@bongos/core 1.18.0 → 1.18.18

package/modules/hall-ui/public/scouting.html

@@ -0,0 +1,45 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Scouting — cross-project builders</title>
+  <style>
+    :root {
+      --bg: #fff7ed; --card: #ffffff; --ink: #2a1f17; --ink-soft: #6b5d52;
+      --rule: #fed7aa; --accent: #ea580c;
+    }
+    * { box-sizing: border-box; }
+    body {
+      margin: 0; padding: 2.5rem 1.25rem 4rem; background: var(--bg); color: var(--ink);
+      font-family: "Quicksand", system-ui, -apple-system, "Segoe UI", sans-serif; line-height: 1.5;
+    }
+    .wrap { max-width: 960px; margin: 0 auto; }
+    a.home { color: var(--accent); text-decoration: none; font-size: .9rem; }
+    h1 { font-size: 1.9rem; margin: .4rem 0 .3rem; }
+    .sub { color: var(--ink-soft); margin: 0 0 1.75rem; }
+    .badge { display: inline-block; font-size: .7rem; text-transform: uppercase; letter-spacing: .06em;
+      background: var(--accent); color: #fff; border-radius: 999px; padding: .12rem .6rem; vertical-align: middle; }
+    table { width: 100%; border-collapse: collapse; background: var(--card); border: 1px solid var(--rule); border-radius: 12px; overflow: hidden; }
+    th, td { text-align: left; padding: .6rem .8rem; border-bottom: 1px solid var(--rule); font-size: .92rem; }
+    th { color: var(--ink-soft); font-weight: 600; }
+    td.num, th.num { text-align: right; font-variant-numeric: tabular-nums; }
+    tr:last-child td { border-bottom: none; }
+    .who { font-weight: 600; }
+    .note { color: var(--ink-soft); padding: 2.5rem 1rem; text-align: center; }
+    .scroll { overflow-x: auto; }
+    @media (prefers-color-scheme: dark) {
+      :root { --bg: #1a1410; --card: #241c16; --ink: #f5ece3; --ink-soft: #b9a998; --rule: #4a3728; }
+    }
+  </style>
+</head>
+<body>
+  <div class="wrap">
+    <a class="home" href="/builders">← Back to the hall</a>
+    <h1>Scouting <span class="badge">Archon only</span></h1>
+    <p class="sub">Builders active across all hosted projects — an internal talent view. Descriptive only; it grants no authority anywhere.</p>
+    <div id="body" class="note">Loading…</div>
+  </div>
+  <script src="/scouting.js"></script>
+</body>
+</html>

