Deploy Dream Customs workbench UI

.gitattributes

@@ -33,3 +33,6 @@ saved_model/**/* filter=lfs diff=lfs merge=lfs -text
 *.zip filter=lfs diff=lfs merge=lfs -text
 *.zst filter=lfs diff=lfs merge=lfs -text
 *tfevents* filter=lfs diff=lfs merge=lfs -text
+docs/design/assets/dream-customs-probe-morning-console.png filter=lfs diff=lfs merge=lfs -text
+docs/design/assets/dream-customs-probe-night-border.png filter=lfs diff=lfs merge=lfs -text
+docs/design/assets/dream-customs-probe-night-desk.png filter=lfs diff=lfs merge=lfs -text

.impeccable/design.json

@@ -0,0 +1,175 @@
+{
+  "schemaVersion": 2,
+  "generatedAt": "2026-06-05T13:25:00+08:00",
+  "title": "Design System: Dream Customs",
+  "extensions": {
+    "colorMeta": {
+      "bg-night": {
+        "role": "neutral",
+        "displayName": "Night Background",
+        "canonical": "oklch(0.145 0.030 238)",
+        "tonalRamp": [
+          "oklch(0.120 0.030 238)",
+          "oklch(0.180 0.030 238)",
+          "oklch(0.260 0.030 238)",
+          "oklch(0.360 0.030 238)",
+          "oklch(0.500 0.030 238)",
+          "oklch(0.660 0.030 238)",
+          "oklch(0.820 0.030 238)",
+          "oklch(0.940 0.030 238)"
+        ]
+      },
+      "primary-cobalt": {
+        "role": "primary",
+        "displayName": "Cobalt Gate",
+        "canonical": "oklch(0.690 0.105 232)",
+        "tonalRamp": [
+          "oklch(0.180 0.105 232)",
+          "oklch(0.280 0.105 232)",
+          "oklch(0.400 0.105 232)",
+          "oklch(0.520 0.105 232)",
+          "oklch(0.640 0.105 232)",
+          "oklch(0.760 0.105 232)",
+          "oklch(0.860 0.080 232)",
+          "oklch(0.940 0.050 232)"
+        ]
+      },
+      "accent-coral-stamp": {
+        "role": "accent",
+        "displayName": "Coral Stamp Ink",
+        "canonical": "oklch(0.705 0.160 28)",
+        "tonalRamp": [
+          "oklch(0.200 0.130 28)",
+          "oklch(0.320 0.145 28)",
+          "oklch(0.440 0.155 28)",
+          "oklch(0.560 0.160 28)",
+          "oklch(0.680 0.160 28)",
+          "oklch(0.800 0.120 28)",
+          "oklch(0.900 0.070 28)",
+          "oklch(0.960 0.035 28)"
+        ]
+      }
+    },
+    "typographyMeta": {
+      "display": {
+        "displayName": "Display",
+        "purpose": "App title and sealed pact headline only."
+      },
+      "body": {
+        "displayName": "Body",
+        "purpose": "Dream text, questions, answers, and pact explanations."
+      }
+    },
+    "shadows": [
+      {
+        "name": "composer-focus",
+        "value": "0 0 0 1px oklch(0.690 0.105 232), 0 12px 32px rgba(0, 0, 0, 0.28)",
+        "purpose": "Focused bottom composer."
+      },
+      {
+        "name": "pact-lift",
+        "value": "0 10px 28px rgba(0, 0, 0, 0.24)",
+        "purpose": "Sealed pact card."
+      }
+    ],
+    "motion": [
+      {
+        "name": "state-shift",
+        "value": "180ms cubic-bezier(0.25, 1, 0.5, 1)",
+        "purpose": "Buttons, chips, composer focus, and inspector state changes."
+      }
+    ],
+    "breakpoints": [
+      {
+        "name": "mobile",
+        "value": "760px"
+      },
+      {
+        "name": "desktop",
+        "value": "1040px"
+      }
+    ]
+  },
+  "components": [
+    {
+      "name": "Primary Button",
+      "kind": "button",
+      "refersTo": "button-primary",
+      "description": "Default action for continuing the customs flow.",
+      "html": "<button class=\"ds-btn-primary\">Continue negotiation</button>",
+      "css": ".ds-btn-primary { background: oklch(0.510 0.115 234); color: oklch(0.965 0.010 235); border: 0; border-radius: 10px; padding: 12px 16px; font: 680 14px/1.2 Inter, system-ui, sans-serif; transition: background 180ms cubic-bezier(0.25, 1, 0.5, 1), transform 180ms cubic-bezier(0.25, 1, 0.5, 1); } .ds-btn-primary:hover { background: oklch(0.590 0.120 232); transform: translateY(-1px); } .ds-btn-primary:focus-visible { outline: 2px solid oklch(0.820 0.110 185); outline-offset: 2px; }"
+    },
+    {
+      "name": "Seal Button",
+      "kind": "button",
+      "refersTo": "button-accent",
+      "description": "Final action that seals today's pact.",
+      "html": "<button class=\"ds-btn-seal\">Seal today's pact</button>",
+      "css": ".ds-btn-seal { background: oklch(0.705 0.160 28); color: oklch(0.080 0.010 250); border: 0; border-radius: 10px; padding: 12px 16px; font: 760 14px/1.2 Inter, system-ui, sans-serif; transition: box-shadow 180ms cubic-bezier(0.25, 1, 0.5, 1), transform 180ms cubic-bezier(0.25, 1, 0.5, 1); } .ds-btn-seal:hover { box-shadow: 0 0 20px rgba(255, 107, 84, 0.24); transform: translateY(-1px); } .ds-btn-seal:focus-visible { outline: 2px solid oklch(0.965 0.010 235); outline-offset: 2px; }"
+    },
+    {
+      "name": "Evidence Chip",
+      "kind": "chip",
+      "refersTo": "evidence-chip",
+      "description": "Shows a queued or extracted dream evidence item.",
+      "html": "<span class=\"ds-evidence-chip\"><span class=\"ds-evidence-dot\"></span>Image extracted</span>",
+      "css": ".ds-evidence-chip { display: inline-flex; align-items: center; gap: 8px; min-height: 30px; border: 1px solid oklch(0.430 0.055 235); border-radius: 999px; background: oklch(0.205 0.035 238); color: oklch(0.965 0.010 235); padding: 5px 10px; font: 650 13px/1.2 Inter, system-ui, sans-serif; } .ds-evidence-dot { width: 8px; height: 8px; border-radius: 999px; background: oklch(0.820 0.110 185); box-shadow: 0 0 12px rgba(96, 220, 205, 0.35); }"
+    },
+    {
+      "name": "Bottom Composer",
+      "kind": "input",
+      "refersTo": "input-composer",
+      "description": "Codex-style dream declaration input with evidence controls.",
+      "html": "<div class=\"ds-composer\"><textarea placeholder=\"Declare a dream fragment...\"></textarea><div class=\"ds-composer-actions\"><button>Attach image</button><button>Record voice</button><button class=\"ds-send\">Send</button></div></div>",
+      "css": ".ds-composer { background: oklch(0.205 0.035 238); color: oklch(0.965 0.010 235); border: 1px solid oklch(0.430 0.055 235); border-radius: 14px; padding: 12px; box-shadow: 0 12px 32px rgba(0, 0, 0, 0.28); } .ds-composer textarea { width: 100%; min-height: 84px; resize: vertical; color: inherit; background: transparent; border: 0; outline: 0; font: 450 16px/1.55 Inter, system-ui, sans-serif; } .ds-composer textarea::placeholder { color: oklch(0.760 0.030 232); } .ds-composer-actions { display: flex; gap: 8px; justify-content: flex-end; flex-wrap: wrap; } .ds-composer button { border: 1px solid oklch(0.430 0.055 235); border-radius: 10px; background: oklch(0.275 0.045 236); color: oklch(0.965 0.010 235); padding: 8px 10px; } .ds-composer .ds-send { background: oklch(0.510 0.115 234); border-color: transparent; }"
+    }
+  ],
+  "narrative": {
+    "northStar": "The Night Desk",
+    "overview": "Dream Customs should feel like a working customs desk that appears inside a dream at 4:17 a.m. The surface is dark because the user often arrives from bed or after waking, but it is not a generic terminal. Cobalt, aurora cyan, and coral stamp ink carry the strange color. Familiar controls carry trust.",
+    "keyCharacteristics": [
+      "Bottom composer as the primary input, modeled after Codex app behavior.",
+      "Conversation timeline for declarations, questions, and pact drafts.",
+      "Evidence tray for text, image, audio, mood, and model status.",
+      "Pact inspector that can be drafted, revised, or sealed.",
+      "Generated bitmap art as atmospheric header and state art, never as unreadable UI chrome."
+    ],
+    "rules": [
+      {
+        "name": "The Stamp Rarity Rule",
+        "body": "Coral is used for sealing, warnings, and permit marks only. It must not become a general decoration color.",
+        "section": "colors"
+      },
+      {
+        "name": "The No Parchment Rule",
+        "body": "Do not return to cream, beige, or faux paper backgrounds. Dream color comes from night, ink, and evidence light.",
+        "section": "colors"
+      },
+      {
+        "name": "The Low-Light Readability Rule",
+        "body": "Muted text must remain legible on dark surfaces. Never use low-contrast gray for field labels or placeholders.",
+        "section": "typography"
+      },
+      {
+        "name": "The State First Rule",
+        "body": "Shadows communicate focus, hover, or completion. They are not default decoration.",
+        "section": "elevation"
+      }
+    ],
+    "dos": [
+      "Do make the bottom composer the most obvious control on mobile and desktop.",
+      "Do keep every phase actionable with one clear next step.",
+      "Do use generated raster imagery for the dream atmosphere, header state, or empty state.",
+      "Do verify dark-mode contrast for body text, labels, placeholders, chips, and disabled controls.",
+      "Do preserve a deterministic demo backend while adding a model-backed route."
+    ],
+    "donts": [
+      "Don't ship a plain Gradio two-column form as the primary experience.",
+      "Don't use beige parchment, tarot, faux therapy, or generic purple AI visuals.",
+      "Don't use one-shot generation as the whole flow.",
+      "Don't hide Add material, Continue negotiation, or Seal pact below the fold.",
+      "Don't pair a 1px border with a large soft shadow on every card.",
+      "Don't use side-stripe borders, gradient text, or decorative glass panels."
+    ]
+  }
+}

DESIGN.md

@@ -0,0 +1,210 @@
+---
+name: Dream Customs
+description: A nocturnal dream customs workbench for turning dream evidence into a next-day pact.
+colors:
+  bg-night: "oklch(0.145 0.030 238)"
+  bg-void: "oklch(0.080 0.010 250)"
+  surface-ink: "oklch(0.205 0.035 238)"
+  surface-raised: "oklch(0.275 0.045 236)"
+  primary-cobalt: "oklch(0.690 0.105 232)"
+  primary-cobalt-deep: "oklch(0.510 0.115 234)"
+  accent-coral-stamp: "oklch(0.705 0.160 28)"
+  accent-aurora: "oklch(0.820 0.110 185)"
+  ink-main: "oklch(0.965 0.010 235)"
+  ink-muted: "oklch(0.760 0.030 232)"
+  border-dream: "oklch(0.430 0.055 235)"
+  warning: "oklch(0.760 0.150 75)"
+typography:
+  display:
+    fontFamily: "Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, sans-serif"
+    fontSize: "2.25rem"
+    fontWeight: 760
+    lineHeight: 1.05
+    letterSpacing: "-0.02em"
+  headline:
+    fontFamily: "Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, sans-serif"
+    fontSize: "1.5rem"
+    fontWeight: 720
+    lineHeight: 1.18
+  title:
+    fontFamily: "Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, sans-serif"
+    fontSize: "1rem"
+    fontWeight: 680
+    lineHeight: 1.3
+  body:
+    fontFamily: "Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, sans-serif"
+    fontSize: "1rem"
+    fontWeight: 450
+    lineHeight: 1.55
+  label:
+    fontFamily: "Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, sans-serif"
+    fontSize: "0.8125rem"
+    fontWeight: 650
+    lineHeight: 1.25
+rounded:
+  sm: "6px"
+  md: "10px"
+  lg: "14px"
+  pill: "999px"
+spacing:
+  xs: "6px"
+  sm: "10px"
+  md: "16px"
+  lg: "24px"
+  xl: "32px"
+components:
+  button-primary:
+    backgroundColor: "{colors.primary-cobalt-deep}"
+    textColor: "{colors.ink-main}"
+    rounded: "{rounded.md}"
+    padding: "12px 16px"
+  button-accent:
+    backgroundColor: "{colors.accent-coral-stamp}"
+    textColor: "{colors.bg-void}"
+    rounded: "{rounded.md}"
+    padding: "12px 16px"
+  input-composer:
+    backgroundColor: "{colors.surface-ink}"
+    textColor: "{colors.ink-main}"
+    rounded: "{rounded.lg}"
+    padding: "14px 16px"
+---
+
+# Design System: Dream Customs
+
+## 1. Overview
+
+**Creative North Star: "The Night Desk"**
+
+Dream Customs should feel like a working customs desk that appears inside a dream at 4:17 a.m. The surface is dark because the user often arrives from bed or after waking, but it is not a generic terminal. Cobalt, aurora cyan, and coral stamp ink carry the strange color. Familiar controls carry trust.
+
+This is product UI first. The user needs to type, upload, record, answer, and decide what happens next. The dream atmosphere belongs in the background wash, pact inspector, stamps, and evidence chips, while controls stay clear and predictable.
+
+**Key Characteristics:**
+
+- Bottom composer as the primary input, modeled after Codex app behavior.
+- Conversation timeline for declarations, questions, and pact drafts.
+- Evidence tray for text, image, audio, mood, and model status.
+- Pact inspector that can be drafted, revised, or sealed.
+- Generated bitmap art as atmospheric header and state art, never as unreadable UI chrome.
+
+## 2. Colors
+
+The palette is nocturnal and atmospheric: neutral dark surfaces, cobalt primary actions, aurora hints, and coral stamp moments.
+
+### Primary
+
+- **Cobalt Gate** (`oklch(0.690 0.105 232)`): primary selection, active step, focus accents, and subtle interactive outlines.
+- **Deep Cobalt Gate** (`oklch(0.510 0.115 234)`): filled primary buttons and selected composer controls with near-white text.
+
+### Secondary
+
+- **Coral Stamp Ink** (`oklch(0.705 0.160 28)`): final seal action, permit stamp, alert edge for safety notes, and one memorable highlight per screen.
+- **Aurora Evidence Light** (`oklch(0.820 0.110 185)`): image/audio evidence status, successful extraction, and soft dream-glow details.
+
+### Neutral
+
+- **Night Background** (`oklch(0.145 0.030 238)`): app body and mobile shell.
+- **Void Rail** (`oklch(0.080 0.010 250)`): app outer edge, header underlay, and screenshot-safe negative space.
+- **Ink Surface** (`oklch(0.205 0.035 238)`): composer, timeline items, and tool panels.
+- **Raised Surface** (`oklch(0.275 0.045 236)`): active inspector panels and output cards.
+- **Main Ink** (`oklch(0.965 0.010 235)`): body text on dark surfaces.
+- **Muted Ink** (`oklch(0.760 0.030 232)`): secondary labels that still remain readable.
+
+### Named Rules
+
+**The Stamp Rarity Rule.** Coral is used for sealing, warnings, and permit marks only. It must not become a general decoration color.
+
+**The No Parchment Rule.** Do not return to cream, beige, or faux paper backgrounds. Dream color comes from night, ink, and evidence light.
+
+## 3. Typography
+
+**Display Font:** Inter with system fallbacks
+
+**Body Font:** Inter with system fallbacks
+**Label/Mono Font:** Use system mono only for permit IDs, debug JSON, and model telemetry.
+
+**Character:** The interface uses one sans family so the product feels controlled. Personality comes from naming, layout, stamps, and generated imagery rather than decorative fonts.
+
+### Hierarchy
+
+- **Display** (760, 2.25rem, 1.05): app title and sealed pact headline only.
+- **Headline** (720, 1.5rem, 1.18): step titles and pact section names.
+- **Title** (680, 1rem, 1.3): timeline item headers, buttons, inspector labels.
+- **Body** (450, 1rem, 1.55): dream text, questions, pact explanations, max 70ch for prose.
+- **Label** (650, 0.8125rem, 1.25): compact field labels, evidence chips, status text.
+
+### Named Rules
+
+**The Low-Light Readability Rule.** Muted text must remain legible on dark surfaces. Never use low-contrast gray for field labels or placeholders.
+
+## 4. Elevation
+
+Depth is mostly tonal, not shadow-heavy. The app should feel layered like a dark desk under soft light, not like floating cards on a SaaS page. Shadows appear only for the active composer, a hovered evidence item, or a sealed pact.
+
+### Shadow Vocabulary
+
+- **composer-focus** (`0 0 0 1px oklch(0.690 0.105 232), 0 12px 32px rgba(0, 0, 0, 0.28)`): focused bottom composer.
+- **pact-lift** (`0 10px 28px rgba(0, 0, 0, 0.24)`): sealed pact card only.
+- **stamp-glow** (`0 0 20px rgba(255, 107, 84, 0.24)`): coral seal hover or success state.
+
+### Named Rules
+
+**The State First Rule.** Shadows communicate focus, hover, or completion. They are not default decoration.
+
+## 5. Components
+
+### Buttons
+
+- **Shape:** medium rectangle, 10px radius.
+- **Primary:** Deep Cobalt Gate fill, Main Ink text, 12px 16px padding.
+- **Accent:** Coral Stamp Ink for `Seal today's pact` only.
+- **Hover / Focus:** tonal lift plus visible cobalt focus ring.
+- **Secondary:** transparent or Ink Surface fill with full border, never ghost text alone.
+
+### Chips
+
+- **Style:** small rounded pills with icon, label, and state dot.
+- **State:** queued, extracted, failed, or selected. Evidence type uses icon and color, not long explanatory text.
+
+### Cards / Containers
+
+- **Corner Style:** 10px to 14px. No 32px rounded cards.
+- **Background:** Ink Surface for timeline items, Raised Surface for active inspector.
+- **Shadow Strategy:** flat by default, lifted only when active or sealed.
+- **Border:** full border using Border Dream, not a side stripe.
+- **Internal Padding:** 16px mobile, 24px desktop.
+
+### Inputs / Fields
+
+- **Style:** Codex-like bottom composer with large multiline input, attachment controls, model selector menu, and primary action clustered on the right.
+- **Focus:** cobalt ring, slightly raised surface, no layout shift.
+- **Error / Disabled:** inline message below composer, disabled actions stay readable and explain why.
+
+### Navigation
+
+- **Style:** compact status rail with current phase: Declare, Inspect, Negotiate, Draft, Seal.
+- **Mobile:** phase rail collapses to segmented steps above the composer.
+
+### Signature Component: Pact Inspector
+
+The pact inspector is a live customs file, not just a final HTML card. It shows visitor, permit ID, evidence count, risk, suggested action, weird task, and whether the pact is draft or sealed. It gives the user three choices: add material, ask another question, or seal today's pact.
+
+## 6. Do's and Don'ts
+
+### Do:
+
+- **Do** make the bottom composer the most obvious control on mobile and desktop.
+- **Do** keep every phase actionable with one clear next step.
+- **Do** use generated raster imagery for the dream atmosphere, header state, or empty state.
+- **Do** verify dark-mode contrast for body text, labels, placeholders, chips, and disabled controls.
+- **Do** preserve a deterministic demo backend while adding a model-backed route.
+
+### Don't:
+
+- **Don't** ship a plain Gradio two-column form as the primary experience.
+- **Don't** use beige parchment, tarot, faux therapy, or generic purple AI visuals.
+- **Don't** use one-shot generation as the whole flow.
+- **Don't** hide `Add material`, `Continue negotiation`, or `Seal pact` below the fold.
+- **Don't** pair a 1px border with a large soft shadow on every card.
+- **Don't** use side-stripe borders, gradient text, or decorative glass panels.

