From 615d4498b1949444f82794191c6854ae4f603f84 Mon Sep 17 00:00:00 2001
From: Tim Disney <tim@disnetdev.com>
Date: Fri, 31 Jul 2026 14:40:30 -0700
Subject: [PATCH] clean up desgin and lock other controls for non-members

---
 packages/ui/src/app.css                       | 18 ++++++--
 .../ui/src/lib/components/AskReview.svelte    |  8 +++-
 .../ui/src/lib/components/Community.svelte    |  6 ++-
 .../ui/src/lib/components/Composer.svelte     | 26 ++++++++---
 packages/ui/src/lib/components/NewGoal.svelte |  8 +++-
 .../ui/src/lib/components/NewRequest.svelte   |  8 +++-
 .../ui/src/lib/components/PlusMenu.svelte     | 19 +++++++-
 .../ui/src/lib/components/RequestBar.svelte   | 14 ++++--
 packages/ui/src/lib/components/Thread.svelte  |  7 ++-
 .../ui/src/lib/components/UnitDetail.svelte   | 24 +++++++---
 packages/ui/test/member-controls.test.mjs     | 46 +++++++++++++++++++
 packages/ui/test/thread-grid.test.mjs         |  8 ++++
 12 files changed, 162 insertions(+), 30 deletions(-)
 create mode 100644 packages/ui/test/member-controls.test.mjs

diff --git a/packages/ui/src/app.css b/packages/ui/src/app.css
index 7c6b60a..b886934 100644
--- a/packages/ui/src/app.css
+++ b/packages/ui/src/app.css
@@ -656,11 +656,11 @@ a.btn { text-decoration: none; color: var(--ink); display: inline-block; }
    behind its own rail and reads a shade quieter, so the difference between "somebody here said
    this" and "a stranger said this" is visible before any badge is read. */
 .community { margin-left: 2px; padding-left: 14px; border-left: 2px solid var(--line-soft); }
-/* One column, not the thread's disc-plus-body two: a guest has no disc, because a coloured identity
-   token beside a stranger's words is the one piece of furniture that would make them look like
-   somebody the space knows. */
-.community .guest { grid-template-columns: 1fr; color: var(--ink-2); }
-.community .guest .msg-acts { grid-column: 1; flex-wrap: wrap; align-items: baseline; }
+/* Profile resolution gives a guest the same disc-and-prose geometry as a thread message. Keeping
+   the body in column two makes it begin under the author's name, never under their avatar. */
+.community .guest { color: var(--ink-2); }
+.community .guest .mb { grid-column: 2; }
+.community .guest .msg-acts { flex-wrap: wrap; align-items: baseline; }
 /* Blessed: this one is in every turn bundle on the goal, which is worth the accent rail. */
 .community .guest.blessed { border-left: 2px solid var(--accent); margin-left: -16px; padding-left: 14px; }
 .community .guest .hint { font-size: 12.5px; color: var(--warn); }
@@ -747,6 +747,12 @@ select.sl { resize: none; cursor: pointer; padding-right: 8px; }
   transition: border-color 130ms ease, box-shadow 130ms ease;
 }
 .compose:focus-within { border-color: var(--accent); box-shadow: 0 0 0 3px var(--accent-wash); }
+/* A guest signs outside the space, so the composer says which public identity will author the
+   record. Keep that identity on the field's own inset, then tighten the editor below it: its normal
+   top padding is for a composer where the editor is the first child. */
+.compose-who { padding: 8px 10px 0; font-size: 12.5px; color: var(--ink); }
+.compose-who + .md-flush .cm-content { padding-top: 2px; }
+.compose-who + .md-flush textarea.md-plain { padding-top: 2px; }
 /* The field inside carries none of that: one ring around the pair, not two nested ones. */
 .compose textarea.ta {
   border: 0; border-radius: 10px 10px 0 0; background: transparent;
@@ -934,6 +940,8 @@ select.sl { resize: none; cursor: pointer; padding-right: 8px; }
   transition: transform 200ms var(--ease-out), background 160ms ease, box-shadow 200ms var(--ease-out);
 }
 .plus:hover { background: var(--accent-deep); transform: translateY(-1.5px); box-shadow: 0 3px 6px oklch(0.25 0.03 262 / 0.22), 0 16px 30px -8px oklch(0.35 0.12 264 / 0.5); }
+.plus:disabled { background: var(--sunk); color: var(--ink-2); cursor: default; box-shadow: none; }
+.plus:disabled:hover { background: var(--sunk); transform: none; box-shadow: none; }
 .plus[hidden] { display: none; }
 .plus svg { transition: transform 300ms var(--ease-out); }
 .plus[aria-expanded="true"] svg { transform: rotate(135deg); }
diff --git a/packages/ui/src/lib/components/AskReview.svelte b/packages/ui/src/lib/components/AskReview.svelte
index 4752a90..7e28a80 100644
--- a/packages/ui/src/lib/components/AskReview.svelte
+++ b/packages/ui/src/lib/components/AskReview.svelte
@@ -1,5 +1,6 @@
 <script lang="ts">
   import type { UnitVersion, UnitView } from '@radial/core'
+  import { participates } from '$lib/admin.js'
   import { account } from '$lib/auth.svelte.js'
   import { toast, ui } from '$lib/ui.svelte.js'
   import type { Space } from '$lib/space.js'
@@ -23,7 +24,10 @@
   }
   const { unit, version, space, scope, target, done }: Props = $props()
 
