Merge branch 'main' of ssh://ramanujan.glitch.university:2222/glitch-university/gupi-osint-board

In the middle of refactoring the mystery seeding
Keep new evidence visible on the board
2026-08-23 01:16:00 +02:00 · 2026-08-23 01:15:49 +02:00 · 2026-08-23 01:15:05 +02:00 · 2026-08-23 00:43:47 +02:00 · 2026-08-23 00:21:42 +02:00 · 2026-08-22 23:43:33 +02:00
28 changed files with 669 additions and 336 deletions
@@ -0,0 +1,46 @@
+# GUPI production environment TEMPLATE. Copy to /opt/gupi/.env.prod on the server and
+# fill in real values there (never commit real secrets). GUPI runs ONLY its own app
+# container; Postgres + MinIO come from the shared gu_common stack (must already be up).
+#
+# Endpoints:
+#   - Public (frontend, TLS via the proxy):  https://gupi.glitch.university
+#   - Internal (app -> services, plain HTTP): docker hostnames gnommo-db / gnommo-minio
+#     (those hostnames live in docker-compose.prod.yml; here you only set credentials).
+#
+# Deploy with:  ./deploy.sh   (server-side it runs, from /opt/gupi:)
+#   docker compose -f /opt/gupi/docker-compose.prod.yml --env-file /opt/gupi/.env.prod up -d
+
+# --- Shared PostgreSQL (gu_common; reachable as gnommo-db on the shared network) ---
+POSTGRES_USER=gupi
+POSTGRES_PASSWORD=CHANGE_ME
+POSTGRES_DB=gupi
+
+# --- Shared MinIO / S3 (gu_common; reachable as gnommo-minio) ---
+MINIO_ROOT_USER=CHANGE_ME
+MINIO_ROOT_PASSWORD=CHANGE_ME
+S3_REGION=us-east-1
+OSINT_S3_BUCKET=gupi-osint
+
+# --- App ---
+# DOMAIN drives the default public origin (https://gupi.${DOMAIN}); override CORS_ORIGIN
+# directly if the frontend is served somewhere else.
+DOMAIN=glitch.university
+# CORS_ORIGIN=https://gupi.glitch.university
+JWT_SECRET=CHANGE_ME_LONG_RANDOM_SECRET
+LEVEL_EDITING_ENABLED=false
+MAX_DOCUMENT_BYTES=26214400
+
+# --- OCR (evidence text extraction) ---
+OCR_ENABLED=true
+OCR_LANGUAGES=nor+eng
+OCR_TIMEOUT_MS=20000
+MAX_OCR_BYTES=15728640
+MAX_EXTRACTED_TEXT_CHARACTERS=200000
+
+# --- Evidence LLM judge (optional; disabled by default) ---
+EVIDENCE_JUDGE_PROVIDER=disabled
+EVIDENCE_JUDGE_MODEL=
+EVIDENCE_JUDGE_VERSION=evidence_claim_v1
+EVIDENCE_JUDGE_TIMEOUT_MS=10000
+EVIDENCE_JUDGE_MAX_CHARACTERS=20000
+ANTHROPIC_API_KEY=
@@ -1,6 +1,9 @@
 node_modules/
 dist/
 .env
+.env.prod
+.env.local
+.env.*.local
 .DS_Store
 *.tsbuildinfo
 playwright-report/
@@ -9,8 +9,9 @@ if [ "$1" = "--skip-pull" ]; then
 fi

 SERVER="${DEPLOY_SERVER:-root@76.13.144.52}"
-REMOTE_DIR="${DEPLOY_DIR:-/opt/osint-board}"
-COMPOSE="docker compose -f ${REMOTE_DIR}/docker-compose.prod.yml --env-file /opt/gu_common/.env.prod"
+REMOTE_DIR="${DEPLOY_DIR:-/opt/gupi}"
+# GUPI runs from its own dir with its own env; the shared services come from gu_common.
+COMPOSE="docker compose -f ${REMOTE_DIR}/docker-compose.prod.yml --env-file ${REMOTE_DIR}/.env.prod"

 TARGET_HOST=$(echo "${SERVER}" | sed 's/.*@//')
 OWN_IP=$(curl -sf --max-time 3 ifconfig.me 2>/dev/null || echo "unknown")
@@ -54,8 +55,8 @@ rsync -avz --delete \
  --exclude '.DS_Store' \
  ./ "${SERVER}:${REMOTE_DIR}/"

-echo "==> Verifying gu_common configuration..."
-ssh "$SERVER" "test -f /opt/gu_common/.env.prod || { echo 'ERROR: /opt/gu_common/.env.prod is missing'; exit 1; }"
+echo "==> Verifying GUPI environment..."
+ssh "$SERVER" "test -f ${REMOTE_DIR}/.env.prod || { echo 'ERROR: ${REMOTE_DIR}/.env.prod is missing (copy .env.prod.example and fill it in)'; exit 1; }"

 echo "==> Ensuring shared network exists..."
 ssh "$SERVER" "docker network create gnommo 2>/dev/null || true"
@@ -97,4 +98,4 @@ for i in $(seq 1 24); do
  fi
 done

-echo "==> Done! https://osint.glitch.university"
+echo "==> Done! https://gupi.glitch.university"
@@ -8,8 +8,10 @@ services:
    environment:
      NODE_ENV: production
      PORT: 8787
+      # Internal: reach gu_common services by their docker hostnames over plain HTTP.
      DATABASE_URL: postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@gnommo-db:5432/${POSTGRES_DB}
-      CORS_ORIGIN: https://osint.${DOMAIN}
+      # Public: the frontend is served over TLS at gupi.glitch.university by the proxy.
+      CORS_ORIGIN: ${CORS_ORIGIN:-https://gupi.${DOMAIN}}
      JWT_SECRET: ${JWT_SECRET}
      LEVEL_EDITING_ENABLED: ${LEVEL_EDITING_ENABLED:-false}
      MAX_DOCUMENT_BYTES: ${MAX_DOCUMENT_BYTES:-26214400}
@@ -1,119 +0,0 @@
-# Narrative layer: campaigns, NPC cutscenes, and authoring
-
-This roadmap covers the narrative layer end to end: the **campaign** that chains
-levels into a mystery, the **NPCs / poses / cutscenes** the player watches
-between levels, and the **admin authoring panel** that lets a game designer build
-all of it in-app. Work generally proceeds top to bottom.
-
-**Design intent.** These mysteries are real-world scam cases that must actually be
-investigated to be understood. Such cases cannot be simplified, they 
-can only be staged for didactic discovery into levels.
-
-The LLM is not a decoration on the cutscenes — it
-is a **cognitive shim**: the assistant that keeps a player oriented as case
-complexity grows. A player can use this feature many times, but some very bright
-players might get it right on the first go. 
-This is what lets a mystery be as intricate as the real case
-demands without the player getting lost. The scripted narrative layer below is the
-delivery channel and the fallback; the LLM is the layer that scales comprehension.
-Section 9 is deferred in build order but primary in intent, so the model is shaped
-now to accommodate it (the `generated` step kind, the read-only context contract,
-and the authored case model).
-
-## Working agreement
-
- All narrative content — campaigns, NPCs, poses, cutscenes, dialogue text — is
-  authored template data frozen through supported operations. None of it is
-  hard-coded into React components or SQL seed literals. The exception to this rule is 
-  custom cutscenes (react components) which are registered as components and referenced by the node.
- The admin panel is a GUI over the **same** operations available to the manifest
-  importer; both paths freeze the same immutable template data.
- A cutscene never mutates a board. The professor's scene *narrates* the new
-  document and goal; those exhibits and the updated brief already live in the
-  next chapter's template.
- A narrative behavior is complete only when its PostgreSQL representation, API
-  behavior, frontend presentation, persistence, and focused tests agree.
- Pose portraits are immutable shared bytes, stored and cloned exactly like
-  document image assets (MinIO + `objectStorage`); scenes reference assets, they
-  never duplicate them.
-
-## First vertical slice: "The Glass Harbour Diversion"
-
-Build the smallest end-to-end narrative loop before generalizing. Ship these in
-order; each is playable on its own.
-
- [ ] Add the **splash screen** — "PRINCIPAL INVESTIGATOR", Glitch University —
-  with a single **New Game** action that creates a playthrough and launches the
-  first scene (sections 1, 6, 7).
- [ ] Create a mystery named **The Glass Harbour Diversion** as a one-chapter
-  campaign wrapping the existing Glass Harbor level template (sections 1–2).
- [ ] Add a **briefing NPC** (the Glitch University professor) and a
-  `mystery_intro` cutscene that briefs the player, using at least two poses to
-  prove pose-per-utterance (sections 2–3, 7).
- [ ] Wire the briefing to play once on load and mark itself seen, then reveal the
-  first level's board (sections 1, 6, 7).
- [ ] Author **two `level_debrief` end-scenes** the player reaches by reporting
-  back: one that **sends them back to the board** and one that **concludes the
-  mystery**. Model these as two end-of-scene outcomes (buttons), not branching.
- [ ] Leave the back-to-board scene as **scripted** for now, but author it as a
-  `generated`-ready step (section 9) so the professor's hint can later be produced
-  from the player's Case Report explanation.
-
-## 1. Campaign / progression backbone
-
- [ ] Define a **cutscene** node as something a) references a custom react component. 
-  That react can use potential **utterances** such that for example, it can play 
-  an ordered sequence utterance that brief the player: `(speaker NPC, pose, text)`. 
-  A node can be marked has_utterances which permits the admin user to add utterances in order.
-  [ ] A dialogue is another type of node that invokes the standard NPC dialogue component. This
-  has utterances, and consist of a graph where utterances either are spoken by the NPC or available for selection.
-  Example :  if the NPC utters "Are you ready?" this has two child utterances marked "player" which could be "yes" and no. The user may select these. "No" could in principle point back to the same utterance and "yes" to the next. If an utterance has a non NULL terminal id, then the game advances to the node pointed to by that terminal. Available terminals are only those who have the current dialogue node as it parent.
- [ ] There exists "det_gate" nodes and "llm_gate" nodes. We begin with the deterministic gate only. The end result of a level is sent to a "det_gate". The det gate can inspect the output of the level and determine if the story should advance through one of its terminals. For now, the det-gate always returns the happy path terminal leading to the mystery being solved.
-
-## 2. NPC and pose catalog
-
- [ ] Add an **NPC** entity (display name, short role e.g. "Glitch University
-  professor", default pose) owned by the mystery/template family, so casts are
-  authored rather than global magic strings.
- [ ] Add **poses** as named portrait variants of an NPC (`pose_key` such as
-  `neutral`, `concerned`, `wry`, `pointing`), each backed by one immutable image
-  asset via the existing `assets` table + MinIO path.
- [ ] Clone NPCs and pose→asset references (asset bytes reused, not copied) during
-  template freeze and instantiation, mirroring document image cloning.
- [ ] Enforce that every dialogue step names an NPC that exists in the mystery's
-  cast; a **missing pose is never an error**.
- [ ] Resolve a step's portrait at render time with graceful fallback: the
-  requested `pose_key`, else the NPC's **`default`** pose, else **no artwork**
-  (speaker name + text only). This lets authors add poses incrementally and keeps
-  the first slice playable with zero uploaded art.
-
-## 6. API contract
-
- [ ] **New Game / session:** add `POST …/playthroughs` (create for the current
-  `user_id`, per section 1) and `GET …/playthroughs/current` so the splash can
-  offer New Game or Resume; scope every playthrough read/write to the caller's
-  `user_id` so one player cannot touch another's game state.
- [ ] **Play mode:** return a compact `pendingCutscene` payload (slot, ordered
-  steps with resolved NPC name + pose asset URL) when one is due and unseen; add
-  `POST …/playthroughs/:id/cutscenes/:cutsceneId/seen` (idempotent) and
-  `POST …/playthroughs/:id/advance` implementing section 1's transactional advance.
- [ ] **Admin mode:** add authenticated CRUD for mysteries, chapter ordering,
-  NPCs and poses, and dialogue scenes/steps, plus the campaign freeze operation —
-  all behind the existing admin JWT and `edit=1` gate.
- [ ] Keep authoring-only fields (raw pose keys, expected-solution data, unfrozen
-  drafts) out of play-mode responses, consistent with how brief concept
-  `expectedPartyKind` is already hidden in play mode.
-
-
-## Definition of done
-
-A game designer can, in the admin panel, create a mystery, select existing levels
-as ordered chapters, create NPCs and upload named poses, craft dialogue scenes
-choosing a pose per step, and attach those scenes to chapter slots — then freeze
-it. A player lands on the "PRINCIPAL INVESTIGATOR" splash, chooses New Game to
-create a playthrough bound to their identity, watches the professor speak
-line-by-line with a
-changing portrait, investigates each board, reports back to advance a chapter that
-introduces a new document and goal, and reloads at any point without replaying
-seen scenes — with no dialogue text hard-coded in React and no cutscene mutating a
-board.
@@ -2,11 +2,20 @@ import { expect, test } from '@playwright/test'

 test('pasting, connecting, and citing one patent screenshot completes the Scene 7 report lesson', async ({ page, request }) => {
  test.setTimeout(60_000)
-  const levels = await (await request.get('/api/levels')).json() as { id:string }[]
-  const sceneSeven = levels.find(level => level.id.startsWith('barricelli-inventor-proof-case-'))
+  const pageErrors:Error[]=[]
+  page.on('pageerror',error => pageErrors.push(error))
+  let sceneSeven:{ id:string } | undefined
+  await expect.poll(async () => {
+    const levels=await (await request.get('/api/levels')).json() as { id:string }[]
+    sceneSeven=levels.find(level => level.id.startsWith('barricelli-inventor-proof-case-'))
+    return Boolean(sceneSeven)
+  },{ timeout:20_000,message:'Scene 7 playable clone should be seeded' }).toBe(true)
  if (!sceneSeven) throw new Error('Scene 7 playable clone was not seeded')
+  const sceneSevenId=sceneSeven.id

-  await page.goto(`/level/${sceneSeven.id}`)
+  await page.goto(`/level/${sceneSevenId}`)
+  await page.waitForTimeout(250)
+  if (pageErrors.length) throw new Error(`Scene 7 failed to render: ${pageErrors.map(error => error.message).join('; ')}`)
  await expect(page.getByRole('heading', { name:'The Barricelli Files' })).toBeVisible()
  await expect(page.locator('.brief-panel')).toBeVisible()
  await expect(page.locator('.brief-goals')).toContainText('Prove Nils Aall Barricelli was an inventor')
@@ -14,7 +23,7 @@ test('pasting, connecting, and citing one patent screenshot completes the Scene
  await page.getByRole('button', { name:'BEGIN INVESTIGATION',exact:true }).click()

  const uploadResponse = page.waitForResponse(response => response.request().method() === 'POST'
-    && response.url().includes(`/api/levels/${sceneSeven.id}/documents`) && response.status() === 201)
+    && response.url().includes(`/api/levels/${sceneSevenId}/documents`) && response.status() === 201)
  await page.evaluate(async () => {
    const canvas = document.createElement('canvas')
    canvas.width = 1280
@@ -46,6 +55,8 @@ test('pasting, connecting, and citing one patent screenshot completes the Scene
  await page.getByRole('button',{ name:'Classify as Clip' }).click()
  await expect(page.locator('.source-file-widget')).toHaveCount(1)
  await expect(page.locator('.source-file-widget')).toHaveAttribute('data-capture-kind','clipping')
+  await expect(page.locator('.source-file-widget > strong')).toHaveCount(0)
+  await expect(page.locator('.clip-provenance')).toHaveText('ADD DATE + SOURCE')
  await expect(page.locator('.source-file-widget')).toHaveClass(/\barriving\b/)
  await expect(page.locator('.goal-complete-card')).toHaveCount(0)
  await expect(page.locator('.evidence-card.claim')).toContainText('Nils Aall Barricelli was an inventor')
@@ -60,35 +71,48 @@ test('pasting, connecting, and citing one patent screenshot completes the Scene
  await page.getByRole('button',{ name:'FILE',exact:true }).click()
  await page.getByRole('menuitem',{ name:/INFO/ }).click()
  await expect(page.getByLabel('Board presentation')).toHaveValue('clipping')
+  await expect(page.getByLabel('Document title')).toHaveValue('')
+  await page.getByLabel('Published date').fill('1953-08-19')
+  await expect(page.getByLabel('Published time')).toHaveValue('')
+  await page.getByLabel('Source publication').fill('Google Patents · GB695913A')
+  await page.getByLabel('Source URL').fill('https://patents.google.com/patent/GB695913A/en')
+  await page.getByRole('button',{ name:'SAVE METADATA' }).click()
+  await expect(page.locator('.file-editor')).toHaveCount(0)
+  await expect(page.locator('.clip-provenance')).toHaveText('SOURCE RECORDED')
+  await page.getByRole('button',{ name:'FILE',exact:true }).click()
+  await page.getByRole('menuitem',{ name:/INFO/ }).click()
+  await expect(page.getByLabel('Document title')).toHaveValue('Google Patents · GB695913A')
+  await expect(page.getByLabel('Source publication')).toHaveValue('Google Patents · GB695913A')
  await page.getByRole('button',{ name:'Close file editor' }).click()
-  await page.getByRole('button',{ name:'Close document' }).click()
+  await page.getByRole('button',{ name:'Close document',exact:true }).click()

  await page.locator('.evidence-card.claim').click()
  await page.getByRole('button',{ name:'Red thread' }).click()
  await page.locator('.source-file-widget').click()
  await expect(page.locator('.thread-editor')).toBeVisible()
  await expect(page.getByLabel('Thread tag')).toHaveValue('Proof that…')
+  await page.getByLabel('Thread tag').fill('Proof that Nils Aall Barricelli is named as inventor on patent GB695913A.')
  await page.getByRole('button',{ name:'ADD TAG & TIGHTEN' }).click()

  await page.getByRole('button',{ name:'Case report' }).click()
  await expect(page.locator('.case-report')).toBeVisible()
  await expect(page.locator('.report-claim')).toContainText('Nils Aall Barricelli was an inventor')
  await expect(page.locator('.report-evidence')).toContainText('Exhibit 1')
-  await page.getByRole('button',{ name:'SUBMIT CASE REPORT' }).click()
-  await expect(page.locator('.report-verdict')).toContainText("The evidence is good enough, but the report itself won't hold up in court")
-
-  await page.getByLabel('Evidence statement for Exhibit 1').fill('Proof that Nils Aall Barricelli is named as inventor on patent GB695913A.')
-  await page.getByLabel('Date for Exhibit 1').fill('1953-08-19')
-  await page.getByLabel('Source for Exhibit 1').fill('Google Patents · GB695913A')
-  await page.getByLabel('Source link for Exhibit 1').fill('https://patents.google.com/patent/GB695913A/en')
+  await expect(page.locator('.report-evidence')).toContainText('Proof that Nils Aall Barricelli is named as inventor on patent GB695913A.')
+  await expect(page.locator('.report-evidence')).toContainText('1953-08-19')
+  await expect(page.locator('.report-evidence')).toContainText('Google Patents · GB695913A')
+  await expect(page.locator('.report-evidence a')).toHaveAttribute('href','https://patents.google.com/patent/GB695913A/en')
  await page.getByRole('button',{ name:'SUBMIT CASE REPORT' }).click()
  await expect(page.locator('.report-verdict')).toContainText('Case report accepted')
  await expect(page.getByRole('button',{ name:/CLOSE CASE/ })).toBeVisible()

