havre: robots.txt allowing everything, naming sitemap.txt

labs/aicharts: fast mode (Clef first, LLM checks) as demo default (#42)

Opened 2026-10-14 by a Claude Code session under the owner's login, which is why it read as the operator's PR for three days. Lab-only and reversible: Clef-flash draws first, the LLM checks in parallel, the chart is redrawn only on disagreement; API callers keep the LLM default. The lab's tests pass on the branch (run 652, "aicharts: all good"); its deploy step cannot run from prod, which holds no Cloudflare secrets, so nothing is deployed by this merge.

Squash-merged by the CEO session on the owner's explicit instruction.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017K4vyY3yUD3GsvoZaAtKkD

.github/time/labs/aicharts/aicharts.js

@@ -169,7 +169,8 @@ export function attach(chart, { data, schema, endpoint, dataset }) {
 
 const Base = globalThis.HTMLElement ?? class {};
 
-// <ai-chart endpoint="https://..." dataset="orders" brain="jev"></ai-chart>   brain: llm | jev | clef (server default if unset)
+// <ai-chart endpoint="https://..." dataset="orders" brain="fast"></ai-chart>
+//   brain: fast (decision model first, LLM checks) | llm | jev | clef (server default if unset)
 // Needs Chart.js on the page (window.Chart). Fires "spec" after each answer and "save" when Save is pressed; set
 // element.onSave = async ({ spec, prompt, dataset }) => ... to store charts yourself (the demo stores them in D1).
 export class AiChart extends Base {
@@ -202,7 +203,9 @@ export class AiChart extends Base {
     try {
       await this.load();
       const brain = this.getAttribute("brain");
-      const { spec, ...info } = await fetchSpec(this.endpoint, { dataset: this.dataset, prompt, prior: this._spec, ...(brain ? { brain } : {}) });
+      const body = { dataset: this.dataset, prompt, prior: this._spec };
+      if (brain === "fast") return await this.askFast(body);
+      const { spec, ...info } = await fetchSpec(this.endpoint, { ...body, ...(brain ? { brain } : {}) });
       await this.render(spec, prompt);
       this.dispatchEvent(new CustomEvent("spec", { detail: { spec, prompt, info } }));
     } catch (e) {
@@ -210,6 +213,29 @@ export class AiChart extends Base {
     }
   }
 
+  // brain="fast": a decision model draws first (under a second), an LLM answers in the background, and the chart is
+  // redrawn only if the LLM's chart differs. Whichever comes back alone still draws.
+  async askFast(body) {
+    const ask = ++this._asks || (this._asks = 1);
+    const current = () => ask === this._asks;
+    const same = (a, b) => JSON.stringify({ ...a, title: 0 }) === JSON.stringify({ ...b, title: 0 });
+    const llm = fetchSpec(this.endpoint, { ...body, brain: "llm" }).catch((e) => ({ error: e }));
+    let drawn = null;
+    try {
+      const { spec, ...info } = await fetchSpec(this.endpoint, { ...body, brain: "clef", floor: 0 });
+      if (!current()) return;
+      await this.render(spec, body.prompt);
+      drawn = spec;
+      this.dispatchEvent(new CustomEvent("spec", { detail: { spec, prompt: body.prompt, info: { ...info, stage: "fast" } } }));
+    } catch { /* the LLM will answer */ }
+    const out = await llm;
+    if (!current() || out.error) { if (!drawn && out.error) throw out.error; return; }
+    const { spec, ...info } = out;
+    const changed = !drawn || !same(drawn, spec);
+    if (changed) await this.render(spec, body.prompt);
+    this.dispatchEvent(new CustomEvent("spec", { detail: { spec, prompt: body.prompt, info: { ...info, stage: drawn ? (changed ? "corrected" : "confirmed") : "llm" } } }));
+  }
+
   async render(spec, prompt) {
     await this.load();
     const v = validateSpec(spec, this._schema);

