@bongos/core 1.19.1045 → 1.19.1047

package/docs/recipes/core-release-pipeline.md

@@ -222,6 +222,25 @@ answerable without going and looking. Two different unknowns, two different verd
   will not answer, and a broken read must never be a quieter way past it than the owner's own
   override. The fix is in the instance's logs, not on anyone's review queue.
 
+**What `--apply` does, in order** (task 1004306):
+
+1. **Rehearse.** It runs the exact `bongos upgrade` it is about to run, plus `--dry-run`. That
+   asks every refusal the bump has (the artist gate, module compatibility, the database
+   identity, the downgrade guard) and changes nothing. A refusal stops here: no timer stopped,
+   no backup written, and the report says "Nothing changed". Before this, the backup came
+   first, so on cloudbongos.com every attempt the artist gate refused had already written a
+   65 MB dump: one a day at the daily cadence, a full disk in about three days at every fifteen
+   minutes.
+2. **Stop the pull-deploy timer and back up** to `backupDir` as
+   `pre-<version>-<timestamp>.sql.gz`. A dump that fails now fails the go-live (before, a failed
+   `pg_dump` still left a tiny gzip that read as a backup) and the timer is put back.
+3. **Prune:** keep the newest **10** of those pre-upgrade dumps, by time, and delete the rest.
+   Only that exact name pattern is touched: a dump named by hand (`pre-lane-sweep-…`) and the
+   nightly backups (`db-backup-nightly.sh`, `<db>-<timestamp>.sql.gz`, kept 30 days by that
+   script) are never pruned here. A
+   prune that cannot run is a ⚠ warning, not a failed deploy.
+4. **Bump, restart, read back**, as before.
+
 Host topology (ssh alias, box paths, service names, health URL) lives in a host-owned
 `config/go-live.json`, never in the core — run `node scripts/gds/go-live.js --help` for the
 schema. A core that named one instance's box would not be a core.

package/docs/recipes/windows-builders.md

@@ -212,7 +212,7 @@ caught a real bug during task 1003548, so read its assertion before blaming the
 
 ## CRLF: a multi-line find silently misses, and a whole-file diff is usually line endings
 
-- Several hall files (`people.css`, `people.html`, `style.css`, the privacy spec) and every `.claude/skills/*/SKILL.md` are CRLF; `scripts/gds/*.js` and the tests are LF. An exact-string patch must detect the file's EOL before joining lines (`text.includes('\r\n') ? '\r\n' : '\n'`), or the find matches nothing and the edit is a silent no-op (session log 2026-08-24).
+- Several hall files (`roster.css`, `roster.html`, `style.css`, the privacy spec) and every `.claude/skills/*/SKILL.md` are CRLF; `scripts/gds/*.js` and the tests are LF. An exact-string patch must detect the file's EOL before joining lines (`text.includes('\r\n') ? '\r\n' : '\n'`), or the find matches nothing and the edit is a silent no-op (session log 2026-08-24).
 - A `git diff --stat` that touches every line of a file you barely edited is an EOL flip — check with `git diff --stat --ignore-cr-at-eol`, and restore the original EOL before committing.
 - **`copy-inventory.js --check` no longer reds on line endings alone** (task 1003619). It used to: the generator emits LF and the check byte-compared that against a CRLF worktree file, so `/ship-check` showed one permanent red line on every Windows checkout while the committed content was already correct — and a builder who "fixed" it committed a whole-file CRLF diff. `docs/copy-inventory.md` is now pinned `text eol=lf` in `.gitattributes` (its `.json` sibling always was, via `*.json`), and the check compares EOL-blind so an already-CRLF worktree passes without a re-clone. If it reports STALE now, the content really is stale — regenerate, don't reach for `--ignore-cr-at-eol`. Since task 1003981 `*.md` IS pinned repo-wide (`*.md text eol=lf`), so a fresh clone gets LF markdown everywhere and a markdown reader no longer has to be CRLF-aware to be correct. An EXISTING Windows checkout keeps its CRLF copies until git rewrites them — the clean filter still normalises to LF on add, so `git status` stays quiet and nothing is broken; to convert in place, `git rm --cached -r . && git reset --hard`.
 - **A freshness check compares CONTENT, so route it through `sameContent()`** (`scripts/gds/gen-freshness.js`) rather than `===` on file bytes. A pin is the wrong lever on its own: regenerating never clears a byte-wise red, because the write lands LF and git converts it back on the next checkout. `tests/gen_freshness.mjs` enforces this for the four gated generators; `tests/api_client.mjs` was outside that guard and reported the client STALE forever on Windows until task 1003529 (`index.d.ts` and `README.md` are the two generated client files with no `eol=lf` pin).

