feat(glass): add plain-language policy room as the ninth basement room

The stable `policy` room completes the design-required Basement. It
presents owner-language autonomy truth - exact owner directions are never
policed, dangerous work gets exactly one consequence confirmation, and
policy governs derived/unattended work - with quotas labeled as technical
execution limits, never money.

- policyActions.ts reproduces the gateway's serde body digest and strict
  canonical safe-snapshot digest byte for byte for the owner-proof binding.
- The versioned client gains an additive requestId option so the policy
  PUT sends the bound correlation id as x-request-id.
- The one Office stream authority exposes policyInvalidationGeneration;
  no second websocket, cursor loop, or event store.
- useExecassPolicyController: identity-bound generation-safe reads, one
  synchronous apply lock, complete-ruleset PUT at the authoritative
  revision, success only after the authoritative response, retained
  drafts on failure and conflict, conflict refetch, and the update's own
  policy.changed echo is never mistaken for a stale identity.
- PolicyRoomPage: profile cards, advanced rules, one review step with the
  concrete consequence then one confirmation, honest loading/error/
  unconfigured states, and the policy pin only on the ready room.
- Policy shares the connectors route like Setup: always available,
  rendered before every connector gate, never redirected to Setup.
- Hidden fourteenth `policy` shortcut with a 24/24 capacity fixture
  (thirteen earlier placements, one explicitly hidden, byte-identical
  refusal, admit-after-free) and config-only pinning.
- Stateful mock policy GET/PUT enforces the production binding identity,
  records exact requests, injects 503/409, and emits policy.changed; the
  mock resume handler now honestly refetches compacted-history cursors so
  live events apply instead of gapping forever.
- Desktop + 390px Playwright proof with exact error accounting.

Validation: typecheck, lint, unit 755/755, build, p5-policy e2e, all P5
anchors, composed core 45/45, contract validator, git diff --check PASS.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: EmergentKnowledgeGroup

apps/mission-control/e2e/mockGateway.mjs

@@ -32,6 +32,7 @@ import { SimpleIntegrationWizard } from "./features/connectors/SimpleIntegration
 import type { SimpleIntegrationId } from "./features/connectors/simpleIntegrations";
 import { useConnectorsController } from "./features/connectors/useConnectorsController";
 import { useExecassOfficeController } from "./features/execassOffice/useExecassOfficeController";
+import { useExecassPolicyController } from "./features/execassPolicy/useExecassPolicyController";
 import type { SetupSurfaceProps } from "./features/setup/SetupControls";
 import { useGlassWindowController } from "./features/glassWindow/useGlassWindowController";
 import { findRoom, roomForTab } from "./glass/floors";
@@ -440,10 +441,11 @@ export default function App() {
       ],
     [connectorsHubEnabled, memoryHubEnabled, runbookHubEnabled]
   );
-  // Setup shares the Connectors render route, but it is the authority used to
-  // turn Connectors back on. Keep that stable room independently available
-  // when the optional Connectors product surface is disabled.
-  const alwaysAvailableElevatorRooms = useMemo(() => ["setup"], []);
+  // Setup and Policy share the Connectors render route, but Setup is the
+  // authority used to turn Connectors back on and Policy is the owner's
+  // autonomy surface. Keep both stable rooms independently available when
+  // the optional Connectors product surface is disabled.
+  const alwaysAvailableElevatorRooms = useMemo(() => ["setup", "policy"], []);
   const elevatorFloors = useResolvedElevator(
     availableTabs,
     alwaysAvailableElevatorRooms,
@@ -684,6 +686,15 @@ export default function App() {
     active: activeTab === "assistant",
     setNotice,
   });
+  // The one App-owned policy controller. Its invalidation signal comes from
+  // the Office controller's durable stream - never a second websocket.
+  const policyController = useExecassPolicyController({
+    settings,
+    tokenConfigured,
+    active: activeTab === "connectors" && resolvedActiveRoomId === "policy",
+    policyInvalidationGeneration: officeController.policyInvalidationGeneration,
+    setNotice,
+  });
   const glassWindowController = useGlassWindowController({
     settings,
     tokenConfigured,
@@ -903,7 +914,8 @@ export default function App() {
     if (
       activeTab === "connectors" &&
       !connectorsHubEnabled &&
-      activeRoomId !== "setup"
+      activeRoomId !== "setup" &&
+      activeRoomId !== "policy"
     ) {
       selectRoom("setup", elevatorFloors);
       setNotice({
@@ -1343,6 +1355,7 @@ export default function App() {
         setNotice={setNotice}
         usageChartsEnabled={usageChartsEnabled}
         setupSurface={setupSurface}
+        policyController={policyController}
         onOpenSimpleIntegrationWizard={openSimpleIntegrationWizard}
         quickGuidesCollapsed={quickGuideState.collapsed}
         quickGuideOpenTab={quickGuideState.openTab}

