@bongos/core 1.17.0

package/modules/grading/module.json

@@ -0,0 +1,12 @@
+{
+  "key": "grading",
+  "title": "Grading",
+  "description": "The grade-a-diff adversarial worker panel (Narc/Quality/Hacker/Efficiency) + deterministic route-rank/permission-path pre-passes + the scoring rubric. A core-domain module carved out of the GDS core in BV1.R73 (ADR 0091); default-on because every instance grades its own ships. Registers the `grade` kernel PORT the lifecycle resolves at confirm/ship time.",
+  "coreVersion": "^1.6.0",
+  "default": true,
+  "contributes": {
+    "routes": ["grade"]
+  },
+  "provides": ["grade", "grade.builderRollingAvgGrade"],
+  "consumes": []
+}

package/modules/grading/routes/grade.js

@@ -0,0 +1,51 @@
+'use strict';
+
+// The grading module's kernel PORT registration (BV1.R73 / ADR 0091 §4).
+//
+// Grading has no HTTP endpoints of its own. The grade-a-diff capability is
+// consumed by CORE files that must NOT import a module:
+//   • the LIFECYCLE (routes/tasks.js, POST /tasks/:id/grade) — validateAndScore +
+//     serverSideGuards on the confirm/ship path;
+//   • the public dashboard (routes/public.js, GET /public/grades) — RUBRIC meta.
+// Both reach grading WITHOUT importing it by resolving the `grade` kernel PORT
+// this factory registers (ADR 0091 §4: keep the state machine whole, extract the
+// capability behind a seam). The provider IS the grader module surface
+// (validateAndScore / serverSideGuards / RUBRIC / …).
+//
+// Why a route factory for a routeless module: `mountModuleRoutes` (the loader) is
+// the one boot hook that runs BOTH in the live server AND whenever a test rebuilds
+// the GDS router — so registering here (not in a poller) is what keeps the port
+// present for the route-building tests too. Registration is hasProvider-guarded so
+// re-instantiation never trips the seam's single-provider duplicate guard.
+//
+// The 4-worker adversarial PANEL (grader.gradeSubagent) runs in the CLI/box
+// (scripts/gds/ship.js), not in-process — it posts its scored output to
+// POST /tasks/:id/grade, where the server-side guards re-run the deterministic
+// pre-passes. So the in-process port surface the lifecycle needs is the grader
+// module itself.
+
+const express = require('express');
+const api = require('../../../src/module-api');
+const grader = require('../grader');
+const db = require('../db'); // the grade-trend read carved from core db.js (ADR 0102)
+
+function registerSeams() {
+  if (!api.hasProvider('grade')) {
+    api.registerProvider('grade', grader);
+  }
+  // The grade-TREND read (builderRollingAvgGrade) carved from core db.js (ADR 0102)
+  // — core me.js + the sessions BFG resolve it here instead of the doorway. Degrades
+  // to a zero-grade shape when grading is off (a vanilla instance).
+  if (!api.hasProvider('grade.builderRollingAvgGrade')) {
+    api.registerProvider('grade.builderRollingAvgGrade', db.builderRollingAvgGrade);
+  }
+}
+
+module.exports = function buildGradeRouter() {
+  registerSeams();
+  // No HTTP surface — grading is a pure capability behind the `grade` port. The
+  // empty router is only the loader's contributes.routes mount vehicle; returning
+  // a valid express.Router() keeps mountModuleRoutes' `router.use(sub)` happy
+  // without exposing any endpoint.
+  return express.Router();
+};

package/modules/hall-ui/CLAUDE.md

@@ -0,0 +1,61 @@
+# `hall-ui` module — the authenticated builders' hall
+
+> A CORE-domain carve (BV1.R85, [ADR 0093](../../docs/adr/<redacted>.md) §1) — the **second WEB-SURFACE module** ([02-module-map §6](../../docs/design/modular-architecture/02-module-map.md): "a web surface is first-class"), after status-UI (BV1.R84), and the **largest** (~13k LOC). `default: true` — a Cloud Bongos instance ships its hall like it ships its status page, so it mounts unconditionally unless an instance disables it.
