@bongos/core 1.19.1081 → 1.20.2

package/modules/hall-ui/public/brand-holes.js

@@ -0,0 +1,121 @@
+// modules/hall-ui/public/brand-holes.js — a page's BRAND HOLES, shown as the
+// names they stand for (task 1004381). window.OTBBrandHoles, node-require-safe.
+//
+// WHY. A page's source says {{productName}} where the server writes the
+// instance's name at serve time (src/bongos/serve-internal.js applyBrandTokens),
+// and the page readings keep the token by name (scripts/gds/page-reader.js). So
+// the Approval queue and the tweak editor were showing an artist the raw
+// "{{productName}}", and the editor let them type over it or lose the spaces
+// around it (the first real round came back as "This project,{{productName}}has
+// two environments").
+//
+// THE RULE. The STORED text always keeps the {{token}}: it is what copy-apply
+// writes back into the source, and the source stays brand-free. Only the
+// DISPLAY resolves it, from window.__BRANDING__ (the same pack the server fills
+// from), drawn as a small fixed chip the artist reads but cannot rewrite:
+//
+//   splitHoles(text)          [{ text } | { hole: 'productName' }], in order
+//   holeNames(text)           the token names, in order
+//   sameHoles(a, b)           the same tokens, the same number of times
+//   holeLabel(name, brand)    'Cloud Bongos' for productName; the name itself
+//                             when the pack carries no value for it
+//   holesHtml(text, opts)     escaped text with each token as a chip span
+//   serializeHoles(nodes)     a chip box's DOM children back to the stored text
+(() => {
+  'use strict';
+
+  const HOLE_RE = /\{\{([A-Za-z][A-Za-z0-9_]*)\}\}/g;
+
+  function esc(s) {
+    return String(s == null ? '' : s).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
+  }
+
+  function splitHoles(text) {
+    const s = String(text == null ? '' : text);
+    const out = [];
+    let at = 0;
+    for (const m of s.matchAll(HOLE_RE)) {
+      if (m.index > at) out.push({ text: s.slice(at, m.index) });
+      out.push({ hole: m[1] });
+      at = m.index + m[0].length;
+    }
+    if (at < s.length) out.push({ text: s.slice(at) });
+    return out;
+  }
+
+  function holeNames(text) {
+    return splitHoles(text).filter((p) => p.hole).map((p) => p.hole);
+  }
+
+  function hasHoles(text) {
+    return holeNames(text).length > 0;
+  }
+
+  function sameHoles(a, b) {
+    const x = holeNames(a).sort();
+    const y = holeNames(b).sort();
+    return x.length === y.length && x.every((n, i) => n === y[i]);
+  }
+
+  // The tokens serve-internal.js fills from the CLIENT pack (the origins come
+  // from the full pack only, so a chip names them instead).
+  function holeLabel(name, brand) {
+    const b = brand || (typeof window !== 'undefined' && window.__BRANDING__) || {};
+    const id = b.identity || {};
+    const co = id.company || {};
+    const cur = (b.currency && b.currency.label) || '';
+    const values = {
+      productName: id.productName,
+      worldName: id.worldName,
+      tagline: b.copy && b.copy.tagline,
+      currency: cur,
+      Currency: cur ? cur.charAt(0).toUpperCase() + cur.slice(1) : '',
+      companyName: co.name,
+      companySite: co.site,
+      companyTagline: co.tagline,
+    };
+    const v = values[name];
+    return typeof v === 'string' && v.trim() ? v : name;
+  }
+
+  // cls: the chip's class; inBox: the chip sits in a contenteditable box, so it
+  // is marked contenteditable="false" (typed around, never into).
+  // In a box, a chip with no words on one side gets a zero-width caret stop
+  // there (CARET): a browser cannot put the caret after a non-editable chip
+  // that ends the box, so the artist could not type after it. serializeHoles
+  // drops every CARET, so it never reaches the stored text.
+  const CARET = String.fromCharCode(0x200b);
+  function holesHtml(text, { cls = 'brand-hole', brand, inBox = false } = {}) {
+    const parts = splitHoles(text);
+    return parts.map((p, i) => {
+      if (!p.hole) return esc(p.text);
+      const label = holeLabel(p.hole, brand);
+      const chipHtml = `<span class="${esc(cls)}" data-hole="${esc(p.hole)}"${inBox ? ' contenteditable="false"' : ''} title="${esc(`A fixed name the page fills in: {{${p.hole}}}`)}">${esc(label)}</span>`;
+      if (!inBox) return chipHtml;
+      const before = i === 0 ? CARET : '';
+      const after = !parts[i + 1] || parts[i + 1].hole ? CARET : '';
+      return before + chipHtml + after;
+    }).join('');
+  }
+
+  // A chip box's children back to the stored text: a text node is its words, a
+  // chip is its {{token}}, a <br> the browser inserts is a space, and any other
+  // element is its own children (a browser may wrap typed words in a <div>).
+  function serializeHoles(nodes) {
+    let out = '';
+    for (const n of Array.from(nodes || [])) {
+      if (!n) continue;
+      if (n.nodeType === 3) { out += String(n.nodeValue == null ? '' : n.nodeValue).split(CARET).join(''); continue; }
+      if (n.nodeType !== 1) continue;
+      const hole = n.getAttribute ? n.getAttribute('data-hole') : null;
+      if (hole) { out += `{{${hole}}}`; continue; }
+      if (String(n.nodeName || n.tagName || '').toUpperCase() === 'BR') { out += ' '; continue; }
+      out += serializeHoles(n.childNodes);
+    }
+    return out;
+  }
+
+  const api = { splitHoles, holeNames, hasHoles, sameHoles, holeLabel, holesHtml, serializeHoles };
+  if (typeof window !== 'undefined') window.OTBBrandHoles = api;
+  if (typeof module !== 'undefined' && module.exports) module.exports = api;
+})();