.github/time/labs/aicharts/decide.js

@@ -52,16 +52,18 @@ export function questions(info) {
     x: choice("Which column goes on the x axis (the categories or time the chart is broken down by)?", axis),
     measure: choice("Which quantity does the chart measure?", measure),
     agg: choice("How should that quantity be combined within each group?", AGG_MENU),
-    series: choice("Should the chart split into one coloured series per value of another column? Pick none unless the request compares groups against each other (\"web vs store\", \"by region over time\").",
-      { none: "One series only.", ...Object.fromEntries(text.map((c) => [c.name, `one series per ${c.name}`])) }),
+    series: choice("Does the request compare two or more values of a column side by side (\"web vs store\", \"split by channel\", \"each region over time\")? If so, pick that column; it becomes one coloured line or bar per value. Otherwise none.",
+      { none: "No comparison asked for: a single series.",
+        ...Object.fromEntries(text.map((c) => [c.name, `Compare ${c.name}s (${(info.aggregates[c.name]?.values || []).join(" vs ")}): one series per ${c.name}.`])) }),
     order: choice("How should the groups be ordered?", ORDER_MENU),
     top: choice("Does the request limit how many groups to show?", TOP_MENU),
   };
   for (const c of text) {
     const vals = info.aggregates[c.name]?.values;
     if (vals?.length && vals.length <= 30)
-      q[`only.${c.name}`] = choice(`Does the request restrict the data to one ${c.name}? Pick any unless it names one.`,
-        { any: `No restriction on ${c.name}.`, ...Object.fromEntries(vals.map((v) => [v, `Only ${c.name} = ${v}.`])) });
+      q[`only.${c.name}`] = choice(`Does the request name exactly one ${c.name} to look at (for example "${vals[0]} sales" or "in the ${vals[0]}")? Pick that value; pick any if it names none, or names several to compare.`,
+        { any: `The request names no single ${c.name}.`,
+          ...Object.fromEntries(vals.map((v) => [v, `The request mentions "${v}": keep only rows where ${c.name} is ${v}.`])) });
   }
   return q;
 }

.github/time/labs/aicharts/worker.js

@@ -287,8 +287,8 @@ h2{font-size:18px;margin:28px 0 8px}.row{display:flex;flex-wrap:wrap;gap:8px;ali
 </style></head><body><main>
 <h1>AICharts</h1>
 <p class="lede">Ask for a chart in plain words. The model writes a small spec that is checked before anything draws, and never sees the rows: only column names, five sample rows and value ranges. Data: a sample tea shop, 24 months of orders.</p>
-<div class="row"><div class="chips" id="chips"></div><label class="brain">Brain <select id="brain"><option value="">default</option><option value="jev">Jev</option><option value="clef">Clef</option><option value="llm">LLM</option></select></label></div>
-<ai-chart dataset="orders"></ai-chart>
+<div class="row"><div class="chips" id="chips"></div><label class="brain">Brain <select id="brain"><option value="fast" selected>Fast (Clef, LLM checks)</option><option value="clef">Clef only</option><option value="jev">Jev</option><option value="llm">LLM only</option></select></label></div>
+<ai-chart dataset="orders" brain="fast"></ai-chart>
 <div class="meta" id="meta"></div>
 <details><summary>Spec</summary><pre id="spec">Ask something first.</pre></details>
 <h2>Saved charts</h2><ul id="saved"><li>None yet.</li></ul>
@@ -310,7 +310,8 @@ brainSel.onchange = () => brainSel.value ? el.setAttribute("brain", brainSel.val
 el.addEventListener("spec", (e) => {
   const { spec, info = {} } = e.detail;
   document.getElementById("spec").textContent = JSON.stringify({ ...info, spec }, null, 2);
-  const bits = [info.brain && "via " + info.brain + (info.handoff ? " (handed off: " + info.handoff.reason + ")" : ""),
+  const stage = { fast: "first draw", confirmed: "LLM agrees", corrected: "corrected by the LLM" }[info.stage];
+  const bits = [stage, info.brain && "via " + info.brain + (info.handoff ? " (handed off: " + info.handoff.reason + ")" : ""),
                 info.ms != null && info.ms + " ms", info.confidence != null && "confidence " + info.confidence].filter(Boolean);
   meta.replaceChildren(document.createTextNode(bits.join(" · ")));
   for (const alt of info.alternatives || []) {