package/modules/hall-ui/public/atlas.html

@@ -91,7 +91,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/atlas.js?v=2026-09-02-index" defer></script>

package/modules/hall-ui/public/blockers.html

@@ -50,7 +50,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/board-room.html

@@ -60,7 +60,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-board"></script>

package/modules/hall-ui/public/collab.css

@@ -108,7 +108,7 @@
 
 /* ---- the face -----------------------------------------------------------------
    A row leads with WHO: a 36px disc, the picture when the server sent one, the
-   initial on the glass when it did not (people.css's .dir-avatar, at the row's
+   initial on the glass when it did not (roster.css's .dir-avatar, at the row's
    size). A craft ask wears the craft's letter in the label face, so it never
    passes for a person. Decorative — the name beside it is the door. */
 .cb-face {

package/modules/hall-ui/public/collab.html

@@ -148,7 +148,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/collab-lib.js?v=2026-09-24-archive"></script>

package/modules/hall-ui/public/copy-desk.html

@@ -177,7 +177,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/deploy.html

@@ -69,7 +69,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/diagrams.html

@@ -97,7 +97,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/diagram-viewer.js?v=2026-06-14-diagviewer-1" defer></script>

package/modules/hall-ui/public/drachmae.html

@@ -98,7 +98,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/md-reader.js?v=2026-09-02-mdreader-2"></script>

package/modules/hall-ui/public/fleet.html

@@ -54,7 +54,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/gate.html

@@ -76,7 +76,7 @@
 <div id="gate-modal-root"></div>
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/goals.html

@@ -235,7 +235,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/government.html

@@ -134,7 +134,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/idea.html

@@ -52,7 +52,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib" defer></script>
 <!-- task-detail.js still owns the #/idea/N and #/blocker/N overlay, so a ref

package/modules/hall-ui/public/ideas.html

@@ -225,7 +225,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- task 1003069 (R08) — the quick-filing form's routed result links a task

package/modules/hall-ui/public/index.html

@@ -102,7 +102,7 @@
 <script src="/builders/brand-apply.js?v=2026-06-27-r75" defer></script>
 <!-- The app shell (sidebar + top bar + view router). Dependency-free; loaded
      BEFORE builders.js so the chrome ids exist when events are wired. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate" defer></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople" defer></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.

package/modules/hall-ui/public/modules.html

@@ -80,7 +80,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>

package/modules/hall-ui/public/primer.html

@@ -115,7 +115,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/profile.html

@@ -187,7 +187,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->

package/modules/hall-ui/public/project-settings.html

@@ -58,7 +58,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/ranks.html

@@ -68,7 +68,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before ranks.js, which pulls from it. -->

package/modules/hall-ui/public/roadmap.html

@@ -41,7 +41,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/{people.css → roster.css}

@@ -1,13 +1,11 @@
-/* people.css — page-local styles for the cross-project builder directory
-   (task 1003470, goal 1000081), served at /people — its legacy door /scouting
-   was deleted in task 1003440 and now 301s here. Only the identity cell lives
-   here: the
-   ledger, the filter bar, the pager, the chips and the empty state are the
-   shell's and the kit's. Tokens are the world's real names — no compat alias. */
+/* roster.css — page-local styles for the Builders page (/roster). The identity
+   cell was shared with the cross-project directory at /people until task
+   1003444 deleted that page from the hall; it lives here now. Only the
+   identity cell and the place/id cell live here: the ledger, the filter bar,
+   the pager and the empty state are the shell's and the kit's. Tokens are the
+   world's real names — no compat alias. */
 
