diff --git a/CLAUDE.md b/CLAUDE.md
index 829ca4511..58bd620e2 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -23,6 +23,7 @@ decides which one a given file belongs in:
 |---|---|
 | **`www/`** | **everything the site serves.** Pages, client scripts, CSS, photos, dictionaries. If a browser can fetch it, it is in here. |
 | **`src/worker/`** | **the site Worker**, which was `www/_worker.js/` until 2026-08-16. It moved for the reason the row below already gave for cal and serendipity: it is a program with its own tests, not a document. It was never served either way (`.assetsignore` has always listed `_worker.js`), so the move changed no served byte. It STAGES to `.build/src/worker/`, mirroring its source path, and that mirroring is load-bearing rather than tidy: cal and serendipity import the Worker across the project boundary and are bundled from `.build/`, so a relative specifier has to resolve in BOTH trees, which is only possible when the two have the same shape. |
+| **`src/client/`**, **`src/styles/`** | the client islands (`nav.js`, `tooltip.js`, `lens*.js`, `quiz.js`, …) and the stylesheets (`luna.css`, `lwe-base.css`, …), moved out of `www/` on 2026-08-16. They STAGE back to the root of the served tree, so their public URLs are still `/nav.js` and `/luna.css`: source layout and URL layout are different questions, and only the first one moved. Every served byte and every `/a/` content hash is unchanged. |
 | `cal/`, `serendipity/` | the two application modules the site Worker bundles and serves at `/coffee` and `/serendipity`. They sit outside `www/` because they are programs with their own tests, not documents. |
 | `cf-garage/`, `lwe-ask/`, `lens-reader/` | the three SEPARATELY deployed auxiliary Workers, each with its own `wrangler.toml` and its own deploy. Nothing here reaches production through the site Worker. |
 | **`scripts/`** | **every developer tool.** The build (`build.mjs`), the test suite (`contract-tests.mjs`), the route oracle, the perf budget, and the `check-*` / `gen-*` family. Nothing in here ships. |
@@ -33,6 +34,12 @@ decides which one a given file belongs in:
 | `design/` | the Luna design system. `tokens/` and `DESIGN.md` are canonical; the rest is history, and `design/README.md` draws that line. |
 | `migrations/`, `talks/` | D1 SQL for the site Worker, and talk material. |
 
+Three directories now compose the served URL root: `www/` plus `src/client/`
+plus `src/styles/`, merged by `build.mjs` into `.build/www`. That is why
+`config/tsconfig.browser.json` maps `/*` across all three rather than at `www/`
+alone. An absolute specifier like `import "/hoist.js"` is checkable only if the
+mapping names the directory the file actually authors in.
+
 Four things stay at the repository root because their tooling demands it, and
 moving any of them costs more than it buys:
 
