@bongos/core 1.19.1040 → 1.19.1042

package/clients/bongos-client/bongos-client.global.js

@@ -948,6 +948,10 @@ function createClient(opts = {}) {
       // GET /sky/mine — rank: any-builder — GET /sky/mine
       getSkyMine: (args) => request("GET", "/sky/mine", { hasBody: false }, args),
     },
+    "softwareUpdate": {
+      // GET /software-update — rank: any-builder — GET /software-update
+      getSoftwareUpdate: (args) => request("GET", "/software-update", { hasBody: false }, args),
+    },
     "specialities": {
       // GET /specialities — rank: any-builder — GET /specialities
       getSpecialities: (args) => request("GET", "/specialities", { hasBody: false }, args),

package/clients/bongos-client/index.cjs

@@ -947,6 +947,10 @@ function createClient(opts = {}) {
       // GET /sky/mine — rank: any-builder — GET /sky/mine
       getSkyMine: (args) => request("GET", "/sky/mine", { hasBody: false }, args),
     },
+    "softwareUpdate": {
+      // GET /software-update — rank: any-builder — GET /software-update
+      getSoftwareUpdate: (args) => request("GET", "/software-update", { hasBody: false }, args),
+    },
     "specialities": {
       // GET /specialities — rank: any-builder — GET /specialities
       getSpecialities: (args) => request("GET", "/specialities", { hasBody: false }, args),

package/clients/bongos-client/index.d.ts

@@ -61,7 +61,7 @@ export interface GetConnectionsDegreeHandleResponse { handle: unknown; degree: u
 export interface GetConnectionsRequestsResponse { incoming: unknown; outgoing: unknown; incoming_count: unknown; outgoing_count: unknown }
 export interface GetConnectionsResponse { connections: unknown; count: unknown }
 export interface GetConnectionsSuggestionsResponse { suggestions: unknown; count: unknown }
-export interface GetCoreUpdateResponse { ok: boolean; update: unknown; deploy_url: unknown }
+export interface GetCoreUpdateResponse { ok: boolean; update: unknown }
 export interface GetCoreUpgradesResponse { ok: boolean; running: unknown; limit: unknown; upgrades: unknown }
 export interface GetDiscordChannelsPlanResponse { ok: boolean; guild_id: unknown; op_count: unknown; ops: unknown; warnings: unknown }
 export interface GetDiscordChannelsSnapshotResponse { ok: boolean; guild_id: unknown; config: unknown; warnings: unknown }
@@ -157,6 +157,7 @@ export interface GetSecurityScansResponse { scans: unknown }
 export interface GetSessionsIdResponse { session: unknown }
 export interface GetSessionsMineResponse { sessions: unknown; count: unknown }
 export interface GetSessionsSearchResponse { sessions: unknown; count: unknown; total: unknown; totals: unknown; limit: unknown; offset: unknown; session_types: unknown }
+export interface GetSoftwareUpdateResponse { ok: boolean; update: unknown; door: unknown; can_update: unknown }
 export interface GetSpecialitiesIdDocumentsResponse { documents: unknown }
 export interface GetSpecialitiesIdResponse { speciality: unknown }
 export interface GetSpecialitiesOfferedResponse { suggestions: unknown }
@@ -1362,6 +1363,10 @@ export interface BongosClient {
     /** GET /sky/mine — rank: any-builder */
     getSkyMine(args?: RequestArgs): Promise<ApiResponse>;
   };
+  "softwareUpdate": {
+    /** GET /software-update — rank: any-builder */
+    getSoftwareUpdate(args?: RequestArgs): Promise<GetSoftwareUpdateResponse>;
+  };
   "specialities": {
     /** GET /specialities — rank: any-builder */
     getSpecialities(args?: RequestArgs): Promise<GetSpecialitiesResponse>;

package/clients/bongos-client/index.mjs

@@ -944,6 +944,10 @@ export function createClient(opts = {}) {
       // GET /sky/mine — rank: any-builder — GET /sky/mine
       getSkyMine: (args) => request("GET", "/sky/mine", { hasBody: false }, args),
     },
+    "softwareUpdate": {
+      // GET /software-update — rank: any-builder — GET /software-update
+      getSoftwareUpdate: (args) => request("GET", "/software-update", { hasBody: false }, args),
+    },
     "specialities": {
       // GET /specialities — rank: any-builder — GET /specialities
       getSpecialities: (args) => request("GET", "/specialities", { hasBody: false }, args),

package/docs/adr/0043-git-ssh-trust-boundary-and-rank-floor-on-permission-paths.md

@@ -131,6 +131,20 @@ live reference instance where the Builder 25 incident happened, so it carries it
 - The layer table above stands: Layer 1 is still not a trust boundary; the post-push main audit —
   since task 1002612 a CI job on every push to `main` — remains the authoritative layer.
 
+## The un-spoofable signal: attestation pass, flag-only (2026-09-26, task 1001433)
+
+The residual in the #863-followup section, that the git author name can be typed, gets its
+closure. The owner chose to build it on the mark the server already writes: the
+`gate-author-trust` commit status, posted on a ship's pushed tip only after the server has
+resolved the builder's CLI session to a Metic+ rank (ADR 0058). `main-audit.js` now traces
+each permission-sensitive commit to the pull request that brought it onto main (the second
+parent of its first-parent merge). It requires that head to carry a success of that context,
+**posted by the server's own GitHub identity**; anyone with write access can post a status
+of the same name, so the creator is the part checked. By the owner's ruling it is
+**flag-only**: an unattested commit is a `review` finding and never fails the audit or the
+deploy gate. Moving it to blocking is a later, separate decision. Measured against the last
+60 mainline merges: 32 protected commits, 0 flagged.
+
 ## Notes
 
 We did **not** take immediate action against Builder 25 — Lars was overseeing the session and the change itself was a legitimate bug fix. The point of this ADR is the *mechanism*, not the person: the system must make the bypass hard and visible regardless of intent.

package/docs/adr/0339-a-projects-owner-upgrades-it-and-a-hosted-project-hands-off-to-the-hub-door.md