PRODUCT.md

@@ -0,0 +1,41 @@
+# Product
+
+## Register
+
+product
+
+## Users
+
+Dream Customs serves people who wake up with vivid, strange, or unsettling dreams and want a small morning ritual before the day takes over. The primary user may still be half asleep, on a phone, and emotionally sticky from the dream. The secondary user is a hackathon judge or playful AI explorer who needs to understand the loop quickly and see why small multimodal models matter.
+
+## Product Purpose
+
+Dream Customs helps a user form a playful alliance with last night's dream. It accepts text, image, and voice evidence, turns those fragments into a structured dream declaration, asks a few customs questions, and lets the user choose whether to add more material, continue negotiation, or seal a next-day pact.
+
+Success means the user receives something more useful than a one-shot interpretation: a clear visitor, a practical suggestion for today, a weird five-minute task, and a bedtime release phrase. The experience should feel like a small ceremony, not a diagnosis.
+
+## Brand Personality
+
+Gentle, strange, lucid.
+
+The voice is an overnight border clerk who takes odd evidence seriously without becoming mystical or clinical. It should feel curious and companionable, with enough dream color to be memorable and enough product discipline to be usable on a phone.
+
+## Anti-references
+
+- Do not look like a plain Gradio form with two columns and one submit button.
+- Do not look like a beige parchment certificate, generic tarot card, therapy intake form, or purple AI SaaS dashboard.
+- Do not use medical, diagnostic, frightening, or fate-telling language.
+- Do not bury the main action below many controls.
+- Do not end the flow after one answer when the user still wants to add evidence or keep negotiating.
+
+## Design Principles
+
+1. The AI is a clerk in a ritual, not a text generator behind a form.
+2. The user keeps agency: add evidence, answer, skip, continue, revise, or seal.
+3. The interface should be dream-colored but product-trustworthy.
+4. Every output should lead to a tiny next-day action.
+5. The demo path must survive Space constraints and still have a model-backed route.
+
+## Accessibility & Inclusion
+
+Target WCAG AA contrast for body text, controls, and placeholder text. Support mobile-first use, keyboard navigation, visible focus states, reduced motion, and Chinese/English text without layout breakage. Avoid flashing effects, fear-based copy, or overconfident claims about dream meaning. Severe distress, self-harm, harm to others, or inability to function must show a clear support note.

README.md

@@ -63,12 +63,61 @@ Local smoke notes from this Mac mini:
 - `openbmb/minicpm-v4.6` pulled successfully, but current Ollama runner returned `unable to load model`.
 - Because of that, the MVP keeps Ollama optional and falls back to deterministic demo behavior.
 
+## Optional Hosted MiniCPM Routes
+
+Hosted routes are intended for Modal experiments or private Space secrets. Set these in the runtime environment only, then switch the UI route menus from `demo` to `model`:
+
+- `DREAM_CUSTOMS_TEXT_ENDPOINT`
+- `DREAM_CUSTOMS_VISION_ENDPOINT`
+- `DREAM_CUSTOMS_HOSTED_TOKEN`
+
+Missing endpoints or route failures fall back to deterministic demo behavior. Do not store token values in env files, git, docs, screenshots, logs, or examples.
+
+Token-safe text smoke:
+
+```bash
+python - <<'PY'
+import os
+from dream_customs.models import HostedMiniCPMTextClient
+
+client = HostedMiniCPMTextClient(
+    endpoint=os.environ["DREAM_CUSTOMS_TEXT_ENDPOINT"],
+    token=os.getenv("DREAM_CUSTOMS_HOSTED_TOKEN", ""),
+)
+result = client.generate_negotiation("I missed an elevator in a foggy dream.")
+print(result["visitor_name"])
+PY
+```
+
+Token-safe vision smoke:
+
+```bash
+python - <<'PY'
+import os
+from dream_customs.models import HostedMiniCPMVisionClient
+
+client = HostedMiniCPMVisionClient(
+    endpoint=os.environ["DREAM_CUSTOMS_VISION_ENDPOINT"],
+    token=os.getenv("DREAM_CUSTOMS_HOSTED_TOKEN", ""),
+)
+print(client.extract_clues(os.environ["DREAM_CUSTOMS_SMOKE_IMAGE"]))
+PY
+```
+
 ## Test
 
 ```bash
 python -m pytest -q
 ```
 
+## Deployment Smoke Status
+
+2026-06-05 local V2 verification passed: tests were green and the workbench flow reached a sealed pact through `Send to customs`, `Ask another question`, `Add material`, `Draft pact`, `Revise pact`, and `Seal today's pact`.
+
+The public Space may still show the older one-shot UI until the latest branch is pushed to the Hugging Face Space `main` branch. A 2026-06-05 push attempt was rejected by HF authorization, while the already deployed old Space still opened and returned a text-only demo pact through the remote queue.
+
+Current smoke details are tracked in `docs/smoke/2026-06-05-space-deployment-smoke.md`.
+
 ## Safety
 
 This is not a therapy or diagnosis product. It gives playful reflection, small actions, and escalation copy for severe distress.

app.py

@@ -3,7 +3,18 @@ import os
 import gradio as gr
 from gradio_client import utils as gradio_client_utils
 
-from dream_customs.app_logic import run_customs_once
+from dream_customs.app_logic import (
+    add_material_action,
+    answer_question_action,
+    ask_another_question_action,
+    draft_pact_action,
+    initial_workbench_state,
+    revise_pact_action,
+    seal_pact_action,
+    skip_question_action,
+    start_declaration_action,
+    start_new_action,
+)
 
 
 _ORIGINAL_SCHEMA_TO_TYPE = gradio_client_utils._json_schema_to_python_type
@@ -20,95 +31,681 @@ gradio_client_utils._json_schema_to_python_type = _json_schema_to_python_type
 