+
+Owns the authenticated builders' hall served at **`builders.<apex>`** (`builders.example.com`) — the roster, the Work Board, standing/karma, the leaderboard, achievements, the citizen's primer, the system maps, the Repo Atlas, Settings, the dev-box pair page, and the Archon-only watch/harbor/gate pages. A no-framework single-page surface (`builders.js` + per-page `*.js`) that polls `/api/gds/*` and the read-only `/api/gds/public/*` surface (live updates ride the SSE channel, `routes/live.js`).
+
+## The shape: a static surface, but with DEDICATED serving (the difference from status-UI)
+
+Like status-UI this module has **no `.js` backend, no `db.js` slice, no kernel port, and no routes**. It is purely:
+- `public/` — the static hall (HTML/CSS/JS/cursors/chime.wav), moved verbatim from the old repo-root `public-builders/`.
+- `module.json` — declares one **`contributes.webSurfaces`** entry `{ host: "builders.", dir: "public" }`.
+
+**But the hall is NOT served by the generic web-surface loop that serves status-UI.** The status page is a plain static surface; the hall has far richer serving that MUST be byte-identical:
+- the apex `/builders/*` tree + the `builders.<apex>` subdomain **rewrite shim** (#726),
+- the **canonical-URL redirects** (#744: `/builders/ranks` → `/ranks` on the subdomain; #739: apex `/builders/*` → `builders.<apex>`),
+- the **citizen/Archon page gates** (#488/#770: primer, diagrams, work, pair, settings, atlas are sign-in-gated; watch, harbor, gate are Archon-only — the real curl-proof access control),
+- per-page **asset-stamping** (#521 content-hash `?v=`),
+- the **module hall-widget injection** (BV1.R75 — `injectModuleHallWidgets`),
+- the diagram PNG + `primer.md` static mounts.
+
+So the manifest `webSurfaces` declaration is the **discovery + scope-map + `window.__MODULES__` record**; the bytes are served by the hall's dedicated block in `serve-internal.js`.
+
+## The serving seam (how the hall keeps its dedicated block + is still a module)
+
+`src/bongos/serve-internal.js` resolves `loader.moduleWebSurfaces({ isEnabled })` — the same seam status-UI uses — but **PARTITIONS the hall out** of the generic static loop on the builders-host predicate (`isBuildersHost`), so:
+- the **generic loop** owns every web surface EXCEPT the hall (status-UI today),
+- the hall's **dedicated block** owns the builders host and reads from `BUILDERS_DIR = modules/hall-ui/public/`.
+
+The filter is on the **host** (`isBuildersHost`), not the `"hall-ui"` key, so the kernel still names no module key ([ADR 0083](../../docs/adr/<redacted>.md) §Decision #4). `isModuleSurfaceHost` (which the dedicated `/builders` guards use to skip the GENERIC status surface) therefore deliberately EXCLUDES the builders host — the dedicated block is what serves it, so it must not self-skip.
+
+## The boundary
+
+This module reaches **nothing** in core (no doorway require — it has no JS the server requires; `builders.js` etc. are browser code). Core, in turn, must never `require()` a file in here — `serve-internal.js` resolves the surface through `loader.moduleWebSurfaces`/`BUILDERS_DIR`, never an import of `modules/hall-ui/*`. Both directions are enforced by the BV1.R44/R45 fitness checks.
+
+## The data it renders STAYS shared core (the judgment call)
+
+The `/api/gds/me`, `/api/gds/public/*`, and `/api/gds/leaderboard` read endpoints the hall polls **did not move** — they live in `src/bongos/routes/{me,public,builders}.js` and are consumed by the status surface and the off-box mirror too, not just this hall. A read shared by multiple surfaces is correctly core/shared, not hall-exclusive (the same call status-UI / economy / ideas made). So the carve moves the *surface*, not the reads it happens to render.
+
+## The hall-widget registry (BV1.R75)
+
+The hall's `<main>` is filled from a **registry** (`public/dom-utils.js` `contributeHallWidget`; the core set in `public/hall-widgets.js`; a module's own client script otherwise). No widget may be hardcoded as a literal `<section class="scroll">` in `index.html` — a fitness check (`scripts/gds/fitness.js`, `HALL_INDEX` now points at `modules/hall-ui/public/index.html`) reds the build if one creeps back. Module-contributed hall widgets are injected via `serve-internal.js`'s `injectModuleHallWidgets` (the `hallWidgetScripts` loader seam), served at `/modules/<key>/public/hall-widget.js`. (Known pre-existing limitation, idea #465: that asset path 404s on the builders *subdomain* because the rewrite shim shadows it — injection works on both hosts; serving works on the apex. No module ships a hall-widget today so it's a live no-op.)