-/* The who cell: avatar, then the name over the login. A row that carries an
-   avatar centres its figures on it, so the numbers line up with the name. */
-#people-body .ledger td { vertical-align: middle; }
+/* The who cell: avatar, then the name over the login. */
 .dir-who { display: inline-flex; align-items: center; gap: 11px; min-width: 0; }
 .dir-avatar {
   width: 30px; height: 30px; border-radius: 50%; flex: none;
@@ -33,5 +31,3 @@
   font-size: 11.5px;
   color: var(--ink-faint);
 }
-.dir-crafts { display: inline-flex; flex-wrap: wrap; gap: 6px; }
-.dir-none { color: var(--ink-faint); }

package/modules/hall-ui/public/roster.html

@@ -9,9 +9,9 @@
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
-  <!-- task 1003441: the identity cell (avatar, name, login) is shared with the
-       cross-project directory — one definition, both rosters. -->
-  <link rel="stylesheet" href="/builders/people.css">
+  <!-- task 1003441: the identity cell (avatar, name, login). It was shared with
+       the cross-project /people page until task 1003444 deleted it. -->
+  <link rel="stylesheet" href="/builders/roster.css">
 </head>
 <body data-page="roster" data-page-title="Builders">
 
@@ -25,7 +25,7 @@
            rewritten by roster.js once the roster has loaded. -->
       <div class="page-head page-head--board">
         <h1 class="page-head__h">Builders</h1>
-        <p class="page-head__sub" id="roster-sub">Who builds on this project, ranked by work shipped. This project's own ledger — unlike the cross-project directory, it lists everyone who builds here.</p>
+        <p class="page-head__sub" id="roster-sub">Who builds on this project, ranked by work shipped. This project's own ledger — everyone who builds here is listed.</p>
       </div>
 
       <main id="hall-main">
@@ -50,7 +50,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/roster.js

@@ -5,9 +5,9 @@
 // Community nav group read as one real page plus a link into the home page. It
 // is a page now, and `/#leaderboard` redirects here (shell.js VIEW_REDIRECTS).
 //
-// PROJECT-OWN, not cross-project. /people is the cross-project directory behind
-// `project.curate`; this is the project's own ledger and is deliberately
-// ungated, because its one data source — GET /leaderboard
+// PROJECT-OWN, not cross-project: the hall's only builder directory since task
+// 1003444 deleted /people (cross-project discovery is the hub's, ADR 0337). It
+// is deliberately ungated, because its one data source — GET /leaderboard
 // (modules/economy/routes/leaderboard.js) — is deliberately unauthenticated and
 // mirrors the public status surface. No visibility predicate is applied and that
 // is CORRECT: privacy suppresses cross-project surfaces only, so a builder
@@ -77,10 +77,9 @@
   function httpUrl(u) {
     return /^https?:\/\//i.test(String(u || '')) ? String(u) : null;
   }
-  // The identity cell, shared with /people through people.css. The name opens
-  // the builder's profile PAGE here: this is a project surface, so a local
-  // profile id exists — unlike the cross-project directory, which can only
-  // offer GitHub. Guarded on b.id so a row without one degrades to plain text
+  // The identity cell (roster.css). The name opens the builder's profile PAGE:
+  // this is a project surface, so a local profile id exists. Guarded on b.id
+  // so a row without one degrades to plain text
   // rather than a broken /profile?id=undefined link (task 1467).
   function whoHtml(b) {
     var name = esc(builderName(b));

package/modules/hall-ui/public/roster.states.json

@@ -1,5 +1,5 @@
 {
-  "_": "Builders — this project's OWN roster, ranked by credits earned (task 1003441, goal 1000075). Was the #leaderboard hash view on index.html; /#leaderboard now redirects here. Deliberately UNGATED, because its one data source (GET /leaderboard) is deliberately unauthenticated and mirrors the public status surface — so unlike people.states.json the `out` state below renders the real page rather than a seal. Populated look: the hall-preview harness (scripts/hall-preview/fixtures/leaderboard.json carries thirteen builders with avatars, ranks, karma and tokens).",
+  "_": "Builders — this project's OWN roster, ranked by credits earned (task 1003441, goal 1000075). Was the #leaderboard hash view on index.html; /#leaderboard now redirects here. Deliberately UNGATED, because its one data source (GET /leaderboard) is deliberately unauthenticated and mirrors the public status surface — so unlike a gated page's states file the `out` state below renders the real page rather than a seal. Populated look: the hall-preview harness (scripts/hall-preview/fixtures/leaderboard.json carries thirteen builders with avatars, ranks, karma and tokens).",
   "page": "/builders/roster",
   "surface": "hall-ui",
   "stub": {

