# Packet C receipt — generation shops to cel

Helios, 13 September 2026 UTC. Actor: Cursor on Icarus (`centaur-macmini-1`).

Packet B-boundary remains proven on this branch (ancestors `45b7d1c` / `008124e` / `ff99352`). Packet D artist-from-blank (mint+setCel+holds, 240@24) is **passing** on this branch. Studio HTTP MCP `tools/list`+`tools/call` **passing**. Live GUI Request/Run/Accept **passing** on local Vite. Railway live SHA **matches** `f9beb591` (not packet-c). Remaining: creator approval of live artwork, Studio GUI movie-with-sound, Drive→Railway land of packet-c, this worker’s Cursor catalog has no `korgi` namespace, Cursor desktop live bind unproven.

No PixelLab spend. No Higgsfield UI / Higgsfield MCP. No `git push origin`. No Fast-forward of `main`.

**Drive is SSOT.** No GitHub `origin` is by design, not a gap. Railway SUCCESS `9298f5e8` vs `gdrive/main` `f9beb591` is a measurement (live `/assets/index-yUXqT8Xy.js` matches that Docker build; the service has no GitHub repo). Packet-c on `gdrive` is the work. Shipping it is Drive→Railway, not `git push origin`. Letter: [`DRIVE_SSOT.md`](DRIVE_SSOT.md). Receipt: [`packet-c/drive-ssot-receipt.json`](packet-c/drive-ssot-receipt.json).

## Implementation / test

| Item | Value |
|---|---|
| Branch | `cursor/astra-gates-0101` (packet-c live restamp on this branch) |
| Paid live generate script | `a4bd23143468a518b428918516f206163f47997e` |
| Paid live restamp | `2026-09-13T13:30:18Z` — Higgsfield Soul v2, dest A2 **1280×720** after prepare (not 32×18 squash) |
| Prior packet-c work branch | `cursor/packet-c-0101` |
| Work branch tip (older packet-c proof) | `b65030bc0a897f34a0a828a05e44a3dbb6ba6412` |
| Parent of this proof | `13158c035dc8890211b657517ed4fbc08c8d03a8` |
| Parent before give-this restamp | `c593edc441f9313f501121842503afa8e5c41185` |
| Give-this restamp | `d3c44ff19b08c793ba78bbcb98dbeecf61c22495` |
| Previous tip (before Soul v2) | `1d1a65f41cf89c7d9769dd48607de4029a0a9b63` |
| Soul v2 shop path | `852f19b270e19eb10a18cda416607e48d96609b2` |
| Higgsfield live generate + receipts | `dac82543648b123158721be6143bd45bbfb249e5` |
| Packet restamp (403-as-current letter) | `972f4ea0986f292b0d0f2c031f71ca8822b3efae` — history |
| Shops + generate route | `a5a630583b88963dfc6ae7aa3f60aca6513ca609` |
| Live generate / fitted scan pack | `3e2149d37086b567e274d4ce07015b855cba0288` |
| Packet B identity-pin | `ff99352afd1e26400cc0f72ec658c6cb7d520861` |
| `main` | `f9beb5910dc8123ffcf797de6c6ad9e18cdd2274` |
| Host | Icarus, Darwin 25.6.0 arm64 |
| Node | v22.23.1 |
| Typecheck | `npx tsc --noEmit` — exit 0 |
| Tests (this restamp) | packet-c 11 + generation-recovery 11 pass; `tsc --noEmit` exit 0. Do not add historical suite totals. |
| Fixture `.korgi` | `docs/oss/packet-c/packet-c-boundary.korgi` (`korgi.fixture`; zip timestamps are not content identity) |
| Live `.korgi` (OpenAI) | `docs/oss/packet-c/packet-c-live.korgi` (`openai.images`, attempt `gen-A2-1`) |
| Live shop PNG (OpenAI) | `docs/oss/packet-c/live-generate.png` sha256 `199f31783fdb0816d1cc047c432232e67a9bd67da75e6a658ecf260d05833be6` |
| Live `.korgi` (Higgsfield) | `docs/oss/packet-c/higgsfield-live.korgi` (`higgsfield.cloud`, attempt `gen-A2-1`, 7 503 900 bytes) |
| Live shop PNG (Higgsfield) | `docs/oss/packet-c/higgsfield-live-generate.png` **2048×1152** sha256 `f5a75e91be1a673229dfeec55773873cbe813625d504dbb452cbb70f879cc79c` |
| Live prepared PNG (Higgsfield) | `docs/oss/packet-c/higgsfield-live-prepared-1280x720.png` **1280×720** sha256 `dc777b9489abdbc8236fd8440599e2e0aaf163bb6d970522f961def30ad249cb` |
| Historical squash PNG (do not treat as current) | sha256 `438e720c6d2d4e813b7ecc3b871eca199983ac769a56a9a28836bb3260bc9f0c` dest A2 32×18 at `2026-09-13T02:29:42Z` |