+
+## Files & tooling
+
+| Path | What |
+|---|---|
+| `public/index.html` · `public/builders.js` · `public/style.css` | the hall shell + core script + stylesheet (no build step, no framework) |
+| `public/{work,roadmap,watch,harbor,gate,pair,settings,ranks,sessions,primer,diagrams,atlas,not-ready}.{html,js}` | the per-page surfaces |
+| `public/task.html` + `public/task.js` | the task-detail page (`/task/:id`, task 751) — a real, shareable page that replaced the old `#/task/N` overlay. Irregular routing: `serve-internal.js`'s `TASK_DETAIL_PAGE_RE` resolves the two-segment `/builders/task/:id` path to this one file (every other page is a single-segment slug). (The old read-only Task Board twin `board.html`/`board.js` was removed in task 1965 — `/board` now 301s to `/work`.) |
+| `public/goals.html` + `public/goals-page.js` | the Goals page (irregular basename — `goals.js` is the index's Goals hall-widget) |
+| `public/dom-utils.js` · `public/hall-widgets.js` | the hall-widget + settings-panel registries (browser IIFEs) |
+| `public/instances-panel.js` | the "Instances" hall widget (provisioning module, [ADR 0111](../../docs/adr/<redacted>.md) §1, task 1947) — self-registers **gated on `module:'provisioning'`** (`contributeHallWidget` drops it when the module is off); a self-fetching widget (the `goals.js` pattern) that reads the P1 `/provisioning/*` routes and renders own instances always + the Archon fleet + cost-ledger total when `/me` is `archon`. Read/state only. |
+| `public/new-project-wizard.js` | the "Start a project" hall widget (provisioning module, [ADR 0111](../../docs/adr/<redacted>.md) / goal 35, task 1983) — the **CREATE** flow the instances-panel deferred: the most accessible form of the canonical onboarding runbook (the `/new-project` skill task 1981 + `bongos onboard` CLI task 1982). Same `module:'provisioning'` gating; a form that files a **standalone** provisioning request (`POST /provisioning/instances` — the web tier only ENQUEUES, trust boundary intact) then renders the irreducibly-human steps UI-first (create repo, OAuth app with the pinned apex callback, first sign-in) + points at the Instances panel for status. |
+| `public/cursors/` · `public/chime.wav` | bronze cursors + the volume-slider preview chime |
+| `module.json` | `contributes.webSurfaces: [{ host: "builders.", dir: "public" }]`; no port, no routes |
+
+Generators that WRITE into this surface live under `scripts/` and were re-pointed at `modules/hall-ui/public/`: `scripts/gds/gen-atlas.js` (the `atlas.json` Repo Atlas data, gitignored — regenerated on deploy), `scripts/art/gen-cursors.py` (cursors), `.claude/sounds/generate.js` (the chime mirror).
+
+## Tests
+
+The loader seam is covered in `tests/module_loader.mjs` (`moduleWebSurfaces` + the live hall-ui surface); the manifest `webSurfaces` validation in `tests/module_manifest.mjs`; the carve discovery-key membership in `tests/fitness.mjs` / `tests/module_loader.mjs` / `tests/modules.mjs`; the browser settings-panel seam in `tests/module_contributions.mjs` (reads `public/dom-utils.js`); the Repo Atlas renderer contract in `tests/atlas.mjs`; and the carve proof in `scripts/gds/coreB-carve-proof.sh` (leg 4i).