package/modules/hall-ui/public/sessions.html

@@ -99,7 +99,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->

package/modules/hall-ui/public/settings.html

@@ -96,7 +96,7 @@
               <p class="scroll__lede">
                 Your track record across every project you build on, shown on your
                 public profile. Hiding it takes effect immediately everywhere —
-                your profile, the People directory, and recruiting views.
+                your profile, the recruiting directory, and a recruiter's look-up of one builder.
               </p>
               <div id="cross-project-rows"></div>
               <p class="settings-status" id="cross-project-status" role="status" aria-live="polite"></p>
@@ -436,7 +436,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page scripts run. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->

package/modules/hall-ui/public/settings.js

@@ -490,7 +490,7 @@
   // GET/PATCH /api/bongos/me/cross-project (platform-identity module — hub only).
   // One on/off toggle: "show my cross-project record on my public profile".
   // Enforcement is server-side in the module's read functions, so flipping it
-  // takes effect immediately on the profile and /people. The section
+  // takes effect immediately on the profile and /scouting. The section
   // reveals ONLY when the module's endpoint answers (404 on a vanilla instance →
   // stays hidden, no error state). P04 later re-homes this in the Profile rail
   // group; storage is account-global on the hub (not behavior_prefs).
@@ -562,7 +562,7 @@
       privacyRow('visibility', 'Public profile page', isPublic ? 'Public' : 'Private', isPublic,
         'Public means anyone can open your profile page and find you by name. Private hides the page from everyone — including you: it answers "not found" to every visitor, and you read your own record here in Settings instead.', '') +
       privacyRow('discoverable', 'Discoverable by recruiters', discoverable ? 'On' : 'Off', discoverable,
-        `Recruiters looking for builders can find you. ${grant}${despitePrivate} Turning this off removes you from both recruiting surfaces — the People directory, and a recruiter's look-up of one builder — straight away.`,
+        `Recruiters looking for builders can find you. ${grant}${despitePrivate} Turning this off removes you from both recruiting surfaces — the recruiting directory, and a recruiter's look-up of one builder — straight away.`,
         follows ? ' <span class="voices__default">· follows your profile setting</span>' : '');
   }
 

package/modules/hall-ui/public/shell.js

@@ -92,7 +92,6 @@
     goals: '<circle cx="9" cy="9" r="6.5"/><circle cx="9" cy="9" r="3.5"/><circle cx="9" cy="9" r="0.8" fill="currentColor"/>',
     roadmap: '<path d="M3 15.5V3.5l4 2 4-2 4 2v10l-4-2-4 2-4-2Z"/><path d="M7 3.5v10M11 5.5v10"/>',
     leaderboard: '<path d="M3.5 15.5v-6M9 15.5V3.5m5.5 12v-9"/>',
-    people: '<circle cx="6.5" cy="6.5" r="2.5"/><path d="M2.5 15c.5-2.4 2-3.7 4-3.7s3.5 1.3 4 3.7"/><circle cx="12.5" cy="7" r="2"/><path d="M12 11.5c1.8.1 3 1.3 3.5 3.3"/>',
     docs: '<path d="M4 3.5h7l3 3v10H4v-13Z"/><path d="M11 3.5v3h3"/>',
     // task 1003117 (R06 of goal 1000074): the Studio (artist mode). A sprout —
     // the zen-garden reading of "a place an artist wants to be", so it does not
@@ -293,15 +292,9 @@
       // page, so no `view` key. Labelled Builders — 'roster' is the word
       // modules/hall-ui/CLAUDE.md uses, but Builders is what a reader scans for.
       { id: 'roster', label: 'Builders', icon: 'leaderboard', href: '/roster', gate: 'signed' },
-      // task 1002577: the cross-project builder directory (/scouting graduated
-      // into the hall). Gated to MATCH its data — /api/bongos/scouting checks
-      // `project.curate`, whose catalog floor is METIC. This read 'archon' until
-      // task 1002710: the nav was stricter than the wall, so a Metic could open
-      // /people by URL but never saw the link. Cosmetic either way —
-      // requireProjectCuratePage is the wall — but a nav that disagrees with the
-      // gate teaches the ladder wrong. The module gate hides the tab on
-      // instances without the platform-identity hub.
-      { id: 'people', label: 'People', icon: 'people', href: '/people', gate: 'government', module: 'platform-identity' },
+      // task 1003444: 'People', the cross-project directory, was deleted (owner
+      // call 2026-09-25, ADR 0337 D5). Cross-project discovery is the hub's, and
+      // /people redirects to /roster.
     ] },
     { group: 'Docs', gate: 'signed', items: [
       // task 1002710: primer + diagrams were gate:'member' (rank !== xenos) to

