif at weight 400. `h3` uses `--type-title-md` sans at weight 500. Body is `--type-body-md` at 1.65. Honesty labels (`blocked` / `conflict` / `parameter_sensitive`) stay visible; the reading-nav and quality-matrix sections are not collapsed.
- **报告标题 (2026-10-13, BUG-1316):** the Markdown `h1` is the report title. It uses `--font-display` at `--type-display-md` (larger than the `h2` `--type-display-sm`), weight 500, with `--space-2` above and `--space-3` below. Under it, one caption (`.personal-report-md-byline`, `--color-ink-tertiary`, `--type-caption`, body face) reads `{名字} · 生成于 YYYY-MM-DD`, or `Generated` in English. No name: date only. The title already contains the name: date only, the name is not repeated. The name comes from the signed-in read (`subjectDisplayName`); it is not added to the public projection or the export. Old reports without a name still show the date.
- **开篇重点卡 (2026-10-13, BUG-1316):** the first chapter is one card (`.personal-report-focus-card`) drawn from a `jyotish-focus` fence. The engine writes the JSON; the page only parses it. First row, 「现在走的大运」: 主运 / 子运 / 次子运, each the planet's Chinese name plus `YYYY.MM – YYYY.MM`, in a wrapping row. Then 事业 / 财富 / 婚恋: 「第 N 宫主 · 行星 · 落第 M 宫」 and two tags (`.personal-report-focus-tag`, same muted pill as `.chart-role-badge`: `--color-canvas-muted`, `--color-ink-secondary`, `--type-overline`). The last line is the caveat at `--type-caption` / `--color-ink-tertiary`. No MD / AD / PD on the card. A bad fence says 「重点数据无效」 (English "Focus data is invalid"), the same invalid line as a bad chart, and does not echo the JSON. The card wraps; it does not scroll sideways. Tokens only, so light and dark both stay readable. Reports with no fence render as before. Export turns the fence into those same words; the file has no raw JSON. The public projection keeps a public fence the way it keeps `jyotish-chart`, and does not add a name field.
- **开篇解读 (2026-10-27, issue #113 R1):** a Chinese report with a stored reading shows it right after the title / focus card and before the first engine chapter: one `h2` 「解读」 (`#report-reading`, also the first entry in the contents rail and drawer), then eight `h3` parts 总评 / 性格 / 事业 / 财富 / 感情 / 健康 / 现在这几年 / 几条建议, each one to four plain paragraphs in the article's own body type. No card, no icon, no badge: it reads like the rest of the article. After it, a quiet label 「计算依据」 (`.personal-report-basis-label`: `--type-overline`, `--color-ink-tertiary`, a 1px top rule) introduces the engine report, which is unchanged. In paged mode the reading sits on chapter 1 only. The reading arrives in the same read as the report: no loader, no second request, nothing appears after reveal. English view and reports without a reading render exactly as before.
- **Charts:** a rehype pass groups each `####` chart heading (optional note paragraph, then the `jyotish-chart` fence) into `.personal-report-chart-card` and consecutive cards into the existing `.personal-report-chart-grid`. A lone card uses `is-single`. The grid is two columns; print and the 760px breakpoint stay one column. Do not float chart headings or figures, and do not use negative margins to fake columns. Occupants are one-character Chinese names plus integer degree (`日 12°`), with `逆` after the name when retrograde (`土逆 3°`). House corners show rasi numbers 1–12. Chart JSON fences are stripped from the `.md` download. The chart section opens with one caveat line under its heading ("分盘对出生时间敏感，原始计算供核对，不单独增加结论的确定性。", engine-written, English in the English edition). Each chart is drawn once: the trailing 「分盘核对」 block only draws structured charts the body has no fence for — the export's rule, shared via `fencedReportChartIds` — so a current report has no trailing block at all and an older report keeps only the charts its body lacks (BUG-1203). Markdown still uses `react-markdown` + `remark-gfm`, `skipHtml`, and no `rehype-raw`. The article tree is memoized; TOC highlight state lives in `ReportToc`, not in `PersonalReportMarkdownView`.
- **Accent:** headings stay ink. Dark ink is never a page-scale rule or card edge.
- **Tables:** wide Markdown tables sit in `overflow-x: auto` wrappers; print unwraps them. Report tables (Markdown and fact tables, never chat bubbles) carry a header band of `--color-ink` at 6% and zebra rows at 3%, both mixed into transparency so they work on paper and on the dark sheet; print lightens them to 5% / 2.5%.
- **Width:** 1120px for the reader chrome; the article takes `minmax(0, 1fr)` and the TOC rail `minmax(11rem, 15rem)` to its right. The TOC collapses into a drawer below 860px.
- **States:** loading, generating, timed-out, unauthorized, not-found, failed, invalid, network-error, markdown-ready, legacy-unavailable. Waiting uses `InlineSpinner` and one-step copy.
- **Accessibility:** the action bar has only 返回报告中心 and an outlined, full-height 「导出」 button with the Download icon (`aria-label="导出报告"`); 2026-09-29 it replaced the 44×44 ghost icon button nobody found. No raw-appendix or print button, and old `#export` links no longer auto-open a dialog. Browser Ctrl+P keeps the existing print styles and beforeprint/afterprint fact-table expansion/restoration. Generating copy uses `role="status"`. Markdown is rendered with `react-markdown` + `remark-gfm`, `skipHtml`, and no `rehype-raw`.

### Starter home

The empty state is the composer. It used to be a bordered hero card at
`clamp(34px, 5vw, 52px)` plus two 132px product cards — roughly 800px of content
sitting on top of the input, so the primary action was the last thing on the
page. Three parts now, in reading order:

- **Greeting** (`.starter-greeting-block`): one line — a single h1
  at `clamp(24px, 2.8vw, 30px)`, weight 500, `line-height: 1.25`, centred. The
  salutation line above the question is gone; so is the question, which is the
  composer placeholder's job now («想聊什么都可以»). The line is drawn per visit
  from three pools — daypart (morning / noon / afternoon / evening / late-night),
  weekday (Mon, Fri, Sat, Sun only), and returning (accounts that already have a
  session) — concatenated in that order and indexed by one random seed, with the
  `{名字}` entries dropped when no name is set. It lives in the conversation area
  with `align-content: end`, so it sits directly above the composer rather than
  floating in the middle of the row.
- **Daily sub-line** (`.starter-greeting-sub`, 2026-09-26): today's trend sits
  under the greeting as one quiet paragraph — `--color-ink-secondary`,
  `--type-body-sm`, `line-height: 1.55`, `max-width: 560px`, clamped to two
  lines with an ellipsis. It reads the same `dailyStarlanguage` state the warm
  snapshot seeds (BUG-1040), so a warm return shows it on the first frame. Until
  the card is ready it shows the existing static sentence「今天的星语还没写出来。」
  with `role="status"` and no `aria-busy`, spinner or placeholder; the reveal
  rule does not change. Without a natal minute it is not rendered at all.
  **Entry (2026-09-30, BUG-1125):** the owner's line no longer waits for the
  person catalog, so the reveal holds for it and it is there on the first frame;
  whenever the text appears or changes later (another person's card, the
  prepare timeout) it fades in — opacity 0 → 1 and a 4px rise over 240ms,
  keyed on the text; reduced motion shows it at once.
- **Composer**: unchanged, and *in the same DOM position it occupies during a
  live session*. Nothing remounts when the first message lands, so an in-flight
  draft, focus, or queued card survives the transition. Its width is
  `--session-column-width` in both states — the empty-state composer used to be
  1040px against the session's 760px, so the input visibly narrowed the moment
  a conversation started.
- **Entry pills** (`.starter-entry`): the product entrance(s), rendered inside
  `.composer-wrap` *below* the composer. The visual pill is 36px tall
  (`min-height: 36px`). The transparent hit area is the `::after` box with
  `inset: -4px`, so the touch target is 44px. One word each, accent icon 15px:
  lucide `MoonStar` for 今日星语 (was `Sparkles`, the same glyph as the credits
  button). The 生时校正 pill (`Clock3`) was removed on 2026-10-07 (BUG-1247):
  rectification starts from an offer card under a consultation answer. The header credits button uses lucide
  `Coins`; its accessible name is unchanged. Below the pills there is normally
  **nothing**: a hint line (`.starter-entry-hint`) appears only when the user has
  something to do, and an accuracy-boundary line appears when no natal minute is
  available. The daily trend and the rectification hint are no longer joined
  with「·」.

- **States, measured:**
  - Default border is `1px solid var(--starter-entry-border)`, and that token is
    `color-mix(in srgb, var(--color-border) 62%, transparent)`. It is not
    `--color-border-strong` and not `--color-action`. A `1px` shadow uses
    `color-mix(in srgb, var(--color-ink) 4%, transparent)`.
  - Hover (`@media (hover: hover)` only) darkens the border to
    `color-mix(in srgb, var(--color-border-strong) 45%, var(--color-border))`.
    It does not switch the border to `--color-action` and does not tint the fill.
  - Pressed (`:active`) keeps the soft border, drops the shadow, and fills with
    `color-mix(in srgb, var(--color-canvas-soft) 80%, var(--color-canvas))`.
  - Focus-visible is a `3px` outline at
    `color-mix(in srgb, var(--color-focus) 80%, transparent)` with
    `outline-offset: 2px`. That ring is wider and more opaque than the 1px
    default border.
  - Disabled uses the shared `button:disabled` opacity. `data-opening="true"`
    sets `cursor: progress` and adds no spinner and no “正在加载” copy.
  - `prefers-reduced-motion: reduce` already collapses transition duration to
    `.01ms` on `*`. Do not add a loop animation here.
  - At the existing `max-width: 480px` cut, the row and each pill are
    `max-width: 100%` so the label and 15px icon stay inside the row. This
    overflow guard uses the published small-phone breakpoint, not a separate
    375px cut. The 44px hit area does not shrink.
- **Copy:** chat history titles daily readings as “8月22日 · 今日节奏”, typed natal
  questions as “事业 · …”, and rectification as “8月21日 · 生时校正”. Clicking the
  daily pill starts a consultation session immediately; it does not place the
  question in the composer. Private model instructions are selected by a closed
  entrypoint identifier and expanded only on the server. There is no
  “从一个主题开始” grid; leftover `guided_topic` values in stored sessions still
  pin domains when replayed.
- **Rectification hint** (`rectificationEntryHint`, 2026-09-26) has two
  visible branches and reads the entry summary itself, never the session list
  and never the derived start/restart label: a non-self current person →
  「生时校正暂时只支持本人。」; otherwise `hasResumableCase` →
  「上次那次校正还没完成，可以在历史对话里接着做。」. First runs and finished cases show no
  hint. The old first-run and "redo" sentences are gone. (The summary parser had
  been reading the wrong key casing since 2026-08-11, so every account looked
  like a first run — BUG-1041.)
- **Responsive:** the pill row wraps and stays centred; there is no
  phone-specific layout, because there is no fixed-height card to collapse.
- **Accessibility:** each pill is one native button with a descriptive accessible
  name (the full action label, not the one-word face). The daily sub-line keeps
  `role="status"` while the trend has not arrived.

### Account popover

- **Structure:** the trigger is the avatar and the name only. The menu is 个人资料 / 通用设置 / 账户与点数, then theme as a radio group, then 反馈与投诉, then logout. The balance is not repeated on the trigger. 星盘档案不在这个菜单里，它是侧栏导航页 `/people`。
- **Surface:** 280px elevated canvas popover anchored above the sidebar account trigger; warm hairline, existing elevated shadow, no nested cards.
- **States:** closed, open, hover, focus-visible, and logout confirmation.
- **Accessibility:** `aria-expanded`, `aria-controls`, menu semantics, 44px rows, outside-click and Escape dismissal, and focus return.
- **Billing:** the 账户与点数 row opens the settings dialog on the billing pane. It does not leave the homepage.
- **反馈与投诉 (2026-09-30):** one row after 账户与点数 (icon `MessageSquareWarning`). It opens the sidebar's own dialog in place on every page — no `/?account=` hop, no Home state. The dialog uses the export sheet's language: bottom sheet on phones (up to 90dvh), a centred 520px panel from 860px; a four-way type segment (问题反馈 / 内容举报 / 退款与扣点 / 其他; 2×2 below 480px), a description (10–2000 characters), an optional contact prefilled with the account email, and — only when a saved conversation is open — 「附上当前对话」 which attaches the session id, never its text. Submit reads 「正在提交…」 while sending; errors sit above the button as an alert; success replaces the form with the promised reply window and the contact email.

### Reply ratings persist (2026-09-30)

The 👍 / 👎 under an answer (回复评价) is saved per conversation and message position with a 16-hex hash of the answer text, and restored when that conversation is opened again — but only onto the same text, so a regenerated answer starts unrated. Saving is fire-and-forget: a failed save never disturbs the conversation.

### 不满意原因 after 👎 (2026-09-30)

- **When:** only right after a 👎 in the current view (`MessageEntry` owns `reasonOpen`; no Home state). A 👎 restored from the database does not reopen it; switching to 👍 or clearing closes it.
- **Where:** directly under that answer's action row, above the follow-up questions. Not a modal, not a toast.
- **Shape:** one panel on the canvas (`--radius-md`, hairline `--color-border`, max 520px, caption type in secondary ink): a head row (「哪里不满意？可以不选」 + a 32px × close), five pill chips (`aria-pressed`; current = muted surface, primary ink, darker border — no accent colour), a single-line note input (200 characters), and a foot row with the disclosure 「会把这一轮对话发给我们排查」 and a small 提交 button on the muted surface. Chips wrap on phones.
- **After submit:** the panel collapses to one status line 「已收到，谢谢。」 and closes after 1.2s. Nothing is required; closing keeps the 👎 and its snapshot.

### Admin 对话质量记录 (2026-09-30)

- Sidebar entry after 反馈与投诉 (`DislikeOutlined`). Top card 「回复评价统计」: 近 7 / 14 / 30 / 90 天 segment, 👍 / 👎 / 👎 占比 totals, then by-day and by-model tables side by side (stacked below `lg`).
- The list below is the shared `ResourceTable`; its one filter slot carries a 处理状态, `原因：…`, or 近 7 / 30 天. The list shows no conversation text — 快照 reads 有 / 已过期.
- 查看 opens an 880px modal that loads the snapshot on open (audited; the modal says so): 用户问题, 被点踩的回复, the reconstructed context (summary, dropped count, turns), run facts, then 处理状态 + 内部备注. Expired bodies show an info alert instead.

### Settings dialog

- **Placement:** the overlay and the onboarding paywall portal to `document.body`. `SidebarInset` stays `inert` while a dialog is open (the BUG-744~746 focus contract); the dialog itself must not sit inside that subtree (BUG-968). Closing still uses the existing overlay click, the header button, and the window-level Escape listener.
- **Redeem paywall timing (2026-09-28, TASK-birth-sky-polish-20260928 P4):** the 「解锁完整咨询」 paywall no longer opens when the starter home appears. The first send on the page refused for lack of credits (the pre-flight balance check or a 402) opens it, and the typed question stays in the composer; every later refusal opens the billing dialog as before. Rectification's own 402 path is unchanged.
- **Structure:** one fixed chrome for three panes — 个人资料, 账户与点数, 通用设置. The names are unchanged. The pane switch is Tabs. The chart archive is no longer a pane; `?settings=chart` leaves for `/people`. Left nav is 200px, has a hairline boundary, and does not scroll; the title bar stays put; only the right-hand content pane scrolls. The pane menu uses icon + label rows without a trailing chevron because these controls switch content inside the same dialog. Theme on the general pane is the same segmented control. Logout is a separate AlertDialog, still capped at 400px. Feedback is a Dialog.
- **Width / height:** desktop `width: min(100vw - 32px, 880px)`, with `height: min(84vh, 640px)` as the base and `min(84dvh, 640px)` applied inside `@supports (height: 1dvh)`. The right content pane uses 32px horizontal and bottom inset on desktop. All four panes share one class (`.settings-modal`), so switching panes cannot change the frame. At ≤767px the dialog is full-screen with four equal tabs along the top and 16px content inset.
- **Pane menu states:** default is transparent with secondary ink; hover is a 55% wash of `--color-canvas-muted` keeping secondary ink; current is the solid muted surface with primary ink. No accent bar, no trailing navigation chevron, and no weight change — hierarchy here comes from ink rank and surface, matching “Hierarchy inside the nav comes from ink rank, not hue”. The sidebar's 2px `--sidebar-ring` on the active session is deliberately **not** changed to match; the two surfaces read differently on purpose until that is revisited.
- **Content width:** the 880px frame now gives the content pane a deliberate inset instead of leaving controls against the divider. Form panes (个人资料, 通用设置) cap their children at 560px and stay left aligned (`.settings-dialog-content--form > *`); list panes (星盘资料, 账户与点数) stay full-bleed within the inset so tables and card grids keep their columns. The cap sits on the children of the scroll container only — never on `.settings-modal` or `.account-settings-shell` — so it cannot make the frame resize between panes (BUG-554 / BUG-698).
- **Personal profile:** one row of avatar editing (56px preview, eight palettes, 换一个形象) plus nickname and login email. Gender is **not** set here (2026-09-30, BUG-1119): it lives only in the people archive's edit form, for the owner and everyone else; onboarding never asks. The header uses the product-level “设置” eyebrow above the current pane title; there is no duplicate 管理星盘资料 button.
- **Chart archive (`/people`):** a static secondary page beside 星盘 / 星历 / 我的报告. Self is the first row and cannot be deleted, but is edited here like everyone else (2026-09-28, BUG-1081). Each other row is a name plus birth facts, with no relationship field. Detail shows the reported time and the chart time separately, then place and ayanamsa. Shortcuts are 和 TA 对话, 看星盘, 生成报告, and 和我合盘. When the holder's own birth data is incomplete, that last control is the sentence 「加上你自己后可合盘」. Adding a twenty-first person is disabled with 「最多保存 20 个人的星盘」. Delete confirms with the session and report counts before the server removes them together. There is no 「设为默认」 and no 「当前默认」 badge.
- **Subject switcher:** the same control sits beside the title on chat, chart, ephemeris, reports, and the archive. It is not in the sidebar header. Choosing someone in a chat that already has messages switches the current person and opens an empty chat. An empty chat rebinds in place. The list shows every saved person, up to 20, and scrolls inside the menu so it does not grow past the screen.
- **States:** open, pane switch, list / self / other / add, saving, success, and error.

### Billing pane

- **Structure:** summary line (balance · membership / expiry), then tabs 会员套餐 / 点数包 / 兑换码 / 订单记录.
- **Plan card states:** exactly two, and they are mutually exclusive. `.is-current` (当前套餐) draws the `--color-action` border; `.is-recommended` (推荐, the monthly plan) draws the `--color-border-strong` border on the plain canvas. A card that is both takes 当前套餐 — its own action is 续费, not 立即购买 — so borders and fills can never stack. The badge in the card header says the same word. Mobile ordering (月卡 first below 640px) keys off `[data-plan-alias="monthly"]`, i.e. the plan's identity, not its state, so it survives the card becoming the current plan.
- **`?plan=` deep link:** names its target in copy, not in a third border layer. A `.membership-plan-note` line above the grid reads 「你从「年度会员」的链接过来的，就在下面。」, and the card takes `ref` / `tabIndex` / `aria-current` for the scroll and focus target only. It names the plan by the card's own title rather than a position: below 640px the monthly card takes `order: -1`, so an ordinal would point at the wrong card. Scrolling alone is not wayfinding here — at desktop widths all three cards are already in view, so a link that only scrolled pointed at nothing.
- **Actions:** recommended-plan purchase is `Button` default. Other plan and credit buys use `Button` outline. Cashier still opens with `window.open` in a new tab. Paying copy is 跳转收银台…; pending copy is 等待支付结果. Redeem is an inline form on its tab, not a nested dialog.
- **Deep links:** `/?settings=billing&source=…[&plan=…][&tab=…]` open this pane on `/` and are then stripped. `/membership` and `/membership/orders` redirect here. `&plan=` does **not** repaint the card (that used to be a third border plus an outline on top of the two states); it scrolls the card into view and focuses it, and nothing else.
- **Waiting:** the summary renders from the in-memory account. Package cards stay empty until `/api/payment/packages` arrives. No spinner, skeleton, or 「正在加载」.

