@bongos/core 1.19.1013 → 1.19.1015

package/modules/hall-ui/public/index.html

@@ -102,7 +102,7 @@
 <script src="/builders/brand-apply.js?v=2026-06-27-r75" defer></script>
 <!-- The app shell (sidebar + top bar + view router). Dependency-free; loaded
      BEFORE builders.js so the chrome ids exist when events are wired. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1" defer></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b" defer></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.

package/modules/hall-ui/public/modules.html

@@ -80,7 +80,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>

package/modules/hall-ui/public/people.html

@@ -55,7 +55,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/primer.html

@@ -115,7 +115,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/profile.html

@@ -187,7 +187,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->

package/modules/hall-ui/public/project-settings.html

@@ -58,7 +58,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/ranks.html

@@ -68,7 +68,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before ranks.js, which pulls from it. -->

package/modules/hall-ui/public/roadmap.html

@@ -41,7 +41,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/roster.html

@@ -50,7 +50,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/sessions.html

@@ -99,7 +99,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->

package/modules/hall-ui/public/settings.html

@@ -416,7 +416,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page scripts run. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->

package/modules/hall-ui/public/shell.js

@@ -155,6 +155,17 @@
       { id: 'home', label: 'Home', icon: 'home', href: '/', view: 'home', gate: 'always' },
       { id: 'roadmap', label: 'Roadmap', icon: 'roadmap', href: '/roadmap', gate: 'member' },
       { id: 'goals', label: 'Goals', icon: 'goals', href: '/goals', gate: 'member' },
+      // task 1004232 (sky part 4 of 5, goal 1000095; ADR 0227 §11, ADR 0331):
+      // THE PROJECT SKY — the whole project drawn from the ledger, at the URL
+      // the goal map held. The map took no nav slot on purpose (task 1003479:
+      // reachable from Goals, never load-bearing); the owner granted the sky
+      // that slot on 2026-09-24, directly under Goals because it is the goals
+      // seen as one picture — the same audience, the project. gate 'member' as
+      // Goals is: cosmetic, like every gate here — the page gate is the wall
+      // (requireBuilderPage, the tier the map sat on). The id stays 'goal-map'
+      // because the href does: Goals' own "see which goals wait on each other"
+      // link and every bookmark land here unchanged.
+      { id: 'goal-map', label: 'Sky', icon: 'goals', href: '/goal-map', gate: 'member' },
       // task 1966: Tasks (the board formerly labelled "Work") is visible to ANY
       // signed-in builder (incl. newcomer Xenos). Claimability is controlled
       // per-task, not by hiding the page — every row carries a rank tag and the
@@ -334,6 +345,10 @@
       // `core.pin.move` atom its page and both its routes check — cosmetic only, as
       // every item in this list is; the wall is server-side.
       { id: 'deploy', label: 'Deploy', icon: 'admin', href: '/deploy', gate: 'archon' },
+      // task 1001949: what each hosted project costs. 'government' mirrors the metic floor
+      // of `provisioning.fleet.manage`, the atom its page and its one read check (the
+      // Deploy precedent above); dropped where the provisioning module is not enabled.
+      { id: 'fleet', label: 'Fleet costs', icon: 'admin', href: '/fleet', gate: 'government', module: 'provisioning' },
       // BV1.R113: the roles-and-permissions tab (ADR 0151). The one genuinely
       // Archon-only item the 'government' gate comment anticipated — cosmetic
       // only. The wall is the `government.manage` atom checked on each of the

