[h0ffmann]

Requested by Hoffmann · project thread

What was asked

you did not use the right image, also this square should be above the book shelf, with the DOIs

the puzzle must be enabled on the door, locked before. Only users submitting an email form will be able to play the game, after the door

The owner chose to keep the emails on the room's own server.

What it does

• The board is now square (0.72 m) on the back wall above the bookshelf of the works with a DOI. It shows the owner's image exactly as given (public/textures/tyler-durden-bot.png, dark on white, sharp pixels). In The room on a phone; the door's lock; the screen guard; Nash the cat; tyler-durden-bot's big board #30 I had cropped it and turned it white. The red bulbs still blink by night only. The shelf shot (key 4) is widened to show both, and wipBoardArt is gone.
• The loop shot (key 9) shows the door, so the puzzle can be found without dragging.
• The door's gate (config.door.gate, src/lock.js): a click on the locked door asks for an email first. The form posts {"email"} to /live/door. On a 2xx answer the keypad shows, and the browser remembers it, so the form is asked only once. On any other answer the door stays locked and says so. Typing in the form never moves the camera. The privacy line under the field says where the address goes.
• scripts/listeners.mjs gets POST /live/door. It accepts a body of at most 1 kB that is a valid email and appends time<TAB>email to DOOR_FILE. It answers 204, 400, 413, or 429 above 30 a minute. Tested with curl: 204, 400 (not an email), 400 (not JSON), 413 (2 kB). The radio part is unchanged.
• piabrota/nix-os gets the matching PR: a state directory (mode 0700) and DOOR_FILE for the room-listeners service. It takes effect when nix-os pins the room at this PR's merge.
• Replay row 26 in both READMEs; AGENTS.md updated.

Proof

The board above the shelf (key 4)	The loop and the door (key 9)	The email gate

Video, 54 s by night: docs/record/room.mp4. The board is hovered at the shelf. At the front wall the video clicks the door, types an email, sends it, enters the code, and the door opens. just blow-light passes (at most 0.20 % above 230).

node scripts/check.mjs and npx vite build pass.

Not checked

• The gate against the real server. vite preview has no /live/ server, so just record answers /live/door itself with a 204. The endpoint was tested on its own with curl.
• A real phone or a real GPU. The pictures come from headless Chromium rendering in software.
• The gate only checks that an email was sent, not that the address is real. A visitor can also clear site data to be asked again.

---

Generated by Claude Code