@bongos/core 1.18.3 → 1.18.18

package/modules/hall-ui/public/sessions.css

@@ -0,0 +1,16 @@
+/* sessions.css — Page-local styles for the Session log page.
+   Lifted verbatim out of the page's inline <style> block (task 1002176);
+   the ?v= cache-bust is stamped automatically from this file's content hash
+   at boot (src/asset-version.js). */
+
+/* Page-local styles for the session log — small additions on top of the
+   shared .ledger / .stat-row components in style.css. */
+.ledger-table-wrap { overflow-x: auto; margin-top: 6px; }
+table.ledger th, table.ledger td { white-space: nowrap; }
+.ledger td.warn { color: var(--danger); font-weight: 600; }
+.ledger-sid {
+  font-family: ui-monospace, "SF Mono", Menlo, monospace;
+  font-size: 12.5px;
+  color: var(--info);
+}
+.ledger-rank { font-size: 12px; color: var(--ink-faint); }

package/modules/hall-ui/public/sessions.html

@@ -10,19 +10,7 @@
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
   <link rel="stylesheet" href="/builders/style.css?v=2026-06-04-sessions">
-  <style>
-    /* Page-local styles for the session log — small additions on top of the
-       shared .ledger / .stat-row components in style.css. */
-    .ledger-table-wrap { overflow-x: auto; margin-top: 6px; }
-    table.ledger th, table.ledger td { white-space: nowrap; }
-    .ledger td.warn { color: var(--danger); font-weight: 600; }
-    .ledger-sid {
-      font-family: ui-monospace, "SF Mono", Menlo, monospace;
-      font-size: 12.5px;
-      color: var(--info);
-    }
-    .ledger-rank { font-size: 12px; color: var(--ink-faint); }
-  </style>
+  <link rel="stylesheet" href="/builders/sessions.css">
 </head>
 <body data-page="sessions" data-page-title="Sessions">
 
@@ -83,6 +71,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
 <script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
+<script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>
 <script src="/builders/task-detail.js?v=2026-07-03-taskdetail"></script>

package/modules/hall-ui/public/settings.html

@@ -298,6 +298,8 @@
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page scripts run. -->
 <script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
+<script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- shared component kit (window.OTBKit) — section rail (task 2166). -->

package/modules/hall-ui/public/settings.js

@@ -58,7 +58,7 @@
       ? data.allowed_models
       : ['opus', 'sonnet', 'haiku', 'script'];
     if (rows.length === 0) {
-      body.innerHTML = '<tr><td colspan="3" class="voices-empty">No skills registered.</td></tr>';
+      body.innerHTML = `<tr><td colspan="3">${window.OTBKit.emptyStateHtml('No skills registered.')}</td></tr>`;
       return;
     }
     body.innerHTML = rows.map((row) => {
@@ -139,7 +139,7 @@
     if (!wrap) return;
     const rows = Array.isArray(data?.effective) ? data.effective : [];
     if (rows.length === 0) {
-      wrap.innerHTML = '<p class="voices-empty">No sounds registered.</p>';
+      wrap.innerHTML = window.OTBKit.emptyStateHtml('No sounds registered.');
       return;
     }
     wrap.innerHTML = rows.map((row) => {
@@ -284,7 +284,7 @@
     if (!wrap) return;
     const rows = Array.isArray(data?.effective) ? data.effective : [];
     if (rows.length === 0) {
-      wrap.innerHTML = '<p class="voices-empty">No event sounds registered.</p>';
+      wrap.innerHTML = window.OTBKit.emptyStateHtml('No event sounds registered.');
       return;
     }
     wrap.innerHTML = rows.map((row) => {
@@ -402,7 +402,7 @@
     const eff = typeof data?.effective_level === 'number' ? data.effective_level : null;
     const def = typeof data?.default_level === 'number' ? data.default_level : null;
     if (levels.length === 0) {
-      wrap.innerHTML = '<p class="voices-empty">No levels registered.</p>';
+      wrap.innerHTML = window.OTBKit.emptyStateHtml('No levels registered.');
       return;
     }
     wrap.innerHTML = levels.map((lv) => {

