Index: src/assets/css/guardian.css
===================================================================
--- src/assets/css/guardian.css	(revision e84ce323dc022a50b67b2190764a08eff6302a1b)
+++ src/assets/css/guardian.css	(revision e84ce323dc022a50b67b2190764a08eff6302a1b)
@@ -0,0 +1,67 @@
+/* Guardian PWA (FEP-633c): its own calm, dark surface; the buoy orange is
+   the accent. Standalone: this page never inherits the site theme. */
+:root {
+  --bg: #141a24;
+  --card: #1e2632;
+  --ink: #e8ecf2;
+  --sub: #93a0b4;
+  --accent: #ff6b35;
+  --ok: #4caf7d;
+}
+* { box-sizing: border-box; }
+body {
+  margin: 0;
+  background: var(--bg);
+  color: var(--ink);
+  font: 16px/1.5 system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
+  padding-bottom: 40px;
+}
+.g-head {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 14px 16px;
+  background: var(--card);
+  position: sticky;
+  top: 0;
+}
+.g-head h1 { font-size: 1.15rem; margin: 0; flex: 1; }
+.g-buoy { font-size: 1.5rem; }
+.g-me { color: var(--sub); font-size: .9rem; }
+#site-picker {
+  background: var(--bg); color: var(--ink);
+  border: 1px solid #33405233; border-radius: 8px; padding: 6px 8px;
+}
+main { max-width: 640px; margin: 0 auto; padding: 0 16px; }
+h2 { font-size: 1rem; margin: 26px 0 10px; }
+.g-sub { color: var(--sub); font-size: .85rem; margin: 0 0 10px; }
+.g-empty { color: var(--sub); font-size: .9rem; }
+.g-msg { font-size: .85rem; color: var(--ok); }
+.g-msg.err { color: #ff7a7a; }
+.g-list { display: flex; flex-direction: column; gap: 8px; }
+
+.g-card {
+  background: var(--card);
+  border-radius: 12px;
+  padding: 12px 14px;
+}
+.g-card.help { border-left: 3px solid var(--accent); }
+.g-card .who { font-weight: 600; }
+.g-card .when { color: var(--sub); font-size: .78rem; }
+.g-card .body { margin-top: 6px; font-size: .92rem; overflow-wrap: anywhere; }
+.g-card .body img { max-width: 100%; border-radius: 8px; }
+.g-card .row { display: flex; align-items: center; gap: 10px; }
+.g-card .row .grow { flex: 1; }
+.g-card .pend { color: var(--sub); font-size: .8rem; }
+
+#adopt-form { display: flex; gap: 8px; margin-bottom: 8px; }
+#adopt-form input {
+  flex: 1;
+  background: var(--card); color: var(--ink);
+  border: 1px solid #33405255; border-radius: 10px; padding: 10px 12px;
+}
+button {
+  background: var(--accent); color: #fff; border: 0;
+  border-radius: 10px; padding: 10px 16px; font-weight: 600; cursor: pointer;
+}
+button.quiet { background: #33405255; color: var(--ink); font-weight: 500; }
Index: src/assets/js/guardian.js
===================================================================
--- src/assets/js/guardian.js	(revision e84ce323dc022a50b67b2190764a08eff6302a1b)
+++ src/assets/js/guardian.js	(revision e84ce323dc022a50b67b2190764a08eff6302a1b)
@@ -0,0 +1,162 @@
+/* Guardian PWA client (FEP-633c): renders the dashboard state, adopts wards,
+   and manages the guardian push channel (web-push slice reused: alert types
+   'help' + 'guardian'). No framework, no inline scripts (CSP). */
+(function () {
+  'use strict';
+  var state = JSON.parse(document.getElementById('guardian-state').textContent || '{}');
+
+  function el(tag, cls, text) {
+    var n = document.createElement(tag);
+    if (cls) n.className = cls;
+    if (text != null) n.textContent = text;
+    return n;
+  }
+  function handleOf(uri, cached) {
+    if (cached) return cached;
+    try { var u = new URL(uri); return '@' + u.pathname.split('/').filter(Boolean).pop() + '@' + u.host; }
+    catch (e) { return uri; }
+  }
+  function when(s) {
+    return String(s || '').slice(0, 16).replace('T', ' ');
+  }
+
+  // ── Message centre: help requests ──────────────────────────────────────
+  function renderHelp() {
+    var list = document.getElementById('help-list');
+    list.textContent = '';
+    (state.help || []).forEach(function (h) {
+      var card = el('div', 'g-card help');
+      var row = el('div', 'row');
+      var who = el('span', 'who', h.actor_name || handleOf(h.actor_uri, h.actor_handle));
+      var at = el('span', 'when', when(h.published || h.created_at));
+      row.appendChild(who); row.appendChild(at);
+      card.appendChild(row);
+      var body = el('div', 'body');
+      body.innerHTML = h.content || '';           // sanitized server-side on ingest
+      card.appendChild(body);
+      if (h.note_url) {
+        var link = el('a', 'when', 'open');
+        link.href = h.note_url; link.target = '_blank'; link.rel = 'noopener';
+        card.appendChild(link);
+      }
+      list.appendChild(card);
+    });
+    document.getElementById('help-empty').hidden = (state.help || []).length > 0;
+  }
+
+  // ── Wards + pending offers ─────────────────────────────────────────────
+  function wardCard(w, pending) {
+    var card = el('div', 'g-card');
+    var row = el('div', 'row');
+    var who = el('span', 'who grow', handleOf(w.other_uri, w.other_handle));
+    row.appendChild(who);
+    if (pending) row.appendChild(el('span', 'pend', state.strings.pending));