-  const level = await (await request.get(`/api/levels/${sceneSeven.id}`)).json()
+  const level = await (await request.get(`/api/levels/${sceneSevenId}`)).json()
  expect(level.goals).toEqual([expect.objectContaining({ key:'barricelli.inventor-proof',status:'complete',newlyCompleted:false })])
-  expect(level.exhibits.filter((exhibit: { type:string }) => exhibit.type === 'document')).toEqual([
-    expect.objectContaining({ captureKind:'clipping',width:210,height:194 }),
+  const savedDocuments=level.exhibits.filter((exhibit: { type:string }) => exhibit.type === 'document')
+  expect(savedDocuments).toEqual([
+    expect.objectContaining({ title:'Google Patents · GB695913A',captureKind:'clipping',width:230,height:290 }),
  ])
+  expect(savedDocuments[0].rotation).toBeGreaterThanOrEqual(-10)
+  expect(savedDocuments[0].rotation).toBeLessThanOrEqual(10)
  expect(level.report).toMatchObject({ status:'accepted',investigatorName:'Player' })
 })
@@ -0,0 +1,6 @@
+ALTER TABLE osint.note_exhibits
+  ADD COLUMN presentation_kind TEXT NOT NULL DEFAULT 'luggage'
+  CHECK (presentation_kind IN ('luggage', 'lined_sheet'));
+
+COMMENT ON COLUMN osint.note_exhibits.presentation_kind IS
+  'Visual presentation of a note exhibit. Notebook tear-outs use lined_sheet; ordinary working notes use luggage.';
@@ -0,0 +1,9 @@
+UPDATE osint.exhibits AS exhibit
+SET width = 220,
+    height = 272,
+    updated_at = NOW()
+FROM osint.document_exhibits AS document
+WHERE document.exhibit_id = exhibit.id
+  AND document.capture_kind_id = 'clipping'
+  AND exhibit.width = 210
+  AND exhibit.height = 194;
@@ -0,0 +1,13 @@
+UPDATE osint.document_exhibits AS document
+SET title = document.citation_text
+WHERE document.capture_kind_id = 'clipping'
+  AND BTRIM(document.citation_text) <> ''
+  AND (
+    BTRIM(document.title) = ''
+    OR EXISTS (
+      SELECT 1
+      FROM osint.assets AS asset
+      WHERE asset.id = document.asset_id
+        AND document.title = asset.original_name
+    )
+  );
@@ -0,0 +1,8 @@
+UPDATE osint.exhibits AS exhibit
+SET height = 220,
+    updated_at = NOW()
+FROM osint.document_exhibits AS document
+WHERE document.exhibit_id = exhibit.id
+  AND document.capture_kind_id = 'clipping'
+  AND exhibit.width = 220
+  AND exhibit.height = 272;
@@ -0,0 +1,22 @@
+UPDATE osint.exhibits AS exhibit
+SET width = 220,
+    height = 220,
+    updated_at = NOW()
+FROM osint.document_exhibits AS document
+WHERE document.exhibit_id = exhibit.id
+  AND document.capture_kind_id = 'clipping'
+  AND (exhibit.width <> 220 OR exhibit.height <> 220);
+
+UPDATE osint.document_exhibits AS document
+SET title = document.citation_text
+WHERE document.capture_kind_id = 'clipping'
+  AND BTRIM(document.citation_text) <> ''
+  AND (
+    BTRIM(document.title) = ''
+    OR EXISTS (
+      SELECT 1
+      FROM osint.assets AS asset
+      WHERE asset.id = document.asset_id
+        AND document.title = asset.original_name
+    )
+  );
@@ -0,0 +1,8 @@
+UPDATE osint.exhibits AS exhibit
+SET width = 230,
+    height = 290,
+    updated_at = NOW()
+FROM osint.document_exhibits AS document
+WHERE document.exhibit_id = exhibit.id
+  AND document.capture_kind_id = 'clipping'
+  AND (exhibit.width <> 230 OR exhibit.height <> 290);
@@ -0,0 +1,20 @@
+{
+  "slug": "barricelli-phone-note",
+  "name": "Phone note",
+  "title": "Phone note",
+  "subtitle": "",
+  "brief": { "body": "", "concepts": [] },
+  "documents": [],
+  "folders": [],
+  "notes": [
+    {
+      "title": "Note",
+      "content": "PHONE FOR GLITCH HUNTER\n\nCall: 5550100",
+      "presentation": "luggage",
+      "x": 420,
+      "y": 260,
+      "width": 230,
+      "height": 180
+    }
+  ]
+}
@@ -1,8 +1,8 @@
 import { randomUUID } from 'node:crypto'
-import { readFile } from 'node:fs/promises'
+import { readFile, stat } from 'node:fs/promises'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
-import type { CaseDocument, CaseState, ClaimExhibit, DocumentCaptureKind, PartyKind, SourceFileType } from '../src/types.js'
+import type { CaseDocument, CaseState, ClaimExhibit, DocumentCaptureKind, NoteExhibit, NotePresentation, PartyKind, SourceFileType } from '../src/types.js'

 type MysteryDocument = {
  key: string
@@ -37,22 +37,28 @@ type MysterySemanticRule = {
  goalKey:string; name:string; targetSubject:string; relatedSubject?:string; assertion:string; successFlagKey:string
  relatedFlagKey?:string; minimumConfidence?:number; evaluatorVersion?:string; enabled?:boolean
 }
-type MysteryManifest = {
+// A single playable board (level template). Assets are filenames resolved against
+// the mystery folder (e.g. "assets/photo.png"), matching the on-disk layout.
+type MysteryLevel = {
  slug: string
  name: string
  title: string
-  subtitle: string
+  subtitle?: string
  timelineRange?: { start: string; end: string }
-  brief: { body: string; concepts: { label: string; context: string; expectedPartyKind: PartyKind }[] }
-  documents: MysteryDocument[]
-  folders: { key: string; title: string; content: string; x: number; y: number; width: number; members: string[] }[]
+  brief?: { body: string; concepts: { label: string; context: string; expectedPartyKind: PartyKind }[] }
+  documents?: MysteryDocument[]
+  folders?: { key: string; title: string; content: string; x: number; y: number; width: number; members: string[] }[]
  claims?: { key:string;statement:string;x:number;y:number;width?:number;height?:number }[]
+  notes?: { title?:string;content:string;presentation?:NotePresentation;x:number;y:number;width?:number;height?:number }[]
  report?: { title?:string;requiredForCompletion?:boolean }
  goals?: MysteryGoal[]
  evidenceMatchRules?: MysteryEvidenceMatchRule[]
  evidenceSemanticRules?: MysterySemanticRule[]
-  narrative?: MysteryNarrative
 }
+// Legacy single-manifest: one level plus an optional narrative in the same file.
+type MysteryManifest = MysteryLevel & { narrative?: MysteryNarrative }
+// New self-contained format: a mystery with every level it uses embedded.
+type MysteryFile = { slug: string; title: string; levels: MysteryLevel[]; narrative?: MysteryNarrative }

 function requireOk(response: Response, action: string) {
  if (response.ok) return response
@@ -75,24 +81,30 @@ async function uploadAsset(baseUrl: string, levelId: string, manifestDir: string
  return await response.json() as CaseDocument
 }

-export async function importMysteryTemplate(manifestPath: string, baseUrl = 'http://localhost:8787', adminJwt = process.env.OSINT_ADMIN_JWT) {
-  const absoluteManifest = path.resolve(manifestPath)
-  const manifest = JSON.parse(await readFile(absoluteManifest, 'utf8')) as MysteryManifest
-  const manifestDir = path.dirname(absoluteManifest)
-  const authoringId = `${manifest.slug}-authoring-${Date.now()}`
+type ImportHeaders = Record<string, string>
+function authHeaders(adminJwt?: string): { authorization?: string; headers: ImportHeaders } {
  const authorization = adminJwt ? `Bearer ${adminJwt}` : undefined
-  const headers = { 'content-type': 'application/json', ...(authorization ? { authorization } : {}) }
+  return { authorization, headers: { 'content-type': 'application/json', ...(authorization ? { authorization } : {}) } }
+}
+
+type LevelResult = { template: { slug: string; currentVersion: number }; authoringLevelId: string; playableLevel: CaseState }
+
+// Import one board: create a mutable authoring level, upload assets, save exhibits,
+// goals and evidence rules, freeze an immutable template, and instantiate a playable copy.
+async function importLevel(baseUrl: string, folderDir: string, level: MysteryLevel, headers: ImportHeaders, authorization?: string): Promise<LevelResult> {
+  const authoringId = `${level.slug}-authoring-${Date.now()}`
  const createdResponse = await requireOk(await fetch(`${baseUrl}/api/levels`, {
    method: 'POST', headers,
-    body: JSON.stringify({ id: authoringId, title: manifest.title, subtitle: manifest.subtitle }),
+    body: JSON.stringify({ id: authoringId, title: level.title, subtitle: level.subtitle || '' }),
  }), 'Create authoring level')
  const state = await createdResponse.json() as CaseState

  const documentPositions = new Map<string, { x: number; y: number }>()
-  manifest.folders.forEach((folder, folderIndex) => folder.members.forEach((key, memberIndex) => documentPositions.set(key, { x: folder.x + 70 + memberIndex * 205, y: folder.y + 230 + folderIndex * 35 })))
+  const levelFolders = level.folders || []
+  levelFolders.forEach((folder, folderIndex) => folder.members.forEach((key, memberIndex) => documentPositions.set(key, { x: folder.x + 70 + memberIndex * 205, y: folder.y + 230 + folderIndex * 35 })))
  const documents = new Map<string, CaseDocument>()
-  for (const source of manifest.documents) {
-    const uploaded = await uploadAsset(baseUrl, state.id, manifestDir, source, authorization)
+  for (const source of level.documents || []) {
+    const uploaded = await uploadAsset(baseUrl, state.id, folderDir, source, authorization)
    documents.set(source.key, {
      id: uploaded?.id || randomUUID(), type: 'document', title: source.title, publishedAt: source.publishedAt,
      x: documentPositions.get(source.key)?.x || 100, y: documentPositions.get(source.key)?.y || 100,
@@ -103,17 +115,19 @@ export async function importMysteryTemplate(manifestPath: string, baseUrl = 'htt
    })
  }

-  const folderIds = new Map(manifest.folders.map(folder => [folder.key, randomUUID()]))
-  state.brief = { body: manifest.brief.body, concepts: manifest.brief.concepts.map(concept => ({ id: randomUUID(), ...concept })) }
-  state.views = state.views.map(view => view.type === 'timeline' ? { ...view, rangeMode: manifest.timelineRange ? 'fixed' : 'auto', range: manifest.timelineRange } : view)
-  const folders = manifest.folders.map(folder => ({
+  const folderIds = new Map(levelFolders.map(folder => [folder.key, randomUUID()]))
+  if (level.brief) state.brief = { body: level.brief.body, concepts: level.brief.concepts.map(concept => ({ id: randomUUID(), ...concept })) }
+  state.views = state.views.map(view => view.type === 'timeline' ? { ...view, rangeMode: level.timelineRange ? 'fixed' : 'auto', range: level.timelineRange } : view)
+  const folders = levelFolders.map(folder => ({
    id: folderIds.get(folder.key)!, type: 'folder', title: folder.title, content: folder.content,
    x: folder.x, y: folder.y, width: folder.width, height: 166, rotation: 0, zIndex: 1, hidden: false, isOpen: false,
  } as const))
-  const claims:ClaimExhibit[]=(manifest.claims || []).map(claim => ({ id:randomUUID(),type:'claim',title:claim.statement,statement:claim.statement,
+  const claims:ClaimExhibit[]=(level.claims || []).map(claim => ({ id:randomUUID(),type:'claim',title:claim.statement,statement:claim.statement,
    x:claim.x,y:claim.y,width:claim.width || 310,height:claim.height || 180,rotation:0,zIndex:2,hidden:false }))
-  state.exhibits = [...documents.values(), ...folders,...claims]
-  state.relations = manifest.folders.flatMap(folder => folder.members.map((key, memberIndex) => {
+  const notes:NoteExhibit[]=(level.notes || []).map(note => ({ id:randomUUID(),type:'note',title:note.title || 'NOTE',content:note.content,
+    presentation:note.presentation || 'luggage',x:note.x,y:note.y,width:note.width || 230,height:note.height || 180,rotation:0,zIndex:2,hidden:false }))
+  state.exhibits = [...documents.values(), ...folders,...claims,...notes]
+  state.relations = levelFolders.flatMap(folder => folder.members.map((key, memberIndex) => {
    const document = documents.get(key)
    if (!document) throw new Error(`Folder ${folder.key} refers to unknown document ${key}`)
    return {
@@ -122,26 +136,26 @@ export async function importMysteryTemplate(manifestPath: string, baseUrl = 'htt
    }
  }))
  state.connections = []
-  state.report=manifest.report ? { title:manifest.report.title || 'Case Report',investigatorName:'',requiredForCompletion:manifest.report.requiredForCompletion !== false,
+  state.report=level.report ? { title:level.report.title || 'Case Report',investigatorName:'',requiredForCompletion:level.report.requiredForCompletion !== false,
    status:'draft',issues:[],claims:[] } : undefined
  state.viewport = { x: 0, y: 28, zoom: 0.7 }

  await requireOk(await fetch(`${baseUrl}/api/levels/${state.id}?edit=1`, {
    method: 'PUT', headers, body: JSON.stringify(state),
-  }), 'Save authored mystery')
+  }), 'Save authored level')

  const goalIds = new Map<string,string>()
-  for (const goal of manifest.goals || []) {
+  for (const goal of level.goals || []) {
    const response = await requireOk(await fetch(`${baseUrl}/api/levels/${state.id}/goals`, {
      method:'POST',headers,body:JSON.stringify(goal),
    }), `Create goal ${goal.key}`)
    const created = await response.json() as { id:string;key:string }
    goalIds.set(created.key,created.id)
  }
-  for (const rule of manifest.evidenceMatchRules || []) await requireOk(await fetch(
+  for (const rule of level.evidenceMatchRules || []) await requireOk(await fetch(
    `${baseUrl}/api/levels/${state.id}/evidence-match-rules`, { method:'POST',headers,body:JSON.stringify(rule) }),
  `Create evidence match rule ${rule.name}`)
-  for (const rule of manifest.evidenceSemanticRules || []) {
+  for (const rule of level.evidenceSemanticRules || []) {
    const goalId = goalIds.get(rule.goalKey)
    if (!goalId) throw new Error(`Semantic evidence rule ${rule.name} refers to unknown goal ${rule.goalKey}`)
    await requireOk(await fetch(`${baseUrl}/api/levels/${state.id}/evidence-semantic-rules`, {
@@ -149,47 +163,72 @@ export async function importMysteryTemplate(manifestPath: string, baseUrl = 'htt
    }), `Create semantic evidence rule ${rule.name}`)
  }
  const templateResponse = await requireOk(await fetch(`${baseUrl}/api/levels/${state.id}/templates?edit=1`, {
-    method: 'POST', headers, body: JSON.stringify({ slug: manifest.slug, name: manifest.name }),
-  }), 'Freeze mystery template')
+    method: 'POST', headers, body: JSON.stringify({ slug: level.slug, name: level.name || level.title }),
+  }), 'Freeze level template')
  const template = await templateResponse.json() as { slug: string; currentVersion: number }

-  // Author the mystery and its NPC cast; the flow lives in the story graph, seeded below.
-  let mystery: { slug: string } | undefined
-  if (manifest.narrative) {
-    const mysteryResponse = await requireOk(await fetch(`${baseUrl}/api/mysteries?edit=1`, {
-      method: 'POST', headers, body: JSON.stringify({ slug: manifest.slug, title: manifest.title, cast: manifest.narrative.cast }),
-    }), 'Author narrative mystery')
-    mystery = await mysteryResponse.json() as { slug: string }
+  const playableId = `${level.slug}-case-${Date.now()}`
+  const playableResponse = await requireOk(await fetch(`${baseUrl}/api/templates/${level.slug}/levels?edit=1`, {
+    method: 'POST', headers, body: JSON.stringify({ id: playableId, title: level.title }),
+  }), 'Instantiate playable level')
+  const playable = await playableResponse.json() as CaseState
+  return { template, authoringLevelId: state.id, playableLevel: playable }
+}

-    // Seed the story flow graph (default authored content that survives re-imports).
-    if (manifest.narrative.graph) {
+// Author the narrative mystery (NPC cast) and seed its story flow graph.
+async function importNarrative(baseUrl: string, slug: string, title: string, narrative: MysteryNarrative, headers: ImportHeaders, authorization?: string): Promise<{ slug: string }> {
+  const mysteryResponse = await requireOk(await fetch(`${baseUrl}/api/mysteries?edit=1`, {
+    method: 'POST', headers, body: JSON.stringify({ slug, title, cast: narrative.cast }),
+  }), 'Author narrative mystery')
+  const mystery = await mysteryResponse.json() as { slug: string }
+  if (narrative.graph) {
    const listResponse = await requireOk(await fetch(`${baseUrl}/api/admin/mysteries`, { headers: authorization ? { authorization } : undefined }), 'List mysteries')
    const mysteries = await listResponse.json() as { id: string; slug: string }[]
-      const mysteryId = mysteries.find(m => m.slug === manifest.slug)?.id
+    const mysteryId = mysteries.find(m => m.slug === slug)?.id
    if (mysteryId) await requireOk(await fetch(`${baseUrl}/api/admin/mysteries/${mysteryId}/graph`, {
-        method: 'POST', headers, body: JSON.stringify(manifest.narrative.graph),
+      method: 'POST', headers, body: JSON.stringify(narrative.graph),
    }), 'Seed story graph')
  }
-  }
+  return mystery
+}

