@bongos/core 1.19.1063 → 1.19.1064

package/docs/api/openapi.json

@@ -20455,6 +20455,189 @@
         ]
       }
     },
+    "/tasks/{id}/visuals": {
+      "get": {
+        "operationId": "get_tasks_id_visuals",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "GET /tasks/:id/visuals",
+        "description": "GET /tasks/:id/visuals — the task's named visuals. Any signed-in builder: it lists URLs only, and each image is still served under its own task's audience.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/visuals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetTasksIdVisualsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/tasks/{id}/visuals/{slot}": {
+      "post": {
+        "operationId": "post_tasks_id_visuals_slot",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "POST /tasks/:id/visuals/:slot",
+        "description": "POST /tasks/:id/visuals/:slot — attach (or replace) one named visual.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/visuals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "slot",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slot`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostTasksIdVisualsSlotRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostTasksIdVisualsSlotResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "delete": {
+        "operationId": "delete_tasks_id_visuals_slot",
+        "tags": [
+          "tasks"
+        ],
+        "summary": "DELETE /tasks/:id/visuals/:slot",
+        "description": "DELETE /tasks/:id/visuals/:slot — remove one named visual. Idempotent.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/visuals.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          },
+          {
+            "name": "slot",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `slot`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteTasksIdVisualsSlotResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/tasks/{id}/vote": {
       "post": {
         "operationId": "post_tasks_id_vote",
@@ -21282,6 +21465,21 @@
           "visual_url"
         ]
       },
+      "DeleteTasksIdVisualsSlotResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "slot": {},
+          "visual_url": {}
+        },
+        "required": [
+          "ok",
+          "slot",
+          "visual_url"
+        ]
+      },
       "ErrorEnvelope": {
         "type": "object",
         "required": [
@@ -23203,6 +23401,21 @@
           "count"
         ]
       },
+      "GetTasksIdVisualsResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "task_id": {},
+          "slots": {}
+        },
+        "required": [
+          "ok",
+          "task_id",
+          "slots"
+        ]
+      },
       "GetTasksNewcomerFloorResponse": {
         "type": "object",
         "properties": {
@@ -28179,6 +28392,48 @@
           "bytes"
         ]
       },
+      "PostTasksIdVisualsSlotRequest": {
+        "type": "object",
+        "properties": {
+          "image_b64": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 7340032
+          },
+          "content_type": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 100
+          },
+          "alt": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "image_b64",
+          "content_type"
+        ],
+        "additionalProperties": false
+      },
+      "PostTasksIdVisualsSlotResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "slot": {},
+          "visual_url": {},
+          "visual_alt": {},
+          "bytes": {}
+        },
+        "required": [
+          "ok",
+          "slot",
+          "visual_url",
+          "visual_alt",
+          "bytes"
+        ]
+      },
       "PostTasksIdVoteRequest": {
         "type": "object",
         "properties": {
@@ -28718,9 +28973,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 454,
-  "x-schema-count": 487,
+  "x-endpoint-count": 457,
+  "x-schema-count": 491,
   "x-undocumented-bodies": 10,
-  "x-response-schemas": 333,
+  "x-response-schemas": 336,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 454 endpoints across 76 route files.