### Logout dialog

- **Structure:** confirmation title and explanation, cancel action, and destructive confirm action.
- **Width:** 400px desktop maximum.
- **States:** open, signing out, and error.

### Admin panel and data table

The admin is **not** built from this design system. It runs on antd + Refine, and
`src/app/admin/admin.css` only re-skins antd to sit near the product palette
(warm floor, hairline borders, the same body font). Admin routes deliberately do
not load `globals.css` — that isolation keeps the 33 KB chat stylesheet off every
admin page — so nothing here inherits the tokens above.

- **Structure:** antd `Layout` with sider, header and content, wrapped in
  `.admin-app-shell`; tables, cards, tags and statistics are antd components.
- **Own classes:** only `.admin-app-shell`, `.admin-loading` and `.admin-text-list`.
  Anything else must be an `.ant-*` override inside `admin.css`.
- **Colors:** `admin.css` writes literal hex because it cannot see the tokens. Those
  literals must stay in sync with the palette above by hand; this is the one
  sanctioned exception to the no-raw-color rule.
- **Content width:** 1200px centred, set by antd layout, not by `.admin-scroll`.
- **Loading:** antd `<Spin>`, outside the waiting vocabulary in section 9.
- **Model versions (2026-10-20):** editing a published or retired row saves a new draft and leaves the live row unchanged. Delete removes that version from the list. Both use the existing antd `Modal` and link buttons; no new class.
- **Aggregate pages (「校正统计」, 2026-09-26):** built only from antd `Card`,
  `Statistic`, `Table`, `Progress` and `Segmented` — no chart library and no new
  class. Distributions are a table whose last column is a small `Progress` bar;
  the weekly trend is a table, not a line chart. The page states in its header
  card that it is anonymous, summary-only (no per-row view or export) and kept
  for 180 days.

## 7. Depth & Surface

Strategy: warm tonal shifts, restrained translucency, and fine hairlines. Most depth comes from the page floor, main canvas, warm cards, and selected white glass. Standard UI uses no drop shadow. Modal, popover, floating-control and raised-sheet depth use one restrained two-stage token: `--shadow-elevated: 0 1px 2px rgba(29, 29, 31, .07), 0 12px 28px -16px rgba(29, 29, 31, .18)`. A second, quieter token, `--shadow-soft: 0 1px 2px rgba(29, 29, 31, .06), 0 8px 20px -18px rgba(29, 29, 31, .2)`, belongs to surfaces inside the reading column — the conversational narrative card, the composer field within a session and the auth mode tab. Floating controls and overlays (jump to latest, popovers, sheets) always take `--shadow-elevated`. Interactive rings use `0 0 0 1px` or the focus ring; no generic card shadows, no utility-class shadows, no atmospheric gradients. When transparency is reduced, frosted surfaces fall back to opaque warm neutrals.

## 8. Agent wording and accuracy boundary

The Birth-Time Guide Agent controls wording only: it may choose a safe tone or extract a reviewable
draft, but it cannot select evidence domains, change `nextAction`, rank candidates, set confidence,
or grant save/apply permissions. Those decisions remain in the deterministic, versioned journey
state machine and its server-side scorer.

`confidence` is an internal, versioned safety gate for this product flow. It is not an external oracle,
clinical claim, or proof from calibrated real cases. Until matching external-engine parity and real-
case validation are complete, low and medium results never apply a minute, and high results still
require explicit confirmation of the matching representative time. Journey telemetry is limited to
metric name, phase, and optional confidence; it never records messages, dates, coordinates, case IDs,
or user IDs.

## 9. 等待与加载

等待按语义分为以下类别。同类必须共用同一套实现；不要为新入口再写一套旋转或呼吸。2026-09-24 决策仅为星盘页盘位增加骨架例外，首页、侧栏、星历、报告与表格区不适用。

| 类别 | 语义 | 组件 / 样式 | 时长 | `prefers-reduced-motion: reduce` |
| --- | --- | --- | ---: | --- |
| 整页 / 整块阻塞 | 首页揭幕前的两阶段载入（载入账户 → 准备对话）、生时评估浮层 | `AppLoadingIndicator`（轨道环 `app-loading-orbit`） | 1.4s linear | 全局 `*` 规则把循环收成一帧；不要改它的 DOM |
| 行内 / 局部等待 | 出生地解析、两个会话面时间线的 live 步、兜底活动面板的 live 行、个人报告列表与详情 | `InlineSpinner`（`inline-spin`） | 0.8s linear | `animation: none`，收成静止圆点，不要半圈圆弧 |
| 盘位骨架（仅星盘页） | D1 / 非 D1 分盘 / 西洋盘尚未返回 | `VedicChartSvg skeleton` / `WesternWheelSvg skeleton`；统一 `.chart-page-skeleton`；2026-09-30 起盘线静止（stroke-opacity .55），十二宫（西洋盘为十二格扇区 `.chart-skeleton-sector`）按宫序依次泛起 `--color-action-strong` 淡光（`chart-skeleton-house`，fill-opacity 0 → .18 → 0），盘上不再叠轨道环 | 每宫间隔 150ms，一轮 2.4s ease-in-out | 停止动画，只留静止淡线 |
| 流式生成中 | 引导语打字、时间线 summary 与 live 行的文案 | `onboarding-caret` / `agent-activity-shimmer` | 700ms steps / 1.6s linear | 保持现有全局降级 |
| 流式正文的放字节奏 | 普通对话与校正面的回答正文（`stream-frame-buffer`） | 每帧最多 4 字（≈ 240 字/秒），积压超过 600 字才按 1/12 追赶；普通对话的流结束后剩余文字按同一节奏在 1.5 s 内写完（`settle({ paced: true })`），最后一帧才算 settled；停止 / 失败 / 断线 / 页面隐藏、以及校正面的流尾仍一帧全放（2026-09-28，BUG-1075） | 逐帧 | 不涉及 CSS 动画，无需降级 |

Agent 的 live 标记只有 `InlineSpinner` 一种。曾经并存的 canvas 小球（`thinking-orbs`）已移除，不得再引入第二种 live 标记。

**普通对话发出即有反馈（2026-09-28，TASK-consult-first-frame-and-pacing，BUG-1074）。** 按下发送的那一帧，回答行就带着步骤栏，唯一一行是排队行「收到，正在看你的问题…」（`QUEUED_TIMELINE_ROW`，行内 `InlineSpinner` + shimmer，summary 写「正在分析」）。服务端流的第一个字节也是这句（`activity` 事件，phase `received`），所以那一帧到达时行不换字。不再有「分类结果回来之前整行静默」：只有服务端判定为寒暄的回复（`run.completed` 带 `responseKind: "smalltalk"`）才把步骤栏收掉、只留一句话，寒暄前会闪约一秒这一行，属于流式生成中的正常形态。首事件之后的行照旧由服务端事件推动；不新增第二种 live 标记，不加 spinner 面板或骨架。重计算名额满了时，计算那一行先换成「人有点多，排一下队」（`activity` phase `compute-queue`，仍是原来的 live 行），排上之后回到「正在计算本命盘…」。排不上则整轮失败，文案是「人有点多，这一轮没排上，点数已经退回。」

校正面的所有等待复用行内等待：进入前的 hydration 在揭幕之前完成，进入后唯一的等待形态是时间线 live 行（含「正在准备下一个问题…」这一条独立 live 行）。打字回答的 live 行从发出那一帧起就是阶段句「收到，正在对照你的档案…」，按服务端 `turn.progress` 换成「正在记下这件事…」「正在重新对照盘面…」「正在准备下一个问题…」，属于流式生成中（BUG-1047）。区间交付卡只挂在最新那条采用旁白下面，不得留在更早的采集/区分题下。有未答的采集或选择题时卡仍在，「更像这个」置灰并写「先答完上面这道，再选时间」，不得整卡消失。卡上至多三列并排，相同性格句只写一次，点「更像这个」即采用该列分钟，按钮显示「正在采用…」或「已采用」。采用过程中整张卡留在原处，不得因 `busy` 卸掉。采用后若还有前事核对，服务端写一条自己的采用消息（「已按 HH:MM 排盘…」），核对题的四个选项挂在这条消息下，进行中那一行由它替换，不挂到上一题的回复下（BUG-1146）。采用后前事核对结束走 `verified_idle`：一行收尾文案跟在卡片下面、与助手列对齐，没有 live 行、没有重载、没有采用状态条。卡片与右栏细则见 §11、§12。

**每次打开网页只揭幕一次，客户端返回首页走暖快照（2026-09-26，BUG-1040）。** 整页加载（首次打开、刷新、登录后跳转）照旧放下面这一次加载屏。同一次打开里从星盘 / 星历 / 我的报告 / 星盘档案经侧栏「新建对话」、历史会话行、账户菜单的弹窗项（`/?account=`）或浏览器返回回到 `/`，不再出现加载环：第一次冷启动成功后，模型目录、校正入口摘要、会话分页游标和今日星语记进模块级暖快照（`lib/home-warm-snapshot.ts`，按账户隔离、只在内存、不落任何存储；账户、资料与会话列表本来就在布局层的会话列表 provider 里跨页存活）。首页重挂时若快照齐全，首帧即可用，落点按冷启动同一套规则同步算出（`?new=1` 新建本地空对话、`?c=` 打开该会话、其余一律当前人物的空白首页，同 BUG-1052），随后后台刷新模型目录、账户、后台回答恢复、入口摘要与今日星语，结果到了静默替换；消息没缓存的历史会话沿用首页内切换会话的留白方式。快照缺任何一项、落点需要去服务端查、或客户端导航没留下目标地址（Next 先渲染新页面、后写地址栏，`AppLink` 在点击时记下目标），一律回到冷启动，不半揭幕。账户变化、退出、任一 401 清空快照；今日星语跨日或换人按新键重取，卡片先用静态句。

**先打开次级页的标签也走暖快照（2026-09-29，BUG-1104）。** 暖快照原本只在首页冷启动成功一次之后才有；刷新或直接打开 `/chart`、`/ephemeris`、`/reports`、`/people` 的标签，第一次点「新建对话」仍要整段加载屏。现在 `SessionListProvider` 在列表就绪、资料完整、首页未挂载、地址不是 `/` 时，于空闲时刻（`requestIdleCallback`，Safari 退回 300ms 定时器）用冷启动同一组客户端函数只读地取模型目录与校正入口摘要（`lib/home-warm-prefetch.ts`，只发 GET，不做下线模型 PATCH、不做咨询恢复——这些仍由落地后的后台刷新做），通过同一个 `writeHomeWarmSnapshot` 写入；游标留给 provider 自己的 boot。首页挂载、退出、换账户或列表重载即取消，迟到的回答不写入。取失败不留半个快照，首页照旧冷启动。点击到首页可用的耗时记为浏览器 Performance 的 `jyotisha:new-chat (warm|cold)`，只在本机，不上报。

**打开 `/` 落在哪里（2026-09-27，BUG-1052）。** 地址栏带 `?c=` 就进那条对话（分享链接、侧栏历史、在对话里刷新都靠它）；带 `?new=1` 是新建对话；其余——登录后、手输网址、书签、刷新裸 `/`——一律是当前人物的空白首页（开场问候 + 输入框），已有一个没发过消息的新对话就复用它。不再记「上次在哪条对话」：离开首页、登录过期都不存任何返回记录，后台还在恢复的旧回答也不把空白首页切走。

**今日星语改为固定句库，并随次级页预取（2026-09-30，BUG-1109 / BUG-1110）。** 首页问候下面那句不再由模型写：`lib/daily-starlanguage-library.ts` 按「今日月亮落在本命第几宫（1–12，只在出生时间已确认时用）× 月相（新月前后 / 渐盈 / 满月前后 / 渐亏，按平均朔望月推算，误差约 ±1 天）× 按日期轮换的变体」拼出 trend，action / caution 按宫各两条交替；没有宫位时按月亮所在星座写一句，再没有就用原来的证据句。服务端不再在后台让模型改写并覆盖缓存，所以同一天同一个人看到的永远是同一句。次级页空闲时的预取（BUG-1104）同时取本人今天这句，写进同一个暖快照槽位与本地存储；从星盘等页点「新建对话」进首页，首帧就是真句子，不再先显示「今天的星语还没写出来。」再换掉。他人档案作为当前人物时暂不预取（其资料在人物目录里），首帧仍按原规则。

首页只揭幕一次。揭幕前的加载屏先并行取账户 / 会话、模型目录和咨询状态，再等待 lookup、会话详情等依赖数据全部到齐；不设 8 秒硬超时，超过 `HOME_BOOTSTRAP_SLOW_MS = 20_000` 才进入现有全屏错误屏。错误屏的「重试」只取消旧请求、重载 provider 并局部重跑 bootstrap，不调用 `location.reload()`。揭幕后不得再出现任何阻塞等待或组件级 spinner：今日星语未到时问候下方副行显示静态文案「今天的星语还没写出来。」（不带 `aria-busy`），内容到达后静默替换。登录后的空首页是问候语、今日星语和输入框，没有主题卡，也没有生时校正卡（2026-10-07，BUG-1247）。本人出生时间是估的、首问还没用掉时，起步三问下面多一行去生时校正的提示（2026-10-28，issue #145，见「生时校正独立页」）。本人还没有出生资料时，今日星语的按钮和问候下那一行都不出现（2026-10-24）。建档是四步：称呼、看谁的盘、出生日期与时间、出生地，进度条四格。选「帮别人看」时出生资料记在那一位名下，本人可以后补。首问还没用掉、并且当前是空白首页时，问候和输入框之间有一行引导、一枚「这一次不扣点」和三个起步问题；帮别人看再加一枚「正在看：名字 · 关系」。用掉首问或离开空白首页后，这三问不再出现。第一问里的上升和月亮星座先取今日星语；没有今日星语时（出生时间不到分钟，或在看别人），读一次已算好的星盘，和星盘页共用同一份结果。上升只在出生时间范围内不会换座时才写；读到之前、读不到时，问题保持「从我的盘看……」的说法，不转圈（BUG-1459）。给别人建档后的天空过场，副句「那一刻，{名字}的上升在……」同样来自这一份，上升会换或读不到就不写这一句。已经建完档、还没点过「先不看了」、并且不是进站时就已经七项都做过时，顶栏右侧有「启程 n/N」。尺寸、抽屉和提示互斥见文首「启程清单与一次性提示」。过场结束仍不弹浮层。切换到消息尚未缓存的会话时消息区留白并只给 `sr-only` 文案，不转圈；揭幕后按侧栏顺序后台预取最近 5 条会话（`SESSION_PREFETCH_COUNT`）让常见切换零等待。轨道环消失后不得再换一套动效继续等。

### 首屏死屏兜底

首页揭幕前的轨道环是纯 CSS。客户端 bundle 没执行、关键 chunk 没加载或没解析成功时，应用层 20 秒云端慢网错误屏不会发生，轨道会一直转，交给独立的首屏兜底脚本处理。

根 layout 里有一段与 bundle 无关的内联经典脚本。它只在同时满足这两条时换掉 `.app-loading-content`：页面上仍有 `.app-loading`，且 `<html data-hydrated>` 不是 `"1"`。时限是 25 秒，大于应用层 20 秒慢网阈值并留出余量，正常揭幕不会闪出这一屏。应用揭幕（`hydrated` 为真）后，现有首页装配 hook 写下 `data-hydrated="1"`。

出现时复用 `.app-loading-error` 的卡片，不新增第二套转圈、骨架或自动刷新。

| 位置 | 文案 |
| --- | --- |
| 标题 | 这个页面没能加载完 |
| 正文 | 网络中断或浏览器版本过旧都会这样。可以重新加载试一次；如果反复出现，请在 Safari 设置里清除本站数据，或把系统升级到 iOS 16.4 以上。 |
| 唯一动作 | 「重新加载」，只在点击时 `location.reload()` |

接口超时仍是原来的「暂时无法进入 Jyotisha / 连接云端服务超时」，不要把脚本没跑起来写成云端慢。

### 报告生成等待态

个人报告要写几分钟，属于"等到有实质进度可报"的一类，因此在上表三类之外单独规定：**只有准备阶段用 `InlineSpinner`，进入写作阶段后换成分章进度，不再转圈。**

三个阶段跟随 worker 自己的 phase 阶梯（`queued` / `loading_context` / `generating_report` → `section:<id>` → `persisting_report`）：

| 阶段 | 屏幕上 | 文案 |
| --- | --- | --- |
| 准备 | `InlineSpinner` | 正在准备你的星盘证据 |
| 写作 | 分章进度条 + 章节清单，无 spinner | 已完成 N / M 章 |
| 收尾 | `InlineSpinner` | 正在整理成文 |

硬规定：

- **进度条按章分格，一格一章，不画百分比。** job 的 percent 在 0→30 和 90→100 是瞬间跳变，只有中段跟随真实工作量；画成线性条等于演出后端没做的动作。格数恒等于章数，条与清单不可能互相矛盾。
- **不做时间插值，不显示预计剩余时间。** 界面上没有任何按定时器推进的东西；后端没动，屏幕就不动。章节耗时被重试放大到两倍以上，报不准比不报更伤。
- **正在写的那一章由行状态判定，不由 phase 名判定。** `section:<id>` 命名的是刚写完的那一章；且章节列表按 `section_id` 字典序返回，不是写作顺序，所以"已完成数 + 1"也会指错。唯一正确的判据是 `pending` 且已被认领。
- **停滞满 90 秒**（`REPORT_PROGRESS_STALL_MS`）当前章文案改为「用时较长，仍在写」。不写第几次尝试——`attemptCount` 不出服务端。
- **写作失败的章仍然计入完成数**，进度条照常前进；走到头不等于全部成功，收尾按 `summarizePersonalReportFailure()` 的白名单文案说明。
- 可显示的只有章节名与章节状态（用户交付物的结构）。`attemptCount`、原始错误码、lease、job id、payload 一律不出服务端——与 BUG-043 的边界一致：那条禁止的是把后台评分状态渲染成用户要管理的面板，本处是只读等待屏上的交付物结构。

Admin 的 antd `<Spin>` 是独立设计系统，不在此表。

## 10. 生时校正常驻时间轴

校正是最长的流程，唯一能表达「正在收敛」的量是范围宽度。它此前只以范围变化句的形式散在消息流里，滚上去就看不见。时间轴把这个量变成常驻形态。

**它是一条只读的横条，钉在校正对话上方，回答「我在哪、还有多宽」；「选哪一分钟」仍然只由交付卡回答。**

### 三条硬规定

**一、它是 `.rectification-workspace__chat` 的第一个 grid 行，不是 `position: sticky`。** 该容器现在是三行：`var(--rectification-timeline-height) minmax(0, 1fr) auto`。条位于滚动容器 `.conversation` **之外**，因此 `scrollHeight` 不变，`use-conversation-scroll-anchor` 的贴底距离仍然精确，它的 `ResizeObserver`（只观察滚动容器的直接子元素）也永远看不到这条。**该 hook 不因本组件改动一行**，校正面不得出现第二套滚动跟随。若改成滚动容器内的 sticky 子元素，还会撞上 BUG-218/252 的老问题：容器留了 `padding-bottom` 时，sticky 子元素被内容盒夹住，永远贴不到可视底边。