package/modules/hall-ui/public/sky-data.js

@@ -25,6 +25,24 @@
 // "must not ship" rows): the "claude layer" pill and every born-of mark. The
 // code that draws them is kept, and it reads `filed_via` / `bornOf` that are
 // simply absent today — so part 5 turns them on by shipping the facts.
+//
+// ONE PAGE, TWO DOORS (part 4, task 1004232). /thinking and /goal-map are the
+// same seven files over the same markup; the body's `data-sky-lens` says which
+// lens is HOME — 'mine' on /thinking (the ideator's sky), 'all' on /goal-map
+// (the project sky). `S.home` is read once here; sky-tour.js boots into it and
+// hands back to it after the tour, and sky-interaction.js's switcher leaves
+// for the other page rather than switching when the lens asked for lives
+// there. Every lens still exists inside either page, because the tour walks
+// all three.
+//
+// ONE PAGE, TWO DOORS (part 4, task 1004232). /thinking and /goal-map are the
+// same seven files over the same markup; the body's `data-sky-lens` says which
+// lens is HOME — 'mine' on /thinking (the ideator's sky), 'all' on /goal-map
+// (the project sky). `S.home` is read once here; sky-tour.js boots into it and
+// hands back to it after the tour, and sky-interaction.js's switcher leaves
+// for the other page rather than switching when the lens asked for lives
+// there. Every lens still exists inside either page, because the tour walks
+// all three.
 
 (() => {
   'use strict';
@@ -78,7 +96,7 @@
     baseIdeas: [], ideas: [], becameGoal: new Map(), becameCrit: new Map(), T0: NOW - 86400000,
     hasFiledVia: false, canNod: false, template: null, buildingVersionIds: [], loaded: false,
     rehearsal: false, claudeLayer: false, influence: false, ideasOnMap: false, recentOnly: false,
-    lens: 'mine', picked: null, hover: null, filter: 'all', gfilter: 'all', dirty: true, gravityGoal: null, flying: null, tourSpot: null,
+    lens: 'mine', home: document.body.dataset.skyLens === 'all' ? 'all' : 'mine', picked: null, hover: null, filter: 'all', gfilter: 'all', dirty: true, gravityGoal: null, flying: null, tourSpot: null,
     clock: NOW, playing: false, clockHidden: store.get('sky-clock') === 'off',
     charted: new Map(), focusSet: null, explore: { on: store.get('sky-explore') !== 'off', seen: new Set(JSON.parse(store.get('sky-seen') || '[]')) },
     cam: { x: 0, y: 0, k: 0.12 }, flight: null, W: 0, H: 0, DPR: 1, t0: 0, shuttles: [],

package/modules/hall-ui/public/sky-interaction.js

@@ -5,10 +5,12 @@
 //
 // The prototype's "hover card + shuttle menu", "interaction" and "lenses and
 // toggles" sections, verbatim but for the shared state on `SKY.S`. The one
-// behaviour this part CHANGES on purpose: the third lens button, "the whole
-// project", leaves for the project sky at /goal-map (part 4 builds that page)
-// instead of switching this one — the internal 'all' lens survives because the
-// tour walks it. And the "claude layer" pill only appears once part 5's
+// behaviour this part CHANGES on purpose: the lens switcher LEAVES for the
+// other page when the lens asked for is that page's home (part 4, task
+// 1004232) — on /thinking, "the whole project" goes to /goal-map; on
+// /goal-map, "simple" and "your thinking" go to /thinking — instead of
+// switching in place. Every lens survives inside both pages because the tour
+// walks all three. And the "claude layer" pill only appears once part 5's
 // `filed_via` exists on at least one thought; until then it is hidden and
 // every thought shows (the README's "must not ship" row).
 //
@@ -90,9 +92,14 @@
     if (!noFly) { if (l === 'all') SKY.fitAll(); else SKY.fitPresent(); }
     SKY.maybeStart(); SKY.renderRoom(); updateStats(); S.dirty = true;
   }
-  $('lensSimple').addEventListener('click', () => setLens('simple')); $('lensMine').addEventListener('click', () => setLens('mine'));
-  // "the whole project" is the project sky — its own page (part 4).
-  $('lensAll').addEventListener('click', () => { location.assign(`${hallBase()}/goal-map`); });
+  // The switcher is two doors (part 4, task 1004232): a lens that lives on the
+  // OTHER page is reached by going there. /thinking is home to 'simple' and
+  // 'mine'; /goal-map is home to 'all'. Inside a page every lens still works
+  // (the tour walks all three), so only the button leaves.
+  const leave = (p) => location.assign(`${hallBase()}${p}`);
+  $('lensSimple').addEventListener('click', () => (S.home === 'all' ? leave('/thinking') : setLens('simple')));
+  $('lensMine').addEventListener('click', () => (S.home === 'all' ? leave('/thinking') : setLens('mine')));
+  $('lensAll').addEventListener('click', () => (S.home === 'all' ? setLens('all') : leave('/goal-map')));
   $('fitBtn').addEventListener('click', () => (S.lens === 'all' ? SKY.fitAll() : SKY.fitPresent()));
   function togglePill(id, get, set) { $(id).addEventListener('click', () => { set(!get()); $(id).setAttribute('aria-pressed', String(get())); SKY.renderRoom(); updateStats(); S.dirty = true; }); }
   togglePill('recentBtn', () => S.recentOnly, (v) => { S.recentOnly = v; });