@@ -804,17 +811,17 @@ Single-page personal site at `aadhar.sh`. A Cloudflare Worker with static assets
 |---|---|
 | `www/index.html` | The whole page in one file. Inline CSS + JS. ~58KB uncompressed, ~15.4KB zstd (measured 2026-07-21 via live nav-timing; CF serves zstd, not brotli). Served on the shared `PAGE_CACHE_CONTROL` (`lib/const.js`) like every other document, + ETag, and still never `no-store` (the one directive that would cost the page bfcache). It held `private, no-cache, must-revalidate` through its SSR era and kept it after the SSR left; that cost two things at once, since no shared cache could store it (every front-door hit ran the worker) and Chromium refuses to keep a dictionary offered under `no-cache` (so `/` was the ONE page outside the per-page dcz tier). Changed 2026-07-31. Comments deliberately kept readable for View Source. |
 | `www/writing/` | Written content as plain `.txt` files + `posts.json` registry `[{slug,title,date}]`. The worker renders each as an XP **Notepad** window at `/writing/<slug>` (a server-rendered `<textarea>` seeded with the canonical text — editable by nature, ephemeral by nature: no save → reload restores canonical, "writing in flux"), plus a "My Writing" folder index at `/writing`. Raw `.txt` stays fetchable at `/writing/<slug>.txt`. Author a post = drop a `.txt` + a `posts.json` entry. Render code (`handleWritingIndex`/`handleWritingPost`/`NOTEPAD_CSS`) lives in `_worker.js`. |
-| `www/notepad.js` | Behavior for the `/writing` Notepad view (deferred, SW-cached): per-window `enhance()` wiring File/Edit/Format/View/Help menus, live Ln/Col + word-count status bar, Word-Wrap toggle, the classic **F5 time/date** stamp (Temporal w/ Date fallback), Select All, Print, About. Also opens folder notes as **popovers** that composite over the folder index, deliberately without touching the address bar (notes are `popover="manual"`, so several stay open at once and one URL couldn't honestly name three windows; Esc closes the topmost). The permalink stays real: each row is an `<a href="/writing/<slug>">` the worker serves standalone, and a modified click passes through to it. Chrome itself is SSR'd by `_worker.js`. No-op without a `.np-window`. |
-| `www/tooltip.js` | Rich XP hover island for photos, tracks, artists, and car references. The homepage keeps only a tiny inline loader that idle-prefetches this module and replays a cold first hover; coarse-pointer visitors never load it. |
-| `www/infotip.js` | The same trick for every OTHER hover on the site. The rule is short: **any `[title]` is an infotip, wherever it lives** — taskbar app buttons, tray icons, the clock, desktop icons, title-bar controls, form fields, and titled links and controls in page bodies. All of them already bought the OS tooltip, so this is what that tooltip was hiding: a pin's page count (from nav.js's own destination table), the tray's live colo/build (the same JSON its click-balloon fetches), the clock's full date, a citation link's destination host. It re-draws `title` rather than replacing it: emptied on hover, restored on leave, so AT still reads it at focus and a page with no JS keeps the native tooltip. `[data-tip]` is the opt-in for a control that never had one. **Four richer surfaces are skipped by name** (`.lx-term`, `.photos a`, `.np-list li`, `.np-artist-link`, `.car-link`, `.ev[data-cover]`) because each already draws its own card from the same engine; `.lx-term` is the sharp one, since those ship a `title` as their no-JS fallback and `lens.js` strips it once its own surface is live. **`nav.js` owns the matcher and passes the FUNCTION in**, not a selector each side keeps a copy of. Loads on the first hover that has a tip, never on a coarse pointer. Windows' two delays live in `hoist.js` now (`openMs` 400 cold-dwell, `autopopMs` 6s), both defaulting OFF so the content hover CARDS keep the instant show they were tuned for. |
-| `www/nav.js` | Site-wide XP **desktop shell**. The ONE shared external asset (deferred, SW-cached) — every page includes `<script src="/nav.js" defer>`; it injects its own `<style>` + builds, into `<body>`: the **Bliss desktop** wallpaper, **draggable desktop icons** (Notepad + the 5 profiles; icons drag freely within a visit but positions are DELIBERATELY not persisted, since the stored layout was read back in states that couldn't honour it and came back as a stack), the **taskbar** (Start orb → Run, first-level-subpage app buttons each with a per-section SVG icon, clock via Temporal), and the **Run** command palette (⌘K / Start). Also owns the **OS-window model**: body is a clipping flex desktop, each `.window`/`.np-window` is pinned + its content scrolls internally behind a **custom XP scrollbar**, windows are **draggable** (top is a hard boundary) + **resizable**, and Navigations hard-cut: the cross-document View Transition this file used to describe was removed 2026-07-30 (prerender already made navigation instant, so the animation was pure added latency). Sets each first-level route's **tab favicon** to its section icon. Run destinations: pages + profiles inline; 158 photos lazy-loaded from `/images/manifest.json` with `/images/alt.json` captions. Wired into homepage + all garage pages + worker-gen `/around`,`/whoareyou`,`/bot` + serendipity shell. |
-| `www/quiz.js` | The **understanding-check** widget (deferred, shared, minified at deploy with a `/quiz.src.js` twin). Every garage + LWE content page ends with an active-recall quiz rendered by this one script from an inline `<script type="application/json" id="luq-data">` block: garage pages get an XP GroupBox self-test (`<section id="luq">` mount), LWE pages get the quiz as a continuation of the MSN chat (appended into `.log`, no mount). Misconception-based distractors, deterministic option shuffle, per-page best score in localStorage. The idea is Geoffrey Litt's "Understanding is the new bottleneck" (credited in the widget footer); /lens carries the same pedagogy in copy (predict-then-check mode notes, the Delta counterfactual lab as a Papert micro-world). |
+| `src/client/notepad.js` | Behavior for the `/writing` Notepad view (deferred, SW-cached): per-window `enhance()` wiring File/Edit/Format/View/Help menus, live Ln/Col + word-count status bar, Word-Wrap toggle, the classic **F5 time/date** stamp (Temporal w/ Date fallback), Select All, Print, About. Also opens folder notes as **popovers** that composite over the folder index, deliberately without touching the address bar (notes are `popover="manual"`, so several stay open at once and one URL couldn't honestly name three windows; Esc closes the topmost). The permalink stays real: each row is an `<a href="/writing/<slug>">` the worker serves standalone, and a modified click passes through to it. Chrome itself is SSR'd by `_worker.js`. No-op without a `.np-window`. |
+| `src/client/tooltip.js` | Rich XP hover island for photos, tracks, artists, and car references. The homepage keeps only a tiny inline loader that idle-prefetches this module and replays a cold first hover; coarse-pointer visitors never load it. |
+| `src/client/infotip.js` | The same trick for every OTHER hover on the site. The rule is short: **any `[title]` is an infotip, wherever it lives** — taskbar app buttons, tray icons, the clock, desktop icons, title-bar controls, form fields, and titled links and controls in page bodies. All of them already bought the OS tooltip, so this is what that tooltip was hiding: a pin's page count (from nav.js's own destination table), the tray's live colo/build (the same JSON its click-balloon fetches), the clock's full date, a citation link's destination host. It re-draws `title` rather than replacing it: emptied on hover, restored on leave, so AT still reads it at focus and a page with no JS keeps the native tooltip. `[data-tip]` is the opt-in for a control that never had one. **Four richer surfaces are skipped by name** (`.lx-term`, `.photos a`, `.np-list li`, `.np-artist-link`, `.car-link`, `.ev[data-cover]`) because each already draws its own card from the same engine; `.lx-term` is the sharp one, since those ship a `title` as their no-JS fallback and `lens.js` strips it once its own surface is live. **`nav.js` owns the matcher and passes the FUNCTION in**, not a selector each side keeps a copy of. Loads on the first hover that has a tip, never on a coarse pointer. Windows' two delays live in `hoist.js` now (`openMs` 400 cold-dwell, `autopopMs` 6s), both defaulting OFF so the content hover CARDS keep the instant show they were tuned for. |