package/modules/hall-ui/module.json

@@ -0,0 +1,14 @@
+{
+  "key": "hall-ui",
+  "title": "Builders' Hall",
+  "description": "The authenticated builders' hall served at builders.<apex> (builders.amazonprimea.com) — the roster, work board, standing/karma, leaderboard, achievements, primer, system maps, settings, dev-box pair page, and the Archon-only watch/harbor/gate pages, all polling /api/gds/* and the read-only /api/gds/public/* surface. The largest WEB-SURFACE core-domain module (~13k LOC), carved out of the GDS core in BV1.R85 (ADR 0093 §1; 02-module-map §6). default-on: a Cloud Bongos instance ships its hall like it ships its status page. Registers no port and contributes no routes — it declares a webSurface (host prefix + static dir). Unlike the generic status surface, the hall keeps its dedicated serving block in serve-internal.js (the builders.<apex> + apex /builders/* shim, canonical redirects, the citizen/Archon page gates, asset-stamping, and the module hall-widget injection) — the webSurfaces declaration is the discovery + scope-map + window.__MODULES__ record; serve-internal serves it from this module's public/ dir with that richer machinery. The me/public/leaderboard read endpoints it renders stay SHARED core in routes/{me,public,builders}.js (the status surface + the off-box mirror read them too).",
+  "coreVersion": "^1.11.0",
+  "default": true,
+  "contributes": {
+    "webSurfaces": [
+      { "host": "builders.", "dir": "public" }
+    ]
+  },
+  "provides": [],
+  "consumes": []
+}

package/modules/hall-ui/public/atlas.html

@@ -0,0 +1,180 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Repo Atlas — a self-drawing map of the codebase</title>
+  <meta name="description" content="A live, self-generating map of the repository: how context is organized, and the truth of the module structure — clean modules vs the still-fused core.">
+  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='25' font-size='26' text-anchor='middle'>🪘</text></svg>">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
+  <style>
+    /* Repo Atlas — restyled onto the hall design system (task 1737, amending
+       ADR 0094's styling clause). The CHROME (card, toolbar, caption, legend,
+       popup, badges) rides the hall tokens, so it follows the instance pack and
+       dark mode like every other page. The SEMANTIC node/edge palette below
+       stays instance-independent — the 0094 invariant: a pack's colors must
+       never scramble the map's color-coded meaning. Non-semantic map values
+       (label ink/halo, ambient wash, hub glow, badge fills) are scoped vars the
+       renderer reads at draw time, with dark variants, so the scene adapts to
+       the theme without the pack touching the encoding. */
+    .atlas-page{
+      /* semantic map palette — FIXED (never pack-driven), tuned for both themes */
+      --ab-sun:#6366f1; --ab-sky:#0ea5e9; --ab-coral:#f43f5e; --ab-paper:#b3a284;
+      --ab-good:#10b981; --ab-core:#f59e0b; --ab-db:#ef4444; --ab-ghost:#94a3b8; --ab-danger:#dc2626;
+      /* theme-dependent, non-semantic scene values (read by atlas.js) */
+      --ab-label-ink: var(--ink);
+      --ab-label-halo: var(--surface);
+      --ab-ambient: rgba(255,255,255,.5);
+      --ab-glow: #c7cdf7;
+      --ab-b-good-bg:#dcfce7; --ab-b-good-fg:#166534;
+      --ab-b-warn-bg:#fef3c7; --ab-b-warn-fg:#92400e;
+      --ab-b-danger-bg:#fee2e2; --ab-b-danger-fg:#991b1b;
+      --ab-b-info-bg:#e0f2fe; --ab-b-info-fg:#075985;
+      color:var(--ink);
+      border:1px solid var(--border); border-radius:var(--radius);
+      background:
+        radial-gradient(ellipse 70% 55% at 50% 46%, color-mix(in srgb, var(--accent) 4%, transparent), transparent 70%),
+        var(--surface);
+    }
+    html[data-theme="dark"] .atlas-page{
+      --ab-ambient: rgba(255,255,255,.03);
+      --ab-glow: #3b418c;
+      --ab-b-good-bg:#123227; --ab-b-good-fg:#5eead4;
+      --ab-b-warn-bg:#33260d; --ab-b-warn-fg:#fcd34d;
