Make Piggy part of the product rather than a guest in it

Piggy arrived as a chat panel bolted onto a CRM and then grew a workspace
around it. The layout was already right — the audit found the approval card
to be the best-designed object in the repo, and the account page's empty
panels less finished than anything in the workspace. What was wrong was
vocabulary: nobody had written the small things down, so both halves kept
inventing them.

Piggy was drawn with five different marks — a pig in the dock, a sparkle in
the sidebar and again on the model picker, a speech bubble on the Ask
buttons, and a stock robot glyph on every assistant message, which is the
one people look at most. There is now one mark. The composer, which is the
first control in the product since sign-in lands on /piggy, was the only
un-adapted shadcn field left: 6px radius against a 12px Send button it sat
8px from. A stat tile had been reinvented six times at three numeral scales,
and the same uppercase micro-label existed in five variants, two of them one
tab apart in the same rail. There were 63 hand-written font sizes: not a
scale, sixty-three opinions.

Underneath that, the focus ring was invisible. The global rule used
ring-accent, which Tailwind deliberately aliases onto the hover tint, so the
ring measured 1.01:1 against the light canvas — no visible focus indicator
anywhere in the product, for any accent, in either theme. It is ring-brand
now and measures 17:1. The warning, positive and info tones were darkened
until each clears 4.5:1 on a card, on inset and on its own chip, and the
light canvas moved to 98% so a card lifts without leaning on its shadow.

The mobile work is the part worth reading. A landscape phone gave the
transcript 28% of the viewport and a keyboard-up phone 16%, against a 45%
floor — and the fixed tab bar painted over the composer, covering the safety
sentence and half the Send button, because two source comments asserted the
bar stood down on short viewports and it never had. Both fixed and measured
by hit-testing rather than by screenshot. The composer itself was 64px tall
for a blank second line nobody typed, because the auto-resize effect sizes
to scrollHeight and scrollHeight counts rows — a CSS height could not win
against an inline style, so the attribute was the honest lever.

Verified across both themes driven through the app's own control: no
horizontal overflow on 15 routes at four viewports, 672 stat values that fit,
297 labels at exactly 11px/500, Escape returning focus to its opener rather
than the body on every overlay, and a rejected write no longer reporting
"Succeeded" with a green check.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

apps/piggy/test/chat-server.test.ts

@@ -657,7 +657,10 @@ test('a model that stops on its own error does not report a finished answer', as
   assert.ok(!frames.some((frame) => frame.type === 'done'));
   // The upstream body is not ours to relay to the browser, but it belongs in
   // the ledger, where an operator can read it.
-  assert.equal(runs[0]?.closed?.error, 'upstream returned 502');
+  // The attempt count rides along with it: one go, which is the healthy
+  // reading and the one an operator needs in order to notice the days when it
+  // is not one.
+  assert.equal(runs[0]?.closed?.error, 'upstream returned 502 (1 attempt)');
 });
 
 test('a turn that ends badly still bills what it actually spent', async (t) => {
@@ -925,6 +928,7 @@ test('a proposed write waits for the user, then applies once and only once', asy
     approvalsRequested: 1,
     approvalsApplied: 1,
     modelCalls: 1,
+    inference: { attempts: 1 },
   });
 });
 
@@ -998,6 +1002,7 @@ test('a declined write is reported to the model as declined', async (t) => {
     approvalsRequested: 1,
     approvalsApplied: 0,
     modelCalls: 1,
+    inference: { attempts: 1 },
   });
 });