@@ -5,6 +5,7 @@
 - **Task:** [task 1004174](https://cloudbongos.com/builders#/task/1004174) (goal 1000090 — BONGOS-V2)
 - **Deciders:** the owner, Lars. On 2026-09-22 he said "every project has the option to upgrade its version of bongos including bongos itself", and that the control belongs in that project's own hall. On 2026-09-26 he ruled that **only a project's owner upgrades it**, adding that for him "owners and archons are the same", because he owns the platform.
 - **Amends:** [ADR 0293](0293-the-owners-deploy-door-is-an-intent-the-control-plane-drains.md) D5 ("Archon-gated server-side"). The deploy door gains a second audience, as stated below. D1 (the web tier only asks, the control plane acts), D3, D4 and D6 are unchanged.
+- **Amended by:** [ADR 0340](0340-every-hall-takes-its-update-from-settings-and-deploy-is-the-platform-halls-page.md) (task 1004296) — D3's hand-off moves from the banner and the rail to Settings → Software update's Update button, and `GET /core-update` no longer answers `deploy_url`.
 - **Related:** [ADR 0328](0328-a-hosted-projects-authority-is-its-membership-row-not-its-owner-column.md) (the owner-OR-operator gate shape this reuses), [ADR 0210](0210-scouting-graduates-on-an-instance-asserted-owner-claim.md) (the `alsoAdmits` page-gate door this reuses), [ADR 0246](0246-catalog-membership-is-a-projection-not-a-federation-side-effect.md) (a hosted project's hub client id is its slug), [ADR 0043](0043-git-ssh-trust-boundary-and-rank-floor-on-permission-paths.md) / 0111 §2 (the web tier gains no capability)
 
 ## Context

package/docs/adr/0340-every-hall-takes-its-update-from-settings-and-deploy-is-the-platform-halls-page.md

@@ -0,0 +1,64 @@
+# ADR 0340 — Every hall takes its update from Settings, and /deploy is the platform hall's page
+
+- **Status:** Accepted
+- **Date:** 2026-09-26
+- **Task:** [task 1004296](https://cloudbongos.com/builders#/task/1004296) (goal 1000090 — BONGOS-V2), split out of [task 1002622](https://cloudbongos.com/builders#/task/1002622) §1.
+- **Deciders:** the owner, Lars. On 2026-09-25 he asked that each builders hall's Settings carry "a version description where they can pull the latest release. Just like iOS does", and ruled that `/deploy` is "only for bongos builders hall itself not for all production ones".
+- **Amends:** [ADR 0339](0339-a-projects-owner-upgrades-it-and-a-hosted-project-hands-off-to-the-hub-door.md) D3 (where a hosted hall uses the hub address) and the reach of [ADR 0293](0293-the-owners-deploy-door-is-an-intent-the-control-plane-drains.md)'s door page. Nothing about who may move a pin, or how the move runs, changes.
+
+## Context
+
+Before this change a project learned about a newer core in one place, the banner (task 1004045), and only a holder of `core.pin.move` ever saw it. The banner named two version numbers and nothing that had landed between them. The only per-version record of work is the `release-notes.json` each package carries (task 1004218); the changelog's CI lines name none.
+
+Every hall also served `/deploy`. The page's data and both of its acts are provisioning-module routes, so in a hall without that module (a hosted project, a self-hosted instance) it was a page with nothing behind it.
+
+## Decision
+
+### D1 — Settings → Software update, in the core, in every hall
+
+A sixth Settings group. It shows the running core, then either "up to date" or the newest release the update channel lets this project take, then what each version in between brings, read from the newest package's own release notes.
+
+- **Every signed-in builder reads it** (`GET /api/bongos/software-update`, `requireBuilder` only). It discloses nothing the public `GET /version` and npm do not already publish, so ADR 0043's vulnerability-window reason, which keeps the banner's reads on `core.pin.move`, does not apply here.
+- **The channel rule is the runner's own** (`resolveChannelTarget`), with no channel passed, exactly as the banner. The panel never offers a version the runner would refuse.
+- **"Up to date" is said only from an answer.** A failed registry read, a running version that cannot be named, and release notes that could not be read each render as what they are.
+
+### D2 — The Update button leads to the door; it is not the door
+
+The server names where this project's door is:
+
+- `local` — `/deploy`, where the hall runs the provisioning module.
+- `hub` — ADR 0339 D3's `<hub>/deploy?project=<slug>`, on a federated hosted project.
+- `cli` — neither, as on a self-hosted instance. The panel says `bongos upgrade` on the server takes the version, with the same health check and rollback.
+
+The button is drawn only when the viewer holds `core.pin.move`. That check is cosmetic; the door re-checks every request.
+
+### D3 — `/deploy` exists only where the door does
+
+In a hall that does not run the provisioning module, `GET /deploy` answers `302` to `/settings#software-update`. The redirect carries no gate, because it discloses nothing and Settings' own wall applies once it is followed. The platform's hall keeps `/deploy` behind its unchanged page gate. It remains the door for its own pin and, through `?project=`, for every hosted project's (ADR 0339).
+
+### D4 — The banner and the rail stop linking off-site
+
+On every hall but the platform's, the banner's Upgrade link opens Settings → Software update. On that panel itself the banner points rather than linking to the page it is on, the rule task 1004145 set for `/deploy`. The rail's Deploy item is no longer re-pointed at the hub, and it stays hidden wherever the module is off. `GET /core-update` no longer answers `deploy_url`. The hub address now lives only in `GET /software-update`'s `door`, which is ADR 0339 D3's hand-off moved from two places to one.
+
+### D5 — The registry reader is the core's
+
+`src/bongos/package-registry.js` holds the packument read, the in-process tarball stream and the small tar reader. It moved out of the npm-release module (task 1002622), because the one reader every hall needs cannot live inside a module that only one hall runs. Modules reach it through the doorway's `readPackageRegistry`, and both readers share one process-local cache.
+
+## Rejected
+
+- **A copy of the two-step door inside Settings.** It would put the confirmation, the busy states and the rollback display in two places for one act. Those are the rules ADR 0293 D4 exists to keep exact.
+- **Gating the panel on `core.pin.move`, as the banner is.** The owner asked for the version in every builder's Settings, and the panel offers no act of its own.
+- **Keeping `/deploy` on other halls with a "moved" notice.** A page that exists only to say it does not belong there is the dead end this replaces.
+
+## Consequences
+
+- **A hosted project gets the panel when it runs a core carrying this ADR**, like every in-hall change. Until then its banner still hands off as ADR 0339 D3 described.
+- **The first open of the panel after a new release downloads that package once per server process** (about 24 MB for 1.19.1040, under a second from a droplet), then serves it from memory. It is read only when the group opens, never with the page.
+- **What's new links each entry to its task only in the platform's hall**, whose ledger the ids belong to. Elsewhere the entries are plain text.
+- **Proof:** `tests/software_update.mjs`:
+  - the reading, over a real gzipped tar and packument;
+  - the route, over real requests;
+  - the panel, executed in a DOM stub against a live reading;
+  - `/deploy`, answered by two real servers, one with the module and one without.
+
+  `tests/core_upgrade_owner_door.mjs` covers the banner's new link. Each guard was deleted in turn and a test went red.

