diff --git a/CLAUDE-index.md b/CLAUDE-index.md
index 830b840b..32755080 100644
--- a/CLAUDE-index.md
+++ b/CLAUDE-index.md
@@ -2,7 +2,7 @@
 
 Generated by `node scripts/claude-index.cjs` (never edit; on a merge conflict, run it again).
 Grep this file for a word, then read CLAUDE.md from that line (`Read CLAUDE.md offset=<line> limit=60`).
-7068 lines indexed.
+7082 lines indexed.
 
     1  # CLAUDE.md — theprototype.app
 
@@ -363,274 +363,275 @@ Grep this file for a word, then read CLAUDE.md from that line (`Read CLAUDE.md o
  4233  - **flowbite `Button disabled` styling can go stale until the component
  4240  - #14 file-shape traps
  4261  - Connection "connected" state = `$peers.openedPeers`, NOT `userdata.length`
- 4266  - A fixed overlay anchored under the Connect pill can't use a `position:fixed`
- 4272  - Headless e2e can't reach a signaling server (peer.open stays false, `peer.connect`
- 4275  - Svelte 5.5x runes-mode: a MULTI-CODE `svelte-ignore` comment only honors the FIRST
- 4281  - Svelte 5 forbids mixing `on:click` and `onclick` **per component** — match the file's
- 4288  - a11y warnings count against the baseline too. A `<div>` you make keyboard-focusable
- 4296  - Editing svelte files by exact-match is whitespace-sensitive; the files use TABS.
- 4300  - Module-level `store.subscribe(cb)` runs cb SYNCHRONOUSLY at module eval — any
- 4310  - svelte-awesome-color-picker 4.x (runes rewrite, #15-C)
- 4318  - Toasts (#15-L/P)
- 4328  - PWA (#15-N)
- 4336  - **A component's scoped `<style>` is UNLAYERED, so it beats EVERY Tailwind
- 4345  - **`@apply`-built utilities are compiled onto the CLASS, so the theme remap never
- 4350  - An AUTO-APPLYING tool makes the DEFAULT armed op a behavioural decision.
- 4356  - `prefers-reduced-motion` suppresses `animationend`
- 4360  - `$effect` tracks EVERY store read synchronously inside it — side reads (userdata,
- 4364  - No `bind:value` ping-pong with store round-trips — widgets render from data and write
- 4366  - Media elements: `muted`/`volume` set as properties in an action, not attributes.
- 4367  - The Threlte Canvas wrapper swallows **pointerup AND pointermove** mid-gesture —
- 4369  - Threlte `<T>` `oncreate` passes the ref **DIRECTLY** (`CreateEvent<T> = (ref) => void`),
- 4373  - svelte-awesome-color-picker v4 fires `onInput` ONCE ON MOUNT
- 4383  - Never write through a DERIVED store
- 4393  - **The op TARGET in the mesh/face tools is `opTargetFace()`, never
- 4405  - Mesh ops must survive a CLOSED region and a MULTI-SHELL pick.
- 4413  - New geometry needs its UVs authored, not copied.
- 4421  - AO is a fullscreen pass and mobile GPUs mis-compile it
- 4428  - **A DOM overlay that must AGREE with a threlte frame may not own a
- 4438  - **`OrbitControls.update()` re-derives the camera position from its own spherical
- 4446  - An **`<svg>` is a REPLACED element**: `position: fixed; inset: 0` still leaves it
- 4449  - **flowbite's plugin emits `[type='checkbox']:checked { background-color:
- 4453  - Anything drawn with **`depthWrite: false` loses the postprocessing passes**: the
- 4456  - **A projected world point at y = 0 is UNDER a terrain, so the ray through its pixel
- 4466  - A section that measures CHANGE must re-seed what earlier sections consumed.
- 4471  - **THE MESHGEO CHANNEL CARRIES A TRIANGLE SOUP, so any op committing through it must
- 4479  - A BUFFER-LEVEL check cannot see a shattered mesh, and this one shipped.
- 4483      · for any op that rebuilds geometry, assert the TRIANGLES
- 4486  - **Two different situations both produce "nothing moved", and reporting the wrong one
- 4491  - A repeat carve is NOT idempotent, and a test that claims it is passes vacuously.
- 4497  - A first click that loads its module dynamically feels broken.
- 4503  - **`toJSON` ALWAYS writes the vertex buffer, so "ship it parametric" does not make a
- 4513  - A CARVE is a mesh edit, so it LOCKS the parametric rows
- 4516  - Grid/pattern FOLLOW must snap by the **section period** (`cell × sectionEvery`),
- 4519  - A three.js XR controller cannot be hand-posed in a test
- 4526  - WebXR hand joints: read them from threlte's `useHand('left'/'right')` store
- 4532  - Shared THREE temp vectors corrupt values across helper calls — clone before reuse.
- 4533  - Never write a store from inside its own subscriber (infinite flush loop) — read refs
- 4535  - Vite HMR module identity
- 4539  - flowbite: Modal has no `onopen` (react to the bound store); Dropdown anchors to its
- 4541  - `event.code` (`Digit1`) for digit shortcuts — `event.key` breaks with Shift.
- 4542  - Stores initialized `writable(null)`/`writable([])` infer `never` — annotate with
- 4544  - Runtime = node >= 24
- 4550  - Release ritual (V6)
- 4556  - BVH picking (17-D3)
- 4571  - Deps policy (2026-08-01, post-migrations)
- 4579  - Modal gotcha (flowbite 1.x)
- 4589  - PowerShell mangles emoji AND em-dashes when rewriting files, and inline `node -e`
- 4593  - CSS `transform` makes an element the containing block for `position: fixed`
- 4610  - Configure Scene DEEP LINKS
- 4619  - `backdrop-filter`/`filter` ALSO make an element the containing block for
- 4624  - The camera PiP frame deliberately sits BELOW the tiers (z-index 2): it is a
- 4627  - z-index: ONE SCALE (41 G3b), `ui.css` `:root`, lowest first
- 4638  - flowbite 1.x Dropdowns are TOP-LAYER popovers
- 4653  - `(pointer: coarse)` CAN be emulated after all
- 4660  - Unlayered global CSS silently beats EVERY Tailwind utility
- 4668  - A **`position: absolute`** floating window parked past the right/bottom edge joins the
- 4674  - Menus opened by a LONG PRESS need press-and-click backdrops
- 4679  - Mobile/touch
- 4688  - Responsive layout CSS-var bus (`fix/ui-polish-connect-settings`)
- 4701  - A window bigger than the screen can never be shrunk again
- 4720  - **A floating/absolute element off the RIGHT or BOTTOM edge grows the document (scrollbars
- 4727  - `@threlte/xr` 1.0.0-next.15 crashes on XR session end/inputsourceschange
- 4733      · `guardThrelteXr` Vite transform plugin in vite.config.ts
- 4743  - Nothing in the app disables OrbitControls during a transform-gizmo drag
- 4753  - A check that cannot fail is not a check
- 4758  - **A viewport point probed while a floating panel is CLOSED is not a viewport
- 4766  - A change you cannot make FAIL is a guess, so either prove it or drop it.
- 4773  - A threlte component that REMOUNTS comes back with its prop defaults
- 4778  - Mid-session HMR churn makes e2e runs LIE
- 4785      · 19-A escalation — a DAY-LIVED server serves stale DUAL MODULE INSTANCES
- 4795  - Svelte 5 DELEGATES `onkeydown`/`onpointerdown`/`onclick` attributes
- 4803  - A `derived` store that reads anything off `userData` must list `objectsGroup` in
- 4807  - An INSET viewport (camera PiP) is `setScissorTest(true)` + `setScissor` +
- 4812  - Threlte's `camera.current` is a PLAIN PROPERTY
- 4819  - `Object3D.lookAt` faces **+Z** for plain meshes but **-Z** for cameras/lights
- 4825  - A context menu RESIZES while open (#16-P1 filter row, #16-P2 match list), so its
- 4829  - THREE color management: `setHSL()` works in the LINEAR working space — pass
- 4833  - Reference-space convention in vrControls: `getOffsetReferenceSpace` offset =
- 4834      · -(viewer displacement)
- 4835  - Resolve a VR controller BY HANDEDNESS via `controllerIndexFor` (reads
- 4845  - VR presence broadcasts in the shared CONTENT frame (worldRig-local, `worldToContentPose`)
- 4851  - VR live face-adjust amount clamps are PER-OP: inset `[0.02,0.9]` (a signed `[-5,5]`
- 4857  - Locks: `lockedObjects` holds REMOTE locks only — "we hold X" = X is our selection;
- 4859  - vite re-optimizes new deps on first page load (one reload) — rerun once; lazy wasm
- 4861  - Postprocessing composers (Outline) do NOT render in WebXR — VR indicators are
- 4864  - Module cycles: a static import that closes a loop back into `history` (via
- 4871  - The TDZ-cycle family around history.js
- 4879  - Node cards (flow editor)
- 4886  - Autosave restore re-uuid'd every object
- 4892  - `selectedObject` is `writable([])` and KEEPS the last object after deselect (the
- 4906  - The Bash tool's `cd` leaks into the shared shell cwd — `Set-Location` back to the
- 4908  - Never `git stash pop` to undo a `git stash push -- <file>`
- 4913  - Connect dance (#12 fix)
- 4919  - Physics ↔ rapier traps (#12)
- 4933  - Explorer `addItemFromBytes` TIME-BOXES its decorative thumbnail (Promise.race 4s) —
- 4935  - Static-import cycle map grew in #12: objectActions now imports geometries
- 4940  - The dungeon module publishes gameplay data on its group's `userData.play`
- 4942  - Local-model tool calls (AI assistant)
- 4956  - Re-seating the transform gizmo (17-D)
- 4966  - meshEdit has TWO vertex-selection notions
- 4972  - The Inspector edits the SELECTION SET, not one object (17-D1)
- 4985  - Inspector.svelte is a plain `<script>` (NOT lang="ts")
- 4989  - Icons = `@lucide/svelte` SVG components
- 5009  - **`git checkout --theirs -- <file>` during a merge discards the WHOLE ours side of that
- 5015  - **An attribute INDEX recorded before a `meshgeo` commit addresses a DIFFERENT vertex after
- 5018  - A handle hung past a docked window's edge is clipped away and takes no pointer events
- 5021  - Chromium fires `contextmenu` on the PRESS
- 5023  - The node pane's empty bottom-right corner is the MINIMAP
- 5025  - `.peer-watch` is worn by TWO buttons
- 5029  - A type check cannot tell a shader-driven material from its base
- 5031  - A guard that is redundant on the happy path is not proven by the happy path
- 5033  - A constant in a shader graph must be a Float node
- 5035  - A perRound latch count reads 0 the instant the round ends
- 5039  - A MESH NAME WITH A SPACE ARRIVES UNDERSCORED ON THE PEER
- 5042  - THE MODULES MANAGER'S USER TAB LABEL GROWS A COUNT AFTER AN INSTALL
- 5047  - A MODULE'S NODE-DATA WRITES WERE NOT UNDOABLE AT ALL.