+| `src/client/nav.js` | Site-wide XP **desktop shell**. The ONE shared external asset (deferred, SW-cached) — every page includes `<script src="/nav.js" defer>`; it injects its own `<style>` + builds, into `<body>`: the **Bliss desktop** wallpaper, **draggable desktop icons** (Notepad + the 5 profiles; icons drag freely within a visit but positions are DELIBERATELY not persisted, since the stored layout was read back in states that couldn't honour it and came back as a stack), the **taskbar** (Start orb → Run, first-level-subpage app buttons each with a per-section SVG icon, clock via Temporal), and the **Run** command palette (⌘K / Start). Also owns the **OS-window model**: body is a clipping flex desktop, each `.window`/`.np-window` is pinned + its content scrolls internally behind a **custom XP scrollbar**, windows are **draggable** (top is a hard boundary) + **resizable**, and Navigations hard-cut: the cross-document View Transition this file used to describe was removed 2026-07-30 (prerender already made navigation instant, so the animation was pure added latency). Sets each first-level route's **tab favicon** to its section icon. Run destinations: pages + profiles inline; 158 photos lazy-loaded from `/images/manifest.json` with `/images/alt.json` captions. Wired into homepage + all garage pages + worker-gen `/around`,`/whoareyou`,`/bot` + serendipity shell. |
+| `src/client/quiz.js` | The **understanding-check** widget (deferred, shared, minified at deploy with a `/quiz.src.js` twin). Every garage + LWE content page ends with an active-recall quiz rendered by this one script from an inline `<script type="application/json" id="luq-data">` block: garage pages get an XP GroupBox self-test (`<section id="luq">` mount), LWE pages get the quiz as a continuation of the MSN chat (appended into `.log`, no mount). Misconception-based distractors, deterministic option shuffle, per-page best score in localStorage. The idea is Geoffrey Litt's "Understanding is the new bottleneck" (credited in the widget footer); /lens carries the same pedagogy in copy (predict-then-check mode notes, the Delta counterfactual lab as a Papert micro-world). |
 | `www/terminal.js` | The **Windows PowerShell** console at `/terminal`, and an actual **MCP client**: typing `dict <url>` sends the same `POST /mcp` `tools/call` an agent sends, and echoes the request before making it. Deliberately no private endpoints — if the console had its own, watching it would say nothing about what an agent gets and the two could drift unnoticed. The page server-renders one frame as boot output, so the route reads with JS off. Builds output with `createTextNode`, never `innerHTML`, because frames carry photo captions and third-party page titles. |
 | `src/worker/terminal.js` + `lib/tui.js` | The tools and the 80-column frame renderer. Tools are TOP-LEVEL utilities (`/finger`, `/radar`, `/dict`, `/cache`), because this site puts utilities at the root and only content nests; `/terminal` is the console that DRIVES them, not their parent. The frame is a REPRESENTATION alongside `.md`: one URL answers HTML to a browser, the frame to everything else, and `<tool>.txt` explicitly. **The MCP tool name IS the route name** — what you type in the console, what you curl, and what an agent calls are one word, and a contract test asserts every tool with a route is reachable over MCP. State is query params (small and addressable), so frames fork, bookmark and replay. `lib/tui.js` is pure, which is what lets one renderer answer HTTP, MCP and `node --test`; its palette is MID-TONES ONLY because a terminal theme belongs to the visitor. |
 | the `/terminal` window | It is a **console window, not a page**, and the difference is entirely in what was REMOVED. `lunaPage` gained `windowClass`/`contentClass`/`windowAttrs` (all defaulting to empty, so the other nine callers are byte-identical) and the window declares `data-no-histnav`, which `nav.js` honours by skipping the site-wide Back/Forward injection — those are BROWSER controls, and a console carrying them reads as a terminal running inside Internet Explorer. Drag, resize, maximize and close all stay, because those are OS chrome. There is also nothing below the window: the explanatory paragraph that used to sit there was the single strongest tell, since real consoles do not come with a caption. Width is 624px so the console is exactly 80 columns, the size a real one opens at; left at the 760px page default it carried 136px of dead field to the right of every frame. Fonts stay on the design system — `"Lucida Console", var(--font-mono)`, one native Windows font in front of the existing token, no `@font-face`, no bytes. |
 | `src/worker` | The module worker (bundled by wrangler at deploy). Owns routing, photo serving from R2, manifest building, Spotify playlist scraping, AadharshBot crawler, the `/writing` Notepad pages, cache-control overrides. |
 | `www/_headers` | Static-asset cache + security headers (CSP, Permissions-Policy, etc.). Applied to direct static-asset requests; the worker overrides cache-control for select paths. |
-| `www/sw.js` | RETIRED (v136, 2026-07-03): now a ~15-line unregister stub (skipWaiting, delete caches, claim, unregister) that must keep serving 200 for a year+ so installed copies clean themselves up. No CACHE_VERSION anymore; the deploy-log vnum is staged in `checkpoints.json` and recorded in D1 by the ramp (bump-version.sh mints the next from that projection). Repeat-visit speed comes from immutable assets + bfcache + speculation prerender. |
+| `src/client/sw.js` | RETIRED (v136, 2026-07-03): now a ~15-line unregister stub (skipWaiting, delete caches, claim, unregister) that must keep serving 200 for a year+ so installed copies clean themselves up. No CACHE_VERSION anymore; the deploy-log vnum is staged in `checkpoints.json` and recorded in D1 by the ramp (bump-version.sh mints the next from that projection). Repeat-visit speed comes from immutable assets + bfcache + speculation prerender. |
 | `www/llms.txt` | The llms.txt format — concise site summary for LLMs. Linked from `<link rel="alternate">`. |
 | `www/index.md` | Markdown source of homepage copy (used by `/llms.txt` and as a fallback). The one COMMITTED Markdown twin: `gen-md-twins.mjs` skips any path that already has one, so this hand-written prose is never regenerated over. |
 | `www/md/` | Hand-authored Markdown twins for the three Worker-rendered prose pages, `/bot`, `/whoareyou` and `/security`, whose text lives in template literals no build step can read. `.assetsignore`d (build input, not a public URL): the generator publishes them at `/bot.md`, `/whoareyou.md` and `/security.md`. `checkTwinFacts()` pins the load-bearing strings against the Worker in BOTH directions, so bumping `BOT_VERSION` fails the deploy until `bot.md` agrees. `security.md`'s pins read `lib/security.js` rather than the page, since a page ABOUT headers must agree with the module that SENDS them; one of them is derived from `ENFORCE_PAGE_HASHES`, so finishing the hashed-CSP rollout fails the deploy until the twin stops calling the policy report-only. |
@@ -1855,7 +1862,7 @@ from this account's IP and under AadharshBot's signature, which is the argument
 asserts the pane makes exactly one request, to our own route, and that
 `_worker.js/lens-tools.js` never names `tools/call` and never calls `fetch`.
 