.github/time/test_time.py

@@ -222,6 +222,7 @@ prh = {**pr, "head": {"sha": "abc"}}
 chk = {7: {"pr": {**prh, "state": "open"}, "statuses": [{"status": "pending", "context": "ci"}, {"status": "success", "context": "lint"}]}}
 run(World([card(1, D)], {1: [beat("dispatched", launched=True)]}, [prh], None, chk), {"TIME_MODE": "live", "CURSOR_API_KEY": "ck", "TIME_REVIEW": "venice:kimi"})
 assert "# Checks\n- ci: pending\n- lint: success\n\n# Diff" in seen["user"], seen["user"]
+assert "means that context reported success" in seen["system"] and "tests or builds passed" not in seen["system"]
 assert "evidence you can rely on" in seen["system"] and "pending check is not yet evidence" in seen["system"]
 run(World([card(1, D)], {1: [beat("dispatched", launched=True)]}, [prh]), {"TIME_MODE": "live", "CURSOR_API_KEY": "ck", "TIME_REVIEW": "venice:kimi"})
 assert "# Checks\n(checks unavailable)\n\n# Diff" in seen["user"], seen["user"]
@@ -280,6 +281,14 @@ assert not merged(w) and "objected" in w.posted[0][1]
 # protected paths -> human merges
 w = run(pr_world(files=[".github/workflows/ci.yml"]), {**K, "TIME_AUTOMERGE": "on"})
 assert not merged(w) and "protected paths" in w.posted[0][1]
+# the default protects all of .github/, the engine included; TIME_PROTECTED can narrow that to the workflow dirs, which stay
+# protected whatever it says
+w = run(pr_world(files=[".github/time/time.py", "CHANGELOG.md"]), {**K, "TIME_AUTOMERGE": "on"}); assert not merged(w)
+NARROW = ".github/workflows/,.gitea/workflows/,deploy,infra/,.env,secret"
+w = run(pr_world(files=[".github/time/time.py", "CHANGELOG.md"]), {**K, "TIME_AUTOMERGE": "on", "TIME_PROTECTED": NARROW}); assert merged(w)
+w = run(pr_world(files=[".gitea/workflows/ci.yml"]), {**K, "TIME_AUTOMERGE": "on", "TIME_PROTECTED": "deploy"})
+assert not merged(w) and "protected paths" in w.posted[0][1]
+os.environ.pop("TIME_PROTECTED", None)
 # failing or missing checks block the merge even when approved
 w = run(pr_world(checks=[{"status": "failure", "context": "ci"}]), {**K, "TIME_AUTOMERGE": "on"})
 assert not merged(w) and "checks are failing" in w.posted[0][1]
@@ -395,6 +404,12 @@ assert h.call("open_pr", {"title": "T", "summary": "round two"}) == "updated PR
 assert w.patched[0][0] == 9 and "round two" in w.patched[0][1]["body"] and "Closes #1" in w.patched[0][1]["body"]
 h2 = tm.Hands(2, "time/card-2"); h2.label = "kimi"
 assert h2.call("open_pr", {"title": "T", "summary": "s"}) == "opened PR #42" and len(w.opened) == 1, "a closed PR is not reopened"
+# no duplicate "Closes #N": added when the summary lacks it, left alone when it has it (#1 is not satisfied by #12)
+for summ, n in (("s", 1), ("s\n\nCloses #1", 1), ("s\n\ncloses #1.", 1), ("s\n\nCloses #12", 2)):
+    w = World([], prs=[{"number": 9, "state": "open", "head": {"ref": "time/card-1"}}]); tm.http = w.http
+    h = tm.Hands(1, "time/card-1"); h.label = "kimi"; h.call("open_pr", {"title": "T", "summary": summ})
+    body = w.patched[0][1]["body"]
+    assert body.lower().count("closes #1") == n and body.count("Closes #1\n") + body.count("Closes #1.") <= 1, (summ, body)
 # the Cursor worker answers an objection too: on the PR's own branch, no new PR, the review text in the prompt
 w = objected_world()
 w = run(w, {**K, "TIME_WORKER": "cursor"})