- 5055  - A MODULE EFFECT NODE PINS ITS TARGET'S POSE
- 5061  - A SPAWNED COPY IS A TRANSIENT CLONE WITH NO FLOW NODES
- 5066  - **A SAME-SPOT APPEND FROM TWO LANES MERGES AS A CONFLICT WHOSE UNION IS RIGHT — EXCEPT WHERE
+ 4266  - **`peer.id` does NOT go null on a signaling drop any more — and "is signaling up" is
+ 4280  - A fixed overlay anchored under the Connect pill can't use a `position:fixed`
+ 4286  - Headless e2e can't reach a signaling server (peer.open stays false, `peer.connect`
+ 4289  - Svelte 5.5x runes-mode: a MULTI-CODE `svelte-ignore` comment only honors the FIRST
+ 4295  - Svelte 5 forbids mixing `on:click` and `onclick` **per component** — match the file's
+ 4302  - a11y warnings count against the baseline too. A `<div>` you make keyboard-focusable
+ 4310  - Editing svelte files by exact-match is whitespace-sensitive; the files use TABS.
+ 4314  - Module-level `store.subscribe(cb)` runs cb SYNCHRONOUSLY at module eval — any
+ 4324  - svelte-awesome-color-picker 4.x (runes rewrite, #15-C)
+ 4332  - Toasts (#15-L/P)
+ 4342  - PWA (#15-N)
+ 4350  - **A component's scoped `<style>` is UNLAYERED, so it beats EVERY Tailwind
+ 4359  - **`@apply`-built utilities are compiled onto the CLASS, so the theme remap never
+ 4364  - An AUTO-APPLYING tool makes the DEFAULT armed op a behavioural decision.
+ 4370  - `prefers-reduced-motion` suppresses `animationend`
+ 4374  - `$effect` tracks EVERY store read synchronously inside it — side reads (userdata,
+ 4378  - No `bind:value` ping-pong with store round-trips — widgets render from data and write
+ 4380  - Media elements: `muted`/`volume` set as properties in an action, not attributes.
+ 4381  - The Threlte Canvas wrapper swallows **pointerup AND pointermove** mid-gesture —
+ 4383  - Threlte `<T>` `oncreate` passes the ref **DIRECTLY** (`CreateEvent<T> = (ref) => void`),
+ 4387  - svelte-awesome-color-picker v4 fires `onInput` ONCE ON MOUNT
+ 4397  - Never write through a DERIVED store
+ 4407  - **The op TARGET in the mesh/face tools is `opTargetFace()`, never
+ 4419  - Mesh ops must survive a CLOSED region and a MULTI-SHELL pick.
+ 4427  - New geometry needs its UVs authored, not copied.
+ 4435  - AO is a fullscreen pass and mobile GPUs mis-compile it
+ 4442  - **A DOM overlay that must AGREE with a threlte frame may not own a
+ 4452  - **`OrbitControls.update()` re-derives the camera position from its own spherical
+ 4460  - An **`<svg>` is a REPLACED element**: `position: fixed; inset: 0` still leaves it
+ 4463  - **flowbite's plugin emits `[type='checkbox']:checked { background-color:
+ 4467  - Anything drawn with **`depthWrite: false` loses the postprocessing passes**: the
+ 4470  - **A projected world point at y = 0 is UNDER a terrain, so the ray through its pixel
+ 4480  - A section that measures CHANGE must re-seed what earlier sections consumed.
+ 4485  - **THE MESHGEO CHANNEL CARRIES A TRIANGLE SOUP, so any op committing through it must
+ 4493  - A BUFFER-LEVEL check cannot see a shattered mesh, and this one shipped.
+ 4497      · for any op that rebuilds geometry, assert the TRIANGLES
+ 4500  - **Two different situations both produce "nothing moved", and reporting the wrong one
+ 4505  - A repeat carve is NOT idempotent, and a test that claims it is passes vacuously.
+ 4511  - A first click that loads its module dynamically feels broken.
+ 4517  - **`toJSON` ALWAYS writes the vertex buffer, so "ship it parametric" does not make a
+ 4527  - A CARVE is a mesh edit, so it LOCKS the parametric rows
+ 4530  - Grid/pattern FOLLOW must snap by the **section period** (`cell × sectionEvery`),
+ 4533  - A three.js XR controller cannot be hand-posed in a test
+ 4540  - WebXR hand joints: read them from threlte's `useHand('left'/'right')` store
+ 4546  - Shared THREE temp vectors corrupt values across helper calls — clone before reuse.
+ 4547  - Never write a store from inside its own subscriber (infinite flush loop) — read refs
+ 4549  - Vite HMR module identity
+ 4553  - flowbite: Modal has no `onopen` (react to the bound store); Dropdown anchors to its
+ 4555  - `event.code` (`Digit1`) for digit shortcuts — `event.key` breaks with Shift.
+ 4556  - Stores initialized `writable(null)`/`writable([])` infer `never` — annotate with
+ 4558  - Runtime = node >= 24
+ 4564  - Release ritual (V6)
+ 4570  - BVH picking (17-D3)
+ 4585  - Deps policy (2026-08-01, post-migrations)
+ 4593  - Modal gotcha (flowbite 1.x)
+ 4603  - PowerShell mangles emoji AND em-dashes when rewriting files, and inline `node -e`
+ 4607  - CSS `transform` makes an element the containing block for `position: fixed`
+ 4624  - Configure Scene DEEP LINKS
+ 4633  - `backdrop-filter`/`filter` ALSO make an element the containing block for
+ 4638  - The camera PiP frame deliberately sits BELOW the tiers (z-index 2): it is a
+ 4641  - z-index: ONE SCALE (41 G3b), `ui.css` `:root`, lowest first
+ 4652  - flowbite 1.x Dropdowns are TOP-LAYER popovers
+ 4667  - `(pointer: coarse)` CAN be emulated after all
+ 4674  - Unlayered global CSS silently beats EVERY Tailwind utility
+ 4682  - A **`position: absolute`** floating window parked past the right/bottom edge joins the
+ 4688  - Menus opened by a LONG PRESS need press-and-click backdrops
+ 4693  - Mobile/touch
+ 4702  - Responsive layout CSS-var bus (`fix/ui-polish-connect-settings`)
+ 4715  - A window bigger than the screen can never be shrunk again
+ 4734  - **A floating/absolute element off the RIGHT or BOTTOM edge grows the document (scrollbars
+ 4741  - `@threlte/xr` 1.0.0-next.15 crashes on XR session end/inputsourceschange
+ 4747      · `guardThrelteXr` Vite transform plugin in vite.config.ts
+ 4757  - Nothing in the app disables OrbitControls during a transform-gizmo drag
+ 4767  - A check that cannot fail is not a check
+ 4772  - **A viewport point probed while a floating panel is CLOSED is not a viewport
+ 4780  - A change you cannot make FAIL is a guess, so either prove it or drop it.
+ 4787  - A threlte component that REMOUNTS comes back with its prop defaults
+ 4792  - Mid-session HMR churn makes e2e runs LIE
+ 4799      · 19-A escalation — a DAY-LIVED server serves stale DUAL MODULE INSTANCES
+ 4809  - Svelte 5 DELEGATES `onkeydown`/`onpointerdown`/`onclick` attributes
+ 4817  - A `derived` store that reads anything off `userData` must list `objectsGroup` in
+ 4821  - An INSET viewport (camera PiP) is `setScissorTest(true)` + `setScissor` +
+ 4826  - Threlte's `camera.current` is a PLAIN PROPERTY
+ 4833  - `Object3D.lookAt` faces **+Z** for plain meshes but **-Z** for cameras/lights
+ 4839  - A context menu RESIZES while open (#16-P1 filter row, #16-P2 match list), so its
+ 4843  - THREE color management: `setHSL()` works in the LINEAR working space — pass
+ 4847  - Reference-space convention in vrControls: `getOffsetReferenceSpace` offset =
+ 4848      · -(viewer displacement)
+ 4849  - Resolve a VR controller BY HANDEDNESS via `controllerIndexFor` (reads
+ 4859  - VR presence broadcasts in the shared CONTENT frame (worldRig-local, `worldToContentPose`)
+ 4865  - VR live face-adjust amount clamps are PER-OP: inset `[0.02,0.9]` (a signed `[-5,5]`
+ 4871  - Locks: `lockedObjects` holds REMOTE locks only — "we hold X" = X is our selection;
+ 4873  - vite re-optimizes new deps on first page load (one reload) — rerun once; lazy wasm
+ 4875  - Postprocessing composers (Outline) do NOT render in WebXR — VR indicators are
+ 4878  - Module cycles: a static import that closes a loop back into `history` (via
+ 4885  - The TDZ-cycle family around history.js
+ 4893  - Node cards (flow editor)
+ 4900  - Autosave restore re-uuid'd every object
+ 4906  - `selectedObject` is `writable([])` and KEEPS the last object after deselect (the
+ 4920  - The Bash tool's `cd` leaks into the shared shell cwd — `Set-Location` back to the
+ 4922  - Never `git stash pop` to undo a `git stash push -- <file>`
+ 4927  - Connect dance (#12 fix)
+ 4933  - Physics ↔ rapier traps (#12)
+ 4947  - Explorer `addItemFromBytes` TIME-BOXES its decorative thumbnail (Promise.race 4s) —
+ 4949  - Static-import cycle map grew in #12: objectActions now imports geometries
+ 4954  - The dungeon module publishes gameplay data on its group's `userData.play`
+ 4956  - Local-model tool calls (AI assistant)
+ 4970  - Re-seating the transform gizmo (17-D)
+ 4980  - meshEdit has TWO vertex-selection notions
+ 4986  - The Inspector edits the SELECTION SET, not one object (17-D1)
+ 4999  - Inspector.svelte is a plain `<script>` (NOT lang="ts")
+ 5003  - Icons = `@lucide/svelte` SVG components
+ 5023  - **`git checkout --theirs -- <file>` during a merge discards the WHOLE ours side of that
+ 5029  - **An attribute INDEX recorded before a `meshgeo` commit addresses a DIFFERENT vertex after
+ 5032  - A handle hung past a docked window's edge is clipped away and takes no pointer events
+ 5035  - Chromium fires `contextmenu` on the PRESS
+ 5037  - The node pane's empty bottom-right corner is the MINIMAP
+ 5039  - `.peer-watch` is worn by TWO buttons
+ 5043  - A type check cannot tell a shader-driven material from its base
+ 5045  - A guard that is redundant on the happy path is not proven by the happy path
+ 5047  - A constant in a shader graph must be a Float node
+ 5049  - A perRound latch count reads 0 the instant the round ends
+ 5053  - A MESH NAME WITH A SPACE ARRIVES UNDERSCORED ON THE PEER
+ 5056  - THE MODULES MANAGER'S USER TAB LABEL GROWS A COUNT AFTER AN INSTALL
+ 5061  - A MODULE'S NODE-DATA WRITES WERE NOT UNDOABLE AT ALL.