 
 CSS = """
-body { background: #f6f1e7; }
+:root {
+  --dc-bg-night: oklch(0.145 0.030 238);
+  --dc-bg-void: oklch(0.080 0.010 250);
+  --dc-surface-ink: oklch(0.205 0.035 238);
+  --dc-surface-raised: oklch(0.275 0.045 236);
+  --dc-primary: oklch(0.690 0.105 232);
+  --dc-primary-deep: oklch(0.510 0.115 234);
+  --dc-coral: oklch(0.705 0.160 28);
+  --dc-aurora: oklch(0.820 0.110 185);
+  --dc-ink-main: oklch(0.965 0.010 235);
+  --dc-ink-muted: oklch(0.760 0.030 232);
+  --dc-border: oklch(0.430 0.055 235);
+  --dc-warning: oklch(0.760 0.150 75);
+  --dc-radius-sm: 6px;
+  --dc-radius-md: 10px;
+  --dc-radius-lg: 14px;
+}
+
+html,
+body,
 .gradio-container {
-  color: #17272f;
+  background:
+    radial-gradient(circle at 8% 0%, oklch(0.690 0.105 232 / 0.20), transparent 30rem),
+    radial-gradient(circle at 80% 12%, oklch(0.820 0.110 185 / 0.13), transparent 26rem),
+    linear-gradient(180deg, var(--dc-bg-void), var(--dc-bg-night) 34%, var(--dc-bg-void));
+  color: var(--dc-ink-main);
   font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  font-kerning: normal;
+}
+
+.gradio-container {
+  max-width: none !important;
 }
-.dc-shell {
-  max-width: 1180px;
+
+.gradio-container .main,
+.gradio-container .wrap {
+  max-width: none !important;
+}
+
+.dc-app-shell {
+  gap: 16px !important;
   margin: 0 auto;
+  max-width: 1440px;
+  min-height: 100vh;
+  padding: 16px;
+}
+
+.dc-session-store {
+  display: none !important;
+}
+
+.dc-statusbar {
+  align-items: center;
+  background:
+    linear-gradient(135deg, oklch(0.205 0.035 238 / 0.96), oklch(0.145 0.030 238 / 0.96)),
+    url("/file=docs/design/assets/dream-customs-probe-night-desk.png");
+  background-position: center;
+  background-size: cover;
+  border: 1px solid var(--dc-border);
+  border-radius: var(--dc-radius-lg);
+  display: grid;
+  gap: 16px;
+  grid-template-columns: minmax(280px, 1fr) auto minmax(260px, 0.8fr);
+  min-height: 108px;
+  overflow: hidden;
+  padding: 16px;
+  position: relative;
+}
+
+.dc-statusbar::before {
+  background: linear-gradient(90deg, oklch(0.080 0.010 250 / 0.88), oklch(0.145 0.030 238 / 0.72));
+  content: "";
+  inset: 0;
+  position: absolute;
+}
+
+.dc-statusbar > * {
+  position: relative;
+  z-index: 1;
+}
+
+.dc-brand-lockup {
+  align-items: center;
+  display: flex;
+  gap: 12px;
+}
+
+.dc-brand-mark {
+  align-items: center;
+  background: var(--dc-primary-deep);
+  border: 1px solid var(--dc-primary);
+  border-radius: var(--dc-radius-md);
+  color: var(--dc-ink-main);
+  display: inline-flex;
+  flex: 0 0 auto;
+  font-size: 0.875rem;
+  font-weight: 760;
+  height: 44px;
+  justify-content: center;
+  letter-spacing: 0;
+  width: 44px;
+}
+
+.dc-brand-lockup h1 {
+  color: var(--dc-ink-main);
+  font-size: 1.35rem;
+  font-weight: 760;
+  letter-spacing: 0;
+  line-height: 1.15;
+  margin: 0;
+  text-wrap: balance;
+}
+
+.dc-brand-lockup p,
+.dc-timeline-head p {
+  color: var(--dc-ink-muted);
+  font-size: 0.92rem;
+  line-height: 1.45;
+  margin: 4px 0 0;
+  max-width: 68ch;
+}
+
+.dc-phase-rail {
+  background: oklch(0.080 0.010 250 / 0.58);
+  border: 1px solid oklch(0.430 0.055 235 / 0.72);
+  border-radius: 999px;
+  display: flex;
+  gap: 4px;
+  padding: 4px;
+}
+
+.dc-phase-rail span,
+.dc-system-status span {
+  border-radius: 999px;
+  color: var(--dc-ink-muted);
+  font-size: 0.78rem;
+  font-weight: 680;
+  letter-spacing: 0;
+  line-height: 1.2;
+  padding: 8px 10px;
+  white-space: nowrap;
+}
+
+.dc-phase-rail .is-active {
+  background: var(--dc-primary-deep);
+  color: var(--dc-ink-main);
+}
+
+.dc-system-status {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+  justify-content: flex-end;
+}
+
+.dc-system-status span {
+  background: oklch(0.080 0.010 250 / 0.62);
+  border: 1px solid oklch(0.430 0.055 235 / 0.62);
+}
+
+.dc-main-grid {
+  align-items: stretch !important;
+  display: grid !important;
+  gap: 16px !important;
+  grid-template-columns: minmax(0, 1fr) minmax(320px, 420px);
+}
+
+.dc-timeline-column,
+.dc-inspector-column {
+  min-width: 0 !important;
+}
+
+.dc-timeline-shell,
+.dc-inspector,
+.dc-composer-panel {
+  background: oklch(0.205 0.035 238 / 0.96);
+  border: 1px solid var(--dc-border);
+  border-radius: var(--dc-radius-lg);
+  color: var(--dc-ink-main);
+}
+
+.dc-timeline-shell {
+  min-height: 480px;
+  padding: 18px;
+}
+
+.dc-timeline-head {
+  align-items: start;
+  display: flex;
+  gap: 16px;
+  justify-content: space-between;
+  margin-bottom: 14px;
+}
+
+.dc-timeline-head h2,
+.dc-inspector h2 {
+  color: var(--dc-ink-main);
+  font-size: 1.25rem;
+  font-weight: 740;
+  letter-spacing: 0;
+  line-height: 1.2;
+  margin: 0;
+  text-wrap: balance;
+}
+
+.dc-timeline-head > span,
+.dc-inspector-kicker,
+.dc-permit-row span {
+  color: var(--dc-aurora);
+  font-size: 0.8rem;
+  font-weight: 720;
+  letter-spacing: 0;
+}
+
+.dc-evidence-tray {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+  margin: 0 0 16px;
+}
+
+.dc-evidence-chip {
+  align-items: center;
+  background: oklch(0.145 0.030 238);
+  border: 1px solid oklch(0.430 0.055 235 / 0.84);
+  border-radius: 999px;
+  color: var(--dc-ink-main);
+  display: inline-flex;
+  font-size: 0.83rem;
+  font-weight: 650;
+  gap: 8px;
+  line-height: 1.2;
+  padding: 8px 10px;
+}
+
+.dc-chip-dot {
+  background: var(--dc-ink-muted);
+  border-radius: 999px;
+  display: inline-block;
+  height: 7px;
+  width: 7px;
+}
+
+.dc-evidence-chip.is-extracted .dc-chip-dot,
+.dc-evidence-chip.is-selected .dc-chip-dot {
+  background: var(--dc-aurora);
+}
+
+.dc-evidence-chip.is-failed {
+  border-color: oklch(0.705 0.160 28 / 0.72);
+}
+
+.dc-evidence-chip.is-failed .dc-chip-dot {
+  background: var(--dc-coral);
+}
+
+.dc-timeline-list {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+
+.dc-timeline-event {
+  background: oklch(0.145 0.030 238 / 0.82);
+  border: 1px solid oklch(0.430 0.055 235 / 0.72);
+  border-radius: var(--dc-radius-md);
+  padding: 14px;
+}
+
+.dc-timeline-event h3 {
+  color: var(--dc-ink-main);
+  font-size: 1rem;
+  font-weight: 720;
+  line-height: 1.25;
+  margin: 6px 0 0;
+}
+
+.dc-timeline-event p,
+.dc-inspector p,
+.dc-inspector li {
+  color: var(--dc-ink-muted);
+  font-size: 0.95rem;
+  line-height: 1.55;
+  margin: 8px 0 0;
+}
+
+.dc-event-meta {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+}
+
+.dc-event-meta span {
+  background: oklch(0.275 0.045 236 / 0.88);
+  border: 1px solid oklch(0.430 0.055 235 / 0.64);
+  border-radius: 999px;
+  color: var(--dc-aurora);
+  font-size: 0.75rem;
+  font-weight: 680;
+  padding: 5px 8px;
+}
+
+.dc-timeline-event.is-user {
+  background: oklch(0.275 0.045 236 / 0.92);
+}
+
+.dc-timeline-event.is-pact {
+  border-color: oklch(0.705 0.160 28 / 0.72);
+}
+
+.dc-timeline-event.is-error {
+  background: oklch(0.705 0.160 28 / 0.11);
+  border-color: oklch(0.705 0.160 28 / 0.72);
+}
+
+.dc-inspector {
+  min-height: 480px;
+  padding: 18px;
+}
+
+.dc-inspector.is-sealed {
+  border-color: var(--dc-coral);
+}
+
+.dc-inspector-kicker {
+  margin-bottom: 10px;
+}
+
+.dc-permit-row {
+  align-items: center;
+  display: flex;
+  justify-content: space-between;
+  margin-bottom: 12px;
 }
-.dc-title h1 {
-  font-size: clamp(30px, 5vw, 56px);
-  line-height: 1;
-  margin-bottom: 4px;
+
+.dc-inspector dl {
+  display: grid;
+  gap: 8px;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  margin: 16px 0;
+}
+
+.dc-inspector dl div {
+  background: oklch(0.145 0.030 238 / 0.82);
+  border: 1px solid oklch(0.430 0.055 235 / 0.66);
+  border-radius: var(--dc-radius-md);
+  padding: 10px;
+}
+
+.dc-inspector dt,
+.dc-inspector h3 {
+  color: var(--dc-aurora);
+  font-size: 0.78rem;
+  font-weight: 720;
+  letter-spacing: 0;
+  margin: 0;
+}
+
+.dc-inspector dd {
+  color: var(--dc-ink-main);
+  font-size: 0.92rem;
+  font-weight: 680;
+  margin: 4px 0 0;
+}
+
+.dc-inspector section {
+  border-top: 1px solid oklch(0.430 0.055 235 / 0.6);
+  padding: 12px 0;
+}
+
+.dc-inspector ul {
+  margin: 8px 0 0;
+  padding-left: 18px;
+}
+
+.dc-support-note,
+.dc-inline-notice {
+  background: oklch(0.705 0.160 28 / 0.13);
+  border: 1px solid oklch(0.705 0.160 28 / 0.72);
+  border-radius: var(--dc-radius-md);
+  color: var(--dc-ink-main);
+  line-height: 1.45;
+  padding: 12px 14px;
+}
+
+.dc-inline-notice {
+  background: oklch(0.275 0.045 236 / 0.94);
+  border-color: oklch(0.430 0.055 235 / 0.76);
+}
+
+.dc-inline-notice.is-error {
+  background: oklch(0.705 0.160 28 / 0.13);
+  border-color: oklch(0.705 0.160 28 / 0.72);
+}
+
+.dc-inline-notice.is-sealed {
+  border-color: var(--dc-coral);
+}
+
+.dc-composer-panel {
+  bottom: 12px;
+  padding: 14px;
+  position: sticky;
+  z-index: 5;
+}
+
+.dc-composer-panel textarea,
+.dc-composer-panel input,
+.dc-composer-panel select,
+.dc-composer-panel label,
+.dc-composer-panel .wrap,
+.dc-composer-panel .block,
+.dc-composer-panel .input-container,
+.dc-composer-panel .container {
+  border-radius: var(--dc-radius-md) !important;
+  font-size: 1rem !important;
+}
+
+.dc-composer-panel .block,
+.dc-composer-panel .container,
+.dc-composer-panel .input-container,
+.dc-composer-panel .wrap.default {
+  background: oklch(0.205 0.035 238) !important;
+  border-color: oklch(0.430 0.055 235 / 0.72) !important;
+  color: var(--dc-ink-main) !important;
+}
+
+.dc-composer-panel .upload-container,
+.dc-composer-panel .image-container,
+.dc-composer-panel .audio-container,
+.dc-composer-panel .upload-container button,
+.dc-composer-panel .audio-container button {
+  background: oklch(0.145 0.030 238) !important;
+  border-color: oklch(0.430 0.055 235 / 0.72) !important;
+  color: var(--dc-ink-muted) !important;
+}
+
+.dc-composer-panel .upload-container button,
+.dc-composer-panel .audio-container button {
+  border: 1px dashed oklch(0.430 0.055 235 / 0.82) !important;
+}
+
+.dc-composer-panel .source-selection button {
+  background: oklch(0.080 0.010 250) !important;
+  border: 1px solid oklch(0.430 0.055 235 / 0.72) !important;
+  color: var(--dc-aurora) !important;
+}
+
+.dc-composer-panel svg {
+  color: var(--dc-aurora) !important;
+  stroke: currentColor !important;
+}
+
+.dc-composer-panel label,
+.dc-composer-panel .label-wrap span {
+  color: var(--dc-ink-main) !important;
+  font-weight: 680 !important;
+}
+
+.dc-composer-panel textarea,
+.dc-composer-panel input,
+.dc-composer-panel select {
+  background: oklch(0.145 0.030 238) !important;
+  color: var(--dc-ink-main) !important;
+}
+
+.dc-composer-panel textarea::placeholder,
+.dc-composer-panel input::placeholder {
+  color: var(--dc-ink-muted) !important;
+  opacity: 1 !important;
+}
+
+.dc-composer-panel button {
+  border-radius: var(--dc-radius-md) !important;
+  font-weight: 720 !important;
+  min-height: 44px;
+}
+
+.dc-action-row button {
+  background: oklch(0.275 0.045 236) !important;
+  border: 1px solid oklch(0.430 0.055 235 / 0.82) !important;
+  color: var(--dc-ink-main) !important;
 }
-.dc-title p {
-  color: #49626b;
-  font-size: 16px;
-  margin-top: 0;
+
+.dc-action-row button:hover {
+  border-color: var(--dc-primary) !important;
+}
+
+.dc-primary,
+.dc-primary button {
+  background: var(--dc-primary-deep) !important;
+  border: 1px solid var(--dc-primary) !important;
+  color: var(--dc-ink-main) !important;
+}
+
+.dc-seal-button,
+.dc-seal-button button {
+  background: var(--dc-coral) !important;
+  border: 1px solid var(--dc-coral) !important;
+  color: var(--dc-bg-void) !important;
+}
+
+.dc-action-row {
+  align-items: stretch !important;
+  display: flex !important;
+  flex-wrap: wrap !important;
+  gap: 8px !important;
+}
+
+.dc-action-row > * {
+  min-width: 148px !important;
+}
+
+.dc-sealed-output {
+  margin-bottom: 16px;
 }
-.dc-stamp button {
-  background: #17313b !important;
-  border: 0 !important;
-  color: #fff8ed !important;
-  font-weight: 800 !important;
+
+.dc-diagnostics textarea,
+.dc-diagnostics code {
+  font-family: "SFMono-Regular", Consolas, "Liberation Mono", monospace !important;
 }
-textarea, input, select {
-  font-size: 16px !important;
+
+*:focus-visible {
+  outline: 2px solid var(--dc-primary) !important;
+  outline-offset: 2px !important;
 }
-@media (max-width: 760px) {
-  .dc-title h1 { font-size: 34px; }
-  .dc-title p { font-size: 14px; }
+
+@media (max-width: 980px) {
+  .dc-statusbar {
+    grid-template-columns: 1fr;
+  }
+
+  .dc-system-status {
+    justify-content: flex-start;
+  }
+
+  .dc-main-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .dc-inspector {
+    min-height: auto;
+  }
+}
+
+@media (max-width: 620px) {
+  .dc-app-shell {
+    padding: 10px;
+  }
+
+  .dc-statusbar,
+  .dc-timeline-shell,
+  .dc-inspector,
+  .dc-composer-panel {
+    border-radius: var(--dc-radius-md);
+  }
+
+  .dc-brand-lockup {
+    align-items: flex-start;
+  }
+
+  .dc-brand-lockup h1 {
+    font-size: 1.1rem;
+  }
+
+  .dc-phase-rail {
+    overflow-x: auto;
+  }
+
+  .dc-timeline-head,
+  .dc-permit-row {
+    align-items: flex-start;
+    flex-direction: column;
+  }
+
+  .dc-inspector dl {
+    grid-template-columns: 1fr;
+  }
+
+  .dc-action-row > * {
+    min-width: 100% !important;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  *,
+  *::before,
+  *::after {
+    animation-duration: 0.001ms !important;
+    scroll-behavior: auto !important;
+    transition-duration: 0.001ms !important;
+  }
 }
 """
 
 
+def _outputs(
+    session_state,
+    status_html,
+    timeline_html,
+    inspector_html,
+    sealed_html,
+    debug_json,
+    notice_html,
+):
+    return [session_state, status_html, timeline_html, inspector_html, sealed_html, debug_json, notice_html]
+
+
 def build_demo() -> gr.Blocks:
     with gr.Blocks(css=CSS, title="Dream Customs") as demo:
-        with gr.Column(elem_classes=["dc-shell"]):
-            gr.Markdown(
-                """
-                # Dream Customs / 梦境海关
-                夜间来访者入境申报处
-                """,
-                elem_classes=["dc-title"],
-            )
-            with gr.Row():
-                with gr.Column(scale=5):
-                    dream_text = gr.Textbox(
-                        label="Dream declaration",
-                        lines=8,
-                        value="我梦见一部迟到的电梯，按钮都融化了，我一直到不了 14 楼。",
-                    )
-                    with gr.Row():
-                        image_input = gr.Image(label="Image evidence", type="filepath")
-                        audio_input = gr.Audio(label="Voice evidence", type="filepath")
+        session_state = gr.Textbox(label="Session manifest", show_label=False, elem_classes=["dc-session-store"])
+        with gr.Column(elem_classes=["dc-app-shell"]):
+            status_html = gr.HTML()
+
+            with gr.Row(elem_classes=["dc-main-grid"]):
+                with gr.Column(scale=7, elem_classes=["dc-timeline-column"]):
+                    timeline_html = gr.HTML()
+                with gr.Column(scale=4, elem_classes=["dc-inspector-column"]):
+                    inspector_html = gr.HTML()
+
+            with gr.Column(elem_classes=["dc-composer-panel"]):
+                notice_html = gr.HTML()
+                dream_text = gr.Textbox(
+                    label="Dream material",
+                    lines=4,
+                    value="我梦见一部迟到的电梯，按钮都融化了，我一直到不了 14 楼。",
+                    placeholder="Type the dream, a fragment, or a new piece of material.",
+                )
+                with gr.Row():
+                    image_input = gr.Image(label="Attach image", type="filepath", height=150)
+                    audio_input = gr.Audio(label="Record voice", type="filepath")
                     mood = gr.Dropdown(
-                        label="Current weather",
+                        label="Mood chip",
                         choices=["foggy", "anxious", "curious", "tired", "restless", "calm"],
                         value="foggy",
                     )
-                    answers = gr.Textbox(
-                        label="Answers to the clerk",
-                        lines=4,
+                with gr.Row():
+                    answer_text = gr.Textbox(
+                        label="Answer to the clerk",
+                        lines=2,
                         value="我想和它结盟，但今天只想完成一件很小的事。",
+                        placeholder="Answer a customs question, or leave blank and skip.",
                     )
-                    with gr.Row():
-                        text_backend = gr.Radio(
-                            label="Text engine",
-                            choices=["demo", "ollama"],
-                            value="demo",
-                        )
-                        vision_backend = gr.Radio(
-                            label="Vision engine",
-                            choices=["demo", "ollama"],
-                            value="demo",
-                        )
-                    submit = gr.Button("Stamp clearance", elem_classes=["dc-stamp"])
-
-                with gr.Column(scale=6):
-                    negotiation = gr.Textbox(label="Customs questions", lines=7)
-                    pact_text = gr.Textbox(label="Pact manifest", lines=12)
-                    pact_html = gr.HTML(label="Today's pact card")
-                    debug_json = gr.Code(label="Debug manifest", language="json")
-
-            submit.click(
-                run_customs_once,
-                inputs=[dream_text, image_input, audio_input, mood, answers, text_backend, vision_backend],
-                outputs=[negotiation, pact_text, pact_html, debug_json],
-            )
+                    revision_request = gr.Textbox(
+                        label="Revision request",
+                        lines=2,
+                        value="Make it gentler and more specific for today.",
+                        placeholder="Try: make it stranger, make it gentler, or make the action smaller.",
+                    )
+                with gr.Row():
+                    text_backend = gr.Dropdown(
+                        label="Text route",
+                        choices=["demo", "model", "ollama"],
+                        value="demo",
+                    )
+                    vision_backend = gr.Dropdown(
+                        label="Vision route",
+                        choices=["demo", "model", "ollama"],
+                        value="demo",
+                    )
+                with gr.Row(elem_classes=["dc-action-row"]):
+                    send_btn = gr.Button("Send to customs", elem_classes=["dc-primary"])
+                    add_btn = gr.Button("Add material")
+                    ask_btn = gr.Button("Ask another question")
+                    answer_btn = gr.Button("Answer question")
+                    skip_btn = gr.Button("Skip question")
+                    draft_btn = gr.Button("Draft pact")
+                    revise_btn = gr.Button("Revise pact")
+                    seal_btn = gr.Button("Seal today's pact", elem_classes=["dc-seal-button"])
+                    new_btn = gr.Button("Start a new declaration")
+
+            sealed_html = gr.HTML(elem_classes=["dc-sealed-output"])
+
+            with gr.Accordion("Diagnostics", open=False, elem_classes=["dc-diagnostics"]):
+                debug_json = gr.Code(label="Session state", language="json")
 