package/docs/adr/README.md

@@ -431,3 +431,4 @@ This keeps the decision history honest and traceable.
 | 0337 | [**The hub account is the person, a hall account is their seat in one project, so anything that spans projects lives on the hub** ([task 1004255](https://cloudbongos.com/builders#/task/1004255), goal 1000110 — the owner's hub/hall re-scope, 2026-09-24/25). Extends [ADR 0141](<redacted>.md) from identity to placement: (1) a surface about the person across projects, or about more than one project, goes on the HUB (`public-landing`, `platform-identity`): people directory, community, guilds, connections, recruiting, platform-account settings; one about this project goes in the HALL (`hall-ui`); "Builders you may know" is on both; `status-ui` is the status dashboard, not the hall; (2) no authority moves, and hub actions still land as the project's own rows; (3) hall `/people` retires, ADR 0334's recruiting directory moves unchanged to the hub community page, `/roster` is the in-project directory; (4) owner calls: the hidden-builder recruiter panel is recruiter-only while public search is unchanged (amends community-tab spec D8); platform-account settings get a new hub page; **guild totals count hidden and private members by default, with a notice on the join card and a per-guild off switch (`counted_in_totals`), rounded to a 1–2–5 band, only once a guild has at least 3 of them, refreshed weekly; size stays the public roster length** (supersedes ADR 0336 D5; relaxes the privacy spec's "`hide_stats` beats everything" for guild totals only, for a member who was told), with the fake-account padding limit stated and accepted.](0337-the-hub-account-is-the-person-a-hall-account-is-their-seat-in-one-project.md) | platform identity / placement / privacy |
 | 0338 | [**Modules travel through a Bongos-hosted store, and an acquired module keeps working forever** ([task 1003782](https://cloudbongos.com/builders#/task/1003782), goal 1000091 — working area 5, owner Will). A module had no transport of its own: it reached an instance only inside the core (ADR 0107 §6) or in the instance's repo. Weighed npm packages, a Bongos-hosted store and git refs against the four things area 5's criteria require — entitlement before install, a per-version score, a tester channel, and a delist that stops distribution. npm and git refs fail entitlement and delist by construction. **D1:** Cloud Bongos hosts the store; a module version is a tarball + hash manifest in the same format `package-core.js` already emits (same `isPublishable()` gate), registry rows on the control-plane DB, artifacts in the already-paid DO Spaces bucket, served by the control plane only after an entitlement + channel check; free modules take the same path at price zero; install/update verify hashes on arrival; modules' own npm deps still travel via npm (ADR 0138). No new fixed cost. **D2 (owner):** delisting, author withdrawal or deletion removes a module from the catalog and stops new acquisitions and updates, but **an acquired module keeps working forever** — the store never disables or removes an installed copy and a delist never revokes an entitlement; the holder is told no more updates will come. Security issues are not a special case; a remote kill switch would need a superseding ADR. Rejected: npm, git refs, remote disable on delist.](0338-modules-travel-through-a-bongos-hosted-store.md) | modules / distribution / economy |
 | 0339 | [**A project's owner upgrades it, and a hosted project hands off to the hub's door** ([task 1004174](https://cloudbongos.com/builders#/task/1004174), goal 1000090 — the owner's ruling of 2026-09-26 that only a project's owner upgrades it). Amends ADR 0293 D5. **D1:** the deploy door's preview and move routes admit the OWNER of a tenant row (`co-tenant`/`cloud-host`) for that row, asked first; every other caller meets the unmodified `core.pin.move` gate, so a non-owner's refusal is unchanged whether or not the id exists and the widening can only admit. **D2:** the platform's own row stays atom-only. **D3:** `GET /core-update` names `<hub>/deploy?project=<slug>` on a federated project, and the hosted hall's banner and rail hand off there (the dead local Deploy item is gone); the hub's `/deploy` shell admits a project owner through `alsoAdmits: 'isProjectOwner'`. **D4:** the intent's actor records the door (`api:owner:<id>` / `api:archon:<id>`), both attributed on the `core_upgrades` ledger. Rejected: a tenant-side API that performs the upgrade, granting the system atom to owners, owners moving the platform row. ADR 0328 Phase 1 (task 1004159) should fold this gate into `requireProjectOwner`.](0339-a-projects-owner-upgrades-it-and-a-hosted-project-hands-off-to-the-hub-door.md) | provisioning / deploy door / permissions |
+| 0340 | [**Every hall takes its update from Settings, and /deploy is the platform hall's page** ([task 1004296](https://cloudbongos.com/builders#/task/1004296), goal 1000090 — the owner's 2026-09-25 asks: a Settings version panel "just like iOS", and /deploy only in the Bongos hall). Amends ADR 0339 D3 and the reach of ADR 0293's page. **D1:** Settings → Software update in the core — the running core, the newest release the runner's own channel rule allows, and what each version in between carries from the newest package's release notes; every signed-in builder reads it, and "up to date" is said only from an answer. **D2:** its Update button leads to the door (local /deploy, the hub's /deploy?project=, or a `bongos upgrade` sentence), drawn only for holders of core.pin.move. **D3:** /deploy 302s to Settings on a hall without the provisioning module. **D4:** the banner links Settings everywhere but the platform; the rail is no longer re-pointed; /core-update drops deploy_url. **D5:** the registry reader moved into the core (module-api readPackageRegistry). Rejected: a second copy of the two-step door, gating the panel on the atom, a "moved" page.](0340-every-hall-takes-its-update-from-settings-and-deploy-is-the-platform-halls-page.md) | deploy door / settings / core update |