+ 5069  - A MODULE EFFECT NODE PINS ITS TARGET'S POSE
+ 5075  - A SPAWNED COPY IS A TRANSIENT CLONE WITH NO FLOW NODES
+ 5080  - **A SAME-SPOT APPEND FROM TWO LANES MERGES AS A CONFLICT WHOSE UNION IS RIGHT — EXCEPT WHERE
 
- 5073  ## Verification (mandatory before commit)
+ 5087  ## Verification (mandatory before commit)
 
- 5103  ## Workflow preferences (user)
- 5105  - One commit per phase/feature; message style: `[feat]/[fix] lowercase summary` + body
- 5107  - Plan documents live in the PRIVATE cloud repo: `cloud/plans/core/` (local …
- 5115  - Roadmap ritual: user drops notes → ask 3-4 targeted AskUserQuestion forks (offer a
- 5118  - Design work: screenshot-driven. (Toasts/Connect/Controls were long "keep as-is" but
- 5122  - VR phases: verify math/state headlessly, state clearly that on-device feel is the
- 5124  - Shipping flow (since 2026-07-20): branch-per-batch off `main` → one commit per
- 5127  - Repos (org move 2026-07-21, github.com/theprototype-app)
- 5138  - Status (2026-08-30, latest): **ROUNDS 34+35 — A SAVE NAMES THE ROOM, AND PRIVATE
- 5155  - Status (2026-08-29): **ROUND 33 — THE CONNECT DECISION (49984d9, one commit,
- 5172  - Status (2026-08-29): **ROUND 32 — four reports triaged, three fixed, one ruled**
- 5189      · BASELINE RATCHETED 383/62 -> 363/62
- 5196  - Status (2026-08-29): **ROUND 31 — three reported fixes on top of round 30**
- 5207  - Status (2026-08-28): **ROADMAP 22 ROUND 30 — ROOMS THAT HOLD, AND A LIBRARY THAT
- 5230      · OWED ON DEVICE
- 5233      · FOLLOW-UPS RECORDED
- 5236  - Status (2026-08-27, latest): **ROADMAP 22 ROUNDS 19-28 — THE PREVIEW'S CORNER, WINDOW
- 5238      · 383/62
- 5241      · R19/R21
- 5245      · R20
- 5247      · R24
- 5250      · THE METHOD NOTE WORTH KEEPING
- 5255      · R29 CLOSED THE ONE THAT KEPT COMING BACK
- 5259      · NOT REPRODUCED
- 5262      · OWED
- 5263  - Status (2026-08-27): **ROADMAP 22 ROUNDS 14-18 — PREVIEW SETTINGS SCOPE, AND THE
- 5267      · R14 — WHICH SETTINGS BELONG TO A WINDOW.
- 5275      · R15 — the preview plays animations
- 5277      · R16/R17 — the keyboard.
- 5279      · R18 — two reported bugs, both reproduced first
- 5283      · OWED
- 5285  - Status (2026-08-26, latest): **ROADMAP 22 ROUND 13 — THE 3D PREVIEW'S CONTROLS.** One
- 5289      · THE REPORTED BUG WAS REAL AND IS THE ONE TO REMEMBER
- 5311      · OWED
- 5312  - Status (2026-08-26, later): **ROADMAP 22 ROUND 12 — PREVIEW-WINDOW MATURITY + THE
- 5331      · THE BUG THIS ROUND FOUND, and it is the one worth remembering
- 5351      · OWED
- 5354  - Status (2026-08-26): **ROADMAP 22 ROUND 11 — THE EXPLORER/PREVIEW/SESSIONS BATCH.
- 5366      · THE ROOT CAUSE WORTH REMEMBERING
- 5377      · THE BRIEF'S THUMBNAIL PREMISE DID NOT REPRODUCE
- 5381      · DESIGN DECISIONS I OWNED, stated so they are not re-litigated
- 5391      · OWED, because headless cannot judge it
- 5396  - Status (2026-08-23): **v1.7.0 RELEASED — "Make a game, keep a project"**.
- 5403      · THE LOOSE-SCENES BATCH
- 5424      · ONLY ON EVIDENCE is the rule everywhere
- 5433  - Status (2026-10-02): **1.19.0 "Doors that open, scenes that load, games that switch" — ROADMAP 33, …
- 5446  - Status (2026-10-01): **1.18.0 PREVIEW — ROADMAP 31 "the second Quest round", integrated on `feat/1.18`
- 5458  - Status (2026-09-24): **1.17.0 round 2 + 3 — THE QUEST ROUND AND THE MESHY ASSETS, integrated
- 5470  - Status (2026-09-23): **1.17.0 "Games that look finished" — ROADMAP 30, integrated on `feat/1.17`
- 5484  - Status (2026-09-22): **1.16.0 "Waves, and one world to keep" — ROADMAP 29 ROUND 3, the follow-up
- 5501  - Status (2026-09-20): **1.15.1 "Knock, and a key you never typed" — ROADMAP 29 ROUND 2, the two
- 5520  - Status (2026-09-19): **1.15.0 "Where everyone is" — ROADMAP 29's finished lanes INTEGRATED.**
- 5534  - Status (2026-09-03): **R22 ROUND 36 — DELETED KEEPS ITS STRUCTURE, on lane `core-lane-bin`
- 5563  - Status (2026-09-02): **R22 ROUND 13 SHIPPED — PRs #186 and #188 MERGED to release/next
- 5590  - Status (2026-08-25): **ROADMAP 22 — THE SHARED EXPLORER LIBRARY. R1/R2/R3/R7 + R8 and
- 5605  - Status (2026-08-22, later): **B7 SPAWNER MERGED; DEVX #18, THE PALETTE RULE AND THE
- 5612      · feat/collectible-toolbox-v2
- 5629  - Status (2026-08-22, latest): **21-G ROUND 3 — COLLECTIBLES v3 IS A MODULE. R3a (core
- 5662  - Status (2026-08-21, latest): **ROADMAP 21-G — PROJECTS, CROSS-SCENE PRESENCE,
- 5663  - Status (2026-08-22, latest): **21-G ROUND 2 — DCC-STANDARD PROJECTS (G7-G10 + docs)
- 5687  - Status (2026-08-21): **ROADMAP 21-G — PROJECTS, CROSS-SCENE PRESENCE,
- 5693      · feat/21g-editor
- 5700      · feat/21g-peervars
- 5714  - Status (2026-08-21, later): **ROADMAP 21-F — LEVELS, COLLECTIBLES v2, HUD EDITOR
- 5745  - Status (2026-08-21): **ROADMAP 21-E — GAME HARDENING, ALL EIGHT PHASES EXECUTED AND
- 5769  - Status (2026-08-19): **ROADMAP #21-A IS COMPLETE — A6+A7 (PR #152) and A8 (PR #153)
- 5800  - Status (2026-08-18, latest): **ROADMAP #21-D — HUD INTERACTION + THE GAME SHELL,
- 5826      · GLTFExporter options being `parse()`'s 4th argument
- 5836  - Status (2026-08-18, later): **ROADMAP #21-A — lanes L1 and L2 MERGED, PRs #149 (L1) and
- 5870  - Status (2026-08-18): **ROADMAP #20 MERGED + v1.6.0 — PRs #146 and #147 to
- 5875      · P1
- 5883      · P4
- 5889      · P7b IS THE ONE PLANNED PHASE NOT DONE
- 5894  - Status (2026-08-14, later): **UV TRANSFORM TOOLS — branch `feat/uv-transform-tools`**
- 5921  - Status (2026-08-14): **17-E ANIMATION KEYFRAMES — branch `feat/17e-animation-curves`,
- 5949      · step
- 5963      · **FOLLOW-UP DROP (2026-08-14, plan `plans/core/pending/17-e-animation-followups.md`,
- 5965      · Ctrl+V fires push-to-talk
- 5983      · box + lasso selection of keys
- 6000  - Status (2026-08-17): **THE MESH-EDIT ROUND IS MERGED TO release/next — PRs #132
- 6025  - Status (2026-08-19): **21-C1..C4 TERRAIN + SPLINES — branch `feat/21-terrain-road`
- 6036      · C4
- 6043      · 387/62
- 6057  - Status (2026-08-19): **PER-CAMERA LOOKS — branch `feat/camera-looks` (lane
- 6074  - Status (2026-08-18): **SCENE LOOK / POST-PROCESSING — branch `feat/scene-post-stack`
- 6078      · L1
- 6079      · L2
- 6086      · **the visibility model corrected — the look is DEFAULT-ON for everyone, with
