the auction house opens, the Honor tab lands, and a day of fixes

- the auction house end to end: right-clicking an auctioneer opens Browse/Bids/Auctions on the server's reply — search, the category tree from your own DBCs, the reference's 50-a-page pager, multi-key sorting (directions corrected at the bytes), bid/buyout, the sell slot with deposit and duration, cancel with its fee popup; prices sit on the reference's own money-frame kit in lined-up columns, the twenty auction messages split refusals-red / outcomes-to-chat, and a won or sold auction reads as a proper mail receipt — the window's Lua re-worded in our own terms after the overlap ratchet caught the first cut leaning on the reference's text
- the PvP honor system whole: the Honor tab and the inspect page over a real wire model, with current rank and highest-ever rank correctly two different fields
- a day of reported fixes: WASD survives a /logout re-entry, addon settings save on a window close and Cmd+Q (exactly once — a mac close could fire the tail twice), clams open again, random-enchant items name themselves on every surface, the loot window's rows hold their seats with legible counts, idle players stop sinking through building floors, the shooter re-pulls between Auto Shots, portraits loosen ~19% to the client's own aspect-1.0 matrix, and big creatures thump the camera off the CameraShakes table
- character select clicks like 1.12 — captions whiten on hover, buttons fire on release, Humans face straight ahead off the stage bone's real yaw, the facing is per-character, and hunter/warlock pets stand beside you at their family-ramp size with their own emitters (the imp's flames), the Voidwalker's sequence-hidden shackles culled
- the smaller player-facing set: nameplate on/off rows in Options with the CanAttack category gate (emissaries stop plating), the bonus bar slides up with igBonusBarOpen, the camera's framing height glides on a shapeshift, the open letter evicts the centre seat, the far-band fog hull stops printing a pale horizon stripe at low view distance, the guide arrow is gold with per-source rim art, error text fades through its shadow too, and /convertraid converts the party
- README: the auction house and PvP honor move out of "not built yet"

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

crates/benilla-app/src/ui_script/mod.rs

@@ -264,6 +264,12 @@ pub(crate) struct UiScriptPlugin;
 
 impl Plugin for UiScriptPlugin {
     fn build(&self, app: &mut App) {
+        // **The quit root of the shutdown tail, on the exit edge** (decision 1528). It was
+        // `.add_systems(Update, shutdown_on_exit)` below, which cannot see the `AppExit` a player
+        // produces — the close button's is written in `PostUpdate` — so quitting from in-world
+        // wrote no saved variables, no per-addon files and no `AddOns.txt` at all. `Last` is after
+        // every announcement; [`crate::shutdown`] is where that argument lives.
+        crate::shutdown::on_app_exit(app, shutdown_on_exit.into_configs());
         app.insert_resource(UiScaleCvar(default_ui_scale()))
             // The UI pass publishes its per-frame phase split here every frame the cost meter or
             // the hover recorder is armed; the producer owns the resource so any minimal app that
@@ -295,12 +301,12 @@ impl Plugin for UiScriptPlugin {
             )
             // The whole shutdown tail — events then writes, in the reference's order. See
             // [`shutdown_ui_state`]; the two edges here are its five roots as far as our session
-            // has them.
+            // has them. (The quit root is registered at the top of this function, through
+            // [`crate::shutdown::on_app_exit`] — it is a `Last` system, not an `Update` one.)
             .add_systems(
                 OnExit(crate::char_select::ClientState::InWorld),
                 end_ui_session,
             )
-            .add_systems(Update, shutdown_on_exit)
             // A queued `ReloadUI()` runs in `PreUpdate` — one whole frame after the drain that
             // queued it (the reference's own deferral, `0x495590`), and BEFORE every `Update`
             // system, so no per-VM seed or feed can run against the dying VM in the reload frame