apps/mission-control/e2e/p5-policy-slice.spec.ts

@@ -25,6 +25,7 @@ import { type CockpitWidgetLayoutV2 } from "../features/cockpit/cockpitLayout";
 import { CockpitWidgetRenderer } from "../features/cockpit/CockpitWidgetRenderer";
 import { ConnectorsPage } from "../features/connectors/ConnectorsPage";
 import type { SetupSurfaceProps } from "../features/setup/SetupControls";
+import type { ExecassPolicyController } from "../features/execassPolicy/useExecassPolicyController";
 import type { SimpleIntegrationId } from "../features/connectors/simpleIntegrations";
 import { useConnectorsController } from "../features/connectors/useConnectorsController";
 import { EventsPage } from "../features/events/EventsPage";
@@ -98,6 +99,8 @@ interface AppContentProps {
   usageChartsEnabled: boolean;
   /** The one shared Setup authority; the Basement Setup room renders it. */
   setupSurface: SetupSurfaceProps;
+  /** The one App-owned policy controller; the Basement Policy room renders it. */
+  policyController: ExecassPolicyController;
   onOpenSimpleIntegrationWizard: (integrationId?: SimpleIntegrationId) => void;
   quickGuidesCollapsed: boolean;
   quickGuideOpenTab: HelpTab | null;
@@ -1045,6 +1048,7 @@ export function AppContent(props: AppContentProps) {
           onOpenSimpleIntegrationWizard={props.onOpenSimpleIntegrationWizard}
           activeRoomId={props.activeRoomId}
           setupSurface={props.setupSurface}
+          policyController={props.policyController}
         />
       </TabBoundaryPane>
 

apps/mission-control/src/App.tsx

@@ -6,7 +6,9 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 import { ConnectorsPage } from "./ConnectorsPage";
 import type { useConnectorsController } from "./useConnectorsController";
+import { fixturePolicyResponse } from "../../glass/execass/fixtures";
 import { DEFAULT_OPSUX_RUNTIME_CONFIG } from "../../lib/opsUxConfig";
+import type { ExecassPolicyController } from "../execassPolicy/useExecassPolicyController";
 import type { SetupSurfaceProps } from "../setup/SetupControls";
 
 vi.mock("../../lib/api", () => ({
@@ -124,10 +126,32 @@ function stubSetupSurface(): SetupSurfaceProps {
   };
 }
 