- 6089      · LEFT BEFORE THE PR: the user's visual/feel pass, and a decision on L8
- 6096  - Status (2026-08-19): **21-B PHYSICS PLAY — B1-B6 + A8 EXECUTED**, lane
- 6119      · **STANDING PRE-EXISTING REDS, A/B'd against base 803d040 and NOT from this
- 6124      · ONE UNEXPLAINED, reproducible
- 6131  - Status (2026-08-18, later): **SH6b CLOSED BY MEASUREMENT** — `shader-scene-default`
- 6140  - Status (2026-08-18): **SHADER GRAPHS — SH5/SH6/SH7 + the node MANUAL** (same lane,
- 6145      · SH6
- 6146      · SH7
- 6147      · DOCS
- 6155  - Status (2026-08-17, later): **SHADER GRAPHS — the three OWED items EXECUTED** on the
- 6171  - Status (2026-08-17): **SHADER GRAPH EDITOR — SH0 through SH4 EXECUTED**, lane
- 6175      · 391/62
- 6193  - Status (2026-08-17, later): **v1.5.0 CYCLE — the R-line MERGED, two PRs open.**
- 6221  - Status (2026-08-17): **v1.4.0 RELEASED + four follow-up PRs.** `main` @2d68fdb
- 6246  - Status (2026-08-17, before the 1.5.0 tag): **PR #141 MERGED (animation polish) and
- 6264      · 391/62
- 6267  - Status (2026-08-16): **19-A READY TO PR — P0–P5b + P7a + P7b COMMITTED (12 commits,
- 6307  - Status (2026-08-15, superseded by the entry above): **ROADMAP #19-A IN FLIGHT — the mesh tool …
- 6317      · P2
- 6334  - Status (2026-08-14): **ROADMAP #18 EXECUTED — settings polish, window sizing, Edit Mesh
- 6352      · 391/62
- 6361  - Status (2026-08-11, fifth drop): **knife RUBBER BAND + the P12 wasm question ANSWERED —
- 6376  - Status (2026-08-11, fourth drop): **M9b KNIFE + M7 SYMMETRIZE — PRs #117 + #118 MERGED
- 6389  - Status (2026-08-11, third drop): **BEVEL in all three modes + M8 proportional —
- 6406  - Status (2026-08-11): **MESH PRO TOOLS started — core PR #112 (draft), M4 + M5 in.**
- 6408      · M4 completion = the EDGE GIZMO
- 6428  - Status (2026-08-11): **MESH TOPOLOGY IS STORED DATA — core PR #111** (branch
- 6446  - Status (2026-08-11): **UV EDITOR shipped across five PRs; UV4 unblocked.** #106
- 6466  - Status (2026-08-10): **MESH HARDENING — branch `feat/mesh-hardening`** (off
- 6483      · **NEXT WORKSTREAM (user-approved, ahead of M4 gizmo/M5/M9): stored face
- 6488  - Status (2026-08-10): **17-A MODULE PLATFORM SHIPPED — core PR #101** (branch
- 6499      · MODULE MOVE
- 6514  - Status (2026-08-10): **mesh-editing roadmap M0-M4 + M6 EXECUTED** (plan: cloud
- 6541  - Status (2026-08-06, release): **1.2.0 SHIPPED** — PR #88 (`release/next` → `main`)
- 6555  - Status (2026-08-05, release): **`release/next` ASSEMBLED for 1.2.0** — PRs #86 →
- 6567  - Status (2026-08-05): **15-H scene notes v2/v3 COMPLETE** — branch
- 6586  - Status (2026-08-02): **Roadmap #15 in flight — A+J → PR #81, B+C → PR #82,
- 6599  - Status (2026-08-04, drop 3): **#16 Q5 on the SAME PR #86** — the reported
- 6613  - Status (2026-08-04, drop 2): **#16 follow-ups on the SAME PR #86** — [fix] camera
- 6625  - Status (2026-08-04): **Roadmap #16 (menus, grid & scene cameras) EXECUTED →
- 6638  - Status (2026-08-01): **VR sleeve palette (K1+K2) MERGED to release/next (PR #75)**
- 6649      · AI assistant v3 flow+physics tools: PR #76 OPEN against release/next
- 6670  - Status (2026-08-01): **Colliders v2 + Edit Mesh Pro MERGED to release/next (PR
- 6680      · CL-C
- 6688  - Status (2026-07-28): **v1.0.0 RELEASED** (PR #56 merge-commit → `npm version 1.0.0`
- 6707  - Status (2026-07-26): **Mobile/responsive UI polish — branch
- 6717      · Settings
- 6734      · Logo click
- 6747  - Status (2026-07-25): **Roadmap #14 continuing — open-core cloud MATURED.** cloudApi
- 6757  - Status (2026-07-24): **Roadmap #14 (Connect UX + open-core cloud) IN FLIGHT.**
- 6866      · Roadmap #6 (211-220) ALL SHIPPED
+ 5117  ## Workflow preferences (user)
+ 5119  - One commit per phase/feature; message style: `[feat]/[fix] lowercase summary` + body
+ 5121  - Plan documents live in the PRIVATE cloud repo: `cloud/plans/core/` (local …
+ 5129  - Roadmap ritual: user drops notes → ask 3-4 targeted AskUserQuestion forks (offer a
+ 5132  - Design work: screenshot-driven. (Toasts/Connect/Controls were long "keep as-is" but
+ 5136  - VR phases: verify math/state headlessly, state clearly that on-device feel is the
+ 5138  - Shipping flow (since 2026-07-20): branch-per-batch off `main` → one commit per
+ 5141  - Repos (org move 2026-07-21, github.com/theprototype-app)
+ 5152  - Status (2026-08-30, latest): **ROUNDS 34+35 — A SAVE NAMES THE ROOM, AND PRIVATE
+ 5169  - Status (2026-08-29): **ROUND 33 — THE CONNECT DECISION (49984d9, one commit,
+ 5186  - Status (2026-08-29): **ROUND 32 — four reports triaged, three fixed, one ruled**
+ 5203      · BASELINE RATCHETED 383/62 -> 363/62
+ 5210  - Status (2026-08-29): **ROUND 31 — three reported fixes on top of round 30**
+ 5221  - Status (2026-08-28): **ROADMAP 22 ROUND 30 — ROOMS THAT HOLD, AND A LIBRARY THAT
+ 5244      · OWED ON DEVICE
+ 5247      · FOLLOW-UPS RECORDED
+ 5250  - Status (2026-08-27, latest): **ROADMAP 22 ROUNDS 19-28 — THE PREVIEW'S CORNER, WINDOW
+ 5252      · 383/62
+ 5255      · R19/R21
+ 5259      · R20
+ 5261      · R24
+ 5264      · THE METHOD NOTE WORTH KEEPING
+ 5269      · R29 CLOSED THE ONE THAT KEPT COMING BACK
+ 5273      · NOT REPRODUCED
+ 5276      · OWED
+ 5277  - Status (2026-08-27): **ROADMAP 22 ROUNDS 14-18 — PREVIEW SETTINGS SCOPE, AND THE
+ 5281      · R14 — WHICH SETTINGS BELONG TO A WINDOW.
+ 5289      · R15 — the preview plays animations
+ 5291      · R16/R17 — the keyboard.
+ 5293      · R18 — two reported bugs, both reproduced first
+ 5297      · OWED
+ 5299  - Status (2026-08-26, latest): **ROADMAP 22 ROUND 13 — THE 3D PREVIEW'S CONTROLS.** One
+ 5303      · THE REPORTED BUG WAS REAL AND IS THE ONE TO REMEMBER
+ 5325      · OWED
+ 5326  - Status (2026-08-26, later): **ROADMAP 22 ROUND 12 — PREVIEW-WINDOW MATURITY + THE
+ 5345      · THE BUG THIS ROUND FOUND, and it is the one worth remembering
+ 5365      · OWED
+ 5368  - Status (2026-08-26): **ROADMAP 22 ROUND 11 — THE EXPLORER/PREVIEW/SESSIONS BATCH.
+ 5380      · THE ROOT CAUSE WORTH REMEMBERING
+ 5391      · THE BRIEF'S THUMBNAIL PREMISE DID NOT REPRODUCE
+ 5395      · DESIGN DECISIONS I OWNED, stated so they are not re-litigated
+ 5405      · OWED, because headless cannot judge it
+ 5410  - Status (2026-08-23): **v1.7.0 RELEASED — "Make a game, keep a project"**.