.github/time/time.py

@@ -542,7 +542,9 @@ def verdict(pr: dict, since: str) -> str | None:
 
 def touches_protected(pr_number: int) -> list[str]:
     paths = [p.strip() for p in (os.environ.get("TIME_PROTECTED") or DEFAULT_PROTECTED).split(",") if p.strip()]
-    paths = list(dict.fromkeys([".github/", ".gitea/", *paths]))  # workflows stay a human's merge whatever TIME_PROTECTED says
+    # workflows stay a human's merge whatever TIME_PROTECTED says; the rest is TIME_PROTECTED's call: the default keeps all
+    # of .github/, and a repo that trusts its reviewer can narrow it so the engine under .github/time/ lands like other code
+    paths = list(dict.fromkeys([".github/workflows/", ".gitea/workflows/", *paths]))
     files, page = [], 1
     while True:  # every file, not the first 100; a rename counts under both names
         batch = gh("GET", f"/repos/{REPO}/pulls/{pr_number}/files?limit=100&page={page}")
@@ -875,7 +877,8 @@ class Hands:
             note = ("\n" + "; ".join(kept)) if kept else ""
             return f"exit {p.returncode}\n{(p.stdout + p.stderr)[-6000:]}{note}"
         if name == "open_pr":
-            body = f"{a['summary']}\n\nCloses #{self.n}\n\n<sub>worker: {self.label} via Time</sub>"
+            closes = "" if re.search(rf"\bcloses #{self.n}(?!\d)", a["summary"], re.I) else f"\n\nCloses #{self.n}"  # once only
+            body = f"{a['summary']}{closes}\n\n<sub>worker: {self.label} via Time</sub>"
             if (old := open_pr_for(self.branch)):  # a revision: the PR is open already, so say what changed there
                 gh("PATCH", f"/repos/{REPO}/pulls/{old['number']}", {"title": a["title"][:200], "body": body}, as_time=True)
                 self.pr = old["number"]
@@ -1026,7 +1029,7 @@ def review(card: dict, pr: dict, done: str) -> dict:
                   + REVIEW_PROMPT.format(pr=pr["number"], repo=REPO, n=card["number"], title=card["title"], done=done)
                   .replace("Leave one PR comment that", "Your reply is posted as the PR comment. It")
                   + "\nThe checks listed under # Checks are the head commit's real statuses: evidence you can rely on "
-                    "(a success there means those tests or builds passed). A pending check is not yet evidence either way.")
+                    "(a success there means that context reported success). A pending check is not yet evidence either way.")
         text = think(seat, model, effort, system, user)
         gh("POST", f"/repos/{REPO}/issues/{pr['number']}/comments",
            {"body": f"{text}\n\n<sub>review by {seat} · {model or SEATS[seat]['default']} · via Time</sub>"})

.github/workflows/heartbeat.yml

@@ -24,7 +24,7 @@ jobs:
         (startsWith(github.event.comment.body, '**Approve') || startsWith(github.event.comment.body, 'Approve') ||
          startsWith(github.event.comment.body, '**Object') || startsWith(github.event.comment.body, 'Object'))))
     runs-on: ubuntu-latest
-    timeout-minutes: 20
+    timeout-minutes: 55   # workers can overlap inside one job now (#75); under the hourly cadence, and the concurrency group queues the next run
     steps:
       - uses: actions/checkout@v5
         with:
@@ -37,6 +37,11 @@ jobs:
           VENICE_API_KEY: ${{ secrets.VENICE_API_KEY }}
           ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}   # user-level secret on teahubxyz (docs/decisions.md on the spine)
           TIME_TOKEN: ${{ secrets.TIME_TOKEN }}   # repo secret: the `time` bot opens and merges PRs (Gitea denies that to the Actions identity)
+          TIME_SEAT_CLAUDE: ${{ secrets.TIME_SEAT_CLAUDE }}   # umbrella seat, retired once the per-seat tokens below are in use (#76)
+          TIME_SEAT_HAIKU: ${{ secrets.TIME_SEAT_HAIKU }}     # one Gitea user per seat (model line): a seat's verdict is a real review by its own user (#76)
+          TIME_SEAT_SONNET: ${{ secrets.TIME_SEAT_SONNET }}
+          TIME_SEAT_OPUS: ${{ secrets.TIME_SEAT_OPUS }}
+          TIME_SEAT_FABLE: ${{ secrets.TIME_SEAT_FABLE }}
           TIME_TRUSTED: ${{ vars.TIME_TRUSTED }}   # org owners etc.; collaborators are trusted without being listed
           TIME_RUN_IMAGE: node:22-bookworm   # the worker's shell runs in a throwaway container, not next to these secrets
           TIME_MODE: ${{ vars.TIME_MODE }}

CHANGELOG.md

@@ -18,6 +18,7 @@
 - The second fix round escalates to Kimi's code model (`venice:kimi code`) instead of grok 4.7: still a different model from the first round, at a fraction of the cost. `TIME_VENTURE_ESCALATE` overrides it.
 