package/docs/api/openapi.json

@@ -261,6 +261,10 @@
       "name": "sky",
       "description": "Endpoints under `/api/bongos/sky`."
     },
+    {
+      "name": "software-update",
+      "description": "Endpoints under `/api/bongos/software-update`."
+    },
     {
       "name": "specialities",
       "description": "Endpoints under `/api/bongos/specialities`."
@@ -17088,6 +17092,44 @@
         ]
       }
     },
+    "/software-update": {
+      "get": {
+        "operationId": "get_software_update",
+        "tags": [
+          "software-update"
+        ],
+        "summary": "GET /software-update",
+        "description": "GET /software-update — Settings → Software update (task 1004296): this project's core, the newest release its channel allows, what the versions between them carry, and where this project's Update button leads. Any signed-in builder (see the header).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "src/bongos/routes/core-update.js",
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetSoftwareUpdateResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/specialities": {
       "get": {
         "operationId": "get_specialities",
@@ -21129,13 +21171,11 @@
           "ok": {
             "type": "boolean"
           },
-          "update": {},
-          "deploy_url": {}
+          "update": {}
         },
         "required": [
           "ok",
-          "update",
-          "deploy_url"
+          "update"
         ]
       },
       "GetCoreUpgradesResponse": {
@@ -22383,6 +22423,23 @@
           "session_types"
         ]
       },
+      "GetSoftwareUpdateResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "update": {},
+          "door": {},
+          "can_update": {}
+        },
+        "required": [
+          "ok",
+          "update",
+          "door",
+          "can_update"
+        ]
+      },
       "GetSpecialitiesIdDocumentsResponse": {
         "type": "object",
         "properties": {
@@ -27938,9 +27995,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 440,
-  "x-schema-count": 481,
+  "x-endpoint-count": 441,
+  "x-schema-count": 482,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 329,
+  "x-response-schemas": 330,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 440 endpoints across 75 route files.
+> **Generated from the live route files** — the route file is authoritative. 441 endpoints across 75 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -679,6 +679,12 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/sky` | `any-builder` | — | GET /sky, the whole project sky (task 1004230, ADR 0331). |
 | GET | `/api/bongos/sky/mine` | `any-builder` | — | GET /sky/mine, every thought the SIGNED-IN builder filed with its state, size and descent, capped at 1000 (task 1004230). |
 
+## `software-update` (1)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| GET | `/api/bongos/software-update` | `any-builder` | — | GET /software-update — Settings → Software update (task 1004296): this project's core, the newest release its channel allows, what the ve… |
+
 ## `specialities` (12)
 
 | Method | Path | Rank | Body | Description |

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**2052 strings** across 3 surfaces · 1754 distinct pieces of copy · 2052 certain, 0 heuristic · 211 shown in more than one place.
+**2072 strings** across 3 surfaces · 1774 distinct pieces of copy · 2072 certain, 0 heuristic · 211 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 102 | 1551 |
+| `builders-hall` | `modules/hall-ui/public` | 103 | 1571 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 5 | 401 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7926e30955d2` | 3x | ← Back to goal | modules/hall-ui/public/goals.html:199, modules/hall-ui/public/goals.html:210, modules/hall-ui/public/goals.html:222 |
 | … | | _171 more in the JSON registry_ | |
 
