retire-provenance: superseded Q b/ objects (sha256 CAS, HOLO-LEAN-RESOLVER P1.3)

sha256/df7d094a558a02f1d583c9cdf281e7d5f891105bbf3d53e5e1b0b926e87314b8

@@ -0,0 +1 @@
+{"@context":["https://www.w3.org/ns/did/v1","https://w3id.org/security/data-integrity/v2",{"dcterms":"http://purl.org/dc/terms/","links":{"@container":"@set","@id":"schema:hasPart"},"prov":"http://www.w3.org/ns/prov#","rel":"schema:additionalType","schema":"https://schema.org/"},{"holstr":"https://hologram.os/ns/strand#"}],"@type":["prov:Entity","holstr:Entry"],"holstr:kind":"release","holstr:op":"did:holo:sha256:87599792c7b13fad9d6c57d3b89d2cef35e4715869f5cde597ab60ca92699f0b","holstr:payload":{"apps":{"carry":"9f44164b17e6b7e37f39623bb445d49b6608da5f2b04cef8b1a8b183362a6b9a","hello":"66c1ada5ac08a2d4f73851bbe7458ad5fb6e2226c5a131c3829abfe715900fed","holo-messenger":"28ea0bbb52a38aea0d6b9978dda8c750b75fbf08f603363279b8e76e5806d68a","jellyfin":"3fd2a00105ad0e8f01109dce52ff4c7a0cc6c9444532b0453ed9d770cce2d3a4","resolve":"23aec66382775f5773693615338f37c37a5f58257ec95aece33a664baa6fe0db","yourspace":"9ffc94e11c78fbe6b940bc04ac92f0f12238cf7ce82b5092c53d5761146a50df"},"boot":{"entry":"holo-portal.mjs","sha256":"caeb3e57b6eeab09bee6d67c022145a8e2dae610c929a7f51bc169898625e7e8"},"closure":"b4aad6bc6fb5919c0cf2d329bae6fe5cdf8f95f7c4bf06d6783c757178efcfd5","manifest":"ae1df072dc8a6e3288460d150b4c31cd4693b369a3d8bf4782a162c8ac1780a6","runtime":{"apps/q/pkg/holospaces_web.js":"b9f8a887de588c5193dc65ca9ce206a70c6df53595b848e0ce0299c2d88a5753","apps/q/pkg/holospaces_web_bg.wasm":"9d90b4ea8bccee8c239073c7ec7dd5158c6d11f1f668487570d17475d79e661e","apps/workspace/pkg/holospaces_web.js":"8c30aa5582dffe4548d27fa7863163eba689ed65126be472c003f5884fc8e534","usr/lib/holo/holowhat/holospaces_web.js":"a5b5d9c559a1d2812c33e9d7a4b1c24bb03059482503a23356e4c9c32d4d8b88","usr/lib/holo/holowhat/holospaces_web_bg.wasm":"00cfa4960b319ba1ba7291cddb20dea130a407ce8b42426218854f4f68f4dcd7","usr/lib/pkg/holospaces_web.js":"8c30aa5582dffe4548d27fa7863163eba689ed65126be472c003f5884fc8e534","usr/lib/pkg/holospaces_web_bg.wasm":"3370b22070b56218a57df6406e2e4ba7cc171e942d4d1f2ae4297ea2c4c08d9c"},"shell":"8419885c9fb72f255b561f5980935539707f5f35be6f410d38bbeb593d89dc59"},"holstr:prev":"did:holo:sha256:c9977a91492cd299a5b3c9e9c66c355e1109c925e81c3b6a60b4e143043b54fc","holstr:seq":318,"prov:generatedAtTime":"2026-07-14T19:14:21.182Z"}