package/modules/hall-ui/public/sky-layout.js

@@ -6,7 +6,8 @@
 // sky-data.js for the split). The clock draws the sky as it stood on a day —
 // nothing moves position, only what exists changes. Routes are the goal
 // graph's own edges, charted by a shuttle when asked. Explore is the project
-// sky's rule (part 4 owns that page; the tour walks it here). The camera is a
+// sky's rule (home at /goal-map since part 4; the tour walks it on /thinking
+// too). The camera is a
 // pan/zoom over world coordinates laid out in sky-data.js.
 
 (() => {

package/modules/hall-ui/public/sky-tour.js

@@ -7,9 +7,12 @@
 // prototype's own start-up line. The thirteen steps and their words are the
 // design of record's; the tour opens once per browser (`sky-tour-seen`).
 //
-// Steps 7, 8 and 10 walk the project sky's lens ('all') inside this page —
-// which is why that lens survives here although its switcher button leaves
-// for /goal-map (part 4).
+// The tour walks every lens inside whichever page it runs on — steps 7, 8
+// and 10 the project sky's ('all'), steps 1, 11 and 12 the ideator's ('mine'),
+// step 13 'simple' — which is why all three survive in both pages although the
+// switcher leaves for the other page. When it ends it hands back to the page's
+// HOME lens (`S.home`: 'mine' on /thinking, 'all' on /goal-map — part 4, task
+// 1004232), and the boot opens in that lens too.
 
 (() => {
   'use strict';
@@ -43,7 +46,7 @@
   function spot(el, add) { if (!add) { S.spotted.forEach((e) => e.classList.remove('spot')); S.spotted = []; } if (el) { el.classList.add('spot'); S.spotted.push(el); } }
   function showStep() { const s = STEPS[S.tourI]; if (!s) return endTour(); spot(null); S.tourSpot = null; s.go(); $('tourN').textContent = `how to read the sky · ${S.tourI + 1} of ${STEPS.length}`; $('tourDots').innerHTML = STEPS.map((_, n) => `<i class="${n === S.tourI ? 'on' : ''}"></i>`).join(''); $('tourH').textContent = s.h; $('tourP').textContent = s.p; $('tourNext').textContent = S.tourI === STEPS.length - 1 ? 'start reading' : 'next'; $('tourBack').hidden = S.tourI === 0; $('tour').hidden = false; S.dirty = true; }
   function startTour() { SKY.pick(null); SKY.toggleRoom(false); SKY.clearCharts(); $('start').hidden = true; S.exploreWas = S.explore.on; S.tourI = 0; showStep(); }
-  function endTour() { $('tour').hidden = true; spot(null); S.tourSpot = null; S.tourI = -1; if (S.exploreWas != null) { S.explore.on = S.exploreWas; $('exploreBtn').setAttribute('aria-pressed', String(S.explore.on)); S.exploreWas = null; } store.set('sky-tour-seen', '4'); SKY.setLens('mine', true); SKY.clearCharts(); SKY.maybeStart(); S.dirty = true; }
+  function endTour() { $('tour').hidden = true; spot(null); S.tourSpot = null; S.tourI = -1; if (S.exploreWas != null) { S.explore.on = S.exploreWas; $('exploreBtn').setAttribute('aria-pressed', String(S.explore.on)); S.exploreWas = null; } store.set('sky-tour-seen', '4'); SKY.setLens(S.home, true); SKY.clearCharts(); SKY.maybeStart(); S.dirty = true; }
   $('tourNext').addEventListener('click', () => { S.tourI++; showStep(); }); $('tourBack').addEventListener('click', () => { S.tourI = Math.max(0, S.tourI - 1); showStep(); }); $('tourSkip').addEventListener('click', endTour); $('tourBtn').addEventListener('click', startTour);
 