-  const playableId = `${manifest.slug}-case-${Date.now()}`
-  const playableResponse = await requireOk(await fetch(`${baseUrl}/api/templates/${manifest.slug}/levels?edit=1`, {
-    method: 'POST', headers, body: JSON.stringify({ id: playableId, title: manifest.title }),
-  }), 'Instantiate playable mystery')
-  const playable = await playableResponse.json() as CaseState
-  return { manifest, template, mystery, authoringLevelId: state.id, playableLevel: playable }
+// Legacy single-manifest import: one level plus an optional narrative in the same file.
+export async function importMysteryTemplate(manifestPath: string, baseUrl = 'http://localhost:8787', adminJwt = process.env.OSINT_ADMIN_JWT) {
+  const absoluteManifest = path.resolve(manifestPath)
+  const manifest = JSON.parse(await readFile(absoluteManifest, 'utf8')) as MysteryManifest
+  const folderDir = path.dirname(absoluteManifest)
+  const { headers, authorization } = authHeaders(adminJwt)
+  const { narrative, ...level } = manifest
+  const result = await importLevel(baseUrl, folderDir, level, headers, authorization)
+  const mystery = narrative ? await importNarrative(baseUrl, manifest.slug, manifest.title, narrative, headers, authorization) : undefined
+  return { manifest, template: result.template, mystery, authoringLevelId: result.authoringLevelId, playableLevel: result.playableLevel }
+}
+
+// New self-contained import: a mystery folder (or single-file) with every level embedded.
+// Accepts a directory (uses <dir>/mystery.json) or a manifest path; falls back to the
+// legacy path when the file has no top-level `levels` array.
+export async function importMystery(inputPath: string, baseUrl = 'http://localhost:8787', adminJwt = process.env.OSINT_ADMIN_JWT) {
+  const resolved = path.resolve(inputPath)
+  const manifestPath = (await stat(resolved)).isDirectory() ? path.join(resolved, 'mystery.json') : resolved
+  const parsed = JSON.parse(await readFile(manifestPath, 'utf8')) as MysteryFile | MysteryManifest
+  if (!Array.isArray((parsed as MysteryFile).levels)) return importMysteryTemplate(manifestPath, baseUrl, adminJwt)
+  const file = parsed as MysteryFile
+  const folderDir = path.dirname(manifestPath)
+  const { headers, authorization } = authHeaders(adminJwt)
+  const levels: LevelResult[] = []
+  for (const level of file.levels) levels.push(await importLevel(baseUrl, folderDir, level, headers, authorization))
+  const mystery = file.narrative ? await importNarrative(baseUrl, file.slug, file.title, file.narrative, headers, authorization) : undefined
+  return { slug: file.slug, title: file.title, levels, mystery }
 }

 const invokedPath = process.argv[1] ? path.resolve(process.argv[1]) : ''
 if (invokedPath === fileURLToPath(import.meta.url)) {
-  const manifestPath = process.argv[2]
-  if (!manifestPath) throw new Error('Usage: npm run mystery:import -- <manifest.json>')
-  const result = await importMysteryTemplate(manifestPath, process.env.OSINT_BOARD_URL)
-  console.log(JSON.stringify({
-    template: `${result.template.slug}@v${result.template.currentVersion}`,
-    mystery: result.mystery ? result.mystery.slug : undefined,
-    authoringLevelId: result.authoringLevelId,
-    playableLevelId: result.playableLevel.id,
-    playUrl: `${process.env.OSINT_BOARD_URL || 'http://localhost:8787'}/`,
-  }, null, 2))
+  const inputPath = process.argv[2]
+  if (!inputPath) throw new Error('Usage: npm run mystery:import -- <mystery-folder | manifest.json>')
+  const result = await importMystery(inputPath, process.env.OSINT_BOARD_URL)
+  const playUrl = `${process.env.OSINT_BOARD_URL || 'http://localhost:8787'}/`
+  const summary = 'levels' in result
+    ? { mystery: result.mystery?.slug, levels: result.levels.map(l => `${l.template.slug}@v${l.template.currentVersion}`), playUrl }
+    : { template: `${result.template.slug}@v${result.template.currentVersion}`, mystery: result.mystery?.slug, authoringLevelId: result.authoringLevelId, playableLevelId: result.playableLevel.id, playUrl }
+  console.log(JSON.stringify(summary, null, 2))
 }
@@ -104,7 +104,7 @@ suite('normalized level persistence API', () => {
    const document: DocumentExhibit = { id: randomUUID(), type: 'document', title: 'Evidence', publishedAt: '2021-04-17T12:00:00Z', body: ['Extracted body'], regions: [{ id: 'stamp', label: 'Date stamp', excerpt: '17 April 2021', date: '2021-04-17T09:00:00Z' }], fileType: 'image', captureKind:'full_page',metadata: {}, ...placed(1051, 417, 205, 282, 2) }
    const gatedDocument: DocumentExhibit = { id: randomUUID(), type: 'document', title: 'Later tip', body: [], regions: [], fileType: 'image', captureKind:'clipping',metadata: {}, requiredFlags: ['tip.received'], ...placed(1260, 417, 210, 178, 3) }
    const folder: FolderExhibit = { id: randomUUID(), type: 'folder', title: 'Folder', content: 'Evidence folder', isOpen: true, ...placed(685, 417, 260, 166) }
-    const note: NoteExhibit = { id: randomUUID(), type: 'note', title: 'Extract', content: 'Date matters', ...placed(420, 300, 108, 154) }
+    const note: NoteExhibit = { id:randomUUID(),type:'note',title:'Extract',content:'Date matters',presentation:'lined_sheet',...placed(420,300,220,270) }
    const event: EventExhibit = { id: randomUUID(), type: 'event', title: 'The meeting occurred', content: 'The evidence places the meeting on 18 April.', eventDate: '2021-04-18T14:30:00Z', ...placed(520, 610, 270, 174) }
    const party: PartyExhibit = { id: randomUUID(), type: 'party', partyKind: 'person', title: 'Ada Lovelace', content: 'Named as correspondent.', aliases: ['A. A. L.'], ...placed(720, 250, 280, 190) }
    state.exhibits = [document, gatedDocument, folder, note, event, party]
@@ -123,6 +123,7 @@ suite('normalized level persistence API', () => {
    const loaded = await (await adminFetch(`${baseUrl}/api/levels/${state.id}?edit=1`)).json() as CaseState
    expect(loaded.views[0]).toMatchObject({ type: 'timeline', rangeMode: 'fixed', range: timeline.range })
    expect(loaded.exhibits.find(item => item.id === folder.id)).toMatchObject({ x: 685, y: 417, isOpen: true })
+    expect(loaded.exhibits.find(item => item.id === note.id)).toMatchObject({ presentation:'lined_sheet',width:220,height:270 })
    expect(loaded.exhibits.find(item => item.id === document.id)).toMatchObject({ captureKind:'full_page',width:205,height:282 })
    expect(loaded.relations).toEqual(expect.arrayContaining([expect.objectContaining({ type: 'supports', fromExhibitId: event.id, toExhibitId: note.id })]))
    expect(loaded.connections[0]).toMatchObject({ fromExhibitId: folder.id, toExhibitId: document.id, label: 'Primary source' })
@@ -234,6 +235,7 @@ suite('normalized level persistence API', () => {
    expect(clone.exhibits.find(item => item.type === 'folder')).toMatchObject({ x: 685, y: 417 })
    expect(clone.relations.filter(relation => relation.type === 'supports')).toHaveLength(2)
    expect(clone.connections[0]).toMatchObject({ label: 'Primary source', tightness: 85 })
+    expect(clone.exhibits.find(item => item.type === 'note')).toMatchObject({ presentation:'lined_sheet',width:220,height:270 })
    expect(clone.brief.concepts[0].resolvedPartyExhibitId).not.toBe(party.id)
    const authoredClone = await (await adminFetch(`${baseUrl}/api/levels/${clone.id}?edit=1`)).json() as CaseState
    expect(authoredClone.exhibits.find(item => item.type === 'document' && item.title === 'Later tip')).toMatchObject({ captureKind:'clipping',requiredFlags: ['tip.received'] })
@@ -250,6 +252,37 @@ suite('normalized level persistence API', () => {
    ])
  })

+  it('evaluates existing documents when an evidence fingerprint is added later', async () => {
+    const created = await adminFetch(`${baseUrl}/api/levels`, {
+      method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({ id:'late-evidence-rule',title:'Late evidence rule' }),
+    })
+    expect(created.status).toBe(201)
+    const level = await created.json() as CaseState
+    const upload = new FormData()
+    upload.append('file',new Blob(['Archive patent 93585 names Niels Aall Baricelli and describes a Koffert-kommode.'],{ type:'text/plain' }),'patent.txt')
+    const uploaded = await (await fetch(`${baseUrl}/api/levels/${level.id}/documents`,{ method:'POST',body:upload })).json() as DocumentExhibit & {
+      analysis:{ matchedFlags:string[] }
+    }
+    expect(uploaded.analysis.matchedFlags).toEqual([])
+
+    const rule = await adminFetch(`${baseUrl}/api/levels/${level.id}/evidence-match-rules`,{
+      method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({
+        name:'Late National Library fingerprint',flagKey:'late.patent-recognized',minimumAnchorMatches:2,
+        anchors:[
+          { phrase:'Archive patent 93585 names Niels Aall Baricelli',minimumSimilarity:.7 },
+          { phrase:'describes a Koffert-kommode',minimumSimilarity:.7 },
+        ],
+      }),
+    })
+    expect(rule.status).toBe(201)
+    expect(await (await adminFetch(`${baseUrl}/api/levels/${level.id}/flags`)).json()).toEqual([
+      expect.objectContaining({ key:'late.patent-recognized',earnedAt:expect.any(String) }),
+    ])
+    const evaluation = await appPool.query<{ matched:boolean;matched_anchor_count:number }>(
+      'SELECT matched,matched_anchor_count FROM osint.evidence_match_evaluations WHERE document_exhibit_id=$1',[uploaded.id])
+    expect(evaluation.rows).toEqual([{ matched:true,matched_anchor_count:2 }])
+  })
+
  it('imports the data-defined Scene 7 template with its private recognition rules', async () => {
    const { importMysteryTemplate } = await import('../scripts/importMysteryTemplate.js')
    const manifestPath = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', 'mysteries', 'barricelli-scene-7', 'mystery.json')
@@ -299,7 +332,7 @@ suite('normalized level persistence API', () => {
    relatedState.connections.push({ id:relatedConnectionId,fromExhibitId:relatedClaim.id,toExhibitId:fatherDocument.id,label:'Proof that the Barricelli family included an inventor.',tightness:65,tagStyle:'luggage',tagPosition:50,tagOffset:0 })
    expect((await fetch(`${baseUrl}/api/levels/${relatedState.id}`,{ method:'PUT',headers:{'content-type':'application/json'},body:JSON.stringify(relatedState) })).status).toBe(200)
    const relatedSubmission=await (await fetch(`${baseUrl}/api/levels/${relatedState.id}/report/submissions`,{ method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({
-      investigatorName:'Test Player',evidence:[{ connectionId:relatedConnectionId,documentExhibitId:fatherDocument.id,relationText:'Proof that the Barricelli family included an inventor.' }],
+      investigatorName:'Test Player',
    }) })).json()
    expect(relatedSubmission).toMatchObject({ status:'evidence_insufficient',issues:expect.arrayContaining(['missing_accepted_evidence','connected_evidence_unverified']),
      feedback:expect.stringContaining('related person rather than the claim subject'),claims:[expect.objectContaining({ evidence:[expect.objectContaining({
@@ -319,14 +352,24 @@ suite('normalized level persistence API', () => {
    reportState.connections.push({ id:connectionId,fromExhibitId:claim.id,toExhibitId:targetDocument.id,label:'Proof that…',tightness:65,tagStyle:'luggage',tagPosition:50,tagOffset:0 })
    expect((await fetch(`${baseUrl}/api/levels/${reportState.id}`,{ method:'PUT',headers:{'content-type':'application/json'},body:JSON.stringify(reportState) })).status).toBe(200)
    const incomplete=await fetch(`${baseUrl}/api/levels/${reportState.id}/report/submissions`,{ method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({
-      investigatorName:'Test Player',evidence:[{ connectionId,documentExhibitId:targetDocument.id,relationText:'Proof that…' }],
+      investigatorName:'Test Player',
+      // Legacy/forged report fields must not mutate board-owned provenance.
+      evidence:[{ connectionId,documentExhibitId:targetDocument.id,relationText:'Forged complete statement',publishedAt:'1953-08-19',sourceCitation:'Forged source' }],
    }) })
    expect(incomplete.status).toBe(201)
    expect(await incomplete.json()).toMatchObject({ status:'evidence_accepted_report_incomplete',issues:expect.arrayContaining(['unfinished_relation','missing_date','missing_source']),
      feedback:"The evidence is good enough, but the report itself won't hold up in court. Add the date, cite the source, and provide the link if you can. Then we can accept it." })
+    const targetOnBoard=reportState.exhibits.find(exhibit => exhibit.type === 'document' && exhibit.id === targetDocument.id)
+    if (!targetOnBoard || targetOnBoard.type !== 'document') throw new Error('Target document missing from board')
+    targetOnBoard.publishedAt='1953-08-19T00:00:00.000Z'
+    targetOnBoard.sourceCitation='Google Patents · GB695913A'
+    targetOnBoard.sourceUri='https://patents.google.com/patent/GB695913A/en'
+    const targetConnection=reportState.connections.find(connection => connection.id === connectionId)
+    if (!targetConnection) throw new Error('Target connection missing from board')
+    targetConnection.label='Proof that Barricelli is named as the inventor on patent GB695913A.'
+    expect((await fetch(`${baseUrl}/api/levels/${reportState.id}`,{ method:'PUT',headers:{'content-type':'application/json'},body:JSON.stringify(reportState) })).status).toBe(200)
    const accepted=await fetch(`${baseUrl}/api/levels/${reportState.id}/report/submissions`,{ method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({
-      investigatorName:'Test Player',evidence:[{ connectionId,documentExhibitId:targetDocument.id,relationText:'Proof that Barricelli is named as the inventor on patent GB695913A.',
-        publishedAt:'1953-08-19',sourceCitation:'Google Patents · GB695913A',sourceUri:'https://patents.google.com/patent/GB695913A/en' }],
+      investigatorName:'Test Player',
    }) })
    expect(accepted.status).toBe(201)
    const acceptedBody=await accepted.json()
@@ -345,10 +388,14 @@ suite('normalized level persistence API', () => {
    const repeatedState=await (await fetch(`${baseUrl}/api/levels/${reportState.id}`)).json() as CaseState
    const repeatedConnectionId=randomUUID()
    repeatedState.connections.push({ id:repeatedConnectionId,fromExhibitId:claim.id,toExhibitId:repeatedDocument.id,label:'Proof that Barricelli is named as the inventor on patent GB695913A.',tightness:65,tagStyle:'luggage',tagPosition:50,tagOffset:0 })
+    const repeatedOnBoard=repeatedState.exhibits.find(exhibit => exhibit.type === 'document' && exhibit.id === repeatedDocument.id)
+    if (!repeatedOnBoard || repeatedOnBoard.type !== 'document') throw new Error('Repeated document missing from board')
+    repeatedOnBoard.publishedAt='1953-08-19T00:00:00.000Z'
+    repeatedOnBoard.sourceCitation='Google Patents · GB695913A'
+    repeatedOnBoard.sourceUri='https://patents.google.com/patent/GB695913A/en'
    expect((await fetch(`${baseUrl}/api/levels/${repeatedState.id}`,{ method:'PUT',headers:{'content-type':'application/json'},body:JSON.stringify(repeatedState) })).status).toBe(200)
    const repeatedReport=await (await fetch(`${baseUrl}/api/levels/${repeatedState.id}/report/submissions`,{ method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({
-      investigatorName:'Test Player',evidence:[{ connectionId:repeatedConnectionId,documentExhibitId:repeatedDocument.id,relationText:'Proof that Barricelli is named as the inventor on patent GB695913A.',
-        publishedAt:'1953-08-19',sourceCitation:'Google Patents · GB695913A',sourceUri:'https://patents.google.com/patent/GB695913A/en' }],
+      investigatorName:'Test Player',
    }) })).json()
    expect(repeatedReport).toMatchObject({ status:'accepted',claims:[expect.objectContaining({ evidence:expect.arrayContaining([expect.objectContaining({
      documentExhibitId:repeatedDocument.id,evidenceAccepted:true,verification:expect.objectContaining({ status:'accepted' }),
@@ -34,9 +34,12 @@ export function hasAdminClaim(req: Request) {
 * when the external handoff is wired — the `user_id` column stays the same.
 */
 export const DEVELOPMENT_TEST_USER_ID = 'osint-test-player'
-export function resolveUserId(req: Request): string {
+export function resolveUserId(req: Request): string | null {
  const sub = req.authClaims?.sub
-  return typeof sub === 'string' && sub.length > 0 ? sub : DEVELOPMENT_TEST_USER_ID
+  if (typeof sub === 'string' && sub.length > 0) return sub
+  // In production an absent token is anonymous (no shared identity); locally it
+  // resolves to a single dev user so the game is playable without an issuer.
+  return process.env.NODE_ENV === 'production' ? null : DEVELOPMENT_TEST_USER_ID
 }

 export function resolvePlayerName(req: Request): string {
@@ -140,10 +140,11 @@ export async function cloneBoard(client: PoolClient, sourceBoardId: string, targ
    'INSERT INTO osint.image_documents (exhibit_id,pixel_width,pixel_height,alt_text) VALUES ($1,$2,$3,$4)',
    [mapped(exhibitIds, row.exhibit_id, 'image'), row.pixel_width, row.pixel_height, row.alt_text])

-  const notes = await client.query<{ exhibit_id: string; title: string; note_text: string }>(
+  const notes = await client.query<{ exhibit_id: string; title: string; note_text: string; presentation_kind:'luggage'|'lined_sheet' }>(
    `SELECT n.* FROM osint.note_exhibits n JOIN osint.exhibits e ON e.id=n.exhibit_id WHERE e.board_id=$1`, [sourceBoardId])
-  for (const row of notes.rows) await client.query('INSERT INTO osint.note_exhibits (exhibit_id,title,note_text) VALUES ($1,$2,$3)',
-    [mapped(exhibitIds, row.exhibit_id, 'note'), row.title, row.note_text])
+  for (const row of notes.rows) await client.query(
+    'INSERT INTO osint.note_exhibits (exhibit_id,title,note_text,presentation_kind) VALUES ($1,$2,$3,$4)',
+    [mapped(exhibitIds,row.exhibit_id,'note'),row.title,row.note_text,row.presentation_kind])

  const claims = await client.query<{ exhibit_id:string;statement:string }>(
    `SELECT claim.exhibit_id,claim.statement FROM osint.claim_exhibits claim
@@ -5,18 +5,6 @@ import type { CaseReport, CaseReportEvidence, CaseReportSubmissionInput, CaseRep
 type LevelRef = { id:string; board_id:string }

