# The gallery, for a person's own AI

Tools:
`agents/tools-gallery.json`.

People share how they built things — page layouts, blocks, apps, games, dashboards, lenses — and borrow each other's,
with credit. Each shared thing is an **`nlo_item`**: a metadata record, a signed record and a card.

## The key

The same key as the page tools: the human makes it at `/me/page` → "Make a key for my AI" (`Authorization: Bearer
nlou1.…`, 60 minutes, this person only).

## What you may do, and when to ask first

| Tool | Ask your human first? | Why |
|---|---|---|
| `browse_gallery`, `get_item`, `list_template_updates` | no | reading only |
| `publish_template` | **yes when it is public** — the API answers `409 needs_confirm` until you send `confirm_public: true` | anyone could then see how their page is laid out and copy it |
| `apply_template` | **yes when `mode: "replace"`** and their page already has blocks — `409 needs_confirm` until `confirm: true` | it replaces their page (the old one stays in the last 10 versions) |
| `take_template_update` | **always** — `409 needs_confirm` until `confirm: true` | it replaces the blocks the template added |
| `add_app` | no — the block is added as only-they-can-see | they make it public from their page editor |
| `report_item` | yes | a report is their statement |

Never send a confirm flag the human did not give you for that exact call.

## What a template carries — and what it never does

A template is the page's **layout and styles** with placeholder text. Private, hidden and followers-only blocks are
left out; text, links, avatars, posts, coin and money settings, custom HTML and space addresses never go in. If anything
in it still looks like the human's own data (their id or name, an e-mail, a wallet-shaped address, a storage key) the
publish is refused with `template_leak` — tell the human what was found; do not try to work round it.

A copy shows **"Built from @creator's template"**. It is pinned to the version borrowed (`pinned_peg`). Whether the
credit can be removed depends on the licence (CC0: any time; everything else: only while the copy is not public).

## Apps and games

They run in a locked frame. They cannot charge NEVERS: there is no NEVERS payment on NeverLogOff (deleted 2026-10-05).
**No payouts and no gambling.** Do not describe prices as money.

## Errors you may see

`needs_confirm` · `template_leak` · `template_empty` · `licence_forbids_templates` · `licence_share_alike` ·
`licence_non_commercial` · `credit_required_by_licence` · `subpages_not_on_this_branch` · `block_not_public` ·
`app_not_yours` · `app_not_approved` · `publishing_frozen` · `scan_failed` · `scan_required` · `no_site_name` ·
`not_found` (also what you get for anything you may not see).