             gr.Examples(
                 examples=[
@@ -123,8 +720,67 @@ def build_demo() -> gr.Blocks:
                         "I want a small action that makes tomorrow less loud.",
                     ],
                 ],
-                inputs=[dream_text, mood, answers],
+                inputs=[dream_text, mood, answer_text],
             )
+
+        outputs = _outputs(session_state, status_html, timeline_html, inspector_html, sealed_html, debug_json, notice_html)
+        demo.load(initial_workbench_state, outputs=outputs, api_name=False)
+
+        send_btn.click(
+            start_declaration_action,
+            inputs=[session_state, dream_text, image_input, audio_input, mood, text_backend, vision_backend],
+            outputs=outputs,
+            api_name=False,
+        )
+        add_btn.click(
+            add_material_action,
+            inputs=[session_state, dream_text, image_input, audio_input, mood, text_backend, vision_backend],
+            outputs=outputs,
+            api_name=False,
+        )
+        ask_btn.click(
+            ask_another_question_action,
+            inputs=[session_state, text_backend, vision_backend],
+            outputs=outputs,
+            api_name=False,
+        )
+        answer_btn.click(
+            answer_question_action,
+            inputs=[session_state, answer_text, text_backend, vision_backend],
+            outputs=outputs,
+            api_name=False,
+        )
+        skip_btn.click(
+            skip_question_action,
+            inputs=[session_state, text_backend, vision_backend],
+            outputs=outputs,
+            api_name=False,
+        )
+        draft_btn.click(
+            draft_pact_action,
+            inputs=[session_state, text_backend, vision_backend],
+            outputs=outputs,
+            api_name=False,
+        )
+        revise_btn.click(
+            revise_pact_action,
+            inputs=[session_state, revision_request, text_backend, vision_backend],
+            outputs=outputs,
+            api_name=False,
+        )
+        seal_btn.click(
+            seal_pact_action,
+            inputs=[session_state, text_backend, vision_backend],
+            outputs=outputs,
+            api_name=False,
+        )
+        new_btn.click(
+            start_new_action,
+            inputs=[text_backend, vision_backend],
+            outputs=outputs,
+            api_name=False,
+        )
+
     return demo
 
 
@@ -132,8 +788,15 @@ demo = build_demo()
 
 
 if __name__ == "__main__":
+    allowed_paths = [os.path.abspath("docs/design/assets")]
     if os.getenv("SPACE_ID"):
-        demo.launch(show_api=False, show_error=True)
+        demo.launch(show_api=False, show_error=True, allowed_paths=allowed_paths)
     else:
         server_port = int(os.getenv("GRADIO_SERVER_PORT", "7860"))
-        demo.launch(server_name="127.0.0.1", server_port=server_port, show_api=False, show_error=True)
+        demo.launch(
+            server_name="127.0.0.1",
+            server_port=server_port,
+            show_api=False,
+            show_error=True,
+            allowed_paths=allowed_paths,
+        )

docs/design/2026-06-05-uiux-v2-brief.md

@@ -0,0 +1,131 @@
+# Dream Customs UI/UX V2 Brief
+
+Last updated: 2026-06-05
+
+## 1. Feature Summary
+
+Redesign Dream Customs from a one-shot Gradio form into a dream customs workbench. The user should be able to declare a dream through text, image, or voice, receive customs questions, add more evidence, continue negotiation, revise the pact draft, or seal the final pact.
+
+The target user is tired, on mobile, and still carrying dream residue. The interface must feel vivid and strange, but the controls must be as obvious as a serious product tool.
+
+## 2. Primary User Action
+
+The primary action is not "submit once." It is "decide the next customs move": add material, answer, ask another question, revise the pact, or seal today's pact.
+
+## 3. Design Direction
+
+Color strategy: committed product UI. The app uses a dark nocturnal base with cobalt as the main action color, aurora cyan for evidence status, and coral as rare stamp ink.
+
+Scene sentence: a half-awake user opens the app from bed under dim morning light, facing a night customs desk that turns dream fragments into a small action for today.
+
+Anchor references:
+
+- Codex app input composer: bottom-first multimodal input and clear action clustering.
+- Linear / Raycast product discipline: dense but calm panels, obvious focus states, no decorative controls.
+- Night train ticket window / customs stamp desk: the physical metaphor for evidence, permit, and final seal.
+
+Visual probes generated for this direction:
+
+![Night border probe](assets/dream-customs-probe-night-border.png)
+
+![Night desk probe](assets/dream-customs-probe-night-desk.png)
+
+![Morning console probe](assets/dream-customs-probe-morning-console.png)
+
+Chosen lane: `Night desk probe` for layout and interaction, with `Night border probe` for pact stamp atmosphere. `Morning console probe` stays as a later light-mode reference.
+
+## 4. Scope
+
+Fidelity: production-ready Gradio app redesign.
+
+Breadth: one main app surface plus all states needed for the flow.
+
+Interactivity: shipped-quality multi-step Gradio behavior with session state.
+
+Time intent: polish until it is good enough for a hackathon demo video and Space public use.
+
+## 5. Layout Strategy
+
+Use an app shell instead of a document page.
+
+- Top: compact identity, current phase, model status, and safety note entry point.
+- Center: conversation timeline with user declarations, evidence extraction, customs questions, and pact draft events.
+- Bottom: Codex-style composer with text area, image attach, voice record/upload, mood chip, backend/model menu, and primary send button.
+- Side on desktop, collapsible below timeline on mobile: pact inspector with visitor, permit ID, evidence count, risk, suggestion, weird task, and seal state.
+- Output card: only becomes the dominant object after the user chooses to seal.
+
+## 6. Key States
+
+- Empty: show a compact dream evidence tray and one sentence telling the user they can start with any fragment.
+- Declaring: composer has text, image, audio, and mood chips, with visible send state.
+- Extracting: evidence chips show queued, extracting, extracted, or failed.
+- Negotiating: customs questions appear one at a time or as a small set; user can answer, skip, or add evidence.
+- Draft pact: inspector shows editable draft actions: revise suggestion, make it stranger, make it gentler, ask another question.
+- Sealed pact: final card locks visually, provides copy text and screenshot-friendly layout.
+- Error: inline recovery, not modal. Keep text-only path available.
+- Safety escalation: supportive note appears above final action and avoids playful framing for severe distress.
+- Reduced motion: no animated gates or delayed reveal. State changes crossfade or swap instantly.
+
+## 7. Interaction Model
+
+Core loop:
+
+1. User adds dream evidence through composer.
+2. App builds or updates `DreamIntake`.
+3. System asks customs questions.
+4. User chooses: answer, add material, skip, continue negotiation, or draft pact.
+5. Draft pact appears in inspector.
+6. User chooses: revise, add evidence, ask more, or seal.
+7. Sealed pact renders final card.
+
+Longer task behavior should come from real user agency, not artificial delay. Each extra round should incorporate the user's new material or choice into the next prompt.
+
+## 8. Content Requirements
+
+Primary labels:
+
+- `Declare dream`
+- `Attach image`
+- `Record voice`
+- `Send to customs`
+- `Add material`
+- `Ask another question`
+- `Draft pact`
+- `Revise pact`
+- `Seal today's pact`
+- `Start a new declaration`
+
+Output fields remain:
+
+- Dream visitor
+- Permit ID
+- Contraband
+- Risk level
+- Alliance reading
+- Practical suggestion
+- Weird task
+- Bedtime release
+- Safety note
+
+Image roles:
+
+- Atmospheric header or empty-state art: generated raster image.
+- Evidence thumbnails: user upload.
+- Seal and permit marks: CSS/HTML, not sketchy SVG.
+
+## 9. Recommended Impeccable References
+
+- `layout.md`: rebuild the app shell, composer, timeline, and inspector.
+- `colorize.md`: apply the nocturnal palette without losing contrast.
+- `harden.md`: error, empty, loading, safety, i18n, and mobile states.
+- `animate.md`: restrained state motion and reduced-motion fallback.
+- `polish.md`: final pass after implementation.
+
+## 10. Open Questions
+
+Defaults chosen for implementation:
+
+- Default visual lane: Night Desk.
+- Default backend route: keep `demo` for deterministic fallback, add hosted MiniCPM route as optional `model`.
+- Default voice behavior: transcript first, no voice output.
+- Default deployment: Hugging Face Space remains the public demo, Modal can host heavier model experiments if Space hardware is insufficient.

docs/goal-prompts/2026-06-05-dream-customs-uiux-v2.md

@@ -0,0 +1,11 @@
+# Dream Customs UI/UX V2 Goal Prompt
+
+在 `/Users/junhaocheng/working-dir/ai-competitions/build-small-hackthon` 继续 Dream Customs。先读 `AGENTS.md`、`PRODUCT.md`、`DESIGN.md`、`docs/design/2026-06-05-uiux-v2-brief.md`、`docs/superpowers/plans/2026-06-05-dream-customs-uiux-v2.md`。使用 `$impeccable craft Dream Customs UI/UX V2` 的思路实现，不要再做一页普通 Gradio 表单。
+
+目标：把当前 one-shot app 改成 Codex app 风格的梦境海关工作台。核心布局为顶部状态栏、中心会话时间线、底部 multimodal composer、桌面右侧或移动端下方 pact inspector。用户必须能选择 `Add material`、`Ask another question`、`Draft pact`、`Revise pact`、`Seal today's pact`，而不是一次生成后结束。
+
+设计：采用 `Night Desk` 方向，OKLCH 暗色产品界面，cobalt 主动作、aurora evidence 状态、coral seal 稀有强调。使用 `docs/design/assets/` 里的生成图作为氛围参考或空状态资源。避免 beige parchment、tarot、therapy intake、generic purple AI SaaS、side stripe、gradient text、过圆卡片和低对比灰字。
+
+实现：先用 demo backend 打通 session state、schema、pipeline、UI 和测试，再接 hosted MiniCPM route。保留 text-only fallback。可以使用 Modal credits 做 MiniCPM 测试，HF credits 只在 Space 稳定运行需要时使用。不要把任何 token 写入 repo、日志或文档。
+
+验收：`python -m pytest -q` 通过；本地 `python app.py` 可用；远端 Space queue prediction 可用；手机宽度可读；debug JSON 收进折叠 diagnostics；严重痛苦输入触发安全提示。完成后 commit、push，并更新计划 checkbox。

docs/smoke/2026-06-05-space-deployment-smoke.md

@@ -0,0 +1,99 @@
+# Dream Customs Space Deployment Smoke
+
+Date: 2026-06-05
+
+## Scope
+
+Goal for this pass: verify the current UI/UX V2 workbench locally, sync it to the Hugging Face Space if authorized, check the public Space with a browser, run a remote text-only queue prediction, and test hosted MiniCPM routes only if runtime secrets are present.
+
+## Local Repo
+
+- CWD verified: `/Users/junhaocheng/working-dir/ai-competitions/build-small-hackthon`.
+- Branch verified: `feature/dream-customs-mvp`.
+- `git pull --ff-only`: already up to date.
+- `git remote -v` showed:
+  - `origin`: `https://github.com/adjcjh777/dream-customs-build-small.git`
+  - `space`: `https://huggingface.co/spaces/build-small-hackathon/dream-customs`
+
+## Local Verification
+
+- `.venv/bin/python -m pytest -q`: 31 passed.
+- `python app.py` could not bind `7860` because another Python process was already listening there.
+- Local app started with `GRADIO_SERVER_PORT=7861 .venv/bin/python app.py`.
+- Browser smoke on `http://127.0.0.1:7861/` completed:
+  - `Send to customs`
+  - `Ask another question`
+  - `Add material`
+  - `Draft pact`
+  - `Revise pact`
+  - `Seal today's pact`
+- Final local V2 state showed:
+  - phase `Sealed`
+  - permit `DC-DEMO-014`
+  - 3 filed evidence items
+  - 4 asked questions
+  - alliance reading
+  - today's suggestion
+  - 5-minute task
+  - contraband list
+  - bedtime release
+  - `SEALED` pact card
+- Mobile viewport `390x844` remained readable.
+- Diagnostics panel opened and showed sealed demo state. Ordinary-case safety fields were empty, and the persistent header copy still stated that this is playful reflection, not medical advice.
+
+## Hugging Face Space Sync
+
+- Space remote `main` was readable.
+- Space `main` was on old app history and did not contain the V2 workbench.
+- A non-force deployment path was attempted by cloning the Space repo to a temporary directory, copying only this repo's tracked files, committing a Space deployment commit, and pushing to `main`.
+- The local temporary deployment commit was created as `3b18ee5 Deploy Dream Customs workbench UI`, but it was not accepted by Hugging Face.
+- `git push origin main` in the temporary Space clone was rejected by HF:
+  - `You are not authorized to push to this repo.`
+- Global `huggingface-cli` was not installed, but `.venv/bin/huggingface-cli` and `.venv/bin/hf` were present.
+- `.venv/bin/hf auth whoami` authenticated as `ADJCJH` and showed membership in `build-small-hackathon`.
+- The cached HF token is fine-grained and scoped to the user entity, not the `build-small-hackathon` org Space.
+- A `huggingface_hub.upload_folder(...)` deploy attempt used the cached token, preserved the current Space parent commit, and avoided printing any token value.
+- The API deploy attempt failed with 403 on the Space LFS batch endpoint:
+  - `Make sure your token has the correct permissions.`
+
+Result: V2 workbench is not deployed to the public Space in this pass.
+
+## Public Space Smoke
+
+Checked URLs:
+
+- `https://huggingface.co/spaces/build-small-hackathon/dream-customs`
+- `https://build-small-hackathon-dream-customs.hf.space/`
+
+Observed result:
+
+- Public Space opened successfully.
+- Direct hf.space app rendered the older one-shot UI, not the current V2 workbench.
+- Existing old UI button `Stamp clearance` completed successfully in the browser.
+- Old UI output included `Today's Pact`, permit `DC-DEMO-014`, suggestion, weird task, bedtime release, contraband, and `SEALED`.
+- Mobile viewport `390x844` was readable for the currently deployed old app.
+- Browser console showed one HF subdomain status request returning 400 and one Gradio warning about too many endpoint arguments; no blocker was observed for the old text-only demo output.
+
+Remote queue check:
+
+- `/config` returned Gradio `4.44.1`.
+- Queued endpoint found: `run_customs_once`, `fn_index=0`.
+- Raw `/queue/join` plus `/queue/data` text-only call completed with `process_completed`.
+- Queue output returned 4 fields and a pact snippet containing `Dream visitor`, `Permit: DC-DEMO-014`, `Today's suggestion`, `Weird task`, and `Bedtime release`.
+- `gradio_client.Client(...)` could not be used because the installed client failed while parsing the remote schema with `TypeError: argument of type 'bool' is not iterable`; raw queue protocol worked.
+
+Result: current old public Space queue works, but the required V2 workbench public Space smoke remains blocked until a token with write permission for `build-small-hackathon/dream-customs` is available.
+
+## Hosted MiniCPM Route
+
+Runtime environment check:
+
+- `DREAM_CUSTOMS_TEXT_ENDPOINT`: missing
+- `DREAM_CUSTOMS_VISION_ENDPOINT`: missing
+- `DREAM_CUSTOMS_HOSTED_TOKEN`: missing
+
+Result: hosted MiniCPM text and vision route smoke was not run. No token or endpoint value was printed, stored, or committed.
+
+## Next Step
+
+Create or provide an HF token with write access to the `build-small-hackathon/dream-customs` Space, or grant the cached token/org role that permission. Then push the current workbench files to Space `main` and rerun the V2 public Space browser and queue smoke.