+function stubPolicyController(
+  overrides: Partial<ExecassPolicyController> = {},
+): ExecassPolicyController {
+  return {
+    phase: "loaded",
+    policy: fixturePolicyResponse(),
+    error: null,
+    draft: null,
+    conflict: false,
+    updateBusy: false,
+    refresh: vi.fn(async () => {}),
+    beginDraft: vi.fn(),
+    setDraftProfile: vi.fn(),
+    setDraftRule: vi.fn(),
+    setDraftChangeSummary: vi.fn(),
+    discardDraft: vi.fn(),
+    applyDraft: vi.fn(async () => ({ ok: true as const, message: "ok" })),
+    ...overrides,
+  };
+}
+
 async function render(
   controller: ConnectorsController,
   activeRoomId: string | null,
   setupSurface: SetupSurfaceProps = stubSetupSurface(),
+  policyController: ExecassPolicyController = stubPolicyController(),
 ) {
   await act(async () => {
     if (!root) {
@@ -139,6 +163,7 @@ async function render(
         onOpenSimpleIntegrationWizard={() => {}}
         activeRoomId={activeRoomId}
         setupSurface={setupSurface}
+        policyController={policyController}
       />,
     );
   });
@@ -204,6 +229,75 @@ describe("ConnectorsPage Basement room seam", () => {
     },
   );
 
+  it("lands the Policy room on its distinct owner-language surface", async () => {
+    await render(stubController(), "policy");
+    expect(
+      container.querySelector('[data-testid="policy-room-page"]'),
+    ).toBeTruthy();
+    expect(container.textContent).toContain("The deal");
+    expect(container.textContent).toContain("Autonomy profile");
+    // The connector tab strip belongs to the Connectors room only.
+    expect(container.querySelector(".mc-connectors-tab-bar")).toBeNull();
+    expect(container.textContent).not.toContain("Quick Setup");
+  });
+
+  it.each([
+    ["disabled", { enabled: false, availability: "disabled" }],
+    ["unsupported", { enabled: true, availability: "unsupported" }],
+    ["error", { enabled: true, availability: "error" }],
+    ["cold loading", { enabled: true, availability: "loading" }],
+  ] as const)(
+    "keeps Policy available through a %s Connectors controller",
+    async (_label, override) => {
+      const controller = stubController({
+        ...override,
+        installedConnectors: [],
+      });
+      await render(controller, "policy");
+
+      expect(
+        container.querySelector('[data-testid="policy-room-page"]'),
+      ).not.toBeNull();
+      expect(container.textContent).toContain("Autonomy profile");
+      expect(container.textContent).not.toContain("Connectors are disabled");
+      expect(container.textContent).not.toContain("Connectors surface unavailable");
+      expect(container.textContent).not.toContain("Connectors failed to load");
+      expect(container.textContent).not.toContain("Loading Connectors");
+    },
+  );
+
+  it("keeps the user's connector tab across a Policy room visit and relands exactly", async () => {
+    const controller = stubController();
+    await render(controller, "connectors");
+    await act(async () => tabButton("Catalog")!.click());
+    expect(tabButton("Catalog")?.className).toContain("active");
+
+    await render(controller, "policy");
+    expect(
+      container.querySelector('[data-testid="policy-room-page"]'),
+    ).toBeTruthy();
+
+    await render(controller, "connectors");
+    expect(tabButton("Registry")?.className).toContain("active");
+  });
+
+  it("offers the Policy pin only under the Policy room identity", async () => {
+    const controller = stubController();
+    await render(controller, "policy");
+    const policyPin = Array.from(container.querySelectorAll("button")).find(
+      (button) => button.getAttribute("aria-label") === "Pin Policy to Office",
+    );
+    expect(policyPin).toBeTruthy();
+
+    await render(controller, "connectors");
+    const stalePolicyPin = Array.from(
+      container.querySelectorAll("button"),
+    ).find(
+      (button) => button.getAttribute("aria-label") === "Pin Policy to Office",
+    );
+    expect(stalePolicyPin).toBeUndefined();
+  });
+
   it("keeps connector quick setup reachable inside the Connectors room", async () => {
     await render(stubController(), "connectors");
     await act(async () => tabButton("Setup")!.click());