+ 5417      · THE LOOSE-SCENES BATCH
+ 5438      · ONLY ON EVIDENCE is the rule everywhere
+ 5447  - Status (2026-10-02): **1.19.0 "Doors that open, scenes that load, games that switch" — ROADMAP 33, …
+ 5460  - Status (2026-10-01): **1.18.0 PREVIEW — ROADMAP 31 "the second Quest round", integrated on `feat/1.18`
+ 5472  - Status (2026-09-24): **1.17.0 round 2 + 3 — THE QUEST ROUND AND THE MESHY ASSETS, integrated
+ 5484  - Status (2026-09-23): **1.17.0 "Games that look finished" — ROADMAP 30, integrated on `feat/1.17`
+ 5498  - Status (2026-09-22): **1.16.0 "Waves, and one world to keep" — ROADMAP 29 ROUND 3, the follow-up
+ 5515  - Status (2026-09-20): **1.15.1 "Knock, and a key you never typed" — ROADMAP 29 ROUND 2, the two
+ 5534  - Status (2026-09-19): **1.15.0 "Where everyone is" — ROADMAP 29's finished lanes INTEGRATED.**
+ 5548  - Status (2026-09-03): **R22 ROUND 36 — DELETED KEEPS ITS STRUCTURE, on lane `core-lane-bin`
+ 5577  - Status (2026-09-02): **R22 ROUND 13 SHIPPED — PRs #186 and #188 MERGED to release/next
+ 5604  - Status (2026-08-25): **ROADMAP 22 — THE SHARED EXPLORER LIBRARY. R1/R2/R3/R7 + R8 and
+ 5619  - Status (2026-08-22, later): **B7 SPAWNER MERGED; DEVX #18, THE PALETTE RULE AND THE
+ 5626      · feat/collectible-toolbox-v2
+ 5643  - Status (2026-08-22, latest): **21-G ROUND 3 — COLLECTIBLES v3 IS A MODULE. R3a (core
+ 5676  - Status (2026-08-21, latest): **ROADMAP 21-G — PROJECTS, CROSS-SCENE PRESENCE,
+ 5677  - Status (2026-08-22, latest): **21-G ROUND 2 — DCC-STANDARD PROJECTS (G7-G10 + docs)
+ 5701  - Status (2026-08-21): **ROADMAP 21-G — PROJECTS, CROSS-SCENE PRESENCE,
+ 5707      · feat/21g-editor
+ 5714      · feat/21g-peervars
+ 5728  - Status (2026-08-21, later): **ROADMAP 21-F — LEVELS, COLLECTIBLES v2, HUD EDITOR
+ 5759  - Status (2026-08-21): **ROADMAP 21-E — GAME HARDENING, ALL EIGHT PHASES EXECUTED AND
+ 5783  - Status (2026-08-19): **ROADMAP #21-A IS COMPLETE — A6+A7 (PR #152) and A8 (PR #153)
+ 5814  - Status (2026-08-18, latest): **ROADMAP #21-D — HUD INTERACTION + THE GAME SHELL,
+ 5840      · GLTFExporter options being `parse()`'s 4th argument
+ 5850  - Status (2026-08-18, later): **ROADMAP #21-A — lanes L1 and L2 MERGED, PRs #149 (L1) and
+ 5884  - Status (2026-08-18): **ROADMAP #20 MERGED + v1.6.0 — PRs #146 and #147 to
+ 5889      · P1
+ 5897      · P4
+ 5903      · P7b IS THE ONE PLANNED PHASE NOT DONE
+ 5908  - Status (2026-08-14, later): **UV TRANSFORM TOOLS — branch `feat/uv-transform-tools`**
+ 5935  - Status (2026-08-14): **17-E ANIMATION KEYFRAMES — branch `feat/17e-animation-curves`,
+ 5963      · step
+ 5977      · **FOLLOW-UP DROP (2026-08-14, plan `plans/core/pending/17-e-animation-followups.md`,
+ 5979      · Ctrl+V fires push-to-talk
+ 5997      · box + lasso selection of keys
+ 6014  - Status (2026-08-17): **THE MESH-EDIT ROUND IS MERGED TO release/next — PRs #132
+ 6039  - Status (2026-08-19): **21-C1..C4 TERRAIN + SPLINES — branch `feat/21-terrain-road`
+ 6050      · C4
+ 6057      · 387/62
+ 6071  - Status (2026-08-19): **PER-CAMERA LOOKS — branch `feat/camera-looks` (lane
+ 6088  - Status (2026-08-18): **SCENE LOOK / POST-PROCESSING — branch `feat/scene-post-stack`
+ 6092      · L1
+ 6093      · L2
+ 6100      · **the visibility model corrected — the look is DEFAULT-ON for everyone, with
+ 6103      · LEFT BEFORE THE PR: the user's visual/feel pass, and a decision on L8
+ 6110  - Status (2026-08-19): **21-B PHYSICS PLAY — B1-B6 + A8 EXECUTED**, lane
+ 6133      · **STANDING PRE-EXISTING REDS, A/B'd against base 803d040 and NOT from this
+ 6138      · ONE UNEXPLAINED, reproducible
+ 6145  - Status (2026-08-18, later): **SH6b CLOSED BY MEASUREMENT** — `shader-scene-default`
+ 6154  - Status (2026-08-18): **SHADER GRAPHS — SH5/SH6/SH7 + the node MANUAL** (same lane,
+ 6159      · SH6
+ 6160      · SH7
+ 6161      · DOCS
+ 6169  - Status (2026-08-17, later): **SHADER GRAPHS — the three OWED items EXECUTED** on the
+ 6185  - Status (2026-08-17): **SHADER GRAPH EDITOR — SH0 through SH4 EXECUTED**, lane
+ 6189      · 391/62
+ 6207  - Status (2026-08-17, later): **v1.5.0 CYCLE — the R-line MERGED, two PRs open.**
+ 6235  - Status (2026-08-17): **v1.4.0 RELEASED + four follow-up PRs.** `main` @2d68fdb
+ 6260  - Status (2026-08-17, before the 1.5.0 tag): **PR #141 MERGED (animation polish) and
+ 6278      · 391/62
+ 6281  - Status (2026-08-16): **19-A READY TO PR — P0–P5b + P7a + P7b COMMITTED (12 commits,
+ 6321  - Status (2026-08-15, superseded by the entry above): **ROADMAP #19-A IN FLIGHT — the mesh tool …
+ 6331      · P2
+ 6348  - Status (2026-08-14): **ROADMAP #18 EXECUTED — settings polish, window sizing, Edit Mesh
+ 6366      · 391/62
+ 6375  - Status (2026-08-11, fifth drop): **knife RUBBER BAND + the P12 wasm question ANSWERED —
+ 6390  - Status (2026-08-11, fourth drop): **M9b KNIFE + M7 SYMMETRIZE — PRs #117 + #118 MERGED
+ 6403  - Status (2026-08-11, third drop): **BEVEL in all three modes + M8 proportional —
+ 6420  - Status (2026-08-11): **MESH PRO TOOLS started — core PR #112 (draft), M4 + M5 in.**
+ 6422      · M4 completion = the EDGE GIZMO
+ 6442  - Status (2026-08-11): **MESH TOPOLOGY IS STORED DATA — core PR #111** (branch
+ 6460  - Status (2026-08-11): **UV EDITOR shipped across five PRs; UV4 unblocked.** #106
+ 6480  - Status (2026-08-10): **MESH HARDENING — branch `feat/mesh-hardening`** (off
+ 6497      · **NEXT WORKSTREAM (user-approved, ahead of M4 gizmo/M5/M9): stored face
+ 6502  - Status (2026-08-10): **17-A MODULE PLATFORM SHIPPED — core PR #101** (branch
+ 6513      · MODULE MOVE
+ 6528  - Status (2026-08-10): **mesh-editing roadmap M0-M4 + M6 EXECUTED** (plan: cloud
+ 6555  - Status (2026-08-06, release): **1.2.0 SHIPPED** — PR #88 (`release/next` → `main`)
+ 6569  - Status (2026-08-05, release): **`release/next` ASSEMBLED for 1.2.0** — PRs #86 →
+ 6581  - Status (2026-08-05): **15-H scene notes v2/v3 COMPLETE** — branch
+ 6600  - Status (2026-08-02): **Roadmap #15 in flight — A+J → PR #81, B+C → PR #82,
+ 6613  - Status (2026-08-04, drop 3): **#16 Q5 on the SAME PR #86** — the reported
+ 6627  - Status (2026-08-04, drop 2): **#16 follow-ups on the SAME PR #86** — [fix] camera
+ 6639  - Status (2026-08-04): **Roadmap #16 (menus, grid & scene cameras) EXECUTED →
+ 6652  - Status (2026-08-01): **VR sleeve palette (K1+K2) MERGED to release/next (PR #75)**
+ 6663      · AI assistant v3 flow+physics tools: PR #76 OPEN against release/next
+ 6684  - Status (2026-08-01): **Colliders v2 + Edit Mesh Pro MERGED to release/next (PR
+ 6694      · CL-C
+ 6702  - Status (2026-07-28): **v1.0.0 RELEASED** (PR #56 merge-commit → `npm version 1.0.0`
+ 6721  - Status (2026-07-26): **Mobile/responsive UI polish — branch
+ 6731      · Settings
+ 6748      · Logo click
+ 6761  - Status (2026-07-25): **Roadmap #14 continuing — open-core cloud MATURED.** cloudApi
+ 6771  - Status (2026-07-24): **Roadmap #14 (Connect UX + open-core cloud) IN FLIGHT.**
+ 6880      · Roadmap #6 (211-220) ALL SHIPPED
 
- 6878  ## Module SDK (implemented — extend, don't fork)
+ 6892  ## Module SDK (implemented — extend, don't fork)
diff --git a/CLAUDE.md b/CLAUDE.md
index 82cc4eab..2471c2ee 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -4263,6 +4263,20 @@ sub-entry with its line: grep the index for a word, then read this file from tha
   roster-length check shows a phantom peer while pending. `$peers` ticks
   (`peers.update`) on every open/close, so derive from `openedPeers` (#14 CN; the
   Users peers-trigger had this bug too).
+- **`peer.id` does NOT go null on a signaling drop any more — and "is signaling up" is
+  `peer.open`, never `peer.id`** (net-drop-1). peerjs's `Peer.disconnect()`, which runs on every
+  drop of the signaling socket, sets `id` to null until the socket re-registers; everything
+  that asked "who am I" during the gap read null. The cloud roles plugin
+  (`getPeers().peer.id`) counted itself ALONE and wiped its role map, so a joiner came back
+  from a healed drop a VIEWER whose edits never left it (net-drop B -> A red on every
+  deployed build and green on a dev server, which loads no plugin). Core's own readers
+  (own avatar, own locks, shared-library owner, chat, `atscene`) were wrong for the same
+  seconds. `peerDrop.keepPeerId` puts an own getter on the one Peer core builds (live id,
+  else the id it was created with); peerjs's `_id`/`_lastServerId`/`open`/`disconnected`
+  are untouched, and `reconnectDial` checks `peer.disconnected` itself. Suite
+  `net-drop` (own id at the cut; roles unchanged by the heal under
+  `E2E_CLOUD_PLUGIN=https://theprototype.pages.dev/cloud-plugin.js`, the way to run any
+  two-peer suite in the deployed condition on a dev server).
 - A fixed overlay anchored under the Connect pill can't use a `position:fixed`
   click-catcher sized to the viewport — `.connect-wrap`'s `translateX(-50%)` makes it
   the containing block for fixed descendants (the transform gotcha). Close the
diff --git a/src/lib/peerDrop.js b/src/lib/peerDrop.js
index 59f627f1..3ba46731 100644
--- a/src/lib/peerDrop.js
+++ b/src/lib/peerDrop.js
@@ -102,3 +102,30 @@ export function quietPeerError(type, { lastLeaveAt, reconnecting, now }) {
 export function unavailablePeerId(message) {
 	return String(message ?? '').match(/peer\s+([0-9a-z][0-9a-z_-]{2,})\s*$/i)?.[1] ?? '';
 }
+
+/**
+ * net-drop-1: OUR ID OUTLIVES A SIGNALING DROP. peerjs's `Peer.disconnect()` — run on every
+ * drop of the signaling socket — sets `peer.id` to null until the socket re-registers, while every
+ * data conn, lock, roster row and plugin keys on that id, and it comes back unchanged (`reconnect()`
+ * re-registers the id it remembered; a rebuild reuses `PeerConnection.myId`). Everything asking
+ * "who am I" during the gap read null: the cloud roles plugin counted itself ALONE, wiped its role
+ * map, and a joiner came back from a healed drop as a VIEWER whose every edit stayed local (the
+ * net-drop B -> A loss on deployed builds); in core an own avatar, own locks and own shared-library
+ * rows read as somebody else's. An own getter on THIS Peer answers the live id while there is one,
+ * else the id it was created with; peerjs's own bookkeeping (`_id`, `_lastServerId`, `open`,
+ * `disconnected`) is untouched, so "is the signaling link up" is still `open`, never `id`.