package/modules/hall-ui/public/studio.html

@@ -66,7 +66,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure

package/modules/hall-ui/public/style.css

@@ -3391,15 +3391,8 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
    does not exist, so "Someone helped" rendered full-size on every row. */
 .btn--sm { min-height: 26px; padding: 0 11px; font-size: 12.5px; }
 
-/* people.js:45 — the builder's name cell. The hall's only definition used to
-   live in scouting.html's inline <style>, so the same data read bold on
-   Scouting and plain on People. It lives here now, and scouting.html itself
-   went with task 1003440. */
-.who { font-weight: 600; }
-
-/* people.js:105 — notice() sets body.className='note'. .note lives in
-   my-projects.css, which People never loads, so every gated / empty / error
-   message on that page rendered unstyled. */
+/* The notice line: roster.js and blockers.js notice() set body.className='note'
+   for an empty / error message, and neither page's sheet defines it. */
 .note { margin: 0; font-size: 13.5px; color: var(--ink-soft); }
 
 .empty-state { padding: 8px 0; }

package/modules/hall-ui/public/task.html

@@ -57,7 +57,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->

package/modules/hall-ui/public/watch.html

@@ -162,7 +162,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html

@@ -171,7 +171,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->

package/modules/hall-ui/records/builders-roster.md

@@ -2,7 +2,7 @@
 
 **The BUILDERS page landed next (task 1003441, goal 1000075)** — the in-project roster, at `/roster`. It is not a redesign but a MOVE: the Roll was a `#leaderboard` HASH VIEW on `index.html`, which is why the Community group read as one real page plus a link into the home page. Four things it settled:
 
-- **The load-bearing part was not the markup.** `shell.js` `VIEWS`, `dom-utils.js` `HALL_VIEWS` and `hall-widgets.js` all declared `leaderboard`; the table, its pager, its sort lenses (`LB_SORT_HEADERS`, `sortedLeaderboardRows`) and the achievement laurels (`ACH_EMOJI`) lived in `hall-render.js`. All of it MOVED to `roster.js` rather than being copied, so Home carries no dead renderer. `roster.html` is the board archetype at people.html’s shape and reuses `people.css` for the identity cell — one definition, both rosters.
+- **The load-bearing part was not the markup.** `shell.js` `VIEWS`, `dom-utils.js` `HALL_VIEWS` and `hall-widgets.js` all declared `leaderboard`; the table, its pager, its sort lenses (`LB_SORT_HEADERS`, `sortedLeaderboardRows`) and the achievement laurels (`ACH_EMOJI`) lived in `hall-render.js`. All of it MOVED to `roster.js` rather than being copied, so Home carries no dead renderer. `roster.html` is the board archetype at people.html’s shape and reuses `people.css` for the identity cell — one definition, both rosters, until task 1003444 deleted `/people` and the sheet became `roster.css`.
 - **`lbState` and `leaderboardPlace()` STAYED on Home**, shrunk to `{ rows: [] }`. The Standing card still says "#N on the leaderboard", and it needs the same rows; the fetch stays too. Verified live: the card reads `#4 on the leaderboard` with the table gone.
 - **The hash REDIRECTS, it does not alias.** `#achievements` could fold into Standing because Standing exists on that page; there is no host view for a Roll that left. So `VIEW_REDIRECTS` in `shell.js` sends `#leaderboard` to `/roster` via `location.replace`, guarded to the index — without it `viewFromHash` returns nothing and `route()` silently leaves the reader on Home, a dead link that looks like it worked.
 - **It is deliberately UNGATED,** and `tests/hall_page_gate_map.mjs` spells that out rather than defaulting. Its one data source, `GET /leaderboard`, is deliberately unauthenticated and mirrors the public status surface; a page must not be gated tighter than the API it fronts, and it was already reachable to a stranger as a view on the ungated index. No visibility predicate is applied and that is correct — privacy suppresses cross-project surfaces only, so a `private` builder still appears on the roster of a project they build on (ADR 0225).