apps/mission-control/src/app/AppContent.tsx

@@ -48,6 +48,8 @@ import {
 } from "./connectorsConfig";
 import "./connectors.css";
 import { PinRoomToOffice } from "../execassOffice/PinRoomToOffice";
+import { PolicyRoomPage } from "../execassPolicy/PolicyRoomPage";
+import type { ExecassPolicyController } from "../execassPolicy/useExecassPolicyController";
 import { SetupRoomPage } from "../setup/SetupRoomPage";
 import type { SetupSurfaceProps } from "../setup/SetupControls";
 import { stringifyJson } from "./connectorsModel";
@@ -75,6 +77,12 @@ interface ConnectorsPageProps {
    * Setup room renders it directly; no second store or draft exists here.
    */
   setupSurface: SetupSurfaceProps;
+  /**
+   * The one App-owned ExecAss policy controller. The Policy room renders
+   * it directly; like Setup it shares this mounted route only for the pane
+   * lifecycle and is never gated by connector availability.
+   */
+  policyController: ExecassPolicyController;
 }
 
 function humanize(value: string | null | undefined): string {
@@ -254,6 +262,7 @@ export function ConnectorsPage({
   onOpenSimpleIntegrationWizard,
   activeRoomId,
   setupSurface,
+  policyController,
 }: ConnectorsPageProps) {
   const [activeTab, setActiveTab] = useState<ConnectorsTab>(
     () => (activeRoomId ? ROOM_LANDING_TAB[activeRoomId] : undefined) ?? "setup",
@@ -493,6 +502,12 @@ export function ConnectorsPage({
     return <SetupRoomPage surface={setupSurface} />;
   }
 
+  // Policy is the owner's autonomy surface. Like Setup it owns its own
+  // availability and renders before every connector-specific gate.
+  if (activeRoomId === "policy") {
+    return <PolicyRoomPage controller={policyController} />;
+  }
+
   if (!controller.enabled || controller.availability === "disabled") {
     return (
       <ConnectorsStatePanel

apps/mission-control/src/features/connectors/ConnectorsPage.test.tsx

@@ -158,4 +158,12 @@ export const OFFICE_BLOCK_REGISTRY: readonly OfficeBlockDef[] = [
     defaultSize: "s",
     defaultVisible: false,
   },
+  {
+    id: "policy",
+    rendererKey: "room-shortcut",
+    roomId: "policy",
+    title: "Policy",
+    defaultSize: "s",
+    defaultVisible: false,
+  },
 ];

apps/mission-control/src/features/connectors/ConnectorsPage.tsx

@@ -127,6 +127,15 @@ describe("OFFICE_BLOCK_REGISTRY room shortcuts", () => {
     expect(setup?.defaultSize).toBe("s");
     expect(setup?.defaultVisible).toBe(false);
   });
+
+  test("registers the Policy room shortcut hidden by default", () => {
+    const policy = OFFICE_BLOCK_REGISTRY.find((def) => def.id === "policy");
+    expect(policy).toBeDefined();
+    expect(policy?.rendererKey).toBe("room-shortcut");
+    expect(policy?.roomId).toBe("policy");
+    expect(policy?.defaultSize).toBe("s");
+    expect(policy?.defaultVisible).toBe(false);
+  });
 });
 
 describe("pinRoomBlocksToOffice", () => {
@@ -885,6 +894,114 @@ describe("pinRoomBlocksToOffice", () => {
     ).toHaveLength(1);
   });
 
