phase: 05_anonymous_lobbies_and_room_lifecycle

All green. Final report:

**Phase 05 final verification pass — complete, 100% green.**

**Verified (all 5 tasks already in `complete/`):**
- `RoomSupervisor` import, `POST /api/rooms` → 5-char Crockford code (`VBE8Y`), `GET /api/rooms/{code}` → seat list, join/session/404 flows — all live over HTTP
- `docs/ROOMS.md` present with FSM diagram, crash-isolation and "What is lost on restart" sections
- Phase tests all pass: lifecycle 4-seat `WON`→`LOBBY` (7 tests), crash isolation, GC/idle via `FakeClock` (no sleeps), FSM, tick cadence, supervisor, sessions

**Results:**
- `uv run pytest` → **1506 passed, 0 failed**; coverage **98.89%** (>90% floor; `room.py` 99%, `rooms.py` 97%, `sessions.py` 99% — all ≥95% per-module gate)
- `uv run ruff check .` → clean; `uv run pyright` → 0 errors; `uv run undercooked-levels validate` → content OK; server boots, `/healthz` 200, client at `/` 200
- e2e US-01 suite re-run after fixes: 10 passed

**Documentation — inconsistencies found and fixed:**
- `README.md`: status now lists phases 01–05 complete, next pending `06_realtime_websocket_protocol`; dropped "(phase 05, in progress)"; 3 stale "Not implemented until phase 05." references corrected
- `app/static/js/app.js` + `tests/e2e/test_us01_landing_surface.py`: placeholder string updated in lockstep to "Not implemented until phase 07." (phase 07 task 02 wires the buttons), comments updated to reflect phase-05 completion
- `AGENTS.md`: reviewed in full — §6 already documents all phase-05 modules accurately; no changes needed

**Decisions:** no code behavior changes beyond the user-visible placeholder string; no live-infrastructure touch (only a local loopback server, stopped).

**Next pending phase:** `06_realtime_websocket_protocol`.

app/static/js/app.js

@@ -1,8 +1,9 @@
 // Undercooked — client shell entry point (phase 01).
 //
-// There is no game logic here on purpose. Phase 05 replaces the placeholder
-// button handlers with the lobby flow, phase 06 adds net/ (WebSocket + snapshots),
-// phase 07 adds render/ (Canvas 2D). What this file owns today:
+// There is no game logic here on purpose. Phase 05 shipped the server-side
+// room shell (supervisor, room FSM, session store); phase 06 adds the WebSocket
+// transport and phase 07 replaces the placeholder button handlers with the lobby
+// flow and adds render/ (Canvas 2D). What this file owns today:
 //   * the anonymous per-tab session token (PLAN.md A16),
 //   * the last room code typed in this tab, so a reload can rejoin fast,
 //   * mounting the lobby screen and announcing state into #status.
@@ -12,7 +13,7 @@
 const TOKEN_KEY = "uc.token";
 const LAST_CODE_KEY = "uc.lastCode";
 const CODE_LENGTH = 5;
-const NOT_IMPLEMENTED = "Not implemented until phase 05.";
+const NOT_IMPLEMENTED = "Not implemented until phase 07.";
 const READY_MESSAGE = "Pick a kitchen to start.";
 
 /** Base64url without padding, so the token is safe in a query string or header. */
@@ -92,7 +93,8 @@ export function mount(root = document) {
 
   if (createButton) {
     createButton.addEventListener("click", () => {
-      // Phase 05: POST to the room supervisor and open /ws/{code}.
+      // Phase 07 (on the phase-06 transport): POST to the room supervisor,
+      // open /ws/{code}.
       announce(NOT_IMPLEMENTED, root);
     });
   }
@@ -108,7 +110,8 @@ export function mount(root = document) {
         return;
       }
       rememberCode(code);
-      // Phase 05: join the room over the WebSocket.
+      // Phase 07 (on the phase-06 transport): join the room over the
+      // WebSocket.
       announce(NOT_IMPLEMENTED, root);
     });
   }