-  const writable = $derived(!space.fixture && account.status === 'signed-in')
+  const member = $derived(
+    account.status === 'signed-in' && participates(space.directory, account.did),
+  )
+  const writable = $derived(!space.fixture && member)
   const reviewers = $derived(possibleReviewers(space.directory, account.did))
 
   let assignee = $state('')
@@ -63,6 +67,8 @@
   {#if !writable}
     {#if space.fixture}
       <p class="hint">The fixture has no repo behind it. Open a live space to ask.</p>
+    {:else if account.status === 'signed-in'}
+      <p class="hint">Only active members can ask for reviews in this space.</p>
     {:else}
       <p class="hint">
         <button class="linkish" type="button" onclick={() => (ui.accountOpen = true)}>Sign in</button>
diff --git a/packages/ui/src/lib/components/Community.svelte b/packages/ui/src/lib/components/Community.svelte
index 244b271..2258849 100644
--- a/packages/ui/src/lib/components/Community.svelte
+++ b/packages/ui/src/lib/components/Community.svelte
@@ -22,8 +22,8 @@
   import { toast } from '$lib/ui.svelte.js'
   import { write } from '$lib/write.js'
   import Badge from './Badge.svelte'
+  import Disc from './Disc.svelte'
   import Runs from './Runs.svelte'
-  import Who from './Who.svelte'
 
   // Comments from people who are not in this space.
   //
@@ -212,9 +212,11 @@
 {:else}
   <div class="community">
     {#each rows as row (row.uri)}
+      {@const guest = guestActors[row.did] ?? unknownActor(row.did)}
       <div class="msg guest" class:blessed={Boolean(row.bless) && !row.retracted}>
+        <Disc actor={guest} />
         <div class="mh">
-          <Who actor={guestActors[row.did] ?? unknownActor(row.did)} />
+          <b>{guest.name}</b>
           <Badge badge={{ kind: 'flat', glyph: '○', text: 'not a member' }} />
           {#if row.createdAt}<span class="when">{stamp(row.createdAt)}</span>{/if}
           {#if row.bless && !row.retracted}
diff --git a/packages/ui/src/lib/components/Composer.svelte b/packages/ui/src/lib/components/Composer.svelte
index 2a282b6..35e047a 100644
--- a/packages/ui/src/lib/components/Composer.svelte
+++ b/packages/ui/src/lib/components/Composer.svelte
@@ -1,5 +1,6 @@
 <script lang="ts">
   import type { GoalView } from '@radial/core'
+  import { participates } from '$lib/admin.js'
   import { account } from '$lib/auth.svelte.js'
   import { toast, ui } from '$lib/ui.svelte.js'
   import {
@@ -41,6 +42,9 @@
   let attaching = $state(false)
   let error = $state('')
 
