@bongos/core 1.19.248 → 1.19.250

package/docs/api/openapi.json

@@ -73,6 +73,10 @@
       "name": "claims",
       "description": "Endpoints under `/api/bongos/claims`."
     },
+    {
+      "name": "copy-desk",
+      "description": "Endpoints under `/api/bongos/copy-desk`."
+    },
     {
       "name": "cost",
       "description": "Endpoints under `/api/bongos/cost`."
@@ -3179,6 +3183,180 @@
         ]
       }
     },
+    "/copy-desk/flags": {
+      "post": {
+        "operationId": "post_copy_desk_flags",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "POST /copy-desk/flags",
+        "description": "------------------------------------------------------------------------- POST /copy-desk/flags — file a flag. Body: { scope, surface, string_id?, reason, kind? } rank: any signed-in builder (see the header). -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostCopyDeskFlagsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostCopyDeskFlagsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/copy-desk/flags/{id}/close": {
+      "post": {
+        "operationId": "post_copy_desk_flags_id_close",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "POST /copy-desk/flags/:id/close",
+        "description": "------------------------------------------------------------------------- POST /copy-desk/flags/:id/close — resolve or dismiss. Body: { status: 'resolved'|'dismissed', resolution_note, resolved_task_id? } rank: metic+archon, OR the flag's author (see the header). -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostCopyDeskFlagsIdCloseRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostCopyDeskFlagsIdCloseResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/copy-desk/queue": {
+      "get": {
+        "operationId": "get_copy_desk_queue",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "GET /copy-desk/queue",
+        "description": "------------------------------------------------------------------------- GET /copy-desk/queue — the artist's working list. ?status=open (default) | resolved | dismissed | all ?surface=<registry surface id> rank: any signed-in builder. The queue is a work list, not a privilege — and an artist is a craft, not a rank (builders.preferred_disciplines), so gating this by rank would hide the artist's own queue from the artist. -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/copy-desk/strings": {
+      "get": {
+        "operationId": "get_copy_desk_strings",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "GET /copy-desk/strings",
+        "description": "------------------------------------------------------------------------- GET /copy-desk/strings — search the inventory, to find something to flag. ?q= substring over text or file path · ?surface= · ?limit= (max 200) Read-only over the committed registry — no DB, no tree walk. rank: any signed-in builder, same reasoning as the queue. -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/cost": {
       "post": {
         "operationId": "post_cost",
@@ -15494,6 +15672,82 @@
           "reward"
         ]
       },
+      "PostCopyDeskFlagsIdCloseRequest": {
+        "type": "object",
+        "properties": {
+          "status": {
+            "type": "string"
+          },
+          "resolution_note": {
+            "type": "string",
+            "minLength": 1
+          },
+          "resolved_task_id": {
+            "type": "integer",
+            "minimum": 1
+          }
+        },
+        "required": [
+          "status",
+          "resolution_note"
+        ],
+        "additionalProperties": false
+      },
+      "PostCopyDeskFlagsIdCloseResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "flag": {}
+        },
+        "required": [
+          "ok",
+          "flag"
+        ]
+      },
+      "PostCopyDeskFlagsRequest": {
+        "type": "object",
+        "properties": {
+          "scope": {
+            "type": "string"
+          },
+          "surface": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+          },
+          "string_id": {
+            "type": "string",
+            "maxLength": 64
+          },
+          "reason": {
+            "type": "string",
+            "minLength": 1
+          },
+          "kind": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "surface",
+          "reason"
+        ],
+        "additionalProperties": false
+      },
+      "PostCopyDeskFlagsResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "flag": {}
+        },
+        "required": [
+          "ok",
+          "flag"
+        ]
+      },
       "PostCostRequest": {
         "type": "object",
         "properties": {
@@ -18039,9 +18293,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 285,
-  "x-schema-count": 321,
+  "x-endpoint-count": 289,
+  "x-schema-count": 325,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 215,
+  "x-response-schemas": 217,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 285 endpoints across 46 route files.
+> **Generated from the live route files** — the route file is authoritative. 289 endpoints across 47 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -143,6 +143,15 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/claims/batch/release` | `any-builder` | `claim_ids`, `force` | Bulk release (task 1758) — the batch twin of resolve(outcome='abandoned'). |
 | POST | `/api/bongos/claims/batch/validate` | `any-builder` | `task_ids` | Dry-run validate (task 1758) — read-only twin of claimTasksBatch's pre-flight checks. |
 
+## `copy-desk` (4)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| POST | `/api/bongos/copy-desk/flags` | `any-builder` | `scope`, `surface`, `string_id`, `reason`, `kind` | ------------------------------------------------------------------------- POST /copy-desk/flags — file a flag. |
+| POST | `/api/bongos/copy-desk/flags/:id/close` | `any-builder` | `status`, `resolution_note`, `resolved_task_id` | ------------------------------------------------------------------------- POST /copy-desk/flags/:id/close — resolve or dismiss. |
+| GET | `/api/bongos/copy-desk/queue` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/queue — the artist's working list. |
+| GET | `/api/bongos/copy-desk/strings` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/strings — search the inventory, to find somethin… |
+
 ## `cost` (1)
 