package/modules/hall-ui/public/collab.html

@@ -148,7 +148,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/collab-lib.js?v=2026-09-24-archive"></script>

package/modules/hall-ui/public/collab.js

@@ -169,7 +169,7 @@
         <button class="cb-ask__door" type="button" data-reply-open="${fid}">${thread.length ? 'Add a reply' : 'Reply'}</button>
       </div>
       <form class="cb-reply-form" id="${fid}" data-reply-form="${id}" hidden>
-        <textarea class="cb-reply-input" name="body" rows="3" maxlength="${L.MAX_REPLY}" placeholder="Moot — the metrics stack was removed on the 15th, so there is nothing left to rotate."></textarea>
+        <textarea class="cb-reply-input" name="body" rows="3" maxlength="${L.MAX_REPLY}" placeholder="Write a reply…"></textarea>
         <div class="cb-reply-actions">
           <button class="btn-accent" type="submit" data-reply-send="${id}">Post reply</button>
           <button class="btn-ghost" type="button" data-reply-cancel="${fid}">Cancel</button>

package/modules/hall-ui/public/copy-desk.html

@@ -177,7 +177,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/deploy.html

@@ -38,6 +38,11 @@
              "it's not showing anything that's been done." -->
         <section class="scroll" id="nr-work" aria-labelledby="nr-work-h" hidden></section>
 
+        <!-- The render-deploy module's section (task 1004270): the deploy page of a project whose
+             app deploys through Render. Empty and hidden here; the module's own script fills it,
+             and only in a hall that turned the module on. -->
+        <section class="scroll" id="rd-panel" aria-labelledby="rd-h" hidden></section>
+
         <section class="scroll" id="dp-body" aria-labelledby="dp-body-h" hidden>
           <h2 class="scroll__h" id="dp-body-h">What users can see</h2>
           <!-- The honest framing, and the one thing a reader must not misread:
@@ -69,7 +74,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/deploy.js