-## `builders-hall` — 1551 strings
+## `builders-hall` — 1571 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -247,6 +247,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e6982a9ff948` | certain | Charter library | `modules/hall-ui/public/government.js:799` |
 | `f66f5cdaa732` | certain | Checked against {…} — nothing blocks this move.{…} | `modules/hall-ui/public/deploy.js:294` |
 | `f8725cf3ba62` | certain | Checking dependency order… | `modules/hall-ui/public/work.js:865` |
+| `5f8b267e47e5` | certain | Checking for a newer version… | `modules/hall-ui/public/settings-software-update.js:170` |
 | `7a41b18c0de8` | certain | Checking for conflicts… | `modules/hall-ui/public/work.js:844` |
 | `ac7cf27bd7de` | certain | Checking what this would do, and what it would bring in. The answer comes from the machine itself, so it can t | `modules/hall-ui/public/deploy.js:283` |
 | `aa3ba7d28a76` | certain | Checking your key… | `modules/hall-ui/public/settings.js:1053` |
@@ -308,6 +309,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e1fc7cedf4e7` | certain | Could not change rank: {…} | `modules/hall-ui/public/watch.js:860` |
 | `b9e53fbd90e6` | certain | Could not change standing: {…} | `modules/hall-ui/public/watch.js:886` |
 | `1ef1efc15b6c` | certain | Could not change that just now. | `modules/hall-ui/public/goals-render.js:1378` |
+| `6214998a5ebe` | certain | Could not check for a newer version: {…}. | `modules/hall-ui/public/settings-software-update.js:135` |
+| `9ab613a308d6` | certain | Could not check for updates: {…}. | `modules/hall-ui/public/settings-software-update.js:180` |
 | `c3f99e7c6e6b` | certain | Could not copy automatically — select and copy manually. ({…}) | `modules/hall-ui/public/settings.js:932` |
 | `e3fd1febf63d` | certain | Could not copy to the clipboard. Try again. | `modules/hall-ui/public/goals-page.js:380` |
 | `e3fd1febf63d` | certain | Could not copy to the clipboard. Try again. | `modules/hall-ui/public/work.js:626` |
@@ -329,10 +332,10 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `edd5bafbe075` | certain | Could not load the queue just now. | `modules/hall-ui/public/ideas.js:869` |
 | `02bb0570996a` | certain | Could not load the ranks. | `modules/hall-ui/public/ranks.js:197` |
 | `2878778cf9f3` | certain | Could not load this page. | `modules/hall-ui/public/watch.js:1322` |
-| `4b0c8d94541c` | certain | Could not load your account. Reload the page to try again. | `modules/hall-ui/public/settings.js:1310` |
+| `4b0c8d94541c` | certain | Could not load your account. Reload the page to try again. | `modules/hall-ui/public/settings.js:1315` |
 | `2a9fb4046bc4` | certain | Could not load your rank. Return to the hall and try again. | `modules/hall-ui/public/ranks.js:196` |
 | `9d533e811dec` | certain | Could not load your sessions: {…} | `modules/hall-ui/public/settings-sessions.js:114` |
-| `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1313` |
+| `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1318` |
 | `de244c45d916` | certain | Could not load {…} | `modules/hall-ui/public/task.js:975` |
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:259` |
 | `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:297` |
@@ -587,15 +590,17 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a21788f84e29` | certain | Its author gave no scope recommendation. | `modules/hall-ui/public/board-room.js:295` |
 | `b0bcb3f844ec` | certain | Its author marked this as needing development — anyone can turn it into a Full Idea, and they keep the credit  | `modules/hall-ui/public/idea.js:445` |
 | `680491549e47` | certain | Its author recommends this becomes | `modules/hall-ui/public/board-room.js:294` |
+| `5e62ee5addf1` | certain | Its details are below. | `modules/hall-ui/public/shell.js:682` |
+| `d42a078838bf` | certain | Its notes could not be read. | `modules/hall-ui/public/settings-software-update.js:101` |
 | `b7719e855009` | certain | Join goal | `modules/hall-ui/public/goals-render.js:974` |
 | `9f9424a5100b` | certain | Join our Discord | `modules/hall-ui/public/hall-render.js:823` |
 | `7ee76a958445` | certain | Join requests | `modules/hall-ui/public/goals-render.js:1432` |
 | `b7ab5922126b` | certain | Join-requests to approve | `modules/hall-ui/public/goal-inbox.js:154` |
-| `d305f0df6f25` | certain | Jump to | `modules/hall-ui/public/palette.js:226` |
+| `d305f0df6f25` | certain | Jump to | `modules/hall-ui/public/palette.js:227` |
 | `01176c156112` | certain | Jump to a goal or a thought | `modules/hall-ui/public/goal-map.html:81` |
 | `01176c156112` | certain | Jump to a goal or a thought | `modules/hall-ui/public/thinking.html:80` |
-| `2bfc5a50ce88` | certain | Jump to a page or record | `modules/hall-ui/public/shell.js:500` |
-| `eba610d25523` | certain | Jump to… | `modules/hall-ui/public/shell.js:502` |
+| `2bfc5a50ce88` | certain | Jump to a page or record | `modules/hall-ui/public/shell.js:501` |
+| `eba610d25523` | certain | Jump to… | `modules/hall-ui/public/shell.js:503` |
 | `bc779353aa0c` | certain | Karma — peer recognition and approvals, a separate counter from {…}. | `modules/hall-ui/public/profile.js:94` |
 | `de0e1590667f` | certain | Keep all {…} {…} — they are the values the code drops in, and the change cannot land without them. | `modules/hall-ui/public/copy-desk.js:442` |
 | `fbe40b5818a3` | certain | Key removed. | `modules/hall-ui/public/settings.js:1128` |
@@ -608,7 +613,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9be8b839eff8` | certain | Last 7 days | `modules/hall-ui/public/hall-widgets.js:129` |
 | `59f0bc78a28f` | certain | Last 90 days | `modules/hall-ui/public/hall-widgets.js:130` |
 | `13bae4dfb28e` | certain | Last claimed by | `modules/hall-ui/public/task.js:656` |
-| `1526a7ae8c85` | certain | Latest version: v{…}. | `modules/hall-ui/public/settings.js:1396` |
+| `1526a7ae8c85` | certain | Latest version: v{…}. | `modules/hall-ui/public/settings.js:1401` |
 | `9e8828d602bc` | certain | Lay your thoughts over the project map. | `modules/hall-ui/public/goal-map.html:72` |
