refactor(tooling): T-1290 — the assets domain, where OFF is the normal case

tooling/db/ (a misnamed directory: connectors, not database work),
trellis-batch.sh and synth_ui_sounds.py become `reach assets`:
audio {health,generate,batch,post {convert,normalize,trim,pipeline}},
image {health,generate}, trellis {health,generate,batch}, and synth-ui.
The four audio bash wrappers are retired, and tooling/db/ is gone.

Parity, from baselines taken before anything moved:

- the four UI-sound WAVs and the harmonic-synth WAVs (exponential and linear
  decay) are byte-identical
- the ffmpeg pipeline's decoded PCM is identical. Its .ogg bytes are not,
  even between two runs of the OLD code: Ogg picks a random stream serial,
  so the encoded file was never the right thing to compare
- the network success paths can't be run in a gate (Stable Audio and Trellis
  are kept off, Gemini costs money), so tooling/test_assets.py stands up a
  fake Gradio and pins every payload: the audio submit, Trellis's six-call
  session sequence with its 9-input image_to_3d, and the Gemini body. It
  failed when one Trellis value was mutated (7.5 → 7.0)

Failure classification, in endpoints.py, is the point of the port. The
services are OFF by design (VRAM on tower-of-joy, D-17), and the topology doc
warns against "fixing" one by restarting it. So a refused connection says OFF
and asks for the service to be turned on rather than restarted; a 4xx/5xx says
the request was rejected; 401/403 says credentials; 429 says quota; and an
unreachable Gemini blames the network, not VRAM.

Behaviour changes, each a failure that used to read as success or crash:

- audio batch and trellis batch exited 0 with failures in their summaries;
  they now print the summary and exit 1
- trellis generate on a missing image crashed with a TypeError
  (print(..., indent=2)); it now names the file, and checks it before the
  service so a typo is not reported as an outage
- the ffmpeg pipeline left its intermediates behind when a step failed

Structure: the connectors called each other as subprocesses (batch spawned
the connector, which spawned audio_post) and parsed each other's stdout. They
are now function calls, and ffmpeg is the only exec, through core/process.
ensure_venv() is removed: it os.execv'd into .venv, which D-263's exec rule
forbids, and reach declares the dependencies itself. config.json moved into
the domain deliberately, and the local-services rule follows it.

Output contract: results are still JSON on stdout with the same keys, so skill
readers keep working. Failures are an exit status with a Fix line, never
{"ok": false}. The audio-gen, glb-gen and image-gen skills, Araminta's agent
file and the allow-list are updated to match. glb-gen's "trellis-batch.sh is
hardcoded to one category" caveat is gone: batch takes --input-dir or --names.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.claude/rules/local-services.md

@@ -1,6 +1,6 @@
 # Local Services
 
-Endpoints are also preconfigured in `tooling/db/config.json`.
+Endpoints are also preconfigured in `tooling/domains/assets/config.json` (`reach assets …`).
 
 - **Gitea:** `https://git.schweitz.net` (login: `schweitz`; LAN-hairpinned via
   AdGuard — resolves to tower-of-joy directly on the home network). The old

.claude/rules/project-structure.md

@@ -59,12 +59,20 @@ docs/
   workshops/          # Workshop briefs and outputs
 db/
   schema.sql          # Database schema
-tooling/
-  db/                 # Asset/connector scripts (audio, image, trellis, wiki)
-    config.json       # Endpoint configuration
-    common.py         # Shared venv/config helpers
-    audio_connector.py    # Stable Audio Open connector
+tooling/              # ONE package behind the `reach` CLI (D-263) — `reach --help`
+  main.py             #   routing only; the domain registry
+  core/               #   config, console (the single output path), errors,
+                      #   process (the single guarded exec), jobs, command
+  domains/<name>/     #   router.py (transport) + service/helper modules (logic)
+    atlas/ planet/    #     the spatial ladder; `atlas planet` is its rung 3
+    ledger/           #     economics import — the sole systems.db generator
+    wiki/             #     wiki fill rates + GTTR hook
+    assets/           #     Stable Audio / Gemini / Trellis connectors
+      config.json     #       endpoint URLs (never keys — tracked file)
+    …                 #     check, validate, godot, visual, generate, blender, pr, jobs, dev
+  scripts/blender/    # Blender payloads — run by Blender's Python, never imported
   archive/            # Provenance only, never run: pql-migrate/, wiki-bootstrap/
+  test_*.py           # gate tests, run by `make test-tooling`
 .claude/
   agents/             # Agent personality files
   skills/             # Skill definitions