 function trimmed(value: unknown, max: number) { return String(value || '').trim().slice(0,max) }
-function optionalUrl(value: unknown) {
-  const candidate = trimmed(value,2_000)
-  if (!candidate) return null
-  try { return new URL(candidate).toString() } catch { throw new Error('Source links must be absolute URLs') }
-}
-function optionalTimestamp(value: unknown) {
-  const candidate = trimmed(value,100)
-  if (!candidate) return null
-  const date = new Date(candidate)
-  if (!Number.isFinite(date.getTime())) throw new Error('Evidence dates must be valid dates')
-  return date.toISOString()
-}
 function unfinishedRelation(value: string) {
  return !value.trim() || /^proof\s+that(?:\s*(?:…|\.{3}))?\s*$/iu.test(value.trim())
 }
@@ -130,29 +118,6 @@ export async function submitCaseReport(pool: Pool, levelSlug: string, rawInput:
    const report = (await client.query<{ board_id:string }>('SELECT board_id FROM osint.case_reports WHERE board_id=$1 FOR UPDATE', [level.board_id])).rows[0]
    if (!report) throw new Error('This level does not have a case report')
    const investigatorName = trimmed(rawInput?.investigatorName,300) || 'Player'
-    const drafts = Array.isArray(rawInput?.evidence) ? rawInput.evidence.slice(0,100) : []
-    if (new Set(drafts.map(item => item.connectionId)).size !== drafts.length) throw new Error('A report cannot submit the same connection twice')
-    for (const draft of drafts) {
-      const relationText = trimmed(draft.relationText,2_000)
-      const sourceCitation = trimmed(draft.sourceCitation,1_000)
-      const sourceUri = optionalUrl(draft.sourceUri)
-      const publishedAt = optionalTimestamp(draft.publishedAt)
-      const owned = (await client.query<{ connection_id:string; document_id:string }>(`SELECT connection.id AS connection_id,document.exhibit_id AS document_id
-        FROM osint.exhibit_connections connection
-        JOIN osint.claim_exhibits claim ON claim.exhibit_id=CASE
-          WHEN connection.from_exhibit_id=$3 THEN connection.to_exhibit_id ELSE connection.from_exhibit_id END
-        JOIN osint.document_exhibits document ON document.exhibit_id=CASE
-          WHEN connection.from_exhibit_id=$3 THEN connection.from_exhibit_id ELSE connection.to_exhibit_id END
-        WHERE connection.id=$1 AND connection.board_id=$2
-          AND $3::uuid IN (connection.from_exhibit_id,connection.to_exhibit_id)`, [draft.connectionId,level.board_id,draft.documentExhibitId])).rows[0]
-      if (!owned || owned.document_id !== draft.documentExhibitId) throw new Error('Report evidence must reference a claim-to-document connection on this board')
-      await client.query('UPDATE osint.exhibit_connections SET label=$2 WHERE id=$1', [draft.connectionId,relationText || null])
-      await client.query(`UPDATE osint.document_exhibits SET published_at=$2,citation_text=$3,source_uri=$4 WHERE exhibit_id=$1`,
-        [draft.documentExhibitId,publishedAt,sourceCitation,sourceUri])
-      await client.query(`INSERT INTO osint.exhibit_citations (board_id,exhibit_id,display_number)
-        SELECT $1,$2,COALESCE(MAX(display_number),0)+1 FROM osint.exhibit_citations WHERE board_id=$1
-        ON CONFLICT (board_id,exhibit_id) DO NOTHING`, [level.board_id,draft.documentExhibitId])
-    }
    await client.query('UPDATE osint.case_reports SET investigator_name=$2,updated_at=NOW() WHERE board_id=$1', [level.board_id,investigatorName])
    const assembled = (await loadCaseReport(client,level))!
    const pendingGoals = Number((await client.query<{ count:string }>(`SELECT COUNT(*)::text AS count FROM osint.level_goals goal
@@ -35,12 +35,24 @@ const levels = createLevelRepository(pool, editingEnabled, objectStorage, eviden
 const narrative = createNarrativeRepository(pool, objectStorage)
 const storyGraph = createStoryGraphRepository(pool)
 const users = createUserRepository(pool)
-const AUTH_COOKIE = { httpOnly: true, sameSite: 'lax' as const, path: '/', maxAge: 30 * 24 * 60 * 60 * 1000 }
+const AUTH_COOKIE = { httpOnly: true, secure: process.env.NODE_ENV === 'production', sameSite: 'lax' as const, path: '/', maxAge: 30 * 24 * 60 * 60 * 1000 }
 const STORY_NODE_TYPES: StoryNodeType[] = ['cutscene', 'dialogue', 'level', 'det_gate', 'llm_gate', 'merit', 'phone']

 function wantsEdit(req: express.Request) {
  return editingEnabled && req.query.edit === '1' && hasAdminClaim(req)
 }
+// Identity guards for player-scoped routes.
+function requireUser(req: express.Request, res: express.Response): string | null {
+  const userId = resolveUserId(req)
+  if (!userId) { res.status(401).json({ error: 'Sign in required' }); return null }
+  return userId
+}
+async function ownsPlaythroughOr403(req: express.Request, res: express.Response, playthroughId: string): Promise<string | null> {
+  const userId = requireUser(req, res)
+  if (!userId) return null
+  if (!await narrative.ownsPlaythrough(userId, playthroughId)) { res.status(403).json({ error: 'Not your playthrough' }); return null }
+  return userId
+}
 function slug(value: unknown, fallback: string) {
  return String(value || fallback).trim().toLowerCase().replace(/[^a-z0-9-]+/g, '-').replace(/^-+|-+$/g, '')
 }
@@ -156,7 +168,8 @@ app.post('/api/levels/:id/documents', upload.single('file'), async (req, res, ne
 })
 app.post('/api/levels/:id/documents/:documentId/judge', async (req, res, next) => {
  try {
-    if (!hasAdminClaim(req) && !await narrative.ownsActiveLevel(resolveUserId(req), String(req.params.id))) {
+    const levelUser = resolveUserId(req)
+    if (!hasAdminClaim(req) && (!levelUser || !await narrative.ownsActiveLevel(levelUser, String(req.params.id)))) {
      return res.status(403).json({ error: 'This level is not active for the current player' })
    }
    const result = await levels.judgeDocument(String(req.params.id), String(req.params.documentId))
@@ -213,7 +226,6 @@ app.post('/api/levels/:id/report/submissions', async (req, res, next) => {
  try {
    const report = await submitCaseReport(pool,String(req.params.id),{
      investigatorName:String(req.body?.investigatorName || resolvePlayerName(req)),
-      evidence:Array.isArray(req.body?.evidence) ? req.body.evidence : [],
    })
    report ? res.status(201).json(report) : res.status(404).json({ error:'Level not found' })
  } catch (error) { next(error) }
@@ -504,13 +516,15 @@ app.post('/api/mysteries', requireAdmin, async (req, res, next) => {
 // New Game creates a playthrough bound to the caller's identity.
 app.post('/api/playthroughs', async (req, res, next) => {
  try {
-    const result = await narrative.createPlaythrough(resolveUserId(req), req.body?.mystery ? slug(req.body.mystery, req.body.mystery) : undefined)
+    const userId = requireUser(req, res); if (!userId) return
+    const result = await narrative.createPlaythrough(userId, req.body?.mystery ? slug(req.body.mystery, req.body.mystery) : undefined)
    result ? res.status(201).json(result) : res.status(404).json({ error: 'No mystery available' })
  } catch (error) { next(error) }
 })
 app.get('/api/playthroughs/current', async (req, res, next) => {
  try {
-    const result = await narrative.getCurrentPlaythrough(resolveUserId(req))
+    const userId = resolveUserId(req)
+    const result = userId ? await narrative.getCurrentPlaythrough(userId) : null
    result ? res.json(result) : res.status(204).end()
  } catch (error) { next(error) }
 })
@@ -518,7 +532,8 @@ app.get('/api/playthroughs/current', async (req, res, next) => {
 // gates; instantiates the board when entering a level node).
 app.post('/api/playthroughs/:id/advance', async (req, res, next) => {
  try {
-    const result = await narrative.advancePlaythrough(resolveUserId(req), String(req.params.id), req.body?.terminalKey)
+    const userId = requireUser(req, res); if (!userId) return
+    const result = await narrative.advancePlaythrough(userId, String(req.params.id), req.body?.terminalKey)
    result.ok ? res.json(result.state ?? null) : res.status(result.error === 'Playthrough not found' ? 404 : result.errorCode ? 409 : 400)
      .json({ error: result.error, errorCode: result.errorCode, pendingGoals: result.pendingGoals })
  } catch (error) { next(error) }
@@ -528,6 +543,7 @@ app.post('/api/playthroughs/:id/advance', async (req, res, next) => {
 // stand-in until the server-side achievement rule engine drives awards from play.
 app.get('/api/playthroughs/:id/achievements', async (req, res, next) => {
  try {
+    if (!await ownsPlaythroughOr403(req, res, String(req.params.id))) return
    const flags = await narrative.listAchievements(String(req.params.id))
    flags ? res.json(flags) : res.status(404).json({ error: 'Playthrough not found' })
  } catch (error) { next(error) }
@@ -535,6 +551,7 @@ app.get('/api/playthroughs/:id/achievements', async (req, res, next) => {
 app.post('/api/playthroughs/:id/achievements', async (req, res, next) => {
  try {
    if (process.env.NODE_ENV === 'production') return res.status(403).json({ error: 'Manual grants are disabled' })
+    if (!await ownsPlaythroughOr403(req, res, String(req.params.id))) return
    if (!req.body?.flagKey) return res.status(400).json({ error: 'A flagKey is required' })
    const result = await narrative.awardAchievement(String(req.params.id), String(req.body.flagKey), req.body.nodeId ? String(req.body.nodeId) : null)
    result.ok ? res.json({ earned: result.earned }) : res.status(result.error === 'Playthrough not found' ? 404 : 400).json({ error: result.error })
@@ -544,42 +561,52 @@ app.post('/api/playthroughs/:id/achievements', async (req, res, next) => {
 // server-side against the player's current node, so players can't forge flags).
 app.post('/api/playthroughs/:id/utterances/:uid/reach', async (req, res, next) => {
  try {
+    if (!await ownsPlaythroughOr403(req, res, String(req.params.id))) return
    const result = await narrative.reachUtterance(String(req.params.id), String(req.params.uid))
    result.ok ? res.json({ earned: result.earned ?? false }) : res.status(404).json({ error: 'Not found' })
  } catch (error) { next(error) }
 })
 // Field notebook: capture NPC lines during play, list them, and remove (on tear/discard).
 app.get('/api/playthroughs/:id/notebook', async (req, res, next) => {
-  try { res.json(await narrative.notebookPages(String(req.params.id))) }
-  catch (error) { next(error) }
+  try {
+    if (!await ownsPlaythroughOr403(req, res, String(req.params.id))) return
+    res.json(await narrative.notebookPages(String(req.params.id)))
+  } catch (error) { next(error) }
 })
 app.post('/api/playthroughs/:id/notebook', async (req, res, next) => {
  try {
+    if (!await ownsPlaythroughOr403(req, res, String(req.params.id))) return
    const page = await narrative.addNotebookPage(String(req.params.id), String(req.body?.text || ''), req.body?.utteranceId ? String(req.body.utteranceId) : null)
    page ? res.status(201).json(page) : res.status(400).json({ error: 'Empty text or unknown playthrough' })
  } catch (error) { next(error) }
 })
 app.delete('/api/playthroughs/:id/notebook/:pageId', async (req, res, next) => {
  try {
+    if (!await ownsPlaythroughOr403(req, res, String(req.params.id))) return
    const ok = await narrative.removeNotebookPage(String(req.params.id), String(req.params.pageId))
    ok ? res.json({ ok: true }) : res.status(404).json({ error: 'Not found' })
  } catch (error) { next(error) }
 })
 // The phone tool: the directory available on the current node, and dialing a number.
 app.get('/api/playthroughs/:id/phone', async (req, res, next) => {
-  try { res.json(await narrative.phoneDirectory(String(req.params.id))) }
-  catch (error) { next(error) }
+  try {
+    if (!await ownsPlaythroughOr403(req, res, String(req.params.id))) return
+    res.json(await narrative.phoneDirectory(String(req.params.id)))
+  } catch (error) { next(error) }
 })
 app.post('/api/playthroughs/:id/dial', async (req, res, next) => {
-  try { res.json(await narrative.dial(String(req.params.id), String(req.body?.number || ''))) }
-  catch (error) { next(error) }
+  try {
+    if (!await ownsPlaythroughOr403(req, res, String(req.params.id))) return
+    res.json(await narrative.dial(String(req.params.id), String(req.body?.number || '')))
+  } catch (error) { next(error) }
 })
 // Dev teleport: jump the playthrough to an explicit story node. Powers /node/:id.
 app.post('/api/playthroughs/:id/goto', async (req, res, next) => {
  try {
    if (process.env.NODE_ENV === 'production') return res.status(403).json({ error: 'Node teleport is disabled' })
+    const userId = requireUser(req, res); if (!userId) return
    if (!req.body?.nodeId) return res.status(400).json({ error: 'A nodeId is required' })
-    const result = await narrative.gotoNode(resolveUserId(req), String(req.params.id), String(req.body.nodeId))
+    const result = await narrative.gotoNode(userId, String(req.params.id), String(req.body.nodeId))
    result.ok ? res.json(result.state ?? null) : res.status(result.error === 'Playthrough not found' || result.error === 'Node not found' ? 404 : 400).json({ error: result.error })
  } catch (error) { next(error) }
 })
@@ -87,6 +87,7 @@ type ExhibitRow = {
  captured_at: Date | null; source_uri: string | null; citation_text: string | null; display_number: number | null; statement: string | null
  original_name: string | null; mime_type: string | null; byte_size: string | null
  source_document_id: string | null; source_region_key: string | null
+  note_presentation_kind: 'luggage' | 'lined_sheet' | null
  party_kind: PartyKind | null; organization_kind: OrganizationKind | null
 }

@@ -215,8 +216,41 @@ export function createLevelRepository(pool: Pool, editingEnabled: boolean, objec
    for (const [sortOrder, anchor] of input.anchors.entries()) await client.query(`INSERT INTO osint.evidence_match_anchors
      (id,rule_id,phrase_text,minimum_similarity,sort_order) VALUES ($1,$2,$3,$4,$5)`,
    [randomUUID(), ruleId, anchor.phrase, anchor.minimumSimilarity, sortOrder])
+    const rule = (await evidenceMatchRules(client, level.board_id, true)).find(candidate => candidate.id === ruleId) || null
+    if (rule) await evaluateRuleForExistingDocuments(client, level, rule)
    await client.query('UPDATE osint.levels SET updated_at=NOW() WHERE id=$1', [level.id])
-    return (await evidenceMatchRules(client, level.board_id, true)).find(rule => rule.id === ruleId) || null
+    return rule
+  }
+
+  async function evaluateRuleForExistingDocuments(client: PoolClient, level: LevelRow, rule: EvidenceMatchRuleDefinition) {
+    if (!rule.enabled) return
+    const documents = await client.query<{ document_exhibit_id:string;extraction_id:string;extracted_text:string }>(`
+      SELECT DISTINCT ON (document.exhibit_id) document.exhibit_id AS document_exhibit_id,
+        extraction.id AS extraction_id,extraction.extracted_text
+      FROM osint.document_exhibits document
+      JOIN osint.exhibits exhibit ON exhibit.id=document.exhibit_id AND exhibit.board_id=$1
+      JOIN osint.asset_text_extractions extraction ON extraction.asset_id=document.asset_id
+        AND extraction.status='succeeded' AND BTRIM(extraction.extracted_text)<>''
+      ORDER BY document.exhibit_id,extraction.updated_at DESC,extraction.id DESC`, [level.board_id])
+    for (const document of documents.rows) {
+      const evaluation = evaluateEvidenceRules(document.extracted_text, [rule as EvidenceMatchRule])[0]
+      const persisted = await client.query<{ id:string }>(`INSERT INTO osint.evidence_match_evaluations
+        (id,level_id,board_id,document_exhibit_id,extraction_id,rule_id,matched,matched_anchor_count,score)
+        VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9)
+        ON CONFLICT (level_id,document_exhibit_id,rule_id) DO UPDATE SET
+          extraction_id=EXCLUDED.extraction_id,matched=EXCLUDED.matched,
+          matched_anchor_count=EXCLUDED.matched_anchor_count,score=EXCLUDED.score,evaluated_at=NOW()
+        RETURNING id`, [randomUUID(),level.id,level.board_id,document.document_exhibit_id,document.extraction_id,
+        rule.id,evaluation.matched,evaluation.matchedAnchorCount,evaluation.score])
+      const evaluationId = persisted.rows[0].id
+      await client.query('DELETE FROM osint.evidence_match_anchor_evaluations WHERE evaluation_id=$1', [evaluationId])
+      for (const anchor of evaluation.anchors) await client.query(`INSERT INTO osint.evidence_match_anchor_evaluations
+        (evaluation_id,anchor_id,similarity,matched,matched_text) VALUES ($1,$2,$3,$4,$5)`,
+      [evaluationId,anchor.anchorId,anchor.similarity,anchor.matched,anchor.matchedText])
+      if (evaluation.matched) await client.query(`INSERT INTO osint.level_flags
+        (level_id,board_id,flag_key,awarded_by_evidence_match_id) VALUES ($1,$2,$3,$4)
+        ON CONFLICT (level_id,flag_key) DO NOTHING`, [level.id,level.board_id,evaluation.flagKey,evaluationId])
+    }
  }

  async function levelGoalStates(
@@ -319,6 +353,7 @@ export function createLevelRepository(pool: Pool, editingEnabled: boolean, objec
        COALESCE(f.title, d.title, n.title, ev.title, p.display_name, claim.statement, '') AS title,
        COALESCE(f.label_text, n.note_text, ev.narrative_text, p.summary, '') AS content,
        f.is_open, d.document_type_id, d.capture_kind_id, d.asset_id, d.published_at, d.captured_at, d.source_uri,d.citation_text,citation.display_number,
+        n.presentation_kind AS note_presentation_kind,
        ev.occurred_at,claim.statement,
        p.party_kind, op.organization_kind,
        a.original_name, a.mime_type, a.byte_size,
@@ -415,7 +450,7 @@ export function createLevelRepository(pool: Pool, editingEnabled: boolean, objec
      else if (row.exhibit_type_id === 'event') evidence.push({ ...common, type:'event', eventDate:row.occurred_at?.toISOString() })
      else if (row.exhibit_type_id === 'party') evidence.push({ ...common, type:'party', partyKind:row.party_kind || 'person', organizationKind:row.organization_kind || undefined, aliases:aliases.get(row.id) || [] })
      else if (row.exhibit_type_id === 'claim') evidence.push({ ...base(row), type:'claim', title:row.title, statement:row.statement || row.title })
-      else if (row.exhibit_type_id === 'note') evidence.push({ ...common, type:'note' })
+      else if (row.exhibit_type_id === 'note') evidence.push({ ...common, type:'note', presentation:row.note_presentation_kind || 'luggage' })
      else throw new Error(`Unsupported exhibit type ${row.exhibit_type_id}`)
    }
    const views: BoardView[] = viewsResult.rows.map(row => ({ id: row.id, type: 'timeline', visible: row.visible, zIndex: row.z_index,
@@ -492,18 +527,21 @@ export function createLevelRepository(pool: Pool, editingEnabled: boolean, objec
    else await client.query('DELETE FROM osint.exhibits WHERE board_id=$1', [level.board_id])