**二、条高固定，从首次渲染起就占位。** 这是正确性要求，不是视觉偏好：条在滚动容器外，高度一变就改 `clientHeight`，而没有任何观察者会因此重新跟随——贴底的读者会看着内容悄悄滑出视野底部且无法恢复。同理，Case 未就绪时渲染**等高的空骨架**（`data-state="pending"`），不得用 spinner、不得用「正在加载」文案、不得让条晚一步挂载。桌面 64px，767px 以下 56px；56px 等于既有的 `--rectification-jump-clearance`（44px 触控尺寸 + `space-3`），不新造常数。

读数和轴的水平内边距在桌面对齐助手列：`space-8 + --assistant-content-inset`，与 `.message-list` 沟槽和头像让位相同。**767px 以下只取 `space-4`，不加头像缩进**（BUG-918）：条不在消息列里，手机上对齐头像列买不到任何可见收益，而那 44px 每侧要吃掉 375px 里的 88px，读数因此被裁。底边发丝线和背景仍拉满聊天列，不把条做成第二条滚动容器。

**三、条上只有两个元素**：轴本体（区间带 + 候选标记 + 刻度）与一行读数。手机上读数四项、一行排完：

`05:07–05:09 · 3 分钟 · 代表分钟 05:08 · 已答 6 题`

**读数只增宽，不增高。** 条高仍是硬规定二的 64 / 56px，`.rectification-timeline__readout` 因此是 `flex-wrap: nowrap` + `white-space: nowrap`；真放不下时由条本身的 `overflow: hidden` 裁掉尾部，四项里「已答 N 题」排最后、最先被裁——它是背景信息，区间和代表分钟不是。

**一行是有宽度预算的，767px 以下必须按 375px 算，不是「应该放得下」。** BUG-918 的实证：13px 下四项 + 头像缩进已超 375px，第四项被自身 `text-overflow: ellipsis` 显示成「已…」。因此 compact 段（`@media (max-width: 767px)`，与 `.is-compact` 的 768px 断点同源）做三件事：`padding-inline` 去掉头像缩进、读数 `column-gap` 收到 `space-2`、`.rectification-timeline__dated` `display: none`。按逐字保守估宽，手机上四项 + 3×8px 间隙约 292px，375px 可用 343px、390px 可用 358px；320px 只余约 −4px，靠条自身 `overflow: hidden` 兜底。**再往条上加一项，先重算这笔预算，不是直接追加一个 span。** 组件永远无条件渲染全部 span，隐藏只在 CSS 里发生，轴的 `aria-label` 仍由全部标签拼成，读屏软件不因视口宽度丢内容。

**「已对照 N 件」在手机上不在可见行里，桌面上目前仍在——这是一处未裁决的口径冲突。** 下面的禁列表写明这一项归交付卡、不上条，而它后来（cfb41daf）被加到了条上且没有改本文件。BUG-918 只把它在手机上移出可见行；桌面是否也撤掉需要产品裁决，见 `docs/BUG_HISTORY.md` BUG-918。

**代表分钟只写在条上（2026-10-28，issue #146）。** 盘面标题行不再写时刻，「看盘面」按钮只写这三个字（读屏名称仍带时刻和上升）。下面 D10 那段里「条上与盘面标题行同一次调用」从此只剩条这一处。

**代表分钟上条是 D10（2026-09-16）的产品决定，推翻了「条上只有区间」的原设计。** 理由是窄屏：`.is-compact` 下右栏盘面整体变成默认关闭的 overlay，代表分钟此前只在 `.rectification-board__clock` 出现，于是用户最该一直看着的那个数字恰恰看不见。条上的取值必须与盘面标题行**同一次调用**——`workingRectificationTime(result)`，由 `rectification-chat-view.ts` 的 `deriveRectificationChatView` 算一次（容器 `rectification-agentic-chat.tsx` 每次渲染调用它一次；2026-09-26 代码拆分只搬位置）、两处共用，不允许第二条推导路径。已采用时写「已采用 HH:MM」，否则写「代表分钟 HH:MM」；**采用不是确认**，完整边界句仍只在交付 / 采用旁白里出现一次，条上不写、也不得暗示某一分钟已确认。

**条上不得出现收窄进度（「已从 30 分钟收到 7 分钟」）。** 开场窗口确实在线上，但没有任何投影把这个对比作为字段给出，而 VOICE.md 第 2 条要求进度数字来自服务端。前端自己减还会算错：轴是**当前**窗口且会放宽（BUG-572），相减会把一次放宽报成进度。这句话继续由服务端拼进旁白。缺的字段见 `BLOCKED.md`。

以下一律不得加回来——每一条都是被明确砍掉的：

| 不得出现 | 理由 |
| --- | --- |
| 范围变化句 | 服务端已写进落库助手消息，BUG-588 防复发要求它在那里；条上再写=同句同屏两次 |
| 收窄进度（「已从 N 分钟收到 M 分钟」） | 无服务端字段；前端相减会把放宽报成收窄。见上 |
| 「仍在范围内 N / 已排除 N」计数与图例 | 实心=在内、空心=已排除，答完第一题即自明；图例是过度提示的典型形态 |
| 阶段标签（时段 / 分钟） | `block_scan` / `minute` 是后台词汇，贴近 BUG-043 红线 |
| 「已对照 N 件经历」 | 仍归交付卡；卡上是人话「N 件里 M 件对得上」。它和条上的「已答 N 题」不是同一个量：后者是服务端 `inference_state.answered_probe_count`，问了几道答了几道，不是经历吻合数 |
| 「时间轴只读」注脚 | 在解释一个不存在的东西；没有元素看起来可点，就不需要声明不可点 |
| 预计剩余时间、定时器插值动画 | 与报告进度条同一条原则：不得演出后端没做的动作 |

**条上每个数字都必须是服务端投影里已有的字段。** 区间来自 `credible_range`，代表分钟来自上面那一次调用，已答题数来自 `answered_probe_count`；投影没给计数就整项不显示，不得补一个 `已答 0 题`。

### 轴与标记

- **轴 = 当前搜索窗口（`candidate_range`），不是开场窗口。** 开场窗口不是定值（±15 / ±30 / ±60 / ±120 / 整天），且放宽会顶穿它（BUG-572：±15 → ±30 → ±60 → ±120）。窗口变化时轴重新对到新窗口，区间带与标记用 CSS transition 过渡到新位置（`prefers-reduced-motion` 由全局 `*` 规则收成一帧）。窗口不变时轴稳定，收窄照样读得出来。
- **候选标记一律等大，只分在范围内 / 已排除。** 不得按 `relativeSupport` / `probability_percent` 分级（尺寸、深浅、粗细都不行）：BUG-560 状态是 blocked，候选间相对支持度 7–9 分（满分 100），校准显示分钟级几乎无区分力，分级显示等于用视觉编码放大统计上不显著的差异。被排除的点留在原地变空心、不消失——用户由此看见自己刚才那一答排掉了哪几分钟。
- **时段阶段（`block_scan`）不画分钟点**，区间带覆盖整个窗口。那一刻确实什么都还没排除，写「24 小时」是事实而非占位。
- 新日期契约按实际日期与相对序号排列；`late_night` 未知/跳过是同一申报日凌晨与深夜两段，不能因末端钟点较小就展开为次日，亦不能填平白昼间隙。历史仅钟点契约保持只读旧呈现，不猜补或重标日期。
- 条上不得出现 `rectification-step-state` 类名（BUG-575 防复发）。

## 10b. 训练门开后的校正面（2026-09-29，BUG-1084～1087）

- 训练门开后，校正面只出点选卡；定向七条线、跳过线重问、引导窗口题都不再出现，点选卡问完就出区间交付卡。开关在 `collection-question-pool.ts` 的 `COLLECT_AFTER_TRAINING_GATE`（当前 `false`）。
- 右栏「当前盘面」下的阶段句按 `precision_stage.current` 取前端文案（`PRECISION_STAGE_BOARD_COPY`），不带「可再补一件」；`collect_events`（门前）仍用引擎句。
- 输入框占位：默认「回答上面的问题，或直接问我…」；交付后（`questionGap === "delivered"`）「对结果有疑问，直接问就行…」；门前采集等待仍是「再说一件带年月的事」。
- 步骤条交付态的「下一步」写「看当前范围，对不上可以改选」。
- 交付轮不带任何采集题；交付气泡三句见 VOICE。
- 点选后旁白：剩余区间里少了一段（首尾不变或分成多段）时写「已记录，排除了 HH:MM–HH:MM。」，不写「范围没变」。

## 11. 区间交付卡

**卡头与按钮（2026-10-28，issue #147，产品同意 https://git.copse.top/root/Jyotisha/issues/147#issuecomment-36056 四条）。** 下文 D3、D4 与「更像这个」按以下改：

- 区分得开（D4：前两列差 ≥ 5 个百分点）且有代表分钟时，卡头是 `.rectification-result-lead`：小字「最可能的出生时间」、30px 衬线时刻、「上升X」（有该分钟的宫位表才写）；「目前范围 …（对照了 N 件经历）」降为下一行 `.rectification-range-delivery__range-line`。区分不开时 D3 原样：范围是 `<strong>` 卡头，加「区分不开」那句，不写最可能。
- 区分得开时最可能那列排第一，按钮是实心「采用 HH:MM 并打开星盘」，采用成功（服务端已保存）后去 `/chart`；其余列在小字「还不能排除」下面，按钮是描边「改用这个」，采用后不跳转。区分不开时每列仍是「更像这个」。出生记录冲突时一律「改用校正结果」，不跳转。
- 不显示把握（低 / 中 / 高）：引擎的这一档没有校准，BUG-560 同理。
- 可以采用时，卡上多一个文字按钮「我说错了，改一条」，展开用户确认过的事件（与对话里的复述同一说法），点一条只在输入框里写好「我说错了：「…」应该是」，由用户补完发出，现有改记录工具来改；不自动发送、不另扣点。没有确认过的事件就不出这个按钮。不放「再补一件事」：训练门后补打字经历几乎缩不了范围，卡上不得邀请再补（BUG-1084，issue #148 产品 2026-10-28 定）。
- 盘型交付卡（「用哪张盘解读」）不加时刻卡头（BUG-1151：盘型产品不排分钟），按钮文案不变；平常采用后同样去 `/chart`，也有上面那一行。

交付对象是区间里并排的候选分钟，不是支持度数字，也不是逐行空差异。

**相同的句子只写一次。** 两列或三列共有的 D9 / D10 / 月宿性格句提到卡片顶部（「三个时间的事业盘都在巨蟹座：做事以照顾人为主」）。列内只留有差别的句子；某列没有差别句就不显示性格块，不写「同上」。单列不提升共享句。

**卡头以范围为主（D3，2026-09-26；2026-10-16 起按活着的段显示）。** 主标题仍是「目前范围 …（对照了 N 件经历）」（`<strong>`，`--type-title-sm`）。范围不再把同一声明窗口里已经空出来的间隔涂成一整段：只画出还活着的簇，相邻空档不超过 4 分钟的并成一段；超过三段时只写最前面的三段，再写「等 N 段，共约 X 分钟」。没有簇区间的旧结果仍用原来的首尾。2026-10-17 起，分段不在卡片上用四舍五入后的分数重算：写盘时按原始分数决定谁还在，区间随结果保存；旧结果没有这份区间时，标题仍用原来的首尾。某个还在范围内的候选缺少区间时，整张卡退回首尾，不把缺数据的那一段藏起来。紧跟一行副标题「最可能 HH:MM」（`.rectification-range-delivery__most-likely`，`--type-body-md`、次级墨色、等宽数字），取 `range_delivery.representative_time`。副标题只是代表分钟的人话，不是确认，也不承诺定到分钟；卡底代表分钟边界句照旧。各列不写百分比（第一名领先不足 5 个百分点）时副标题也不出，免得「最可能」与「区分不开」并排自相矛盾。

**百分比只在差距明显时出现（D4，2026-09-26）。** 前两列「相对可能性」相差 ≥ 5 个百分点（`RANGE_DELIVERY_PERCENT_MIN_GAP`）时每列照旧写「相对可能性 N%」；否则三列都不写数字，卡上（共享性格句之上）一句「这几个时刻按现在的方法区分不开。」（2026-09-29 起不再邀请补经历，BUG-1084）（`.rectification-range-delivery__indistinct`，`--type-body-md`、正文墨色）。只有一列时没有第二名可比，不写数字也不写这句。排序、列数、性格 / 经历 / 未来窗三行不变。理由：每件事约 11.5 分是窗口内恒定项、约 2.1 分随分钟变，比例分数天然挤在一起（26% / 26% / 20%），差距不明显的数字只会被读成「分出了高下」。

每列 = 时间 + （差距 ≥ 5 时）相对可能性 + 至多三行 + 「更像这个」。列内不再有 `<h3>`。经历对照由服务端拼成一行：「8 件经历里 7 件对得上，最不合的是 2024 年 5 月那段感情」。未来窗一行：「下一个值得留意的时段：2027 年 3 月前后（事业）」；算过但没有窗写「未来一年没有明显的时段」；`by_time` 缺键写灰字「这一分钟还没对照」，不得回退成 `0 · 0 · 0` 或把「没算」说成「没有窗」。用户可见文案不得出现「强相关 / 有关联 / 弱关联」。

卡顶保留范围与经历数；卡底边界句保留；「查看验证报告」默认收起。不预标「排盘用」。卡上没有「再答两道参考题」入口。风格参考题只在出卡前收集，出卡即结算。`tie_break_available` 仍由服务端决定要不要先问，不再驱动任何按钮。点「更像这个」走现有 accept RPC。采用过程中整张卡留在原处；已采用列按钮禁用。有活题时「更像这个」置灰。收尾句跟卡片同一列。

**出生记录与范围冲突时换措辞，不换形状。** 医院记录的那一分钟落在目前范围外时（`record_conflict`），来源小字写满三层：默认仍按记录排盘、经历指向另一段时间差 N 分钟、两条路都可以走；每列按钮从「更像这个」改成「改用校正结果」，按钮下方补一行同为 `--type-caption` 的灰字「选它之后，排盘会从出生记录时间 hh:mm 换成 hh:mm」（`.rectification-range-delivery__switch-note`，与来源小字同字号同行高）。不新增按钮、不加确认弹窗、不改列数与间距；记录落在范围内或来源是「大概时间 / 时间段」时，卡片与今天完全一致。已采用的那一列不再显示这行小字。

引擎 `event_dasha_ledger_by_time` / `prospective_windows_by_time` 的键是引擎 `candidate_times` 去重全集（上限 64），不是引擎分数前三。卡片仍只投影后验前三。若上一轮 64 分钟对照超过 3 秒，下一轮可以把推断层仍有效的分钟作为 `column_times` 传入。

## 12. 校正右栏盘面

**默认关着（2026-10-28，issue #146）。** 所有宽度上，头部都有「看盘面」按钮（`.rectification-board-peek`），盘面默认不出。桌面点开后在右侧分出一栏（`minmax(18rem, 22.5rem)`，没有候选时 16–18rem），280ms 从右淡入，标题行右侧是关闭按钮；手机仍是底部抽屉。标题行不写时刻。

右栏回答「当前按哪一分钟在看盘」，不回答「选哪一分钟」。顶部不加任何新说明文字。

**本命宫位改北印星盘。** 用 `VedicChartSvg` 渲染代表分钟的 `house_table`。宫位表退到星盘下方的 `<details>`（读屏与复制仍可用）。换分钟时只高亮变化的宫（`changedHouses` / `lagnaChanged`），不做动画。星盘组件在校正面 `dynamic()` 分包里，不进首页首屏。

**盘里只放彩色行星符号（2026-09-18）。** 此前宫内画的是「水 19°」「罗逆 29°」这类显示文本，一宫三颗星就叠成三行、字号被压到 8。现在宫内只画符号，度数 / 星宿 / 逆行下沉到星盘页的行星表（§15）。星盘页、校正右栏、我的报告三处共用同一个 `VedicChartSvg`，所以三处同时生效；行星表只在星盘页。

| 元素 | 画法 |
| --- | --- |
| 行星 | ☉ 日 · ☽ 月 · ☿ 水 · ♀ 金 · ♂ 火 · ♃ 木 · ♄ 土 · ☊ 罗 · ☋ 计，每颗一个颜色 |
| 排布 | 一宫内横排，每行最多 3 个，第 4 颗起第二行；`MAX_RENDERED_OCCUPANTS` 仍是 6，第 7 颗起收成 `+N` |
| 逆行 | 符号正下方一道同色短横线，不再写「逆」字 |
| 上升 | 第 1 宫加一个上升色粗体小标 `As`。北印度盘第 1 宫恒为上升宫，这个标记来自几何不来自数据，也不占 `+N` 名额 |
| 图例 | 盘下方两行：九个符号各跟一个汉字，末尾「横线=逆行」。只在盘里有星时出现，出现时 viewBox 高度从 400 变 452 |

颜色 token 在 `globals.css` 的 `:root` 与两个深色块各定义一份，**只用于认星，不表示吉凶**——罗计共用一个中性灰正是这个意思：

`--color-planet-sun` / `-moon` / `-mars` / `-mercury` / `-jupiter` / `-venus` / `-saturn` / `-node` / `-ascendant`。

颜色挂在 `is-sun`…`is-node` / `is-ascendant` 修饰类上，不用行内 `style`——报告文档的标记合同禁止渲染结果里出现 `style=`，星盘不做例外。

符号字体是 vendored 的 9 字形 Noto Sans Symbols 子集（OFL，1.5 KB，`src/app/fonts/NotoSansSymbols-planets.woff2`，来源写在 `SOURCE.txt`），经 `next/font/local` 挂成 `--font-planet-glyphs`；字体栈是 `var(--font-planet-glyphs), "Apple Symbols", "Segoe UI Symbol", "Noto Sans Symbols", serif`。构建镜像不能联网，所以必须自带，和 Inter 同一条理由。♀ ♂ 后面跟 U+FE0E，否则 iOS 会画成表情。

`aria-label` 与宫位 `<details>` 表仍读 `occupants` 显示字符串，读屏拿到的还是「水 19°」这种完整信息；符号只改看的那一层。

**折叠块只有两段（D10，2026-09-16）。** 此前盘面从上到下并排五个 `<details className="technique-audit">`，一屏扫下去全是折叠头，看不出哪个该点。现在收敛成两段，星盘本身不折叠：

| 段 | 装什么 |
| --- | --- |
| **候选分钟** · N 个时刻 | 「换升时刻」（段内组标题 + 逐分钟 LayerChips 列表）、「次级候选」子折叠（原「显示层」） |
| **参数与口径** | 「本命宫位表」、「唯一分钟确认门」、「本轮技法」、「两段本命上升」、「经历与大运对照」（含双轨一致性那句）、「交界节奏」 |

**这是换归属，不是删内容。** 六块一条不少，每块保留自己原来的渲染条件——确认门与技法表仍跟着 `table` 走，此前没有星盘时它们本来就不出现，现在也一样。所有引擎串仍逐一经过 `engineMeaningToDisplayCopy()`。逐分钟行的 `is-changed` / `is-working` / 「当前时间」 / 「已更新」标记一律不变。

两段都默认收起，且都是真 `<summary>`——嵌套多了一层，键盘可达性因此只能靠 `<summary>` 保证，不得把任何一块改成挂 `onClick` 的 `div`。盘面内 `.technique-audit` 的分隔线仍是全局关掉的，段内节奏由 `.rectification-board .technique-audit > *` 的 `margin-top` 给。

## 13. 回答的两层可见性

本命类聊天回答默认只展开口语层。从第一个 ATX H2（合同上是 `## 统一参数与原始结构`，切点按任意 H2，以便模型漂移时仍能折）起的全部章节装进 `<details className="answer-detail">`，默认收起。骨架仍完整生成、入库、可复制、可导出；折叠只改默认可见性。

- **口语层：** 第一个 H2 之前的全部内容，直接画在 `.message-markdown`。无 H2 的闲聊和 onboarding 打字机消息整篇留在这一层，不出现折叠块。
- **折叠层：** `<summary>` 主标「完整分析」；副标用 `<small>` 写章节名，取 `headings` 前三个（`统一参数与原始结构` 写成「统一参数」，`技法审计表` 写成「技法审计」），多于三个补「等 N 节」。不要只写「展开」。
- **技法审计：** 正文里已经有审计表时不另折一份；只有事件行、正文没有表时，`TechniqueAuditDisclosure` 跟在折叠块内部。没有 H2 时仍留在回答底部原位。
- **流式：** 折叠块保持收起，不渲染 children，副标写「正在写…」。不得出现 spinner / 骨架 / 「正在加载」。流式结束后再解析报告 markdown。口语层在流式期间仍走 `StreamingMarkdown`。
- **个人报告页**走 `personal-report-markdown-view.tsx`，不经过本组件。
- **窄屏表格：** 三列表（技法审计）继续卡片化。四列及以上（Yoga、统一参数）在 `.conversation` 里横向滚动，右缘用 canvas 渐隐提示还可滑；`.conversation` 自身 `overflow-x: hidden`，页面不得出现横向滚动条。个人报告表格不走这套规则。
- **表单输入 16px：** 全局 `input` / `select` 用 `--type-body-md`（16px）。iOS Safari 对小于 16px 的字段聚焦时会整页放大且不缩回。`.otp-input` 仍是 20px，`.composer textarea` 仍是 16px。登录页的六位验证码是组件库 InputOTP，格子 `size-11`。恢复码仍用 `.otp-input`，并加 `h-11`。

### Chat body lists

Three product rules for assistant markdown in `.message-markdown` (BUG-962 / 963 / 964). Personal-report markdown (`personal-report-markdown-view`) is a different surface and is not restyled here.