package/modules/hall-ui/public/shell.js

@@ -13,9 +13,10 @@
 //     (#app-sidebar / #app-topbar / #app-foot) every hall page carries;
 //   - rank-gate nav items COSMETICALLY (server-side page gates remain the real
 //     access control — serve-internal.js requireArchonPage etc.);
-//   - on the index (body[data-page="home"]) route the four views (#home,
-//     #standing, #achievements, #leaderboard). The `#/task|idea|blocker/N`
-//     deep-link hashes belong to builders.js and are deliberately ignored here;
+//   - on the index (body[data-page="home"]) route the three views (#home,
+//     #standing, #leaderboard) plus the #achievements alias into Standing. The
+//     `#/task|idea|blocker/N` deep-link hashes belong to builders.js and are
+//     deliberately ignored here;
 //   - expose window.OTBShell.applyAccess(...) so builders.js (index) or the
 //     shell's own /api/bongos/me probe (other pages) can settle gated nav state.
 (function () {
@@ -29,7 +30,23 @@
   var brand = window.__BRANDING__ || {};
   var PAGE = (document.body && document.body.dataset.page) || '';
   var IS_INDEX = PAGE === 'home';
-  var VIEWS = ['home', 'standing', 'achievements', 'leaderboard'];
+  var VIEWS = ['home', 'standing', 'leaderboard'];
+  // task 2174: #achievements retired as a view — the achievements grid folded
+  // into Standing's Achievements rail section; task 2175 then retired its nav
+  // entry. Old links (bookmarks, the stat tiles) keep working: the hash resolves
+  // to its host view and, after the view is shown, scrolls to the section anchor.
+  // task 2178: each Standing rail section is addressable too, so the jump palette
+  // (and any link) can land on one directly. Without an alias entry `#standing-work`
+  // is an unknown hash and route() deliberately leaves the current view alone —
+  // the section would never be reachable from another page. Keys mirror
+  // builders.js STANDING_GROUPS; tests/hall_palette.mjs holds them in step.
+  var VIEW_ALIASES = {
+    achievements: { view: 'standing', anchor: 'standing-achievements' },
+    'standing-work': { view: 'standing', anchor: 'standing-work' },
+    'standing-karma': { view: 'standing', anchor: 'standing-karma' },
+    'standing-progress': { view: 'standing', anchor: 'standing-progress' },
+    'standing-achievements': { view: 'standing', anchor: 'standing-achievements' },
+  };
   // builders.js owns these hashes (deep-link overlay) — never route them.
   var DEEPLINK_RE = /^#\/(task|idea|blocker)\/(\d+)$/;
 