Commands:

```bash
npx tsc --noEmit
node --experimental-strip-types --test \
  src/lib/korgi/packet-c.test.ts \
  src/lib/korgi/mcp/mcp.test.ts \
  src/lib/korgi/mcp/packet-a.test.ts \
  src/lib/korgi/packet-d.test.ts \
  src/lib/korgi/hero-fixture.test.ts
```

Live generate (Node equivalent of `POST /api/korgi/generate`). Paid shops require `KORGI_PAID_GENERATION=1` and `spendAuthorized`. `shops.env` loads from `generation-credentials.server.ts` when present (mode 600).

```bash
KORGI_PAID_GENERATION=1 \
  node --experimental-strip-types scripts/packet-c-live-generate.ts
# Higgsfield default shop: POST /higgsfield-ai/soul/v2/standard 16:9 / 1080p
# passing 2026-09-13T13:30:18Z — original 2048×1152 kept; dest A2 1280×720 after prepare
# cost.amount null / state unknown / estimateAmount 0.09 / pixelLabUsd 0
KORGI_PAID_GENERATION=1 KORGI_LIVE_SHOP=openai.images \
  node --experimental-strip-types scripts/packet-c-live-generate.ts
node --experimental-strip-types scripts/packet-c-live-probe.ts
```

## What “generated inside KORGI” means here

```text
korgi.gen.request (Studio; paid shops require spendAuthorized)
→ durable job (attemptId, providerId, sourceRevision, purpose, consent, cost estimate)
→ korgi.gen.fulfill { running: true } before the shop HTTP call
→ runShopAction / studioGenerationProvider(job.providerId) → Higgsfield Cloud REST or OpenAI Images
→ korgi.gen.fulfill stores kind:generate bytes (not yet a cel); cost.amount stays null when unknown
→ korgi.gen.prepare at declared shot 1280×720 (original generate asset kept)
→ review
→ korgi.gen.accept with original bytes + preparedBytes → applyIngestScan at shot size
→ save / unpack reopen keeps original + prep-* + scan-A2 + the job; generation is not repeated
```

Mint (`korgi.draw.mintDrawing`) and holds (`korgi.film.editCelHold`) stay STUDIO_ONLY. Generation does not mint and does not patch `celColumns`.

## Shops

| Shop | Role | Status |
|---|---|---|
| `higgsfield.cloud` | Named Studio shop. Higgsfield Cloud REST `https://api.higgsfield.ai`. Soul location `POST /higgsfield-ai/soul/v2/standard` (`soul/v2/standard`). Body: `prompt`, `aspect_ratio` `16:9`, `resolution` `1080p`. No `location` field. `/higgsfield-ai/soul/location` estimate **404** `model_not_found`. Prior `soul/standard` 1080p estimated **3.000** credits and **403** `not_enough_credits`; `2K` **422**. `probe()` with `HF_API_KEY_ID` / `HF_API_KEY_SECRET`. **Cursor Higgsfield MCP authenticated is not the Studio REST connection.** | Live REST generate **passing** `2026-09-13T13:30:18Z` via `KORGI_PAID_GENERATION=1` + `spendAuthorized` + `shops.env` / `runShopAction`: job `gen-A2-1`. Shop PNG **2048×1152** (wired `1080p`, not a `2K` request). Prepare **1280×720**. Dest A2 **1280×720**. Original sha256 `f5a75e91be1a673229dfeec55773873cbe813625d504dbb452cbb70f879cc79c`. Cost `amount: null`, `state: unknown`, `estimateAmount: 0.09`, `providerRequestId: eec5aa18-7b1a-4412-b27c-dd560c9e350c`. This still is a live-action photograph with on-image marks; it is not an acetate cel, and the script auto-accepted it (no creator review). Receipt: `higgsfield-live-generate-receipt.json`. Mock-fetch generate **passing**. |
| `openai.images` | Named Studio shop. OpenAI Images `https://api.openai.com/v1` model `gpt-image-1`. `probe()` with `OPENAI_API_KEY`. | Live REST probe **authenticated** (`GET /v1/models` HTTP **200**). Live generate **passing**: `korgi.gen.request` → `runShopAction` generate → fulfill → accept → pack. Job `gen-A2-1` dest A2 32×18. Receipt: `live-generate-receipt.json`. |
| `korgi.fixture` | In-process provider for tests only. Same `probe` / `generate` interface. Not a shop. Returns the known 32×18 PNG. | **passing** for the job-to-cel slice. Cost `0 local`. |

Draw Things is not a shop. Imagine / Cursor image were not bound. PixelLab spend is **$0**.

`~/.config/korgi/secure-mcp-tunnel/shops.env` exists (mode 600). Names only: `HF_API_KEY_ID`, `HF_API_KEY_SECRET`, `OPENAI_API_KEY`. Values are not in git. `generation-credentials.server.ts` loads that file when the names are unset.