@@ -233,10 +233,10 @@
   }
 
   // The one fix a page can hand the owner for a repo that was not updated: sign in again
-  // with repository access, which stores the token the runner pushes with. Offered only
+  // with repository access, which lets the runner set up its own lasting write key for the
+  // repository (task 1004291, ADR 0350). Offered only
   // for the two causes it can cure — a sign-in does nothing for GitHub being ahead of the
-  // box, or for a project with no repo. It says the access is short-lived (an hour, per
-  // GITHUB_TOKEN_TTL_MS) rather than promising the repo will simply catch up.
+  // box, for a project with no repo, or for one that needs its own account first.
   const RECONNECT_CURES = new Set(['no_access', 'refused']);
   function reconnectHtml(p, code) {
     if (!RECONNECT_CURES.has(code)) return '';
@@ -249,7 +249,7 @@
     const href = `${API}/auth/web/start?repos=1&return=${encodeURIComponent(back)}`;
     return `
       <p class="ov-row__sub">If you own this project, <a href="${escapeHtml(href)}">reconnect GitHub with repository access</a>.
-        The hub keeps that access for about an hour, so the next upgrade run within the hour saves this change to GitHub along with its own.</p>`;
+        Reconnecting sets up <strong>lasting</strong> access: the hub keeps a key of its own for this repository, so this change and every later upgrade are saved to GitHub without asking you again.</p>`;
   }
 
   function stepOneHtml(p) {
@@ -592,8 +592,17 @@
     return rows.find((i) => i && String(i.slug) === slug) || null;
   }
 
+  // A Render project's hall has no provisioning door (task 1004270): its /deploy page is the
+  // render-deploy module's, so the door's own reading is skipped rather than failing on routes
+  // that hall does not have.
+  function doorIsHere() {
+    const mods = window.__MODULES__;
+    return !(mods && mods.enabled && mods.enabled.provisioning === false);
+  }
+
   async function load() {
     const slug = scopeSlug();
+    if (!slug && !doorIsHere()) { $('dp-sub').textContent = 'Render'; return; }
     try {
       if (!slug) {
         // THE HALL'S OWN PROJECT. On the control plane that is the self row, which is why
@@ -650,10 +659,15 @@
   // module is on, so a hall without it never asks for a script that would 404.
   function loadModuleSections() {
     const mods = window.__MODULES__;
-    if (scopeSlug() || !(mods && mods.enabled && mods.enabled['npm-release'])) return;
-    const s = document.createElement('script');
-    s.src = '/modules/npm-release/public/work.js';
-    document.body.appendChild(s);
+    if (scopeSlug() || !(mods && mods.enabled)) return;
+    // Each module lends the page its own script, and only where it is on: a hall without a
+    // module never asks for a script that would 404.
+    for (const [key, src] of [['npm-release', '/modules/npm-release/public/work.js'], ['render-deploy', '/modules/render-deploy/public/deploy.js']]) {
+      if (!mods.enabled[key]) continue;
+      const s = document.createElement('script');
+      s.src = src;
+      document.body.appendChild(s);
+    }
   }
 
   document.addEventListener('DOMContentLoaded', () => { load(); loadModuleSections(); });

package/modules/hall-ui/public/diagrams.html

@@ -97,7 +97,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/diagram-viewer.js?v=2026-06-14-diagviewer-1" defer></script>

package/modules/hall-ui/public/dom-utils.js

@@ -441,6 +441,25 @@
       + `${escapeHtml(label)}${inherited ? '<i class="gr-cat__from" aria-hidden="true">via goal</i>' : ''}</span>`;
   }
 