 | `9e8828d602bc` | certain | Lay your thoughts over the project map. | `modules/hall-ui/public/thinking.html:71` |
 | `7c9b7a89353b` | certain | Leave goal | `modules/hall-ui/public/goals-render.js:961` |
@@ -690,7 +695,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c255749ec989` | certain | No achievements earned yet. | `modules/hall-ui/public/builders.js:472` |
 | `c255749ec989` | certain | No achievements earned yet. | `modules/hall-ui/public/profile.js:144` |
 | `479c1a45f39d` | certain | No backlog tasks match these filters. Try widening them. | `modules/hall-ui/public/work.js:1101` |
-| `83f62fc94271` | certain | No builder account found for this sign-in. | `modules/hall-ui/public/settings.js:1318` |
+| `83f62fc94271` | certain | No builder account found for this sign-in. | `modules/hall-ui/public/settings.js:1323` |
+| `449db2ead464` | certain | No changes are listed for this version. | `modules/hall-ui/public/settings-software-update.js:103` |
 | `6d6fd2314248` | certain | No cross-project activity reported yet. | `modules/hall-ui/public/profile.js:323` |
 | `b1ada579483c` | certain | No custom ranks yet | `modules/hall-ui/public/government.js:358` |
 | `6e2d2e11f84a` | certain | No description. | `modules/hall-ui/public/idea.js:122` |
@@ -702,7 +708,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `abc64639b134` | certain | No goals seeded yet. | `modules/hall-ui/public/roadmap.js:205` |
 | `139ec3636c22` | certain | No introductions right now. One appears here when a pairing round runs. | `modules/hall-ui/public/collab.html:99` |
 | `3b9823dd4579` | certain | No maintenance declared — nobody is on the hook for this module as the core advances. | `modules/hall-ui/public/modules.js:92` |
-| `64a4281934d1` | certain | No match. Try a page name, or an id like | `modules/hall-ui/public/palette.js:182` |
+| `64a4281934d1` | certain | No match. Try a page name, or an id like | `modules/hall-ui/public/palette.js:183` |
+| `f52552a6afcd` | certain | No notes were packed for this version. | `modules/hall-ui/public/settings-software-update.js:102` |
 | `4f89817b92e5` | certain | No onboarding steps recorded yet. | `modules/hall-ui/public/hall-render.js:941` |
 | `421ae031594e` | certain | No open goals in this version | `modules/hall-ui/public/task.js:580` |
 | `2a6d7552e21f` | certain | No other sessions. | `modules/hall-ui/public/settings-sessions.js:64` |
@@ -766,6 +773,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f9f2a3af318a` | certain | Only mine | `modules/hall-ui/public/work.html:70` |
 | `e11eae1d0a92` | certain | Only the goals your thoughts touched — everything else fades. | `modules/hall-ui/public/goal-map.html:70` |
 | `e11eae1d0a92` | certain | Only the goals your thoughts touched — everything else fades. | `modules/hall-ui/public/thinking.html:69` |
+| `f74ec527907f` | certain | Only the people allowed to upgrade this project see an Update button here. | `modules/hall-ui/public/settings-software-update.js:73` |
 | `f28917ca859e` | certain | Only the thoughts of the last thirty days. | `modules/hall-ui/public/goal-map.html:68` |
 | `f28917ca859e` | certain | Only the thoughts of the last thirty days. | `modules/hall-ui/public/thinking.html:67` |
 | `3468d58eb1fd` | certain | Only this goal's owner or a manager (or an Archon) may add members. | `modules/hall-ui/public/goals-render.js:1330` |
@@ -776,7 +784,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `261d123970e8` | certain | Open goal #{…} | `modules/hall-ui/public/roadmap.js:112` |
 | `5f3e0b179839` | certain | Open in Sessions | `modules/hall-ui/public/task.js:483` |
 | `9f55e4674ebb` | certain | Open in the copy desk | `modules/hall-ui/public/studio.js:219` |
-| `3366b115217b` | certain | Open navigation | `modules/hall-ui/public/shell.js:491` |
+| `3366b115217b` | certain | Open navigation | `modules/hall-ui/public/shell.js:492` |
 | `855277dff074` | certain | Open task #{…} | `modules/hall-ui/public/goals-render.js:415` |
 | `855277dff074` | certain | Open task #{…} | `modules/hall-ui/public/work.js:1124` |
 | `99c630009152` | certain | Open tasks whose declared files overlap — sequence these before two builders collide. | `modules/hall-ui/public/goals.html:125` |
@@ -789,6 +797,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f6f68ba322be` | certain | Open {…} | `modules/hall-ui/public/goal-inbox.js:69` |
 | `f6f68ba322be` | certain | Open {…} | `modules/hall-ui/public/goals.js:67` |
 | `d9c802f5d85e` | certain | Opening the studio… | `modules/hall-ui/public/studio.html:45` |
+| `a2bd76ae030d` | certain | Opens this project's upgrade{…}: you see what would move, confirm it, and it installs, checks itself, and roll | `modules/hall-ui/public/settings-software-update.js:85` |
 | `569980a263ae` | certain | Optional. This is the ledger link — a copy change ships as a task like every other change. | `modules/hall-ui/public/copy-desk.html:130` |
 | `f2e9e8f21e8e` | certain | Or add someone without asking… | `modules/hall-ui/public/goals-render.js:1255` |
 | `c78d7388ffd7` | certain | Or just stay in the online terminal | `modules/hall-ui/public/hall-render.js:825` |
@@ -972,6 +981,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `dc0f9fe50a65` | certain | Show the setup guide again | `modules/hall-ui/public/index.html:64` |
 | `df16bd23e58e` | certain | Show the thoughts a session filed under your name. Off by default: only what a person filed. | `modules/hall-ui/public/goal-map.html:69` |
 | `df16bd23e58e` | certain | Show the thoughts a session filed under your name. Off by default: only what a person filed. | `modules/hall-ui/public/thinking.html:68` |
+| `44945da22716` | certain | Show {…} more version{…} | `modules/hall-ui/public/settings-software-update.js:119` |
 | `2af4c0f2b4b9` | certain | Showing {…} of {…}. | `modules/hall-ui/public/ideas.js:851` |
 | `838b17fa8d93` | certain | Shown on your public profile — it helps others know what you work on. | `modules/hall-ui/public/profile-nudge.js:69` |
 | `9bea6404e6e1` | certain | Sign in | `modules/hall-ui/public/profile.js:208` |
@@ -984,14 +994,15 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/hall-render.js:367` |