@@ -60,7 +77,6 @@
     profile: '<rect x="2.5" y="4" width="13" height="10" rx="1.5"/><circle cx="6.3" cy="8" r="1.6"/><path d="M4.1 12c.3-1.1 1.1-1.7 2.2-1.7s1.9.6 2.2 1.7"/><path d="M10.4 7.5h3M10.4 10.3h3"/>',
     goals: '<circle cx="9" cy="9" r="6.5"/><circle cx="9" cy="9" r="3.5"/><circle cx="9" cy="9" r="0.8" fill="currentColor"/>',
     roadmap: '<path d="M3 15.5V3.5l4 2 4-2 4 2v10l-4-2-4 2-4-2Z"/><path d="M7 3.5v10M11 5.5v10"/>',
-    achievements: '<circle cx="9" cy="7" r="4.5"/><path d="M6.2 10.8 5 15.5l4-2 4 2-1.2-4.7"/>',
     leaderboard: '<path d="M3.5 15.5v-6M9 15.5V3.5m5.5 12v-9"/>',
     docs: '<path d="M4 3.5h7l3 3v10H4v-13Z"/><path d="M11 3.5v3h3"/>',
     settings: '<circle cx="9" cy="9" r="2.5"/><path d="M9 2.5v2m0 9v2M2.5 9h2m9 0h2M4.4 4.4l1.4 1.4m6.4 6.4 1.4 1.4m0-9.2-1.4 1.4M5.8 12.2l-1.4 1.4"/>',
@@ -81,16 +97,30 @@
   //               current (mirrors the old #hall-nav-work rule, task #833)
   //   archon    — rank === 'archon'
   // `view` marks an index view (hash-routed); `module` gates on window.__MODULES__.
+  // task 2175: grouped by AUDIENCE of the data, so the sidebar reads in coherent
+  // runs instead of one long list — the project (unlabeled), You, Community,
+  // Docs, Archon. A group's `gate` must match its most permissive item's, or the
+  // head renders over nothing.
   var NAV = [
     { group: '', items: [
       { id: 'home', label: 'Home', icon: 'home', href: '/', view: 'home', gate: 'always' },
-      // task 1966: Work is visible to ANY signed-in builder (incl. newcomer Xenos).
-      // Claimability is controlled per-task, not by hiding the page — every row
-      // carries a rank tag and the server enforces requires_rank on the claim. This
-      // reverses task #833's newcomer hide (the 'work' gate below is now unused).
-      { id: 'work', label: 'Work', icon: 'work', href: '/work', gate: 'signed' },
       { id: 'roadmap', label: 'Roadmap', icon: 'roadmap', href: '/roadmap', gate: 'member' },
       { id: 'goals', label: 'Goals', icon: 'goals', href: '/goals', gate: 'member' },
+      // task 1966: Tasks (the board formerly labelled "Work") is visible to ANY
+      // signed-in builder (incl. newcomer Xenos). Claimability is controlled
+      // per-task, not by hiding the page — every row carries a rank tag and the
+      // server enforces requires_rank on the claim. This reverses task #833's
+      // newcomer hide (the 'work' gate below is now unused).
+      // task 1002425: relabelled Work → Tasks and moved below Roadmap/Goals. The
+      // id ('work') and href ('/work') are deliberately UNCHANGED so deep links,
+      // active-nav detection (#nav-work), the 'work' gate case, and the server
+      // page-gate all keep working — only the visible label and order change.
+      { id: 'work', label: 'Tasks', icon: 'work', href: '/work', gate: 'signed' },
+    ] },
+    // Your own numbers. task 2174 folded Achievements into Standing and this task
+    // retires its nav entry; VIEW_ALIASES still routes #achievements here, so old
+    // bookmarks and the stat tiles keep landing on the section.
+    { group: 'You', gate: 'signed', items: [
       { id: 'standing', label: 'Standing', icon: 'standing', href: '/#standing', view: 'standing', gate: 'signed' },
       // task 1467: the viewable, shareable builder profile. The nav link points at
       // the viewer's OWN profile (profile.js defaults to self when no ?id=). gate is
@@ -98,15 +128,24 @@
       // /profile?id=N from the leaderboard); 'signed' just means "show this 'my
       // profile' shortcut once you're signed in".
       { id: 'profile', label: 'Profile', icon: 'profile', href: '/profile', gate: 'signed' },
-      { id: 'achievements', label: 'Achievements', icon: 'achievements', href: '/#achievements', view: 'achievements', gate: 'member' },
+    ] },
+    { group: 'Community', gate: 'member', items: [
       { id: 'leaderboard', label: 'Leaderboard', icon: 'leaderboard', href: '/#leaderboard', view: 'leaderboard', gate: 'member' },
     ] },
     { group: 'Docs', gate: 'signed', items: [
       { id: 'primer', label: 'Primer', icon: 'docs', href: '/primer', gate: 'member' },
+      { id: 'ranks', label: 'Ranks', icon: 'docs', href: '/ranks', gate: 'signed' },
+      // task 2175: /drachmae had no nav entry at all — reachable only from prose
+      // links since task 2174 moved the bounty rate card onto it. It is reference
+      // material (the reward schedule + how karma differs), so it belongs in Docs,
+      // not on personal Standing. Labelled for the TOPIC rather than the instance's
+      // currency: the page covers karma too, which is not currency, and "Economy"
+      // stays right whatever `branding.currency.label` is set to. Page is public
+      // like /ranks — 'signed' is the same cosmetic "show it once you're in".
+      { id: 'economy', label: 'Economy', icon: 'docs', href: '/drachmae', gate: 'signed' },
       { id: 'diagrams', label: 'Diagrams', icon: 'docs', href: '/diagrams', gate: 'member' },
       { id: 'atlas', label: 'Repo Atlas', icon: 'docs', href: '/atlas', gate: 'member' },
       { id: 'modules', label: 'Modules', icon: 'docs', href: '/modules', gate: 'member' },
-      { id: 'ranks', label: 'Ranks', icon: 'docs', href: '/ranks', gate: 'signed' },
       // The rendered OpenAPI reference lives on the APEX (/docs), not this builders
       // subdomain — external so the rewrite shim doesn't turn it into /builders/docs.
       { id: 'apidocs', label: 'API docs', icon: 'docs', href: '/docs', gate: 'signed', external: true },
@@ -119,11 +158,13 @@
     ] },
   ];
 