+> **Generated from the live route files** — the route file is authoritative. 457 endpoints across 76 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -743,7 +743,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | GET | `/api/bongos/task-visuals/:name` | `public` | — | the WIDEST path this route can take, declared honestly. |
 
-## `tasks` (32)
+## `tasks` (35)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -772,6 +772,9 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | POST | `/api/bongos/tasks/:id/ship` | `any-builder` | validated | confirmed → shipped. |
 | POST | `/api/bongos/tasks/:id/visual` | `any-builder` | `image_b64`, `content_type`, `alt` | POST /tasks/:id/visual — attach (or replace) this task's ship-time visual. |
 | DELETE | `/api/bongos/tasks/:id/visual` | `any-builder` | — | DELETE /tasks/:id/visual — remove it again. |
+| GET | `/api/bongos/tasks/:id/visuals` | `any-builder` | — | GET /tasks/:id/visuals — the task's named visuals. |
+| POST | `/api/bongos/tasks/:id/visuals/:slot` | `any-builder` | `image_b64`, `content_type`, `alt` | POST /tasks/:id/visuals/:slot — attach (or replace) one named visual. |
+| DELETE | `/api/bongos/tasks/:id/visuals/:slot` | `any-builder` | — | DELETE /tasks/:id/visuals/:slot — remove one named visual. |
 | POST | `/api/bongos/tasks/:id/vote` | `metic+archon` | `vote` | POST /tasks/:id/vote { vote: 1 \| -1 \| 0 } — cast/change/clear a peer vote on a confirmed/shipped task. |
 | POST | `/api/bongos/tasks/:id/water` | `any-builder` | — | POST /tasks/:id/water — reset a rotting task's clock. |
 | GET | `/api/bongos/tasks/claimable` | `any-builder` | — | NOTE: /tasks/claimable must come BEFORE /tasks/:id or Express will route 'claimable' to the :id param. |

package/docs/file-map.md

@@ -433,6 +433,7 @@ tests/
 ├── ship-check/SKILL.md            ← /ship-check — run every freshness + fitness check ship.js will run (repo-map/session-index/file-map/api-docs/copy-registry --check, linkify, skill-lint, fitness; --tests adds the DB-free lane; an ADVISORY render-fit row renders the changed pages via scripts/gds/render-check.js, ADR 0329) in ONE command before shipping, with the healing command per stale artifact (task 1003548; script scripts/gds/ship-check.js)
 ├── status/SKILL.md                ← /status — what's the status of X / what's left for criterion Cn (read-only rollup)
 ├── strand-fix/SKILL.md            ← /strand-fix N — walk ONE stranded confirmed task (strand:no_branch_no_tip / land_not_proven — the shape the reconciler gave up on) to shipped: find the work (main commit / unpushed branch / conflicting PR / nowhere), do the one sanctioned move, verify the flip; also clears a 409 REBASE_REQUIRED claim gate (task 1003365)
+├── tweak/SKILL.md                 ← /tweak — apply the next SUBMITTED page tweak (Tweak Mode, ADR 0341): claim the round, copy-apply.js --batch every line (refusals named, never skipped), tweak-renders.js before/after desktop+phone light+dark into named task-visual slots, ship so the passed grade waits at completed for the artist (task 1004322)
 └── worktree-clean/SKILL.md        ← /worktree-clean — list the per-claim worktrees whose branch already landed on main (scripts/gds/stale-worktrees.js) and remove each through the junction-safe worktree.js remove; never raw git worktree remove (task 1003365)
 ```
 <!-- END GENERATED FILE-MAP .claude/skills/ -->

package/docs/module-api-changelog.md

@@ -2613,5 +2613,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.1061 with no explicit bump. run 36428277106. (task 1002620)
   1.19.1063 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.1062 with no explicit bump. run 36435823058. (task 1002620)
+  1.19.1064 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.1063 with no explicit bump. run 36441707814. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/lifecycle/db-grade.js

@@ -15,6 +15,7 @@ const { pool, withTx } = api;
 const seams = api;
 const { logGradeAttempt } = require('./db-analytics.js');
 const { mostRecentClaimHolderId } = require('./db-shared.js');
+const tweakHold = require('./page-tweak-hold.js');
 
 // applyGrade — V3.R18 (#209). Writes the subagent grader result to task_grades
 // and, if the grade passed, promotes completed→confirmed + awards credits.
@@ -132,7 +133,18 @@ async function applyGrade({ taskId, builderId, gradeResult, committedFiles = nul
     // state-machine SQL (FOR UPDATE, task_grades upsert, UPDATE tasks status,
     // claim-holder lookup, logGradeAttempt) stays here in the lifecycle.
     const reward = seams.resolveOptional('reward');
+
+    // THE HOLD (ADR 0341 D7; task 1004322 / BV2.TW11). A page tweak whose grade
+    // passes WAITS at completed for its artist: the grade row above is written,
+    // and the promotion below is withheld. TW12's approve performs it. Asked only
+    // on a pass at completed, and false for every task whose source is not
+    // exactly 'page-tweak', so every other grade takes the unchanged path below.