docs/superpowers/plans/2026-06-05-dream-customs-uiux-v2.md

@@ -0,0 +1,146 @@
+# Dream Customs UI/UX V2 Execution Plan
+
+> **For agentic workers:** Use `$impeccable craft Dream Customs UI/UX V2` or combine `superpowers:executing-plans` with the references named in `docs/design/2026-06-05-uiux-v2-brief.md`. Track progress by updating these checkboxes.
+
+**Goal:** Replace the current one-shot Gradio form with a mobile-first, Codex-style Dream Customs workbench that supports multimodal evidence, iterative negotiation, draft revision, and final pact sealing.
+
+**Current problem:** The deployed app works, but it looks like a basic form. The main button is not placed where the user expects, the color system is flat, the output card feels like a paper certificate, and the flow ends too quickly.
+
+**Design north star:** Night Desk: a dream customs desk with disciplined product controls, dark atmospheric surfaces, cobalt actions, aurora evidence light, and coral stamp ink.
+
+---
+
+## Task 1: Lock Design Context
+
+- [x] Add `PRODUCT.md`.
+- [x] Add target `DESIGN.md`.
+- [x] Add `.impeccable/design.json`.
+- [x] Generate and store three visual probes in `docs/design/assets/`.
+- [x] Add `docs/design/2026-06-05-uiux-v2-brief.md`.
+
+## Task 2: Refactor Product State
+
+Files:
+
+- `dream_customs/schema.py`
+- `dream_customs/pipeline.py`
+- `dream_customs/app_logic.py`
+- `tests/`
+
+Steps:
+
+- [x] Add session state schema for phases: `empty`, `declaring`, `negotiating`, `drafting`, `sealed`, `error`.
+- [x] Add `EvidenceItem` schema with `type`, `label`, `status`, `content`, `source_path`, and `error`.
+- [x] Add `CustomsSession` schema that stores `DreamIntake`, evidence items, question history, answer history, draft pact, sealed pact, and safety flags.
+- [x] Add tests for adding text, image, audio, mood, answer, skip, revise, and seal actions.
+- [x] Keep text-only path working even if image/audio/model routes fail.
+
+## Task 3: Build Iterative Pipeline
+
+Files:
+
+- `dream_customs/pipeline.py`
+- `dream_customs/models.py`
+- `dream_customs/prompts.py`
+- `dream_customs/app_logic.py`
+
+Steps:
+
+- [x] Split the one-shot `run_customs_once` into actions: `add_evidence`, `ask_questions`, `answer_question`, `draft_pact`, `revise_pact`, `seal_pact`.
+- [x] Make each action return structured state plus render-ready view models.
+- [x] Add prompt templates for continuing negotiation and revising pact tone.
+- [x] Add buttons for `Add material`, `Ask another question`, `Draft pact`, `Revise pact`, and `Seal today's pact`.
+- [x] Add a deterministic demo path for all actions.
+
+## Task 4: Add Hosted Model Path
+
+Files:
+
+- `dream_customs/models.py`
+- `requirements.txt`
+- deployment docs or secrets docs
+
+Steps:
+
+- [x] Keep `demo` as fallback.
+- [x] Add `model` backend option that can call hosted MiniCPM text and vision endpoints.
+- [x] Use Modal credits for MiniCPM experiments if local or HF Space loading is too slow.
+- [x] Use HF credits for Space hardware only if needed for stable public demo.
+- [x] Do not store tokens in repo, logs, docs, or examples.
+- [x] Add short smoke command for hosted text generation and hosted image clue extraction.
+
+## Task 5: Rebuild Gradio UI
+
+Files:
+
+- `app.py`
+- possible new `dream_customs/ui.py`
+- `dream_customs/render.py`
+
+Steps:
+
+- [x] Replace two-column form with app shell: header, timeline, pact inspector, bottom composer.
+- [x] Composer contains multiline dream input, image upload, audio upload/record, mood chip, backend menu, and primary action.
+- [x] Timeline renders user evidence, model questions, answers, extraction statuses, and pact drafts.
+- [x] Pact inspector renders live draft and final sealed card.
+- [x] Primary actions are visible above the fold on mobile.
+- [x] Debug JSON moves into a collapsed diagnostics panel.
+
+## Task 6: Apply Visual System
+
+Files:
+
+- `app.py`
+- `dream_customs/render.py`
+- optional static assets
+
+Steps:
+
+- [x] Implement the OKLCH tokens from `DESIGN.md`.
+- [x] Use generated probe imagery as header or empty-state atmosphere.
+- [x] Replace parchment card styling with dark inspector plus sealed pact treatment.
+- [x] Add focus, hover, disabled, loading, and error states.
+- [x] Add reduced-motion fallback.
+- [x] Verify contrast for body, labels, placeholders, chips, and disabled controls.
+
+## Task 7: Verify Locally And On Space
+
+Commands:
+
+```bash
+python -m pytest -q
+python app.py
+```
+
+Checks:
+
+- [x] Text-only declaration can reach sealed pact.
+- [x] User can add material after receiving questions.
+- [x] User can ask another question before sealing.
+- [x] User can revise pact before sealing.
+- [x] Image and audio failure keep text path alive.
+- [x] Mobile width is readable.
+- [ ] V2 Space deployment builds and remote queue prediction works.
+
+2026-06-05 verification notes:
+
+- [x] Local tests passed with `.venv/bin/python -m pytest -q`: 31 passed.
+- [x] Local V2 Gradio smoke passed on `127.0.0.1:7861` because `7860` was already occupied by another Python listener.
+- [x] Local V2 browser flow reached sealed pact: `Send to customs -> Ask another question -> Add material -> Draft pact -> Revise pact -> Seal today's pact`.
+- [x] Local mobile viewport `390x844` remained readable; pact inspector showed `DC-DEMO-014`, `Sealed`, 3 evidence items, 4 questions, suggestion, weird task, contraband, and bedtime release.
+- [x] Local diagnostics panel opened and showed `status: sealed`, `text_backend: demo`, `vision_backend: demo`, empty `safety_flags`, and empty ordinary-case `safety_note`; the header safety copy stayed visible as playful reflection, not medical advice.
+- [x] Existing public Space opened and the currently deployed old one-shot app completed a text-only demo queue prediction through `run_customs_once`.
+- [ ] Current V2 workbench was not deployed to public Space because `git push` to `https://huggingface.co/spaces/build-small-hackathon/dream-customs` was rejected by HF authorization (`You are not authorized to push to this repo`).
+- [ ] Follow-up HF API deploy attempt also failed: the cached token belongs to `ADJCJH` and sees the `build-small-hackathon` org, but the token is fine-grained and scoped only to the user entity; `huggingface_hub.upload_folder(...)` failed with 403 on the Space LFS batch endpoint.
+- [ ] Hosted MiniCPM route smoke was not run because `DREAM_CUSTOMS_TEXT_ENDPOINT`, `DREAM_CUSTOMS_VISION_ENDPOINT`, and `DREAM_CUSTOMS_HOSTED_TOKEN` were missing from the runtime environment.
+
+Detailed record: `docs/smoke/2026-06-05-space-deployment-smoke.md`.
+
+## Task 8: Commit And Deploy
+
+- [x] Commit implementation to `feature/dream-customs-mvp` or a new `feature/uiux-v2` branch.
+- [x] Push GitHub branch.
+- [ ] Upload/merge Space update. Blocked on HF push permission as of 2026-06-05.
+- [ ] Re-run public Space V2 smoke test after the Space update is accepted.
+- [x] Re-run existing public Space smoke test for the currently deployed old one-shot app.
+- [x] Update README screenshots or demo instructions.

dream_customs/app_logic.py

@@ -6,10 +6,26 @@ from dream_customs.models import (
     FakeASRClient,
     FakeTextClient,
     FakeVisionClient,
+    HostedMiniCPMTextClient,
+    HostedMiniCPMVisionClient,
     OllamaTextClient,
     OllamaVisionClient,
 )
-from dream_customs.pipeline import generate_negotiation, generate_pact, intake_from_modalities
+from dream_customs.pipeline import (
+    add_evidence,
+    answer_question,
+    ask_questions,
+    create_session,
+    draft_pact,
+    generate_negotiation,
+    generate_pact,
+    intake_from_modalities,
+    revise_pact,
+    seal_pact,
+    skip_question,
+)
+from dream_customs.render import render_pact_card, render_pact_inspector, render_status_bar, render_timeline
+from dream_customs.schema import CustomsSession
 
 
 DEFAULT_TEXT_MODEL = "hf.co/openbmb/MiniCPM5-1B-GGUF:Q8_0"
@@ -36,6 +52,11 @@ def _clients(text_backend: str, vision_backend: str):
             model_name=os.getenv("DREAM_CUSTOMS_TEXT_MODEL", DEFAULT_TEXT_MODEL),
             base_url=os.getenv("DREAM_CUSTOMS_OLLAMA_URL", "http://localhost:11434"),
         )
+    elif text_backend == "model":
+        text_client = HostedMiniCPMTextClient(
+            endpoint=os.getenv("DREAM_CUSTOMS_TEXT_ENDPOINT", ""),
+            token=os.getenv("DREAM_CUSTOMS_HOSTED_TOKEN", ""),
+        )
     else:
         text_client = FakeTextClient()
 
@@ -44,12 +65,170 @@ def _clients(text_backend: str, vision_backend: str):
             model_name=os.getenv("DREAM_CUSTOMS_VISION_MODEL", DEFAULT_VISION_MODEL),
             base_url=os.getenv("DREAM_CUSTOMS_OLLAMA_URL", "http://localhost:11434"),
         )
+    elif vision_backend == "model":
+        vision_client = HostedMiniCPMVisionClient(
+            endpoint=os.getenv("DREAM_CUSTOMS_VISION_ENDPOINT", ""),
+            token=os.getenv("DREAM_CUSTOMS_HOSTED_TOKEN", ""),
+        )
     else:
         vision_client = FakeVisionClient()
 
     return text_client, vision_client, FakeASRClient()
 
 
+def _session_from_state(state: Any) -> CustomsSession:
+    if isinstance(state, CustomsSession):
+        return state
+    if isinstance(state, str) and state.strip():
+        try:
+            return CustomsSession.model_validate_json(state)
+        except ValueError:
+            return create_session()
+    if isinstance(state, dict):
+        try:
+            return CustomsSession.model_validate(state)
+        except ValueError:
+            return create_session()
+    return create_session()
+
+
+def _debug_json(session: CustomsSession, text_backend: str, vision_backend: str) -> str:
+    payload = {
+        "status": session.phase,
+        "text_backend": text_backend,
+        "vision_backend": vision_backend,
+        "session": session.model_dump(mode="json"),
+    }
+    return json.dumps(payload, ensure_ascii=False, indent=2)
+
+
+def _notice(session: CustomsSession) -> str:
+    latest_error = next((event for event in reversed(session.events) if event.role == "error"), None)
+    if latest_error:
+        return f"<div class='dc-inline-notice is-error'>{latest_error.body}</div>"
+    if session.phase == "sealed":
+        return "<div class='dc-inline-notice is-sealed'>Today's pact is sealed. The card below is ready for a screenshot.</div>"
+    if session.phase == "drafting":
+        return "<div class='dc-inline-notice'>Draft ready. Revise it, ask another question, add material, or seal today's pact.</div>"
+    if session.phase == "negotiating":
+        return "<div class='dc-inline-notice'>The clerk has questions. Answer, skip, add material, or draft a pact.</div>"
+    return "<div class='dc-inline-notice'>File any fragment. Text-only stays available if image or voice fails.</div>"
+
+
+def _view(session: CustomsSession, text_backend: str = "demo", vision_backend: str = "demo"):
+    sealed_html = render_pact_card(session.sealed_pact) if session.sealed_pact else ""
+    return (
+        json.dumps(session.model_dump(mode="json"), ensure_ascii=False),
+        render_status_bar(session, text_backend, vision_backend),
+        render_timeline(session),
+        render_pact_inspector(session),
+        sealed_html,
+        _debug_json(session, text_backend, vision_backend),
+        _notice(session),
+    )
+
+
+def initial_workbench_state(text_backend: str = "demo", vision_backend: str = "demo"):
+    return _view(create_session(), text_backend, vision_backend)
+
+
+def start_declaration_action(
+    state: Any,
+    dream_text: str,
+    image_value: Any = None,
+    audio_value: Any = None,
+    mood: str = "",
+    text_backend: str = "demo",
+    vision_backend: str = "demo",
+):
+    session = _session_from_state(state)
+    text_client, vision_client, asr_client = _clients(text_backend, vision_backend)
+    session = add_evidence(
+        session,
+        dream_text=dream_text or "",
+        image_path=_file_path(image_value) or None,
+        audio_path=_file_path(audio_value) or None,
+        mood=mood or "",
+        vision_client=vision_client,
+        asr_client=asr_client,
+    )
+    if session.phase != "error":
+        session = ask_questions(session, text_client)
+    return _view(session, text_backend, vision_backend)
+
+
+def add_material_action(
+    state: Any,
+    dream_text: str,
+    image_value: Any = None,
+    audio_value: Any = None,
+    mood: str = "",
+    text_backend: str = "demo",
+    vision_backend: str = "demo",
+):
+    session = _session_from_state(state)
+    _text_client, vision_client, asr_client = _clients(text_backend, vision_backend)
+    session = add_evidence(
+        session,
+        dream_text=dream_text or "",
+        image_path=_file_path(image_value) or None,
+        audio_path=_file_path(audio_value) or None,
+        mood=mood or "",
+        vision_client=vision_client,
+        asr_client=asr_client,
+    )
+    return _view(session, text_backend, vision_backend)
+
+
+def answer_question_action(state: Any, answer: str, text_backend: str = "demo", vision_backend: str = "demo"):
+    session = answer_question(_session_from_state(state), answer or "")
+    return _view(session, text_backend, vision_backend)
+
+
+def skip_question_action(state: Any, text_backend: str = "demo", vision_backend: str = "demo"):
+    session = skip_question(_session_from_state(state))
+    return _view(session, text_backend, vision_backend)
+
+
+def ask_another_question_action(state: Any, text_backend: str = "demo", vision_backend: str = "demo"):
+    session = _session_from_state(state)
+    text_client, _vision_client, _asr_client = _clients(text_backend, vision_backend)
+    session = ask_questions(session, text_client, force_another=True)
+    return _view(session, text_backend, vision_backend)
+
+
+def draft_pact_action(state: Any, text_backend: str = "demo", vision_backend: str = "demo"):
+    session = _session_from_state(state)
+    text_client, _vision_client, _asr_client = _clients(text_backend, vision_backend)
+    session = draft_pact(session, text_client)
+    return _view(session, text_backend, vision_backend)
+
+
+def revise_pact_action(
+    state: Any,
+    revision_request: str,
+    text_backend: str = "demo",
+    vision_backend: str = "demo",
+):
+    session = _session_from_state(state)
+    text_client, _vision_client, _asr_client = _clients(text_backend, vision_backend)
+    session = revise_pact(session, revision_request or "", text_client)
+    return _view(session, text_backend, vision_backend)
+
+
+def seal_pact_action(state: Any, text_backend: str = "demo", vision_backend: str = "demo"):
+    session = _session_from_state(state)
+    text_client, _vision_client, _asr_client = _clients(text_backend, vision_backend)
+    if not session.draft_pact and session.intake.merged_text():
+        session = draft_pact(session, text_client)
+    session = seal_pact(session)
+    return _view(session, text_backend, vision_backend)
+
+
+def start_new_action(text_backend: str = "demo", vision_backend: str = "demo"):
+    return _view(create_session(), text_backend, vision_backend)
+
+
 def run_customs_once(
     dream_text: str,
     image_value: Any = None,