 | `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/hall-render.js:391` |
 | `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/hall-render.js:461` |
-| `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/shell.js:461` |
-| `1883ad7f07fc` | certain | Sign out | `modules/hall-ui/public/shell.js:479` |
-| `1883ad7f07fc` | certain | Sign out | `modules/hall-ui/public/shell.js:738` |
+| `e57ec24e13ef` | certain | Sign in with GitHub | `modules/hall-ui/public/shell.js:462` |
+| `1883ad7f07fc` | certain | Sign out | `modules/hall-ui/public/shell.js:480` |
+| `1883ad7f07fc` | certain | Sign out | `modules/hall-ui/public/shell.js:724` |
 | `8ad669ab2565` | certain | Sign out everywhere | `modules/hall-ui/public/settings.html:171` |
 | `ecc12c1dd4de` | certain | Skill voices | `modules/hall-ui/public/settings.html:350` |
-| `87cee78ca134` | certain | Skip to content | `modules/hall-ui/public/shell.js:729` |
+| `87cee78ca134` | certain | Skip to content | `modules/hall-ui/public/shell.js:715` |
 | `688ca7b6e30f` | certain | Slop — reads as machine-written | `modules/hall-ui/public/copy-desk.html:90` |
 | `82df09a08476` | certain | So the Archon knows who you are | `modules/hall-ui/public/hall-render.js:294` |
+| `207af7ce6828` | certain | Software update | `modules/hall-ui/public/settings.html:409` |
 | `7da6a848cd26` | certain | Someone helped | `modules/hall-ui/public/collab.js:296` |
 | `e7b592185803` | certain | Someone is holding a claim on this task. It has to be released before the task can be retired. | `modules/hall-ui/public/task.js:753` |
 | `867df58c9aaa` | certain | Something else | `modules/hall-ui/public/copy-desk.html:95` |
@@ -1016,7 +1027,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5831de503015` | certain | Studio — {{worldName}} | `modules/hall-ui/public/studio.html:10` |
 | `f79e1fb8ebd4` | certain | Suggested as you type; leave it on "no goal" and it waits for triage. | `modules/hall-ui/public/ideas.html:84` |
 | `a1482eff4ead` | certain | Suggested for you | `modules/hall-ui/public/settings-specialities.js:137` |
-| `1e40f33483eb` | certain | Switch theme | `modules/hall-ui/public/shell.js:506` |
+| `1e40f33483eb` | certain | Switch theme | `modules/hall-ui/public/shell.js:507` |
 | `93fa2e97dd35` | certain | System default for this skill | `modules/hall-ui/public/settings.js:72` |
 | `4894b1d9b0de` | certain | System oversight: people, operations and security. | `modules/hall-ui/public/watch.js:1335` |
 | `e604fc3ace79` | certain | Task # | `modules/hall-ui/public/blockers.js:139` |
@@ -1037,7 +1048,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2fc66e722e33` | certain | Tasks open once you have read the builder primer. | `modules/hall-ui/public/work.html:43` |
 | `44579eef0c8d` | certain | Tasks — {{worldName}} | `modules/hall-ui/public/work.html:6` |
 | `44579eef0c8d` | certain | Tasks — {{worldName}} | `modules/hall-ui/public/work.html:6` |
-| `2f4f047dc1b4` | certain | Text size | `modules/hall-ui/public/shell.js:505` |
+| `2f4f047dc1b4` | certain | Text size | `modules/hall-ui/public/shell.js:506` |
 | `f420429f942e` | certain | That builder no longer exists. | `modules/hall-ui/public/goals-render.js:1305` |
 | `545c59c1deb7` | certain | That is the session you are using right now. Ending it signs you out of this page. | `modules/hall-ui/public/settings-sessions.js:74` |
 | `282c3fa2d456` | certain | That is the wording it already has. Change something, or file a flag instead if you only want to mark it. | `modules/hall-ui/public/copy-desk.js:438` |
@@ -1083,6 +1094,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3bc5ec5f35ec` | certain | The ranks, lowest to highest | `modules/hall-ui/public/ranks.html:46` |
 | `c0034db3281c` | certain | The reason is recorded in the audit log. This is recoverable: a retired task can be restored to the backlog wi | `modules/hall-ui/public/task.js:779` |
 | `1ce78006fe00` | certain | The reference did not load | `modules/hall-ui/public/drachmae.html:85` |
+| `c43812b59e97` | certain | The release notes could not be read: {…}. The versions are still listed. | `modules/hall-ui/public/settings-software-update.js:115` |
 | `3b5260b8780a` | certain | The reserved 16-rank ladder, which ranks are live today (archon, metic, thetes, xenos), and what each may do. | `modules/hall-ui/public/diagrams.html:60` |
 | `cfa55899240b` | certain | The roadmap could not be loaded right now. Reload to try again. | `modules/hall-ui/public/roadmap.js:440` |
 | `2dea5ed89aa1` | certain | The roadmap failed to load. Reload to try again. | `modules/hall-ui/public/roadmap.js:441` |
@@ -1151,6 +1163,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9a685b01e2c6` | certain | This page opens at a higher rank. | `modules/hall-ui/public/government.html:37` |
 | `9a685b01e2c6` | certain | This page opens at a higher rank. | `modules/hall-ui/public/project-settings.html:36` |
 | `9a685b01e2c6` | certain | This page opens at a higher rank. | `modules/hall-ui/public/watch.html:40` |
+| `fcd43f045614` | certain | This project is upgraded on the server that runs it: | `modules/hall-ui/public/settings-software-update.js:76` |
 | `3c8aaec39c40` | certain | This project's code expects {…} database change{…} that its database has not applied yet. Anything that relies | `modules/hall-ui/public/deploy.js:413` |
 | `6e9dfe1fb903` | certain | This restarts {…} onto core | `modules/hall-ui/public/deploy.js:395` |
 | `69e8beced2ff` | certain | This sends the idea back to its author. Say why, and which section. | `modules/hall-ui/public/board-room.js:363` |
@@ -1168,8 +1181,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6516cc82021a` | certain | UI design | `modules/hall-ui/public/settings.html:276` |
 | `2c1c20785a6e` | certain | Unclear — a person would not know what to do | `modules/hall-ui/public/copy-desk.html:91` |
 | `aa445f06cc5e` | certain | Unlink failed: {…} | `modules/hall-ui/public/settings.js:856` |
+| `4a716d7d8d46` | certain | Up to date | `modules/hall-ui/public/settings-software-update.js:142` |
+| `13ced9b2fa12` | certain | Update ready | `modules/hall-ui/public/settings-software-update.js:145` |