+ * @template T @param {T} peer @param {string} id @returns {T}
+ */
+export function keepPeerId(peer, id) {
+	if (!peer || !id) return peer;
+	/** @type {(() => any) | undefined} */
+	let live;
+	for (let o = Object.getPrototypeOf(peer); o && !live; o = Object.getPrototypeOf(o)) live = Object.getOwnPropertyDescriptor(o, 'id')?.get;
+	Object.defineProperty(peer, 'id', {
+		configurable: true,
+		get() {
+			return (live ? live.call(this) : null) ?? id;
+		}
+	});
+	return peer;
+}
diff --git a/src/lib/peerHandler.svelte.js b/src/lib/peerHandler.svelte.js
index e8b9957e..8066f1bf 100644
--- a/src/lib/peerHandler.svelte.js
+++ b/src/lib/peerHandler.svelte.js
@@ -37,7 +37,7 @@ import { registerDebugHook } from '$lib/debugHooks';
 import { routePerfLive, perfLivePeerGone } from '$lib/perf/liveWire.js'; // 34 PF: the live perf stream (an import-free leaf)
 import { noteWireError } from '$lib/wireErrors';
 import { composeAdmitNotice, shortPeer } from '$lib/admitNotice';
-import { ICE_DROP_GRACE_MS, LINK_POLL_MS, strikesNeeded, quietPeerError, unavailablePeerId, consentCounters, linkSilence } from '$lib/peerDrop';
+import { ICE_DROP_GRACE_MS, LINK_POLL_MS, strikesNeeded, quietPeerError, unavailablePeerId, consentCounters, linkSilence, keepPeerId } from '$lib/peerDrop';
 import { createDialBackQueue } from '$lib/dialBackQueue'; // scatter-sync: room edits held for an opening approval dial-back
 import { noteWire } from '$lib/sceneBudget';
 import { applyAnnotation, applyAnnotationsSnapshot, sendAnnotations } from '$lib/annotationsHandler';
@@ -380,7 +380,8 @@ export class PeerConnection {
 			// 36-export: an exported game is single-player and opens NO signaling socket — a stub
 			// Peer that never opens (`connect()` answers undefined, which every dial site already
 			// guards, the signaling-down rule), so `$peers.peer.id` and every send stay valid
-			this.peer = exportMode ? /** @type {Peer} */ (offlinePeer(this.myId)) : new Peer(this.myId, options);
+			// net-drop-1: the id stays readable through a signaling drop (peerDrop.keepPeerId)
+			this.peer = exportMode ? /** @type {Peer} */ (offlinePeer(this.myId)) : keepPeerId(new Peer(this.myId, options), this.myId);
 		};
 
 		// 27-F (audit H2): THE recreate ritual, in one place. Four callers had their own
@@ -2156,7 +2157,8 @@ export class PeerConnection {
 	 * Called from the window's timers and when the signaling link comes back.
 	 * @param {string} peerId */
 	reconnectDial(peerId) {
-		if (this.connections[peerId] || !(this.peer.id < peerId)) return;
+		// a Peer off the signaling server cannot dial (its id still reads, keepPeerId): the `open` handler redials
+		if (this.connections[peerId] || this.peer.disconnected || !(this.peer.id < peerId)) return;
 		const conn = this.peer.connect(peerId, dialOptions());
 		if (!conn) return; // the signaling link is down: the next tick (or its return) redials
 		/** @type {any} */ (conn).__dialedAt = Date.now();
diff --git a/tests/e2e/net-drop.test.cjs b/tests/e2e/net-drop.test.cjs
index 79958318..7d07e150 100644
--- a/tests/e2e/net-drop.test.cjs
+++ b/tests/e2e/net-drop.test.cjs
@@ -17,27 +17,77 @@
 //  2. HARD (a network CHANGE): the same, plus the peer connection is closed outright at the start, so
 //     the B5 reconnect window has to redial — through a signaling server it cannot reach until the
 //     drop ends. The window is ~15.5 s (checks at 0.5/1/2/4/8 s), so a 5 s drop must fit inside it.
+// net-drop-1 (deployed builds): with a cloud ROLES plugin loaded — every Pages deploy, or a dev server run
+// with E2E_CLOUD_PLUGIN=https://theprototype.pages.dev/cloud-plugin.js — the joiner came back from the heal
+// a VIEWER and its edits never left it: peerjs nulls `peer.id` while the signaling socket is down, the
+// plugin read "no id, one peer" as alone and wiped its role map. Two checks hold the fix
+// (peerDrop.keepPeerId): the own id at the cut (no plugin needed; red on v1.44.0) and roles unchanged by
+// the heal (with a plugin; B read viewer on v1.44.0 + the production plugin, 4 B -> A checks red).
 // Counterfactual: NETDROP_MS=20000 outlasts the window — phase 2 goes red (teardown + toast; measured
 // e2e/v10cf). Phase 1 stays green at 20 s, by design: a QUIET drop never breaks the data channel, so it
 // proves the conn carries on, not the window's length.
 const h = require('./helpers.cjs');
 
 const DROP_MS = Number(process.env.NETDROP_MS || 5000);
+/** net-drop-1: print the wire trace for every phase, not only a failing one */
+const TRACE = !!process.env.NETDROP_TRACE;
 /** src/lib/peerDrop.js ICE_DROP_GRACE_MS */
 const ICE_DROP_GRACE_MS = 4000;
 
-/** runs in the page before any app code: the hold switch + fake ICE state */
+/** runs in the page before any app code: the hold switch + fake ICE state + the WIRE TRACE (net-drop-1:
+ * every peer connection's real ICE/connection state, every data channel's open/close and its sent /
+ * delivered / held message counts by label — a peerjs channel's label is its conn's connectionId, so
+ * "which conn does each send use, and does anything read it" is answerable on a deployed build) */
 function dropShim() {
-	const D = (window.__drop = { holding: false, queue: /** @type {Function[]} */ ([]), pcs: /** @type {RTCPeerConnection[]} */ ([]), held: 0 });
+	const D = (window.__drop = {
+		holding: false,
+		queue: /** @type {Function[]} */ ([]),
+		pcs: /** @type {RTCPeerConnection[]} */ ([]),
+		held: 0,
+		log: /** @type {string[]} */ ([]),
+		/** label -> {pc, sent, recv, held, state} */
+		dcs: /** @type {Record<string, any>} */ ({})
+	});
+	const realIce = Object.getOwnPropertyDescriptor(RTCPeerConnection.prototype, 'iceConnectionState')?.get;
+	// @ts-ignore
+	D.note = (/** @type {string} */ what) => {
+		D.log.push(new Date().toISOString().slice(14, 23) + ' ' + what);
+		if (D.log.length > 600) D.log.splice(0, 100);
+	};
+	const dcRow = (/** @type {any} */ dc) => (D.dcs[dc.label] ??= { pc: dc.__pc ?? '?', sent: 0, recv: 0, held: 0, state: 'new' });
+	const send = RTCDataChannel.prototype.send;
+	RTCDataChannel.prototype.send = function (/** @type {any} */ data) {
+		const row = dcRow(this);
+		row.sent++;
+		if (this.readyState !== 'open') D.note(`SEND on ${this.label} (pc${row.pc}) while ${this.readyState}`);
+		return send.call(this, data);
+	};
+	const watchDc = (/** @type {any} */ dc, /** @type {number} */ n, /** @type {string} */ how) => {
+		dc.__pc = n;
+		const row = dcRow(dc);
+		row.pc = n;
+		D.note(`dc ${dc.label} ${how} on pc${n} (${dc.readyState})`);
+		for (const ev of ['open', 'close', 'closing', 'error'])
+			dc.addEventListener(ev, () => {
+				row.state = ev;
+				D.note(`dc ${dc.label} pc${n} ${ev} sent=${row.sent} recv=${row.recv} held=${row.held}`);
+			});
+	};
 	const wrap = (/** @type {Function} */ fn) =>
 		function (/** @type {any} */ event) {
 			// @ts-ignore
 			const self = this;
+			const row = dcRow(self);
 			if (D.holding) {
 				D.held++;
-				D.queue.push(() => fn.call(self, event));
+				row.held++;
+				D.queue.push(() => {
+					row.recv++;
+					return fn.call(self, event);
+				});
 				return;
 			}
+			row.recv++;
 			return fn.call(self, event);
 		};
 	const proto = RTCDataChannel.prototype;
@@ -70,7 +120,20 @@ function dropShim() {
 	// @ts-ignore
 	window.RTCPeerConnection = function (/** @type {any[]} */ ...args) {
 		const pc = new Real(...args);
-		D.pcs.push(pc);
+		const n = D.pcs.push(pc) - 1;
+		const policy = args[0]?.iceTransportPolicy ?? 'all';
+		const servers = (args[0]?.iceServers ?? []).map((/** @type {any} */ s) => [].concat(s.urls).map((u) => String(u).split(':')[0]).join('+')).join(',');
+		D.note(`pc${n} new policy=${policy} servers=${servers || '-'}`);
+		const cdc = pc.createDataChannel.bind(pc);
+		pc.createDataChannel = (/** @type {any[]} */ ...a) => {
+			// @ts-ignore
+			const dc = cdc(...a);
+			watchDc(dc, n, 'created');
+			return dc;
+		};
+		pc.addEventListener('datachannel', (e) => watchDc(e.channel, n, 'inbound'));
+		pc.addEventListener('iceconnectionstatechange', () => D.note(`pc${n} ice=${realIce?.call(pc)}${D.holding ? ' (held)' : ''}`));
+		pc.addEventListener('connectionstatechange', () => D.note(`pc${n} conn=${pc.connectionState}`));
 		return pc;
 	};
 	window.RTCPeerConnection.prototype = Real.prototype;
@@ -147,6 +210,139 @@ h.run(async () => {
 	const bLocks = async () => (await store(A, 'lockedObjects')).filter((/** @type {any} */ x) => x[0] === B.id).length;
 	const lockBox = await create(B, 'box');
 	await h.eventually(() => store(A, 'lockedObjects'), (l) => l.some((/** @type {any} */ x) => x[0] === B.id && x[1] === lockBox), "premise: A sees B's lock");
+	// net-drop-1: B -> A worked BEFORE any drop (on a deployed build the lock alone, a protocol-floor
+	// message, could not tell a direction lost to the heal from one that never carried content)
+	await h.eventually(() => has(A, lockBox), (v) => v, "premise: B's edit reaches A before any drop");
+
+	/** net-drop-1: both pages' wire logs, each conn's channel counts and the selected ICE pair's
+	 * candidate types (host / srflx / relay), printed — the deployed-build diagnosis */
+	async function wireTrace(/** @type {string} */ tag, /** @type {string} */ why) {
+		for (const [p, other] of [[A, B.id], [B, A.id]]) {
+			const t = await p.page
+				.evaluate(async (/** @type {string} */ pid) => {
+					// @ts-ignore
+					const D = window.__drop;
+					/** @type {any} */ let pc;
+					window.__stores.peers.subscribe((/** @type {any} */ v) => (pc = v))();
+					const c = pc.connections[pid];
+					const pairs = [];