- **Lists have markers.** `.message-markdown ul.markdown-list` is `list-style-type: disc`; `ol.markdown-list` is `decimal`. `::marker` uses `--color-ink-secondary`, not ink. Tailwind v4 preflight zeros `ul, ol { list-style }`; this surface must restore it. Keep `display: grid` — markers render with grid.
- **Prose is not auto-promoted to lists.** `promoteDefinitionLists` still lifts consecutive short `term：body` blocks (BUG-356: parallel transit / advice items). A block promotes only when every one of these holds, and still only for ≥2 consecutive blocks: the term has no sentence-end punctuation (`。！？；!?;`) and no newlines; the body is a single sentence (no sentence-end, or exactly one at the end); the body is ≤ 40 characters; fences and existing lists are skipped. Spoken four-heading prose with a colon inside a long paragraph stays paragraphs.
- **Thinking-bar-to-body spacing is one token.** `--consult-think-answer-gap` (`var(--space-3)` = 12px) is the gap on both `.consultation-thinking-report` and `.message-stage-and-answer`. In conversation scope, `.message-markdown > *:first-child { margin-top: 0 }` so an opening `h2` does not add `--space-8` on top of that gap. Conversation `.markdown-list` item gap is `--space-2` (8px).

## 14. 断点

宽度切点只允许出现在 `globals.css` 顶部注释的白名单里。壳层切点以 `sidebarViewportForWidth` 为准：小于 768 移动，小于 1024 平板，否则桌面。组件级栅格（会员方案卡、校正候选）用 640/641。校正独立问题块（`.rectification-message-question.is-standalone`）与助手正文共用 `--assistant-content-inset`。报告目录在 860 塌成抽屉，因为那是第三栏的内容宽度，不是设备宽度。

禁止再引入 900 / 720 / 760 / 639 / 620 / 430 这类与壳层或彼此错位的切点。新切点必须先改白名单和 `viewport-breakpoint-contract.test.ts`。

## 15. 只读星盘页

### 一页铺开与点选联动（2026-10-27，issue #114，推翻下文的四页签结构）

产品 2026-10-27 拍板（issue #114 Q1–Q9）：配色仍用本站的（Q1 B），只学竞品的圆角白卡；一页铺开（Q2 A）；南北印度都做、默认北印度（Q3）；西洋盘保留（Q4）；数字照给并在旁边写「强 / 中 / 弱」（Q5）；未满足的瑜伽收起（Q6）；「问 AI」只填输入框（Q7）；对话一进来右栏就有盘、右栏可拖宽（Q8 A）；时运流年的观测日期任意（Q9）。下文「四个 Tab」「行星表在盘下」「盘里只放彩色行星符号」三条对星盘页不再成立，报告与校正右栏仍用 `VedicChartSvg` 不变。

- **页头**（10-27 第五轮按原型）：顶栏出生资料一行不变；正文第一行左边「名字 · 本命盘」（宋体 20px），右边「印度盘 / 西洋盘」分段 `Tabs`、「生成报告」（描边，去 `/reports`）、「带这张盘去对话」（实心，去 `/`，对话右栏默认开着本命盘）。西洋盘页原样保留。印度盘之下一行四枚圆角小签：上升 / 月亮 / 太阳 / 当前大运，点了在盘上定位，再点取消。
- **两栏**（≥1024px，左约 53%、右约 47%；更窄时单列）：左列「盘」卡 + 「盘面检视」卡 + 当前盘型自己的表（D1 没有这张，九曜卡就是本命表）；右列「九曜」「宫位主题」「Vimshottari 大运」「命盘速览」四张卡。卡片白底（`--color-canvas`）、16px 圆角、一条发丝阴影，标题宋体 16px，不加红色竖条。
- **盘卡**（10-27 第五轮按原型改回，推翻第三轮）：标题「北印度盘 / 南印度盘」，右侧小字「宫位固定 / 星座固定 · 整宫制」。23 种盘型条。下面一行左边图层分段 `Tabs`「无图层 / 八宫点 / 宫力 / 叠加行运 / 虚星 / 特殊点 / 映射」（只在本命 D1，一次一个；虚星等三项是第二轮产品要的标点图层，并在同一组里），右边北印度 / 南印度。北印度盘上方浅底说明条：未选中时「本命盘 D1 / 上升 狮子 / 度数」，右端两枚小签「某星大运」「某星分运」；选中星时写「D1 · 选中 / 星名 / 星座度数 · 第 N 宫 · 实线＝它管的宫，虚线＝它看的宫」，选中宫写「…· 实线连到宫主所在」。南印度把同样内容写在盘中央。卡片内容网格列 `minmax(0, 1fr)`，手机上不撑宽。
- **盘面**（`ChartBoardSvg`，`components/chart-board/`）：星体画一字中文名（日月火水木金土罗计）+ 右上小号度数，逆行在度数后加「逆」（产品签过的原型，取代 2026-09-18 起的彩色符号；颜色仍按 `PLANET_COLOR_CLASS` 区分星体，不表示吉凶）。北印度宫内写星座名，上升宫写「升 天秤」并用 `--color-action`；南印度格内左上星座、右上宫号，上升格左上一道斜线。点星：所在宫 `--color-action-soft` 底 + 描边，它管的宫实线、它看的宫虚线（整宫计，火 4/7/8、木 5/7/9、土 3/10/7、罗计 5/7/9），连到的宫浅底，其余宫字淡到 .28。点宫：实线连宫主所在，虚线连看这一宫的星。
- **标点图层**（10-27 第二轮，产品选「做成图层」；第三轮并进图层那一排，不再与数值图层同时开）：虚星 / 特殊点 / 映射。每个点画成一枚小胶囊（`chart-board-mark`，主色描边、浅底，一到两个字：烟、古、宫升、AL、UL…），按字数量宽、间隔 3 排开（拉丁字母约 5.6、汉字约 9），一行最多三枚、多了换行；北印度两侧三角里竖排在星体旁边；选中的那枚实心。点胶囊 = 选中这个点：所在宫高亮，映射再用虚线连回它来自的宫；检视面板写名称、英文名、类别徽标、星座度数与宫、传统含义、月宿（映射没有）、所在座的主落哪一宫、映射的来历、同一座里的星，底部「问 AI：这个点」。方向键在同一组里切换。数据走懒层 `points`（`/api/chart_points`）。
- **图层**：八宫点在每宫写「N点」，28 及以上 `--color-action`，以下土星色；宫力写引擎宫力数，高于本盘十二宫均值一成偏暖、低一成偏冷（北印度把这个数接在星座名后面）；行运把观测日的行运星用土星色小字写在对应星座。图层下一行灰字说明参考线。
- **北印度格内位置**（10-27 第五轮按原型，BUG-1465 的约束仍在）：每一宫以多边形重心为中心。宫内先写「星座符号 星座名」（10px，三级色），下一行宫号（11px；上升宫写「上升 1」，主色加粗）；菱形写在重心上方 30，三角写在上方 14（无星时 2）。星体在下：菱形字号 20、三角 16（拥挤时 16 / 14），度数写在字右上，逆行加「 R」（罗计不写）。三处为不出框偏离原型：左右两侧三角星体竖排一列；上方两个三角星体下移到重心下 14，以免压住宫号；下方两个三角星座名写到星体下面；三角里同一行两颗星的间距 2.2 倍字号。星体按尊贵着色：入旺 / 本座 / 入庙绿（`--color-success`），落陷红（`--color-danger`），其余墨色；只在本命 D1。标点胶囊在星座名上方一排（上方两个三角在星体下方）。
- **盘面检视**：空时一句「点盘上的星或宫看详情」+「方向键切换 · Esc 收起」。选星：大字 + 名称 + 位置 + 尊贵 / 逆行 / 六力档徽标；分段写星座内位置（0–30° 细条，D1 画月宿分界刻度）、月宿与足、尊贵度（九格：落陷…入旺）、六力（鲁帕、达标百分比、强中弱、竖线是门槛）、视相、它管的宫、主管大运（当前那段实心）、此刻行运（观测日不是今天时写「当日行运」）。选宫：宫主与落宫、宫内星、看这一宫的星、宫力、八宫点。底部「问 AI：这颗星 / 这一宫」（只填输入框并跳到对话，toast「已填进对话输入框，确认后再发送」）和「在 D9 定位」。右上上一个 / 下一个 / 收起三个图标按钮。
- **强中弱**：六力按达标百分比，≥120% 强、90%～120% 中、<90% 弱；八宫点 ≥28 强、25～27 中、<25 弱；宫力按本盘均值 ±10%。徽标 `chart-band`：强 `--color-success-muted` 底、中灰、弱 `--color-danger-muted` 底。
- **九曜卡**：星体 / 星座 · 度 / 宫 / 月宿 · 足 / 六力 / 尊贵；点行 = 选星，选中行 `--color-action-soft`。**宫位主题**（第五轮按原型改回）：十二枚圆角小签「第 N 宫 · 主题」，有星的前面一个主色小圆点；卡头右侧「点一下，盘上对应的宫亮起」。**大运卡**：一排大运小卡，当前那张主色描边，下面换行排它的分运小签「星字 年.月」，当前分运主色描边浅底；卡头右侧「点一段，下面看分运」。**命盘速览**：两列六格左对齐、无分隔线，灵魂星写「本盘度数最高的星 · 星座 度数」；卡头右侧「点一项，在盘上定位」。九曜卡头右侧「恒星黄道 · 本命」，星名后逆行写「 R」。检视空态三行：「点盘上的星或宫看详情」「点了之后，盘上会连出它管的宫和它看的宫，右边表格同一行也会亮。」「方向键在九曜或十二宫间切换 · Esc 收起」，卡头右侧「点星体或宫位」。
- **深读**（`#chart-deep`）：四个分段页签「时运流年（带当前大运 · 分运字）/ 能量图谱 / 命性格局（带成立组数）/ 排盘底册」，默认时运流年。
  - 深读卡头右侧「时运 · 能量 · 格局 · 底册」。时运流年：观测日期（右侧提示「换日期，下面的运期、行运和盘上的行运图层一起变」；11.5rem 宽的日期框与「‹ 上月」「下月 ›」「‹ 上年」「下年 ›」（Lucide 箭头）和文字链「此刻」同一行，1000–2999 年任意日；全站 `input:not(...)` 规则会把输入框撑满整行，这里用更具体的选择器压住）；当前运期三层进度条（大运、分运、子运；子运用与分运同一个比例公式，`lib/dasha-span.ts`）；九曜行运表（星座、上升起、月亮起、该座八宫点 + 强中弱；表头右侧写土星七年半第几段或未激活）；「叠到盘面」；「人生长卷」三行等比条（大运一行下面有年份刻度，每 20 年一个）（大运 → 点开的分运 → 子运，当前段主色底、观测日一根竖线，620px 以下横滚）；最下面「第二条运法」只放 Chara / Yogini 一栏（`ChartDashaTab secondOnly`，最宽 640px）；Vimshottari 上面已经画过，不再重复一列手风琴。
  - 能量图谱：行星六力（总量条 + 竖线门槛 + 六段分量彩条，右侧百分比、强中弱、鲁帕）；宫位力量柱状图（均值虚线，点柱选宫）；八宫点矩阵（按宫位 / 按星座，原始 / 三角削减 / 两步削减，格子按点数深浅，末行合计）。各自「叠到盘面」。
  - 命性格局：只列与对话卡同一张闭合清单（五大人物、象狮、落陷取消、日水同宫）里成立的，引擎报了削弱的写「部分满足」；没成立的折叠在「未满足 N 条」里。点一条，切回 D1、盘上只留这几颗星的颜色。底部一句「传统格局，本站未验证，只作参考」。
  - 排盘底册：「出生资料与计算口径」三列键值（出生当地时间、出生时区、地点、岁差、宫制、交点口径）+ 边界句；「数据表」卡头右侧「数据来自本站引擎」，行星页分「行星名册 D1」「宫主流向 第 N 宫之主落在哪一宫」两段；出生历法（提毗、月宿、星期）；「数据表」六个分段页签（2026-10-27 第二轮，产品贴竞品五张表）：行星（名册含 D9 列 + 宫主流向）/ 虚星（11 个，烟毁晕虹彗 + 六个时段点）/ 特殊点（八个特殊上升 + 瑜伽点、阻碍点）/ 映射（AL、A2～A11、UL）/ 星力明细（总表、位置力、时间力、其余四力，维鲁帕）/ 敌友（天生 / 临时 / 综合，综合五档）。首列固定，其余横滑。点虚星、特殊点、映射的一行 = 在盘上选中这个点（切回 D1），再点取消；点行星或星力行 = 选星。八宫点不另开表，能量图谱的矩阵在原始口径下多一行「升」（上升自己的 BAV，不计入合计）；大运、瑜伽也不在数据表里重复（产品 10-27 同意）。
- **等待与失败**：揭幕后不出现骨架或「正在…」：盘型懒层沿用盘位骨架（BUG-1016 例外）；八宫点、行运、Chara 未到时那一块留空，失败时写原因句。
- **对话右栏**（`ChatNatalChart`）：标题「名字 · 本命盘」+「打开星盘页」，下面小签、盘卡、检视、九曜（不带六力列）。桌面默认打开（`chat_chart_panel_open` 没存过即为开），宽 320–760、默认 440，拖到最窄以下收起，宽度记在本机。手机顶栏多一个「看本命盘」图标按钮，从底部拉起同一套盘面（`Drawer`，86dvh），「问 AI」会先收起抽屉再聚焦输入框。样式在 `chart-board.css`，只随星盘页和右栏的懒加载块到达，不进首页首屏。


独立 route `/chart`，不进 `page.tsx`。外壳先画、主盘先到、其余 tab 按需。不扣点、不调模型。盘面从现有路径复用 `VedicChartSvg`，不搬家。

`/chart` 是静态壳：首字节不取决于引擎。进页只请求 `/api/chart`。分盘（`/api/varga_full`，D2–D60 一次取齐）、大运 Chara（`/api/dasha/chara`，点开大运 Tab 才请求）、Yogini（`/api/dasha`，缓存范围 `dasha:yogini`，只在右栏切到 Yogini 时请求）、西洋（`/api/western`）、Bhava（`/api/bhava_chalit`）、行运（按当天日期的 `/api/chart`）在用户点到对应 tab / 盘型 / 大运体系时才请求。月亮盘从已到的 D1 投影，不发请求。未点的不发请求。

**七政四余 2026-09-28 起不在星盘页展示**（TASK-chart-types D1）：Tab、组件、懒加载层与契约字段已删，后端 `/api/qizheng`、引擎与 vendor 保留，以后作对话里的补充。

### 结构

页名「星盘」与出生资料一行在 `SecondaryHeader` 的 46px 顶栏里（§ Secondary page shell）。出生资料下面可以多一句上升是否会换（`.chart-lagna-precheck`，caption、三级色，没有卡片和图标）。这一句在的时候，顶栏改成随内容增高，不再卡在 46px；没有这一句时顶栏仍是 46px。句中的「出生时间校正」是下划线链接，只出现在本人的星盘上，而且上升已经确定时没有链接。人物档案里别人的星盘只说上升会不会换，不放这个链接，也不写去做校正。顶栏之下第一件东西是 Tab 行。不写眉标，不写「打开即有」、不写「主盘直接算 · 分盘按需 · 不消耗点数」，也不承诺打开速度。等待外壳和失败页只有原因/等待句。这一句和星盘一起出现，不算出来就不占位置，不另做等待。

四个 Tab 按体系分：**星盘 / 基础信息 / 大运 / 西洋盘**，画成**一条下划线式 Tab 行**：无边框、无卡面，当前项 2px 下划线 + 主文字色，整行一条 1px 底线。行内 `flex-wrap: nowrap` 且自身横向滚动，所以 375px 下它仍是一行，不折行、不换成第二排——底线画在滚动容器自己的 border 上，不会跟着内容滚走。一排等重的药丸按钮会读成几个可按的东西，Tab 行读成「一个控件 + 一个当前位置」。2026-10-25 起这四个页签是组件库 `Tabs`，`variant="line"`。盘还没到时四个都不可选。

### 盘型条与「星盘类型」面板（2026-09-28，TASK-chart-types D2）

印度「星盘」Tab 内部是一条**盘型条**，共 23 种，顺序固定：本命、D9、月亮盘、Bhava、行运、D2–D8、D10、D11、D12、D16、D20、D24、D27、D30、D40、D45、D60。条上文字短：「本命 / D9 / 月亮 / Bhava / 行运 / D2 …」。2026-10-25 起这条是分段式 `Tabs`（灰底槽，选中的一格浮起亮底），放在横向 `ScrollArea` 里（`.chart-page-type-strip` 仍 `flex-wrap: nowrap`），375px 下一行、页面不横滚。不用描边的分段开关。西洋盘不做成盘型。

条尾固定一个菜单按钮（`.chart-page-type-menu`，44×44，`aria-label="全部盘型"`），在滚动容器外面，不会被滚走。点它打开底部「星盘类型」抽屉：标题 + 关闭，三列网格（`.chart-page-type-grid`），每格大字标签 + 一行小字用途（D 号盘的用途取引擎 `VargaType.meaning`，与 `vedic-chart-tables.json` 同源；本命「D1」、月亮盘「以月亮为第 1 宫」、Bhava「不等宫」、行运「今天」）。当前格主文字色描边 + 浅底。点任一格 = 选中、关面板、把条滚到该项。≥860px 抽屉变窄并四角圆角，仍从底部打开。Esc、点遮罩关闭。页签、盘型格、「全部盘型」、格子触摸目标均 ≥ 44px（格子 64px）。

抽屉头部是一行：标题在左、关闭在右（`flex-direction: row`；SheetHeader 默认竖排，曾把两者上下堆着居中，BUG-1470）。格子区在抽屉内滚动（`min-height: 0`）。