-Three rules decide the planner in `www/lens-tools.js`, and the first is the one
+Three rules decide the planner in `src/client/lens-tools.js`, and the first is the one
 that keeps it honest:
 
 1. **Never lie about the schema.** `oneOf`, `anyOf`, `$ref`, type unions, tuple
@@ -3638,7 +3645,7 @@ pnpm run deploy:direct
 
 35. **A cosmetic lint fix to a CONTENT-HASHED asset costs 1400 files, and a
     comment costs nothing.** The same 2026-08-14 run wanted two useless escapes
-    out of `www/nav-run.js`. Correcting them moved `/a/nav-run.e943e545.js` to
+    out of `src/client/nav-run.js`. Correcting them moved `/a/nav-run.e943e545.js` to
     `/a/nav-run.b5389c82.js`, which re-minted every page referencing it, every
     per-page dictionary, `_headers`, and `shell-assets.js`.
 
diff --git a/config/tsconfig.browser.json b/config/tsconfig.browser.json
index 9303358f1..b082a7485 100644
--- a/config/tsconfig.browser.json
+++ b/config/tsconfig.browser.json
@@ -10,7 +10,11 @@
     "target": "esnext",
     "module": "esnext",
     "moduleResolution": "bundler",
-    "paths": { "/*": ["../www/*"] },
+    // The served URL root is a COMPOSITE now: build.mjs stages www/, src/client/
+    // and src/styles/ into one tree, so /hoist.js and /nav.js resolve out of
+    // src/client while /index.html and /images/* still come from www/. Listing
+    // both is what keeps an absolute specifier checkable after the split.
+    "paths": { "/*": ["../src/client/*", "../src/styles/*", "../www/*"] },
     "lib": ["esnext", "dom", "dom.iterable"],
     "skipLibCheck": true,
     "strict": false
@@ -19,11 +23,11 @@
   // tsc follows their static imports. The shell's Run and tray islands complete
   // the first-interaction surface without pulling Worker modules into this graph.
   "include": [
-    "../www/hoist.js",
-    "../www/tooltip.js",
-    "../www/infotip.js",
-    "../www/nav.js",
-    "../www/nav-run.js",
-    "../www/nav-tray.js"
+    "../src/client/hoist.js",
+    "../src/client/tooltip.js",
+    "../src/client/infotip.js",
+    "../src/client/nav.js",
+    "../src/client/nav-run.js",
+    "../src/client/nav-tray.js"
   ]
 }
diff --git a/design/README.md b/design/README.md
index 9333180a7..606f7766e 100644
--- a/design/README.md
+++ b/design/README.md
@@ -8,7 +8,7 @@ before treating anything below as a spec.
 - **`DESIGN.md`** — the Luna brief. The canonical reference plus the
   DON'T-modernize guardrails. CLAUDE.md points here.
 - **`tokens/`** — the canonical token set (colors, bevels, fonts, typography;
-  115 custom properties). `www/luna.css` derives from these and never
+  115 custom properties). `src/styles/luna.css` derives from these and never
   redefines them. Change a token here first, then flow it into luna.css.
 - **`styles.css`** — the entry point that `@import`s the four token files.
   Nothing the site serves links it; the `aadhar-sh-design` skill package does.
diff --git a/docs/MAINTENANCE.md b/docs/MAINTENANCE.md
index d95758410..cd483fc1e 100644
--- a/docs/MAINTENANCE.md
+++ b/docs/MAINTENANCE.md
@@ -934,7 +934,7 @@ Key facts (don't hardcode these elsewhere, they drift):
 - RN_KV namespace id: `3cb8a107c58e47dc9244e75b33401f36`
 - R2 bucket: `aadhar-photos` (SOOC originals + full-res JPGs)
 - Thumbnails are content-addressed at `/i/<stem>.<hash8>.<ext>` (hashes.json via `hash-thumbnails.sh`); `THUMB_VERSION` is gone entirely (retired with the last legacy fallback — `lib/const.js` keeps only `CANONICAL_HOST` + `ARCHIVE_VERSION`).
-- The service worker RETIRED in v136 (2026-07-03): `www/sw.js` is an unregister stub that must keep serving 200 for a year+. There is no `CACHE_VERSION`; the deploy-log number lives in D1 (`bump-version.sh` derives the next from `MAX(vnum)`).
+- The service worker RETIRED in v136 (2026-07-03): `src/client/sw.js` is an unregister stub that must keep serving 200 for a year+. There is no `CACHE_VERSION`; the deploy-log number lives in D1 (`bump-version.sh` derives the next from `MAX(vnum)`).
 - Canonical photo source: the aadhar-photos R2 bucket. Raw source files are
   never committed to GitHub; the Actions workflow downloads only the requested
   object keys into disposable runner storage.
@@ -964,7 +964,7 @@ files) are served straight from disk. Worker-owned routes are enumerated in
 | `/lens`, `/lens/`, `/lens/fetch`, `/lens/shot` | `handleLens` / `handleLensFetch` / `handleLensShot` | `lens.js` |
 | `/coffee`, `/coffee/*` | Cal booking module delegation | `../cal/src/index.js` |
 | `/serendipity`, `/serendipity/*` | Serendipity module delegation + local CSP | `../serendipity/serendipity.js` |
-| `/lens.js` | static client renderer | `www/lens.js` (served asset) |
+| `/lens.js` | static client renderer | `src/client/lens.js` (served asset) |
 | `/llms-full.txt` | `handleLlmsFull` (x402 bot paywall; free until `X402_PAY_TO` is set) | `x402.js` |
 | `/ledger`, `/ledger.json` | `handleLedger` / `handleLedgerJson` (AI-crawler invoice from Analytics Engine; counting via `countCrawlerHit` in `index.js`) | `ledger.js` |
 | `/writing`, `/writing/`, `/writing/<slug>` | `handleWritingIndex` / `handleWritingPost` (Notepad) | `writing.js` |
@@ -1529,7 +1529,7 @@ Two variants ship because the card has two honest jobs:
 
 The chips are COUNTED from `config/site-manifest.json` and
 `www/images/hashes.json` rather than typed, because a card outlives most of what
-it describes. The wallpaper and the window icon are read out of `www/luna.css`
+it describes. The wallpaper and the window icon are read out of `src/styles/luna.css`
 and `www/index.html` for the same reason, so there is no second copy of either.
 
 Nothing in the pipeline uploads it: GitHub exposes no API for the social preview.
diff --git a/scripts/build.mjs b/scripts/build.mjs
index 43a00032c..198ad5790 100644
--- a/scripts/build.mjs
+++ b/scripts/build.mjs
@@ -191,7 +191,7 @@ async function checkInvariants() {
       : s.replace(/\/\*[\s\S]*?\*\//g, "").replace(/^\s*\/\/.*$/gm, "");
     if (/@view-transition\s*\{/.test(css)) hard.push(`${f}: re-opts into View Transitions (@view-transition), removed site-wide 2026-07-30`);
   }
-  const luna = await read("www/luna.css");
+  const luna = await read("src/styles/luna.css");
 
   // 3b (hard) — luna.css parses as valid CSS. A botched find-replace in v143
   // wrapped several .window/.xp-button declarations in :where(...) and left
@@ -200,7 +200,7 @@ async function checkInvariants() {
   // releases (the .window box-shadow + the whole .xp-button base rule dropped
   // from the CSSOM). Transform as CSS and block on any warning.
   try {
-    const res = transformCss({ filename: "www/luna.css", code: Buffer.from(luna), minify: false });
+    const res = transformCss({ filename: "src/styles/luna.css", code: Buffer.from(luna), minify: false });
     for (const w of res.warnings) hard.push(`luna.css CSS parse warning: ${w.message}${w.loc ? ` (line ${w.loc.line})` : ""}`);
   } catch (e) {
     hard.push(`luna.css failed to parse as CSS: ${e.message.split("\n")[0]}`);
@@ -238,7 +238,7 @@ async function checkInvariants() {
   // file that carries the calc must agree with luna.css, or first paint lands
   // a different window height than the final.
   const floors = new Map();
-  for (const f of ["www/luna.css", "src/worker/lib/chrome.js", "src/worker/writing.js", "serendipity/serendipity.js"]) {
+  for (const f of ["src/styles/luna.css", "src/worker/lib/chrome.js", "src/worker/writing.js", "serendipity/serendipity.js"]) {
     let s; try { s = await read(f); } catch { continue; }
     // the BODY floor only (`height:calc(...)`), not a window `max-height:calc(...)`
     for (const m of s.matchAll(/(?<!max-)height:calc\(100dvh - (\d+)px\)/g)) floors.set(f, m[1]);
@@ -251,7 +251,7 @@ async function checkInvariants() {
   // If the declaration can't be found in luna.css there is nothing to inject and
   // every page silently loses its first-paint mirror, so this blocks rather than
   // warns: a missing rule here is a rename or a bad edit, not a taste call.
-  if (!clientEdgeDecl(await read("www/luna.css"))) hard.push("luna.css: the client-edge declaration went missing (search \"THE CLIENT EDGE\") — build.mjs injects it into every windowed page and has nothing to inject");
+  if (!clientEdgeDecl(await read("src/styles/luna.css"))) hard.push("luna.css: the client-edge declaration went missing (search \"THE CLIENT EDGE\") — build.mjs injects it into every windowed page and has nothing to inject");
 