+  const member = $derived(
+    account.status === 'signed-in' && participates(space.directory, account.did),
+  )
   const repliedTo = $derived(replyTo ? space.directory.get(replyTo.did) : undefined)
   // Who could be asked to answer this message once it is written. An agent has to publish `answer`
   // in its own self-description to appear here, so a space whose agents do not is offered nothing.
@@ -90,7 +94,7 @@
 
   async function post(alsoAsk?: string): Promise<void> {
     const text = body.trim()
-    if (!text || busy || attaching) return
+    if (!member || !text || busy || attaching) return
     busy = true
     error = ''
     try {
@@ -144,7 +148,7 @@
     <span>to post to this thread.</span>
   </p>
 {:else}
-  {#if replyTo && repliedTo}
+  {#if member && replyTo && repliedTo}
     <p class="compose-note" style="margin-bottom:0">
       <span>Replying to <b>{repliedTo.handle ?? repliedTo.name}</b></span>
       {#if clearReply}
@@ -163,14 +167,22 @@
       bind:uploading={attaching}
       variant="flush"
       minHeight="42px"
-      disabled={busy}
+      disabled={busy || !member}
       images
       onSubmit={() => void post()}
-      placeholder={replyTo ? 'Reply in the thread' : 'Message the goal thread — every turn reads it'}
-      ariaLabel={replyTo ? 'Reply in the thread' : 'Message the goal thread'}
+      placeholder={!member
+        ? 'Only space members can post to the goal thread'
+        : replyTo
+          ? 'Reply in the thread'
+          : 'Message the goal thread — every turn reads it'}
+      ariaLabel={!member
+        ? 'Goal thread posting is available to space members'
+        : replyTo
+          ? 'Reply in the thread'
+          : 'Message the goal thread'}
     />
     <div class="compose-bar">
-      {#if asked}
+      {#if member && asked}
         <!-- Two records, one press: the message, then a typed request asking one agent to answer it.
              Nothing is dispatched by the message itself — a mention addresses somebody, it never runs
              anything (design §10) — so the @ here is a label on a button that writes the request, not
@@ -236,7 +248,7 @@
       <button
         class="btn btn-p"
         type="button"
-        disabled={busy || attaching || body.trim() === ''}
+        disabled={!member || busy || attaching || body.trim() === ''}
         title="⌘↵"
         onclick={() => post()}
       >
diff --git a/packages/ui/src/lib/components/NewGoal.svelte b/packages/ui/src/lib/components/NewGoal.svelte
index f5ff8b7..fed6f7b 100644
--- a/packages/ui/src/lib/components/NewGoal.svelte
+++ b/packages/ui/src/lib/components/NewGoal.svelte
@@ -1,5 +1,6 @@
 <script lang="ts">
   import { goto } from '$app/navigation'
+  import { participates } from '$lib/admin.js'
   import { account } from '$lib/auth.svelte.js'
   import { closeDraft, holdDraft } from '$lib/compose.svelte.js'
   import {
@@ -31,7 +32,10 @@
   }
   const { space, here }: Props = $props()
 
-  const writable = $derived(!space.fixture && account.status === 'signed-in')
+  const member = $derived(
+    account.status === 'signed-in' && participates(space.directory, account.did),
+  )
+  const writable = $derived(!space.fixture && member)
 