D40 / D45 / D60 的表格上方，出生时间不是「已校正」时多一句：「这张盘每格不到一度，出生时间差两三分钟就可能换一格。先做生时校正再看，会更稳。」

侧栏在「新建对话」之后、「我的报告」之前加「星盘」「星历」两个入口；折叠轨（64px）仍用既有 `report-nav-button` 图标行，当前项用白玻璃面 + 2px 深棕标记，不新造选中态。星历入口指向 `/ephemeris`（由另一单交付，合入前 404 是预期）。

### 排盘参数表

参数是**一张键值表**（`.chart-page-params-table`），七行：出生时间（含校正状态）、出生地（含经纬）、岁差、交点、上升、月宿、当前大运。2026-09-29 产品决定移除引擎品牌行及专用展示投影；内部计算来源和许可证保留，不以别的品牌词替代。左列标签 caption 字号三级色，右列值主文字色。表下方紧跟 `view.vedic.boundary` 那一句准确性边界句——边界句限定的就是这张表，两者不能分开。

**不再按断点复制参数。** 原本同一组参数有三种画法：中宫叠一张 `.chart-page-center-card`（手机两行、桌面六行），盘下方再来一张 `.chart-page-params-below` 重复那六行，由 media query 三选一。同样的事实画三遍、靠断点开关，改一处要改三处。键值表让每个字段只出现一次，`.chart-page-center-card` / `-compact` / `-extra` / `.chart-page-params-below` / `.chart-page-boundary-desktop` 五个类连同它们的 767/768 开关块一并删除，由 `chart-page-view.test.tsx` 守着不许回来。

桌面（≥1024）盘面与参数表左右并排，放在可拖分栏里，默认约 58% / 42%，最窄约 32% / 24%，宽度不记到本机。分栏在盘面这一块载入后再出现；更窄、或分栏还没到时，盘在上、参数在下。行星表仍是跨两列的整行——它的列宽需要完整版心。表格区由 `VedicLayout` 的整行容器承载，不靠表格自身类名跨栏。2026-09-29 起桌面印度盘宽 440px；当晚（BUG-1100，产品「框太丑」）上限从绘图区移到外框 `.chart-page-vedic-stage`（440px + 两侧 `--space-3` 内边距 + 边框），外框贴合星图，不再是一张宽卡片中间放一张窄盘；手机端外框不设上限；西洋桌面绘图区上限 480px。低于此断点的结果盘不收紧，参数区和表格不缩。等待盘与结果盘复用同一桌面列宽与绘图容器，不再使用独立 400px 等待盘上限；印度等待绘图容器以 400/452 比例预留结果图例带，内部空 SVG 仍为 400×400，避免揭幕时外框和说明区纵向跳动，不改共享绘图。只有盘位动（2026-09-30 起为宫位依次点亮，不再整张呼吸），失败后退出，参数表不新增骨架。

**符号说明（2026-09-29；当晚改为气泡，BUG-1101）。** `/chart` 开启共享 SVG 的可选交互模式：说明是标记旁的小气泡（`.chart-symbol-bubble`，最宽 220px，`--color-canvas` 底 + 细边 + `--shadow-elevated`），默认在标记上方 8px，离外框顶不足 48px 时翻到下方，左右被夹在外框内；气泡不接收指针，不会挡住旁边的标记。电脑：鼠标悬停出现、移开消失，点击与键盘聚焦同样出现。手机：轻点标记出现，触摸产生的离开事件不关它，点盘外任意处或 3 秒后自动消失。盘下不再有「停在或轻点……」提示行和说明行；读屏器仍从一个隐藏的 `role="status"` 读到同一句话；Esc、离开、失焦可关闭，切盘/人物/数据身份变化清理旧说明。行星与其逆行短线共用一个目标；西洋 caption 和命中圆用一致的行星解析，原点击过滤相位及再次点击取消保留。报告、校正、静态导出默认不启用该模式；纯绘图层不持有 hooks，静态 SVG 白名单不扩。

盘内 SVG 文字用 CSS 提到 16px viewBox 单位，使约 318px 盘宽下实际像素不低于 12px。页签和盘型格均 44px。星盘的线、宫和符号仍是原来的手绘，不换成组件库的图。

**换盘和换人（2026-10-25）。** 同一人换盘型时，星体从旧宫位移到新宫位，约 0.44 秒，停在和新盘直接画出来相同的位置。换人时格线重画约 0.8 秒，星体不飞。减少动态效果时不做位移，格线只淡入。第一次打开那一次的画线、西洋盘和大运条进场仍只走一遍，换盘或换人不重播。

### 星盘档案与当前人物（2026-09-25修复）

标题旁的人物切换仍是当前阅读/对话上下文，不替换户主资料，也不是「设为默认」。上次选择可同步预读，但账户与服务端目录绑定完成前，星盘、星历、报告和新建对话不发默认本人的首屏请求；目录暂时失败应可恢复，不假登出，不先闪别人的内容。档案增删改后切换器重新取目录；同一人物不重复广播切换。会话列表更新合并metadata，保留已加载消息、深链与分页外对话；可见列表仅属于当前人物，换账户不保留旧数据。

档案数量仍本人加最多十九个他人（一共 20 人），本人不可删除。别人的档案可以标明和户主的关系（伴侣、孩子、父母、朋友、其他）；没填过的显示「其他」，本人不记这一项，仍只标「本人」。表单添加/编辑标题必须与操作一致。删除确认只显示服务端成功取得的对话/报告数；查询失败时显示「暂时查不到这个人的对话数量，稍后再试」，禁用确认，不能显示0冒充已知。服务端成功后才移除档案并刷新目录；删除当前人物才回到本人。删除未交付报告释放预留点数，已交付/已结算不退，不用客户端猜测退款结果。

「和TA对话」新会话绑定选中的人物；「和我合盘」中的我保持本人，新会话显式绑定本人但不改变全局选择。普通新建深链用已绑定的当前人物。今日星语的可用性与缓存指纹取当前人物，不能由户主是否有分钟压掉他人的卡片。星历暖进只复用同账户/同人物缓存，首次失败仍显示可重试的静态错误句，不新增spinner、骨架或「正在加载」。跨scope迟到响应不得覆盖当前视图或分页游标。

上述为实现约束；登录页面、窄屏和慢网交互仍按真人清单待验，不以组件探针代替。

### 星盘档案页布局（2026-09-26，BUG-1039）

`/people` 上一轮只有类名、没有一条样式。布局按原型定稿，断点只用星盘页已有的 1024：

- **小于 1024px：列表 → 详情。** 同一路由里用 `.people-archive[data-view]` 切换，只显示一栏。点人时压一条 `?person=<id>` 历史记录，浏览器返回和详情顶部的「返回」走同一条路回到列表；刷新详情地址直接打开那个人。桌面点人不压历史。
- **1024px 及以上：两栏。** 左列表（18–22rem），右详情；「返回」隐藏。右栏正在看的那一行用中性浅底（`is-open`），强调色只给当前人物。
- **人物卡**（2026-10-25，`.people-archive-row`，最小 64px）：网格按宽度换行，每张至少 220px。左栏只有 18–22rem，桌面上通常排成一列；手机上的列表最宽 640px，宽一点会排成两列。40px 圆形首字头像（本人写「我」）+ 名字（本人后跟灰底「本人」标签；别人后跟同一枚标签，写关系，没填过写「其他」）+ 一行等宽 `tabular-nums` 的「出生日期 · 排盘时间 · 城市」+ 行尾箭头。资料不完整时这一行写「这份资料还不完整」。右上角是更多：编辑，别人还有删除。点卡片其余地方打开详情。本人始终是第一张，不在可拖的那一组里。其他人用拖动手柄排序，顺序写进 `chart_profiles.archive_order`；没排过的按最近更新排在已排过的后面。只改顺序不改更新时间。**当前人物**（`is-current`，与顶栏「当前星盘」同一个人）是 `--color-action-strong` 描边 + `--color-action-soft` 底。
- **添加**：虚线卡片「添加一个人」（48px，`--color-border-strong` 虚线，文字 `--color-action`），下面小字「还可以保存 N 个人」，N 仍是 `MAX_SAVED_SUBJECTS - 人数`；到顶时换成「最多保存 20 个人的星盘」。到顶的卡片仍可点，用来弹出原来的限额提示，不真的禁用。
- **人多时的滚动**（2026-10-17）：`.people-archive-rows` 限高 `min(70vh, 640px)`，只在列表内部纵向滚动。标题旁和聊天里的人物菜单（`.chat-profile-picker-options`）限高 `min(50vh, 320px)`，同样只纵向滚动，名单放到 20 人也不把弹层撑出屏幕。两处都 `overflow-x: hidden`。
- **详情卡**：头部 48px 头像 + 名字（别人的名字后跟关系标签，没填过写「其他」；本人的标题仍只有名字）+「本人 · 出生地」（他人只写出生地）；两格时间卡「填报时间」「排盘时间」，等宽大号数字。只有采用或确认了**校正结果**（状态 accepted / confirmed **且**有校正案例）时，排盘卡换成 `--color-success` 描边 + `--color-success-muted` 底，标签写「排盘时间 · 已校正」——旧资料读回时的 `confirmed` 兜底不算。下面是出生日期、岁差（显示「Raman（默认）」这类设置里的名字，不露小写键）与性别（「女」「男」，没填写「未填」），再下面三个等宽快捷入口「和 TA 对话 / 看星盘 / 生成报告」（图标用侧栏同款 lucide）。他人另有「和我合盘」；本人出生资料还不完整时，这个位置改成一句「加上你自己后可合盘」，不能点。每个人底部都有「编辑」，本人在它上面加一行灰字「本人不能删除」。**本人的编辑视图（2026-09-28，BUG-1081）**与他人同一张表（称呼、出生资料、岁差、性别），标题「编辑我的资料」、说明「称呼和出生资料。」，没有删除区；保存走账户资料接口，保存后首页、星盘、星历按新资料重读。他人已经保存过出生时间时，编辑表单锁住这一项，旁边只留「填报的出生时间保存后不能再改」，说明里不再重复。保存他人成功后清掉星盘页和星历页缓存（BUG-1411），再打开仍是刚保存的资料。
- **编辑表单里的关系**（2026-10-25）：只在编辑或添加别人时出现，放在出生地点之后、性别之前。标题「TA 是你的」，五个选项：伴侣、孩子、父母、朋友、其他。同一排标签，不是页签，尺寸沿用原来的 44px，不新造颜色。没点过就保持空，页面上仍显示「其他」；点了才写入，再点当前显示的「其他」也会写入。本人的编辑表单没有这一项。
- **编辑表单里的性别（选填）**（2026-09-27；2026-10-25 改成同一排标签）：放在关系之后、岁差之前（女 / 男 / 不填，44px，一行说明），随「保存」一起提交；选「不填」存为空。再点已经选中的一项不会改值。自 2026-09-30（BUG-1119）起这是设置性别的唯一入口，个人资料里不再有。
- **删除**（2026-10-25）：编辑视图底部仍是「删除这个人」。确认是对话框，按钮「取消 / 删除」。用量计数、查询失败句和删人之后合盘、报告怎么处理，全部沿用。菜单里的字是「删除」。
- **头像颜色**：本人用 `--color-action-strong` + `--color-on-dark`（同账户首字圆）；其他人按 id 稳定地取四个元素色 `--color-element-fire / earth / air / water` 之一，字用 `--color-ink`。不新造色值。

### 行星表

每一张 `.chart-page-planet-table`（本命、分盘、月亮盘、Bhava 两张、行运、西洋相位）都包在 `.chart-page-planet-table-wrap` 里：`min-width: 0` + `overflow-x: auto`。375px 下表格在自己的盒子里横滚，页面不横滚。`min-width: 0` 和 overflow 一样是必需的——grid item 默认按内容定宽，少了它表格会把页面撑宽而不是滚动。外层 `.secondary-page` 的单列同理是 `minmax(0, 1fr)`（BUG-1083），否则撑宽发生在更外面一层。印度盘那张从四列扩到八列后 `min-width` 由 `26rem` 提到 `34rem`。

**圆角（2026-09-30）。** 行星表和西洋表与上方盘面外框同一语言：表格 1px `--color-border` 边框 + `--radius-lg` 圆角，`border-collapse: separate`（collapse 下圆角不生效），四个角单元格各自圆角；换宫 / 选中 / 悬停的底色落在单元格上而不是行上，这样角上的格子也能跟着圆。表题（caption）在边框外。

**印度盘行星表的八列（2026-09-18）。** 盘里不再写的东西全部落在这里：

| 列 | 内容 |
| --- | --- |
| 行星 | 上色符号 + 中文名 + 灰色缩写（Su/Mo/Ma/Me/Ju/Ve/Sa/Ra/Ke，上升 As） |
| 黄道经度 | 星座 + 度°分′。不四舍五入到整度——29°59′ 与 0°01′ 差一个星座 |
| 速度 | 顺 / 逆 |
| 宫位 | N 宫 |
| 星宿 | 引擎返回的星宿名。**没有中文宿名表就不造一个**：印度 27 宿与中国二十八宿不是同一套，硬对上去是编事实 |
| 宿主 | 星宿主的上色符号，居中 |
| pada | 1–4，居中 |
| 状态 | 尊贵 / 庙旺等。有字的用同一种徽标：落陷、敌是强调色，其余是次要色。没有状态写「—」，不画徽标 |

第一行是上升。星宿 / 宿主 / pada 用引擎按上升经度算出的值，和九曜同一个算法（2026-10-03，BUG-1201；之前引擎漏算，这三格一直是「—」）；旧缓存里没有这三项时仍写「—」，页面不自己推算。上升没有尊贵，状态格写「—」（2026-10-25，不再用「/」；2026-10-21 曾用「/」推翻「不适用」）。这一格是 `chart-page-asc-status`，鼠标悬停、键盘聚焦或手机点一下，用盘面同一套气泡显示「上升点是命盘的起点，不是行星，不判断入旺或落陷」。读屏读到的是这一句。本命和月亮这张八列表仍是原来的表格元素，方便和冻结的本命表对照；分盘、Bhava、行运、西洋表用组件库表格，列和跨满整行不变。分盘的庙旺、同位和 Bhava 的换宫仍是字，不套这枚徽标。数字列 `tabular-nums`，符号列与宿主列居中。

本轮不新增第二层页签：参照里「宫位 / 大运 / 星力 / 瑜伽」等页签的内容后续另立单。

**每种盘型一套表（2026-09-28，BUG-1076）。** 以前切到 D9 只换表头、行仍是 D1。现在：

| 盘型 | 列 | 说明 |
| --- | --- | --- |
| 本命 | 上面八列 | 列不变。状态列改成同一种徽标，上升格改成「—」。冻结对照仍对同一份基线文件，只在断言里替换这两处 |
| D2–D60 | 行星 · 分盘星座（度°分′）· 宫位 · 本命星座 · 庙旺；仅 D9 再有同位 | 宫位从该分盘上升数；庙旺是引擎给的十档（入旺 / 本垣 / 入庙 / 极友 / 入友 / 中性 / 入敌 / 极敌 / 落陷 / 落陷取消），措辞与本命「状态」列一字不差（2026-10-03，BUG-1202，取代原先「入旺 / 自宫 / 落陷，其余—」的三档）；旧缓存没有引擎等级时整列不显示，页面不自算；上升此格写「—」，悬停或点按同一句「上升点是命盘的起点，不是行星，不判断入旺或落陷」（2026-10-25 起不再写「/」；2026-10-21 曾用「/」推翻 2026-10-15）。2026-09-29 收口：仅 D9 的 D1↔D9 同座比较显示此列，其他分盘不显示。2026-10-13：同座写「是」，不同座写「否」，表头仍是「同位」（不再用横杠，避免看成没算）。两列各由服务端能力声明控制，缺声明保守隐藏，不以是否命中推断支持性。**没有星宿 / 宿主 / 足**：那是本命经度的属性。逆行在行星格后标「逆」（分盘不改顺逆）。首行是分盘上升 |
| 月亮盘 | 本命八列 | 宫位从月亮所在星座数；表头「月亮盘 · 以月亮所在星座（X）为第 1 宫」；盘上「As」画在本命上升落的那一宫（`VedicChartSvg` 的 `ascendantHouse`，其它盘默认 1 宫不变） |
| Bhava | 行星 · 黄道经度 · 星座宫 · Bhava 宫 · 换宫；另一张「宫 · 宫头 · 起点（sandhi）」12 行 | Sripati。换宫的行用 `--color-selected` 浅底。拿不到真实 MC 时这一栏走失败句，不画等宫（BUG-1077） |
| 行运 | 行星 · 今天的位置 · 速度 · 落本命 · 本命同星 | 表头写计算时刻「行运 · YYYY-MM-DD 12:00（时区）」，上方一句「以本命上升为第 1 宫，放的是这一天中午的行星位置。岁差和交点与本命相同。」 |

说明句 + 表格包在 `.chart-page-varga-table-block` 里，作为一个 grid 项在 ≥1024 时跨两列。宫位表头与对应数据格统一左对齐、相同 padding；包括本命/月亮、分盘、Bhava、行运。宿主、pada、速度、换宫等原本居中列不随之变化：表头与内容同为居中。本命/月亮八列 markup 冻结，速度、宿主、pada 的表头用列选择器居中，不改 markup，也不把宫位那一列居中。分盘的庙旺 / 同位、行运的速度、Bhava 的换宫，表头带 `chart-page-planet-mid`。不能全局覆盖 `chart-page-planet-mid` 去改宫位列。

### 三套坐标系

每一套必须在自己的 Tab 里写明自己是什么，并显式点名不能互相换算、也不能叠成「双重印证」：

- 印度盘：恒星黄道，岁差用资料里选的那一套。
- 西洋盘：回归黄道，宫位 Placidus；右栏第一张是边界卡。端点未上线时 Tab 仍在，渲染静态说明，整页不失败。
- 七政四余：2026-09-28 起不在页面上（见上）。

「传统象征」是词条，不得写成运势。页面上不另写「词条式释义，不是对你个人的判断」——行星卡本身已经是度数、星宿、D9，没有判断句。大运 Tab 底部固定：「只有两条同时指向同一段时间才算证据，单轨命中要降一级来看。」Chara 的正式名称是 **Chara Dasha（kn_rao 变体）**，不要写成 Narayana。

0 年大运照实显示，不改引擎。某段 Chara 的 `duration_years` 为 0 时，这一段标注「0 年」，起止落在同一天，不占时间轴，也不展开子运；子运区写「本段时长为 0，不展开」。前一段的结束日就是下一段的开始日。

### 大运 Tab（2026-09-25；右栏切换 2026-10-22）

每条轨道自上而下是「现在」卡、时间条、可折叠大运列表。左栏固定 Vimshottari。右栏在 Chara 与 Yogini 之间切换，默认 Chara。切换条在右栏卡片里，两个选项各至少 44px，横排分掉这一栏的宽度，不另开横向滚动。≥1024 时两栏并排；更窄则上下排，切换条跟着右栏走，不另加断点。底部仍是那句双轨说明。

点「大运」只取 Chara（`/api/dasha/chara`）。切到 Yogini 才请求 `/api/dasha`，缓存范围是 `dasha:yogini`，和 Chara 不是同一条缓存。回来时只换当前这一轨，已经拿到的另一轨还在。刷新本命盘也保留已经到达的大运轨。

Yogini 还在取时，右栏用和 Chara 相同的轨道等待（`OrbitWaiting`），读屏是「这一栏还没拿到。」失败只写在右栏，左栏 Vimshottari 不动。再点当前这个失败的选项会再请求一次。Yogini 列表下面固定一句「小运未经外部软件核对。」Chara 与 Vimshottari 不写这句。