+      --ab-b-danger-bg:#371616; --ab-b-danger-fg:#fca5a5;
+      --ab-b-info-bg:#0f2740; --ab-b-info-fg:#7dd3fc;
+    }
+    @media (prefers-color-scheme: dark){
+      html:not([data-theme]) .atlas-page{
+        --ab-ambient: rgba(255,255,255,.03);
+        --ab-glow: #3b418c;
+        --ab-b-good-bg:#123227; --ab-b-good-fg:#5eead4;
+        --ab-b-warn-bg:#33260d; --ab-b-warn-fg:#fcd34d;
+        --ab-b-danger-bg:#371616; --ab-b-danger-fg:#fca5a5;
+        --ab-b-info-bg:#0f2740; --ab-b-info-fg:#7dd3fc;
+      }
+    }
+    .atlas-page *{box-sizing:border-box}
+    .atlas-page button{font:inherit}
+
+    .atlas-toolbar{display:flex; align-items:center; gap:12px 16px; flex-wrap:wrap; padding:16px 20px 0}
+    .ab-chip{font-weight:600; font-size:10.5px; text-transform:uppercase; letter-spacing:.1em;
+      color:var(--accent-text); background:var(--accent-weak); border:1px solid color-mix(in srgb, var(--accent) 30%, transparent); padding:3px 9px; border-radius:999px}
+    .ab-modes{display:inline-flex; gap:0; border:1px solid var(--border-strong); border-radius:var(--radius-sm); overflow:hidden}
+    .ab-modes button{font-family:var(--font-body); font-weight:500; font-size:12.5px; cursor:pointer; border:0;
+      background:var(--surface); color:var(--ink-soft); padding:6px 14px; transition:background .15s, color .15s}
+    .ab-modes button + button{border-left:1px solid var(--border-strong)}
+    .ab-modes button.active{background:var(--accent-weak); color:var(--accent-text)}
+    .ab-modes button:focus-visible{outline:2px solid var(--accent); outline-offset:-2px}
+
+    .ab-caption{padding:13px 20px 0; margin:0; font-size:13px; line-height:1.5; color:var(--ink-soft); max-width:90ch}
+    .ab-caption .sub{display:block; margin-top:3px; font-size:11.5px; color:var(--ink-faint)}
+
+    .ab-scene{position:relative; width:100%; min-height:500px; padding:6px 0}
+    .ab-scene svg{display:block; width:100%; height:auto}
+    .ab-hint{position:absolute; left:20px; bottom:12px; font-size:11.5px; color:var(--ink-soft);
+      background:color-mix(in srgb, var(--surface) 75%, transparent); backdrop-filter:blur(4px); padding:5px 11px; border-radius:999px; border:1px solid var(--border)}
+    .ab-empty{position:absolute; inset:0; display:none; align-items:center; justify-content:center; text-align:center; padding:40px}
+    .ab-empty.show{display:flex}
+    .ab-empty .card{background:var(--surface); border:1px solid var(--border); border-radius:var(--radius); padding:26px 30px; max-width:460px;
+      box-shadow:var(--shadow-pop)}
+    .ab-empty h2{margin:0 0 8px; font-size:16px; font-weight:650}
+    .ab-empty p{margin:0; font-size:13.5px; line-height:1.55; color:var(--ink-soft)}
+
+    .ab-legend{display:flex; flex-wrap:wrap; gap:8px 18px; padding:12px 20px 6px; font-size:11.5px; color:var(--ink-soft)}
+    .ab-legend .lg{display:flex; align-items:center; gap:7px}
+    .ab-legend .sw{width:13px; height:13px; border-radius:4px}
+    .ab-legend .ln{width:18px; border-top:3px solid}
+    .ab-foot{padding:10px 20px 20px; font-size:11px; color:var(--ink-faint); font-variant-numeric:tabular-nums}
+
+    .ab-popup{position:absolute; z-index:6; width:300px; max-width:88%; background:var(--surface);
+      border:1px solid var(--border); border-radius:var(--radius); padding:15px 16px; display:none;
+      box-shadow:var(--shadow-pop)}
+    .ab-popup.show{display:block}
+    .ab-popup-close{position:absolute; top:8px; right:11px; cursor:pointer; border:0; background:transparent;
+      font-size:20px; line-height:1; color:var(--ink-faint)}
+    .ab-popup-close:hover{color:var(--ink)}
+    .ab-ptitle{font-weight:650; font-size:15px; display:flex; align-items:center;
+      gap:8px; flex-wrap:wrap; line-height:1.25; padding-right:18px}
+    .ab-ppath{font-family:ui-monospace,"SF Mono",Menlo,Consolas,monospace; font-size:11.5px; color:var(--ink-soft); margin-top:4px; word-break:break-all}
+    .ab-pdesc{font-size:12.8px; line-height:1.55; margin:11px 0 0; color:var(--ink-soft)}