package/modules/hall-ui/public/scouting.js

@@ -0,0 +1,73 @@
+// scouting.js — the internal Archon-only cross-project scouting view (ADR 0141 §4,
+// task #1002114). Fetches /api/gds/scouting (Archon-gated server-side) and renders a
+// ranked table. A non-Archon gets a 403 and sees the Archon-only notice — the data
+// endpoint's rank gate is the real protection ("NOT shown to builders"). All network
+// values are rendered via textContent — never innerHTML.
+(function () {
+  'use strict';
+  var body = document.getElementById('body');
+
+  function el(tag, cls) { var e = document.createElement(tag); if (cls) e.className = cls; return e; }
+  function td(text, cls) { var c = el('td', cls); c.textContent = text; return c; }
+
+  function fmtRecency(iso) {
+    if (!iso) return '—';
+    var t = Date.parse(iso);
+    if (isNaN(t)) return '—';
+    var days = Math.floor((Date.now() - t) / 86400000);
+    if (days <= 0) return 'today';
+    if (days === 1) return '1 day ago';
+    if (days < 30) return days + ' days ago';
+    return Math.floor(days / 30) + ' mo ago';
+  }
+
+  function render(builders) {
+    body.className = '';
+    body.textContent = '';
+    if (!builders || builders.length === 0) {
+      body.className = 'note';
+      body.textContent = 'No cross-project activity reported yet.';
+      return;
+    }
+    var scroll = el('div', 'scroll');
+    var table = el('table');
+    var thead = el('thead');
+    var hr = el('tr');
+    [['Builder', ''], ['Projects', 'num'], ['Credits', 'num'], ['Ships', 'num'], ['Karma', 'num'], ['Disciplines', ''], ['Last active', '']]
+      .forEach(function (h) { var th = el('th', h[1]); th.textContent = h[0]; hr.appendChild(th); });
+    thead.appendChild(hr); table.appendChild(thead);
+    var tbody = el('tbody');
+    builders.forEach(function (b) {
+      var tr = el('tr');
+      var who = el('td');
+      var name = el('span', 'who');
+      name.textContent = b.github_login || b.display_name || ('#' + b.github_id);
+      who.appendChild(name);
+      tr.appendChild(who);
+      tr.appendChild(td(String(b.project_count != null ? b.project_count : '—'), 'num'));
+      tr.appendChild(td(String(b.total_credits != null ? b.total_credits : 0), 'num'));
+      tr.appendChild(td(String(b.total_tasks_shipped != null ? b.total_tasks_shipped : 0), 'num'));
+      tr.appendChild(td(String(b.total_karma != null ? b.total_karma : 0), 'num'));
+      tr.appendChild(td(Array.isArray(b.disciplines) ? b.disciplines.join(', ') : '—'));
+      tr.appendChild(td(fmtRecency(b.last_active)));
+      tbody.appendChild(tr);
+    });
+    table.appendChild(tbody);
+    scroll.appendChild(table);
+    body.appendChild(scroll);
+  }
+
+  fetch('/api/gds/scouting', { headers: { Accept: 'application/json' } })
+    .then(function (r) {
+      if (r.status === 403 || r.status === 401) { throw { archon: true }; }
+      if (!r.ok) throw new Error('http ' + r.status);
+      return r.json();
+    })
+    .then(function (data) { render(data && data.builders); })
+    .catch(function (e) {
+      body.className = 'note';
+      body.textContent = (e && e.archon)
+        ? 'This view is Archon-only.'
+        : 'Couldn’t load the scouting view right now.';
+    });
+}());

package/modules/hall-ui/public/sessions.css

@@ -0,0 +1,16 @@
+/* sessions.css — Page-local styles for the Session log page.
+   Lifted verbatim out of the page's inline <style> block (task 1002176);
+   the ?v= cache-bust is stamped automatically from this file's content hash
+   at boot (src/asset-version.js). */
+
+/* Page-local styles for the session log — small additions on top of the
+   shared .ledger / .stat-row components in style.css. */
+.ledger-table-wrap { overflow-x: auto; margin-top: 6px; }
+table.ledger th, table.ledger td { white-space: nowrap; }
+.ledger td.warn { color: var(--danger); font-weight: 600; }
+.ledger-sid {
+  font-family: ui-monospace, "SF Mono", Menlo, monospace;
+  font-size: 12.5px;
+  color: var(--info);
+}
+.ledger-rank { font-size: 12px; color: var(--ink-faint); }

package/modules/hall-ui/public/sessions.html

@@ -10,19 +10,7 @@
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
   <link rel="stylesheet" href="/builders/style.css?v=2026-06-04-sessions">
-  <style>
-    /* Page-local styles for the session log — small additions on top of the
-       shared .ledger / .stat-row components in style.css. */
-    .ledger-table-wrap { overflow-x: auto; margin-top: 6px; }
-    table.ledger th, table.ledger td { white-space: nowrap; }
-    .ledger td.warn { color: var(--danger); font-weight: 600; }
-    .ledger-sid {
-      font-family: ui-monospace, "SF Mono", Menlo, monospace;
-      font-size: 12.5px;
-      color: var(--info);
-    }
-    .ledger-rank { font-size: 12px; color: var(--ink-faint); }
-  </style>
+  <link rel="stylesheet" href="/builders/sessions.css">
 </head>
 <body data-page="sessions" data-page-title="Sessions">
 