+  // The hub's origin, for the links a hall sends to the person's account page
+  // (task 1004259 / 1003485, ADR 0337 D4.3). Stamped server-side into
+  // <meta name="hub-origin" content="{{hubOrigin}}"> — the hub itself, or the
+  // hub a federated project signs in through — and empty on a vanilla instance.
+  // A bare https origin only: an empty or pathy value must never become a
+  // same-host link claiming to be the hub (the profile-canonical.js rule).
+  // null means "no hub", and every caller then renders no link.
+  function hubOrigin() {
+    const meta = document.querySelector('meta[name="hub-origin"]');
+    const raw = ((meta && meta.getAttribute('content')) || '').trim().replace(/\/+$/, '');
+    if (!raw) return null;
+    try {
+      const url = new URL(raw);
+      if (url.protocol !== 'https:' || url.username || url.password) return null;
+      if (url.pathname !== '/' || url.search || url.hash) return null;
+      return url.origin;
+    } catch (err) { return null; }
+  }
+
   window.OTB = {
     escapeHtml, $, fmtNum, num, fmtInt, fmtCompact, fmtDate, rankLabel, toast, moduleOn, disciplines,
     // task 1003936 — ONE word for the role axis, all six surfaces
@@ -451,5 +470,6 @@
     contributeHallWidget, hallWidgets, hallWidgetIds,
     splitCriterion,
     categoryChip, // task 1003276 — shared by the Goals page, the Tasks board and the task page
+    hubOrigin, // task 1003485 — the hub account page's origin, for Settings and the profile nudge
   };
 })();

package/modules/hall-ui/public/drachmae.html

@@ -98,7 +98,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/md-reader.js?v=2026-09-02-mdreader-2"></script>

package/modules/hall-ui/public/fleet.html

@@ -54,7 +54,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/gate.html

@@ -76,7 +76,7 @@
 <div id="gate-modal-root"></div>
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/goal-inbox.js

@@ -455,7 +455,7 @@
     }).join('');
     return `<li class="ginbox__item" data-rot-tier="${escapeHtml(String(r.tier))}">
         <div class="ginbox__body">
-          <a class="ginbox__goal" href="${href}">${escapeHtml(r.title || `${r.tier} #${r.id}`)}</a>
+          <a class="ginbox__goal" href="${escapeHtml(href)}">${escapeHtml(r.title || `${r.tier} #${r.id}`)}</a>
           <span class="ginbox__sub">${escapeHtml(String(r.status || ''))} · ${where} · ${escapeHtml(untouchedFor(r.last_touched_at))}${again}</span>
         </div>
         <div class="ginbox__actions">${buttons}</div>

package/modules/hall-ui/public/goals.html

@@ -235,7 +235,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/government.html

@@ -134,7 +134,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/idea.html

@@ -52,7 +52,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib" defer></script>
 <!-- task-detail.js still owns the #/idea/N and #/blocker/N overlay, so a ref

package/modules/hall-ui/public/idea.js

@@ -141,6 +141,33 @@
     }).join('')}</div>`;
   }
 
+  // The author's scope recommendation (task 1004134; the field is BV2.R13).
+  // What the author thinks their Full Idea turned out to be, a goal of its own
+  // or a criterion inside an existing goal: the line written for the board, who
+  // read this page while deciding. The question and the option labels are the
+  // SERVER's (the template's `recommendation` spec), never re-typed here. Three
+  // honest outcomes: a served option is shown by its label; a value the served
+  // options do not name is printed as stored rather than dropped; NULL (every
+  // Full Idea filed before the question existed, and any terse CLI filing) says
+  // the author did not say, and invents nothing. It is the author's reading and
+  // never the board's decision, so the line says whose it is. The two sentences
+  // are the Board Room's own (board-room.js recommendationHtml), so one field
+  // reads in one vocabulary on every page that shows it (docs/voice.md V1).
+  function recommendationRow(idea, template) {
+    const spec = template && template.recommendation;
+    const q = spec && spec.label ? spec.label : 'Recommended scope';
+    const v = idea.recommendation;
+    let a;
+    if (v === null || v === undefined || v === '') {
+      a = '<p class="ig-answer__a" data-empty="1">Its author gave no scope recommendation.</p>';
+    } else {
+      const opt = spec && Array.isArray(spec.options) ? spec.options.find((o) => o && o.value === v) : null;
+      const label = opt && opt.label ? opt.label.charAt(0).toLowerCase() + opt.label.slice(1) : String(v);
+      a = `<p class="ig-answer__a">Its author recommends this becomes <strong>${escapeHtml(label)}</strong>. The board decides.</p>`;
+    }
+    return `<div class="ig-answers"><div class="ig-answer"><p class="ig-answer__q">${escapeHtml(q)}</p>${a}</div></div>`;
+  }
+
   // ---- the R154 mark control -------------------------------------------------
 