+    let held = false;
     if (gradeResult.passed && task.status === 'completed') {
+      const { rows: srcRows } = await client.query(`SELECT source FROM tasks WHERE id = $1`, [taskId]);
+      held = tweakHold.isPageTweak(srcRows[0] || null);
+    }
+    if (gradeResult.passed && task.status === 'completed' && !held) {
       await client.query(
         `UPDATE tasks
             SET status = 'confirmed',
@@ -195,6 +207,7 @@ async function applyGrade({ taskId, builderId, gradeResult, committedFiles = nul
     // !passed → task_grades row written above; task stays at completed; no
     // credits, no achievements. Builder can manual-confirm via /confirm if the
     // grade was wrong.
+    // held → the same row, the same completed; the pass is recorded and waits.
 
     return {
       taskId,
@@ -207,6 +220,9 @@ async function applyGrade({ taskId, builderId, gradeResult, committedFiles = nul
       ideaBonus, // V3.R27 (#247): { ideaBonusAwarded, bonusBuilderId, ideaId } | null
       netNegativeBonus,
       advanceToMerge: finalStatus === 'confirmed',
+      // task 1004322: true only for a page tweak whose pass is waiting for its
+      // artist. ship.js reads it to publish the branch without landing it.
+      held,
       justUnlocked,
       grade: {
         score: gradeResult.score,

package/modules/lifecycle/migrations/lifecycle_013_task_visual_slots.sql

@@ -0,0 +1,52 @@
+-- lifecycle_013_task_visual_slots.sql — a task can carry NAMED visuals, not only
+-- the one (task 1004322 / BV2.TW11, goal 1000095; ADR 0341 D7 and its builder
+-- pick 9).
+--
+-- WHY. core_223 gave a task ONE optional image (tasks.visual_url + visual_alt),
+-- the picture beside its value summary. A page tweak needs eight: the applied
+-- page before and after, on desktop and on a phone, in light and in dark. The
+-- Approval queue (TW12) shows the artist exactly those renders, images of the
+-- applied branch, never a page built from the batch, which is what keeps ADR
+-- 0233's "nothing renders a task description as product copy" true. One column
+-- cannot hold eight pictures, and eight columns would be a schema for one
+-- feature, so a visual gets a NAME and a row.
+--
+-- THE SINGLE VISUAL IS UNTOUCHED. tasks.visual_url stays the ship-time picture
+-- every existing reader renders (the hall, the status feed); a slot is a
+-- separate, named picture a reader asks for by name. Nothing here moves,
+-- copies or backfills the existing column.
+--
+-- A MODULE TABLE, because ADR 0083 lets a module migration create only its own
+-- lifecycle_-namespaced tables; it references the core tasks table the way
+-- lifecycle_010 does, and never alters it.
+--
+-- THE SAME AUDIENCE AS THE ONE VISUAL. A slot's file is stored and served by the
+-- existing task-visuals store (task-<id>-<hex>.<ext>, GET /task-visuals/:name),
+-- whose serve route derives who may see an image from the TASK it names. So a
+-- slot adds no privacy axis, exactly as core_223 promised of the column.
+--
+-- PORTABLE and replay-safe: IF NOT EXISTS throughout, no instance data.
+
+BEGIN;
+
+CREATE TABLE IF NOT EXISTS lifecycle_task_visual_slots (
+  task_id    bigint NOT NULL REFERENCES tasks(id) ON DELETE CASCADE,
+
+  -- The slot's name: lowercase words joined by dashes, such as
+  -- 'after-phone-dark'. The vocabulary a page tweak uses is declared once in
+  -- modules/lifecycle/task-visuals.js (TWEAK_RENDER_SLOTS); the column checks only
+  -- the SHAPE, so a later feature can name its own slots without a migration.
+  slot       text   NOT NULL CHECK (slot ~ '^[a-z0-9]+(-[a-z0-9]+){0,5}$' AND length(slot) <= 48),
+
+  -- The served URL (/api/bongos/task-visuals/<file>), minted by the store.