@@ -83,6 +71,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
 <script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
+<script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>
 <script src="/builders/task-detail.js?v=2026-07-03-taskdetail"></script>

package/modules/hall-ui/public/settings.html

@@ -298,6 +298,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page scripts run. -->
 <script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
+<script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- shared component kit (window.OTBKit) — section rail (task 2166). -->

package/modules/hall-ui/public/settings.js

@@ -58,7 +58,7 @@
       ? data.allowed_models
       : ['opus', 'sonnet', 'haiku', 'script'];
     if (rows.length === 0) {
-      body.innerHTML = '<tr><td colspan="3" class="voices-empty">No skills registered.</td></tr>';
+      body.innerHTML = `<tr><td colspan="3">${window.OTBKit.emptyStateHtml('No skills registered.')}</td></tr>`;
       return;
     }
     body.innerHTML = rows.map((row) => {
@@ -139,7 +139,7 @@
     if (!wrap) return;
     const rows = Array.isArray(data?.effective) ? data.effective : [];
     if (rows.length === 0) {
-      wrap.innerHTML = '<p class="voices-empty">No sounds registered.</p>';
+      wrap.innerHTML = window.OTBKit.emptyStateHtml('No sounds registered.');
       return;
     }
     wrap.innerHTML = rows.map((row) => {
@@ -284,7 +284,7 @@
     if (!wrap) return;
     const rows = Array.isArray(data?.effective) ? data.effective : [];
     if (rows.length === 0) {
-      wrap.innerHTML = '<p class="voices-empty">No event sounds registered.</p>';
+      wrap.innerHTML = window.OTBKit.emptyStateHtml('No event sounds registered.');
       return;
     }
     wrap.innerHTML = rows.map((row) => {
@@ -402,7 +402,7 @@
     const eff = typeof data?.effective_level === 'number' ? data.effective_level : null;
     const def = typeof data?.default_level === 'number' ? data.default_level : null;
     if (levels.length === 0) {
-      wrap.innerHTML = '<p class="voices-empty">No levels registered.</p>';
+      wrap.innerHTML = window.OTBKit.emptyStateHtml('No levels registered.');
       return;
     }
     wrap.innerHTML = levels.map((lv) => {

package/modules/hall-ui/public/shell.js

@@ -13,9 +13,10 @@
 //     (#app-sidebar / #app-topbar / #app-foot) every hall page carries;
 //   - rank-gate nav items COSMETICALLY (server-side page gates remain the real
 //     access control — serve-internal.js requireArchonPage etc.);
-//   - on the index (body[data-page="home"]) route the four views (#home,
-//     #standing, #achievements, #leaderboard). The `#/task|idea|blocker/N`
-//     deep-link hashes belong to builders.js and are deliberately ignored here;
+//   - on the index (body[data-page="home"]) route the three views (#home,
+//     #standing, #leaderboard) plus the #achievements alias into Standing. The
+//     `#/task|idea|blocker/N` deep-link hashes belong to builders.js and are
+//     deliberately ignored here;
 //   - expose window.OTBShell.applyAccess(...) so builders.js (index) or the
 //     shell's own /api/bongos/me probe (other pages) can settle gated nav state.
 (function () {
@@ -29,7 +30,23 @@
   var brand = window.__BRANDING__ || {};
   var PAGE = (document.body && document.body.dataset.page) || '';
   var IS_INDEX = PAGE === 'home';
-  var VIEWS = ['home', 'standing', 'achievements', 'leaderboard'];
+  var VIEWS = ['home', 'standing', 'leaderboard'];
+  // task 2174: #achievements retired as a view — the achievements grid folded
+  // into Standing's Achievements rail section; task 2175 then retired its nav
+  // entry. Old links (bookmarks, the stat tiles) keep working: the hash resolves
+  // to its host view and, after the view is shown, scrolls to the section anchor.
+  // task 2178: each Standing rail section is addressable too, so the jump palette
+  // (and any link) can land on one directly. Without an alias entry `#standing-work`
+  // is an unknown hash and route() deliberately leaves the current view alone —
+  // the section would never be reachable from another page. Keys mirror
+  // builders.js STANDING_GROUPS; tests/hall_palette.mjs holds them in step.
+  var VIEW_ALIASES = {
+    achievements: { view: 'standing', anchor: 'standing-achievements' },
+    'standing-work': { view: 'standing', anchor: 'standing-work' },
+    'standing-karma': { view: 'standing', anchor: 'standing-karma' },
+    'standing-progress': { view: 'standing', anchor: 'standing-progress' },
+    'standing-achievements': { view: 'standing', anchor: 'standing-achievements' },
+  };
   // builders.js owns these hashes (deep-link overlay) — never route them.
   var DEEPLINK_RE = /^#\/(task|idea|blocker)\/(\d+)$/;
 