   // ---------------------------------------------------------------- the loop
@@ -68,8 +71,9 @@
     // The Full Idea switch needs the template's key to file; without the read there is nothing to file as.
     $('fullToggle').hidden = !S.template;
     S.t0 = performance.now();
-    SKY.resize(); SKY.setClock(NOW); SKY.setLens('mine', true); SKY.renderPanel(null); $('time').hidden = S.clockHidden;
-    S.cam.k = SKY.fitRad(S.BANDS[0].r1 + 120);
+    SKY.resize(); SKY.setClock(NOW); SKY.setLens(S.home, true); SKY.renderPanel(null); $('time').hidden = S.clockHidden;
+    // The first frame is the home lens's own fit: the present for your sky, the whole sky for the project's.
+    S.cam.k = S.home === 'all' ? SKY.fitRad(S.BANDS[S.BANDS.length - 1].r1 + 100) : SKY.fitRad(S.BANDS[0].r1 + 120);
     document.body.dataset.skyReady = '1';
     requestAnimationFrame(frame);
     if (store.get('sky-tour-seen') !== '4') setTimeout(startTour, 600);

package/modules/hall-ui/public/studio.html

@@ -66,7 +66,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure

package/modules/hall-ui/public/task.html

@@ -57,7 +57,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->

package/modules/hall-ui/public/thinking.css

@@ -4,7 +4,10 @@
    prototype as the design of record and this sheet is its pixel contract. It
    deliberately does NOT load the hall's style.css or its tokens — the sky is
    its own surface (black void, Manrope, JetBrains Mono for figures), and the
-   template's values are the contract. Keep it one file (the task says so). */
+   template's values are the contract. Keep it one file (the task says so).
+   ONE SHEET, TWO DOORS (part 4, task 1004232): /thinking and /goal-map are the
+   same page opened in different lenses, so both bodies are named below and
+   nothing in here is per-page. */
 /* The template declared these on :root. They sit on the page's body here,
    with the template's values untouched, because the server splices the
    branding pack's own :root (--ink, --accent, --rule …) into <head> AFTER this
@@ -14,7 +17,7 @@
    its own — tests/hall_reading_world.mjs; color-scheme inherits from body
    too). Same reason `body` below is qualified: a pack backdrop is written as
    `body{background:…}` and the void must win. */
-body[data-page="thinking"] {
+body[data-page="thinking"], body[data-page="goal-map"] {
   color-scheme: dark;
   --void: #000000; --ink: #ffffff; --ink-soft: #c0c0c0; --ink-faint: #a8a8a8; --ink-dim: #65656a; --ink-ghost: #3a3a3f;
   --rule: rgba(255,255,255,.16); --rule-soft: rgba(255,255,255,.08); --glass: rgba(255,255,255,.075); --glass-strong: rgba(255,255,255,.14);
@@ -23,7 +26,7 @@ body[data-page="thinking"] {
   --face: Manrope, "Segoe UI", system-ui, -apple-system, sans-serif;
 }
 html, body { height: 100%; }
-body[data-page="thinking"] { margin: 0; background: var(--void); color: var(--ink); font-family: var(--face); font-size: 15px; line-height: 1.5; overflow: hidden; -webkit-font-smoothing: antialiased; }
+body[data-page="thinking"], body[data-page="goal-map"] { margin: 0; background: var(--void); color: var(--ink); font-family: var(--face); font-size: 15px; line-height: 1.5; overflow: hidden; -webkit-font-smoothing: antialiased; }
 button { font-family: inherit; }
 a { color: var(--accent); }
 .lbl { font: var(--label); letter-spacing: .14em; text-transform: uppercase; color: var(--ink-faint); }