   // Both of these are read once, at open, and that is deliberate rather than an oversight — hence the
   // suppressions. The card is mounted for as long as one goal is being written; a poll landing
@@ -144,6 +148,8 @@
            goal list with no visible way to make a goal, which is a worse answer to the same question. -->
       {#if space.fixture}
         <p class="hint">The fixture has no repo behind it. Open a live space to write one.</p>
+      {:else if account.status === 'signed-in'}
+        <p class="hint">Only active members can write goals in this space.</p>
       {:else}
         <p class="hint">
           <button class="linkish" type="button" onclick={() => (ui.accountOpen = true)}>Sign in</button>
diff --git a/packages/ui/src/lib/components/NewRequest.svelte b/packages/ui/src/lib/components/NewRequest.svelte
index 40a01ed..99e5bb6 100644
--- a/packages/ui/src/lib/components/NewRequest.svelte
+++ b/packages/ui/src/lib/components/NewRequest.svelte
@@ -2,6 +2,7 @@
   import { artifactTypes, durabilityOf } from '@radial/core'
   import { goto } from '$app/navigation'
   import { onMount } from 'svelte'
+  import { participates } from '$lib/admin.js'
   import { account } from '$lib/auth.svelte.js'
   import { closeDraft, holdDraft, requestDialogId } from '$lib/compose.svelte.js'
   import { placeFloating } from '$lib/floating.js'
@@ -35,7 +36,10 @@
   }
   const { draft, space, anchor }: Props = $props()
 
-  const writable = $derived(!space.fixture && account.status === 'signed-in')
+  const member = $derived(
+    account.status === 'signed-in' && participates(space.directory, account.did),
+  )
+  const writable = $derived(!space.fixture && member)
 
   const type = $derived(artifactTypes(space.index).get(draft.type))
   const label = $derived(typeLabel(draft.type))
@@ -244,6 +248,8 @@
          hiding the button instead would leave the view with no visible way to ask for anything. -->
     {#if space.fixture}
       <p class="hint">The fixture has no repo behind it. Open a live space to ask for one.</p>
+    {:else if account.status === 'signed-in'}
+      <p class="hint">Only active members can write requests in this space.</p>
     {:else}
       <p class="hint">
         <button class="linkish" type="button" onclick={() => (ui.accountOpen = true)}>Sign in</button>
diff --git a/packages/ui/src/lib/components/PlusMenu.svelte b/packages/ui/src/lib/components/PlusMenu.svelte
index 93f5f4c..3407656 100644
--- a/packages/ui/src/lib/components/PlusMenu.svelte
+++ b/packages/ui/src/lib/components/PlusMenu.svelte
@@ -1,4 +1,6 @@
 <script lang="ts">
+  import { participates } from '$lib/admin.js'
+  import { account } from '$lib/auth.svelte.js'
   import { openDraft } from '$lib/compose.svelte.js'
   import { focusStranded, keepFocus } from '$lib/focus.js'
   import { registerPrimary } from '$lib/keys.js'
@@ -9,7 +11,9 @@
   import { typeLabel } from '$lib/units.js'
   import Glyph from './Glyph.svelte'
 
-  // ⊕ always offers a new goal, and additionally makes an item of the list you are in.
+  // ⊕ offers an active member a new goal, and additionally makes an item of the list they are in.
+  // It stays visible but disabled for a signed-in non-member: all of its records are member-only,
+  // while that visitor's one valid write lives in the Community composer on a goal.
   //
   // It used to be only the second of those, which meant the one record a human writes from scratch
   // could only be written from a project's own goal list — seven of the ten routes had no ⊕ at all,
@@ -32,6 +36,9 @@
 
   const open = $derived(ui.menuOpen)
   const offered = $derived(types ? requestableTypes(space.index, types.scope) : [])
+  const barred = $derived(
+    account.status === 'signed-in' && !participates(space.directory, account.did),
+  )
   // Looked up among the projects a goal may actually be written into, not among all of them: the card
   // drops an archived `here` and asks instead (`goal.ts:defaultGoalProject`), and `/space` links
   // archived projects like any other. An unfiltered lookup would let this item promise "New goal in
@@ -41,9 +48,14 @@
   )
 
   function toggle(): void {
+    if (barred) return
     ui.menuOpen = !ui.menuOpen
   }
 
