- Shipped
- September 6, 2026 at 6:26 AM UTC
- Author
- Kamo
- Commit
- 1c3c5ed
menu subscribes to over the existing chat STOMP connection. Built as a twin of the training relay — same subject shape, same single-token rule, same core-NATS-with-no-stream decision — because it is the same kind of thing: a small live number a console seeds over REST and then keeps current. The destination is guarded in StompDestinationAuthz on SUBSCRIBE and on SEND, and it needs its own reason rather than an analogy to the badges above it. A member's remaining allowance is a live readout of how much they have been working and how hard, refreshed while they type. Unguarded it lets anyone on the socket watch a colleague's working day; and because the simple broker routes by destination without caring which command carried the frame, a guard on SUBSCRIBE alone would still let a client write a colleague a comfortable number minutes before they run out.