「现在」卡三行：大运、小运、小运剩余 N 个月。月份按排盘所用的 `asOf` 到当前小运结束日的整月数，结束日当天不往下减。没有落入的时段写「未落入已返回的时段」，没有小运写「—」。

时间条只画时长大于 0 的段，宽度按时长。当前段用主文字色内描边，一条竖线标 `asOf`。两端是 `YYYY.MM`。0 年段不进这条轴。段色轮换现有的浅底 token（`--color-action-soft`、`--color-success-muted`、`--color-canvas-strong`、`--color-danger-muted`、`--color-selected`、`--color-canvas-muted`），不新造一套色。

列表用可折叠组件。只有当前段一开始是开的，这一次打开不播放展开动画。之后点开或收起才用动效：高度约 0.24 秒，减少动态效果时高度不动、只淡入。子运一行是「名称 · YYYY.MM – YYYY.MM」，日期 `tabular-nums` 靠右，当前子运用主文字色。标题与子运行高 44px。未展开的子运仍留在页面里，用收起状态藏起来。0 年段不能展开，文字用 `--color-ink-tertiary`，只写「0 年」和「本段时长为 0，不展开」。当前大运用浅底和细边框标出，不画左侧强调线。右栏已经选中的 Chara 或 Yogini 再点一次，会再请求这一栏。

### 西洋盘 Tab（2026-09-25）

盘 `viewBox` 是 `0 0 520 520`，容器 `width: 100%`、窄屏 `max-width: 520px`、≥1024px 桌面上限 480px、水平居中（2026-09-29 仅桌面收紧）。三圈：外圈星座、中圈行星、内圈宫位号。骨架模式只画这三圈和 12 条星座分割线，不画星座名、行星、宫位号、相位。

星座环按元素填色，token 在 `:root` 与两套暗色里各一份：

| token | 亮色 | 暗色 | 星座 |
| --- | --- | --- | --- |
| `--color-element-fire` | `#f4d3c3` | `#5a3a32` | 白羊、狮子、射手 |
| `--color-element-earth` | `#e7dfc6` | `#4a4636` | 金牛、处女、摩羯 |
| `--color-element-air` | `#d5e2f2` | `#2e3c4e` | 双子、天秤、水瓶 |
| `--color-element-water` | `#d3e6e8` | `#2a4448` | 巨蟹、天蝎、双鱼 |

星座名用 `--color-ink`。这四个填色不是通用文字底，三级字和强调色不铺在上面。相位：合 / 六分 / 三分用 `--color-success`，刑 / 冲用 `--color-danger`。组件里不写死色值。

行星标的是符号加星座内整度，逆行再加 ℞。字号 19（viewBox 单位），375px 页面扣掉两侧各 16px 后，343px 实际盘宽下约 12.53px；不能用屏幕宽代替盘宽验收。标签以 `central` 基线居中，符号字框按本地 Noto Symbols 的高 em 框保守留到 2.2em，普通文字为 1.4em。相邻显示角至少 11°，在两层半径（188 与 136）内找最近空位；ASC / MC 是固定锚点，星座名与宫位号也是障碍，行星让位而不缩字。真实位置在星座环内缘留刻度，并用细线连到显示位置。引导线和刻度不接收指针事件。透明命中圆 r=34，在 343px 盘宽下直径约 44.85px；任一圆不得吞掉其他行星的中心；全部命中圆先画，全部可见行星文字后画，文字点选直接归属自身，透明圆保持唯一键盘按钮，文字层对读屏隐藏。真实浏览器需用 `getExtentOfChar` + `elementFromPoint` 逐字符验证，不只检查标签中心。宫位号保持宫头到下一宫头的中点角度，默认半径84；字框拥挤时只径向换层（108、60、132、36），不改变真实宫头或文字大小。1 / 4 / 7 / 10 宫头加粗。ASC、MC 写在盘内；不再画盘外的「升」。`view.western` 没有 MC 字段，MC 用第 10 宫头。

相位线一直画着。点行星或行星位置表的一行，只留下该星和它的相位，其余变淡；再点取消。相位表同步只列该星。右栏顺序：要点 chips（上升、太阳、月亮、元素最多、星群）→ 行星位置表 → 主要相位表 → 口径说明。星群是同一星座里至少 3 颗行星，由现有 `planets` 数出来，不是新字段。表用 `.chart-page-western-table`，不继承 `min-width: 34rem`，外包 `.chart-page-western-table-wrap`（`min-width: 0`、`overflow-x: auto`）。断点仍是 1024。

### 等待态

2026-09-24 产品决策有限推翻 09-18 方案一（BUG-716 / 966）：`SecondaryPageShell` 标题、note 槽与撑满内容区不变，主盘未到时正常渲染 body 和禁用的 Tab 行；仅 D1、非 D1 分盘与西洋盘位置显示既有 SVG 空模型的骨架与原等待句。骨架无星体、度数、星座标签，几何不得复制；容器 `aria-busy=true`，装饰盘对读屏隐藏。中性 token、opacity 0.35 ↔ 0.6 / 2.4s ease-in-out，减弱动态效果时静止 0.5；不旋转、不扫光。大运表格仍为静态句，首页、侧栏、星历、报告不适用此例外。Bhava、行运与分盘同在盘位上，沿用盘位骨架（2026-09-28）。首次请求（含预取）和按需层均有 25 秒客户端期限；失败移除骨架，再点该 Tab/chip 清失败并重试。401 先显式呈现登录句再跳转。同一会话再次进入直接用模块缓存，不重放等待句。出生资料保存成功后，缓存按账户和资料指纹换键，旧盘不得留在页上冒充新的日期或时间。

| 时刻 | 文案 |
| --- | --- |
| 外壳已出、主盘未到 | 北印度空盘骨架 + 这一张盘还没拿到。 |
| 已点西洋，尚未返回 | 西洋空盘骨架 + 这一栏还没拿到。 |
| 已点大运，尚未返回 | 静态句：这一栏还没拿到。 |
| 已点 Bhava / 行运，尚未返回 | 北印度空盘骨架 + 这一张盘还没拿到。 |
| 已点非 D1 分盘，分盘包还没返回 | 北印度空盘骨架 + 这一分盘还没拿到。 |
| 客户端超时 | 这张盘等了太久没有回来，再打开一次试试。 |
| 分盘 / 按需层失败 | 按原因显示既有失败句；不留等待句或骨架 |
| 引擎 429 | 算盘的服务正忙，稍等几秒再打开就好。 |
| 其它主盘计算失败 | 这张盘算不出来，我们已经记录下来了。 |
| 资料读不出来 | 星盘资料这会儿读不出来，我们已经记录下来了。 |
| 已采用的时间缺时区 | 已采用的出生时间缺了排盘要用的时区，这张盘先不能算。我们已经记录下来了。 |
| 时区没有对上 | 出生地的时区没有对上，这张盘先不能算。我们已经记录下来了。 |
| 结果格式对不上 | 星盘结果的格式对不上，我们已经记录下来了。 |
| 还没有出生资料 | 标题「还没有星盘资料」+ 原句 + 主按钮「去填写出生资料」 |
| 资料读不出来 / 已采用时间缺时区 / 时区没有对上 | 各自的原句 + 同一个「去填写出生资料」；不加「还没有星盘资料」 |

资料类这四句的按钮链到 `/people`。旧的 `?settings=chart` 也改去 `/people`，不再打开设置。标题用 `--type-title-md`，整块居中，按钮是主按钮。引擎忙、超时和坏结果不加这个按钮。解析 `?settings=` 只在 `settings-url.ts`；`?settings=billing` 仍只开账户与点数。

## 16. 星历页

独立 route `/ephemeris`。不扣点、不调模型。页面挂在 `app/(secondary)` 共享外壳上（§ Secondary page shell）：页名「星历」在 46px 顶栏里，顶栏不放按钮；`.ephemeris-body` 是唯一滚动的东西。

- **结构：** 日期条；今日五要素；当日行运；未来九十天；底部提问提示卡。顺序固定。页尾不另写定性句。
- **日期条：** 居中的日期是主语。左右是组件库 Button（`size="icon"`）加 Lucide 的 ChevronLeft / ChevronRight，字形 `aria-hidden`，可访问名仍是「前一天」「后一天」，读屏不丢方向。日期下面的五要素、行运和未来九十天按方向翻页（已有的 Motion `dateTurn`，位移 24px）。翻页容器 `overflow: visible`，四周留 1px，卡片描边不会被裁掉。系统开了减少动态效果时只淡入，不位移。**「今天」只在非今日时出现**，作为日期下方一枚文字按钮；在今日时它整个不渲染，而不是渲染成一枚禁用按钮——灰掉的按钮仍要被读、仍要被 Tab 跳过。原本三个并排等宽按钮把「前一天 / 今天 / 后一天」读成三个平级动作，日期本身反而被挤出了这一组。
- **三段同一套卡片：** 五要素 / 行运 / 未来九十天三个 `.ephemeris-section` 各是一张卡（1px 描边 + `--radius-lg` + `--color-canvas`），卡内是行。原本三段的**内容**各自画框而**段落**不画框，于是三段看起来是三种不同的东西。框归段落，段内只有行。
- 切到未缓存的日期时，日期条和布局留下，五要素、行运立刻换成「这一天的五要素还没拿到。」「这一天的行运还没拿到。」事件区写「换座和停滞还在取。」，这时不用「还没接上」。没有 spinner、骨架或「正在加载」。请求失败时，三段都写「这一天的星历没取到，点日期再试一次。」再点这一天的日期，或在失败时点左右箭头，就重试这一天；日历仍可改去别的日期。旧日期的响应，包括进页时刷新的今天，不得盖住正在看的另一天。
- **五要素（2026-09-26 可读性改版）：** `dl` 网格保留：桌面五格一行（星期、月相日、月宿含第几足、瑜伽、迦那），格子是段落卡内的浅底块。767px 以下收成五行：左列标签固定 5.5rem、不加字距，行距收紧到 `--space-2`。
  - **先中文、后梵文。** 主行中文，副行 12px 三级色写引擎原名（`lang="sa-Latn"`）。中文名只来自 `src/lib/panchanga-names-zh.ts`，该表逐字抄自任务书附表，不自行翻译、不增删；匹配忽略大小写、空格、连字符，别名只有 Garija/Gara、Dwitiya/Dvitiya、Shashthi/Shashti。表里查不到的名字原样显示梵文、不出副行，并在控制台记一次 `panchanga_name_zh_missing`。星期接口里本来就是中文，不出副行。接口字段不变：`factor.value` 仍是引擎名，中文在视图层投影。§15 行星表「没有中文宿名表就不造一个」仍只管星盘页；星历这张表是产品在任务书里给定的。
  - **吉 / 中 / 凶是行右侧的彩色小标签**（`.ephemeris-quality`）：吉 `--color-success`、凶 `--color-danger`、中 `--color-warning`，底是同色 `color-mix(… 12%, transparent)`。只照搬引擎标签，不写成建议。
  - **卡片顶部当日总评 + 计数。** 一句 `{月相短语}，{整体}{Vishti 追加}。`，按固定规则拼（`panchangaDaySummary`，纯函数，不调模型）：Purnima「满月之日」、Amavasya「新月之日」、其余白分「月亮渐盈」、黑分「月亮渐亏」；吉 ≥ 4「整体吉」、3「整体偏吉」、2「吉凶参半」、≤ 1「整体偏凶」，中不计入；迦那为 Vishti 时追加「；迦那落在毗湿提，重要的事避开」。下面两枚计数标签「N 吉」「M 凶」。五要素或其中任一吉凶缺项时，总评和计数都不出，只显示已有行。
  - 卡片下固定一行岁差说明，按资料实际岁差填名：「五要素按 Lahiri 岁差算，和星盘页的 {Raman / KP / True Citra / True Pushya / Fagan-Bradley} 不同。」资料就是 Lahiri 时写「和星盘页相同」，读不到资料岁差时只写前半句。行运段不加这句。
- **当日行运（2026-09-26）：** 每行是一个 `li`：左 1.75rem 彩色行星符号（复用 `--color-planet-*`，与星盘页行星表同色、同字体栈）+「{行星} 在 {星座}」+ 副行「落你的第 N 宫」（仅 `natalRelativeAvailable` 为真时）与逆行时的「逆行」+ 右侧等宽度数（度°分′，`tabular-nums`）。桌面与手机同一行式，不再有表头和 `data-label` 堆叠。没有本命上升时副行不写宫位，段首写「还没有本命上升，先不写落在你的第几宫。」
- **未来九十天：** 按日期升序只写事实（「某星 进入 某座」「某星 停滞转顺 · 度数」）。`/api/ephemeris_events` 未上线时整段静态说明：「换座和停滞还没接上。这一页其余部分不受影响。」不得让整页失败。
- **出口（2026-09-26 挪位）：** 「带这天去提问」不在顶栏了。页面最底部一张浅色提示卡 `.ephemeris-ask-card`（`--color-action-soft` 底、`--radius-lg`、宽度与段落卡一致）：左侧「想问这一天适不适合做某件事？」，右侧主按钮「带这天去提问」（44px），行为不变——把当前日期预填进对话草稿并回到 `/`。窄屏时问句自己折行，按钮不变宽。不写「这一页是天象本身，不是对你的判断。」
- **等待：** 揭幕后不得再出现 spinner / 骨架 / 「正在加载」。首屏未到时 `SecondaryPageShell` 写「这一天的星历还没拿到。」，居中在已撑满的内容区里。未登录是静态「请先登录」加去登录，不是转圈。同一会话再次进入直接用模块缓存。
- **文案：** 不得写运势结论，不得把三套坐标系换算或叠加。当日总评只来自上面的固定规则。不另印「这是天象本身」这类边界说明。

## 17. 那一刻的天空（2026-09-28，TASK-birth-sky-cover-20260928；第三轮 TASK-birth-sky-polish-20260928）

出生地、出生那一刻头顶的真实天空，画成一张 3:4 封面。不讲运势，不贴标签。产品从三版样稿（`docs/tasks/assets/birth-sky-cover-sample-20260928.html`）里选了 C；A 年轮、B 一笔画不做。

- **投影与方位：** 天顶在圆心，r = (90 − 高度) / 90 × R；北在上，**东在左**（仰望天空，不是俯视地图）。圆是地平线，另有 30° / 60° 两道虚线高度圈；东南西北四个字在圆外。方位角一律「自正北起、向东为正」（Swiss Ephemeris 的 `azalt` 自正南起算，服务端已换算）。高度是几何高度，不加大气折射。
- **画什么：** 地平线以上的太阳、月亮、水金火木土；太阳是赭色空心圆加光晕，其余是小圆点加中文名。V ≤ 4.0 的亮星（耶鲁亮星表，公有领域），点的大小按星等。北斗、仙后座、猎户座三组连线，只连两端都在地平线上的那一段。罗睺、计都不画；月亮在地平线下不画，只进事实句。
- **版面（600 × 800 设计格，导出 1080 × 1440）：** 顶部小字「JYOTISHA · 那 一 刻」→ 细线 → 主句 → 天空圆 → 细线 → 事实句 → 出生资料一行（caption，见下）→ 最底「仅供自我探索，不替你做决定。」。主句与顶部小字用 Jyotisha Serif SC（§3）；画布绘制前 `document.fonts.load` 最多等 1.5 秒，超时就用黑体画，不出等待态。事实句、caption、方位字、行星名、底部说明用黑体栈。
- **两套 palette，只用现有 token：** `night`（屏幕）= 深色主题的页底 `#1a1a19`、墨色 `#f2f0ea`、二三级墨色、深色细线、深色 action `#d78064` 画太阳；`paper`（报告打印）= `--report-paper`、`--color-ink`、`--report-rule`、`--report-accent` 画太阳。不新增品牌色。
- **印日期、时刻、城市（2026-09-28 产品推翻「不印出生资料」）：** 事实句下一行（原「按你填写的时间」的位置，字号颜色不变）印 `1994年5月18日 07:40 · 杭州`：出生地当地日期、24 小时制时刻、城市。城市只取到市（去「市」字，直辖市与港澳用本名），拿不准（只有省、盟 / 地区 / 自治州、自由文本）就只印到时刻，不猜。采用了校正时间的末尾加「 · 校正后」，按填写时间的不加说明。不印区县、经纬度、时区、名字。这一行由服务端拼好，接口只下发这一个 `caption` 字符串，不下发任何出生资料字段。星盘页图片、报告封面、首次建盘过场三处都印。文件名固定 `jyotisha-sky.png`。
- **一个画法：** 预览、保存、打印共用 `lib/birth-sky/draw.ts` 的 `drawBirthSky`（Canvas 2D 纯函数）。预览是这张 PNG 的 `<img>`，手机长按即可存图；不走 SVG 转图片（网页字体会丢）。

### 位置一：星盘页顶栏按钮

- 星盘页 `ok` 后立即预取 `/api/birth-sky?subject=<当前人物>` 并在屏外画好 PNG；**画好之后**顶栏右侧才出现一枚描边按钮「那一刻的天空」（`<Button variant="outline" size="sm">`，顶栏里按 `.chat-header-actions button` 收成 32px + 命中区外扩）。2026-09-29 晚改（BUG-1102，产品「按钮不明显、慢一秒才出现」）：星盘 `ok` 即显示按钮，不等 PNG；封面还在画时点击被记下，画好立即开播重放，中间不插转圈（重放的汇聚本身就是等待）；样式改为 `.birth-sky-entry`：自绘小星座图标（四颗星细线相连，2026-09-30 替换星芒，BUG-1114）+ `--color-action` 12% 浅底 + accent 字色 600 字重（不用 `--color-action-soft` 实块，BUG-1078）。预取失败时按钮消失，资料不全、切人物时都不显示按钮，不报错。切换人物或改出生资料（指纹变）就按新人物重新预取。家人的盘也能生成。
- 点按钮**重放群星汇聚并定格**（2026-09-29，TASK-mobile-chart-and-confirmed-edit-20260929 M4，替换第三轮 P1 的静态海报弹层）：与首次建盘过场同一个组件 `BirthSkyConverge`、同一条时间轴，`mode="hold"`——汇聚约 3 秒、文字 600ms 淡入，然后**停在定格帧不动**，不淡出、不自动关闭。每次打开都从头重放。定格帧就是导出的海报（画布调用序列逐条相同，且用生成 PNG 时同一个宋体判定 `cover.serif`）。全屏原生 `<dialog>` portal 到 `document.body`，底色 `night` 页底色，画布取视口内最大 3:4、乘 DPR。
- 控件浮在画面上方一行：**左上 ×**（只有图标，读屏名「关闭」）、**右上「分享」**（分享图标 + 字，night 墨色细描边）。两枚都是组件库 Button，类名仍是 `birth-sky-control` / `birth-sky-share`。星星汇聚不改。播放中也在，都 ≥ 44px，顶部留安全区。点画面（不在控件上）直接跳到定格帧、**不关闭**；按 Esc 或点 × 关闭，焦点回到按钮。`prefers-reduced-motion` 时不汇聚，600ms 淡入到定格帧。
- 「分享」：浏览器能分享文件时（iOS Safari）调 `navigator.share({ files })`，系统面板里有「存储图像」；否则 Blob + `a.download`。分享的就是屏幕上定格的那张 PNG（按钮出现前已画好，分享从不等待）。用户取消不算错误、不提示；其他失败在右上方小字「没能分享，再试一次。」。
- 重放层、画布与导出代码都在懒加载 chunk 里（`next/dynamic` + 动态 `import()`，`components/birth-sky/birth-sky-replay.tsx`），首页 `/` 不带它们。按钮本身是星盘页里的一个普通 `<Button>`（只在数据就绪时渲染）。
- 等待：没有等待态。按钮出现时数据与 PNG 已就绪；打开就开始放。