+  visual_url text   NOT NULL,
+  visual_alt text,
+
+  updated_at timestamptz NOT NULL DEFAULT now(),
+
+  -- One picture per (task, slot): attaching a slot again REPLACES it, and the
+  -- route unlinks the superseded file.
+  PRIMARY KEY (task_id, slot)
+);
+
+COMMIT;

package/modules/lifecycle/page-tweak-hold.js

@@ -0,0 +1,74 @@
+// modules/lifecycle/page-tweak-hold.js — the ONE definition of "a page tweak
+// waiting for its artist" (task 1004322 / BV2.TW11, ADR 0341 D7).
+//
+// THE HOLD. A page tweak transcribes words an artist wrote, so its artist must
+// see the applied page before it ships (spec decision 4). When a page tweak's
+// grade PASSES, applyGrade records the grade but does not promote `completed`
+// to `confirmed`: the task waits at `completed` until the artist approves it
+// (TW12's approve route does the promotion the grade withheld) or sends it back.
+//
+// WHY ONE FILE. Five readers must agree on this one fact, and a second copy of
+// it is how they would drift: applyGrade (do not promote), the publish-branch
+// route (publish, but never arm auto-merge), the publish-status route (never
+// nudge the merge), ship.js (publish the branch and say the page is waiting)
+// and strand-watch / grade-recover (a held pass is not a failed grade). Every
+// one of them asks the questions below.
+//
+// PURE: no require, no fs, no DB. The scripts under scripts/gds/ require it
+// directly, so it must load without the module doorway.
+//
+// Every other task is untouched by construction: each predicate is false unless
+// the task's source is exactly 'page-tweak'.
+
+'use strict';
+
+// The task source the page claim writes (modules/copy-desk/pages.js SOURCE).
+// Restated, not required: copy-desk is another module, and this file requires
+// nothing so that the CLI can load it.
+const PAGE_TWEAK_SOURCE = 'page-tweak';
+
+// The derived round state this hold produces (ADR 0341 D7's table).
+const HOLD_STATE = 'waiting_for_artist';
+
+function isPageTweak(task) {
+  return !!task && task.source === PAGE_TWEAK_SOURCE;
+}
+
+// Is this task held for its artist? `gradePassed` is the task's grade row's
+// `passed` (task_grades keeps one row per task, the latest). Only a strict
+// `true` holds: a missing grade, or a failed one, is the ordinary `completed`
+// that /grade-recover handles.
+function isHeldForArtist(task, gradePassed) {
+  return isPageTweak(task) && task.status === 'completed' && gradePassed === true;
+}
+
+// What ship.js prints when it parks a held pass. One place, so the ship, the
+// re-grade and the resume all say the same thing.
+function heldLines(taskId, { prUrl = null } = {}) {
+  return [
+    '',
+    `Task #${taskId} passed its grade and is WAITING FOR THE ARTIST (ADR 0341 D7).`,
+    '  This is a page tweak: the artist approves the applied page before it ships.',
+    prUrl
+      ? `  The branch and its PR are published (${prUrl}); auto-merge is NOT armed.`
+      : '  The branch is published; auto-merge is NOT armed.',
+    '  The task stays at completed. Approve promotes it to land; send-back returns it to the /tweak queue.',
+    '  Nothing more to do here.',
+  ];
+}
+
+// The auto-merge result the publish route reports for a held pass, in the shape
+// enableAutoMergeDetailed returns, so the route's response carries its reason
+// on the field it already has (auto_merge_reason).
+const HELD_NOT_ARMED = Object.freeze({
+  ok: false,
+  reason: 'held for the artist (ADR 0341 D7): a page tweak lands only after its artist approves it',
+});
+
+module.exports = {
+  HELD_NOT_ARMED,
+  HOLD_STATE,
+  isPageTweak,
+  isHeldForArtist,
+  heldLines,
+};

package/modules/lifecycle/page-tweak-reads.js

@@ -12,6 +12,7 @@
 'use strict';
 
 const api = require('../../src/module-api');
+const hold = require('./page-tweak-hold');
 
 // Every page-tweak task, oldest first, with what the round state (D7) and the
 // changelog (D8) need beside the task itself:
@@ -93,4 +94,35 @@ async function shippedTasksTouchingSince({ files, since, limit = 50 } = {}) {
   return rows;
 }
 
-module.exports = { listPageTweakTasks, shippedTasksTouchingSince };
+// Is this task a page tweak held for its artist (ADR 0341 D7; task 1004322)?