@@ -60,7 +77,6 @@
     profile: '<rect x="2.5" y="4" width="13" height="10" rx="1.5"/><circle cx="6.3" cy="8" r="1.6"/><path d="M4.1 12c.3-1.1 1.1-1.7 2.2-1.7s1.9.6 2.2 1.7"/><path d="M10.4 7.5h3M10.4 10.3h3"/>',
     goals: '<circle cx="9" cy="9" r="6.5"/><circle cx="9" cy="9" r="3.5"/><circle cx="9" cy="9" r="0.8" fill="currentColor"/>',
     roadmap: '<path d="M3 15.5V3.5l4 2 4-2 4 2v10l-4-2-4 2-4-2Z"/><path d="M7 3.5v10M11 5.5v10"/>',
-    achievements: '<circle cx="9" cy="7" r="4.5"/><path d="M6.2 10.8 5 15.5l4-2 4 2-1.2-4.7"/>',
     leaderboard: '<path d="M3.5 15.5v-6M9 15.5V3.5m5.5 12v-9"/>',
     docs: '<path d="M4 3.5h7l3 3v10H4v-13Z"/><path d="M11 3.5v3h3"/>',
     settings: '<circle cx="9" cy="9" r="2.5"/><path d="M9 2.5v2m0 9v2M2.5 9h2m9 0h2M4.4 4.4l1.4 1.4m6.4 6.4 1.4 1.4m0-9.2-1.4 1.4M5.8 12.2l-1.4 1.4"/>',
@@ -81,16 +97,30 @@
   //               current (mirrors the old #hall-nav-work rule, task #833)
   //   archon    — rank === 'archon'
   // `view` marks an index view (hash-routed); `module` gates on window.__MODULES__.
+  // task 2175: grouped by AUDIENCE of the data, so the sidebar reads in coherent
+  // runs instead of one long list — the project (unlabeled), You, Community,
+  // Docs, Archon. A group's `gate` must match its most permissive item's, or the
+  // head renders over nothing.
   var NAV = [
     { group: '', items: [
       { id: 'home', label: 'Home', icon: 'home', href: '/', view: 'home', gate: 'always' },
-      // task 1966: Work is visible to ANY signed-in builder (incl. newcomer Xenos).
-      // Claimability is controlled per-task, not by hiding the page — every row
-      // carries a rank tag and the server enforces requires_rank on the claim. This
-      // reverses task #833's newcomer hide (the 'work' gate below is now unused).
-      { id: 'work', label: 'Work', icon: 'work', href: '/work', gate: 'signed' },
       { id: 'roadmap', label: 'Roadmap', icon: 'roadmap', href: '/roadmap', gate: 'member' },
       { id: 'goals', label: 'Goals', icon: 'goals', href: '/goals', gate: 'member' },
+      // task 1966: Tasks (the board formerly labelled "Work") is visible to ANY
+      // signed-in builder (incl. newcomer Xenos). Claimability is controlled
+      // per-task, not by hiding the page — every row carries a rank tag and the
+      // server enforces requires_rank on the claim. This reverses task #833's
+      // newcomer hide (the 'work' gate below is now unused).
+      // task 1002425: relabelled Work → Tasks and moved below Roadmap/Goals. The
+      // id ('work') and href ('/work') are deliberately UNCHANGED so deep links,
+      // active-nav detection (#nav-work), the 'work' gate case, and the server
+      // page-gate all keep working — only the visible label and order change.