-  // ---------- nav group collapse (labeled groups only — Docs, Archon) ----------
+  // ---------- nav group collapse (labeled groups only) ----------
   // Mirrors the THEME_KEY localStorage pattern: per-group collapsed state,
   // survives reloads and carries across every hall page (shell.js runs on all
   // of them). Only labeled groups get a toggle — the unlabeled main group
-  // (Home/Work/Roadmap/…) is core nav and always stays expanded.
+  // (Home/Roadmap/Goals/Tasks) is core nav and always stays expanded. Keys are
+  // the lowercased group label, so a regroup renames the key and a group reverts
+  // to expanded once — acceptable for a cosmetic preference.
   var NAV_COLLAPSE_KEY = 'hall-nav-collapsed';
 
   function collapsedGroups() {
@@ -152,6 +193,9 @@
     // builders./status. subdomain). Derived from the current host so it's correct
     // on any instance (amazonprimea.com, cloudbongos.com, localhost).
     var APEX_ORIGIN = window.location.origin.replace('://builders.', '://').replace('://status.', '://');
+    // Instance product/world name for the "back to home" wayfinding link — same
+    // source renderFoot() uses, so the core carries no hardcoded identity.
+    var platformName = (brand.identity && (brand.identity.productName || brand.identity.worldName)) || 'projects';
     var groups = NAV.map(function (g) {
       var groupId = g.group ? g.group.toLowerCase() : '';
       var collapsible = !!g.group;
@@ -189,6 +233,15 @@
           '<span class="shell-user__meta"><span class="shell-user__name" id="shell-user-name"></span>' +
           '<span class="shell-user__rank" id="shell-user-rank"></span></span>' +
         '</a>' +
+        // Wayfinding back to the platform's public home (the orbs gate on
+        // cloudbongos), where a builder can browse the OTHER projects. Kept core-
+        // neutral: the label is the instance's product/world name (as renderFoot
+        // does) and the href is the derived apex origin — no instance identity
+        // hardcoded. Ungated (shown signed-in or out) — it's a way out, not a
+        // gated action. Sits by Sign out (bottom-left) per the owner's call.
+        '<a class="shell-home" id="shell-home" href="' + esc(APEX_ORIGIN + '/') + '" title="Back to ' + esc(platformName) + ' — browse projects">' +
+          '<svg class="nav-icon" viewBox="0 0 18 18" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M10.5 4 5.5 9l5 5"/><path d="M5.5 9H14"/></svg>' +
+          '<span class="nav-item__label">' + esc(platformName) + '</span></a>' +
         '<a class="shell-signout" id="logout-link" href="/api/bongos/auth/logout" title="Sign out">' + icon('signout') + '<span class="nav-item__label">Sign out</span></a>' +
       '</div>';
     var nameEl = document.getElementById('brand-name');
@@ -206,6 +259,15 @@
       '</button>' +
       '<h2 class="topbar-title" id="topbar-title"></h2>' +
       '<div class="topbar-side"><span class="topbar-note" id="welcome-line"></span>' +
+      // task 2178: the jump-palette slot. Rendered inert + hidden — palette.js
+      // reveals and wires it when the page loads it. A page without palette.js
+      // therefore shows no slot and runs no palette code (progressive
+      // enhancement): the shell never calls into it, so nothing can throw.
+      '<button class="topbar-jump" id="topbar-jump" type="button" hidden aria-label="Jump to a page or record">' +
+        '<svg viewBox="0 0 18 18" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" aria-hidden="true"><circle cx="8" cy="8" r="4.5"/><path d="M11.5 11.5 15 15"/></svg>' +
+        '<span class="topbar-jump__label">Jump to…</span>' +
+        '<kbd class="topbar-jump__kbd" id="topbar-jump-kbd"></kbd>' +
+      '</button>' +
       '<button class="zoom-toggle" id="zoom-toggle" type="button" aria-label="Text size"></button>' +
       '<button class="theme-toggle" id="theme-toggle" type="button" aria-label="Switch theme"></button></div>';
     var t = document.getElementById('topbar-title');
@@ -358,10 +420,14 @@
 
   var currentView = 'home';
 