    for (const exhibit of state.exhibits) {
+      const clipping=exhibit.type === 'document' && documentCaptureKind(exhibit.captureKind) === 'clipping'
      await client.query(`INSERT INTO osint.exhibits (id,board_id,exhibit_type_id,xpos,ypos,width,height,rotation,z_index,hidden)
        VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10)
        ON CONFLICT (id) DO UPDATE SET exhibit_type_id=$3,xpos=$4,ypos=$5,width=$6,height=$7,rotation=$8,z_index=$9,hidden=$10,updated_at=NOW()`,
-      [exhibit.id, level.board_id, exhibit.type, exhibit.x, exhibit.y, exhibit.width, exhibit.height, exhibit.rotation, exhibit.zIndex, exhibit.hidden])
+      [exhibit.id,level.board_id,exhibit.type,exhibit.x,exhibit.y,clipping ? 230 : exhibit.width,clipping ? 290 : exhibit.height,exhibit.rotation,exhibit.zIndex,exhibit.hidden])
    }
    let nextCitation = Number((await client.query<{ maximum:number }>('SELECT COALESCE(MAX(display_number),0)::int AS maximum FROM osint.exhibit_citations WHERE board_id=$1',[level.board_id])).rows[0].maximum)
    for (const document of documents) {
+      const clippingTitle=document.captureKind === 'clipping' && document.sourceCitation?.trim()
+        && (!document.title.trim() || document.title === document.fileName) ? document.sourceCitation.trim() : document.title
      await client.query(`INSERT INTO osint.document_exhibits (exhibit_id,document_type_id,capture_kind_id,asset_id,title,published_at,captured_at,source_uri,citation_text)
        VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9) ON CONFLICT (exhibit_id) DO UPDATE SET
          document_type_id=EXCLUDED.document_type_id,asset_id=EXCLUDED.asset_id,title=EXCLUDED.title,published_at=EXCLUDED.published_at,
          capture_kind_id=EXCLUDED.capture_kind_id,captured_at=EXCLUDED.captured_at,source_uri=EXCLUDED.source_uri,citation_text=EXCLUDED.citation_text`,
-      [document.id, documentType(document), documentCaptureKind(document.captureKind), document.assetId || null, document.title,
+      [document.id, documentType(document), documentCaptureKind(document.captureKind), document.assetId || null, clippingTitle,
        timestamp(document.publishedAt), timestamp(document.capturedAt), document.sourceUri || null,document.sourceCitation || ''])
      const existingCitation = await client.query<{ display_number:number }>('SELECT display_number FROM osint.exhibit_citations WHERE board_id=$1 AND exhibit_id=$2',[level.board_id,document.id])
      if (!existingCitation.rows[0]) {
@@ -527,7 +565,9 @@ export function createLevelRepository(pool: Pool, editingEnabled: boolean, objec
      if (isFolderExhibit(exhibit)) await client.query(
        'INSERT INTO osint.folder_exhibits (exhibit_id,title,label_text,is_open) VALUES ($1,$2,$3,$4)',
        [exhibit.id, exhibit.title, exhibit.content, exhibit.isOpen])
-      if (exhibit.type === 'note') await client.query('INSERT INTO osint.note_exhibits (exhibit_id,title,note_text) VALUES ($1,$2,$3)', [exhibit.id, exhibit.title, exhibit.content])
+      if (exhibit.type === 'note') await client.query(
+        'INSERT INTO osint.note_exhibits (exhibit_id,title,note_text,presentation_kind) VALUES ($1,$2,$3,$4)',
+        [exhibit.id,exhibit.title,exhibit.content,exhibit.presentation === 'lined_sheet' ? 'lined_sheet' : 'luggage'])
      if (isEventExhibit(exhibit)) await client.query(
        'INSERT INTO osint.event_exhibits (exhibit_id,title,narrative_text,occurred_at) VALUES ($1,$2,$3,$4)',
        [exhibit.id, exhibit.title, exhibit.content, timestamp(exhibit.eventDate)])
@@ -5,7 +5,7 @@ import { filterLevelVisibility, mergePlayerStateForPersistence } from './levelVi
 const placed = { x: 10, y: 20, width: 174, height: 145, rotation: 0, zIndex: 1, hidden: false }
 const open: DocumentExhibit = { id: 'open', type: 'document', title: 'Open', body: [], regions: [], fileType: 'image', captureKind:'unclassified',metadata: {}, ...placed }
 const gated: DocumentExhibit = { id: 'gated', type: 'document', title: 'Gated', body: [], regions: [], fileType: 'image', captureKind:'unclassified',metadata: {}, requiredFlags: ['tip.received'], ...placed }
-const note: NoteExhibit = { id: 'note', type: 'note', title: 'Note', content: '', ...placed }
+const note: NoteExhibit = { id:'note',type:'note',title:'Note',content:'',presentation:'luggage',...placed }
 const state: CaseState = {
  id: 'demo', title: 'Demo', subtitle: '', exhibits: [open, gated, note], viewport: { x: 0, y: 0, zoom: 1 },
  relations: [{ id: 'source', type: 'source', fromExhibitId: note.id, toExhibitId: gated.id, sortOrder: 0 }],
@@ -65,6 +65,7 @@ export interface NarrativeRepository {
  phoneDirectory(playthroughId: string): Promise<{ available: boolean; numbers: { number: string; name: string }[] }>
  dial(playthroughId: string, number: string): Promise<{ outcome: 'connect' | 'voicemail' | 'unknown'; name?: string; state?: PlaythroughState }>
  gotoNode(userId: string, playthroughId: string, nodeId: string): Promise<{ ok: boolean; state?: PlaythroughState; error?: string }>
+  ownsPlaythrough(userId: string, playthroughId: string): Promise<boolean>
  listMysteries(): Promise<MysterySummary[]>
  listPlayableMysteries(): Promise<{ slug: string; title: string }[]>
  deleteMystery(id: string): Promise<boolean>
@@ -345,6 +346,10 @@ export function createNarrativeRepository(pool: Pool, objectStorage: ObjectStora
      return npc ? { outcome: 'voicemail', name: npc.name } : { outcome: 'unknown' }
    },

+    async ownsPlaythrough(userId, playthroughId) {
+      return ((await pool.query('SELECT 1 FROM osint.playthroughs WHERE id=$1 AND user_id=$2', [playthroughId, userId])).rowCount || 0) > 0
+    },
+
    async listAchievements(playthroughId) {
      if (!(await pool.query('SELECT 1 FROM osint.playthroughs WHERE id=$1', [playthroughId])).rowCount) return null
      const rows = (await pool.query<{ flag_key: string }>('SELECT flag_key FROM osint.achievements WHERE playthrough_id=$1 ORDER BY flag_key', [playthroughId])).rows
@@ -1,9 +1,9 @@
 import { lazy, Suspense, useCallback, useEffect, useLayoutEffect, useMemo, useRef, useState } from 'react'
 import { BookOpen, Building2, CalendarClock, Camera, Check, ChevronRight, CircleHelp, ClipboardCheck, FileText, FolderOpen, Hand, Image as ImageIcon, Images, Info, Link2, Minus, MousePointer2, Network, Newspaper, NotebookPen, Pencil, Plus, RotateCcw, Search, Trash2, Upload, UserRound, X, ZoomIn, ZoomOut } from 'lucide-react'
-import type { BriefConcept, CaseDocument, CaseReport, CaseReportSubmissionInput, CaseState, Connection, DocumentCaptureKind, DocumentSemanticAnalysis, EventExhibit, Evidence, EvidenceMatchRuleDefinition, Exhibit, ExhibitRelation, FolderExhibit, LevelBrief, LevelFlag, LevelGoal, OrganizationKind, PartyExhibit, PartyKind, SourceFileType, TimelineRange, TimelineView, UploadedCaseDocument } from './types'
+import type { BriefConcept, CaseDocument, CaseReport, CaseReportSubmissionInput, CaseState, Connection, DocumentCaptureKind, DocumentSemanticAnalysis, EventExhibit, Evidence, EvidenceMatchRuleDefinition, Exhibit, ExhibitRelation, FolderExhibit, LevelBrief, LevelFlag, LevelGoal, NotePresentation, OrganizationKind, PartyExhibit, PartyKind, SourceFileType, TimelineRange, TimelineView, UploadedCaseDocument } from './types'
 import { AdminPanel } from './admin'
 import { audio } from './audio'
-import { clampBoardZoom, containedIds, dateValue, discardExhibit, folderIsOpen, moveBoardPoint, nextOpenBoardPosition, normalizeCase, panViewport, projectThreadTag, threadCurve, threadTagLateralLimit, threadTagPlacement, timelinePositionPercent, timelineRange, zoomFromPinch, zoomFromWheel, zoomViewportAt } from './boardDomain'
+import { clampBoardZoom, containedIds, dateValue, discardExhibit, folderIsOpen, moveBoardPoint, nextOpenBoardPosition, nextVisibleBoardPosition, normalizeCase, panViewport, projectThreadTag, threadCurve, threadTagLateralLimit, threadTagPlacement, timelinePositionPercent, timelineRange, zoomFromPinch, zoomFromWheel, zoomViewportAt } from './boardDomain'
 import { defaultConnectionLabel, documentCapture, documentCaptureRegistry, documentExhibits, documentWidget, evidenceExhibits, exhibitWidget, mugshotIdentification, type ExhibitWidgetContext, type WidgetCommand } from './exhibitRegistry'
 import type { PlaythroughState } from './narrative'

@@ -28,6 +28,12 @@ function documentSearchText(document: CaseDocument) {
    ...document.body, ...document.regions.flatMap(region => [region.label, region.excerpt, region.date]),
    ...Object.entries(document.metadata).flatMap(([key, value]) => [key, value])].filter(Boolean).join('\n').toLocaleLowerCase()
 }
+function clippingInsetRotation(id:string) {
+  let hash=0
+  for (const character of id) hash=(hash * 31 + character.charCodeAt(0)) >>> 0
+  const degrees=((hash % 49) - 24) / 10
+  return degrees === 0 ? .7 : degrees
+}
 function connectionPoint(item: Exhibit) {
  return exhibitWidget(item.type).connectionPorts(item)[0]
 }
@@ -214,12 +220,14 @@ export function App() {
    setOpenDoc(null); setSelected(ev.id); setRecentlyCreatedExhibitId(ev.id); setStatus('EVIDENCE EXTRACTED · PROVENANCE ATTACHED')
  }

-  const addNote = (preset?: string) => {
+  const addNote = (preset?: string, presentation:NotePresentation = 'luggage') => {
    const content = typeof preset === 'string' ? preset : window.prompt('What do you think this evidence means?')?.trim()
    if (!content || !caseState) return
    const { viewport } = caseState
-    const position = nextOpenBoardPosition(caseState.exhibits, { x: Math.max(100, (500 - viewport.x) / viewport.zoom), y: Math.max(100, (330 - viewport.y) / viewport.zoom) }, { width: 108 })
-    const note: Evidence = { id: uid('note'), type: 'note', title: 'WORKING NOTE', content, ...placement(position.x, position.y, 108, 154) }
+    const size = presentation === 'lined_sheet' ? { width:220,height:270 } : { width:108,height:154 }
+    const position = nextOpenBoardPosition(caseState.exhibits, { x: Math.max(100, (500 - viewport.x) / viewport.zoom), y: Math.max(100, (330 - viewport.y) / viewport.zoom) }, { width:size.width })
+    const note: Evidence = { id: uid('note'), type:'note', title:presentation === 'lined_sheet' ? 'FIELD NOTE' : 'WORKING NOTE', content,presentation,
+      ...placement(position.x,position.y,size.width,size.height) }
    update(s => ({ ...s, exhibits: [...s.exhibits, note] })); setSelected(note.id); setRecentlyCreatedExhibitId(note.id)
  }

@@ -373,13 +381,23 @@ export function App() {
  const uploadFiles = useCallback(async (files: FileList | File[], source: 'file' | 'clipboard' = 'file') => {
    if (!caseState) return
    const queue = Array.from(files)
+    const boardScreen = boardRef.current?.getBoundingClientRect()
+    const screen = { width: boardScreen?.width || window.innerWidth, height: boardScreen?.height || window.innerHeight }
+    const portraitMobile = screen.width <= 900 && screen.height > screen.width
+    const insets = {
+      top: Math.min(140, screen.height * .28),
+      right: portraitMobile ? 68 : 18,
+      bottom: portraitMobile ? 18 : 68,
+      left: 18,
+    }
+    const reserved = [...caseState.exhibits]
    setUploading(queue.length)
    setDraggingFiles(false)
-    for (const [queueIndex, file] of queue.entries()) {
-      const position = nextOpenBoardPosition(caseState.exhibits, {
-        x: Math.max(100, (520 - caseState.viewport.x) / caseState.viewport.zoom) + queueIndex * 24,
-        y: Math.max(100, (310 - caseState.viewport.y) / caseState.viewport.zoom) + queueIndex * 24,
-      }, { width: 174, height: 145 })
+    for (const file of queue) {
+      // Reserve for the largest image presentation so choosing Clip, Image, or
+      // Mugshot in the following dialog cannot make it grow beyond the viewport.
+      const reservedSize = { width: 244, height: 294 }
+      const position = nextVisibleBoardPosition(reserved, caseState.viewport, screen, reservedSize, insets, { width: BOARD_W, height: BOARD_H })
      const form = new FormData()
      form.append('file', file)
      form.append('x', String(position.x))
@@ -390,6 +408,7 @@ export function App() {
        if (!response.ok) { const body = await response.json().catch(() => ({})); throw new Error(body.error || `Upload failed (${response.status})`) }
        const uploaded: UploadedCaseDocument = await response.json()
        const { analysis, ...document } = uploaded
+        reserved.push({ ...document, ...position, ...reservedSize })
        update(s => {
          return { ...s, exhibits: [...s.exhibits, { ...document, ...position }] }
        })
@@ -439,7 +458,10 @@ export function App() {