+  $effect(() => {
+    if (barred && ui.menuOpen) closeMenu()
+  })
+
   // ⌘N is this button. Registered rather than handled here, so the map lives in one table
   // (`keys.ts`). Most browsers keep ⌘N for a new window and never deliver it, which is why a plain
   // `n` — registered in the table itself, so it does not depend on this being mounted — is the one
@@ -82,11 +94,14 @@
 <button
   bind:this={plus}
   class="plus"
+  disabled={barred}
   aria-expanded={open}
   aria-haspopup="menu"
   aria-keyshortcuts="Meta+N Control+N"
   aria-label="New goal or request an artifact"
-  title="New goal or request an artifact — ⌘N"
+  title={barred
+    ? 'Only active members can create goals or requests in this space'
+    : 'New goal or request an artifact — ⌘N'}
   onclick={toggle}
 >
   <svg width="21" height="21" viewBox="0 0 22 22" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round">
diff --git a/packages/ui/src/lib/components/RequestBar.svelte b/packages/ui/src/lib/components/RequestBar.svelte
index 891df47..18f8b00 100644
--- a/packages/ui/src/lib/components/RequestBar.svelte
+++ b/packages/ui/src/lib/components/RequestBar.svelte
@@ -1,4 +1,6 @@
 <script lang="ts">
+  import { participates } from '$lib/admin.js'
+  import { account } from '$lib/auth.svelte.js'
   import {
     openDraft,
     ownsRequestDraft,
@@ -33,12 +35,15 @@
 
   const offered = $derived(requestableTypes(space.index, scope))
   const ended = $derived(scope === 'goal' && goalByUri(space.index, target)?.ended === true)
+  const barred = $derived(
+    account.status === 'signed-in' && !participates(space.directory, account.did),
+  )
   let buttons = $state<Record<string, HTMLButtonElement>>({})
 </script>
 
-<!-- No sign-in gate and no fixture gate, for the reason the compose card gives: the card opens and
-     says why it cannot be filled in, where hiding the buttons would leave the view with no visible
-     way to ask for anything at all. -->
+<!-- Signed-out readers and the fixture keep the discovery path: the card opens and explains what is
+     missing. A signed-in non-member is different — they already have a writeable repo, but the fold
+     would ignore their request — so the buttons stay visible and disabled. -->
 {#if offered.length > 0}
   <div class="askbar" role="group" aria-label="Request an artifact">
     <span class="asklead">Ask an agent for</span>
@@ -47,11 +52,12 @@
         bind:this={buttons[name]}
         class="btn askbtn"
         type="button"
+        disabled={barred}
         aria-haspopup="dialog"
         aria-controls={requestDialogId}
         aria-expanded={ownsRequestDraft(buttons[name])}
         aria-label="Request {typeLabel(name)}"
-        title={value.outputSpec.description}
+        title={barred ? 'Only active members can request artifacts in this space' : value.outputSpec.description}
         onclick={(event) => {
           const trigger = event.currentTarget
           openDraft({ kind: 'request', target, scope, type: name }, trigger, trigger)
diff --git a/packages/ui/src/lib/components/Thread.svelte b/packages/ui/src/lib/components/Thread.svelte
index e643d24..065a206 100644
--- a/packages/ui/src/lib/components/Thread.svelte
+++ b/packages/ui/src/lib/components/Thread.svelte
@@ -1,5 +1,6 @@
 <script lang="ts">
   import type { ArtifactRequestRecord, GoalView, IndexedRecord } from '@radial/core'
+  import { participates } from '$lib/admin.js'
   import { account } from '$lib/auth.svelte.js'
   import { relativeTime, stamp } from '$lib/format.js'
   import { inline } from '$lib/prose.js'
@@ -75,7 +76,11 @@
   let retracting = $state('')
   let error = $state('')
 