   // Rendered only when the viewer IS the author. The server re-checks; this is
@@ -433,6 +460,7 @@
           `<div class="ig-answer"><p class="ig-answer__q">${escapeHtml(k)}</p><p class="ig-answer__a">${escapeHtml(String(idea.field_values[k] || ''))}</p></div>`
         ).join('')}</div>`);
       }
+      parts.push(recommendationRow(idea, template));
       // A Full Idea's body_md is the original quick-idea text it grew out of, when
       // it had one. Shown after the answers, subordinate to them.
       if (String(idea.body_md || '').trim()) {

package/modules/hall-ui/public/ideas.html

@@ -225,7 +225,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- task 1003069 (R08) — the quick-filing form's routed result links a task

package/modules/hall-ui/public/ideas.js

@@ -86,6 +86,14 @@
   let allOpenGoals = [];         // the picker's "browse everything" half
   let allGoalsById = new Map();  // for naming the goal a routed capture landed in
   let goalTouchedByUser = false; // once the builder picks, stop clobbering it with fresh suggestions
+  // The suggester's out-of-order guard — the exact sibling of `gravitySeq`
+  // below (task 1004187). Both reads are fired from the same debounce, so both
+  // invite the same race: a slow answer for an earlier title landing after a
+  // fast one for the current title would repaint the picker with options for
+  // words the builder has already replaced. `goalTouchedByUser` answers a
+  // different question — has the builder picked manually? — and says nothing
+  // about ordering.
+  let goalSuggestSeq = 0;
   let quickSuggestTimer = null;
   let quickFiling = false;
   // GRAVITY (task 1004083 / spec R02). The landing verdict for the draft as it
@@ -584,10 +592,12 @@
   // degrades to "no suggestions"; the homeless option and the full goal list
   // are still there either way (goal-suggest.js's own fail-open contract).
   async function refreshGoalSuggestions() {
+    const seq = ++goalSuggestSeq;
     if (goalTouchedByUser) return; // never yank a manual pick out from under someone
     const title = fqTitleEl().value.trim();
     if (!title || !buildingVersionIds.length) { renderGoalOptions([]); return; }
     const kind = fqKindEl().value;
+    let merged = [];
     try {
       const results = await Promise.all(buildingVersionIds.map((versionId) => api.goals.getGoalsSuggestions({
         query: { version: versionId, title, kind, limit: 5 },
@@ -600,11 +610,17 @@
           if (!prev || g.score > prev.score) byId.set(String(g.id), g);
         }
       }
-      const merged = Array.from(byId.values()).sort((a, b) => b.score - a.score).slice(0, 5);
-      renderGoalOptions(merged);
+      merged = Array.from(byId.values()).sort((a, b) => b.score - a.score).slice(0, 5);
     } catch (_) {
-      renderGoalOptions([]);
+      merged = [];
     }
+    // A stale answer never paints. See goalSuggestSeq above. BOTH async exits
+    // share the one guard, exactly as refreshGravity's do: a read that fails
+    // late would otherwise clear a newer read's options just as surely as a
+    // read that succeeds late would replace them. The no-title return above is
+    // synchronous, so nothing can have superseded it.
+    if (seq !== goalSuggestSeq) return;
+    renderGoalOptions(merged);
   }
 
   // ---------------------------------------------------------------------------

package/modules/hall-ui/public/index.html

@@ -11,6 +11,10 @@
        that on the #hall-h1 marker below, so the marker must stay index-only. -->
   <title>Builders' Hall</title>
   <meta name="description" content="The hall of the builders who shape this world. Standing, achievements, and work waiting to be claimed.">
+  <!-- the hub's origin, stamped server-side (task 1003485): the profile nudge
+       sends "add a short bio" to the hub's account page, where the bio is edited.
+       Empty on an instance with no hub, and the bio half is then not asked for. -->
+  <meta name="hub-origin" content="{{hubOrigin}}">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
@@ -102,7 +106,7 @@
 <script src="/builders/brand-apply.js?v=2026-06-27-r75" defer></script>
 <!-- The app shell (sidebar + top bar + view router). Dependency-free; loaded
      BEFORE builders.js so the chrome ids exist when events are wired. -->
-<script src="/builders/shell.js?v=2026-09-28-archive" defer></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy" defer></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.