   // 6 (warn) — the local-dev twin (wrangler.dev.jsonc) must declare the same
   // bindings as the deploy config (wrangler.jsonc), or local `wrangler dev`
@@ -322,7 +322,7 @@ async function checkInvariants() {
   let manifestChecked = 0;
   try {
     const { surfaces } = readManifest();
-    const nav = await read("www/nav-run.js");
+    const nav = await read("src/client/nav-run.js");
     const desktop = await read("src/worker/lib/desktop.js");
 
     // 8a — generated projections match `pnpm run gen:manifest` output exactly.
@@ -639,6 +639,12 @@ await cp("www", `${OUT}/www`, {
 // at .build/src/worker/index.js, and every deploy path and content hash
 // downstream is therefore untouched by the move.
 await cp("src/worker", `${OUT}/src/worker`, { recursive: true });
+// The client islands and stylesheets author in src/ beside the Worker, and stage
+// back to the ROOT of the served tree because their public URLs are /nav.js and
+// /luna.css. Source layout and URL layout are different questions; only the first
+// one moved, so every served byte and every /a/ content hash is untouched.
+await cp("src/client", `${OUT}/www`, { recursive: true });
+await cp("src/styles", `${OUT}/www`, { recursive: true });
 await mkdir(`${OUT}/cal`, { recursive: true });
 await cp("cal/src", `${OUT}/cal/src`, { recursive: true });
 await mkdir(`${OUT}/serendipity`, { recursive: true });
@@ -700,7 +706,7 @@ await cp("serendipity/serendipity.js", `${OUT}/serendipity/serendipity.js`);
 // file. Pages that load luna.css render-blocking (garage/gpt56.html) carry no
 // geometry mirror and correctly get nothing.
 {
-  const decl = clientEdgeDecl(await readFile("www/luna.css", "utf8"));
+  const decl = clientEdgeDecl(await readFile("src/styles/luna.css", "utf8"));
   const targets = (await readdir(`${OUT}/www`, { recursive: true }))
     .filter((f) => /\.(html|js)$/.test(f) && !/\.src\.|^(i|images|og|cars)\//.test(f))
     .map((f) => `${OUT}/www/${f}`)
@@ -1271,10 +1277,10 @@ let dressPage = () => { throw new Error("explorer: dressPage used before 1g2 def
 
 // 3) shells: deploy the readable original as <name>.src.js, minify the served file
 for (const [file, srcPath, marker] of SHELLS) {
-  const src = await readFile(`www/${file}`, "utf8");
+  const src = await readFile(`src/client/${file}`, "utf8");
   await writeFile(`${OUT}/www/${srcPath.slice(1)}`, src);
 
-  const code = minifyJavaScript(`www/${file}`, src);
+  const code = minifyJavaScript(`src/client/${file}`, src);
   const banner = `/*! minified at deploy - readable source: ${srcPath} */\n`;
   const min = banner + code;
 
@@ -1296,18 +1302,18 @@ for (const [file, srcPath, marker] of SHELLS) {
 // minify. The three first-interaction sheets below are explicit exceptions: each
 // was extracted byte-for-byte from luna.css and loads only with its matching JS.
 {
-  const src = await readFile("www/luna.css", "utf8");
+  const src = await readFile("src/styles/luna.css", "utf8");
   await writeFile(`${OUT}/www/luna.src.css`, src);
-  const code = minifyCss("www/luna.css", src);
+  const code = minifyCss("src/styles/luna.css", src);
   const out = `/*! minified at deploy - readable source: /luna.src.css */\n` + code;
   await writeFile(`${OUT}/www/luna.css`, out);
   console.log(`luna.css: ${src.length} -> ${out.length} bytes (+ /luna.src.css)`);
 }
 
 for (const file of ["nav-run.css", "nav-tray.css", "infotip.css"]) {
-  const src = await readFile(`www/${file}`, "utf8");
+  const src = await readFile(`src/styles/${file}`, "utf8");
   await writeFile(`${OUT}/www/${file.replace(".css", ".src.css")}`, src);
-  const code = minifyCss(`www/${file}`, src);
+  const code = minifyCss(`src/styles/${file}`, src);
   const out = `/*! minified at deploy - readable source: /${file.replace(".css", ".src.css")} */\n` + code;
   await writeFile(`${OUT}/www/${file}`, out);
   console.log(`${file}: ${src.length} -> ${out.length} bytes`);
@@ -1317,9 +1323,9 @@ for (const file of ["nav-run.css", "nav-tray.css", "infotip.css"]) {
 // instead of embedding it eleven times. Keep the same readable-twin contract as
 // luna.css: author the source directly, ship a small minified render-blocker.
 {
-  const src = await readFile("www/lwe-base.css", "utf8");
+  const src = await readFile("src/styles/lwe-base.css", "utf8");
   await writeFile(`${OUT}/www/lwe-base.src.css`, src);
-  const code = minifyCss("www/lwe-base.css", src);
+  const code = minifyCss("src/styles/lwe-base.css", src);
   const out = `/*! minified at deploy - readable source: /lwe-base.src.css */\n` + code;
   await writeFile(`${OUT}/www/lwe-base.css`, out);
   console.log(`lwe-base.css: ${src.length} -> ${out.length} bytes (+ /lwe-base.src.css)`);
diff --git a/scripts/contract-tests.mjs b/scripts/contract-tests.mjs
index e93f7c5b4..31004f41b 100644
--- a/scripts/contract-tests.mjs
+++ b/scripts/contract-tests.mjs
@@ -1835,8 +1835,8 @@ test("outbound self-link list stays in sync with the desktop shell profiles", as
 // failure that would ship silently.
 
 test("\"what was hovered\" is answered in exactly one place", async () => {
-  const nav = await readFile(new URL("www/nav.js", ROOT), "utf8");
-  const tip = await readFile(new URL("www/infotip.js", ROOT), "utf8");
+  const nav = await readFile(new URL("src/client/nav.js", ROOT), "utf8");
+  const tip = await readFile(new URL("src/client/infotip.js", ROOT), "utf8");
   // nav.js's loader has to match the same elements the module does, or the
   // first hover over something it forgot never loads the module at all — and
   // the failure is a tooltip that works everywhere except where you look first.
@@ -1853,7 +1853,7 @@ test("\"what was hovered\" is answered in exactly one place", async () => {
 });
 
 test("the infotip yields to every richer hover surface on the page", async () => {
-  const nav = await readFile(new URL("www/nav.js", ROOT), "utf8");
+  const nav = await readFile(new URL("src/client/nav.js", ROOT), "utf8");
   const skip = (nav.match(/var INFOTIP_SKIP = "([^"]+)"/) || [, ""])[1].split(",");
   // Each of these draws its own card from the same engine, and `.lx-term` is
   // the sharp one: those ship a `title` as their no-JS fallback and lens.js
@@ -1865,7 +1865,7 @@ test("the infotip yields to every richer hover surface on the page", async () =>
 });
 