dream_customs/models.py

@@ -300,3 +300,177 @@ class MiniCPMVisionClient:
         result = pipe(text=messages)
         text = str(result)
         return [part.strip() for part in text.replace("\n", ",").split(",") if part.strip()][:8]
+
+
+def _hosted_text_from_response(payload: Dict[str, Any]) -> str:
+    for key in ("response", "text", "generated_text", "output"):
+        value = payload.get(key)
+        if isinstance(value, str):
+            return value
+    choices = payload.get("choices")
+    if isinstance(choices, list) and choices:
+        first = choices[0]
+        if isinstance(first, dict):
+            message = first.get("message")
+            if isinstance(message, dict) and isinstance(message.get("content"), str):
+                return message["content"]
+            if isinstance(first.get("text"), str):
+                return first["text"]
+    data = payload.get("data")
+    if isinstance(data, list) and data and isinstance(data[0], dict):
+        return _hosted_text_from_response(data[0])
+    return ""
+
+
+class HostedMiniCPMTextClient:
+    def __init__(
+        self,
+        endpoint: str = "",
+        token: str = "",
+        timeout: float = 60.0,
+        fallback: Optional[FakeTextClient] = None,
+    ):
+        self.endpoint = endpoint.strip()
+        self.token = token.strip()
+        self.timeout = timeout
+        self.fallback = fallback or FakeTextClient()
+
+    def _post_json(self, prompt: str, max_tokens: int = 700) -> Optional[Dict[str, Any]]:
+        if not self.endpoint:
+            return None
+        payload = {
+            "prompt": prompt,
+            "messages": [{"role": "user", "content": prompt}],
+            "temperature": 0.2,
+            "max_tokens": max_tokens,
+        }
+        headers = {"Content-Type": "application/json"}
+        if self.token:
+            headers["Authorization"] = f"Bearer {self.token}"
+        request = urllib.request.Request(
+            self.endpoint,
+            data=json.dumps(payload).encode("utf-8"),
+            headers=headers,
+            method="POST",
+        )
+        try:
+            with urllib.request.urlopen(request, timeout=self.timeout) as response:
+                return json.loads(response.read().decode("utf-8"))
+        except (OSError, TimeoutError, urllib.error.URLError, json.JSONDecodeError):
+            return None
+
+    def _generate_json(self, prompt: str, schema_hint: str, max_tokens: int = 700) -> Optional[Dict[str, Any]]:
+        strict_prompt = (
+            f"{prompt}\n\n"
+            "Return only a single valid JSON object. No markdown, no code fences, no hidden reasoning.\n"
+            f"Required schema: {schema_hint}"
+        )
+        payload = self._post_json(strict_prompt, max_tokens=max_tokens)
+        if not payload:
+            return None
+        return _extract_json_object(_hosted_text_from_response(payload))
+
+    def generate_negotiation(self, prompt: str) -> Dict[str, Any]:
+        parsed = self._generate_json(
+            prompt,
+            '{"visitor_name":"string","questions":["string"],"tone_note":"string"}',
+            max_tokens=360,
+        )
+        if not parsed:
+            return self.fallback.generate_negotiation(prompt)
+        questions = _as_string_list(parsed.get("questions"))
+        if not parsed.get("visitor_name") or not questions:
+            return self.fallback.generate_negotiation(prompt)
+        return {
+            "visitor_name": str(parsed.get("visitor_name", "")).strip(),
+            "questions": questions[:3],
+            "tone_note": str(parsed.get("tone_note", "")).strip(),
+        }
+
+    def generate_pact(self, prompt: str) -> PactCard:
+        parsed = self._generate_json(
+            prompt,
+            (
+                '{"visitor_name":"string","permit_id":"string","contraband":["string"],'
+                '"risk_level":"string","alliance_reading":"string","practical_suggestion":"string",'
+                '"weird_task":"string","bedtime_release":"string","safety_note":"string"}'
+            ),
+            max_tokens=780,
+        )
+        if not parsed:
+            return self.fallback.generate_pact(prompt)
+        try:
+            return PactCard(
+                visitor_name=str(parsed["visitor_name"]).strip(),
+                permit_id=str(parsed["permit_id"]).strip(),
+                contraband=_as_string_list(parsed["contraband"]) or ["unfiled dream fragment"],
+                risk_level=str(parsed["risk_level"]).strip(),
+                alliance_reading=str(parsed["alliance_reading"]).strip(),
+                practical_suggestion=str(parsed["practical_suggestion"]).strip(),
+                weird_task=str(parsed["weird_task"]).strip(),
+                bedtime_release=str(parsed["bedtime_release"]).strip(),
+                safety_note=str(parsed.get("safety_note", "")).strip(),
+            )
+        except (KeyError, TypeError, ValueError):
+            return self.fallback.generate_pact(prompt)
+
+
+class HostedMiniCPMVisionClient:
+    def __init__(
+        self,
+        endpoint: str = "",
+        token: str = "",
+        timeout: float = 60.0,
+        fallback: Optional[FakeVisionClient] = None,
+    ):
+        self.endpoint = endpoint.strip()
+        self.token = token.strip()
+        self.timeout = timeout
+        self.fallback = fallback or FakeVisionClient()
+
+    def _post_image(self, image_path: str) -> Optional[Dict[str, Any]]:
+        if not self.endpoint:
+            return None
+        try:
+            with open(image_path, "rb") as image_file:
+                image_b64 = base64.b64encode(image_file.read()).decode("ascii")
+        except OSError:
+            return None
+        payload = {
+            "prompt": visual_clue_prompt(),
+            "image": image_b64,
+            "images": [image_b64],
+            "temperature": 0.1,
+            "max_tokens": 320,
+        }
+        headers = {"Content-Type": "application/json"}
+        if self.token:
+            headers["Authorization"] = f"Bearer {self.token}"
+        request = urllib.request.Request(
+            self.endpoint,
+            data=json.dumps(payload).encode("utf-8"),
+            headers=headers,
+            method="POST",
+        )
+        try:
+            with urllib.request.urlopen(request, timeout=self.timeout) as response:
+                return json.loads(response.read().decode("utf-8"))
+        except (OSError, TimeoutError, urllib.error.URLError, json.JSONDecodeError):
+            return None
+
+    def extract_clues(self, image_path: Optional[str]) -> List[str]:
+        if not image_path:
+            return []
+        payload = self._post_image(image_path)
+        if not payload:
+            return self.fallback.extract_clues(image_path)
+        parsed = _extract_json_object(_hosted_text_from_response(payload))
+        if parsed:
+            clues: List[str] = []
+            for key in ("objects", "places", "visible_text", "colors", "mood_cues", "uncertain_details"):
+                clues.extend(_as_string_list(parsed.get(key)))
+            if clues:
+                return clues[:8]
+        text = _hosted_text_from_response(payload)
+        clues = [part.strip() for part in re.split(r"[,，\n]", _strip_markdown_and_thinking(text)) if part.strip()]
+        return clues[:8] or self.fallback.extract_clues(image_path)

dream_customs/pipeline.py

@@ -1,9 +1,10 @@
+import re
 from typing import Dict, List, Optional, Tuple
 
-from dream_customs.prompts import negotiation_prompt, pact_prompt
+from dream_customs.prompts import followup_question_prompt, negotiation_prompt, pact_prompt, pact_revision_prompt
 from dream_customs.render import render_pact_card
 from dream_customs.safety import needs_escalation, safety_note
-from dream_customs.schema import DreamIntake, PactCard
+from dream_customs.schema import CustomsSession, DreamIntake, EvidenceItem, PactCard, TimelineEvent
 