+    .ab-prow{margin-top:11px; font-size:10.5px; font-weight:600; color:var(--ink-faint); text-transform:uppercase; letter-spacing:.06em}
+    .ab-chips{display:flex; flex-wrap:wrap; gap:6px; margin-top:6px}
+    .ab-chip2{font-size:11px; font-weight:500; background:var(--surface-2); border:1px solid var(--border);
+      padding:4px 9px; border-radius:999px; font-variant-numeric:tabular-nums}
+    .ab-badge{font-weight:600; font-size:10.5px; text-transform:uppercase; letter-spacing:.05em; padding:3px 8px; border-radius:999px}
+    .ab-b-good{background:var(--ab-b-good-bg); color:var(--ab-b-good-fg)} .ab-b-warn{background:var(--ab-b-warn-bg); color:var(--ab-b-warn-fg)}
+    .ab-b-danger{background:var(--ab-b-danger-bg); color:var(--ab-b-danger-fg)} .ab-b-info{background:var(--ab-b-info-bg); color:var(--ab-b-info-fg)}
+
+    .ab-node{cursor:pointer; transition:opacity .18s}
+    .ab-node text{font-family:var(--font-body); paint-order:stroke; stroke:var(--ab-label-halo); stroke-width:3px; stroke-linejoin:round; fill:var(--ab-label-ink)}
+    .ab-node text.ab-sub{fill:var(--ink-faint)}
+    .ab-node text.ab-badge-text{stroke:none; paint-order:normal}
+    svg.focus .ab-node{opacity:.18}
+    svg.focus .ab-node.lit{opacity:1}
+    .ab-edge{fill:none; opacity:.18; transition:opacity .18s}
+    svg.focus .ab-edge{opacity:.04}
+    svg.focus .ab-edge.lit{opacity:1}
+    .ab-edge.lit{filter:url(#abglow)}
+    .ab-sun-glow{animation:abbreathe 5.5s ease-in-out infinite}
+    @keyframes abbreathe{0%,100%{opacity:.4}50%{opacity:.8}}
+    @media (prefers-reduced-motion: reduce){ .atlas-page *{transition:none!important; animation:none!important} }
+    @media (max-width:560px){ .ab-modes{width:100%; display:flex} .ab-modes button{flex:1} }
+  </style>
+</head>
+<body data-page="atlas" data-page-title="Repo Atlas">
+
+<div class="app">
+  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
+  <div class="app-scrim" id="app-scrim" hidden></div>
+  <div class="app-body">
+    <header class="app-topbar" id="app-topbar"></header>
+    <div class="app-content">
+      <main>
+        <!-- The atlas chrome rides the hall tokens (pack + dark aware, task 1737);
+             only the semantic node/edge palette stays instance-independent so a
+             pack can never scramble the map's color-coded meaning (ADR 0094). -->
+        <div class="atlas-page">
+          <div class="atlas-toolbar">
+            <div class="ab-modes">
+              <button data-view="context" class="active">Context Layer</button>
+              <button data-view="modules">Module Truth</button>
+            </div>
+            <span class="ab-chip">live</span>
+          </div>
+
+          <p class="ab-caption" id="caption">Loading the map…</p>
+
+          <div class="ab-scene" id="scene">
+            <svg id="svg" role="img" aria-label="Isometric map of the repository"></svg>
+            <div class="ab-hint">Hover an island to light its links · click one for details</div>
+            <div class="ab-popup" id="popup" role="dialog" aria-label="Codebase detail">
+              <button class="ab-popup-close" id="popupClose" aria-label="Close">×</button>
+              <div id="popupBody"></div>
+            </div>
+            <div class="ab-empty" id="empty">
+              <div class="card">
+                <h2>The map is being drawn</h2>
+                <p>The Repo Atlas regenerates itself on the server every time code ships. It looks like it hasn’t been generated on this deploy yet — check back after the next deploy.</p>
+              </div>
+            </div>
+          </div>
+
+          <div class="ab-legend" id="legend"></div>
+          <footer class="ab-foot" id="foot"></footer>
+        </div>
+      </main>
+      <footer class="app-foot" id="app-foot"></footer>
+    </div>
+  </div>
+</div>
+
+<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
+
+<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/atlas.js?v=2026-06-27-r1" defer></script>
+</body>
+</html>