+// The publish routes ask it before they arm or nudge a merge: a held pass is
+// published so the Approval queue can show the applied branch, but it must not
+// land until the artist approves. One row: the task's source and status, and its
+// grade (task_grades keeps one row per task). The verdict is the shared pure
+// predicate, so this read and applyGrade cannot disagree about what "held" means.
+async function readTweakHold(taskId) {
+  const { rows } = await api.pool.query(
+    `SELECT t.source, t.status, g.passed AS grade_passed
+       FROM tasks t
+       LEFT JOIN task_grades g ON g.task_id = t.id
+      WHERE t.id = $1`,
+    [taskId]
+  );
+  const row = rows[0] || null;
+  return { held: !!row && hold.isHeldForArtist(row, row.grade_passed), page_tweak: hold.isPageTweak(row) };
+}
+
+// The publish routes' form of the question, FAIL-CLOSED: a read that throws
+// answers "held", so the route neither arms auto-merge nor nudges the merge.
+// That is the safe direction for every task: an ordinary confirmed task whose
+// PR was left un-armed still lands, because the publish reconciler's sweep
+// merges green PRs of confirmed tasks on its own (task 1162).
+async function heldForArtistFailClosed(taskId, read = readTweakHold) {
+  try {
+    return (await read(taskId)).held;
+  } catch (_) {
+    return true;
+  }
+}
+
+module.exports = { listPageTweakTasks, shippedTasksTouchingSince, heldForArtistFailClosed };

package/modules/lifecycle/routes/tasks.js

@@ -35,6 +35,7 @@ const { depRefusalRow } = require('../dead-deps.js');
 const { gradeQualityWhere } = require('../db-shared');
 const auth = api;
 const db = require('../db');
+const pageTweakReads = require('../page-tweak-reads'); const { HELD_NOT_ARMED } = require('../page-tweak-hold'); // ADR 0341 D7 (tests stub the read)
 const hierarchy = require('../hierarchy');
 const { suggestCriteria } = require('../criterion-suggest');
 // The orphan-task advisory (task 1002539) — pure, fail-open; see goal-advisory.js.
@@ -1184,7 +1185,8 @@ module.exports = function buildTasksRouter() {
       // task 1001431: ask WHY when arming fails. `auto_merge: false` on its own told the
       // builder nothing, and the commonest cause is a repo with allow_auto_merge OFF —
       // a permanent condition that reads exactly like a transient blip.
-      const autoMergeResult = await githubPush.enableAutoMergeDetailed({ nodeId: pr.node_id });
+      // task 1004322 (ADR 0341 D7): a page tweak held for its artist is PUBLISHED, never armed.
+      const autoMergeResult = (await pageTweakReads.heldForArtistFailClosed(id)) ? HELD_NOT_ARMED : await githubPush.enableAutoMergeDetailed({ nodeId: pr.node_id });
       const autoMerge = autoMergeResult.ok;
       // task 1139 (ADR 0058): attest the author's trust tier on the pushed sha so the
       // gate-review check can auto-approve a Metic+ author's gate-surface PR with no
@@ -1326,7 +1328,7 @@ module.exports = function buildTasksRouter() {
       // mirrors the reconcile-on-read precedent above (a GET that finishes the
       // land); best-effort so a merge-driver miss never turns the poll into a 502.
       let merge_driver = null;
-      if (!reconciled && !status.merged && status.pr_state === 'open') {
+      if (!reconciled && !status.merged && status.pr_state === 'open' && !(await pageTweakReads.heldForArtistFailClosed(id))) { // a held page tweak is never nudged (ADR 0341 D7)
         try {
           merge_driver = await githubPush.mergeIfGreen({ branch });
         } catch (e) {