+    var btn = el('button', 'quiet', pending ? state.strings.retract : state.strings.release);
+    btn.addEventListener('click', function () {
+      fetch('/guardian/wards/remove', {
+        method: 'POST', headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ uri: w.other_uri, site: state.site }),
+      }).then(refresh);
+    });
+    row.appendChild(btn);
+    card.appendChild(row);
+    return card;
+  }
+  function renderWards() {
+    var wl = document.getElementById('wards-list');
+    var ol = document.getElementById('offers-list');
+    wl.textContent = ''; ol.textContent = '';
+    (state.wards || []).forEach(function (w) { wl.appendChild(wardCard(w, false)); });
+    (state.pendingOffers || []).forEach(function (w) { ol.appendChild(wardCard(w, true)); });
+    document.getElementById('wards-empty').hidden =
+      (state.wards || []).length + (state.pendingOffers || []).length > 0;
+  }
+
+  function refresh() {
+    fetch('/guardian/api/state?site=' + encodeURIComponent(state.site))
+      .then(function (r) { return r.json(); })
+      .then(function (s) { if (s && !s.error) { state = s; renderHelp(); renderWards(); } });
+  }
+
+  // ── Adopt ──────────────────────────────────────────────────────────────
+  document.getElementById('adopt-form').addEventListener('submit', function (ev) {
+    ev.preventDefault();
+    var input = document.getElementById('adopt-handle');
+    var msg = document.getElementById('adopt-msg');
+    var handle = input.value.trim();
+    if (!handle) return;
+    msg.hidden = false; msg.classList.remove('err'); msg.textContent = '…';
+    fetch('/guardian/adopt', {
+      method: 'POST', headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ handle: handle, site: state.site }),
+    }).then(function (r) { return r.json().then(function (j) { return { ok: r.ok, j: j }; }); })
+      .then(function (res) {
+        if (res.ok) { msg.textContent = state.strings.sent; input.value = ''; refresh(); }
+        else { msg.classList.add('err'); msg.textContent = state.strings.failed + ': ' + (res.j.error || '?'); }
+      })
+      .catch(function () { msg.classList.add('err'); msg.textContent = state.strings.network; });
+  });
+
+  // ── Site picker ────────────────────────────────────────────────────────
+  var picker = document.getElementById('site-picker');
+  if (picker) picker.addEventListener('change', function () {
+    location.href = '/guardian?site=' + encodeURIComponent(picker.value);
+  });
+
+  // ── Push: the guardian channel (help + guardian alerts) ────────────────
+  var toggle = document.getElementById('push-toggle');
+  var pmsg = document.getElementById('push-msg');
+  function pushState() {
+    if (!('serviceWorker' in navigator) || !('PushManager' in window)) { toggle.disabled = true; return; }
+    navigator.serviceWorker.register('/sw.js').catch(function () {});
+    navigator.serviceWorker.ready
+      .then(function (reg) { return reg.pushManager.getSubscription(); })
+      .then(function (sub) {
+        toggle.textContent = sub ? toggle.dataset.onLabel : toggle.dataset.offLabel;
+        toggle.dataset.subscribed = sub ? '1' : '';
+      });
+  }
+  function urlB64(base64) {
+    var pad = '='.repeat((4 - (base64.length % 4)) % 4);
+    var b = (base64 + pad).replace(/-/g, '+').replace(/_/g, '/');
+    var raw = atob(b); var arr = new Uint8Array(raw.length);
+    for (var i = 0; i < raw.length; i++) arr[i] = raw.charCodeAt(i);
+    return arr;
+  }
+  toggle.addEventListener('click', function () {
+    pmsg.hidden = true;
+    navigator.serviceWorker.ready.then(function (reg) {
+      if (toggle.dataset.subscribed) {
+        reg.pushManager.getSubscription().then(function (sub) {
+          if (!sub) return;
+          fetch('/push/unsubscribe', {
+            method: 'POST', headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ endpoint: sub.endpoint }),
+          }).then(function () { return sub.unsubscribe(); }).then(pushState);
+        });
+        return;
+      }
+      fetch('/push/vapid').then(function (r) { return r.json(); }).then(function (v) {
+        if (!v.publicKey) throw new Error('no key');
+        return reg.pushManager.subscribe({ userVisibleOnly: true, applicationServerKey: urlB64(v.publicKey) });
+      }).then(function (sub) {
+        return fetch('/push/subscribe', {
+          method: 'POST', headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({
+            subscription: sub.toJSON(),
+            // The guardian channel: calls for help + adoption traffic.
+            alerts: { help: 1, guardian: 1, dm: 1, follow: 0, reply: 0, like: 0, boost: 0 },
+            uaLabel: 'Guardian PWA',
+          }),
+        });
+      }).then(pushState).catch(function (e) {
+        pmsg.hidden = false; pmsg.classList.add('err');
+        pmsg.textContent = 'Push niet beschikbaar: ' + e.message;
+      });
+    });
+  });
+
+  renderHelp(); renderWards(); pushState();
+  // Live-ish: poll the state every 45s while the PWA is open.
+  setInterval(refresh, 45000);
+})();