+      { id: 'work', label: 'Tasks', icon: 'work', href: '/work', gate: 'signed' },
+    ] },
+    // Your own numbers. task 2174 folded Achievements into Standing and this task
+    // retires its nav entry; VIEW_ALIASES still routes #achievements here, so old
+    // bookmarks and the stat tiles keep landing on the section.
+    { group: 'You', gate: 'signed', items: [
       { id: 'standing', label: 'Standing', icon: 'standing', href: '/#standing', view: 'standing', gate: 'signed' },
       // task 1467: the viewable, shareable builder profile. The nav link points at
       // the viewer's OWN profile (profile.js defaults to self when no ?id=). gate is
@@ -98,15 +128,24 @@
       // /profile?id=N from the leaderboard); 'signed' just means "show this 'my
       // profile' shortcut once you're signed in".
       { id: 'profile', label: 'Profile', icon: 'profile', href: '/profile', gate: 'signed' },
-      { id: 'achievements', label: 'Achievements', icon: 'achievements', href: '/#achievements', view: 'achievements', gate: 'member' },
+    ] },
+    { group: 'Community', gate: 'member', items: [
       { id: 'leaderboard', label: 'Leaderboard', icon: 'leaderboard', href: '/#leaderboard', view: 'leaderboard', gate: 'member' },
     ] },
     { group: 'Docs', gate: 'signed', items: [
       { id: 'primer', label: 'Primer', icon: 'docs', href: '/primer', gate: 'member' },
+      { id: 'ranks', label: 'Ranks', icon: 'docs', href: '/ranks', gate: 'signed' },
+      // task 2175: /drachmae had no nav entry at all — reachable only from prose
+      // links since task 2174 moved the bounty rate card onto it. It is reference
+      // material (the reward schedule + how karma differs), so it belongs in Docs,
+      // not on personal Standing. Labelled for the TOPIC rather than the instance's
+      // currency: the page covers karma too, which is not currency, and "Economy"
+      // stays right whatever `branding.currency.label` is set to. Page is public
+      // like /ranks — 'signed' is the same cosmetic "show it once you're in".
+      { id: 'economy', label: 'Economy', icon: 'docs', href: '/drachmae', gate: 'signed' },
       { id: 'diagrams', label: 'Diagrams', icon: 'docs', href: '/diagrams', gate: 'member' },
       { id: 'atlas', label: 'Repo Atlas', icon: 'docs', href: '/atlas', gate: 'member' },
       { id: 'modules', label: 'Modules', icon: 'docs', href: '/modules', gate: 'member' },
-      { id: 'ranks', label: 'Ranks', icon: 'docs', href: '/ranks', gate: 'signed' },
       // The rendered OpenAPI reference lives on the APEX (/docs), not this builders
       // subdomain — external so the rewrite shim doesn't turn it into /builders/docs.
       { id: 'apidocs', label: 'API docs', icon: 'docs', href: '/docs', gate: 'signed', external: true },
@@ -119,11 +158,13 @@
     ] },
   ];
 