 
 def build_intake(
@@ -56,3 +57,333 @@ def generate_pact(intake: DreamIntake, answers: str, text_client) -> Tuple[PactC
     if needs_escalation(merged):
         card.safety_note = safety_note()
     return card, render_pact_card(card)
+
+
+def create_session() -> CustomsSession:
+    return CustomsSession(
+        events=[
+            TimelineEvent(
+                role="system",
+                title="Dream Customs desk opened",
+                body="Start with any fragment: a sentence, a sketch, a voice note, or just the mood left behind.",
+                status="ready",
+            )
+        ]
+    )
+
+
+def _contains_cjk(text: str) -> bool:
+    return bool(re.search(r"[\u4e00-\u9fff]", text))
+
+
+def _append_text(existing: str, new_text: str) -> str:
+    new_text = new_text.strip()
+    if not new_text:
+        return existing
+    if not existing.strip():
+        return new_text
+    if new_text in existing:
+        return existing
+    return f"{existing.strip()}\n{new_text}"
+
+
+def _merge_unique(existing: List[str], incoming: List[str]) -> List[str]:
+    seen = {item.strip().lower() for item in existing}
+    merged = list(existing)
+    for item in incoming:
+        clean = item.strip()
+        if clean and clean.lower() not in seen:
+            merged.append(clean)
+            seen.add(clean.lower())
+    return merged
+
+
+def _event(role: str, title: str, body: str = "", meta: str = "", status: str = "") -> TimelineEvent:
+    return TimelineEvent(role=role, title=title, body=body, meta=meta, status=status)
+
+
+def _record_safety(session: CustomsSession) -> None:
+    merged = "\n".join([session.intake.merged_text(), session.answers_text()])
+    if needs_escalation(merged) and "escalation" not in session.safety_flags:
+        session.safety_flags.append("escalation")
+        session.events.append(
+            _event(
+                "system",
+                "Safety note attached",
+                safety_note(),
+                status="support",
+            )
+        )
+
+
+def add_evidence(
+    session: CustomsSession,
+    dream_text: str = "",
+    image_path: Optional[str] = None,
+    audio_path: Optional[str] = None,
+    mood: str = "",
+    vision_client=None,
+    asr_client=None,
+) -> CustomsSession:
+    next_session = session.model_copy(deep=True)
+    added_items: List[EvidenceItem] = []
+
+    if dream_text and dream_text.strip():
+        clean_text = dream_text.strip()
+        next_session.intake.dream_text = _append_text(next_session.intake.dream_text, clean_text)
+        added_items.append(EvidenceItem(type="text", label="Dream note", status="selected", content=clean_text))
+
+    if mood and mood.strip() and mood.strip() != next_session.intake.mood:
+        next_session.intake.mood = mood.strip()
+        added_items.append(EvidenceItem(type="mood", label=f"Mood: {mood.strip()}", status="selected", content=mood.strip()))
+
+    if image_path:
+        clues: List[str] = []
+        error = ""
+        try:
+            clues = vision_client.extract_clues(image_path) if vision_client else []
+        except Exception:
+            clues = []
+            error = "Image clue extraction failed. Text-only path remains available."
+        if clues:
+            next_session.intake.visual_clues = _merge_unique(next_session.intake.visual_clues, clues)
+            added_items.append(
+                EvidenceItem(
+                    type="image",
+                    label=f"Image clues ({len(clues)})",
+                    status="extracted",
+                    content=", ".join(clues),
+                    source_path=image_path,
+                )
+            )
+        else:
+            added_items.append(
+                EvidenceItem(
+                    type="image",
+                    label="Image evidence",
+                    status="failed",
+                    source_path=image_path,
+                    error=error or "No visual clues extracted. Continue with text or voice.",
+                )
+            )
+
+    if audio_path:
+        transcript = ""
+        error = ""
+        try:
+            transcript = asr_client.transcribe(audio_path) if asr_client else ""
+        except Exception:
+            error = "Voice transcription failed. Text-only path remains available."
+        if transcript.strip():
+            clean_transcript = transcript.strip()
+            next_session.intake.voice_transcript = _append_text(next_session.intake.voice_transcript, clean_transcript)
+            added_items.append(
+                EvidenceItem(
+                    type="audio",
+                    label="Voice transcript",
+                    status="extracted",
+                    content=clean_transcript,
+                    source_path=audio_path,
+                )
+            )
+        else:
+            added_items.append(
+                EvidenceItem(
+                    type="audio",
+                    label="Voice evidence",
+                    status="failed",
+                    source_path=audio_path,
+                    error=error or "No transcript returned. Continue by typing the fragment.",
+                )
+            )
+
+    if not added_items:
+        next_session.phase = "error"
+        next_session.events.append(
+            _event("error", "No material added", "Add text, image, or voice before asking the clerk.", status="empty")
+        )
+        return next_session
+
+    next_session.evidence_items.extend(added_items)
+    next_session.phase = "declaring"
+    summary = "\n".join(f"{item.label}: {item.content or item.error}" for item in added_items)
+    next_session.events.append(_event("user", "Material added", summary, status="filed"))
+    _record_safety(next_session)
+    return next_session
+
+
+def ask_questions(session: CustomsSession, text_client, force_another: bool = False) -> CustomsSession:
+    next_session = session.model_copy(deep=True)
+    if not next_session.intake.merged_text():
+        next_session.phase = "error"
+        next_session.events.append(
+            _event("error", "Customs has no declaration yet", "Add one dream fragment before asking a question.", status="empty")
+        )
+        return next_session
+
+    prompt = (
+        followup_question_prompt(next_session.intake, next_session.question_history, next_session.answer_history)
+        if force_another
+        else negotiation_prompt(next_session.intake)
+    )
+    negotiation = text_client.generate_negotiation(prompt)
+    questions = [question for question in negotiation.get("questions", []) if question]
+    fresh_questions = [question for question in questions if question not in next_session.question_history]
+    if force_another and not fresh_questions:
+        if _contains_cjk(next_session.intake.merged_text()):
+            fresh_questions = ["如果海关只批准一个更小的动作，你希望今天先放行哪一件事？"]
+        else:
+            fresh_questions = ["If customs approves one smaller action today, which one should it release first?"]
+    if not fresh_questions:
+        fresh_questions = questions[:3]
+
+    next_session.question_history.extend(fresh_questions[:3])
+    next_session.phase = "negotiating"
+    next_session.events.append(
+        _event(
+            "customs",
+            "Customs question filed" if len(fresh_questions) == 1 else "Customs questions filed",
+            "\n".join(fresh_questions[:3]),
+            meta=str(negotiation.get("visitor_name", "")),
+            status="question",
+        )
+    )
+    return next_session
+
+
+def answer_question(session: CustomsSession, answer: str) -> CustomsSession:
+    next_session = session.model_copy(deep=True)
+    if not answer or not answer.strip():
+        next_session.phase = "error"
+        next_session.events.append(
+            _event("error", "No answer filed", "Write a reply, or choose to skip the question.", status="empty")
+        )
+        return next_session
+    next_session.answer_history.append(answer.strip())
+    next_session.phase = "negotiating"
+    next_session.events.append(_event("user", "Answer filed", answer.strip(), status="answered"))
+    _record_safety(next_session)
+    return next_session
+
+
+def skip_question(session: CustomsSession) -> CustomsSession:
+    next_session = session.model_copy(deep=True)
+    if _contains_cjk(next_session.intake.merged_text()):
+        skip_text = "用户选择跳过这一轮问题。"
+    else:
+        skip_text = "The user chose to skip this question."
+    next_session.answer_history.append(skip_text)
+    next_session.phase = "negotiating"
+    next_session.events.append(_event("user", "Question skipped", skip_text, status="skipped"))
+    return next_session
+
+
+def draft_pact(session: CustomsSession, text_client) -> CustomsSession:
+    next_session = session.model_copy(deep=True)
+    if not next_session.intake.merged_text():
+        next_session.phase = "error"
+        next_session.events.append(
+            _event("error", "Pact needs dream material", "Add at least one fragment before drafting a pact.", status="empty")
+        )
+        return next_session
+
+    answers = next_session.answers_text() or "The user has not answered yet; infer a gentle pact from the declaration."
+    card, _html = generate_pact(next_session.intake, answers, text_client)
+    next_session.draft_pact = card
+    next_session.phase = "drafting"
+    next_session.events.append(
+        _event(
+            "pact",
+            "Draft pact prepared",
+            f"{card.visitor_name}\n{card.practical_suggestion}\n{card.weird_task}",
+            meta=card.permit_id,
+            status="draft",
+        )
+    )
+    _record_safety(next_session)
+    return next_session
+
+
+def _apply_revision_hint(card: PactCard, revision_request: str) -> PactCard:
+    request = revision_request.lower()
+    revised = card.model_copy(deep=True)
+    cjk = _contains_cjk(" ".join([revision_request, card.visitor_name, card.alliance_reading]))
+    if any(term in request for term in ["strange", "weird", "怪", "更奇怪", "更怪"]):
+        revised.weird_task = (
+            "把今天最小的任务写在纸上，给它盖一个看不见的放行章。"
+            if cjk
+            else "Write the smallest task on paper and stamp it with an invisible release mark."
+        )
+    elif any(term in request for term in ["gentle", "softer", "温和", "轻一点"]):
+        revised.risk_level = (
+            "浅橙色：先安置它，不急着解释它"
+            if cjk
+            else "soft orange: place it gently before interpreting it"
+        )
+        revised.practical_suggestion = (
+            "今天先选一个不需要立刻完成的小开头，做 5 分钟就停。"
+            if cjk
+            else "Choose one start that does not need finishing today. Stop after five minutes."
+        )
+    elif revision_request.strip():
+        revised.practical_suggestion = (
+            f"{revised.practical_suggestion}（按你的修订请求：{revision_request.strip()}）"
+            if cjk
+            else f"{revised.practical_suggestion} Revision note: {revision_request.strip()}"
+        )
+    return revised
+
+
+def revise_pact(session: CustomsSession, revision_request: str, text_client) -> CustomsSession:
+    next_session = session.model_copy(deep=True)
+    if not next_session.draft_pact:
+        next_session = draft_pact(next_session, text_client)
+        if not next_session.draft_pact:
+            return next_session
+
+    answers = next_session.answers_text()
+    prompt = pact_revision_prompt(
+        next_session.intake,
+        answers,
+        next_session.draft_pact.to_plain_text(),
+        revision_request,
+    )
+    card = text_client.generate_pact(prompt)
+    merged = next_session.intake.merged_text() + "\n" + answers
+    if needs_escalation(merged):
+        card.safety_note = safety_note()
+    card = _apply_revision_hint(card, revision_request or "")
+    next_session.draft_pact = card
+    next_session.phase = "drafting"
+    next_session.events.append(
+        _event(
+            "pact",
+            "Draft pact revised",
+            revision_request.strip() or "The draft was tightened for today's smallest action.",
+            meta=card.permit_id,
+            status="revised",
+        )
+    )
+    return next_session
+
+
+def seal_pact(session: CustomsSession) -> CustomsSession:
+    next_session = session.model_copy(deep=True)
+    if not next_session.draft_pact:
+        next_session.phase = "error"
+        next_session.events.append(
+            _event("error", "Nothing to seal yet", "Draft a pact before sealing today's agreement.", status="empty")
+        )
+        return next_session
+    next_session.sealed_pact = next_session.draft_pact
+    next_session.phase = "sealed"
+    next_session.events.append(
+        _event(
+            "pact",
+            "Today's pact sealed",
+            next_session.sealed_pact.bedtime_release,
+            meta=next_session.sealed_pact.permit_id,
+            status="sealed",
+        )
+    )
+    return next_session

dream_customs/prompts.py

@@ -26,6 +26,27 @@ Return JSON with:
 """.strip()
 
 
+def followup_question_prompt(intake: DreamIntake, question_history: list[str], answer_history: list[str]) -> str:
+    return f"""
+You are the Dream Customs diplomat. Ask one more gentle customs question.
+Do not diagnose. Do not repeat previous questions. The question should help the user decide today's pact.
+
+Dream intake:
+{intake.merged_text()}
+
+Previous questions:
+{chr(10).join(question_history) if question_history else "None yet."}
+
+User answers:
+{chr(10).join(answer_history) if answer_history else "No answers yet."}
+
+Return JSON with:
+- visitor_name: short vivid name
+- questions: one gentle, specific question
+- tone_note: one sentence explaining why this question matters today
+""".strip()
+
+
 def pact_prompt(intake: DreamIntake, answers: str) -> str:
     return f"""
 You are the Dream Customs diplomat. Generate a final Today's Pact card.
@@ -43,3 +64,27 @@ Return strict JSON with:
 visitor_name, permit_id, contraband, risk_level, alliance_reading,
 practical_suggestion, weird_task, bedtime_release, safety_note.
 """.strip()
+
+
+def pact_revision_prompt(intake: DreamIntake, answers: str, current_pact: str, revision_request: str) -> str:
+    return f"""
+You are the Dream Customs diplomat. Revise the draft Today's Pact card.
+Keep the same dream visitor unless the user's new material clearly changes it.
+Do not diagnose. Do not make the dream sound certain or frightening.
+
+Dream intake:
+{intake.merged_text()}
+
+User answers:
+{answers or "No answers yet."}
+
+Current draft:
+{current_pact}
+
+Revision request:
+{revision_request or "Make the pact more specific and useful for today."}
+
+Return strict JSON with:
+visitor_name, permit_id, contraband, risk_level, alliance_reading,
+practical_suggestion, weird_task, bedtime_release, safety_note.
+""".strip()

dream_customs/render.py

@@ -1,20 +1,189 @@
 from html import escape
 
-from dream_customs.schema import PactCard
+from dream_customs.schema import CustomsSession, EvidenceItem, PactCard, TimelineEvent
+
+
+def _nl2br(text: str) -> str:
+    return "<br>".join(escape(text).splitlines())
+
+
+def _phase_label(phase: str) -> str:
+    labels = {
+        "empty": "Empty desk",
+        "declaring": "Declare",
+        "negotiating": "Negotiate",
+        "drafting": "Draft",
+        "sealed": "Sealed",
+        "error": "Needs attention",
+    }
+    return labels.get(phase, phase.title())
+
+
+def _evidence_chip(item: EvidenceItem) -> str:
+    return (
+        f"<span class='dc-evidence-chip is-{escape(item.status)}'>"
+        f"<span class='dc-chip-dot'></span>{escape(item.label)}</span>"
+    )
+
+
+def render_status_bar(session: CustomsSession, text_backend: str = "demo", vision_backend: str = "demo") -> str:
+    safety = "Support note ready" if session.safety_flags else "Playful reflection, not medical advice"
+    return f"""
+<header class="dc-statusbar">
+  <div class="dc-brand-lockup">
+    <span class="dc-brand-mark">DC</span>
+    <div>
+      <h1>Dream Customs / 梦境海关</h1>
+      <p>Night desk for filing dream fragments into today's pact.</p>
+    </div>
+  </div>
+  <nav class="dc-phase-rail" aria-label="Dream Customs phase">
+    <span class="{'is-active' if session.phase in ['empty', 'declaring'] else ''}">Declare</span>
+    <span class="{'is-active' if session.phase == 'negotiating' else ''}">Inspect</span>
+    <span class="{'is-active' if session.phase == 'drafting' else ''}">Draft</span>
+    <span class="{'is-active' if session.phase == 'sealed' else ''}">Seal</span>
+  </nav>
+  <div class="dc-system-status">
+    <span>{escape(_phase_label(session.phase))}</span>
+    <span>Text: {escape(text_backend or "demo")}</span>
+    <span>Vision: {escape(vision_backend or "demo")}</span>
+    <span>{escape(safety)}</span>
+  </div>
+</header>
+""".strip()
+
+
+def _render_event(event: TimelineEvent) -> str:
+    body = f"<p>{_nl2br(event.body)}</p>" if event.body else ""
+    meta = f"<span>{escape(event.meta)}</span>" if event.meta else ""
+    status = f"<span>{escape(event.status)}</span>" if event.status else ""
+    return f"""
+<article class="dc-timeline-event is-{escape(event.role)}">
+  <div class="dc-event-meta">{meta}{status}</div>
+  <h3>{escape(event.title)}</h3>
+  {body}
+</article>
+""".strip()
+
+
+def render_timeline(session: CustomsSession) -> str:
+    if not session.events:
+        events = [
+            TimelineEvent(
+                role="system",
+                title="The night desk is open",
+                body="Start with one fragment. The clerk can work from text, image, voice, or only the mood.",
+                status="ready",
+            )
+        ]
+    else:
+        events = session.events
+
+    evidence = "".join(_evidence_chip(item) for item in session.evidence_items[-8:])
+    evidence_tray = (
+        f"<div class='dc-evidence-tray'>{evidence}</div>"
+        if evidence
+        else (
+            "<div class='dc-evidence-tray is-empty'>"
+            "<span class='dc-evidence-chip is-queued'><span class='dc-chip-dot'></span>Text</span>"
+            "<span class='dc-evidence-chip is-queued'><span class='dc-chip-dot'></span>Image</span>"
+            "<span class='dc-evidence-chip is-queued'><span class='dc-chip-dot'></span>Voice</span>"
+            "<span class='dc-evidence-chip is-queued'><span class='dc-chip-dot'></span>Mood</span>"
+            "</div>"
+        )
+    )
+    return f"""
+<section class="dc-timeline-shell" aria-label="Dream Customs timeline">
+  <div class="dc-timeline-head">
+    <div>
+      <h2>Customs timeline</h2>
+      <p>Evidence, questions, answers, and pact drafts stay in one file.</p>
+    </div>
+    <span>{session.evidence_count()} filed</span>
+  </div>
+  {evidence_tray}
+  <div class="dc-timeline-list">
+    {''.join(_render_event(event) for event in events)}
+  </div>
+</section>
+""".strip()
+
+
+def render_pact_inspector(session: CustomsSession) -> str:
+    card = session.sealed_pact or session.draft_pact
+    state = "sealed" if session.sealed_pact else "draft" if session.draft_pact else "waiting"
+    if not card:
+        return f"""
+<aside class="dc-inspector is-waiting" aria-label="Pact inspector">
+  <div class="dc-inspector-kicker">Pact inspector</div>
+  <h2>No pact drafted yet</h2>
+  <p>Add material, ask a customs question, then draft a pact when the file feels useful enough.</p>
+  <dl>
+    <div><dt>Evidence</dt><dd>{session.evidence_count()} filed</dd></div>
+    <div><dt>Phase</dt><dd>{escape(_phase_label(session.phase))}</dd></div>
+    <div><dt>Questions</dt><dd>{len(session.question_history)} asked</dd></div>
+  </dl>
+</aside>
+""".strip()
+
+    contraband = "".join(f"<li>{escape(item)}</li>" for item in card.contraband)
+    safety = (
+        f"<div class='dc-support-note'><strong>Support note</strong><p>{escape(card.safety_note)}</p></div>"
+        if card.safety_note
+        else ""
+    )
+    return f"""
+<aside class="dc-inspector is-{state}" aria-label="Pact inspector">
+  <div class="dc-inspector-kicker">Pact inspector</div>
+  <div class="dc-permit-row">
+    <span>{escape(card.permit_id)}</span>
+    <span>{escape(state.title())}</span>
+  </div>
+  <h2>{escape(card.visitor_name)}</h2>
+  <dl>
+    <div><dt>Risk level</dt><dd>{escape(card.risk_level)}</dd></div>
+    <div><dt>Evidence</dt><dd>{session.evidence_count()} filed</dd></div>
+    <div><dt>Questions</dt><dd>{len(session.question_history)} asked</dd></div>
+  </dl>
+  <section>
+    <h3>Alliance reading</h3>
+    <p>{escape(card.alliance_reading)}</p>
+  </section>
+  <section>
+    <h3>Today</h3>
+    <p>{escape(card.practical_suggestion)}</p>
+  </section>
+  <section>
+    <h3>5-minute task</h3>
+    <p>{escape(card.weird_task)}</p>
+  </section>
+  <section>
+    <h3>Contraband</h3>
+    <ul>{contraband}</ul>
+  </section>
+  {safety}
+</aside>
+""".strip()
 