  const classifyDocument = (documentId:string,captureKind:DocumentCaptureKind) => {
    const presentation=documentCapture(captureKind)
-    const classify = (document:CaseDocument):CaseDocument => ({ ...document,captureKind,width:presentation.defaultSize.width,height:presentation.defaultSize.height })
+    const initialClipRotation=Math.round((Math.random() * 20 - 10) * 10) / 10
+    const classify = (document:CaseDocument):CaseDocument => ({ ...document,captureKind,width:presentation.defaultSize.width,height:presentation.defaultSize.height,
+      title:captureKind === 'clipping' && document.captureKind === 'unclassified' && document.title === document.fileName ? '' : document.title,
+      rotation:captureKind === 'clipping' && document.captureKind === 'unclassified' ? initialClipRotation : document.rotation })
    update(state => ({ ...state,exhibits:state.exhibits.map(exhibit => exhibit.id === documentId && exhibit.type === 'document'
      ? classify(exhibit)
      : exhibit) }))
@@ -529,12 +551,16 @@ export function App() {
  const reportAttentionCount = caseState.report?.requiredForCompletion && caseState.report.status !== 'accepted' ? 1 : 0
  const activeGoal = caseState.goals.find(goal => goal.status === 'pending') || caseState.goals[0]
  const canAuthor = isAdmin && requestedEditMode && Boolean(caseState.editingAllowed)
-  const temporalItems: TemporalItem[] = caseState.exhibits.flatMap(exhibit => exhibitWidget(exhibit.type).temporalFacts(exhibit).map(fact => {
+  const temporalItems: TemporalItem[] = caseState.exhibits.flatMap(exhibit => {
+    const widget=exhibitWidget(exhibit.type)
+    if (!widget) throw new Error(`No widget is registered for exhibit type “${String(exhibit.type)}”`)
+    return widget.temporalFacts(exhibit).map(fact => {
    const membership = exhibit.type === 'document' ? caseState.relations.find(relation => relation.type === 'contains' && relation.toExhibitId === exhibit.id) : undefined
    const folder = membership ? caseState.exhibits.find(candidate => candidate.id === membership.fromExhibitId && candidate.type === 'folder') as FolderExhibit | undefined : undefined
    const sourceTemporalId = folder && !folder.isOpen ? `widget:${folder.id}` : `widget:${exhibit.id}`
    return { id: fact.id, sourceTemporalId, date: fact.start, label: fact.label, kind: exhibit.type === 'document' ? 'document' as const : 'widget' as const, exhibitId: exhibit.id }
-  })).sort((a, b) => dateValue(a.date) - dateValue(b.date))
+    })
+  }).sort((a, b) => dateValue(a.date) - dateValue(b.date))
  const storyEvents = evidence.filter((item): item is EventExhibit => item.type === 'event').sort((a, b) => {
    if (!a.eventDate) return b.eventDate ? 1 : 0
    if (!b.eventDate) return -1
@@ -544,7 +570,7 @@ export function App() {
  return <main className="desktop">
    {inventoryOpen && activePlaythroughId && <Suspense fallback={null}>
      <Inventory session={{ playthroughId: activePlaythroughId, onConnect: () => window.location.assign('/?resume=1') }}
-        onTearToBoard={text => { addNote(text); setInventoryOpen(false) }} onClose={() => setInventoryOpen(false)} />
+        onTearToBoard={text => { addNote(text,'lined_sheet'); setInventoryOpen(false) }} onClose={() => setInventoryOpen(false)} />
    </Suspense>}
    <header className="menubar">
      <div className="brand"><span className="brand-mark">GU</span><span>OSINT BOARD <em>/ {requestedEditMode && caseState.editingAllowed ? 'LEVEL EDITOR' : 'CASE TERMINAL'}</em></span></div>
@@ -949,20 +975,22 @@ function Board({ state, selected, locatorDocumentId, linkFrom, recentlyCreatedEx
      <svg className="folder-bands" width={BOARD_W} height={BOARD_H}>
        {containmentRelations.map(relation => { const folder = byId.get(relation.fromExhibitId), document = byId.get(relation.toExhibitId); if (folder?.type !== 'folder' || document?.type !== 'document') return null; const origin = { x: folder.x + folder.width / 2, y: folder.y + 78 }; return <line className={folder.isOpen ? 'open' : 'closed'} key={relation.id} x1={origin.x} y1={origin.y} x2={folder.isOpen ? document.x + document.width / 2 : origin.x} y2={folder.isOpen ? document.y + document.height / 2 : origin.y}/> })}
      </svg>
-      {evidenceExhibits(state.exhibits).filter(exhibit => !exhibit.hidden).map((ev, i) => { const containedDocuments = containedIds(state, ev.id).flatMap(id => { const document = byId.get(id); return document?.type === 'document' ? [document] : [] }); const locatedDocumentId = ev.type === 'folder' && !ev.isOpen && containedDocuments.some(document => document.id === locatorDocumentId) ? locatorDocumentId : undefined; const definition = exhibitWidget(ev.type); const Widget = definition.Component; const containsArrival = ev.type === 'folder' && containedDocuments.some(document => arrivingExhibitIds.includes(document.id)); return <article key={ev.id} tabIndex={ev.type === 'folder' ? 0 : undefined} aria-expanded={ev.type === 'folder' ? ev.isOpen : undefined} title={ev.type === 'folder' ? 'Double-click or hold to open or close this folder' : undefined} data-document-locator-target={locatedDocumentId} data-temporal-id={`widget:${ev.id}`} className={`evidence-card ${definition.visualType} ${ev.type === 'note' ? 'luggage-tag' : ''} ${selected === ev.id ? 'selected' : ''} ${locatedDocumentId ? 'document-located' : ''} ${linkFrom === ev.id ? 'linking' : ''} ${linkFrom && linkFrom !== ev.id ? 'thread-target' : ''} ${recentlyCreatedExhibitId === ev.id || arrivingExhibitIds.includes(ev.id) || containsArrival ? 'arriving' : ''}`} style={{ left: ev.x, top: ev.y, width: ev.width, height: ev.height, rotate: `${ev.rotation + (i % 3 - 1) * .45}deg`, zIndex: ev.zIndex }}
+      {evidenceExhibits(state.exhibits).filter(exhibit => !exhibit.hidden).map((ev, i) => { const containedDocuments = containedIds(state, ev.id).flatMap(id => { const document = byId.get(id); return document?.type === 'document' ? [document] : [] }); const locatedDocumentId = ev.type === 'folder' && !ev.isOpen && containedDocuments.some(document => document.id === locatorDocumentId) ? locatorDocumentId : undefined; const definition = exhibitWidget(ev.type); const Widget = definition.Component; const containsArrival = ev.type === 'folder' && containedDocuments.some(document => arrivingExhibitIds.includes(document.id)); const notePresentation=ev.type === 'note' ? ev.presentation === 'lined_sheet' ? 'lined-sheet' : 'luggage-tag' : ''; return <article key={ev.id} tabIndex={ev.type === 'folder' ? 0 : undefined} aria-expanded={ev.type === 'folder' ? ev.isOpen : undefined} title={ev.type === 'folder' ? 'Double-click or hold to open or close this folder' : undefined} data-document-locator-target={locatedDocumentId} data-temporal-id={`widget:${ev.id}`} className={`evidence-card ${definition.visualType} ${notePresentation} ${selected === ev.id ? 'selected' : ''} ${locatedDocumentId ? 'document-located' : ''} ${linkFrom === ev.id ? 'linking' : ''} ${linkFrom && linkFrom !== ev.id ? 'thread-target' : ''} ${recentlyCreatedExhibitId === ev.id || arrivingExhibitIds.includes(ev.id) || containsArrival ? 'arriving' : ''}`} style={{ left: ev.x, top: ev.y, width: ev.width, height: ev.height, rotate: `${ev.rotation + (i % 3 - 1) * .45}deg`, zIndex: ev.zIndex }}
        onPointerDown={e => { e.stopPropagation(); if (linkFrom && e.button === 0) return; if (ev.type === 'folder') startFolderLongPress(e, ev.id); if (tool === 'hand' || e.button === 1) { e.preventDefault(); pointerDown(e) } else if (e.button === 0) pointerDown(e, { kind: 'widget', id: ev.id }) }}
        onPointerMove={e => { e.stopPropagation(); pointerMove(e) }} onPointerUp={e => { e.stopPropagation(); finishDrag(e) }} onPointerCancel={e => { e.stopPropagation(); finishDrag(e) }}
        onAuxClick={e => { if (e.button === 1) e.preventDefault() }} onClick={e => { e.stopPropagation(); if (suppressClick.current) { suppressClick.current = false; return } if (ev.type === 'folder' && e.detail > 1) return; if (tool === 'move') onCardClick(ev.id) }} onDoubleClick={e => { e.stopPropagation(); if (ev.type === 'folder' && tool === 'move' && !linkFrom && !(e.target as HTMLElement).closest('button')) toggleFolder(ev.id) }} onKeyDown={e => { if (ev.type === 'folder' && e.target === e.currentTarget && (e.key === 'Enter' || e.key === ' ')) { e.preventDefault(); toggleFolder(ev.id) } }}>
        <header><span>{definition.heading(ev, widgetContext)}</span><i>{String(i + 1).padStart(3, '0')}</i></header>
        <Widget exhibit={ev} context={widgetContext}/>
      </article>})}
-      {documentExhibits(state.exhibits).filter(document => !document.hidden).map(document => { const membership = containmentRelations.find(relation => relation.toExhibitId === document.id); const folder = membership ? byId.get(membership.fromExhibitId) : undefined; const open = folder?.type !== 'folder' || folder.isOpen; const located = open && locatorDocumentId === document.id; const left = open ? document.x : folder.x + folder.width / 2 - document.width / 2, top = open ? document.y : folder.y + 45; const definition = documentWidget(document.fileType); const presentation=documentCapture(document.captureKind); const identification=mugshotIdentification(document,state.exhibits,state.connections); const Preview = definition.Preview; const source = document.assetId ? `/api/assets/${encodeURIComponent(document.assetId)}` : ''; return <article key={document.id} data-document-locator-target={located ? document.id : undefined} data-temporal-id={`widget:${document.id}`} data-capture-kind={document.captureKind} data-identified-party-id={identification?.party.id} className={`source-file-widget ${open ? 'open' : 'closed'} file-type-${document.fileType} capture-kind-${document.captureKind} ${identification ? 'mugshot-identified' : ''} ${selected === document.id ? 'selected' : ''} ${located ? 'document-located' : ''} ${linkFrom === document.id ? 'linking' : ''} ${linkFrom && linkFrom !== document.id ? 'thread-target' : ''} ${arrivingExhibitIds.includes(document.id) ? 'arriving' : ''}`} style={{ left, top, width: document.width, height: document.height, rotate: `${document.rotation}deg`, zIndex: document.zIndex }}
+      {documentExhibits(state.exhibits).filter(document => !document.hidden).map(document => { const membership = containmentRelations.find(relation => relation.toExhibitId === document.id); const folder = membership ? byId.get(membership.fromExhibitId) : undefined; const open = folder?.type !== 'folder' || folder.isOpen; const located = open && locatorDocumentId === document.id; const left = open ? document.x : folder.x + folder.width / 2 - document.width / 2, top = open ? document.y : folder.y + 45; const definition = documentWidget(document.fileType); const presentation=documentCapture(document.captureKind); const identification=mugshotIdentification(document,state.exhibits,state.connections); const Preview = definition.Preview; const source = document.assetId ? `/api/assets/${encodeURIComponent(document.assetId)}` : ''; const missingProvenance=[!document.publishedAt ? 'DATE' : '',!document.sourceCitation?.trim() ? 'SOURCE' : ''].filter(Boolean); return <article key={document.id} data-document-locator-target={located ? document.id : undefined} data-temporal-id={`widget:${document.id}`} data-capture-kind={document.captureKind} data-identified-party-id={identification?.party.id} className={`source-file-widget ${open ? 'open' : 'closed'} file-type-${document.fileType} capture-kind-${document.captureKind} ${identification ? 'mugshot-identified' : ''} ${selected === document.id ? 'selected' : ''} ${located ? 'document-located' : ''} ${linkFrom === document.id ? 'linking' : ''} ${linkFrom && linkFrom !== document.id ? 'thread-target' : ''} ${arrivingExhibitIds.includes(document.id) ? 'arriving' : ''}`} style={{ left,top,width:document.width,height:document.height,rotate:`${document.rotation}deg`,zIndex:document.zIndex,'--clip-inset-rotation':`${clippingInsetRotation(document.id)}deg` } as React.CSSProperties}
        onPointerDown={event => { event.stopPropagation(); if (linkFrom && event.button === 0) return; if (tool === 'hand' || event.button === 1) { event.preventDefault(); pointerDown(event) } else if (open && event.button === 0) pointerDown(event, { kind: 'widget', id: document.id }) }}
        onPointerMove={event => { event.stopPropagation(); pointerMove(event) }} onPointerUp={event => { event.stopPropagation(); finishDrag(event) }} onPointerCancel={event => { event.stopPropagation(); finishDrag(event) }} onClick={event => { event.stopPropagation(); if (suppressClick.current) { suppressClick.current = false; return } if (!open) return; if (tool === 'move') onCardClick(document.id) }} onDoubleClick={() => open && !linkFrom && onOpenSource(document.id)}>
+        {document.captureKind === 'clipping' && <span className="clip-stamped-pin" aria-hidden="true"/>}
        <header><span>{(document.captureKind === 'unclassified' ? definition.label : presentation.label).toUpperCase()}</span><i>{String(document.displayNumber || (membership?.sortOrder || 0) + 1).padStart(2, '0')}</i></header>
        <div className="source-file-preview"><Preview document={document} source={source} onMemoryCue={cue => onUpdateDocumentCue(document.id, cue)}/></div>
-        {document.captureKind === 'photo' ? <MugshotCaption name={identification?.party.title || ''}/> : <strong>{document.title}</strong>}<time>{document.publishedAt?.slice(0, 10) || 'UNDATED'}</time>
-        <div className="source-file-actions"><button onClick={event => { event.stopPropagation(); onOpenSource(document.id) }}><BookOpen size={12}/> OPEN</button><button onClick={event => { event.stopPropagation(); onEditFile(document.id) }}><Pencil size={12}/> METADATA</button></div>
+        {document.captureKind === 'photo' ? <MugshotCaption name={identification?.party.title || ''}/> : document.captureKind !== 'clipping' ? <strong>{document.title}</strong> : null}
+        <div className="source-file-footer">{document.captureKind === 'clipping' && <span className={`clip-provenance ${missingProvenance.length ? 'incomplete' : 'complete'}`}>{missingProvenance.length ? `ADD ${missingProvenance.join(' + ')}` : 'SOURCE RECORDED'}</span>}<time>{document.publishedAt?.slice(0, 10) || 'UNDATED'}</time>
+          <div className="source-file-actions"><button onClick={event => { event.stopPropagation(); onOpenSource(document.id) }}><BookOpen size={12}/> OPEN</button><button onClick={event => { event.stopPropagation(); onEditFile(document.id) }}><Pencil size={12}/> METADATA</button></div></div>
      </article> })}
    </div>
  </div>
@@ -1088,6 +1116,15 @@ function localDateTime(value?: string) {
  return local.toISOString().slice(0, 16)
 }

+function publishedDateParts(value?: string) {
+  if (!value) return { date:'',time:'' }
+  const parsed=new Date(value)
+  if (!Number.isFinite(parsed.getTime())) return { date:'',time:'' }
+  const iso=parsed.toISOString()
+  const time=iso.slice(11,16)
+  return { date:iso.slice(0,10),time:time === '00:00' ? '' : time }
+}
+
 function TimelineRangeEditor({ range, dates, onClose, onSave }: { range?: TimelineRange | null; dates: string[]; onClose: () => void; onSave: (range: TimelineRange | null) => void }) {
  const dated = dates.map(date => date.slice(0, 10)).filter(Boolean).sort()
  const [start, setStart] = useState(range?.start || dated[0] || '')
@@ -1106,21 +1143,15 @@ function CaseReportPanel({ report, defaultInvestigator, hasNext, onClose, onSubm
  report:CaseReport;defaultInvestigator:string;hasNext:boolean;onClose:()=>void
  onSubmit:(input:CaseReportSubmissionInput)=>Promise<CaseReport>;onContinue:()=>void
 }) {
-  const [investigatorName,setInvestigatorName]=useState(report.investigatorName || defaultInvestigator)
-  const [evidence,setEvidence]=useState<CaseReportSubmissionInput['evidence']>(() => report.claims.flatMap(claim => claim.evidence.map(item => ({
-    connectionId:item.connectionId,documentExhibitId:item.documentExhibitId,relationText:item.relationText || 'Proof that…',
-    publishedAt:item.publishedAt?.slice(0,10),sourceCitation:item.sourceCitation,sourceUri:item.sourceUri,
-  }))))
+  const investigatorName=report.investigatorName || defaultInvestigator
  const [busy,setBusy]=useState(false)
  const [error,setError]=useState('')
-  const updateEvidence=(connectionId:string,patch:Partial<CaseReportSubmissionInput['evidence'][number]>) => setEvidence(items => items.map(item => item.connectionId === connectionId ? { ...item,...patch } : item))
  const submit=async (event:React.FormEvent) => {
    event.preventDefault();setBusy(true);setError('')
-    try { await onSubmit({ investigatorName,evidence }) }
+    try { await onSubmit({ investigatorName }) }
    catch (reason) { setError(reason instanceof Error ? reason.message : 'Report submission failed') }
    finally { setBusy(false) }
  }
-  const draftByConnection=new Map(evidence.map(item => [item.connectionId,item]))
  return <div className="modal-shade case-report-shade"><form className="window case-report" onSubmit={event => void submit(event)}>
    <header><ClipboardCheck size={16}/><b>{report.title}</b><span/><button type="button" aria-label="Close case report" onClick={onClose}><X size={14}/></button></header>
    <div className="case-report-paper"><div className="case-report-letterhead"><small>GLITCH UNIVERSITY · PRINCIPAL INVESTIGATOR PROGRAMME</small><h2>CASE REPORT</h2><span>FORM GUPI–7 / EVIDENTIARY FINDING</span></div>
@@ -1128,16 +1159,16 @@ function CaseReportPanel({ report, defaultInvestigator, hasNext, onClose, onSubm
        <h3><span>CLAIM {claimIndex + 1}</span>{claim.statement}</h3>
        <h4>EVIDENCE</h4>
        {claim.evidence.length === 0 ? <div className="report-empty-evidence">No source evidence is connected to this claim. Return to the board and use red thread to attach a document.</div>
-          : claim.evidence.map(item => { const draft=draftByConnection.get(item.connectionId)!; const rejected=report.status !== 'draft' && !item.evidenceAccepted; return <article className={`report-evidence ${item.evidenceAccepted ? 'verified' : rejected ? 'rejected' : ''}`} key={item.connectionId}>
+          : claim.evidence.map(item => { const rejected=report.status !== 'draft' && !item.evidenceAccepted; return <article className={`report-evidence ${item.evidenceAccepted ? 'verified' : rejected ? 'rejected' : ''}`} key={item.connectionId}>
            <div className="report-evidence-heading"><b>Exhibit {item.displayNumber}</b><span>{item.fileType.replaceAll('_',' ')} · {item.documentTitle}</span>{item.evidenceAccepted ? <em>CONTENT VERIFIED</em> : rejected ? <em className="rejected">NOT VERIFIED</em> : null}</div>
            {rejected && <p className="report-evidence-diagnostic">{item.verification.detail}</p>}
-            <label><span>EVIDENTIARY STATEMENT</span><textarea aria-label={`Evidence statement for Exhibit ${item.displayNumber}`} rows={2} value={draft.relationText} onChange={event => updateEvidence(item.connectionId,{ relationText:event.target.value })}/></label>
-            <div className="report-fields"><label><span>DATED</span><input aria-label={`Date for Exhibit ${item.displayNumber}`} type="date" value={draft.publishedAt || ''} onChange={event => updateEvidence(item.connectionId,{ publishedAt:event.target.value || undefined })}/></label>
-              <label><span>SOURCE / PUBLICATION</span><input aria-label={`Source for Exhibit ${item.displayNumber}`} value={draft.sourceCitation || ''} placeholder="e.g. Google Patents · GB695913A" onChange={event => updateEvidence(item.connectionId,{ sourceCitation:event.target.value })}/></label></div>
-            <label><span>SOURCE LINK · IF AVAILABLE</span><input aria-label={`Source link for Exhibit ${item.displayNumber}`} type="url" value={draft.sourceUri || ''} placeholder="https://…" onChange={event => updateEvidence(item.connectionId,{ sourceUri:event.target.value })}/></label>
+            <div className="report-reference"><span>EVIDENTIARY STATEMENT</span><p>{item.relationText || 'No evidentiary statement attached.'}</p></div>
+            <div className="report-fields"><div className="report-reference"><span>DATED</span><p>{item.publishedAt?.slice(0,10) || 'NOT RECORDED'}</p></div>
+              <div className="report-reference"><span>SOURCE / PUBLICATION</span><p>{item.sourceCitation || 'NOT RECORDED'}</p></div></div>
+            <div className="report-reference"><span>SOURCE LINK · IF AVAILABLE</span>{item.sourceUri ? <a href={item.sourceUri} target="_blank" rel="noreferrer">{item.sourceUri}</a> : <p>NOT RECORDED</p>}</div>
          </article> })}
      </section>)}
-      <label className="report-investigator"><span>INVESTIGATOR</span><input aria-label="Investigator name" value={investigatorName} maxLength={300} onChange={event => setInvestigatorName(event.target.value)}/></label>
+      <div className="report-investigator report-reference"><span>INVESTIGATOR</span><p>{investigatorName}</p></div>
      {report.status !== 'draft' && <section className={`report-verdict ${report.status}`} role="status"><small>{report.status === 'accepted' ? 'REPORT ACCEPTED' : report.status === 'evidence_accepted_report_incomplete' ? 'EVIDENCE PASSED · REPORT RETURNED' : 'EVIDENCE NOT ESTABLISHED'}</small><p>{report.feedback}</p></section>}
      {error && <p className="flag-error">{error}</p>}
      <div className="case-report-actions"><button type="button" onClick={onClose}>RETURN TO BOARD</button>{report.status === 'accepted'
@@ -1324,14 +1355,19 @@ function FileEditor({ document, canEditGates, onClose, onSave }: { document: Cas
  const [title, setTitle] = useState(document.title)
  const [fileType, setFileType] = useState<SourceFileType>(document.fileType)
  const [captureKind, setCaptureKind] = useState<DocumentCaptureKind>(document.captureKind)
-  const [publishedTime, setPublishedTime] = useState(localDateTime(document.publishedAt))
+  const [publishedDate,setPublishedDate]=useState(() => publishedDateParts(document.publishedAt).date)
+  const [publishedTime,setPublishedTime]=useState(() => publishedDateParts(document.publishedAt).time)
+  const [sourceCitation,setSourceCitation]=useState(document.sourceCitation || '')
+  const [sourceUri,setSourceUri]=useState(document.sourceUri || '')
  const [requiredFlags, setRequiredFlags] = useState((document.requiredFlags || []).join(', '))
  const [metadata, setMetadata] = useState(() => Object.entries(document.metadata).map(([key, value]) => ({ id: uid('metadata'), key, value })))
  const submit = (event: React.FormEvent) => {
    event.preventDefault()
-    const publishedAt = publishedTime ? new Date(publishedTime).toISOString() : undefined
+    const publishedAt=publishedDate ? `${publishedDate}T${publishedTime || '00:00'}:00.000Z` : undefined
    const presentation=documentCapture(captureKind)
-    onSave({ ...document, title: title.trim() || document.fileName || 'UNTITLED FILE', fileType,captureKind,publishedAt,
+    const resolvedTitle=title.trim() || (captureKind === 'clipping' ? sourceCitation.trim() : document.fileName || 'UNTITLED FILE')
+    onSave({ ...document,title:resolvedTitle,fileType,captureKind,publishedAt,
+      sourceCitation:sourceCitation.trim() || undefined,sourceUri:sourceUri.trim() || undefined,
      ...(captureKind !== document.captureKind ? presentation.defaultSize : {}),
      requiredFlags: canEditGates ? [...new Set(requiredFlags.split(',').map(value => value.trim().toLowerCase()).filter(Boolean))] : document.requiredFlags,
      metadata: Object.fromEntries(metadata.filter(row => row.key.trim()).map(row => [row.key.trim(), row.value])) })
@@ -1341,11 +1377,18 @@ function FileEditor({ document, canEditGates, onClose, onSave }: { document: Cas
    <div className="file-editor-body">
      <small>SOURCE FILE WIDGET</small>
      <div className="file-editor-grid">
-        <label className="field"><span>TITLE</span><input value={title} onChange={event => setTitle(event.target.value)}/></label>
+        <label className="field"><span>TITLE · DEFAULTS TO SOURCE FOR CLIPS</span><input aria-label="Document title" value={title} placeholder={captureKind === 'clipping' ? 'Uses Source / Publication when blank' : ''} onChange={event => setTitle(event.target.value)}/></label>
        <label className="field"><span>FILE TYPE</span><select value={fileType} onChange={event => setFileType(event.target.value as SourceFileType)}>{SOURCE_FILE_TYPES.map(type => <option key={type.value} value={type.value}>{type.label}</option>)}</select></label>
      </div>
      <label className="field"><span>BOARD PRESENTATION</span><select aria-label="Board presentation" value={captureKind} onChange={event => setCaptureKind(event.target.value as DocumentCaptureKind)}>{Object.entries(documentCaptureRegistry).map(([kind,definition]) => <option key={kind} value={kind}>{definition.label} — {definition.description}</option>)}</select></label>
-      <label className="field"><span><CalendarClock size={13}/> PUBLISHED TIME · LOCAL</span><input type="datetime-local" value={publishedTime} onChange={event => setPublishedTime(event.target.value)}/></label>
+      <div className="file-editor-grid published-fields">
+        <label className="field"><span><CalendarClock size={13}/> PUBLISHED DATE</span><input aria-label="Published date" type="date" value={publishedDate} onChange={event => { setPublishedDate(event.target.value); if (!event.target.value) setPublishedTime('') }}/></label>
+        <label className="field"><span>TIME · OPTIONAL · UTC</span><input aria-label="Published time" type="time" step="60" disabled={!publishedDate} value={publishedTime} onChange={event => setPublishedTime(event.target.value)}/></label>
+      </div>
+      <div className="file-editor-grid">
+        <label className="field"><span>SOURCE / PUBLICATION</span><input aria-label="Source publication" value={sourceCitation} maxLength={1000} placeholder="e.g. Google Patents · GB695913A" onChange={event => setSourceCitation(event.target.value)}/></label>
+        <label className="field"><span>SOURCE URL</span><input aria-label="Source URL" type="url" value={sourceUri} maxLength={2000} placeholder="https://…" onChange={event => setSourceUri(event.target.value)}/></label>
+      </div>
      {canEditGates && <label className="field gate-field"><span>REVEAL FLAGS · ALL REQUIRED</span><input value={requiredFlags} placeholder="tip.received, archive.unlocked" pattern="[a-z0-9_.\-, ]*" onChange={event => setRequiredFlags(event.target.value)}/><small>Leave blank to show this document when the level first loads.</small></label>}
      <div className="metadata-heading"><div><b>ADDITIONAL METADATA</b><small>FREE-FORM KEY / VALUE FIELDS</small></div><button type="button" onClick={() => setMetadata(rows => [...rows, { id: uid('metadata'), key: '', value: '' }])}><Plus size={13}/> ADD FIELD</button></div>
      <div className="metadata-rows">{metadata.length === 0 && <p>NO ADDITIONAL METADATA</p>}{metadata.map(row => <div className="metadata-row" key={row.id}><input aria-label="Metadata key" placeholder="FIELD" value={row.key} onChange={event => setMetadata(rows => rows.map(candidate => candidate.id === row.id ? { ...candidate, key: event.target.value } : candidate))}/><input aria-label="Metadata value" placeholder="VALUE" value={row.value} onChange={event => setMetadata(rows => rows.map(candidate => candidate.id === row.id ? { ...candidate, value: event.target.value } : candidate))}/><button type="button" aria-label="Remove metadata field" onClick={() => setMetadata(rows => rows.filter(candidate => candidate.id !== row.id))}><Trash2 size={13}/></button></div>)}</div>
@@ -9,6 +9,7 @@ import {
  folderIsOpen,
  moveBoardPoint,
  nextOpenBoardPosition,
+  nextVisibleBoardPosition,
  normalizeCase,
  panViewport,
  relationPosition,
@@ -121,6 +122,32 @@ describe('board coordinate math', () => {
      { x: 826, y: 400, width: 280, height: 160 },
    ], preferred, { width: 280 })).toEqual({ x: 174, y: 400 })
  })
+
+  it('places new evidence within a panned and zoomed mobile viewport', () => {
+    const viewport = { x: -720, y: -310, zoom: .75 }
+    const screen = { width: 390, height: 658 }
+    const size = { width: 244, height: 294 }
+    const position = nextVisibleBoardPosition([], viewport, screen, size, { top: 120, right: 68, bottom: 18, left: 16 })
+    const screenLeft = viewport.x + position.x * viewport.zoom
+    const screenTop = viewport.y + position.y * viewport.zoom
+    expect(screenLeft).toBeGreaterThanOrEqual(16)
+    expect(screenTop).toBeGreaterThanOrEqual(120)
+    expect(screenLeft + size.width * viewport.zoom).toBeLessThanOrEqual(screen.width - 68)
+    expect(screenTop + size.height * viewport.zoom).toBeLessThanOrEqual(screen.height - 18)
+  })
+
+  it('keeps collision avoidance inside the currently visible board area', () => {
+    const viewport = { x: -400, y: -200, zoom: .5 }
+    const screen = { width: 800, height: 600 }
+    const size = { width: 174, height: 145 }
+    const first = nextVisibleBoardPosition([], viewport, screen, size)
+    const second = nextVisibleBoardPosition([{ ...first, ...size }], viewport, screen, size)
+    expect(second).not.toEqual(first)
+    expect(viewport.x + second.x * viewport.zoom).toBeGreaterThanOrEqual(0)
+    expect(viewport.y + second.y * viewport.zoom).toBeGreaterThanOrEqual(0)
+    expect(viewport.x + (second.x + size.width) * viewport.zoom).toBeLessThanOrEqual(screen.width)
+    expect(viewport.y + (second.y + size.height) * viewport.zoom).toBeLessThanOrEqual(screen.height)
+  })
 })