-  // ---------- nav group collapse (labeled groups only — Docs, Archon) ----------
+  // ---------- nav group collapse (labeled groups only) ----------
   // Mirrors the THEME_KEY localStorage pattern: per-group collapsed state,
   // survives reloads and carries across every hall page (shell.js runs on all
   // of them). Only labeled groups get a toggle — the unlabeled main group
-  // (Home/Work/Roadmap/…) is core nav and always stays expanded.
+  // (Home/Roadmap/Goals/Tasks) is core nav and always stays expanded. Keys are
+  // the lowercased group label, so a regroup renames the key and a group reverts
+  // to expanded once — acceptable for a cosmetic preference.
   var NAV_COLLAPSE_KEY = 'hall-nav-collapsed';
 
   function collapsedGroups() {
@@ -152,6 +193,9 @@
     // builders./status. subdomain). Derived from the current host so it's correct
     // on any instance (amazonprimea.com, cloudbongos.com, localhost).
     var APEX_ORIGIN = window.location.origin.replace('://builders.', '://').replace('://status.', '://');
+    // Instance product/world name for the "back to home" wayfinding link — same
+    // source renderFoot() uses, so the core carries no hardcoded identity.
+    var platformName = (brand.identity && (brand.identity.productName || brand.identity.worldName)) || 'projects';
     var groups = NAV.map(function (g) {
       var groupId = g.group ? g.group.toLowerCase() : '';
       var collapsible = !!g.group;
@@ -189,6 +233,15 @@
           '<span class="shell-user__meta"><span class="shell-user__name" id="shell-user-name"></span>' +
           '<span class="shell-user__rank" id="shell-user-rank"></span></span>' +
         '</a>' +
+        // Wayfinding back to the platform's public home (the orbs gate on
+        // cloudbongos), where a builder can browse the OTHER projects. Kept core-
+        // neutral: the label is the instance's product/world name (as renderFoot
+        // does) and the href is the derived apex origin — no instance identity
+        // hardcoded. Ungated (shown signed-in or out) — it's a way out, not a
+        // gated action. Sits by Sign out (bottom-left) per the owner's call.
+        '<a class="shell-home" id="shell-home" href="' + esc(APEX_ORIGIN + '/') + '" title="Back to ' + esc(platformName) + ' — browse projects">' +
+          '<svg class="nav-icon" viewBox="0 0 18 18" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M10.5 4 5.5 9l5 5"/><path d="M5.5 9H14"/></svg>' +
+          '<span class="nav-item__label">' + esc(platformName) + '</span></a>' +
         '<a class="shell-signout" id="logout-link" href="/api/bongos/auth/logout" title="Sign out">' + icon('signout') + '<span class="nav-item__label">Sign out</span></a>' +
       '</div>';
     var nameEl = document.getElementById('brand-name');
@@ -206,6 +259,15 @@
       '</button>' +
       '<h2 class="topbar-title" id="topbar-title"></h2>' +
       '<div class="topbar-side"><span class="topbar-note" id="welcome-line"></span>' +
+      // task 2178: the jump-palette slot. Rendered inert + hidden — palette.js
+      // reveals and wires it when the page loads it. A page without palette.js
+      // therefore shows no slot and runs no palette code (progressive
+      // enhancement): the shell never calls into it, so nothing can throw.
+      '<button class="topbar-jump" id="topbar-jump" type="button" hidden aria-label="Jump to a page or record">' +
+        '<svg viewBox="0 0 18 18" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" aria-hidden="true"><circle cx="8" cy="8" r="4.5"/><path d="M11.5 11.5 15 15"/></svg>' +
+        '<span class="topbar-jump__label">Jump to…</span>' +
+        '<kbd class="topbar-jump__kbd" id="topbar-jump-kbd"></kbd>' +
+      '</button>' +
       '<button class="zoom-toggle" id="zoom-toggle" type="button" aria-label="Text size"></button>' +
       '<button class="theme-toggle" id="theme-toggle" type="button" aria-label="Switch theme"></button></div>';
     var t = document.getElementById('topbar-title');
@@ -358,10 +420,14 @@
 
   var currentView = 'home';
 
+  // → { view, anchor } for a routable hash, else null. An aliased hash resolves
+  // to its host view plus the in-view anchor to scroll to once it is shown.
   function viewFromHash(hash) {
     if (!hash || DEEPLINK_RE.test(hash)) return null;
     var name = hash.replace(/^#\/?/, '');
-    return VIEWS.indexOf(name) !== -1 ? name : null;
+    if (VIEWS.indexOf(name) !== -1) return { view: name, anchor: null };
+    var alias = VIEW_ALIASES[name];
+    return alias ? { view: alias.view, anchor: alias.anchor } : null;
   }
 