 test("every string an infotip prints is escaped on the way in", async () => {
-  const tip = await readFile(new URL("www/infotip.js", ROOT), "utf8");
+  const tip = await readFile(new URL("src/client/infotip.js", ROOT), "utf8");
   // The surface renders `title` text from ANY page now, and some of those
   // strings are not ours: /inbox carries webmention titles, /around and
   // /reading carry text from sites this server crawled. innerHTML with one
@@ -1882,7 +1882,7 @@ test("every string an infotip prints is escaped on the way in", async () => {
 });
 
 test("an infotip row is dropped rather than filled in", async () => {
-  const tip = await readFile(new URL("www/infotip.js", ROOT), "utf8");
+  const tip = await readFile(new URL("src/client/infotip.js", ROOT), "utf8");
   // Same rule the photo tooltip follows: a missing value prints nothing. A
   // card that rendered "Contains: 0 pages" or "Colo: unknown" would be stating
   // something the shell does not know, on chrome describing the shell.
@@ -1981,7 +1981,7 @@ test("a section's favicon is in its own <head>, never set by script", async () =
     "taskbar pins must not carry favicon data: the page's own <head> owns this");
 
   // 2. nav.js sets no favicon. A favicon applied after boot is a visible flip.
-  const nav = await readFile(new URL("www/nav.js", ROOT), "utf8");
+  const nav = await readFile(new URL("src/client/nav.js", ROOT), "utf8");
   assert.doesNotMatch(nav, /setFavicon|rel\s*=\s*["']icon["']/,
     "nav.js must not set the tab favicon; the document declares it");
 
@@ -2044,7 +2044,7 @@ test("the speculation ruleset has exactly one author", async () => {
   // 3. nav.js building one at runtime again, which is where the injected copy
   //    lived. Rules in the HTML parse with the document; injected ones landed
   //    after first paint and could not prerender anything hovered before that.
-  const nav = await readFile(new URL("www/nav.js", ROOT), "utf8");
+  const nav = await readFile(new URL("src/client/nav.js", ROOT), "utf8");
   assert.doesNotMatch(nav, /type\s*=\s*["']speculationrules["']/,
     "nav.js must not inject a ruleset; it ships in the chrome now");
 });
@@ -2177,7 +2177,7 @@ test("committed manifest projections match a fresh generation", async () => {
   const { surfaces } = readManifest();
   const mod = await readFile("src/worker/lib/site-manifest.js", "utf8");
   assert.equal(mod.trim(), workerModule(surfaces).trim(), "lib/site-manifest.js is stale — run pnpm run gen:manifest");
-  const nav = await readFile("www/nav-run.js", "utf8");
+  const nav = await readFile("src/client/nav-run.js", "utf8");
   for (const [section, marker] of [["garage", "garage-pages"], ["lwe", "lwe-pages"]]) {
     assert.equal(readFenceBody(nav, marker), navFenceBody(surfaces, section), `nav-run.js generated:${marker} is stale — run pnpm run gen:manifest`);
   }
@@ -2372,7 +2372,7 @@ test("serendipity keeps historical feed and roster backfills alive", () => {
 
 test("serendipity hides collapsed description chrome and uses the Luna scrollbar", async () => {
   const serendipity = await readFile(new URL("serendipity/serendipity.js", ROOT), "utf8");
-  const luna = await readFile(new URL("www/luna.css", ROOT), "utf8");
+  const luna = await readFile(new URL("src/styles/luna.css", ROOT), "utf8");
 
   assert.match(
     serendipity,
@@ -2458,10 +2458,10 @@ test("both homepage fragments are preloaded, and the reason that is free still h
 test("homepage selects 12 photos and transfers all of them", async () => {
   const worker = await readFile(new URL("src/worker/home.js", ROOT), "utf8");
   const page = await readFile(new URL("www/index.html", ROOT), "utf8");
-  const luna = await readFile(new URL("www/luna.css", ROOT), "utf8");
-  const nav = await readFile(new URL("www/nav.js", ROOT), "utf8");
-  const hoist = await readFile(new URL("www/hoist.js", ROOT), "utf8");
-  const tooltip = await readFile(new URL("www/tooltip.js", ROOT), "utf8");
+  const luna = await readFile(new URL("src/styles/luna.css", ROOT), "utf8");
+  const nav = await readFile(new URL("src/client/nav.js", ROOT), "utf8");
+  const hoist = await readFile(new URL("src/client/hoist.js", ROOT), "utf8");
+  const tooltip = await readFile(new URL("src/client/tooltip.js", ROOT), "utf8");
 
   const build = await readFile(new URL("scripts/build.mjs", ROOT), "utf8");
   assert.match(worker, /pickRandom\(pool,\s*12\)/, "the per-request random draw must remain 12");
@@ -3249,7 +3249,7 @@ test("static page negotiation prefers 304, then DCZ with the current validator",
 });
 
 test("LWE pages share one base stylesheet and the build derives one site-page dictionary", async () => {
-  const base = await readFile(new URL("www/lwe-base.css", ROOT), "utf8");
+  const base = await readFile(new URL("src/styles/lwe-base.css", ROOT), "utf8");
   assert.match(base, /\.controls \{ display: inline-flex/);
   const build = await readFile(new URL("scripts/build.mjs", ROOT), "utf8");
   assert.match(build, /site-page corpus/);
@@ -6767,7 +6767,7 @@ test("the reader owns one focused Markdown walk over Readability's node", async
 
 test("the reader reports what it dropped, never only what it kept", async () => {
   const reader = readFileSync("./lens-reader/src/reader.js", "utf8");
-  const client = readFileSync("./www/lens-reader.js", "utf8");
+  const client = readFileSync("./src/client/lens-reader.js", "utf8");
   // The whole point of this lens is the GAP. A payload that reported only the
   // extraction would read as "here is the page", which is the claim /lens exists
   // to complicate — an extractor is guessing, and on a landing page it guesses
@@ -6785,7 +6785,7 @@ test("the reader reports what it dropped, never only what it kept", async () =>
 test("every machine lens tab has a label, and the reader is one of them", async () => {
   const { LENS_TAB_ORDER } = await import("../src/worker/lens.js");
   const server = readFileSync("./src/worker/lens.js", "utf8");
-  const client = readFileSync("./www/lens.js", "utf8");
+  const client = readFileSync("./src/client/lens.js", "utf8");
   assert.ok(LENS_TAB_ORDER.includes("reader"), "the reader tab must be in the tab order");
   // The strip renders from LENS_TAB_ORDER, so a key with no label ships an empty
   // button rather than failing. The client keeps its own LENS_LABEL map (no
@@ -6800,7 +6800,7 @@ test("every machine lens tab has a label, and the reader is one of them", async
 