package/modules/hall-ui/public/thinking.html

@@ -12,7 +12,7 @@
        links, injected into this head by the server like every hall page's
        (tests/hall_tokens.mjs: no hall page hardcodes a web-font stylesheet).
        The template carried its own Google Fonts link for the same two faces. -->
-  <link rel="stylesheet" href="/builders/thinking.css?v=2026-09-25-sky3">
+  <link rel="stylesheet" href="/builders/thinking.css?v=2026-09-25-sky4">
 </head>
 <!-- THE SKY (task 1004231 / sky part 3 of 5, goal 1000095; ADR 0331, ADR 0227
      §11). This page is docs/design/mocks/sky/sky.template.html — the prototype
@@ -29,7 +29,13 @@
      room survives inside it as the list drawer (L). /sky, the old ambient
      page's URL, 301s here (src/bongos/serve-internal.js). It carries no hall
      chrome on purpose: the sky is a full-screen surface with its own header,
-     and the hall's doors (the record, the goal, the task) open from the panel. -->
+     and the hall's doors (the record, the goal, the task) open from the panel.
+
+     The same markup, sheet and scripts serve THE PROJECT SKY at /goal-map
+     (part 4, task 1004232): that body says data-sky-lens="all", so the boot
+     opens in "the whole project" and the tour hands back to it. The switcher
+     is two doors — "the whole project" leaves for /goal-map from here, and
+     "simple" / "your thinking" leave for here from there. -->
 <body data-page="thinking" data-page-title="Your sky">
 
 <!-- The one <main> landmark the kit's a11y floor asks of every hall page
@@ -124,13 +130,13 @@
   </div>
 </footer>
 
-<script src="/builders/idea-objects.js?v=2026-09-25-sky3"></script>
-<script src="/builders/sky-data.js?v=2026-09-25-sky3"></script>
-<script src="/builders/sky-layout.js?v=2026-09-25-sky3"></script>
-<script src="/builders/sky-draw.js?v=2026-09-25-sky3"></script>
-<script src="/builders/sky-interaction.js?v=2026-09-25-sky3"></script>
-<script src="/builders/sky-panel.js?v=2026-09-25-sky3"></script>
-<script src="/builders/sky-composer.js?v=2026-09-25-sky3"></script>
-<script src="/builders/sky-tour.js?v=2026-09-25-sky3"></script>
+<script src="/builders/idea-objects.js?v=2026-09-25-sky4"></script>
+<script src="/builders/sky-data.js?v=2026-09-25-sky4"></script>
+<script src="/builders/sky-layout.js?v=2026-09-25-sky4"></script>
+<script src="/builders/sky-draw.js?v=2026-09-25-sky4"></script>
+<script src="/builders/sky-interaction.js?v=2026-09-25-sky4"></script>
+<script src="/builders/sky-panel.js?v=2026-09-25-sky4"></script>
+<script src="/builders/sky-composer.js?v=2026-09-25-sky4"></script>
+<script src="/builders/sky-tour.js?v=2026-09-25-sky4"></script>
 </body>
 </html>

package/modules/hall-ui/public/watch.html

@@ -162,7 +162,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html

@@ -171,7 +171,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-22-movefeedback1"></script>
+<script src="/builders/shell.js?v=2026-09-25-sky4b"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/modules/provisioning/routes/provisioning.js

@@ -49,7 +49,7 @@ const express = require('express');
 const api = require('../../../src/module-api');
 const auth = api, { pool, validateOrRespond, parseId } = api;
 const provisioning = require('../provisioning');
-const { costLedger } = require('../cost-ledger');
+const { costLedger, ownerMonthlyUsd } = require('../cost-ledger');
 const { onboardPlan, stepsForShape } = require('../onboard-plan');
 const { ALWAYS_ON_CORE, OPTIONAL_MODULES, starterBundleAnswerTable, optionalModules, effectiveModules } = require('../starter-bundles');
 const { recommendationsForDetails } = require('../recommendations');
@@ -144,10 +144,10 @@ function publishVerdict(row) {
 }
 
 // The owner-facing projection every instance read returns: the allow-listed row
-// plus the derived publish verdict. One helper so a new read cannot ship the row
-// without the verdict and leave an owner unable to see why they are dark matter.
+// plus the derived publish verdict and the estimate of the owner's own hosting bill
+// (task 1001949; null = unpriced, never 0). Owner- or archon-scoped reads only.
 function ownerInstance(row) {
-  return { ...provisioning.publicInstance(row), publish: publishVerdict(row) };
+  return { ...provisioning.publicInstance(row), publish: publishVerdict(row), owner_monthly_usd: ownerMonthlyUsd({ hostingShape: row.hosting_shape, tier: row.tier }) };
 }
 