-  const writable = $derived(!space.fixture && account.status === 'signed-in')
+  const writable = $derived(
+    !space.fixture &&
+      account.status === 'signed-in' &&
+      participates(space.directory, account.did),
+  )
 
   async function retract(request: IndexedRecord<ArtifactRequestRecord>): Promise<void> {
     if (retracting) return
diff --git a/packages/ui/src/lib/components/UnitDetail.svelte b/packages/ui/src/lib/components/UnitDetail.svelte
index 51f5461..4f582f0 100644
--- a/packages/ui/src/lib/components/UnitDetail.svelte
+++ b/packages/ui/src/lib/components/UnitDetail.svelte
@@ -1,6 +1,7 @@
 <script lang="ts">
   import type { GoalView, ProjectView, UnitView, Verdict } from '@radial/core'
   import { durabilityOf } from '@radial/core'
+  import { participates } from '$lib/admin.js'
   import { account } from '$lib/auth.svelte.js'
   import {
     openDraft,
@@ -58,6 +59,9 @@
     startVersion?: number | undefined
   }
   const { unit, view, space, startVersion }: Props = $props()
+  const barred = $derived(
+    account.status === 'signed-in' && !participates(space.directory, account.did),
+  )
 
   // Null means "the current version" — so a unit that gains a v3 while its drawer is open keeps
   // following the tip, and only an explicit click pins the reader to an older one. A link that
@@ -134,7 +138,7 @@
   )
   let requestButtons = $state<Record<string, HTMLButtonElement>>({})
   const captureInto = (type: string, trigger: HTMLButtonElement): void => {
-    if (!version || !project) return
+    if (barred || !version || !project) return
     openDraft(
       captureDraft(project.target.uri, view.target.uri, type, {
         uri: version.artifact.uri,
@@ -155,6 +159,7 @@
   const owed = $derived(owedBy(version, account.did))
 
   const judge = (verdict: Verdict): void => {
+    if (barred) return
     asking = false
     judging = verdict
   }
@@ -169,7 +174,7 @@
   // bases, so a v2 arrives with the plan its findings judge it against and not only the findings.
   // A different type starts a new chain, and takes only the version it was asked off.
   const compose = (type: string, trigger: HTMLButtonElement): void => {
-    if (!version) return
+    if (barred || !version) return
     openDraft(
       {
         kind: 'request',
@@ -222,7 +227,11 @@
   let replyBusy = $state(false)
   /** A pasted image is still uploading; replying now would name a record that has not landed. */
   let replyAttaching = $state(false)
-  const replyable = $derived(!space.fixture && account.status === 'signed-in')
+  const replyable = $derived(
+    !space.fixture &&
+      account.status === 'signed-in' &&
+      participates(space.directory, account.did),
+  )
 