+					for (const [n, rpc] of D.pcs.entries()) {
+						if (rpc.signalingState === 'closed') continue;
+						try {
+							const rows = [];
+							(await rpc.getStats()).forEach((/** @type {any} */ r) => rows.push(r));
+							const tr = rows.find((r) => r.type === 'transport' && r.selectedCandidatePairId);
+							const pair = tr && rows.find((r) => r.id === tr.selectedCandidatePairId);
+							const kind = (/** @type {string} */ id) => rows.find((r) => r.id === id)?.candidateType ?? '?';
+							pairs.push(`pc${n}: ${pair ? kind(pair.localCandidateId) + '->' + kind(pair.remoteCandidateId) + ' ' + pair.state : 'no pair'}`);
+						} catch (e) {
+							pairs.push(`pc${n}: stats ${String(e).slice(0, 40)}`);
+						}
+					}
+					return {
+						app: c ? `connections[peer] = ${c.connectionId} open=${c.open} dc=${c.dataChannel?.label}/${c.dataChannel?.readyState}` : 'connections[peer] = none',
+						dcs: Object.entries(D.dcs).map(([l, r]) => `${l} pc${r.pc} ${r.state} sent=${r.sent} recv=${r.recv} held=${r.held}`),
+						pairs,
+						log: D.log.slice(-220).concat(Object.entries(D.quiet ?? {}).map(([k, n]) => `counted ${k} x${n}`))
+					};
+				}, other)
+				.catch((/** @type {any} */ e) => ({ app: 'err ' + e, dcs: [], pairs: [], log: [] }));
+			console.log(`  ${tag} GATES ${p === A ? 'A' : 'B'} about the other:\n      ` + (await gates(p, other)));
+			console.log(`  ${tag} WIRE ${p === A ? 'A' : 'B'} (${p.id}) — ${why}\n    ${t.app}\n    ${t.pairs.join(' | ')}\n    ` + t.dcs.join('\n    ') + '\n    --\n    ' + t.log.join('\n    '));
+		}
+	}
+
+	/** net-drop-1: the APP half of the trace — every DataConnection's sends and 'data' events by message
+	 * type (pose/clock streams only counted), patched on peerjs's shared prototype so a conn made by a
+	 * heal is covered too */
+	async function appTrace(/** @type {any} */ p) {
+		await p.page.evaluate(() => {
+			// @ts-ignore
+			const D = window.__drop;
+			/** @type {any} */ let pc;
+			window.__stores.peers.subscribe((/** @type {any} */ v) => (pc = v))();
+			const any = Object.values(pc.connections)[0];
+			let proto = Object.getPrototypeOf(any);
+			while (proto && !Object.prototype.hasOwnProperty.call(proto, 'send')) proto = Object.getPrototypeOf(proto);
+			if (!proto || proto.__ndTraced) return;
+			proto.__ndTraced = true;
+			const noisy = new Set(['camera', 'vrhands', 'clockping', 'clockpong', 'cursor', 'cursors', 'pointer', 'ping', 'pong', 'pose', 'move', 'batch']);
+			D.quiet = {};
+			const note = (/** @type {string} */ dir, /** @type {any} */ c, /** @type {any} */ d) => {
+				const t = String(d?.type ?? (d && d.__peerData ? 'peerjs' : typeof d));
+				if (noisy.has(t)) {
+					const k = dir + ' ' + t + ' ' + c.peer + ' ' + c.connectionId;
+					D.quiet[k] = (D.quiet[k] ?? 0) + 1;
+					return;
+				}
+				D.note(`APP ${dir} ${t} ${dir === 'out' ? 'to' : 'from'} ${c.peer} on ${c.connectionId}${c.open ? '' : ' (NOT OPEN)'}`);
+			};
+			const send = proto.send;
+			proto.send = function (/** @type {any} */ d, /** @type {any[]} */ ...rest) {
+				note('out', this, d);
+				return send.call(this, d, ...rest);
+			};
+			const emit = proto.emit;
+			proto.emit = function (/** @type {string} */ ev, /** @type {any[]} */ ...args) {
+				if (ev === 'data') note('in', this, args[0]);
+				return emit.call(this, ev, ...args);
+			};
+		});
+	}
+	await appTrace(A);
+	await appTrace(B);
+
+	/** net-drop-1: what each side's gates answer about the other right now */
+	async function gates(/** @type {any} */ p, /** @type {string} */ other) {
+		return p.page
+			.evaluate(async (/** @type {string} */ pid) => {
+				const S = window.__stores;
+				/** @type {any} */ let pc;
+				S.peers.subscribe((/** @type {any} */ v) => (pc = v))();
+				const get = (/** @type {any} */ st) => {
+					let v;
+					st?.subscribe?.((/** @type {any} */ x) => (v = x))();
+					return v;
+				};
+				const out = [];
+				const safe = (/** @type {string} */ k, /** @type {() => any} */ f) => {
+					try {
+						out.push(k + '=' + JSON.stringify(f()));
+					} catch (e) {
+						out.push(k + '=ERR ' + String(e).slice(0, 50));
+					}
+				};
+				safe('withholdFrom(create)', () => pc.withholdFrom(pid, { type: 'create' }));
+				safe('canApply(create)', () => S.cloudHooks?.canApply?.(pid, 'create'));
+				safe('canApplyByRoom(create)', () => S.peerScenes?.canApplyByRoom?.(pid, 'create'));
+				safe('gateHolds', () => S.sessions?.gateHolds?.(pid));
+				safe('amPrivate', () => S.peerScenes?.amPrivate?.());
+				safe('myScene', () => S.peerScenes?.myScene?.());
+				safe('peerScenes', () => Object.fromEntries(Object.entries(get(S.peerScenes?.peerScenes) ?? {})));
+				safe('sessionHost', () => get(S.connectionState?.sessionHost));
+				safe('rolesInfo', () => {
+					const r = get(S.cloudHooks?.rolesInfo);
+					return r ? { myRole: r.myRole, amAdmin: r.amAdmin, theirs: r.roleOf?.(pid) } : null;
+				});
+				safe('viewer', () => S.objectPermissions?.isViewer?.());
+				safe('roomLabelOf(them)', () => S.peerScenes?.roomLabelOf?.(pid));
+				safe('myRoomLabel', () => S.peerScenes?.myRoomLabel?.());
+				safe('toasts', () => (get(S.notifications) ?? []).slice(-4).map((/** @type {any} */ n) => String(n.text ?? n.message ?? n).slice(0, 90)));
+				return out.join('\n      ');
+			}, other)
+			.catch((/** @type {any} */ e) => 'err ' + e);
+	}
+
+	/** each side's own role and its role for the other, from the rolesInfo bridge (null without a plugin) */
+	async function roles() {
+		const one = (/** @type {any} */ p, /** @type {string} */ other) =>
+			p.page.evaluate((/** @type {string} */ pid) => {
+				/** @type {any} */ let r;
+				window.__stores.cloudHooks?.rolesInfo?.subscribe((/** @type {any} */ v) => (r = v))();
+				return r ? `${r.myRole}/${r.roleOf?.(pid)}` : null;
+			}, other);
+		return { a: await one(A, B.id), b: await one(B, A.id) };
+	}
 
 	/** @param {'quiet' | 'hard'} shape */
 	async function drop(shape) {
@@ -161,6 +357,7 @@ h.run(async () => {
 				pc.connections[id].__th1 = 'before';
 			}, other);
 		}
+		const rolesBefore = await roles();
 		// ---- the network goes away
 		for (const p of [A, B]) await p.page.context().setOffline(true);
 		for (const p of [A, B]) {
@@ -171,8 +368,14 @@ h.run(async () => {
 				window.__drop.holding = true;
 				// @ts-ignore
 				window.__drop.ice('disconnected');
+				// a real drop ends the socket at once (1006, ERR_NETWORK_CHANGED); a graceful close() waits for
+				// the server's close frame, which offline emulation held for 3 s+ on a BUILT app (net-drop-1:
+				// the QUIET premise red on production — B's socket sat CLOSING with peer.open still true), so
+				// peerjs is handed the close event the dropped socket would have fired
 				try {
-					pc.peer._socket._socket?.close();
+					const ws = pc.peer._socket._socket;
+					ws?.close();
+					ws?.onclose?.(new CloseEvent('close', { code: 1006, reason: 'net-drop' }));
 				} catch {}
 			});
 		}
@@ -181,11 +384,23 @@ h.run(async () => {
 		let cut = false;
 		for (const t = Date.now(); !cut && Date.now() - t < 3000; await A.page.waitForTimeout(150))
 			cut = !(await signalingUp(A)) && !(await signalingUp(B)); // peerjs marks itself down on the socket's close event
+		if (!cut || TRACE)
+			for (const p of [A, B])
+				console.log(
+					`  ${tag} signaling at the cut, ${p === A ? 'A' : 'B'}: ` +
+						(await p.page.evaluate(() => {
+							/** @type {any} */ let pc;
+							window.__stores.peers.subscribe((/** @type {any} */ v) => (pc = v))();
+							const q = pc.peer;
+							return `open=${q?.open} disconnected=${q?.disconnected} destroyed=${q?.destroyed} ws=${q?._socket?._socket?.readyState ?? '-'} id=${q?.id}`;
+						}))
+				);
 		if (shape === 'hard') {
 			await A.page.evaluate((/** @type {string} */ id) => {
 				/** @type {any} */ let pc;
 				window.__stores.peers.subscribe((/** @type {any} */ v) => (pc = v))();
-				pc.connections[id].peerConnection?.close();
+				// (a conn F-3 or the socket's end already closed is already being redialled)
+				pc.connections[id]?.peerConnection?.close();
 			}, B.id);
 		}
 		const t0 = Date.now();
@@ -200,17 +415,38 @@ h.run(async () => {
 					window.__stores.peers.subscribe((/** @type {any} */ v) => (pc = v))();
 					const c = pc.connections[pid];
 					const age = (/** @type {any} */ x) => (x?.__dialedAt ? Math.round((Date.now() - x.__dialedAt) / 100) / 10 + 's' : '-');
-					return `sig=${pc.peer?.open ? 1 : 0} rec=${pc.reconnecting.get(pid) ?? '-'} conn=${c ? (c.open ? 'open' : 'neg ' + age(c)) : 'none'} in=${pc.inboundDials?.has(pid) ? 'neg ' + age(pc.inboundDials.get(pid)) : '-'} opened=${pc.openedPeers.has(pid) ? 1 : 0}`;
+					return `sig=${pc.peer?.open ? 1 : 0} rec=${pc.reconnecting.get(pid) ?? '-'} conn=${c ? (c.open ? 'open' : 'neg ' + age(c)) + ' ' + c.connectionId : 'none'} in=${pc.inboundDials?.has(pid) ? 'neg ' + age(pc.inboundDials.get(pid)) : '-'} opened=${pc.openedPeers.has(pid) ? 1 : 0}`;
 				}, id)
 				.catch((/** @type {any} */ e) => 'err ' + String(e?.message ?? e).slice(0, 60));
+		// net-drop-1: who we are does not change while the signaling link is down. peerjs nulls `peer.id`
+		// on every drop (Peer.disconnect) until a reconnect re-registers; the cloud roles plugin then
+		// counted itself alone, wiped its role map, and B came back from the heal a VIEWER whose edits never
+		// left (deployed builds only — a dev server has no plugin). Sampled through the whole drop, since
+		// peerjs's own retries put the id back between failed attempts. Counterfactual: red on v1.44.0.