package/modules/hall-ui/records/roster-and-ledger.md

@@ -1,9 +1,9 @@
-# The roster and ledger pages — goals, sessions and people (task 1003470; scouting became /people in task 1003440)
+# The roster and ledger pages — goals, sessions and people (task 1003470; scouting became /people in task 1003440; /people deleted in task 1003444)
 
 **The ROSTER and LEDGER pages landed next (task 1003470)** — goals, sessions, people and scouting. Goals is the archetype page (`docs/design/mocks/hall/goals/v3.html`) and the page the owner was looking at when he called the re-skin a re-skin, so this pass changed its COMPOSITION rather than its tokens. Five things it settled:
 
 - **The goals list is ONE panel.** The filter bar, the count line, the readiness band and the groups sit on one `.scroll` (`.goals-panel`); the bar of twelve controls on the ground over a `--bg-card` panel PER GROUP is gone. Three lenses stay in the open (version, state, sort) and the five rarely turned sit behind the kit's Filters disclosure, **which counts and chips whatever is active so a hidden filter can never narrow the board silently.** `rows|cards` is a VIEW, not a filter: a segmented toggle on the count line writes a hidden `#f-goal-view`, so task 1003136's fork in `renderList` and the `otb.goals.view` pref are unchanged; the pressed side takes `--accent-tint` (the tint the world gives a current thing), **never the accent fill.**
 - **Three languages on a row, not four.** The ring is the goal's own done-when (satisfied over total, **the arc in INK — the accent lights the pressable and a progress arc is neither**); the facts line is every label a goal carries; the right column is ONE thing — `claim next` as the shell's `.btn-accent` (**the row's only accent**), `what's blocking` as a ghost pill, or a one-line state with a drawn check. The readiness is the family's `.ov-figs` band with the roll line's own `.gr-mark` dots (**classes, not inline styles**), so the band and the rows read as one language.
 - **The card is the row folded.** The toggle stays because the mock keeps it (a card wall is the better read when scanning for a NAME), but a card inside the panel draws no box — a `--bg-card` tile on a `--bg-card` panel is the card-in-a-card v3 removed — so `.goal-grid` paints the hairline BETWEEN its rows (a 1px row gap over `--rule-soft`, each cell on the panel's ground) and every cell renders the same facts from `goalRenderFacts`.
-- **People and scouting are ONE page.** `/scouting` was the legacy door to the same `/api/gds/scouting` rollup, drawn a third way; it now renders `people.html`'s body and `scouting.js` is deleted. **Task 1003440 then deleted the door itself**: `scouting.html` and `scouting.states.json` are gone, the `SCOUTING_PAGE_RE` page gate with them, and `/builders/scouting` now 301s to `/people` (`SCOUTING_LEGACY_RE` in `serve-internal.js`) so an old bookmark still lands on the directory. `tests/hall_roster_world.mjs` pins both halves — the files are absent, and the redirect exists with no dead gate behind it. On the row the name is the shell's `.lb-name` to the builder's **GitHub** page — the one door every listed builder has, since the directory is cross-project and no local profile id exists. The gate copy is written from `OTB.rankLabel('metic')`; it used to say "Archon-only", wrong since ADR 0210.
+- **People and scouting are ONE page.** `/scouting` was the legacy door to the same `/api/gds/scouting` rollup, drawn a third way; it now renders `people.html`'s body and `scouting.js` is deleted. **Task 1003440 then deleted the door itself**: `scouting.html` and `scouting.states.json` are gone, the `SCOUTING_PAGE_RE` page gate with them, and `/builders/scouting` now 301s to `/people` (`SCOUTING_LEGACY_RE` in `serve-internal.js`) so an old bookmark still lands on the directory. `tests/hall_roster_world.mjs` pins both halves — the files are absent, and the redirect exists with no dead gate behind it. On the row the name is the shell's `.lb-name` to the builder's **GitHub** page — the one door every listed builder has, since the directory is cross-project and no local profile id exists. The gate copy is written from `OTB.rankLabel('metic')`; it used to say "Archon-only", wrong since ADR 0210. **Task 1003444 then deleted `/people` itself** (owner call, 2026-09-25 — [ADR 0337](../../../docs/adr/0337-the-hub-account-is-the-person-a-hall-account-is-their-seat-in-one-project.md) D5): cross-project discovery is the hub's, so `people.html`, `people.js`, `people.states.json` and the `scouting.json` harness fixture are gone, the identity cell `/roster` shared moved from `people.css` to `roster.css`, and the `requireProjectCuratePage` page gate (with its `alsoAdmits` door) went with the page. `/builders/people` and `/builders/scouting` now 302 to `/roster` (`RETIRED_DIRECTORY_RE`); GET `/scouting`'s own route gate is unchanged. Cross-project search and the recruiter name-only panel are absent until the hub community page (task 1003363) ships.
 - **The session ledger's nowrap + wrapper pair was a live bug.** `sessions.css` forced `white-space: nowrap` on every cell, `.ledger-table-wrap` existed only to give that a scrollport, and the shell's sticky `th` then stuck to the WRAPPER — the column heads rendered over the first row on desktop. Both are gone; the shell's card strip handles a phone as on every other ledger. **Every id on a row is a door** (the session id was painted in `--info` — a link to nowhere); the row shows what the session EARNED; the totals ride the shell's top strip (`.ov-summary`) with **six fixed columns so the sixth tile is never stranded on its own row**. The hand-rolled server-side pager is untouched (the sanctioned exception below).