+| `55fde21d907b` | certain | Update to {…}{…} | `modules/hall-ui/public/settings-software-update.js:85` |
 | `67fbc770b3b3` | certain | Upvote (+1) | `modules/hall-ui/public/builders.js:777` |
-| `16d7f809be8a` | certain | Use the control below to take it. | `modules/hall-ui/public/shell.js:696` |
+| `16d7f809be8a` | certain | Use the control below to take it. | `modules/hall-ui/public/shell.js:679` |
 | `e7e2a99a2bea` | certain | Use this | `modules/hall-ui/public/settings-specialities.js:148` |
 | `e1ecd543a2ca` | certain | Using this speciality. | `modules/hall-ui/public/settings-specialities.js:199` |
 | `6200bac6bdca` | certain | View all sessions | `modules/hall-ui/public/watch.html:99` |
@@ -1223,6 +1239,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `158499e38ceb` | certain | Where you stand | `modules/hall-ui/public/ranks.html:36` |
 | `b216e7af8140` | certain | Where your work runs and how it reaches production, in one diagram. Your | `modules/hall-ui/public/diagrams.html:74` |
 | `d3a8b2b5b93f` | certain | Where {{currency}} and karma come from and where they go. | `modules/hall-ui/public/diagrams.html:67` |
+| `68da8cb13058` | certain | Which version of Cloud Bongos this project runs, whether a newer one is ready for it, and what each newer vers | `modules/hall-ui/public/settings.html:410` |
 | `f9ab9eb870a6` | certain | While you wait: install the Claude desktop app at | `modules/hall-ui/public/hall-render.js:437` |
 | `fe85463560e0` | certain | Who builds on this project, ranked by work shipped. This project's own ledger — unlike the cross-project direc | `modules/hall-ui/public/roster.html:28` |
 | `7dbdb882e967` | certain | Who can find you. Your profile page can be public or private, and recruiters looking for builders are allowed  | `modules/hall-ui/public/settings.html:111` |
@@ -1275,7 +1292,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5e0ec4cd1cfe` | certain | Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the  | `modules/hall-ui/public/watch.js:835` |
 | `8fc605026acf` | certain | Your pending join {…}: {…} — awaiting approval. | `modules/hall-ui/public/goal-inbox.js:88` |
 | `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:786` |
-| `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:1327` |
+| `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:1332` |
 | `b6dceaace783` | certain | Your profile page setting applies now — private already answers "not found" everywhere your profile is read. R | `modules/hall-ui/public/settings.html:119` |
 | `f39746e3d66b` | certain | Your rendering preference could not be loaded. Reload the page to try again. | `modules/hall-ui/public/settings-render.js:133` |
 | `b2dfd7120052` | certain | Your request is sent ✓ | `modules/hall-ui/public/hall-render.js:437` |
@@ -1315,6 +1332,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6d91bea9b24e` | certain | as of {…} | `modules/hall-ui/public/sky-interaction.js:117` |
 | `a756e47632cd` | certain | at {…} — {…}. The timer above is the fallback that is actually in force. | `modules/hall-ui/public/project-settings.js:103` |
 | `63bd14f73960` | certain | author trusted | `modules/hall-ui/public/gate.js:156` |
+| `9193bf136fed` | certain | bongos upgrade | `modules/hall-ui/public/settings-software-update.js:76` |
 | `d7412f42cbc2` | certain | browser only | `modules/hall-ui/public/hall-render.js:825` |
 | `552e00198649` | certain | builders, on the People tab | `modules/hall-ui/public/watch.html:48` |
 | `c36033fdd528` | certain | built & enforced today | `modules/hall-ui/public/diagrams.html:42` |
@@ -1427,7 +1445,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `af3a8e0fe6a8` | certain | open your goals | `modules/hall-ui/public/goal-inbox.js:127` |
 | `af3a8e0fe6a8` | certain | open your goals | `modules/hall-ui/public/goal-inbox.js:158` |
 | `4f279d68175f` | certain | open, on the Security tab | `modules/hall-ui/public/watch.html:47` |
-| `7b85e6494596` | certain | opens a new tab | `modules/hall-ui/public/palette.js:190` |
+| `7b85e6494596` | certain | opens a new tab | `modules/hall-ui/public/palette.js:191` |
 | `c38db02adb61` | certain | or above | `modules/hall-ui/public/government.js:564` |
 | `66f7e9c2dde0` | certain | or right-click — plain Ctrl+V will not paste here. Claude takes over the terminal with its own interface once  | `modules/hall-ui/public/hall-render.js:825` |
 | `884948925fcb` | certain | paste command | `modules/hall-ui/public/settings.js:914` |
@@ -1489,6 +1507,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `911e948a33ae` | certain | the task | `modules/hall-ui/public/sky-panel.js:102` |
 | `1f159b518fc9` | certain | the whole project | `modules/hall-ui/public/goal-map.html:64` |
 | `1f159b518fc9` | certain | the whole project | `modules/hall-ui/public/thinking.html:63` |
+| `2e5539862eb0` | certain | there takes this version, with the same health check and rollback. | `modules/hall-ui/public/settings-software-update.js:76` |
 | `d2f476c0ba31` | certain | thing{…} from your sessions · shared with: {…} | `modules/hall-ui/public/settings-specialities.js:80` |
 | `632527db5bca` | certain | this session | `modules/hall-ui/public/settings-sessions.js:44` |
 | `4b6321a50a2d` | certain | thoughts · | `modules/hall-ui/public/sky-interaction.js:123` |
@@ -1611,6 +1630,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9a1cef2da08d` | certain | …and {…} more goals — | `modules/hall-ui/public/goal-inbox.js:127` |
 | `5b9fa7cb4fb0` | certain | …and {…} more waiting — | `modules/hall-ui/public/goal-inbox.js:158` |
 | `b797996b2e4f` | certain | …and {…} more, not listed. | `modules/hall-ui/public/deploy.js:382` |
+| `9132930284c4` | certain | …and {…} older version{…}, also in this update. | `modules/hall-ui/public/settings-software-update.js:120` |
 | `b2a04abfead0` | certain | …{…} more awaiting a nod. | `modules/hall-ui/public/goal-inbox.js:316` |
 | `f16717b3e122` | certain | …{…} more awaiting an answer. | `modules/hall-ui/public/goal-inbox.js:396` |
 | `616fb9adf3cf` | certain | …{…} more going quiet. | `modules/hall-ui/public/goal-inbox.js:485` |