 describe('timeline projection', () => {
@@ -194,7 +221,7 @@ describe('folder domain behavior', () => {

 describe('exhibit disposal', () => {
  it('removes an exhibit and every graph reference while retaining unrelated exhibits', () => {
-    const note = { ...folder, id: 'note-1', type: 'note' as const, title: 'Working note' }
+    const note = { ...folder,id:'note-1',type:'note' as const,title:'Working note',presentation:'luggage' as const }
    const event = { ...folder, id: 'event-1', type: 'event' as const, eventDate: undefined }
    const party = { ...folder, id: 'party-1', type: 'party' as const, partyKind: 'person' as const, aliases: [] }
    const document = { id: 'doc-1', type: 'document' as const, title: 'Source', x: 20, y: 20, width: 174, height: 145, rotation: 0, zIndex: 2, hidden: false, body: [], regions: [], fileType: 'text' as const, captureKind:'unclassified' as const, metadata: {} }
@@ -1,7 +1,9 @@
-import type { BoardView, CaseState, Connection, DocumentCaptureKind, Exhibit, ExhibitRelation, FolderExhibit, OrganizationKind, SourceFileType, TimelineRange, Viewport } from './types'
+import type { BoardView, CaseState, Connection, DocumentCaptureKind, Exhibit, ExhibitRelation, FolderExhibit, NotePresentation, OrganizationKind, SourceFileType, TimelineRange, Viewport } from './types'

 export interface BoardPoint { x: number; y: number }

+function notePresentation(value: unknown): NotePresentation { return value === 'lined_sheet' ? 'lined_sheet' : 'luggage' }
+
 function threadControls(from: BoardPoint, to: BoardPoint, tightness = 65) {
  const tautness = Math.max(0, Math.min(100, Number(tightness) || 0)) / 100
  const distance = Math.hypot(to.x - from.x, to.y - from.y)
@@ -121,6 +123,71 @@ export function nextOpenBoardPosition(
  return { x: Math.max(80, Math.min(bounds.width - size.width - 80, preferred.x)), y: Math.min(bounds.height - height - 80, preferred.y + evidence.length * 24) }
 }

+export interface BoardScreenSize { width: number; height: number }
+export interface BoardScreenInsets { top?: number; right?: number; bottom?: number; left?: number }
+
+/**
+ * Finds an open board position inside the portion of the canvas the player can
+ * currently see. Screen insets reserve space for board chrome such as the mobile
+ * tool rail. If the visible area is too small to contain the whole exhibit, the
+ * exhibit is centred so the largest useful portion remains on screen.
+ */
+export function nextVisibleBoardPosition(
+  exhibits: Pick<Exhibit, 'x' | 'y' | 'width' | 'height'>[],
+  viewport: Viewport,
+  screen: BoardScreenSize,
+  size: { width: number; height: number },
+  insets: BoardScreenInsets = {},
+  boardBounds = { width: 2400, height: 1500 },
+) {
+  if (!Number.isFinite(viewport.zoom) || viewport.zoom <= 0) throw new RangeError('Board zoom must be positive')
+  const left = Math.max(0, insets.left || 0)
+  const top = Math.max(0, insets.top || 0)
+  const right = Math.max(0, insets.right || 0)
+  const bottom = Math.max(0, insets.bottom || 0)
+  const usableWidth = Math.max(1, screen.width - left - right)
+  const usableHeight = Math.max(1, screen.height - top - bottom)
+  const centre = {
+    x: (left + usableWidth / 2 - viewport.x) / viewport.zoom - size.width / 2,
+    y: (top + usableHeight / 2 - viewport.y) / viewport.zoom - size.height / 2,
+  }
+  const worldMinX = 40
+  const worldMinY = 40
+  const worldMaxX = Math.max(worldMinX, boardBounds.width - size.width - 40)
+  const worldMaxY = Math.max(worldMinY, boardBounds.height - size.height - 40)
+  const visibleMinX = Math.max(worldMinX, (left - viewport.x) / viewport.zoom)
+  const visibleMinY = Math.max(worldMinY, (top - viewport.y) / viewport.zoom)
+  const visibleMaxX = Math.min(worldMaxX, (screen.width - right - viewport.x) / viewport.zoom - size.width)
+  const visibleMaxY = Math.min(worldMaxY, (screen.height - bottom - viewport.y) / viewport.zoom - size.height)
+  const clamp = (value: number, minimum: number, maximum: number) => Math.max(minimum, Math.min(maximum, value))
+
+  // A whole exhibit may not fit at the current zoom on a very short landscape
+  // phone. In that case centring it gives the player the largest visible area.
+  const preferred = {
+    x: clamp(centre.x, worldMinX, worldMaxX),
+    y: clamp(centre.y, worldMinY, worldMaxY),
+  }
+  if (visibleMinX > visibleMaxX || visibleMinY > visibleMaxY) return preferred
+  preferred.x = clamp(preferred.x, visibleMinX, visibleMaxX)
+  preferred.y = clamp(preferred.y, visibleMinY, visibleMaxY)
+
+  const gap = 28
+  const overlaps = (x: number, y: number) => exhibits.some(item =>
+    x < item.x + item.width + gap && x + size.width + gap > item.x &&
+    y < item.y + item.height + gap && y + size.height + gap > item.y)
+  const axisCandidates = (origin: number, minimum: number, maximum: number, step: number) => {
+    const values = [origin, minimum, maximum]
+    const rings = Math.ceil((maximum - minimum) / step) + 1
+    for (let ring = 1; ring <= rings; ring += 1) values.push(clamp(origin + ring * step, minimum, maximum), clamp(origin - ring * step, minimum, maximum))
+    return [...new Set(values.map(value => Math.round(value * 1000) / 1000))]
+  }
+  const xs = axisCandidates(preferred.x, visibleMinX, visibleMaxX, size.width + 46)
+  const ys = axisCandidates(preferred.y, visibleMinY, visibleMaxY, size.height + 46)
+  const candidates = xs.flatMap(x => ys.map(y => ({ x, y }))).sort((a, b) =>
+    Math.hypot(a.x - preferred.x, a.y - preferred.y) - Math.hypot(b.x - preferred.x, b.y - preferred.y))
+  return candidates.find(candidate => !overlaps(candidate.x, candidate.y)) || preferred
+}
+
 export function panViewport(origin: Viewport, screenDelta: { x: number; y: number }): Viewport {
  return { ...origin, x: origin.x + screenDelta.x, y: origin.y + screenDelta.y }
 }
@@ -250,6 +317,7 @@ export function normalizeCase(input: CaseState | LegacyCaseState): CaseState {
      views: Array.isArray(state.views) && state.views.length ? state.views : [defaultTimelineView(state.timelineRange)],
      exhibits: state.exhibits.map((exhibit, index) => ({ ...exhibit,
        ...(exhibit.type === 'document' ? { captureKind: documentCaptureKind(exhibit.captureKind) } : {}),
+        ...(exhibit.type === 'note' ? { presentation: notePresentation(exhibit.presentation) } : {}),
        ...placement(exhibit as unknown as Record<string, unknown>, { width: exhibit.type === 'document' ? 174 : 240, height: exhibit.type === 'document' ? 145 : 160 }, index) })),
      updatedAt: state.updatedAt, levelStatus: state.levelStatus, sourceTemplateVersionId: state.sourceTemplateVersionId, editingAllowed: state.editingAllowed,
      newlyVisibleDocumentIds: state.newlyVisibleDocumentIds || [],
@@ -280,7 +348,7 @@ export function normalizeCase(input: CaseState | LegacyCaseState): CaseState {
    if (type === 'folder') return { ...common, type: 'folder', isOpen: (item.config as Record<string, unknown> | undefined)?.open === true }
    if (type === 'event') return { ...common, type: 'event', eventDate: String(item.eventDate || '') || undefined }
    if (type === 'party') return { ...common, type: 'party', partyKind: item.partyKind === 'organization' ? 'organization' : 'person', organizationKind: item.organizationKind as OrganizationKind | undefined, aliases: Array.isArray(item.aliases) ? item.aliases.map(String) : [] }
-    return { ...common, type: 'note' }
+    return { ...common, type: 'note', presentation:notePresentation(item.presentation) }
  })
  const derivedRelations: ExhibitRelation[] = [
    ...legacyRelations.filter(relation => relation.type === 'contains').map(relation => ({ id: String(relation.id), type: 'contains' as const, fromExhibitId: String(relation.fromWidgetId), toExhibitId: String(relation.toWidgetId), sortOrder: Number(relation.sortOrder || 0) })),
@@ -103,7 +103,7 @@ export const exhibitWidgetRegistry: Record<ExhibitType, ExhibitWidgetDefinition>
      ...exhibit.regions.flatMap(region => region.date ? [{ id:`${exhibit.id}:region:${region.id}`,exhibitId:exhibit.id,kind:'region_date' as const,start:region.date,label:region.label }] : []),
    ] : [],searchText:searchable,Component:DocumentWidget },
  note: { modelKind:'exhibit',visualType:'note',shell:'card',defaultSize:{width:108,height:154},capabilities:standardCapabilities,
-    heading:() => 'INVESTIGATOR / NOTE',connectionPorts:notePorts,temporalFacts:() => [],searchText:searchable,Component:NoteWidget },
+    heading:exhibit => exhibit.type === 'note' && exhibit.presentation === 'lined_sheet' ? 'FIELD NOTE / TORN PAGE' : 'INVESTIGATOR / NOTE',connectionPorts:notePorts,temporalFacts:() => [],searchText:searchable,Component:NoteWidget },
  event: { modelKind:'exhibit',visualType:'event',shell:'card',defaultSize:{width:270,height:174},capabilities:standardCapabilities,
    heading:() => 'EVENT / THIS HAPPENED',connectionPorts:standardPorts,temporalFacts:exhibit => exhibit.type === 'event' && exhibit.eventDate
      ? [{ id:`${exhibit.id}:occurred`,exhibitId:exhibit.id,kind:'occurred',start:exhibit.eventDate,label:exhibit.content }] : [],searchText:searchable,Component:EventWidget },
@@ -144,7 +144,7 @@ export const documentCaptureRegistry:Record<DocumentCaptureKind,DocumentCaptureD
  unclassified:{ label:'Not sure',description:'Keep the standard evidence card for now.',defaultSize:{width:174,height:145} },
  photo:{ label:'Mugshot',description:'A portrait or identifying photograph.',defaultSize:{width:188,height:250} },
  scene:{ label:'Image',description:'A place, situation, object, or event is shown.',defaultSize:{width:244,height:200} },
-  clipping:{ label:'Clip',description:'An extract captured from a larger source.',defaultSize:{width:210,height:194} },
+  clipping:{ label:'Clip',description:'An extract mounted on a physical evidence card.',defaultSize:{width:230,height:290} },
  full_page:{ label:'Document',description:'A complete page or formal document view.',defaultSize:{width:205,height:294} },
 }
 export function documentCapture(kind:DocumentCaptureKind) { return documentCaptureRegistry[kind] || documentCaptureRegistry.unclassified }
@@ -166,7 +166,7 @@ button:focus-visible { outline: 2px solid #e99a44; outline-offset: 2px; }
 .text-document-preview textarea::placeholder { color: #76786f; font-size: 9px; letter-spacing: .04em; }
 .board-viewport.threading .text-document-preview textarea { pointer-events: none; }
 .source-file-widget > strong { display: block; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font: 600 9px IBM Plex Mono; }
-.source-file-widget > time { display: block; margin-top: 3px; color: #86603b; font: 7px IBM Plex Mono; }
+.source-file-footer > time { display: block; margin-top: 3px; color: #86603b; font: 7px IBM Plex Mono; }
 .source-file-actions { display: flex; justify-content: space-between; margin-top: 6px; border-top: 1px dashed #969b94; padding-top: 4px; }
 .source-file-actions button { display: flex; align-items: center; gap: 3px; border: 0; background: transparent; padding: 2px; color: #4e5d57; cursor: pointer; font: 600 6px IBM Plex Mono; }