 ### Added
+- `TIME_PROTECTED` now governs every protected path except the workflow directories (`.github/workflows/`, `.gitea/workflows/`), which stay a human's merge whatever it says. The default still protects all of `.github/`; a repo that trusts its reviewer can set `TIME_PROTECTED=.github/workflows/,.gitea/workflows/,deploy,infra/,.env,secret` so the engine under `.github/time/` merges itself on Approve + green like any other code.
 - Objections go back to the worker. `/time retry` on a card whose PR is open hands the worker the reviewer's latest comments (marked as the reviewer's, strangers' left out) on the same branch; `open_pr` on an open PR updates its description instead of failing; the card goes back to `dispatched`, so the next beat reviews again and an objection older than the push no longer counts.
 - A batch's children start in the tick that spawned them (GitHub lists a card made a moment ago only later, so they used to wait a tick).
 - Build briefs keep claims to what the code does: no promised features or schedules, and the trending repos are the wave a venture rides, never something it "builds on". Fix rounds take a failing claim off the page rather than building a feature in a hurry. In the first live batch, every fix round was a claim the code didn't back.

time/ledger/2026-10.jsonl

@@ -193,3 +193,43 @@
 {"at":"2026-10-17T18:27:55Z","model":"claude-sonnet-5-5","in":9230,"out":918,"usd":0.02764}
 {"at":"2026-10-17T18:27:59Z","model":"claude-sonnet-5-5","in":10126,"out":226,"usd":0.022512}
 {"at":"2026-10-17T18:28:11Z","model":"claude-haiku-5-5","in":2565,"out":1767,"usd":0.00114}
+{"at":"2026-10-17T20:20:54Z","model":"claude-sonnet-5-5","in":2158,"out":26,"usd":0.004576}
+{"at":"2026-10-17T20:20:56Z","model":"claude-sonnet-5-5","in":2637,"out":163,"usd":0.006904}
+{"at":"2026-10-17T20:20:58Z","model":"claude-sonnet-5-5","in":3153,"out":187,"usd":0.008176}
+{"at":"2026-10-17T20:21:01Z","model":"claude-sonnet-5-5","in":5843,"out":191,"usd":0.013596}
+{"at":"2026-10-17T20:21:06Z","model":"claude-sonnet-5-5","in":6251,"out":341,"usd":0.015912}
+{"at":"2026-10-17T20:21:09Z","model":"claude-sonnet-5-5","in":6655,"out":381,"usd":0.01712}
+{"at":"2026-10-17T20:21:16Z","model":"claude-sonnet-5-5","in":7036,"out":659,"usd":0.020662}
+{"at":"2026-10-17T20:21:20Z","model":"claude-sonnet-5-5","in":7483,"out":397,"usd":0.018936}
+{"at":"2026-10-17T20:21:37Z","model":"claude-sonnet-5-5","in":7960,"out":1855,"usd":0.03447}
+{"at":"2026-10-17T20:21:49Z","model":"claude-sonnet-5-5","in":10584,"out":1157,"usd":0.032738}
+{"at":"2026-10-17T20:21:57Z","model":"claude-sonnet-5-5","in":11307,"out":837,"usd":0.030984}
+{"at":"2026-10-17T20:22:04Z","model":"claude-sonnet-5-5","in":16615,"out":513,"usd":0.03836}
+{"at":"2026-10-17T20:22:17Z","model":"claude-sonnet-5-5","in":19010,"out":942,"usd":0.04744}
+{"at":"2026-10-17T20:22:23Z","model":"claude-sonnet-5-5","in":19216,"out":477,"usd":0.043202}
+{"at":"2026-10-17T20:22:33Z","model":"claude-sonnet-5-5","in":19515,"out":970,"usd":0.04873}