+  test("the fourteenth shortcut refuses byte-for-byte against thirteen earlier placements with twelve visible", () => {
+    // Thirteen earlier small shortcuts cannot all be visible beside a full
+    // 6x4 canvas, so the honest capacity fixture holds every placement
+    // through Setup while exactly one earlier shortcut is explicitly hidden:
+    // twelve visible s blocks fill 24/24 cells before Policy asks for a slot.
+    localStorage.setItem(
+      GLASS_CONFIG_STORAGE_KEY,
+      JSON.stringify({
+        themeId: "auto",
+        customThemes: [],
+        layout: [
+          { id: "needs-you", size: "l", visible: false },
+          { id: "in-motion", size: "m", visible: false },
+          { id: "done", size: "m", visible: false },
+          { id: "next", size: "s", visible: false },
+        ],
+      }),
+    );
+    const roomsThroughLocks = [
+      "boards",
+      "calendar",
+      "plan",
+      "staff",
+      "history",
+      "connectors",
+      "models",
+      "events",
+      "breakers",
+      "directory",
+      "memory",
+      "locks",
+    ];
+    for (const roomId of roomsThroughLocks) {
+      expect(pinRoomBlocksToOffice(roomId).ok).toBe(true);
+    }
+    // Explicitly hide one earlier placement so Setup - the thirteenth - can
+    // genuinely join the persisted layout.
+    const withTwelve = JSON.parse(
+      localStorage.getItem(GLASS_CONFIG_STORAGE_KEY) ?? "{}",
+    ) as { layout?: { id: string; size: string; visible: boolean }[] };
+    withTwelve.layout = (withTwelve.layout ?? []).map((entry) =>
+      entry.id === "boards" ? { ...entry, visible: false } : entry,
+    );
+    localStorage.setItem(GLASS_CONFIG_STORAGE_KEY, JSON.stringify(withTwelve));
+    expect(pinRoomBlocksToOffice("setup").ok).toBe(true);
+
+    // Prove the precondition: all thirteen earlier placements exist, exactly
+    // one is hidden, and twelve visible s shortcuts occupy 24/24 cells.
+    const layout = loadGlassConfig().layout ?? [];
+    const earlierBlocks = [
+      "boards",
+      "calendar",
+      "strategy",
+      "staff",
+      "history",
+      "connectors",
+      "models",
+      "events",
+      "breakers",
+      "directory",
+      "memory",
+      "locks",
+      "setup",
+    ];
+    for (const id of earlierBlocks) {
+      expect(layout.some((entry) => entry.id === id)).toBe(true);
+    }
+    expect(layout.find((entry) => entry.id === "boards")?.visible).toBe(false);
+    expect(
+      layout.filter((entry) => entry.visible && entry.size === "s"),
+    ).toHaveLength(12);
+
+    const before = localStorage.getItem(GLASS_CONFIG_STORAGE_KEY);
+    const result = pinRoomBlocksToOffice("policy");
+    expect(result.ok).toBe(false);
+    expect(result.error).toMatch(/exceed/i);
+    expect(localStorage.getItem(GLASS_CONFIG_STORAGE_KEY)).toBe(before);
+    expect(
+      (loadGlassConfig().layout ?? []).find((entry) => entry.id === "policy")
+        ?.visible,
+    ).not.toBe(true);
+
+    // Freeing one visible shortcut admits Policy, and repeating is honest.
+    const stored = JSON.parse(before ?? "{}") as {
+      layout?: { id: string; size: string; visible: boolean }[];
+    };
+    stored.layout = (stored.layout ?? []).map((entry) =>
+      entry.id === "calendar" ? { ...entry, visible: false } : entry,
+    );
+    localStorage.setItem(GLASS_CONFIG_STORAGE_KEY, JSON.stringify(stored));
+    const admitted = pinRoomBlocksToOffice("policy");
+    expect(admitted.ok).toBe(true);
+    expect(admitted.pinned).toEqual(["policy"]);
+    expect(
+      (loadGlassConfig().layout ?? []).find((entry) => entry.id === "policy")
+        ?.visible,
+    ).toBe(true);
+
+    const beforeRepeat = localStorage.getItem(GLASS_CONFIG_STORAGE_KEY);
+    const again = pinRoomBlocksToOffice("policy");
+    expect(again.ok).toBe(true);
+    expect(again.pinned).toEqual([]);
+    expect(localStorage.getItem(GLASS_CONFIG_STORAGE_KEY)).toBe(beforeRepeat);
+    expect(
+      (loadGlassConfig().layout ?? []).filter((entry) => entry.id === "policy"),
+    ).toHaveLength(1);
+  });
+
   test("fails honestly for rooms with no registered Office block yet", () => {
     const result = pinRoomBlocksToOffice("reef");
     expect(result.ok).toBe(false);