### 位置二：报告封面（2026-09-28 追加；**2026-09-29 已去掉**）

产品 2026-09-29 决定去掉报告里的星图封面（TASK-mobile-chart-and-confirmed-edit-20260929 M5，推翻 followup F2 / F3）：报告页正文上方没有封面，打印 / PDF 第一页就是正文；`GET /api/reports/:id` 不再下发 `coverSubject`，读报告时也不再为比对去查人物资料。组件 `report-sky-cover.tsx` / `.css` 与 `lib/birth-sky/report-cover.ts` 已删除。

保留的只有 F1：新生成的报告仍在文档 `subject.birthFingerprint` 记下生成时的出生资料指纹（与星盘页 `profileFingerprint` 同一个函数，不进给模型的证据包，不下发浏览器），schema 里是可选字段，旧报告照常能读。现在没有任何地方读它，留给以后需要「报告对得上资料」时用。

### 位置三：首次建盘群星汇聚过场（2026-09-28 追加，TASK-birth-sky-followup-20260928 F4，替换原弹窗）

- **触发：** 首页建档里出生地保存成功（`saveOnboardingPlace` 成功、下一步已设好之后）。本人路径取本人的天空；帮别人看取这一位的天空。没有「看过」标记、不写库。星盘档案里另外新建家人、设置里改资料、平时打开首页都不触发。
- **不等待：** 保存成功后建档照常走开，同时取 `/api/birth-sky?subject=` 当前这一位、等宋体（最多 1.5 秒）、加载过场代码；三样都在 **3 秒**内到齐才开始放，否则静默跳过：不提示、不重试、不转圈、不骨架（§9）。过场开始时画面数据已就绪。帮别人看时，若上升星座已经在今日星语那次计算里拿到，画面上多一行「那一刻，{名字}的上升在{星座}」。名字或星座还没有时不写这行，原来的天空句子照常，不等第二次排盘。
- **时序（约 6.5 秒，第三轮放慢）：** ① 汇聚约 3 秒：前 420ms 星星先亮起，位置仍停在散开处，然后 ease-out（三次方）汇聚到真实投影位置。行星在这 3 秒里逐个点亮，并从东边地平线（上升）连一条线，线在汇聚结束前收回。散开位置由这张盘自己的数据做种子，均匀撒在地平线圆内，同一张盘每次一样。地平线圆、30° / 60° 高度圈、方位字、星座连线、行星名同步淡入。整层前 400ms 淡入，避免页面一下变黑。出生地点下「确定」的位置，用 680ms 的圆形从点击处展开到全屏。② 显现文字约 2.5 秒：主句先浮出，事实句晚 120ms 再浮出；顶部小字、细线、caption、底部说明仍在前 600ms 淡入，然后停留。③ 淡出约 1 秒：整层透明度降到 0，同时放大到 1.06。底下的首页内容不变，并在同一段里上浮一次。
- **最后一帧就是封面：** 每一帧都是 `drawBirthSky` 画的，只对位置插值（t = 0 散开、t = 1 真实位置，`interpolateSkyPoint`，t = 1 精确返回真实点）、对透明度乘系数。加强用的额外字段在停留时是「星星已亮、行星已亮、连线为 0、两行字都已出现、汇聚为 1」；这些值和省略它们画出的调用序列相同。减少动态效果时不传入这些字段。停留阶段的画布调用序列与导出封面逐条相同（单测逐调用比对）。
- **全屏、无按钮：** 原生 `<dialog>`，`createPortal` 挂到 `document.body`（在 `SidebarInset` 之外，不受弹窗打开时的 `inert` 影响，与账户弹窗、兑换弹窗同一做法，BUG-968 / BUG-1080）铺满视口，底色是 `night` 的页底色；画布按视口取最大的 3:4 区域、乘 `devicePixelRatio` 绘制，`requestAnimationFrame` 驱动，卸载时取消。点击、触摸（`pointerdown`）或 Esc 立刻结束，直接进入下一步。
- **减少动态效果：** `prefers-reduced-motion: reduce` 时不汇聚、不先亮星、不连线、不逐行浮出、不从点击处圆形展开、首页不上浮：成品画面整体淡入（600ms）、停留、同一时刻淡出（1 秒），总长同样约 6.5 秒。
- **与兑换弹窗不再同时出现：** 0 点数账户的「解锁完整咨询」兑换弹窗不再在首页出现时自动弹出，改为本页第一次因点数不足发不出消息时弹（见 §账户弹窗「Placement」条），所以建盘后首页只有过场。
- **结束后没有提示：** 过场正常结束或被点掉后直接露出下一步，不弹任何提示（2026-09-29 产品去掉原来的「这片天空在星盘页可以保存。」）。
- **平时的首页加载动画不改。** 这是用户操作之后的一次性结果展示，不是首页加载等待，不违反 §9「首页只揭幕一次」；轨道环揭幕逻辑不动。
- 代码：时序与插值是 `lib/birth-sky/converge.ts` 的纯函数；过场组件 `components/birth-sky/birth-sky-converge.tsx`（懒加载 chunk，含 `draw.ts` 与样式）；状态在 `hooks/use-birth-sky-reveal.ts`，`page.tsx` 接线未变（`Home()` 的 `useState` / `useRef` 数不变）。星盘页的「那一刻的天空」弹窗删掉了只给揭幕用的 `is-reveal` 样式与「继续」按钮。

## 18. 注销账号（2026-09-30，自助注销 + 7 天冷静期）

- **入口：** 设置弹窗 → 通用设置，主题偏好之下，一条 hairline 分隔后的「注销账号」区（`.account-deletion-section`）。头像菜单不加入口。触发按钮是描边危险色、透明底、44px 高（`.account-deletion-open`）。
- **确认块：** 原地展开，不再叠一层弹窗。浅危险色底（`--color-danger-muted`）、危险色 35% 描边；说明、删除清单、保留说明、联系邮箱（次级墨色）、「输入「注销」确认」输入框，底部「取消」+ 实心危险「确认注销」（`.danger-primary`）。没输对字之前确认按钮禁用。
- **冷静期门：** 登录后若有待执行的注销，`(app)` 布局渲染全屏 `role="alertdialog"`（`.account-deletion-gate`，z-index 90，`--color-canvas-soft` 底），中间 440px 卡片：宋体标题「账号注销中」、日期句、「退出登录」「撤销注销」两个按钮居中。不做入场动画，不出现 spinner；撤销后整页刷新。
- 代码：`components/account-deletion-section.tsx`、`components/account-deletion-gate.tsx`；`page.tsx` 只在 `renderGeneral()` 里多挂一个组件，`Home()` 的 `useState` / `useRef` 数不变。

## 外壳（2026-10-24）

桌面侧栏宽 200–360px，默认 288。右侧把手是组件库按钮，仍是 6px 透明细条；拖它调整宽度。把手能用 Tab 选中，左右方向键每次 16px，Home / End 到最窄 / 最宽，键盘不会把侧栏收起；读屏读作竖向分隔条，带当前宽度（BUG-1457）。拖到比 200 更窄就收成 64px 窄轨；收起不把 64 写成宽度。宽度记在本机 `sidebar_width`。侧栏和主区始终在各自的容器里：视口就绪、跨过手机断点，都不会把整页卸掉再挂上。手机用左侧抽屉，宽 `min(86vw, 320px)`。当前页高亮用已有的 `layoutId` 滑动。翻页用已有的页面进入 280ms、离开 150ms，方向跟着侧栏顺序。顶栏点数是描边按钮：硬币图标加数字，44px；「点」只在可读名称里。数字变少时往下滚，变多时往上滚，360ms；系统要求减少动态时立刻换数字。启程清单胶囊仍是 32px，仍在点数左边。账户按钮只显示头像和名字。设置仍是三个分区。会话只在收藏组内、或最近一组内拖动排序；收藏整组仍在最前。可排序的行和其他行长得一样（2026-10-27，BUG-1466）：没有常驻把手，鼠标按住整行移动 6px 开始拖，触摸长按 250ms；把手只在键盘聚焦时出现，供键盘排序。能悬停的设备上「…」只在悬停、聚焦、当前行、菜单打开时出现，触摸设备常驻。这套行菜单、删除确认框和拖动排序在每个页面都一样，由外壳提供，不只首页（2026-10-28，BUG-1467）；在其他页面点一行回首页打开，未登录时行仍是只读链接。输入框为空时发送按钮禁用，但输入框本身不变灰（覆盖 `InputGroup` 的 `has-disabled:` 两项）。翻页、高亮滑动和拖动排序用的库在页面出来后再载入，不进首屏。拖宽不再另载一套分栏库。

## 对话页（2026-10-25）

输入框仍是一个框。框底左边是模型菜单，只显示模型名；价格「N 点」只在菜单里。菜单用外壳已有的延后载入，不进首屏；库还没到时按钮上仍是模型名。右边是圆形发送，和框的底边对齐。回答下面赞、踩、复制、重新生成是 26px 的图标按钮，各有一句提示。不满意原因和兑换窗用组件库对话框，句子不改。追问是描边小按钮，仍按启程进场依次浮出（260ms，间隔 64ms），不另写一套时长。

桌面顶栏、点数右边，是打开或收起本命盘的图标按钮，提示「打开本命盘」或「收起本命盘」。面板宽 280–560px，默认 360。面板左缘是和侧栏同样的 6px 透明把手（`.chat-chart-resize-handle`），面板左边一条 1px 分隔线。拖它调宽度，拖到比 280 更窄就收起；方向键同侧栏，不会收起。面板不再放进分栏组：对话列在面板外面，组里只剩面板一个时把手拖不动（BUG-1456）。开着和宽度记在本机 `chat_chart_panel_open`、`chat_chart_panel_width`。手机（视口还没定，或小于 768）不显示这个按钮，也不因为藏起来就把「开着」写成关掉。面板里是当前人物的本命盘，复用星盘页的绘制，不写骨架、不写「正在加载」。对话列始终留在原处。本命盘在第一次打开后载入，加在对话列旁边，不把对话列卸掉再挂上。星盘绘制不进首屏。

## 新用户启程（2026-10-25）

首页顶栏右侧、点数按钮左边，是一枚胶囊「启程 n/N」（`.onboarding-checklist-trigger`）。它沿用顶栏按钮的 32px 高度，圆角 999px，字和图标间距 6px。左边是 18×18 的进度环，描边按已完成的项画满。视口还没分出手机或桌面时，这枚胶囊不可打开。胶囊的样子和首页一起出来：弹层代码延后载入，但胶囊不等它，载入前胶囊在、不能点。账户的启程状态还在读的时候，用这台浏览器上次看到的胶囊（本机 `onboarding_checklist_face:<账户>`）占住位置；读回来说不显示就拿掉。从没见过清单的浏览器不占位（BUG-1458）。手机（侧栏视口小于 768）从底部抽屉拉出，带现有的下拉把手。平板和桌面用现有弹出层，靠右对齐，宽 `min(22rem, calc(100vw - 2rem))`，行是 `1.25rem minmax(0, 1fr) auto`，句子 `overflow-wrap: anywhere`。已完成的行用对勾，没有「去做」。底部是「先不看了」。

七项在这一次使用里刚满时，抽屉或弹出层再打开一次，进度环处同时迸一次星点（1000ms，只一次）。标题「都走过一遍了」，正文「以后有新东西，我会在用到的时候再告诉你。」关掉后胶囊消失。进站时已经满的账户，胶囊、这一屏和星点都不出现。

一次性提示用现有弹出层，宽 `min(18rem, calc(100vw - 2rem))`，不抢焦点。侧栏两项从锚点右侧伸出，其余从上方伸出，间距 8px。按钮是「知道了」。同一时刻最多一条。天空过场、兑换窗、任何弹窗或抽屉、启程清单正打开、回答还在生成时，提示不出；挡着的那一条等条件过去再出。侧栏「星盘」、手机菜单和星盘四个页签上的小圆点是 8px，贴在右上角 4px，不是字符。

启程专用动效只在启程里播放：清单还开着且有未完成项，或账户还没完成第一问。清单已经关掉的账户不播追问进场、档案卡进场、星盘和大运画出、合盘头像靠拢。动效代码还没到手、或 300ms 内没到手时，内容保持可见，不先藏起来。只在元素第一次出现时播放。重绘、来回切换不重播。除回答流式中的呼吸点外，没有无限循环。只动 `opacity`、`transform`、颜色、`clip-path`，不触发布局。Motion 用到才加载，不进首屏。启程清单的弹层、一次性提示和启程动效宿主也在页面出来后再载入，不进首屏。提示和动效宿主没载入之前不占位、不转圈；内容保持可见。清单胶囊例外，见上文。

首屏体积：组件库迁移后首页 `/` 的首屏 gzip-9 是 694,941 字节，比迁移前基线 `0f66d92d4`（646,201）大 7.54%，超出 ±2%。多出来的是组件库外壳和整站样式，能延后的（清单弹层、提示、动效、拖动排序、分栏）都已延后。产品负责人 2026-10-27 接受这个数（issue #111）。之后的轮次以新数为基线，继续按 ±2% 管。系统开启「减少动态效果」时，星点和圆点闪烁去掉，其余只淡入，没有位移、缩放和擦除。

| 类别 | 用在哪 | 时长 | 曲线 |
| --- | --- | --- | --- |
| 按下反馈 | 按钮、问题卡、选项、关系标签被按下时轻微缩小 | 120ms | `--ease-out` |
| 进场 | 建档消息与卡片、起步问题、追问胶囊、档案卡、目录行；依次上浮，间隔 64ms（落在 50–80ms） | 260ms | `--ease-out` |
| 弹出 | 一次性提示、「这一次不扣点」、勾 | 380ms | 回弹 `cubic-bezier(.34, 1.56, .64, 1)` |
| 跟手 | 称呼从输入框飞成气泡；起步问题飞成气泡 | 380ms | `--ease-out` |
| 勾飞进进度环 | 清单每完成一项：从操作位置沿弧线飞向胶囊，进度环走一格，胶囊轻跳一下 | 700ms | 弧线 |
| 画出来 | 建档进度条；星盘格线、西洋盘圆与分隔线、大运条 | 640–860ms（落在 520–900ms） | `--ease-out` |
| 场景转换 | 出生地→天空：从点击处圆形展开；天空→首页：淡出放大，首页同时上浮 | 680ms（落在 650–700ms） | `--ease-out` |
| 合盘 | 两个头像从两侧靠拢，泛起一圈光，再展开关系画像 | 1.2s | `--ease-out` |
| 庆祝 | 七项全满时，进度环处迸一次星点 | 1000ms，只一次 | `--ease-out` |

侧栏「星盘」和星盘页签上的小圆点，第一次出现时闪两下（800ms，有限次，不是循环）。减少动态效果时不闪。弹出层和抽屉本身仍走组件库已有的进出，不另加一套时长。

## 婚恋合盘报告（2026-10-19）

选人页不重复标题和副标题，页名在顶栏（2026-10-25）。两个人的选择框左右并排，中间一个叉；窄屏改成上下排，叉仍在正中。各自是下拉，最多二十人。资料不全的人不能选；已经在另一边的人不能再选。下面是「新增星盘」，点开一张卡片：称呼、性别（男 / 女）、出生日期、出生时间、出生地，右下角「取消」和「保存并选中」。满二十人时这一行换成去星盘档案删人。「开始合盘」在桌面和手机上都居中，按钮上不写价格。点了先问「会用掉 N 点，余额 M 点。」，按钮是「取消 / 开始」。余额不够时说「需要 N 点，余额只有 M 点。」，主按钮换成「去补点数」。N 从计价表读，M 从账户读。计价读不到时不弹确认，只说「计费配置不可用」。这两人已经有写好的合盘、且没有一份正在生成时，按钮下面再写已经合过几次、再生成会另扣多少点。之前的合盘只列人名和日期。生成中是轨道和四步（算两张完整命盘、整理两人之间的证据、写报告、检查报告），句子是「正在写 甲 × 乙 的合盘报告…」。报告页回到「婚恋合盘」，标题下是日期和「已保存，再次打开不扣点」，语言是「中文 / English」。选中的那一个边框是 `--color-action-strong`、文字是 `--color-action`，背景仍是画布色，认 `[data-active]` 或 `[aria-selected="true"]`，不铺 `--color-action-soft`。第一次打开时两个头像仍从两侧靠拢；减少动态效果时只淡入。九节编号，分析逻辑默认收起。英文报告同样收起分析逻辑（Analysis，依据行是 Chart 和 So），时间线每段标题写出起止年月；第一段从本月起时，起点写「现在」或 Now。英文准备时同一套轨道，写「正在写英文版…」，揭幕后整份替换。报告末尾「对哪一段想再问清楚？」，下面是八枚胶囊（`.synastry-report-ask`），不含共同练习。点一枚只新建对话并预填问题，不自动发送。对话里人物选择器锁住，显示「甲 × 乙」。合盘删除后输入框占位是「这份合盘已删除」，发送停用。报告在整宽的外层滚动，两侧空白也能滚；中间一栏只负责居中排版。合盘报告单独走 `/synastry/报告`。开始合盘、之前的合盘和报告中心的合盘卡片都进这个地址，侧栏仍亮「婚恋合盘」。旧的 `/reports/报告` 会换成新地址，并保留语言。

## 生时校正从对话进入、做完回到原对话（2026-10-07，BUG-1247～1251，在途）

首页不再有「生时校正」pill，`.starter-entries` 只剩今日星语一枚（`.starter-entry-hint` 那句「生时校正暂时只支持本人。」随之删除）。入口在对话里：

- **提议卡**（`.rectification-offer-card`）：挂在提议了校正的那条回答下面，与追问 chip 同一缩进（`--assistant-content-inset`），浅底细边圆角卡，一句说明（大约几题、几点、答第一题时才扣）+ 一个实心按钮「开始核对出生时间」。校正已开始时同一张卡改成「出生时间核对已经开始。」+ 描边按钮「继续核对出生时间」；回来之后卡片消失。对话进行中（loading / 取消中）按钮不可点。
- **回到刚才的对话**：从对话进来的校正，在校正面输入框上方一行描边小按钮（`.rectification-return-row`）；没有来源对话的校正（历史里打开的、之前开的）不出这一行。采用后核对结束、或 case 结束时，在这个视图里做过操作的校正 2.5 秒后自动回去；从历史打开一个已结束的校正不会自动跳走。
- **分隔线**（`.rectification-return-divider`）：回到原对话后追加一行居中小字「出生时间改为 HH:MM（生时校正）」或「出生时间没有改」，不是一条消息、没有操作行；改了时间时下面一个描边按钮「按新时间重新看：「原问题」」，点了才发送（普通一轮，照常计费）。
- **按校正前的时间**（`.message-before-change`）：改了时间后，分隔线之前的每条回答上方一行灰色小字；原文不动。

不新增等待动画；打开校正沿用既有一次揭幕。

**选项和按钮换成组件库（2026-10-25，K6）**：选项卡片仍是原来的圆角卡片，点中后浅底描边，读屏仍读题干和选项原文，不另写「已选择」。确定程度仍是三个圆点。大概范围仍是一排标签。盘面关闭仍是一枚叉，探头仍挂在顶栏原来的位置，不是弹窗。其余确认、重新打开和采用用组件库按钮，样子沿用原来的实心、描边和文字按钮。题目出现时，若动效已经载入，只淡入；减少动态效果时同样只淡入，没有位移，也没有循环。题目、计分、扣点和保存没有改。明确要求校正仍直接开始，没做完的接着做。