 
 def render_pact_card(card: PactCard) -> str:
     contraband = "".join(f"<li>{escape(item)}</li>" for item in card.contraband)
-    safety = f"<p class='dc-safety'>{escape(card.safety_note)}</p>" if card.safety_note else ""
+    safety = (
+        f"<div class='dc-sealed-safety'><strong>Safety note</strong><p>{escape(card.safety_note)}</p></div>"
+        if card.safety_note
+        else ""
+    )
     return f"""
 <style>
   .pact-card {{
-    color: #102c3a;
-    background: linear-gradient(135deg, #fff8ea 0%, #e8f4ef 100%);
-    border: 3px solid #102c3a;
-    border-radius: 10px;
-    box-shadow: 10px 10px 0 rgba(16, 44, 58, 0.14);
-    font-family: Georgia, 'Songti SC', serif;
+    color: oklch(0.965 0.010 235);
+    background:
+      radial-gradient(circle at 78% 0%, oklch(0.705 0.160 28 / 0.18), transparent 28%),
+      linear-gradient(135deg, oklch(0.205 0.035 238), oklch(0.145 0.030 238));
+    border: 2px solid oklch(0.705 0.160 28);
+    border-radius: 14px;
+    box-shadow: 0 8px 0 oklch(0.080 0.010 250 / 0.55);
+    font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
     line-height: 1.55;
     margin: 8px 0;
     max-width: 860px;
@@ -22,41 +191,59 @@ def render_pact_card(card: PactCard) -> str:
   }}
   .pact-header {{
     align-items: center;
-    border-bottom: 2px dashed rgba(16, 44, 58, 0.25);
+    border-bottom: 1px solid oklch(0.430 0.055 235);
     display: flex;
-    font-weight: 800;
+    font-weight: 720;
     justify-content: space-between;
     margin-bottom: 16px;
     padding-bottom: 10px;
   }}
   .pact-card h2 {{
-    font-size: 32px;
+    color: oklch(0.965 0.010 235) !important;
+    font-size: 2rem;
     line-height: 1.1;
     margin: 0 0 4px;
+    text-wrap: balance;
   }}
   .pact-card h3 {{
-    color: #e85d4f;
-    font-size: 24px;
+    color: oklch(0.820 0.110 185) !important;
+    font-size: 1.35rem;
     margin: 0 0 18px;
   }}
+  .pact-card p,
+  .pact-card li,
+  .pact-card div,
+  .pact-card span {{
+    color: oklch(0.900 0.018 235) !important;
+  }}
+  .pact-header span {{
+    color: oklch(0.965 0.010 235) !important;
+  }}
   .dc-label {{
-    color: #36545c;
-    font-weight: 800;
+    color: oklch(0.820 0.110 185) !important;
+    font-weight: 720;
   }}
   .dc-seal {{
-    border: 3px solid #e85d4f;
+    border: 2px solid oklch(0.705 0.160 28);
     border-radius: 999px;
-    color: #e85d4f;
+    color: oklch(0.705 0.160 28) !important;
     display: inline-block;
-    font-weight: 900;
+    font-weight: 820;
     margin-top: 12px;
     padding: 8px 14px;
     transform: rotate(-4deg);
   }}
-  .dc-safety {{
-    background: rgba(232, 93, 79, 0.11);
-    border-left: 4px solid #e85d4f;
-    padding: 10px 12px;
+  .dc-sealed-safety {{
+    background: oklch(0.705 0.160 28 / 0.13);
+    border: 1px solid oklch(0.705 0.160 28 / 0.72);
+    border-radius: 10px;
+    padding: 12px 14px;
+  }}
+  .dc-sealed-safety p {{
+    margin: 6px 0 0;
+  }}
+  .pact-card ul {{
+    margin-top: 8px;
   }}
 </style>
 <section class="pact-card">

dream_customs/schema.py

@@ -1,3 +1,5 @@
+from typing import Literal, Optional
+
 from pydantic import BaseModel, Field
 
 
@@ -49,3 +51,44 @@ class PactCard(BaseModel):
         if self.safety_note:
             lines.append(f"Safety note: {self.safety_note}")
         return "\n".join(lines)
+
+
+SessionPhase = Literal["empty", "declaring", "negotiating", "drafting", "sealed", "error"]
+EvidenceType = Literal["text", "image", "audio", "mood"]
+EvidenceStatus = Literal["queued", "extracting", "extracted", "failed", "selected"]
+TimelineRole = Literal["system", "user", "customs", "pact", "error"]
+
+
+class EvidenceItem(BaseModel):
+    type: EvidenceType
+    label: str
+    status: EvidenceStatus = "queued"
+    content: str = ""
+    source_path: str = ""
+    error: str = ""
+
+
+class TimelineEvent(BaseModel):
+    role: TimelineRole
+    title: str
+    body: str = ""
+    meta: str = ""
+    status: str = ""
+
+
+class CustomsSession(BaseModel):
+    phase: SessionPhase = "empty"
+    intake: DreamIntake = Field(default_factory=DreamIntake)
+    evidence_items: list[EvidenceItem] = Field(default_factory=list)
+    question_history: list[str] = Field(default_factory=list)
+    answer_history: list[str] = Field(default_factory=list)
+    draft_pact: Optional[PactCard] = None
+    sealed_pact: Optional[PactCard] = None
+    safety_flags: list[str] = Field(default_factory=list)
+    events: list[TimelineEvent] = Field(default_factory=list)
+
+    def answers_text(self) -> str:
+        return "\n".join(answer.strip() for answer in self.answer_history if answer.strip())
+
+    def evidence_count(self) -> int:
+        return len([item for item in self.evidence_items if item.status != "failed"])

tests/test_app_logic.py

@@ -1,6 +1,14 @@
 import json
 
-from dream_customs.app_logic import run_customs_once
+from dream_customs.app_logic import (
+    add_material_action,
+    ask_another_question_action,
+    draft_pact_action,
+    initial_workbench_state,
+    run_customs_once,
+    seal_pact_action,
+    start_declaration_action,
+)
 
 
 def test_run_customs_once_generates_demo_outputs():
@@ -23,3 +31,46 @@ def test_run_customs_once_requires_one_modality():
     assert "Please add text" in pact_text
     assert html == ""
     assert json.loads(debug_json) == {"status": "empty"}
+
+
+def test_workbench_actions_progress_to_sealed_pact():
+    state, _status, timeline, inspector, sealed_html, debug_json, _notice = initial_workbench_state()
+    assert "Customs timeline" in timeline
+    assert "No pact drafted yet" in inspector
+    assert sealed_html == ""
+    assert json.loads(debug_json)["status"] == "empty"
+
+    state, _status, _timeline, _inspector, _sealed_html, debug_json, _notice = start_declaration_action(
+        state,
+        dream_text="I found a blue stamp in my pillow.",
+        mood="curious",
+    )
+    debug = json.loads(debug_json)
+    assert debug["status"] == "negotiating"
+    assert debug["session"]["question_history"]
+
+    state, _status, _timeline, inspector, _sealed_html, debug_json, _notice = draft_pact_action(state)
+    assert json.loads(debug_json)["status"] == "drafting"
+    assert "Pact inspector" in inspector
+
+    state, _status, _timeline, _inspector, sealed_html, debug_json, _notice = seal_pact_action(state)
+    assert json.loads(debug_json)["status"] == "sealed"
+    assert "Today's Pact" in sealed_html
+
+
+def test_workbench_model_route_without_endpoint_falls_back_to_demo():
+    state, *_rest = initial_workbench_state(text_backend="model", vision_backend="model")
+    state, _status, _timeline, _inspector, _sealed_html, debug_json, _notice = add_material_action(
+        state,
+        dream_text="Text-only path should stay alive.",
+        text_backend="model",
+        vision_backend="model",
+    )
+    state, _status, _timeline, _inspector, _sealed_html, debug_json, _notice = ask_another_question_action(
+        state,
+        text_backend="model",
+        vision_backend="model",
+    )
+    debug = json.loads(debug_json)
+    assert debug["text_backend"] == "model"
+    assert debug["session"]["question_history"]

tests/test_ollama_models.py

@@ -1,4 +1,4 @@
-from dream_customs.models import OllamaTextClient, OllamaVisionClient, _extract_json_object
+from dream_customs.models import HostedMiniCPMTextClient, OllamaTextClient, OllamaVisionClient, _extract_json_object
 
 
 class StubOllamaTextClient(OllamaTextClient):
@@ -19,6 +19,15 @@ class StubOllamaVisionClient(OllamaVisionClient):
         return {"response": self.response_text}
 
 
+class StubHostedTextClient(HostedMiniCPMTextClient):
+    def __init__(self, payload):
+        super().__init__(endpoint="https://example.invalid")
+        self.payload = payload
+
+    def _post_json(self, prompt: str, max_tokens: int = 700):
+        return self.payload
+
+
 def test_extract_json_object_handles_code_fence():
     parsed = _extract_json_object('```json\n{"visitor_name": "Gate 14"}\n```')
     assert parsed == {"visitor_name": "Gate 14"}
@@ -69,3 +78,23 @@ def test_ollama_vision_client_parses_visual_clues(tmp_path):
     )
     clues = client.extract_clues(str(image_path))
     assert clues == ["passport stamp", "customs desk", "blue", "foggy"]
+
+
+def test_hosted_text_client_parses_common_response_shape():
+    client = StubHostedTextClient(
+        {
+            "choices": [
+                {
+                    "message": {
+                        "content": (
+                            '{"visitor_name":"Gate 14","questions":["What does it ask?"],'
+                            '"tone_note":"Keep it small."}'
+                        )
+                    }
+                }
+            ]
+        }
+    )
+    negotiation = client.generate_negotiation("dream")
+    assert negotiation["visitor_name"] == "Gate 14"
+    assert negotiation["questions"] == ["What does it ask?"]

tests/test_pipeline.py

@@ -1,5 +1,18 @@
 from dream_customs.models import FakeASRClient, FakeTextClient, FakeVisionClient
-from dream_customs.pipeline import build_intake, generate_negotiation, generate_pact, intake_from_modalities
+from dream_customs.pipeline import (
+    add_evidence,
+    answer_question,
+    ask_questions,
+    build_intake,
+    create_session,
+    draft_pact,
+    generate_negotiation,
+    generate_pact,
+    intake_from_modalities,
+    revise_pact,
+    seal_pact,
+    skip_question,
+)
 
 
 def test_build_intake_merges_modalities():
@@ -46,3 +59,81 @@ def test_generate_pact_adds_safety_note_for_distress():
     intake = build_intake(dream_text="I might hurt myself if I cannot sleep.")
     card, _html = generate_pact(intake, "", FakeTextClient())
     assert card.safety_note
+
+
+def test_add_evidence_updates_session_with_text_image_audio_and_mood():
+    session = add_evidence(
+        create_session(),
+        dream_text="我梦见电梯按钮融化。",
+        image_path="demo.png",
+        audio_path="demo.wav",
+        mood="anxious",
+        vision_client=FakeVisionClient(),
+        asr_client=FakeASRClient(),
+    )
+    assert session.phase == "declaring"
+    assert "电梯" in session.intake.dream_text
+    assert "blue hallway" in session.intake.visual_clues
+    assert "The buttons melted" in session.intake.voice_transcript
+    assert session.intake.mood == "anxious"
+    assert {item.type for item in session.evidence_items} == {"text", "image", "audio", "mood"}
+
+
+def test_ask_answer_skip_draft_revise_and_seal_actions():
+    session = add_evidence(
+        create_session(),
+        dream_text="I missed an elevator.",
+        mood="restless",
+        vision_client=FakeVisionClient(),
+        asr_client=FakeASRClient(),
+    )
+    session = ask_questions(session, FakeTextClient())
+    assert session.phase == "negotiating"
+    assert len(session.question_history) == 3
+
+    session = answer_question(session, "I want one small start.")
+    assert session.answer_history[-1] == "I want one small start."
+
+    session = ask_questions(session, FakeTextClient(), force_another=True)
+    assert len(session.question_history) == 4
+
+    session = skip_question(session)
+    assert "skip" in session.answer_history[-1].lower()
+
+    session = draft_pact(session, FakeTextClient())
+    assert session.phase == "drafting"
+    assert session.draft_pact is not None
+
+    original_task = session.draft_pact.weird_task
+    session = revise_pact(session, "make it stranger", FakeTextClient())
+    assert session.draft_pact is not None
+    assert session.draft_pact.weird_task != original_task
+
+    session = seal_pact(session)
+    assert session.phase == "sealed"
+    assert session.sealed_pact == session.draft_pact
+
+
+def test_image_audio_failures_keep_text_path_alive():
+    class FailingVision:
+        def extract_clues(self, image_path):
+            raise RuntimeError("offline")
+
+    class EmptyASR:
+        def transcribe(self, audio_path):
+            return ""
+
+    session = add_evidence(
+        create_session(),
+        dream_text="Text still works.",
+        image_path="missing.png",
+        audio_path="missing.wav",
+        mood="foggy",
+        vision_client=FailingVision(),
+        asr_client=EmptyASR(),
+    )
+    session = ask_questions(session, FakeTextClient())
+    session = draft_pact(session, FakeTextClient())
+    assert session.draft_pact is not None
+    assert any(item.status == "failed" for item in session.evidence_items)
+    assert "Text still works." in session.intake.dream_text

tests/test_render.py

@@ -1,4 +1,5 @@
-from dream_customs.render import render_pact_card
+from dream_customs.pipeline import add_evidence, create_session
+from dream_customs.render import render_pact_card, render_pact_inspector, render_timeline
 from dream_customs.schema import PactCard
 
 
@@ -35,3 +36,32 @@ def test_render_pact_card_escapes_user_like_content():
     )
     assert "<bad>" not in html
     assert "<script" not in html.lower()
+
+
+def test_render_pact_card_uses_night_desk_treatment():
+    html = render_pact_card(
+        PactCard(
+            visitor_name="Late Elevator",
+            permit_id="DC-1",
+            contraband=["unfiled anxiety"],
+            risk_level="orange",
+            alliance_reading="The dream asks for a smaller start.",
+            practical_suggestion="Open one task ten minutes early.",
+            weird_task="Write the elevator an apology note.",
+            bedtime_release="Today the elevator has docked.",
+            safety_note="Reach out for support if you feel unsafe.",
+        )
+    )
+    assert "oklch" in html
+    assert "#fff8ea" not in html
+    assert "border-left" not in html
+
+
+def test_render_timeline_and_inspector_show_session_state():
+    session = add_evidence(create_session(), dream_text="A blue gate opened.", mood="foggy")
+    timeline = render_timeline(session)
+    inspector = render_pact_inspector(session)
+    assert "Customs timeline" in timeline
+    assert "Dream note" in timeline
+    assert "No pact drafted yet" in inspector
+    assert "2 filed" in inspector

tests/test_schema.py

@@ -1,4 +1,4 @@
-from dream_customs.schema import DreamIntake, PactCard
+from dream_customs.schema import CustomsSession, DreamIntake, EvidenceItem, PactCard
 
 
 def test_dream_intake_defaults_lists():
@@ -37,3 +37,18 @@ def test_pact_card_requires_core_fields():
     )
     assert card.safety_note == ""
     assert "Late Elevator" in card.to_plain_text()
+
+
+def test_customs_session_defaults_to_empty_workbench():
+    session = CustomsSession()
+    assert session.phase == "empty"
+    assert session.evidence_items == []
+    assert session.question_history == []
+    assert session.evidence_count() == 0
+
+
+def test_evidence_item_tracks_failure_state():
+    item = EvidenceItem(type="image", label="Image evidence", status="failed", error="No clues extracted")
+    assert item.type == "image"
+    assert item.status == "failed"
+    assert "No clues" in item.error