sha256/ff0a5058361109976ffb9edb5a561690a93c800ed08dcb93eaa3afa4d4997277

@@ -0,0 +1,95 @@
+// messenger-skin.mjs — bakes the SLACK re-tone as the messenger default (aubergine chrome + a floating,
+// inset content pane; see the data-skin="slack" block in messenger-skins) and applies the hi-DPI /
+// high-FPS perf layer. No picker / no toggle. Additive + guarded. Escape hatch: set localStorage
+// "holo.skin" to graphite | warm | contrast | light (or "" to remove) to override the default.
+
+(function () {
+  if (!document.querySelector("link[data-holo-skins]")) {
+    const l = document.createElement("link"); l.rel = "stylesheet"; l.href = new URL("./messenger-skins.css?v=d76d596376d1", import.meta.url); l.setAttribute("data-holo-skins", "1"); document.head.appendChild(l);
+  }
+  let skin = "whatsapp";
+  try { const s = localStorage.getItem("holo.skin"); if (s) skin = s; } catch {}
+  // ?skin=aim — the AIM opt-in for THIS visit (session-only; the saved default is untouched)
+  try { const q = new URLSearchParams(location.search).get("skin"); if (q) skin = q; } catch {}
+  if (skin) document.documentElement.setAttribute("data-skin", skin); else document.documentElement.removeAttribute("data-skin");
+  // the AIM experience layer (buddy list · sign-on · away · door sounds, A0-A5) rides ONLY its own skin —
+  // every other skin pays nothing. Lazy + fail-soft, the holo-msg-mount idiom.
+  if (skin === "aim") { try { import("./holo-aim.mjs?v=aim1").catch(() => {}); } catch {} }
+  // remove any lingering picker + its persisted flag from earlier ?skins=1 sessions
+  try { localStorage.removeItem("holo.skins"); } catch {}
+  try { const p = document.querySelector(".holo-skin-pick"); if (p) p.remove(); } catch {}
+})();
+
+// ── UX ENHANCER (whatsapp-ux-v1) — additive, guarded, DOM-only. Two WhatsApp-desktop niceties the compiled
+//    bundle can't get surgically: (1) a DRAG-RESIZE divider between the chat list and the conversation, persisted
+//    per device; (2) CLICK-AWAY / tap-outside close for the composer "+" attach sheet and the emoji popover (the
+//    message + row menus already close on outside-click via the bundle; these two didn't). Everything here is
+//    idempotent and fail-open — if the DOM shape ever changes, it simply does nothing.
+(function () {
+  const root = document.documentElement, LS_W = "holo.side.w";
+  const MIN = 260, MAXPX = 560, MAXPCT = 0.46;
+  const applyWidth = (px) => { if (px == null) root.style.removeProperty("--holo-side-w"); else root.style.setProperty("--holo-side-w", px + "px"); };
+  // returning users reopen at their chosen width (set before first paint)
+  try { const v = parseFloat(localStorage.getItem(LS_W)); if (v > 0) applyWidth(v); } catch {}
+
+  const container = () => document.querySelector(".holo-wa-root .cs-main-container");
+  const sidebar = () => document.querySelector(".holo-wa-root .cs-sidebar.cs-sidebar--left");
+
+  function ensureHandle() {
+    if (window.innerWidth < 900) return;                       // desktop only
+    const c = container(); if (!c) return;
+    if (c.querySelector(":scope > .holo-side-resize")) return; // already mounted
+    const h = document.createElement("div");
+    h.className = "holo-side-resize"; h.title = "Drag to resize · double-click to reset"; h.setAttribute("aria-hidden", "true");
+    c.appendChild(h);
+    let startX = 0, startW = 0, raf = 0, pending = 0;
+    const maxW = () => Math.min(MAXPX, Math.round((c.clientWidth || window.innerWidth) * MAXPCT));
+    const onMove = (e) => {
+      pending = Math.max(MIN, Math.min(maxW(), startW + (e.clientX - startX)));
+      if (!raf) raf = requestAnimationFrame(() => { raf = 0; applyWidth(pending); });
+    };
+    const onUp = () => {
+      document.removeEventListener("pointermove", onMove);
+      document.removeEventListener("pointerup", onUp);
+      document.body.classList.remove("holo-side-dragging");
+      h.classList.remove("holo-drag");
+      if (raf) { cancelAnimationFrame(raf); raf = 0; }
+      applyWidth(pending);
+      try { localStorage.setItem(LS_W, String(pending)); } catch {}
+    };
+    h.addEventListener("pointerdown", (e) => {
+      if (e.button !== 0) return;
+      e.preventDefault();
+      const sb = sidebar(); if (!sb) return;
+      startX = e.clientX; startW = Math.round(sb.getBoundingClientRect().width); pending = startW;
+      document.body.classList.add("holo-side-dragging"); h.classList.add("holo-drag");
+      document.addEventListener("pointermove", onMove);
+      document.addEventListener("pointerup", onUp);
+    });
+    h.addEventListener("dblclick", (e) => { e.preventDefault(); applyWidth(null); try { localStorage.removeItem(LS_W); } catch {} });   // reset to default
+  }
+
+  const boot = () => {
+    ensureHandle();
+    try { new MutationObserver(() => ensureHandle()).observe(document.body, { childList: true, subtree: true }); } catch {}
+    window.addEventListener("resize", ensureHandle, { passive: true });
+  };
+  if (document.body) boot(); else window.addEventListener("DOMContentLoaded", boot, { once: true });
+
+  // (2) click-away close for the two composer popovers. They close cleanly through the app's OWN Escape handler,
+  //     so dispatch Escape on an outside pointerdown. pointerdown fires BEFORE React's onClick, and skipping the
+  //     composer icons (the triggers) avoids the toggle-reopen race.
+  document.addEventListener("pointerdown", (e) => {
+    const pop = document.querySelector(".holo-attach-menu, .holo-emoji-pop");
+    if (!pop) return;                                              // nothing open
+    if (pop.contains(e.target)) return;                            // clicked inside → keep open
+    if (e.target.closest && e.target.closest(".holo-c-icon")) return;   // a composer trigger → let it toggle
+    try { document.dispatchEvent(new KeyboardEvent("keydown", { key: "Escape", bubbles: true })); } catch {}
+  }, true);
+})();
+
+// ── AUDITED E2E STACK (whatsapp-e2e-voz) — activate the additive vodozemac Olm/Megolm engine as an OPT-IN
+//    (window.HoloMsg). Importing only DEFINES the door; the 393 KB crypto wasm + the spine load on FIRST USE,
+//    so the default holo-seal door pays nothing and is entirely untouched. Nothing calls HoloMsg yet — this
+//    just makes the audited Double-Ratchet engine LIVE-CAPABLE; the UI opt-in (?e2e=voz) is the next step.
+try { import("./holo-msg-mount.mjs").catch(() => {}); } catch {}