+  // → { view, anchor } for a routable hash, else null. An aliased hash resolves
+  // to its host view plus the in-view anchor to scroll to once it is shown.
   function viewFromHash(hash) {
     if (!hash || DEEPLINK_RE.test(hash)) return null;
     var name = hash.replace(/^#\/?/, '');
-    return VIEWS.indexOf(name) !== -1 ? name : null;
+    if (VIEWS.indexOf(name) !== -1) return { view: name, anchor: null };
+    var alias = VIEW_ALIASES[name];
+    return alias ? { view: alias.view, anchor: alias.anchor } : null;
   }
 
   function setView(name, opts) {
@@ -384,12 +450,30 @@
   }
 
   function route(opts) {
-    var v = viewFromHash(window.location.hash);
-    if (v) setView(v, opts);
-    else if (!window.location.hash || window.location.hash === '#') setView('home', opts);
+    var target = viewFromHash(window.location.hash);
+    if (target) {
+      // An aliased hash owns its scroll position, so suppress setView's
+      // scroll-to-top and land on the section instead.
+      setView(target.view, target.anchor ? { scroll: false } : opts);
+      if (target.anchor) scrollToAnchor(target.anchor);
+    } else if (!window.location.hash || window.location.hash === '#') {
+      setView('home', opts);
+    }
     // unknown hashes (deep-links, legacy anchors) leave the current view alone.
   }
 
+  // The anchor is stamped by builders.js when it mounts the hall widgets, which
+  // can land after the first route() call — retry on the next frame so a cold
+  // load of an aliased hash still arrives at the section.
+  function scrollToAnchor(id) {
+    var el = document.getElementById(id);
+    if (el) { el.scrollIntoView(); return; }
+    window.requestAnimationFrame(function () {
+      var late = document.getElementById(id);
+      if (late) late.scrollIntoView();
+    });
+  }
+
   // ---------- drawer (≤768px) ----------
 
   function openDrawer() {
@@ -407,6 +491,35 @@
     if (btn) btn.setAttribute('aria-expanded', 'false');
   }
 
+  // Sign out. The /api/bongos/auth/logout endpoint is POST + cookie-gated, so a
+  // plain-anchor GET navigation (what the sidebar/footer sign-out links do on
+  // their own) just 404s: the session is never revoked, the still-valid cookie
+  // signs the builder back in on the next page, and — because the POST handler
+  // is the ONLY place seams.emit('builder.logout') fires — the federated
+  // single-logout to the hub never happens either (ADR 0144 / task 1002238).
+  // shell.js draws the sign-out control on EVERY hall page, so this handler must
+  // live here, not only on the index (builders.js used to own it alone). Convert
+  // the click into the real POST, then bounce home.
+  function doLogout() {
+    var finish = function () {
+      // Mirror the SERVER logout (src/bongos/routes/auth.js): expire BOTH the
+      // current gds_session and the legacy pms_session, each in BOTH the
+      // host-only form and the apex-scoped Domain=.<apex> form (#726 — the
+      // session cookie is apex-scoped on production hosts so it crosses
+      // subdomains; a Max-Age=0 only matches the cookie whose Domain attribute
+      // it names, so the host-only expire alone leaves the apex cookie live).
+      var apex = location.hostname.split('.').slice(-2).join('.');
+      ['gds_session', 'pms_session'].forEach(function (name) {
+        document.cookie = name + '=; Max-Age=0; path=/';
+        document.cookie = name + '=; Max-Age=0; path=/; Domain=.' + apex;
+      });
+      window.location.assign('/');
+    };
+    // Best-effort: whether the POST succeeds, fails, or the network drops, still
+    // clear the client cookies and bounce (finish runs on both settle paths).
+    api.request('POST', '/api/bongos/auth/logout').then(finish, finish);
+  }
+
   function wire() {
     var menu = document.getElementById('topbar-menu');
     if (menu) menu.addEventListener('click', function () {
@@ -441,6 +554,18 @@
     document.addEventListener('keydown', function (e) {
       if (e.key === 'Escape') closeDrawer();
     });
+    // Sign-out: delegated so it catches BOTH the sidebar (#logout-link) and the
+    // footer sign-out anchors on every page, plus any future one. Any anchor
+    // pointing at the logout endpoint is intercepted and turned into the real
+    // POST (see doLogout) instead of a dead GET navigation.
+    document.addEventListener('click', function (e) {
+      var a = e.target.closest && e.target.closest('a');
+      if (!a) return;
+      if (/\/auth\/logout\/?$/.test(a.getAttribute('href') || '')) {
+        e.preventDefault();
+        doLogout();
+      }
+    });
   }
 
   // Non-index pages: probe /api/bongos/me for cosmetic nav gating (the index's