package/modules/hall-ui/public/modules.html

@@ -80,7 +80,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>

package/modules/hall-ui/public/primer.html

@@ -115,7 +115,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/profile-nudge.js

@@ -54,18 +54,35 @@
     }
     // Name what is actually missing: "add a bio" is actionable, "complete your
     // profile" is a chore of unknown size.
+    //
+    // Each half links to where it is actually EDITED (task 1003485): the bio is
+    // a platform-account field, edited on the hub's account page (task 1004259,
+    // ADR 0337 D4.3); the kinds of work are this project's own, in Settings. The
+    // line used to send both to /settings, which has no bio field — the "goes to
+    // an empty spot" bug. A half with nowhere to go (no hub origin) is not asked
+    // for at all, rather than pointed at a page that cannot answer it.
     const missing = Array.isArray(state.missing) ? state.missing : [];
+    const hub = window.OTB.hubOrigin();
     const parts = [];
-    if (missing.includes('bio')) parts.push('a short bio');
-    if (missing.includes('disciplines')) parts.push('the kinds of work you want');
-    const what = parts.length === 2 ? `${parts[0]} and ${parts[1]}` : (parts[0] || 'a detail or two');
+    if (missing.includes('bio') && hub) parts.push({ href: `${hub}/account`, text: 'a short bio' });
+    if (missing.includes('disciplines')) parts.push({ href: '/settings#disciplines', text: 'the kinds of work you want' });
+    if (!parts.length) {
+      box.innerHTML = '';
+      window.OTBAttention?.refresh();
+      return;
+    }
+    const link = (part, lead) => `<a class="ginbox__goal" href="${escapeHtml(part.href)}">${escapeHtml(lead + part.text)}</a>`;
+    // One flex item, so the two links read as one sentence rather than stacking.
+    const what = parts.length === 2
+      ? `<span>${link(parts[0], 'Add ')} and ${link(parts[1], '')}</span>`
+      : link(parts[0], 'Add ');
     box.innerHTML = '<h3 class="ginbox__sec-h">Complete your profile</h3>'
       + '<ul class="ginbox">'
       + '<li class="ginbox__item">'
       // .ginbox__body / .ginbox__actions are the classes style.css actually
       // defines (the body is the flex column that stacks label over sub-line).
       + '<div class="ginbox__body">'
-      + `<a class="ginbox__goal" href="/settings">Add ${escapeHtml(what)}</a>`
+      + what
       + '<span class="ginbox__sub">Shown on your public profile — it helps others know what you work on.</span>'
       + '</div>'
       + '<div class="ginbox__actions">'

package/modules/hall-ui/public/profile.html

@@ -187,7 +187,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->

package/modules/hall-ui/public/profile.js

@@ -287,7 +287,7 @@
     // ids may serialize as strings (pg bigint) — compare canonicalized.
     const isSelf = selfId != null && data.builder && String(data.builder.id) === String(selfId);
     const manage = isSelf
-      ? `<p class="scroll__lede">This is you — <a href="/settings#cross-project">manage its visibility in Settings → Cross-project record</a>.</p>`
+      ? `<p class="scroll__lede">This is you — <a href="/settings#cross-project">manage its visibility in Settings → Profile and privacy</a>.</p>`
       : '';
     const cp = data.cross_project;
     if (!cp) {

package/modules/hall-ui/public/project-settings.html

@@ -58,7 +58,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/ranks.html

@@ -68,7 +68,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before ranks.js, which pulls from it. -->

package/modules/hall-ui/public/roadmap.html

@@ -41,7 +41,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/roster.html

@@ -50,7 +50,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/sessions.html

@@ -99,7 +99,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-28-archive"></script>
+<script src="/builders/shell.js?v=2026-09-29-renderdeploy"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->