package/modules/platform-identity/account-visibility.js

@@ -124,8 +124,8 @@ function isAccountActive(account) {
 // The rollup axis: visible AND not hidden (task 1002967 — ADR 0171 D2 extended)
 // -------------------------------------------------------------------------
 
-// The predicate the two ROLLUP readers join — listScoutingRollup (/people,
-// /scouting) and getPublicProfileExtras (the platform-identity.hub port behind
+// The predicate the two ROLLUP readers join — listScoutingRollup
+// (/scouting) and getPublicProfileExtras (the platform-identity.hub port behind
 // core GET /builders/:id/profile). COMPOSED from accountVisibleSql, never
 // restated, so changing what "visible" means moves this with it.
 function rollupVisibleSql(alias) {
@@ -185,7 +185,7 @@ function recruiterReachSql(alias) {
 
 // scoutingListableSql — THE predicate the recruiting directory joins: the rollup
 // axis AND the reach axis (ADR 0210, task 1002290). listScoutingRollup is the
-// one reader; /scouting and the hall's /people are its two surfaces.
+// one reader; GET /scouting is its surface (the hall's /people went, task 1003444).
 //
 // WHY REACH BELONGS HERE AND NOT IN rollupVisibleSql. The two axes answer
 // different questions and only one surface asks both. `hide_stats` suppresses

package/modules/platform-identity/platform-identity.js

@@ -701,8 +701,8 @@ async function upsertActivity({ clientId, githubId, credits = 0, tasksShipped =
 //
 // Consent by construction (ADR 0171 D2/D3, extended by tasks 1002967 + 1002290):
 // only builders whose account passes scoutingListableSql — active, publicly
-// visible, not hidden, AND not opted out of recruiting — appear. /people and
-// /scouting are live cross-project surfaces, so the predicate lives IN the query,
+// visible, not hidden, AND not opted out of recruiting — appear. /scouting is a
+// live cross-project surface, so the predicate lives IN the query,
 // not in any caller's memory, and it is the SHARED one so this list can never
 // disagree with /profiles/:handle about who is visible. Provisional, private,
 // hidden and opted-out builders drop out entirely; the projection stays an

package/modules/platform-identity/routes/profile.js

@@ -14,7 +14,7 @@
 //                             account_visibility + recruiter_discoverable (task
 //                             1002966, privacy spec D1). hide_stats takes effect
 //                             immediately on every public surface (profile
-//                             cross_project, /people, /scouting): enforcement
+//                             cross_project, /scouting): enforcement
 //                             lives in the module's read functions (D2) and the
 //                             hub profile response is no-store (D5), so there is
 //                             no cache to outwait. The other two are STORED here