+{"at":"2026-10-17T20:22:45Z","model":"claude-sonnet-5-5","in":19943,"out":1162,"usd":0.051506}
+{"at":"2026-10-17T20:22:47Z","model":"claude-sonnet-5-5","in":22260,"out":116,"usd":0.04568}
+{"at":"2026-10-17T20:22:50Z","model":"claude-sonnet-5-5","in":22837,"out":187,"usd":0.047544}
+{"at":"2026-10-17T20:22:54Z","model":"claude-sonnet-5-5","in":23284,"out":220,"usd":0.048768}
+{"at":"2026-10-17T20:22:56Z","model":"claude-sonnet-5-5","in":24921,"out":165,"usd":0.051492}
+{"at":"2026-10-17T20:22:58Z","model":"claude-sonnet-5-5","in":25358,"out":70,"usd":0.051416}
+{"at":"2026-10-17T20:23:00Z","model":"claude-sonnet-5-5","in":27711,"out":210,"usd":0.057522}
+{"at":"2026-10-17T20:23:04Z","model":"claude-sonnet-5-5","in":31018,"out":347,"usd":0.065506}
+{"at":"2026-10-17T20:23:08Z","model":"claude-sonnet-5-5","in":33756,"out":253,"usd":0.070042}
+{"at":"2026-10-17T20:23:10Z","model":"claude-sonnet-5-5","in":35236,"out":161,"usd":0.072082}
+{"at":"2026-10-17T20:23:16Z","model":"claude-sonnet-5-5","in":37623,"out":401,"usd":0.079256}
+{"at":"2026-10-17T20:23:22Z","model":"claude-sonnet-5-5","in":40686,"out":229,"usd":0.083662}
+{"at":"2026-10-17T20:23:23Z","model":"claude-sonnet-5-5","in":42769,"out":101,"usd":0.086548}
+{"at":"2026-10-17T20:23:26Z","model":"claude-sonnet-5-5","in":45100,"out":186,"usd":0.09206}
+{"at":"2026-10-17T20:23:28Z","model":"claude-sonnet-5-5","in":47113,"out":261,"usd":0.096836}
+{"at":"2026-10-17T20:23:32Z","model":"claude-sonnet-5-5","in":49280,"out":332,"usd":0.10188}
+{"at":"2026-10-17T20:23:34Z","model":"claude-sonnet-5-5","in":51809,"out":190,"usd":0.105518}
+{"at":"2026-10-17T20:23:37Z","model":"claude-sonnet-5-5","in":53813,"out":206,"usd":0.109686}
+{"at":"2026-10-17T20:23:38Z","model":"claude-sonnet-5-5","in":54057,"out":85,"usd":0.108964}
+{"at":"2026-10-17T20:23:40Z","model":"claude-sonnet-5-5","in":54152,"out":114,"usd":0.109444}
+{"at":"2026-10-17T20:23:43Z","model":"claude-sonnet-5-5","in":54408,"out":310,"usd":0.111916}
+{"at":"2026-10-17T20:23:47Z","model":"claude-sonnet-5-5","in":55850,"out":193,"usd":0.11363}
+{"at":"2026-10-17T20:23:49Z","model":"claude-sonnet-5-5","in":58100,"out":213,"usd":0.11833}
+{"at":"2026-10-17T20:23:53Z","model":"claude-sonnet-5-5","in":60500,"out":471,"usd":0.12571}
+{"at":"2026-10-17T20:23:59Z","model":"claude-sonnet-5-5","in":62407,"out":618,"usd":0.130994}

ventures/havre/.well-known/skills/index.json

@@ -0,0 +1,10 @@
+{
+  "skills": [
+    {
+      "name": "havre",
+      "description": "Write AI characters as Havre cards (.havre.json) with a persona, a short-form voice, an optional flow, examples and lineage; export them as Character Card V3 for SillyTavern-style apps; talk to them through Venice's API; and remix someone else's character into an original one, with credit. Use when someone asks for a character, persona or roleplay companion for Havre, a character-card app, or Venice.",
+      "url": "/skill.md",
+      "files": ["skill.md"]
+    }
+  ]
+}

ventures/havre/robots.txt

@@ -0,0 +1,4 @@
+User-agent: *
+Allow: /
+
+Sitemap: https://havre.yolopreneur.lol/sitemap.txt