@@ -214,32 +214,39 @@ button:focus-visible { outline: 2px solid #e99a44; outline-offset: 2px; }
 .mugshot-caption span { position: relative; display: block; min-height: 1.1em; overflow: hidden; color: #171b18; text-overflow: clip; white-space: nowrap; letter-spacing: .01em; }
 .mugshot-caption.writing span::after { content: ''; display: inline-block; width: 4px; height: 3px; margin-left: 1px; border-radius: 50%; background: #171b18; box-shadow: 0 0 2px #171b18; transform: rotate(-18deg); animation: sharpie-nib .12s steps(2,end) infinite; }
@keyframes sharpie-nib { 50% { transform: translateY(-2px) rotate(-18deg);opacity:.72; } }
-.source-file-widget.capture-kind-photo > time { padding-right: 3px; text-align: right; }
+.source-file-widget.capture-kind-photo .source-file-footer > time { padding-right: 3px; text-align: right; }
 .source-file-widget.capture-kind-scene { padding: 9px 9px 10px; background: #e5e0d3; }
 .source-file-widget.capture-kind-scene.open { transform: scale(1) rotate(.35deg); }
 .source-file-widget.capture-kind-scene .source-file-preview { height: 120px; }
 .source-file-widget.capture-kind-scene .source-file-preview img { object-fit: cover; filter: saturate(.86) contrast(1.05); }
 .source-file-widget.capture-kind-scene > strong { font-size: 11px; }
-.source-file-widget.capture-kind-clipping { padding: 9px 12px 11px; background: linear-gradient(103deg,#e7e2d3,#d9d2bf); clip-path: polygon(1% 2%,99% 0,98% 13%,100% 28%,98% 43%,100% 61%,98% 78%,99% 98%,84% 99%,68% 97%,52% 100%,35% 98%,19% 100%,1% 98%,2% 79%,0 62%,2% 45%,0 27%); }
-.source-file-widget.capture-kind-clipping.open { transform: scale(1) rotate(.8deg); }
-.source-file-widget.capture-kind-clipping .source-file-preview { height: 105px; border-color: #b2a996; box-shadow: none; }
-.source-file-widget.capture-kind-clipping .source-file-preview img { object-fit: cover; filter: grayscale(.12) contrast(1.08); }
-.source-file-widget.capture-kind-clipping > strong { font-size: 11px; }
+.source-file-widget.capture-kind-clipping { padding:14px 13px 10px;overflow:visible;background:linear-gradient(105deg,#e2dfcf,#d3d1c2);border:2px solid #b99a68;box-shadow:8px 10px 0 #020b0980,0 0 0 2px #526059; }
+.clip-stamped-pin { position:absolute;z-index:6;top:-7px;left:50%;width:24px;height:24px;translate:-50% 0;rotate:187deg;border:1px solid #5d5e59;border-radius:50%;background:conic-gradient(from 205deg,#73756f,#e5e4da 17%,#8c8e87 34%,#f5f2e5 49%,#74766f 67%,#c5c5bc 84%,#73756f);box-shadow:0 -3px 3px #0008,inset 1px 1px 1px #fff9,inset -2px -2px 2px #36393466;pointer-events:none; }
+.clip-stamped-pin::before { content:'';position:absolute;left:7px;top:5px;width:10px;height:12px;background:#d9d6c7;clip-path:polygon(50% 100%,0 0,100% 0);filter:drop-shadow(0 1px 1px #5b584d88); }
+.source-file-widget.capture-kind-clipping.open { transform:scale(1); }
+.source-file-widget.capture-kind-clipping .source-file-preview { box-sizing:border-box;width:100%;height:210px;margin:3px 0 8px;border:2px solid #f4efe1;background:#c8c2b3;box-shadow:2px 3px 3px #10151170;transform:rotate(var(--clip-inset-rotation,.7deg));transform-origin:50% 48%; }
+.source-file-widget.capture-kind-clipping .source-file-preview img { object-fit:contain;filter:grayscale(.12) contrast(1.08); }
+.source-file-widget.capture-kind-clipping .source-file-footer { display:grid;grid-template-columns:auto minmax(0,1fr);align-items:end;gap:3px 8px; }
+.source-file-widget.capture-kind-clipping .clip-provenance { grid-column:1/-1;justify-self:start;padding:2px 4px;border:1px solid #99554d;color:#873e37;background:#dcc7ba99;font:600 5px IBM Plex Mono;letter-spacing:.08em;transform:rotate(-.7deg);opacity:.82; }
+.source-file-widget.capture-kind-clipping .clip-provenance.complete { border-color:#557565;color:#3d6652;background:#c9d5c999;transform:rotate(.45deg); }
+.source-file-widget.capture-kind-clipping .source-file-footer > time { flex:0 0 auto;margin:0 0 2px;color:#775332; }
+.source-file-widget.capture-kind-clipping .source-file-actions { flex:1;justify-content:flex-end;gap:9px;margin-top:0; }
+.source-file-widget.capture-kind-clipping .source-file-actions button { color:#4e5d57;text-shadow:none; }
 .source-file-widget.capture-kind-full_page { padding: 9px 10px 11px; background: #ebe7da; box-shadow: 5px 7px 3px #02090780, inset 0 0 22px #8e887244; }
 .source-file-widget.capture-kind-full_page.open { transform: scale(1) rotate(-.25deg); }
 .source-file-widget.capture-kind-full_page .source-file-preview { height: 211px; background: #f5f2e9; border-color: #b3ae9f; box-shadow: none; }
 .source-file-widget.capture-kind-full_page .source-file-preview img { object-fit: contain; }
 .source-file-widget.capture-kind-full_page > strong { font-size: 10px; }
-.evidence-card.note { width: 108px !important; height: 154px; min-height: 154px; padding: 27px 10px 11px; rotate: -2deg !important; z-index: 2; }
-.evidence-card.note header { position: absolute; left: 9px; right: 9px; top: 21px; padding-bottom: 3px; font-size: 6px; color: #5b472d; border-color: #7e6542; }
-.evidence-card.note header i { display: none; }
-.evidence-card.note .card-content { height: 108px; padding-top: 10px; overflow: hidden; transition: transform .22s ease; }
-.evidence-card.note h3 { color: #5b3c24; font-size: 7px; margin: 2px 0 5px; }
-.evidence-card.note p { display: -webkit-box; overflow: hidden; -webkit-line-clamp: 4; -webkit-box-orient: vertical; font-family: Special Elite; font-size: 12px; line-height: 1.25; }
-.evidence-card.note.selected { z-index: 12; outline: 1px dashed #e6b168; outline-offset: 5px; transform: rotate(90deg) scale(1.55); filter: drop-shadow(12px 8px 5px #0008); }
-.evidence-card.note.selected .card-content { width: 142px; height: 94px; margin: 4px 0 0 -17px; overflow: visible; transform: rotate(-90deg); }
-.evidence-card.note.selected p { display: block; overflow: visible; font-size: 13px; line-height: 1.32; }
-.evidence-card.note.selected h3 { font-size: 7px; }
+.evidence-card.note.luggage-tag { width: 108px !important; height: 154px; min-height: 154px; padding: 27px 10px 11px; rotate: -2deg !important; z-index: 2; }
+.evidence-card.note.luggage-tag header { position: absolute; left: 9px; right: 9px; top: 21px; padding-bottom: 3px; font-size: 6px; color: #5b472d; border-color: #7e6542; }
+.evidence-card.note.luggage-tag header i { display: none; }
+.evidence-card.note.luggage-tag .card-content { height: 108px; padding-top: 10px; overflow: hidden; transition: transform .22s ease; }
+.evidence-card.note.luggage-tag h3 { color: #5b3c24; font-size: 7px; margin: 2px 0 5px; }
+.evidence-card.note.luggage-tag p { display: -webkit-box; overflow: hidden; -webkit-line-clamp: 4; -webkit-box-orient: vertical; font-family: Special Elite; font-size: 12px; line-height: 1.25; }
+.evidence-card.note.luggage-tag.selected { z-index: 12; outline: 1px dashed #e6b168; outline-offset: 5px; transform: rotate(90deg) scale(1.55); filter: drop-shadow(12px 8px 5px #0008); }
+.evidence-card.note.luggage-tag.selected .card-content { width: 142px; height: 94px; margin: 4px 0 0 -17px; overflow: visible; transform: rotate(-90deg); }
+.evidence-card.note.luggage-tag.selected p { display: block; overflow: visible; font-size: 13px; line-height: 1.32; }
+.evidence-card.note.luggage-tag.selected h3 { font-size: 7px; }
 .board-actions { position: absolute; z-index: 4; bottom: 17px; left: 50%; transform: translateX(-50%); display: flex; align-items: center; height: 43px; background: #102a24ee; border: 1px solid #3c564e; box-shadow: 0 8px 24px #0009; padding: 4px; }
 .board-actions button { height: 33px; border: 0; background: transparent; padding: 0 10px; display: flex; align-items: center; gap: 7px; font: 9px IBM Plex Mono; cursor: pointer; color: #a8b8b2; }
 .board-actions button:hover, .board-actions button.active { background: #27443c; color: #e4a35e; }
@@ -351,6 +358,7 @@ button:focus-visible { outline: 2px solid #e99a44; outline-offset: 2px; }
 .file-editor-body { padding: 24px 27px 22px; }
 .file-editor-body > small { color: #805027; font: 600 8px IBM Plex Mono; letter-spacing: .16em; }
 .file-editor-grid { display: grid; grid-template-columns: 1fr 180px; gap: 12px; }
+.file-editor-grid.published-fields { grid-template-columns:minmax(0,1fr) 180px; }
 .field > span { display: flex; align-items: center; gap: 6px; }
 .metadata-heading { margin-top: 20px; padding-bottom: 8px; border-bottom: 2px solid #59625d; display: flex; justify-content: space-between; align-items: end; }
 .metadata-heading > div { display: grid; gap: 3px; }
@@ -380,8 +388,8 @@ button:focus-visible { outline: 2px solid #e99a44; outline-offset: 2px; }
 .report-evidence { margin-top:14px; padding:14px 16px 16px; border-left:4px solid #8b5b38; background:#e1ddcfcc; box-shadow:0 1px #fff8; }.report-evidence.verified { border-left-color:#46705c; }.report-evidence.rejected { border-left-color:#913d35;background:#e5d2c7cc; }
 .report-evidence-heading { display:grid; grid-template-columns:auto minmax(0,1fr) auto; align-items:center; gap:10px; margin-bottom:12px; }.report-evidence-heading b { color:#25332d; font:14px Special Elite; }.report-evidence-heading span { overflow:hidden; text-overflow:ellipsis; white-space:nowrap; color:#646c67; font:8px IBM Plex Mono; text-transform:uppercase; }.report-evidence-heading em { padding:3px 5px; border:1px solid #577665; color:#436753; font:600 6px IBM Plex Mono; letter-spacing:.08em; font-style:normal; }
 .report-evidence-heading em.rejected { border-color:#98534b;color:#813a34; }.report-evidence-diagnostic { margin:-3px 0 13px;padding:9px 10px;border:1px solid #b78376;background:#ead8cc;color:#6f302d;font:9px/1.5 IBM Plex Mono; }
-.report-evidence label,.report-investigator { display:grid; gap:4px; margin-top:9px; }.report-evidence label > span,.report-investigator > span { color:#5c655f; font:600 7px IBM Plex Mono; letter-spacing:.11em; }.report-evidence input,.report-evidence textarea,.report-investigator input { width:100%; min-width:0; padding:7px 8px; border:0; border-bottom:1px solid #747b75; outline:0; background:#f2eee0a8; color:#1d2622; font:12px/1.45 Special Elite; resize:vertical; }.report-evidence input:focus,.report-evidence textarea:focus,.report-investigator input:focus { border-bottom-color:#9b582d; background:#f6f0dc; box-shadow:inset 3px 0 #b2784a; }
-.report-fields { display:grid; grid-template-columns:155px minmax(0,1fr); gap:13px; }.report-investigator { margin-top:30px; padding-top:13px; border-top:1px solid #4c554f; }.report-investigator input { max-width:390px; }
+.report-reference { display:grid; gap:4px; margin-top:9px; }.report-reference > span { color:#5c655f; font:600 7px IBM Plex Mono; letter-spacing:.11em; }.report-reference > p,.report-reference > a { width:100%; min-width:0; min-height:31px; margin:0; padding:7px 8px; border-bottom:1px solid #747b75; background:#f2eee0a8; color:#1d2622; font:12px/1.45 Special Elite; overflow-wrap:anywhere; }.report-reference > a { color:#315b52; text-decoration-thickness:1px; text-underline-offset:3px; }
+.report-fields { display:grid; grid-template-columns:155px minmax(0,1fr); gap:13px; }.report-investigator { margin-top:30px; padding-top:13px; border-top:1px solid #4c554f; }.report-investigator p { max-width:390px; }
 .report-verdict { margin-top:28px; padding:17px 19px; border:2px solid #874339; background:#e0c7b9; transform:rotate(-.25deg); }.report-verdict small { color:#7c352f; font:700 8px IBM Plex Mono; letter-spacing:.13em; }.report-verdict p { margin:9px 0 0; font:15px/1.5 Special Elite; }.report-verdict.accepted { border-color:#47705c; background:#d2ddcf; }.report-verdict.accepted small { color:#315b48; }
 .case-report-actions { position:sticky; bottom:-34px; display:flex; justify-content:flex-end; gap:9px; margin:30px -12px -20px; padding:14px 12px 20px; background:linear-gradient(transparent,#ebe7d8 25%); }.case-report-actions button { border:1px outset #8c948e; padding:10px 13px; color:#34443e; background:#c8cbc4; cursor:pointer; font:8px IBM Plex Mono; letter-spacing:.06em; }.case-report-actions .primary { float:none; color:#fff; background:#174337; }.case-report-actions button:disabled { opacity:.55;cursor:progress; }
 .boot { height: 100vh; background: #071916; display: grid; place-content: center; justify-items: center; color: #819b93; font: 11px IBM Plex Mono; letter-spacing: .15em; }.boot .seal { width: 70px; height: 70px; display: grid; place-items: center; border: 2px solid #b87337; color: #d58a46; margin-bottom: 24px; font-weight: 600; }.boot small { color: #4e6a62; }
@@ -806,8 +814,23 @@ button:focus-visible { outline: 2px solid #e99a44; outline-offset: 2px; }
 .notebook-note-actions button:hover { border-color: #6a5a3a; }
 .dialogue-capture { margin-left: 12px; font: 10px IBM Plex Mono, monospace; letter-spacing: 1px; background: #0a211de0; border: 1px solid #6f8f85; color: #cdea6a; padding: 2px 8px; cursor: pointer; vertical-align: middle; }
 .dialogue-capture:hover { border-color: #cdea6a; color: #eafaa0; }
-/* A note torn to the board reads as handwriting too. */
-.evidence-card.note .card-content p { font-family: "Reenie Beanie", cursive; font-size: 19px; line-height: 1.05; color: #26356b; }
+/* Ordinary board notes retain the small luggage-tag treatment. */
+.evidence-card.note.luggage-tag .card-content p { font-family: "Reenie Beanie", cursive; font-size: 19px; line-height: 1.05; color: #26356b; }
+/* Notebook pages stay recognizably part of the notebook after being torn out. */
+.evidence-card.note.lined-sheet { box-sizing:border-box; min-height:270px; padding:18px 20px 20px 43px; overflow:hidden; color:#26356b;
+  border:1px solid #e8dec5; background:
+    linear-gradient(90deg,transparent 0 29px,#c8787880 30px,#c8787880 31px,transparent 32px),
+    repeating-linear-gradient(180deg,#f4ecd6 0 26px,#b3c1c777 27px,#f4ecd6 28px);
+  clip-path:polygon(0 0,100% 0,100% 97.5%,97% 99%,93% 98%,89% 100%,84% 98.5%,79% 100%,74% 98%,68% 99.5%,62% 98%,56% 100%,50% 98.5%,44% 100%,38% 98%,32% 99.5%,26% 98%,20% 100%,14% 98.5%,8% 100%,3% 98%,0 99%);
+  box-shadow:8px 10px 5px #020b0980,0 0 0 1px #6c756f; }
+.evidence-card.note.lined-sheet::before { content:'';position:absolute;left:8px;top:19px;bottom:23px;width:10px;background:radial-gradient(circle at 50% 8px,#34433e 0 3px,#d7ceb8 3.5px 5px,transparent 5.5px) 0 0/10px 34px repeat-y;opacity:.82; }
+.evidence-card.note.lined-sheet::after { display:none; }
+.evidence-card.note.lined-sheet header { height:20px;padding-bottom:4px;border-color:#9ba8aa;color:#6a706b;font-size:7px; }
+.evidence-card.note.lined-sheet header i { display:none; }
+.evidence-card.note.lined-sheet .card-content { height:214px;overflow:hidden; }
+.evidence-card.note.lined-sheet h3 { margin:8px 0 5px;color:#805748;font:600 7px IBM Plex Mono;letter-spacing:.12em; }
+.evidence-card.note.lined-sheet .card-content p { display:block;margin:0;overflow:hidden;color:#26356b;font:24px/28px "Reenie Beanie",cursive;white-space:pre-wrap; }
+.evidence-card.note.lined-sheet.selected { outline:2px solid #e49a4a;outline-offset:5px;filter:drop-shadow(7px 9px 4px #0007); }

 /* === Player auth + character screen (src/play.tsx) ================= */
 .auth-plate { gap: 4px; }
@@ -67,9 +67,12 @@ export interface UploadedCaseDocument extends DocumentExhibit {
  analysis: DocumentUploadAnalysis
 }

+export type NotePresentation = 'luggage' | 'lined_sheet'
+
 export interface NoteExhibit extends ExhibitBase {
  type: 'note'
  content: string
+  presentation: NotePresentation
 }

 export interface EventExhibit extends ExhibitBase {
@@ -221,7 +224,6 @@ export interface CaseReport {

 export interface CaseReportSubmissionInput {
  investigatorName: string
-  evidence: Array<Pick<CaseReportEvidence, 'connectionId' | 'documentExhibitId' | 'relationText' | 'publishedAt' | 'sourceCitation' | 'sourceUri'>>
 }

 export interface CaseState {
Author	SHA1	Message	Date
gitprov	3c099a5daa	Merge branch 'main' of ssh://ramanujan.glitch.university:2222/glitch-university/gupi-osint-board	2026-08-23 01:16:00 +02:00
gitprov	625f28b00b	In the middle of refactoring the mystery seeding	2026-08-23 01:15:49 +02:00
gitprov	9e426e91ab	Keep new evidence visible on the board	2026-08-23 01:15:05 +02:00
gitprovandClaude Opus 4.8	f6fbeb39cf	Make mystery importer seed notes and tolerate sparse manifests Add a notes[] array to the manifest (note exhibits with presentation), so the Scene 6 phone-note board is reproducible from source instead of hand-authored. Also default documents/folders/brief/subtitle so narrative-only mysteries (e.g. barricelli-files) import cleanly. Captures mysteries/barricelli-phone-note/mystery.json from the authored template (note: "PHONE FOR GLITCH HUNTER / Call: 5550100"). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-08-23 00:43:47 +02:00
gitprovandClaude Opus 4.8	ce30321532	Mark auth cookie Secure in production secure keys off NODE_ENV so the auth_token cookie is HTTPS-only in prod while still working over plain HTTP on localhost in dev. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-08-23 00:21:42 +02:00
gitprov	ada26ec40a	Merge remote-tracking branch 'origin/main'	2026-08-22 23:43:33 +02:00
gitprov	74ccd11d0c	Add clipping provenance status stamps	2026-08-22 23:41:08 +02:00
gitprov	1a9b6124c2	Merge remote-tracking branch 'origin/main'	2026-08-22 23:31:23 +02:00
gitprovandClaude Opus 4.8	5eab67dd5d	Remove narrative-todo.md (audited done / superseded) Its live items migrated into story-graph.md and persistent-boards.md; the rest was shipped. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-08-22 23:31:23 +02:00
gitprov	1d1d082a53	Merge remote-tracking branch 'origin/main'	2026-08-22 23:19:53 +02:00
gitprov	fae5200846	Refine board notes, clipping evidence, and case reports	2026-08-22 23:19:46 +02:00
gitprovandClaude Opus 4.8	072e82f253	Prod: public origin gupi.glitch.university, internal services over HTTP CORS_ORIGIN defaults to https://gupi.${DOMAIN} (the TLS frontend served by the proxy); the app still reaches Postgres/MinIO by their docker hostnames over plain HTTP on the shared network. Clarify the split in .env.prod.example and fix the deploy success URL. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-08-22 23:09:43 +02:00
gitprovandClaude Opus 4.8	37c9fa1ebe	Deploy: target /opt/gupi with its own .env.prod Point deploy.sh at /opt/gupi (its own dir + .env.prod) so it uploads, builds on the server, migrates, and runs `docker compose -f /opt/gupi/docker-compose.prod.yml --env-file /opt/gupi/.env.prod up -d`. The app-only prod stack still joins the shared network and uses gu_common's Postgres/MinIO. Adds .env.prod.example as the fill-in template. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-08-22 22:54:18 +02:00
gitprovandClaude Opus 4.8	5754fa1f55	Auth slice 3: dev-only fallback + playthrough owner checks resolveUserId now returns null for an anonymous request in production (no shared identity); the fixed dev user only applies locally. Player-scoped routes (create/advance/goto, achievements, reach, notebook, phone, dial) require a user and verify ownership via ownsPlaythrough — a player can no longer read or act on another's playthrough. Verified: dev anon still plays; cross-user access returns 403/404. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-08-22 22:39:52 +02:00
gitprov	189a98cc64	Merge remote-tracking branch 'local-osint/main'	2026-08-22 21:53:04 +02:00
gitprov	489da14c9e	Reevaluate existing evidence when rules change	2026-08-22 21:52:58 +02:00