 test("a ?lens= deep link works for every tab in the strip", async () => {
   const { LENS_TAB_ORDER } = await import("../src/worker/lens.js");
-  const client = readFileSync("./www/lens.js", "utf8");
+  const client = readFileSync("./src/client/lens.js", "utf8");
   // The client validates ?lens= against its OWN allowlist before honouring it.
   // That list was hand-written and stopped at six while the strip grew to eight,
   // so ?lens=reader and ?lens=wire fell back to Raw response — a deep link that
@@ -6817,7 +6817,7 @@ test("a ?lens= deep link works for every tab in the strip", async () => {
 
 test("the idle Lens shell defers its full client without losing the first action", () => {
   const server = readFileSync("./src/worker/lens.js", "utf8");
-  const boot = readFileSync("./www/lens-boot.js", "utf8");
+  const boot = readFileSync("./src/client/lens-boot.js", "utf8");
   const build = readFileSync("./scripts/build.mjs", "utf8");
 
   assert.match(server, /scripts: `<script src="\/lens-boot\.js" defer><\/script>`/,
@@ -6850,7 +6850,7 @@ test("the idle Lens shell defers its full client without losing the first action
   // the idle shell. Derive the expectation from the client instead. This is the
   // same failure the ?lens= tab list already had once, where a hand-written array
   // of six sat beside a strip of eight.
-  const client = readFileSync("./www/lens.js", "utf8");
+  const client = readFileSync("./src/client/lens.js", "utf8");
   const holders = new Set(
     [...client.matchAll(/(\w+)\s*=\s*new URLSearchParams\(location\.search\)\s*;/g)].map((m) => m[1]),
   );
@@ -6882,7 +6882,7 @@ test("the idle Lens shell defers its full client without losing the first action
 });
 
 test("the reader never renders an unmeasurable phase as 0 ms", () => {
-  const client = readFileSync("./www/lens-reader.js", "utf8");
+  const client = readFileSync("./src/client/lens-reader.js", "utf8");
   // A Worker's clock advances across I/O and never during synchronous execution,
   // so `parse`, `extract` and `markdown` come back 0 from production while
   // `fetch` carries real time. Measured through the live route 2026-08-10:
@@ -7091,7 +7091,7 @@ test("data: URIs are counted but kept out of the host roll call", async () => {
 test("the KV-hit flag does not collide with the target's own cache count", async () => {
   const { summariseWire } = await import("../src/worker/lens-wire.js");
   const worker = readFileSync("./src/worker/lens-wire.js", "utf8");
-  const pane = readFileSync("./www/lens-wire.js", "utf8");
+  const pane = readFileSync("./src/client/lens-wire.js", "utf8");
   // Caught in the browser 2026-08-11, rendering as "true served from cache".
   // The summary owns `cached` — how many of the TARGET's requests came from the
   // browser's own cache — and the KV-hit path was spreading `cached: true` over
@@ -7121,7 +7121,7 @@ test("siteOf groups subdomains without a public-suffix list, and says where it i
   // an approximation presented as a fact is the failure mode that matters.
   const src = readFileSync("./src/worker/lens-wire.js", "utf8");
   assert.match(src, /NOT a public-suffix list/, "the heuristic must be labelled as one in the source");
-  const pane = readFileSync("./www/lens-wire.js", "utf8");
+  const pane = readFileSync("./src/client/lens-wire.js", "utf8");
   assert.match(pane, /last two labels of the hostname/, "the pane must disclose the grouping rule to the reader");
 });
 
@@ -7423,7 +7423,7 @@ test("a capped level explains itself on every surface that shows the level", ()
   // sees 13/100 beside "Level 1" with no account of why the ladder was held.
   // It shipped that way once already, surfaced only in the SSR floor.
   const worker = readFileSync("./src/worker/lens.js", "utf8");
-  const client = readFileSync("./www/lens.js", "utf8");
+  const client = readFileSync("./src/client/lens.js", "utf8");
 
   assert.match(worker, /levelNote: readiness\.levelNote/, "the observation summary has to carry the note, or compare mode cannot show it");
   assert.match(worker, /overall, level: level\.number, levelName: level\.name, levelNote/, "the readiness envelope has to publish it");
@@ -7549,7 +7549,7 @@ test("the affinity rule exempts the header the ramp sampler sends", async () =>
 // alternative was a structural test, and a structural test cannot tell whether a
 // numeric enum survives — which is the one property this thing exists to have.
 function loadLensTools() {
-  const src = readFileSync("./www/lens-tools.js", "utf8");
+  const src = readFileSync("./src/client/lens-tools.js", "utf8");
   const win = {};
   new Function("window", "document", src)(win, undefined);
   return win.LensTools;
@@ -7622,7 +7622,7 @@ test("the Tools pane builds foreign strings as NODES, never as markup", () => {
   // www/terminal.js follows the same rule for third-party page titles; this is
   // that rule made checkable, because the failure is a stored XSS and the diff
   // that introduces it looks like ordinary convenience.
-  const src = readFileSync("./www/lens-tools.js", "utf8");
+  const src = readFileSync("./src/client/lens-tools.js", "utf8");
   const forms = src.slice(src.indexOf("function buildField"));
   assert.ok(!/\.innerHTML\s*=/.test(forms), "the form builders must not assign innerHTML");
   assert.ok(/createElement/.test(src) && /textContent/.test(src), "the builders create nodes and set text");
@@ -7632,7 +7632,7 @@ test("the Tools lens reads a catalogue and has NO path to calling a tool", () =>
   // The whole safety argument: /lens must never become a public button that
   // fires strangers' tools from this account's IP and under AadharshBot's
   // signature. Same shape as lens-wire's single-params.get assertion.
-  const client = readFileSync("./www/lens-tools.js", "utf8");
+  const client = readFileSync("./src/client/lens-tools.js", "utf8");
   const fetches = client.match(/fetch\(/g) || [];
   assert.equal(fetches.length, 1, "the pane makes exactly one request, to our own route");
   assert.ok(client.includes('fetch("/lens/tools?url="'), "and that request is /lens/tools");
diff --git a/scripts/gen-manifest.mjs b/scripts/gen-manifest.mjs
index faa612f35..e38b4f4e1 100644
--- a/scripts/gen-manifest.mjs
+++ b/scripts/gen-manifest.mjs
@@ -8,7 +8,7 @@
 // What this OWNS (regenerated between markers; do not hand-edit those regions):
 //   - src/worker/lib/site-manifest.js  — AGENT_SURFACES, the projection
 //     MCP resources/list serves (agents:true only, no shell bytes)
-//   - www/nav-run.js generated:garage-pages + generated:lwe-pages — the Run
+//   - src/client/nav-run.js generated:garage-pages + generated:lwe-pages — the Run
 //     palette's garage/lwe sub-entries (terse {label,path,hint}, no temporal data)
 //
 // What this deliberately does NOT own (hand-authored, VERIFIED by build.mjs #8):
@@ -26,7 +26,7 @@ import { pathToFileURL } from "node:url";
 import { PROFILES } from "../www/scripts/shell-data.mjs";
 
 export const MANIFEST = "config/site-manifest.json";
-const NAV = "www/nav-run.js";
+const NAV = "src/client/nav-run.js";
 const WORKER_MOD = "src/worker/lib/site-manifest.js";
 const FENCE_SECTIONS = [["garage", "garage-pages"], ["lwe", "lwe-pages"]];
 
diff --git a/scripts/perf-budget.mjs b/scripts/perf-budget.mjs
index 6b23fd209..3390ce0fd 100644
--- a/scripts/perf-budget.mjs
+++ b/scripts/perf-budget.mjs
@@ -227,8 +227,8 @@ console.log("perf-budget: aadhar.sh pre-deploy gate\n");
 