**明确要求则直接打开（2026-10-12，BUG-1306）**：用户这一轮明说要做校正时，不再先出卡再点。回答只留一句过渡，界面沿用既有一次揭幕直接打开校正面。没有新的按钮、输入框、等待动画或 Home 状态。推得不准时的主动提议仍用 `.rectification-offer-card`。做不了时只显示一句话，不静默，也不在对话里假装校正。开案还没成功时，同一张提议卡仍是普通提议（不说「已经开始」，按钮仍是「开始核对出生时间」）。开案成功并绑定来源后才换成已开始的文案。打开失败时按钮仍可点。

## 生时校正独立页（2026-10-28，issue #145）

推翻 2026-10-07「校正只从对话里的提议卡进入」（BUG-1247）：产品要求校正单独有入口。

- **侧栏**：导航里「星盘」下面一项「生时校正」（Lucide `Clock3`），链接 `/rectification`。账户的 `rectification` 开关为 true 才出现；开关没到之前不出现，和「婚恋合盘」同一规则。
- **`/rectification`**：沿用二级页外壳（`SecondaryPageShell`），标题旁不放人物切换（校正只支持本人，他人见 #160）。正文一栏宽 `min(100%, 680px)` 居中，上边距 32px（手机 20px，左右 16px）。一句说明，下面一张状态卡（`.rectification-page-card`：细边、`--radius-lg`、24px 内边距，手机 20px）。状态卡分没做过 / 进行中 / 已完成三种，状态只来自服务端 `entry-summary`（含会话 id、时间窗、确认过的大事数、采用时间）。进行中是两列数字（时间窗、已收大事）；已完成时刻 28px 衬线数字。主按钮是组件库默认按钮，次按钮描边，都是真链接（`AppLink`）。「开始」「再校正一次」先进核对：两行资料表（手机上标签和值上下排），「开始校正」+ 链接「改这份」（`/people?self=1`）。开始后进首页校正面（`/?rectify=1` 续上或新开；做完之后再校正用 `/?rectify=new`），「继续」「查看结果」打开那次校正的会话（`/?c=<id>`）。页面上不写价格。读取中用二级页现有的等待文案，不另做骨架。
- **对话回答下面**（`.rectification-offer-card`）：改成一行，不再是带底色的卡片：灰字一句 + 主色下划线链接「去做生时校正」和 Lucide `ArrowRight`。点链接去 `/rectification`，不从这段对话开案例；对话进行中链接置灰不可点。回来后的分隔线、「按校正前的时间」不变（旧的已绑定案例照常显示）。
- **明确要求**：过渡句之后跳到 `/rectification`，不再直接打开校正面。
- **建完档的首页**：起步三问下面一行浅底圆角条（`.starter-rectify-hint`，`--color-canvas-soft`），一句 + 描边胶囊「去校正」。只在本人出生时间是估的、首问还没用掉时出现，按启程进场依次浮出。
- **启程清单**：本人时间是估的账户在「问第一个问题」后多一项「做一次生时校正」，清单变成 8 项；其他账户仍是 7 项。

## 用量页分段计时（2026-10-05，在途）

`/admin/usage` 在原表格上多一列「分段」。格子里四行：分类耗时、第 0 步、第 1 步、第 1 步开始到第一个正文字符。每步带推理、输出、输入、缓存输入 token。供应商没返回的数显示「—」。不新开页面，不改表，数字来自 `usage_ledger.metadata` 里已有的 JSON。没有新的等待动画或输入框。



## 校正按盘型交付（2026-09-30，在途，BUG-1115～1117）

复用范围卡布局：主行逐张写目标盘的上升与可信档位，分钟范围降为次行。完整扫描缺失时明确不能证明全窗一致；超过 61 分钟的 D9/D10 不作解读推荐。采用按钮沿用旧 owner/result/candidate 与门控，不另造候选：采用服务端头段交集/优先级/clamp 后的实际日期和分钟。已采用状态只认服务端核验的 result、候选锚点、date/time 与 segment provenance 身份，不能仅凭钟点相同点亮；只读与锁门仍禁用。来源偏移按实际采用日历日期计算，原填报资料保留，采用不等于确认。不增加 Home 状态、等待动画或新输入框。当前自动化/真机验收未闭环，不视作上线完成。折叠的「查看验证报告」同样不出分钟排名：无并列/代表分钟行、无「本命上升（该分钟）」、无候选排名表（BUG-1151）。采用后核对题让服务端采用分钟离开了已采用分钟所在的盘型时（`readopt_minute`），交付卡挂到说明这件事的回复下面，按钮为「改用 HH:MM」，下方一行 switch-note「现在按 HH:MM 排盘；改用后按 HH:MM 排盘，原填报资料保留。」；未离开时已采用的卡保持「已采用」，不因采用分钟在同一盘型内挪动而重新亮起（BUG-1173）。不新增按钮或组件。

### 新产品缺扫描与部分扫描（T4 子组，在途）

持久产品领域构造 `segment-product-v1` 身份，不以可选扫描是否存在决定新旧布局。新案缺摘要仍复用盘型卡，主句明确目标盘「上升盘型暂未知，完整窗口扫描暂不可用」，分钟范围保次行；不退回「最可能」分钟卡、不提供采用按钮。缺扫描不是出生精度不足，报告仍阻止分盘推荐，但不混写「需要更准的出生时间」。部分扫描卡、气泡、timeline 与报告均注明仅是候选盘型、不能证明全窗一致。顶层持久身份覆盖嵌套缺失，目标不匹配摘要不呈现；显式历史 null 不凭 receipt 自动升级。无新增入口、Home 状态、等待动画或输入框。真实 golden + 故障注入只证明投影/文案/持久化调用合同，不替代真 SQL、账户浏览器或完整 T4。

### 全窗一致开场卡（T3，在途）

只有持久产品目标集合每张盘完整全窗上升唯一，才在原assistant server turn下挂「盘型一致，不用校正」卡；逐行上升后写「全窗一致」，不以候选质量假称较可信，也不确认某分钟。复用原范围卡class和现消息live/reload映射，无第二composer/scroll/loading、无Home状态增长。服务端检查先于模型解析/收费/采集focus；结束步骤与下一动作改为看盘，不再暗示继续采集。扫描不可用、disjoint或超过1440分钟不能触发。历史domain null保旧开场，正常锁窗回复不被一致出口吞掉。

### 咨询来源与旧案呈现隔离（2026-09-30，在途）

咨询转校正只传已持久来源session引用；服务端核owner、consultation类型与主题allowlist决定婚恋D1+D9、事业D1+D10、其它D1+D9+D10。浏览器不传domain、不以每题focus或用户文本猜领域；新案一次固定，resume不漂移。旧nullable domain即使重计分也不生成新段卡，原native raw/signature审计仍保留；exact-session身份链不升级旧案。来源失败复用原错误区域，无新等待或入口。当前DB opening权限阻塞，浏览器生命周期未验，不称上线。

## 普通咨询：步骤栏与写作行（2026-09-27，BUG-1071～1073；2026-10-06 首轮无标题，BUG-1244）

步骤栏（思考计划）第一节标题仍是「先回答你问的这件事」；首轮它的唯一步骤是「用盘上的反差回答这个问题」，追问轮是「直接回答这句话」。2026-10-06 起首轮正文没有二级标题，思考计划里不再有「这周可以做什么」。正文没有二级标题时，各节在流式中保持未开始，结算后一起收口，不留一节一直转圈。历史回答里已经写出的标题仍对上「盘里支持这个判断的地方」「时间怎么看」。无新组件、无新动效。

写作行：首轮没有标题时只有「组织回答」那一条。进行中写「正在组织回答…」，写完是「组织回答」。历史消息里已经写出的标题仍按标题拆写作行。`shortenAnswerHeading` 里「先回答你的问题 → 先回答」的缩写保留，给历史消息用。

## 校正回答没有「重新生成」；范围句结算时出现一次（2026-09-27，BUG-1055～1058）

生时校正里助手回答下面的操作条只有「赞 / 踩 / 复制」三个按钮，不再有「重新生成回答」（BUG-1056：那条路是盲写，不校验就落库）。普通对话的操作条不变，最近一条回答仍可重新生成。`ChatMessageActions` 不传 `onRegenerate` 时不画这个按钮，其余按钮位置不变。

「范围从 A 变为 B。」「这次没有重新比较，稍后再比一次。」「候选比较这次没跑成，下一句话时会自动再试。」这几句服务端事实句只在结算那一帧随最终正文出现一次（`answer.delta` replace），之后不会再被撤回；流式过程中先出现的是模型正文，结算时模型正文可能被裁成一句或去掉数字不符的整句（BUG-606 / BUG-615 口径不变）。没有新组件、没有新动效。

## 普通咨询：数据卡与「多看一眼」（2026-09-27，TASK-consult-evidence-card）

写回答的模型只读数据卡；界面上唯一新增的是写作行在模型补取一段卡外数据时的进行中句：「正在多看一眼：D60 分盘…」（分盘写「Dxx 分盘」，其余用中文名：格局明细、八分法（Ashtakavarga）、六力（Shadbala）、太阳回归等，见 `evidenceLookupSectionLabel`）。它复用写作行（`answer-composition` 活动），不加新行、新组件或动效；第一段正文出来时照常换成写作句。每轮最多一次。补取发生在已放出正文之后时，界面上的正文不会被截断，也不会重复出现：模型若把已写的开头原样重写一遍，重复部分在服务端丢掉（记 `answer-restart-dropped` 校验步）。一步里调工具前没写完的半句过程说明不会再粘到下一步的正文开头（BUG-1059）。数据卡 v2（TASK-consult-evidence-card-v2-20260927）只改卡的内容和可多看的段，界面不变：写作行同一句式，新增名称见 VOICE.md。

## 普通咨询一遍成文（2026-09-27，BUG-1053）

本命咨询不再有单独的「写结论」阶段：算完盘后，同一个模型循环接着就写回答。时间线的变化只有两处，没有新组件、没有新动效。一是不再出现「正在整理判断依据」「正在写结论」这两个阶段事件，也不再发 `think.step`；计划里的思考行在第一段正文出现时收口（沿用 `completeLiveThink`），写作行的进行中句统一为「正在组织回答」。二是第一段正文要等模型写出第一个二级标题或满 160 字才出现（为了把工具前后的过程说明挡在正文外），开场句会整段一起到达，之后照常按帧放出。截断、停止、失败三种收口与提示不变（BUG-1051）。

## 校正消息：一屏一题干、复述变短、结算后无回执（2026-10-01，BUG-1135～1137）

- **一屏一题干。** 屏幕上只有当前有效焦点打印题干。被替换掉、没人答过的旧题（`superseded` 且无答案，或不是当前焦点的未答题）在它的消息上什么都不画——不留「题干没选项」（推翻 BUG-917 的那种画法）。GET 组装时，最后一条助手消息挂着这种死题而当前焦点还没挂上时，当前焦点占这个位置；客户端挂题时同样把死题换掉，并把正文末尾残留的同一句题干剥掉（`stripQuestionSentences`）。最新消息挂着死题、而 Case 另有活题时，不再显示「没有拿到下一个问题」。
- **复述变短。** 证据轮正文由服务器按本轮入账条目写：两件以内「记下了：2016年入学、2020年毕业。」，三件以上「记下了 N 件事。」。条目来自证据账本（按说出它的那一轮挂到该轮回复上，拒绝与被替换的不算），三件以上时在正文下面放一个默认收起的 `<details class="rectification-recorded-evidence">`，摘要「看记下的 N 件」，展开是逐条列表；两件以内不放。中文日期标签直接接事件（「2016年入学」），ISO 标签保留空格（「2016-09 入学」）。
- **结算后无步骤回执。** 校正回复写作中，步骤行照旧是等待态；结算后整块不画（包括分盘说明句），不再出现「已完成 N 步」。普通对话的结算回执不变。

## 校正开场与步骤回执（2026-09-26，BUG-1049 / BUG-1050）

开场一轮只有两段字：正文讲做法（要把出生时间缩小到更准的范围、现在先在哪段时间里找；你说几件大事和大概年月，我拿去和星盘对照），下面是问题块里的题干（六个例子 + 一个带年月的回答示例）。题干只出现一次：正文里和题干逐句相同或几乎相同的句子才会被去掉；只是开头几个字一样、内容不同的句子保留（以前按前 12 个字判定，把正文里的例子句删掉了）。

2026-10-12（BUG-1307）：服务端已经量过换段时，正文在原来两句中间多一句，说明填的时间离最近会换的地方差几分钟、两边哪几件事不同。本命上升也换时，同一句先说「这里连本命上升都换」，再写其余会变的事；没有其余的事时，这一句就停在「这里连本命上升都换。」，不另起一句。没有新组件、没有新动效。句数上限仍是 3。只知道大概时段、这段时间里不换、或扫描没做成时，口径见 VOICE 同一节。选题顺序的开关默认关，开场不承诺「接下来先问这几件」。只有本命上升在换时也不说这句。

> 2026-10-01 修订：校正回复结算后不再显示步骤回执（BUG-1137），本段只适用于写作中的步骤行。

回答上方的步骤时间线：同一个完成名只出现一行（同一工具调两次、或两个工具共用一个名字，都只算一步），折叠后的「已完成 N 步」数的是读者看得见的行数。完成名与进行中句都写大白话，进行中句沿用 BUG-1047 已批准的「正在准备下一个问题…」「正在记下这件事…」「正在重新对照盘面…」；失败行写「重新对照盘面未完成」这类「在做什么 + 未完成」，不写「重新对照了盘面未完成」。没有新组件、没有新动效。

## 校正打字回答的阶段进度句（2026-09-26，BUG-1047）

生时校正里打字回答一句话，发送的同一帧，这条回复的时间线 live 行就是「收到，正在对照你的档案…」，不再先出现「正在处理…」再干等。服务端先建流、第一行就推这一句，再做意图分类；之后由真实动作推动 `turn.progress`：写入经历 →「正在记下这件事…」，引擎重算 →「正在重新对照盘面…」，经历写完或定下一问 →「正在准备下一个问题…」。阶段只往前走；工具步骤进行中那一行也显示当前阶段句，完成后仍写工具的完成名（「看了你的资料」等，BUG-1050 起为大白话）；步骤之间不再落回「正在分析…」。这仍是 §9 的「流式生成中」：同一个 `InlineSpinner` live 行，没有新组件、没有新动效；结算时连同 live 行一起消失，不进正文、不进历史。选择题点选、开场与只读续轮不变。

## 读者版年运与正文投影（2026-09-25）

年主、Muntha 星座、年度上升与返照时刻分别来自对应年度的真实计算字段，不从年主对象猜补。两种口径不一致时并列注明，不合成单一结论；本地结果不等于完成外部验证。姓名缺失不显示空行，五要素字段使用中文列名。

Bhava Bala 保留完整十二宫力量表；Score / Weight 等领域表头不单独触发整表删除。内部表连同紧邻说明段移除，标题留下，避免后续正常表归错章节。PL9 审计词和长英文段过滤只用于报告正文，聊天导出与安全图盘沿用既有安全规则。不增加入口、等待动画、布局或颜色。

## 报告核对层与独立附录（2026-09-23）

个人报告保留原 Markdown 阅读、目录隔离与 memo 边界；文后独立渲染服务端分盘和事实表。分盘复用 VedicChartSvg 与 chart-grid/chart-card，不使用 float 或负 margin。事实表默认折叠、可键盘展开，横向溢出仅在表格区域滚动，缺数据不补写。Markdown 表里，只有表头含速度、Speed、度数或黄经的数值表（`.personal-report-table-numeric`）单行并按内容撑宽，放不下时在表自己的框里横滑；作用说明、建议这类整句表在页内换行。打印时所有报告表都是页宽，单元格可以换行，纸上不横滑。Sade Sati 明确缺三轮日期。09-24 reader-actions D2 撤下操作区「下载原始附录」入口；相关组件、路由和 helper 因删除权限阻塞暂留源码，不当作完成清理。不接普通下载 fallback、不增加 spinner。旧缓存不升级、不重算；没有结构化层就不显示占位盘。文案遵守 VOICE：不把可计算写成已验证。

事实表用中文列名和领域行列呈现，不把引擎路径当行名。主运、分运与小运、SAV 与 BAV、年度位置与 Saham 分为同组子表；缺失的年度行星位置明确说明，不用本命盘替代。机器溯源路径保留在数据中、不渲染。打印或保存 PDF 前自动展开此核对层全部折叠组，完成或取消后恢复原状态；打印解除表格横向滚动裁剪、重复表头，宽 BAV 表仍保留十二星座列。不新增打印入口或等待动画。

## 校正跨午夜日期与采用（2026-09-20）

复用现有时段选择卡追问一次午夜前/后；不知道或跳过保留填报当天凌晨与深夜两段，不补白昼或次日。选项用中文钟点，继续遵守题卡禁止暴露数字钟点的现有校验，不新增入口、状态或等待动画。

区间交付卡按实际日期序号显示分段；跨申报日明确「前一天 / 后一天」，候选列同时给实际日期与钟点，说明「采用后，排盘使用这一日期和时间；原填报日期保留。」图表库默认显示当前采用的有效日期；原申报日期仍独立保存，不猜补历史结果。沿用原按钮、只读门与代表分钟免责声明，不把采用写成唯一分钟确认。文案已对照 VOICE 的服务端数字来源、短句与采用不等于确认原则。

本命上升的分段展示给出完整本地日历日期与钟点，避免同一个钟点被误读为同一天；历史缺日期的结果仍显示 HH:MM，不猜补。沿用既有布局与颜色，不增加入口、状态或动画。

## 校正历史结果身份只读（2026-09-20）

历史打开、刷新与比较返回的结果若无法核实为当前算法及策略，消息区顶部复用 `rectification-pending-note`、`role="status"` 显示「按旧算法产出。当前暂不能核实结果，请先查看，暂不能选择或采用。」保留原历史内容和来源，不出现强制重算入口；关闭旧结果选项、候选采用及普通输入，输入提示为「当前结果仅供查看」。可信当前身份已知但与旧结果不同，非终止会话可显式点「重新比较」，复用既有发送链路；身份未知时无此入口，服务端再次探测失败也不能重算。此状态不等同 Case 已结束，不显示误导的结束提示或额外「再次校正」按钮。真正终止的历史仍沿用原结束操作。服务端独立核验所有结果写入，不以界面禁用代替权限。无新颜色、加载动画或 Home 状态。

## 普通对话寒暄轮（2026-09-20）

服务端标记 `responseKind: smalltalk` 的回复仅展示正文与既有头像/消息操作，不展示思考面板、活动步骤、已完成步骤或技法证据；刷新后的历史也遵循此规则。分类尚未确定、且没有任何真实 activity/thinking/timeline 时，保留消息位置，不虚构「正在分析」或步骤，不另加 spinner。咨询收到真实活动后恢复既有呈现。完成后读取服务端账户余额，寒暄预留点数原额退回，净点数不变；不增加 Home 状态。

### 星盘页页头、检视卡与手机盘面（2026-10-28，issue #140，BUG-1470）

- 页头一排控件同高 32px、字 13px：「印度盘 / 西洋盘」分段、「生成报告」「带这张盘去对话」。下面的事实胶囊（上升、月亮、太阳、当前大运）高 28px、字 13px，比按钮小一档。依据是签过的原型（`.seg` / `.btn` / `.chip`）。
- 顶栏只有「星盘」和「那一刻的天空」，一行。
- 「盘面检视」卡固定 440px 高，选不选东西都一样高，内容多时卡内滚动，下面的卡片不再跟着跳。
- 聊天页手机底部盘面：只留一层 8px 边距（原来面板、工作区、卡片三层）。
- 全站：组件库零件只写了边框宽度、没写颜色时，用主题边框色（shadcn 的基础规则，`@layer base`）。此前 Tailwind v4 用文字颜色画这些边，深色模式下是一条白线。
- 输入框：`InputGroup` 自带的底色（含深色模式那一层和禁用时的灰）在输入框上全部取消，外框只由 `.composer` 画。