 // Project an instance row for the fleet view — the owner identity + the same

package/modules/public-landing/public/projects.html

@@ -5573,6 +5573,12 @@ summary{min-height:24px;padding:3px 0;}
 
   /* one label · value pair of the manage ledger */
   function ledgerRow(r) { return '<span class="k">' + r[0] + '</span><span class="v">' + r[1] + '</span>'; }
+  /* the owner's own hosting bill (task 1001949, ADR 0327): an estimate, since the
+     provider bills them directly. null is unpriced — a $0 would be a price nobody quoted */
+  function hostingBill(usd) {
+    if (typeof usd !== 'number' || !isFinite(usd)) return 'not priced yet';
+    return '$' + (usd % 1 ? usd.toFixed(2) : String(usd)) + '/month, estimated. Render bills you directly.';
+  }
   /* the head's planet and the ledger's planet row (task 1003345) — one resolution
      (planetOf) for both, so the head, the row and the sky can never disagree; the
      planet row is the slot the picker (task 1003347) fills */
@@ -5601,6 +5607,7 @@ summary{min-height:24px;padding:3px 0;}
     var server = inst.hosting_shape ? esc(SHAPE_LABEL[inst.hosting_shape] || inst.hosting_shape) : '';
     if (inst.onboard_mode === 'adopt') server += (server ? ', ' : '') + 'adopted repo';
     if (server) rows.push(['server', server]);
+    if (inst.hosting_shape === 'cloud-host' && inst.status !== 'torn_down') rows.push(['hosting bill', hostingBill(inst.owner_monthly_usd)]);
     $('mMeta').innerHTML = rows.map(ledgerRow).join('');
     $('mMeta').hidden = !rows.length;
     var addr = addressRow(inst, true);

package/modules/ui-design/kit/fixtures/provisioning-instances.json

@@ -26,6 +26,7 @@
       "domain": null,
       "target_ref": "builder/harbor",
       "hosting_shape": "cloud-host",
+      "owner_monthly_usd": null,
       "onboard_mode": "scaffold",
       "created_at": "$now-6m",
       "provisioned_at": null,

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.1013",
+  "version": "1.19.1015",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.1013",
+      "version": "1.19.1015",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.1013",
+  "version": "1.19.1015",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/auth.js

@@ -462,6 +462,10 @@ const PAGE_GATES = Object.freeze({
   // — a vulnerability window, and exactly the kind of topology ADR 0043 keeps off
   // unauthenticated surfaces.
   requireCorePinPage: Object.freeze({ permission: 'core.pin.move', deniedTo: '/builders' }),
+  // The /fleet cost page (task 1001949) — on `provisioning.fleet.manage`, the SAME atom
+  // its one read (GET /provisioning/fleet/cost-ledger) checks: every owner's projects
+  // and what they cost, so the page reaches exactly as far as the data does.
+  requireFleetPage: Object.freeze({ permission: 'provisioning.fleet.manage', deniedTo: '/builders' }),
 });
 
 // The `alsoAdmits` door — "is this visitor the page's OTHER audience?", asked of
@@ -637,6 +641,9 @@ async function requireBoardVotePage(req, res, next) {
 async function requireCorePinPage(req, res, next) {
   return runPageGate('requireCorePinPage', req, res, next);
 }
+async function requireFleetPage(req, res, next) {
+  return runPageGate('requireFleetPage', req, res, next);
+}
 