## korgi-shops tunnel

| Item | Value |
|---|---|
| `~/.config/korgi/secure-mcp-tunnel/connection.json` | **exists** (alias `korgi-shops`) |
| `tunnel_id` | **set** (`tunnel_6aa5ed4bbeb8819192585f45f22adf49`) |
| Reverify | **healthy** `/healthz` HTTP **200** `live`, `/readyz` HTTP **200** `ready` (re-GET 2026-09-13). Remote lookup with vault `TUNNEL_TOKEN` **succeeded**. Poller `tunnel-client health --require-control-plane-poll` **ok** (`control_plane_poll.ok: true`, last success `2026-09-13T05:03:33Z`). `runtimes status.control_plane_poll_health` is a **different** object: **unknown** / no live admin UI snapshot. Acetate `tunnel.env` was not sourced. Receipt: `docs/oss/packet-c/korgi-shops-tunnel-receipt.json`. |

## Status rows

| Gate | Label |
|---|---|
| Request through KORGI registry | **passing** (`korgi.gen.request`) |
| Durable job (attempt, provider, source revision, purpose, cost) | **passing** |
| Returned through validated ingest | **passing** (`korgi.gen.accept` → `applyIngestScan`) |
| Prepare at declared shot, then accept | **passing** live Higgsfield: original 2048×1152 kept; dest A2 1280×720. Accept without prepare still throws when sizes differ |
| Reviewed / accepted before dest cel changes | **passing** fulfill does not rewrite A2. This live script auto-accepted; a person has not approved the still |
| Available after reopen without repeating generation | **passing** unpack restores original generate asset + `prep-*` + `scan-A2` + accepted job |
| Failed fulfill cannot register generate bytes | **passing** (`failBeforeByteStorage` / `failBeforeProjectCommit`) |
| Higgsfield Cloud REST authenticated connection | **passing** live generate `2026-09-13T13:30:18Z` `gen-A2-1` dest A2 **1280×720**. Cost unknown (not coerced to 0) |
| OpenAI Images authenticated connection | **passing** live probe (restamp). Live generate **passing** `gen-A2-1` (PNG sha256 unchanged on disk) |
| `korgi-shops` tunnel | **healthy**. Poller `control_plane_poll` **passing**. Admin-UI snapshot field unknown |
| Packet A Studio HTTP `tools/list`+`tools/call` | **passing** (`POST /api/korgi/mcp`, 68 tools, `korgi_settings_setName` Doorway). Cursor worker catalog has **no korgi**. HTTP host ≠ browser zustand |
| Packet D artist-from-blank | **passing** (`packet-d.test.ts`, `packet-d-artist.korgi`). Movie-with-sound is not this packet |
| Live GUI Generate | **passing** on local Vite `http://127.0.0.1:8080/` Request/Run/Accept `gen-A1-1`. Production GUI is `f9beb591` and does not prove packet-c |
| Railway vs tag | live SUCCESS `9298f5e8` / `index-yUXqT8Xy.js` = `f9beb591`. Not packet-c |
| `main` / Railway land of packet-c | **blocked**: Railway source none; no `origin`; this session does not `railway up` an unmerged tree. Drive is SSOT ([`DRIVE_SSOT.md`](DRIVE_SSOT.md)) |

## Live shop samples after accept

Higgsfield live dest A2 is **1280×720** after `korgi.gen.prepare`. The original shop PNG stays 2048×1152 in the pack. OpenAI live dest A2 is still the earlier **32×18** squash run (`packet-c-live.korgi`); that shop was not re-run.

| Shop | Original | Prepared / frame 2 |
|---|---|---|
| `openai.images` | `live-generate.png` | `docs/oss/packet-c/live-accepted-frame2.png` (32×18 historical) |
| `higgsfield.cloud` | `higgsfield-live-generate.png` (2048×1152) | `higgsfield-live-prepared-1280x720.png` / `higgsfield-live-accepted-frame2.png` (1280×720) |

## Remaining constraints (not “later”)

- **Composer reject 2026-09-13** — Mitchell: dest A2 / Higgsfield stills are **horrible**. Not acetate. Not a production cel. Not Packet C creator-approved artwork. Gallery https://gallery.smokehounds.store/korgi/packet-c/ already labels REJECT. Auto-accept was wrong. Design brief: [`ASTRA_BRIEF_WEB_AGENT.md`](ASTRA_BRIEF_WEB_AGENT.md).
- **Creator approval** — this paid run auto-accepted. The still is a live-action photograph with on-image marks, not an acetate production cel.
- **Studio GUI movie-with-sound** — clustered Matroska PCM mux is proven in tests (`mux-webm-av`); the Studio GUI export is still WebCodecs video-only.
- **This Helios worker Cursor catalog** has no `korgi` namespace. Product surfaces: project `.cursor/mcp.json` (stdio, unbound until bind) and Studio HTTP `POST /api/korgi/mcp`. `~/.cursor/mcp.json` still has no korgi.
- **HTTP MCP host ≠ browser zustand** — Node process host vs client store (process boundary). One authoritative Project Host is implemented; Cursor desktop live bind is unproven.
- **Drive→Railway land of packet-c** — Railway source none; this session does not `git push origin` and does not `railway up` this unmerged tree. See [`DRIVE_SSOT.md`](DRIVE_SSOT.md).