   function setView(name, opts) {
@@ -384,12 +450,30 @@
   }
 
   function route(opts) {
-    var v = viewFromHash(window.location.hash);
-    if (v) setView(v, opts);
-    else if (!window.location.hash || window.location.hash === '#') setView('home', opts);
+    var target = viewFromHash(window.location.hash);
+    if (target) {
+      // An aliased hash owns its scroll position, so suppress setView's
+      // scroll-to-top and land on the section instead.
+      setView(target.view, target.anchor ? { scroll: false } : opts);
+      if (target.anchor) scrollToAnchor(target.anchor);
+    } else if (!window.location.hash || window.location.hash === '#') {
+      setView('home', opts);
+    }
     // unknown hashes (deep-links, legacy anchors) leave the current view alone.
   }
 
+  // The anchor is stamped by builders.js when it mounts the hall widgets, which
+  // can land after the first route() call — retry on the next frame so a cold
+  // load of an aliased hash still arrives at the section.
+  function scrollToAnchor(id) {
+    var el = document.getElementById(id);
+    if (el) { el.scrollIntoView(); return; }
+    window.requestAnimationFrame(function () {
+      var late = document.getElementById(id);
+      if (late) late.scrollIntoView();
+    });
+  }
+
   // ---------- drawer (≤768px) ----------
 
   function openDrawer() {
@@ -407,6 +491,35 @@
     if (btn) btn.setAttribute('aria-expanded', 'false');
   }
 
+  // Sign out. The /api/bongos/auth/logout endpoint is POST + cookie-gated, so a
+  // plain-anchor GET navigation (what the sidebar/footer sign-out links do on
+  // their own) just 404s: the session is never revoked, the still-valid cookie
+  // signs the builder back in on the next page, and — because the POST handler
+  // is the ONLY place seams.emit('builder.logout') fires — the federated
+  // single-logout to the hub never happens either (ADR 0144 / task 1002238).
+  // shell.js draws the sign-out control on EVERY hall page, so this handler must
+  // live here, not only on the index (builders.js used to own it alone). Convert
+  // the click into the real POST, then bounce home.
+  function doLogout() {
+    var finish = function () {
+      // Mirror the SERVER logout (src/bongos/routes/auth.js): expire BOTH the
+      // current gds_session and the legacy pms_session, each in BOTH the
+      // host-only form and the apex-scoped Domain=.<apex> form (#726 — the
+      // session cookie is apex-scoped on production hosts so it crosses
+      // subdomains; a Max-Age=0 only matches the cookie whose Domain attribute
+      // it names, so the host-only expire alone leaves the apex cookie live).
+      var apex = location.hostname.split('.').slice(-2).join('.');
+      ['gds_session', 'pms_session'].forEach(function (name) {
+        document.cookie = name + '=; Max-Age=0; path=/';
+        document.cookie = name + '=; Max-Age=0; path=/; Domain=.' + apex;
+      });
+      window.location.assign('/');
+    };
+    // Best-effort: whether the POST succeeds, fails, or the network drops, still
+    // clear the client cookies and bounce (finish runs on both settle paths).
+    api.request('POST', '/api/bongos/auth/logout').then(finish, finish);
+  }
+
   function wire() {
     var menu = document.getElementById('topbar-menu');
     if (menu) menu.addEventListener('click', function () {
@@ -441,6 +554,18 @@
     document.addEventListener('keydown', function (e) {
       if (e.key === 'Escape') closeDrawer();
     });
+    // Sign-out: delegated so it catches BOTH the sidebar (#logout-link) and the
+    // footer sign-out anchors on every page, plus any future one. Any anchor
+    // pointing at the logout endpoint is intercepted and turned into the real
+    // POST (see doLogout) instead of a dead GET navigation.
+    document.addEventListener('click', function (e) {
+      var a = e.target.closest && e.target.closest('a');
+      if (!a) return;
+      if (/\/auth\/logout\/?$/.test(a.getAttribute('href') || '')) {
+        e.preventDefault();
+        doLogout();
+      }
+    });
   }
 
   // Non-index pages: probe /api/bongos/me for cosmetic nav gating (the index's