+		/** @type {string[]} */
+		const idLost = [];
+		const ownIds = async () => {
+			for (const p of [A, B]) {
+				const id = await p.page
+					.evaluate(() => {
+						/** @type {any} */ let pc;
+						window.__stores.peers.subscribe((/** @type {any} */ v) => (pc = v))();
+						return pc.peer?.id ?? null;
+					})
+					.catch(() => 'err');
+				if (id !== p.id && idLost.length < 4) idLost.push(`${p === A ? 'A' : 'B'} read ${id} at ${Date.now() - t0}ms`);
+			}
+		};
+		await ownIds();
 		const watch = async () => {
+			if (Date.now() - t0 < DROP_MS) await ownIds();
 			timeline.push(`${((Date.now() - t0) / 1000).toFixed(1)}s A[${await state(A, B.id)}] B[${await state(B, A.id)}]`);
 			if (!(await inRoster(A, B.id))) lost.push(`A lost B at ${Date.now() - t0}ms`);
 			if (!(await inRoster(B, A.id))) lost.push(`B lost A at ${Date.now() - t0}ms`);
 			if ((await bLocks()) === 0) lost.push(`A dropped B's lock at ${Date.now() - t0}ms`);
 		};
 		// an edit on each side DURING the drop
-		await A.page.waitForTimeout(Math.min(1500, DROP_MS / 3));
+		for (const until = Date.now() + Math.min(1500, DROP_MS / 3); Date.now() < until; ) await ownIds();
 		const duringA = await create(A, 'sphere');
 		const duringB = await create(B, 'cylinder');
 		while (Date.now() - t0 < DROP_MS) {
@@ -218,6 +454,7 @@ h.run(async () => {
 			await A.page.waitForTimeout(500);
 		}
 		h.check(cut, `${tag} premise: the signaling link really was down on both pages (at the cut)`);
+		h.check(idLost.length === 0, `${tag} each page read its own peer id throughout the drop (${idLost.join(', ') || 'always'})`);
 		// ---- the network comes back: lift the shim's hold FIRST, so the app's own `online` retry
 		// (fired by setOffline(false)) reaches the real server rather than the held-down socket
 		for (const p of [A, B]) {
@@ -241,11 +478,22 @@ h.run(async () => {
 		}
 		h.check(lost.length === 0, `${tag} each peer kept the other in its roster, and B's lock stood, throughout (${lost.slice(0, 2).join(', ') || 'never lost'})`);
 		const healedBoth = (await openTo(A, B.id)) && (await openTo(B, A.id));
+		// with a roles plugin loaded (every deployed build; E2E_CLOUD_PLUGIN on a dev server), the heal
+		// changes nobody's role — on either side
+		const rolesNow = await roles();
+		if (rolesBefore.a || rolesBefore.b)
+			h.check(
+				JSON.stringify(rolesNow) === JSON.stringify(rolesBefore),
+				`${tag} roles unchanged by the heal (before ${JSON.stringify(rolesBefore)}, after ${JSON.stringify(rolesNow)})`
+			);
+		if (TRACE) await wireTrace(tag, 'after the heal');
 		if (!healedBoth) console.log(`  ${tag} timeline (A=${A.id} B=${B.id}; the lower id dials):\n    ` + timeline.join('\n    '));
 		h.check(healedBoth, `${tag} the conn is open both ways again`);
 		h.check((await disconnectToasts(A, toastsA)) === 0 && (await disconnectToasts(B, toastsB)) === 0, `${tag} no "disconnected" toast on either side`);
 		await h.eventually(() => has(B, duringA), (v) => v, `${tag} A's edit made during the drop reaches B`, 15000);
+		if (!TRACE && !(await has(B, duringA))) await wireTrace(tag, "A's edit never reached B");
 		await h.eventually(() => has(A, duringB), (v) => v, `${tag} B's edit made during the drop reaches A`, 15000);
+		if (!TRACE && !(await has(A, duringB))) await wireTrace(tag, "B's edit never reached A");
 		const afterB = await create(B, 'cone');
 		await h.eventually(() => has(A, afterB), (v) => v, `${tag} an edit after the drop replicates`, 10000);
 		await h.eventually(async () => (await signalingUp(A)) && (await signalingUp(B)), (v) => v, `${tag} both pages are back on the signaling server`, 20000);
diff --git a/tests/unit/peerDrop.test.js b/tests/unit/peerDrop.test.js
index 781e6b47..053698b4 100644
--- a/tests/unit/peerDrop.test.js
+++ b/tests/unit/peerDrop.test.js
@@ -8,8 +8,10 @@ import {
 	strikesNeeded,
 	consentCounters,
 	linkSilence,
-	LINK_SILENT_MS
+	LINK_SILENT_MS,
+	keepPeerId
 } from '../../src/lib/peerDrop.js';
+import { Peer } from 'peerjs';
 
 // F-3: a dropped peer leaves Users within seconds and a leave never toasts "Connection error".
 describe('F-3 peer drop policy', () => {
@@ -72,3 +74,48 @@ describe('F-3 peer drop policy', () => {
 		expect(linkSilence({ responses: 5, requests: 5, at: 0 }, null, 60000).silent).toBe(false);
 	});
 });
+
+// net-drop-1: peerjs's Peer.disconnect() (every signaling drop) sets `id` to null until the socket
+// re-registers, and everything that asks "who am I" read null for the length of the drop — the
+// cloud roles plugin then counted itself ALONE, wiped its role map, and a joiner came back from a
+// healed drop as a viewer whose every edit stayed local (net-drop on deployed builds, B -> A red).
+describe('keepPeerId: our id survives a signaling drop', () => {
+	/** the real peerjs Peer, disconnected the way a dropped socket disconnects it */
+	function droppedPeer(/** @type {boolean} */ kept) {
+		const peer = Object.create(Peer.prototype);
+		Object.assign(peer, { _id: 'abc12', _lastServerId: null, _disconnected: false, _open: true, _destroyed: false });
+		peer._socket = { close() {} };
+		peer.emit = () => true;
+		if (kept) keepPeerId(peer, 'abc12');
+		expect(peer.id).toBe('abc12');
+		peer.disconnect();
+		expect(peer.disconnected).toBe(true);
+		return peer;
+	}
+	it('counterfactual: an unwrapped peerjs Peer reads null while disconnected', () => {
+		expect(droppedPeer(false).id).toBe(null);
+	});
+	it('a wrapped Peer keeps reading its id through the drop, and peerjs still reconnects on it', () => {
+		const peer = droppedPeer(true);
+		expect(peer.id).toBe('abc12');
+		// peerjs keeps its own bookkeeping: the reconnect re-registers the id it remembered
+		expect(peer._lastServerId).toBe('abc12');
+		/** @type {string[]} */
+		const started = [];
+		peer._socket = { start: (/** @type {string} */ id) => started.push(id), close() {} };
+		peer._options = {};
+		peer.reconnect();
+		expect(started).toEqual(['abc12']);
+		expect(peer.id).toBe('abc12');
+	});
+	it('the live id wins over the remembered one, and a missing peer or id is left alone', () => {
+		const peer = Object.create(Peer.prototype);
+		peer._id = 'zzz99';
+		keepPeerId(peer, 'abc12');
+		expect(peer.id).toBe('zzz99');
+		expect(keepPeerId(null, 'abc12')).toBe(null);
+		const bare = { id: 'x' };
+		expect(keepPeerId(bare, '')).toBe(bare);
+		expect(bare.id).toBe('x');
+	});
+});