 // ---------------------------------------------------------------------------
 // Route-gate inventory (V3.R06 #231) — the canonical "who can call what" list.
@@ -929,6 +936,7 @@ module.exports = {
   requireProjectCuratePage,
   requireBoardVotePage,
   requireCorePinPage,
+  requireFleetPage,
   requireRank,
   rankMeetsThreshold,
   requirePermission,

package/src/bongos/serve-internal.js

@@ -954,6 +954,8 @@ function mountInternalSurfaces(app) {
   // statically, and a comment in that gap makes the page test as UNGATED while
   // looking gated here. Prose goes above the const, as here.
   const DEPLOY_PAGE_RE = /^\/builders\/deploy(?:\.html)?\/?$/;
+  // The fleet cost page (task 1001949), on the atom its one read checks.
+  const FLEET_PAGE_RE = /^\/builders\/fleet(?:\.html)?\/?$/;
   // /scouting WAS the legacy twin of /people — the same /api/gds/scouting
   // directory, left behind when task 1002577 graduated it into the hall. Task
   // 1003470 had already made the two one page (scouting.html rendered people's
@@ -1004,6 +1006,9 @@ function mountInternalSurfaces(app) {
     if (DEPLOY_PAGE_RE.test(norm)) {
       return gdsAuth.requireCorePinPage(req, res, next);
     }
+    if (FLEET_PAGE_RE.test(norm)) {
+      return gdsAuth.requireFleetPage(req, res, next);
+    }
     next();
   });
 
@@ -1166,6 +1171,10 @@ function mountInternalSurfaces(app) {
   // task 1003479 (goal 1000089): `goal-map` — the map of which goals wait on which,
   // reached from Goals. It reads GET /goals/graph, which is `requireBuilder`, so a
   // page gated any lower would show a signed-out visitor an empty shell.
+  // task 1004232 (sky part 4): `goal-map` is now THE PROJECT SKY — the same page
+  // as `thinking`, opened in its "the whole project" lens — and holds the nav
+  // slot under Goals the map was denied (ADR 0227 §11). Same tier: it reads GET
+  // /sky and GET /sky/mine, the sky's own reads, behind the same sign-in.
   // task 1004231 (sky part 3): `thinking` is now THE SKY itself — the prototype
   // the owner adopted (docs/design/mocks/sky/, ADR 0331) built over GET /sky +
   // GET /sky/mine, with the room inside it as the list drawer. The old ambient

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.1013'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.1015'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/auth_resolve_failure.mjs

@@ -98,16 +98,17 @@ test('AUDIT: every async middleware mounted directly on a router owns its reject
   //   requireBoardVotePage      /   ADR 0266 /board-room vote gate)
   //   requireCorePinPage        /   ADR 0293's /deploy door — the narrowest of them,
   //                                 on the archon-floor `core.pin.move` atom.
+  //   requireFleetPage            — task 1001949's /fleet cost page, same delegation.
   // Task 1003450 removed two more — requireNonXenosPage and the R113
   // requireGovernmentManagePage — which had both ended up dispatched from no
   // route at all; tests/hall_page_gate_map.mjs now fails if that recurs.
   // Anything else async and router-mounted must be added with its own try/catch.
   const src = fs.readFileSync(path.join(ROOT, 'src', 'bongos', 'auth.js'), 'utf8');
   const asyncMw = [...src.matchAll(/^async function (require\w+|allow\w+)\s*\(req, res, next\)/gm)].map((m) => m[1]);
-  assert.deepEqual(asyncMw.sort(), ['requireBoardVotePage', 'requireBuilder', 'requireBuilderPage', 'requireCorePinPage', 'requireGovernmentPage', 'requireProjectCuratePage'],
+  assert.deepEqual(asyncMw.sort(), ['requireBoardVotePage', 'requireBuilder', 'requireBuilderPage', 'requireCorePinPage', 'requireFleetPage', 'requireGovernmentPage', 'requireProjectCuratePage'],
     'a new async router middleware appeared — give it a try/catch and add it here');
   // The page gates must actually delegate (that is WHY they are safe).
-  for (const name of ['requireBuilderPage', 'requireGovernmentPage', 'requireProjectCuratePage', 'requireBoardVotePage', 'requireCorePinPage']) {
+  for (const name of ['requireBuilderPage', 'requireGovernmentPage', 'requireProjectCuratePage', 'requireBoardVotePage', 'requireCorePinPage', 'requireFleetPage']) {
     const fn = src.slice(src.indexOf(`async function ${name}`));
     assert.match(sliceFn(fn), /runPageGate\(/, `${name} must delegate to the guarded runPageGate`);
   }