   async function postReply(
     to: NonNullable<typeof question>,
@@ -520,15 +529,16 @@
     {#if canJudge && version}
       <!-- The review goes on the version being read, not on the unit's tip. Both buttons open the
            same card — which one was pressed only decides what it opens on. -->
-      <button class="btn btn-ok" type="button" onclick={() => judge('approve')}>
+      <button class="btn btn-ok" type="button" disabled={barred} onclick={() => judge('approve')}>
         <span aria-hidden="true">✓</span> {owed ? 'Approve — you were asked' : 'Approve'}
       </button>
-      <button class="btn btn-bad" type="button" onclick={() => judge('request_changes')}>
+      <button class="btn btn-bad" type="button" disabled={barred} onclick={() => judge('request_changes')}>
         <span aria-hidden="true">✕</span> Request changes
       </button>
       <button
         class="btn"
         type="button"
+        disabled={barred}
         onclick={() => {
           judging = null
           asking = true
@@ -544,7 +554,7 @@
         class="btn"
         class:btn-p={successor.primary && !successor.pending}
         type="button"
-        disabled={successor.pending !== undefined}
+        disabled={barred || successor.pending !== undefined}
         title={successor.pending
           ? 'Asking again would write a second competing successor'
           : successor.continuity?.note}
@@ -560,6 +570,7 @@
           bind:this={requestButtons[`build:${type.name}`]}
           class="btn"
           type="button"
+          disabled={barred}
           title={newChain}
           aria-haspopup="dialog"
           aria-controls={requestDialogId}
@@ -579,6 +590,7 @@
           bind:this={requestButtons[`capture:${type.name}`]}
           class="btn"
           type="button"
+          disabled={barred}
           aria-haspopup="dialog"
           aria-controls={requestDialogId}
           aria-expanded={ownsRequestDraft(requestButtons[`capture:${type.name}`])}
diff --git a/packages/ui/test/member-controls.test.mjs b/packages/ui/test/member-controls.test.mjs
new file mode 100644
index 0000000..75262c0
--- /dev/null
+++ b/packages/ui/test/member-controls.test.mjs
@@ -0,0 +1,46 @@
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import { dirname, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { describe, it } from 'node:test'
+
+// A signed-in stranger can author a public guest comment in their own repo. Every other write on a
+// space view is trusted only from an active member, so those controls must not merely rely on a PDS
+// rejecting the write: it would accept it, and the fold would silently ignore it.
+
+const src = resolve(dirname(fileURLToPath(import.meta.url)), '..', 'src')
+const read = (name) => readFileSync(resolve(src, name), 'utf8')
+
+describe('member-only controls', () => {
+  it('disables the ordinary thread composer and removes its message actions for non-members', () => {
+    const composer = read('lib/components/Composer.svelte')
+    const thread = read('lib/components/Thread.svelte')
+    assert.match(composer, /participates\(space\.directory, account\.did\)/)
+    assert.match(composer, /disabled=\{busy \|\| !member\}/)
+    assert.match(composer, /if \(!member \|\| !text \|\| busy \|\| attaching\) return/)
+    assert.match(thread, /account\.status === 'signed-in' &&\s*participates\(space\.directory, account\.did\)/)
+  })
+
+  it('disables request and create triggers for a signed-in non-member', () => {
+    const requestBar = read('lib/components/RequestBar.svelte')
+    const plus = read('lib/components/PlusMenu.svelte')
+    assert.match(requestBar, /disabled=\{barred\}/)
+    assert.match(plus, /if \(barred\) return/)
+    assert.match(plus, /class="plus"\s*disabled=\{barred\}/)
+  })
+
+  it('keeps the write forms themselves behind active membership', () => {
+    for (const component of ['NewGoal.svelte', 'NewRequest.svelte', 'AskReview.svelte']) {
+      const source = read(`lib/components/${component}`)
+      assert.match(source, /participates\(space\.directory, account\.did\)/, component)
+      assert.match(source, /const writable = \$derived\(!space\.fixture && member\)/, component)
+    }
+  })
+
+  it('disables artifact drawer actions and excludes non-members from question replies', () => {
+    const detail = read('lib/components/UnitDetail.svelte')
+    assert.match(detail, /disabled=\{barred \|\| successor\.pending !== undefined\}/)
+    assert.match(detail, /disabled=\{barred\}/)
+    assert.match(detail, /const replyable = \$derived\([\s\S]*?participates\(space\.directory, account\.did\)/)
+  })
+})
diff --git a/packages/ui/test/thread-grid.test.mjs b/packages/ui/test/thread-grid.test.mjs
index e4ce138..173a38f 100644
--- a/packages/ui/test/thread-grid.test.mjs
+++ b/packages/ui/test/thread-grid.test.mjs
@@ -31,4 +31,12 @@ describe('the thread row grid', () => {
     assert.match(read('lib/components/AskAnswer.svelte'), /<div class="newreq"/)
     assert.match(read('lib/components/Thread.svelte'), /<AskAnswer /)
   })
+
+  it('keeps community comment prose beside its resolved guest disc', () => {
+    const community = read('lib/components/Community.svelte')
+    assert.match(community, /<Disc actor=\{guest\} \/>/)
+    assert.match(community, /<div class="mh">\s*<b>\{guest\.name\}<\/b>/)
+    assert.doesNotMatch(css, /\.community \.guest \{[^}]*grid-template-columns: 1fr/)
+    assert.match(css, /\.community \.guest \.mb \{[^}]*grid-column: 2/)
+  })
 })
-- 
2.51.2