 // 1) luna.css parses clean ---------------------------------------------------
 try {
-  const css = await readFile("www/luna.css", "utf8");
-  const { warnings } = transformCss({ filename: "www/luna.css", code: Buffer.from(css), minify: false });
+  const css = await readFile("src/styles/luna.css", "utf8");
+  const { warnings } = transformCss({ filename: "src/styles/luna.css", code: Buffer.from(css), minify: false });
   if (warnings.length) bad(`luna.css: ${warnings.length} CSS parse warning(s): ${warnings.map((w) => w.message).join("; ")}`);
   else ok("luna.css parses clean (0 warnings)");
 } catch (e) {
diff --git a/www/hoist.js b/src/client/hoist.js
similarity index 100%
rename from www/hoist.js
rename to src/client/hoist.js
diff --git a/www/infotip.js b/src/client/infotip.js
similarity index 100%
rename from www/infotip.js
rename to src/client/infotip.js
diff --git a/www/lens-boot.js b/src/client/lens-boot.js
similarity index 100%
rename from www/lens-boot.js
rename to src/client/lens-boot.js
diff --git a/www/lens-browser.js b/src/client/lens-browser.js
similarity index 100%
rename from www/lens-browser.js
rename to src/client/lens-browser.js
diff --git a/www/lens-reader.js b/src/client/lens-reader.js
similarity index 100%
rename from www/lens-reader.js
rename to src/client/lens-reader.js
diff --git a/www/lens-tools.js b/src/client/lens-tools.js
similarity index 100%
rename from www/lens-tools.js
rename to src/client/lens-tools.js
diff --git a/www/lens-wire.js b/src/client/lens-wire.js
similarity index 100%
rename from www/lens-wire.js
rename to src/client/lens-wire.js
diff --git a/www/lens.js b/src/client/lens.js
similarity index 100%
rename from www/lens.js
rename to src/client/lens.js
diff --git a/www/nav-run.js b/src/client/nav-run.js
similarity index 100%
rename from www/nav-run.js
rename to src/client/nav-run.js
diff --git a/www/nav-tray.js b/src/client/nav-tray.js
similarity index 100%
rename from www/nav-tray.js
rename to src/client/nav-tray.js
diff --git a/www/nav.js b/src/client/nav.js
similarity index 100%
rename from www/nav.js
rename to src/client/nav.js
diff --git a/www/notepad.js b/src/client/notepad.js
similarity index 100%
rename from www/notepad.js
rename to src/client/notepad.js
diff --git a/www/quiz.js b/src/client/quiz.js
similarity index 100%
rename from www/quiz.js
rename to src/client/quiz.js
diff --git a/www/sw.js b/src/client/sw.js
similarity index 100%
rename from www/sw.js
rename to src/client/sw.js
diff --git a/www/tooltip.js b/src/client/tooltip.js
similarity index 100%
rename from www/tooltip.js
rename to src/client/tooltip.js
diff --git a/www/infotip.css b/src/styles/infotip.css
similarity index 100%
rename from www/infotip.css
rename to src/styles/infotip.css
diff --git a/www/luna.css b/src/styles/luna.css
similarity index 100%
rename from www/luna.css
rename to src/styles/luna.css
diff --git a/www/lwe-base.css b/src/styles/lwe-base.css
similarity index 100%
rename from www/lwe-base.css
rename to src/styles/lwe-base.css
diff --git a/www/nav-run.css b/src/styles/nav-run.css
similarity index 100%
rename from www/nav-run.css
rename to src/styles/nav-run.css
diff --git a/www/nav-tray.css b/src/styles/nav-tray.css
similarity index 100%
rename from www/nav-tray.css
rename to src/styles/nav-tray.css
diff --git a/src/worker/lens.js b/src/worker/lens.js
index e2761a9aa..16794f6ce 100644
--- a/src/worker/lens.js
+++ b/src/worker/lens.js
@@ -482,7 +482,7 @@ export async function handleLens(request, env, ctx) {
 // One label per lens, shared by the SSR tabs, the SSR machine header, and the
 // client (LENS_LABEL in lens.js must match). These are phrased as the question
 // each lens answers, not practitioner nouns, so a first-time visitor can read
-// the tab row as a menu of questions. Change here + in www/lens.js together.
+// the tab row as a menu of questions. Change here + in src/client/lens.js together.
 const LENS_TAB_LABELS = {
   readiness: "Agent-ready?",
   anatomy: "Raw response",
@@ -638,7 +638,7 @@ function lensStatusFragment(data, state) {
 // Two sites through one rubric, rendered from the same summaries /lens/compare
 // serves. This is the page's strongest single exhibit (a 13 next to a 93 does
 // more explaining than either scan alone), so it gets a real UI instead of
-// living as JSON only. Mirrored by renderVs() in www/lens.js — the SSR copy
+// living as JSON only. Mirrored by renderVs() in src/client/lens.js — the SSR copy
 // is the no-JS floor for a shared ?url=&vs= link, the client copy is what the
 // vs form renders without a round-trip through this template.
 const LENS_VS_SURFACES = [
@@ -890,12 +890,12 @@ export function renderLensShell(initial, state, inputValue, compare) {
     : "Human view &middot; the live page";
   // The header no longer repeats the lens name: the tab strip sits inside the
   // pane now, so the active tab IS the lens label. Must match renderMachine()
-  // and updateModeUi() in www/lens.js or the header rewrites on hydrate.
+  // and updateModeUi() in src/client/lens.js or the header rewrites on hydrate.
   const machineHeader = state.view === "delta" ? "Delta view &middot; What changes" : "Machine view";
   const browserHeader = "Browser Run &middot; Rendered";
   // Mode notes coach, they don't caption: each one asks for a prediction the
   // pane will then confirm or correct. Keep the strings byte-identical to
-  // MODE_NOTE in www/lens.js or the note visibly rewrites on hydrate.
+  // MODE_NOTE in src/client/lens.js or the note visibly rewrites on hydrate.
   const modeNote = state.view === "human"
     ? "Human is the page as a person receives it. Every other view subtracts the person."
     : state.view === "machine"