 | Method | Path | Rank | Body | Description |

package/docs/file-map.md

@@ -124,6 +124,7 @@
 │   ├── status-ui/              ← CORE-DOMAIN WEB-SURFACE carve (BV1.R84, default-on): the public status dashboard at status.<apex>, moved from public-status/. NO routes/db/port — declares contributes.webSurfaces:[{host:"status.",dir:"public"}], served by the loader web-surface seam (moduleWebSurfaces → serve-internal). CLAUDE.md, module.json, public/{index.html,status.js,style.css,cursors/,snapshots/}.
 │   ├── hall-ui/                ← CORE-DOMAIN WEB-SURFACE carve (BV1.R85, default-on): the authenticated builders' hall at builders.<apex>, moved from public-builders/ (~13k LOC, the largest). NO routes/db/port — declares contributes.webSurfaces:[{host:"builders.",dir:"public"}] for discovery, but UNLIKE status-ui keeps its DEDICATED serving block in serve-internal (the /builders shim + canonical redirects + citizen/Archon page gates + asset-stamping + hall-widget injection), partitioned out of the generic web-surface loop and served from BUILDERS_DIR. CLAUDE.md, module.json, public/{index.html,builders.js,style.css,work,watch,harbor,gate,pair,settings,ranks,sessions,primer,diagrams,atlas,...}.{html,js},cursors/,chime.wav.
 │   ├── lifecycle/               ← CORE-DOMAIN carve (BV1.R86, default-on): the build state machine — tasks · claims · versions · done-when · goals · dependencies · claim→ship→grade→credit · github-push + merge-lock + conflict-resolve + publish-reconciler. The LAST, most-coupled carve; registers the `lifecycle` kernel port (createTask, classifyTaskKind, tallyPeerVotes, work-tracking reads). CLAUDE.md, module.json, routes/{tasks,claims,versions,done-when,goals,dependencies,gate-approvals,analytics}.js, lifecycle.js, github-push.js, merge-lock.js, conflict-resolve.js, publish-reconciler.js.
+│   ├── copy-desk/               ← CORE-DOMAIN module (task 1003113 / R02 of goal 1000074, default-on): the COPY half of the design contract — ADR 0081 gave design TOKENS a repo-owned source of truth, text had none. Owns the FLAG (anyone in any role marks a string or a whole surface as needing an artist's attention, with a reason required in BOTH the route and a CHECK constraint) and the QUEUE an artist reads it from. READS R01's committed registry (docs/copy-registry.json, generated by scripts/gds/copy-inventory.js) and never writes it. NO LIVE CMS is the hard non-goal: no column here could hold replacement text, and copy_no_cms.mjs pins that. Key is `copy-desk`, not `copy` — the branding contract already owns a `copy` block, so the bare word reds the "core carries no module code" fitness check. CLAUDE.md, module.json, registry.js, flags.js, routes/copy-desk.js, migrations/copy_desk_001_flags.sql, tests/{copy_flags,copy_queue,copy_no_cms}.mjs. Its hall surface lives with hall-ui (public/copy-desk.{html,js,css}), per the one-key-per-web-surface precedent.
 │   ├── character-anim/          ← consistent-character generative animation (ADR 0088) — graded painterly frame sets + manifest, the otb-character-review skill. CLAUDE.md, module.json.
 │   ├── provisioning/            ← stands up + operates a Cloud Bongos instance's own infra (server/DB/domain/DNS/TLS) via the API (ADR 0111); web-tier request+state only, no cloud tokens — a separate control-plane runner drains the intents. Distinct from the `hosting` module (ADR 0092), which brokers compute workloads. CLAUDE.md, module.json.
 │   └── demo/                    ← BV1.R52 acceptance-proof module: one rank-gated write route + one namespaced migration proving the loader mounts a scaffolded module with zero core edits. CLAUDE.md, module.json.

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -251,6 +251,16 @@ function createClient(opts = {}) {
       // POST /claims/batch/validate — rank: any-builder — POST /claims/batch/validate
       postClaimsBatchValidate: (args) => request("POST", "/claims/batch/validate", { hasBody: true }, args),
     },
+    "copyDesk": {
+      // POST /copy-desk/flags — rank: any-builder — POST /copy-desk/flags
+      postCopyDeskFlags: (args) => request("POST", "/copy-desk/flags", { hasBody: true }, args),
+      // POST /copy-desk/flags/{id}/close — rank: any-builder — POST /copy-desk/flags/:id/close
+      postCopyDeskFlagsIdClose: (args) => request("POST", "/copy-desk/flags/{id}/close", { hasBody: true }, args),
+      // GET /copy-desk/queue — rank: any-builder — GET /copy-desk/queue
+      getCopyDeskQueue: (args) => request("GET", "/copy-desk/queue", { hasBody: false }, args),
+      // GET /copy-desk/strings — rank: any-builder — GET /copy-desk/strings
+      getCopyDeskStrings: (args) => request("GET", "/copy-desk/strings", { hasBody: false }, args),
+    },
     "cost": {
       // POST /cost — rank: any-builder — POST /cost
       postCost: (args) => request("POST", "/cost", { hasBody: true }, args),

package/modules/hall-ui/public/copy-desk.css

@@ -0,0 +1,119 @@
+/* modules/hall-ui/public/copy-desk.css — the Copy desk tab (task 1003113 / R02
+   of goal 1000074).
+
+   Built on the hall's existing tokens (style.css) rather than a new palette: the
+   page whose subject is "does this project speak with one voice" would be a poor
+   place to introduce a second visual one. Only the shapes this page needs are
+   defined here. */
+
+.cd-stats {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(9rem, 1fr));
+  gap: 0.75rem;
+  margin: 0.5rem 0 1rem;
+}
+.cd-stat {
+  display: flex;
+  flex-direction: column;
+  gap: 0.15rem;
+  padding: 0.75rem 0.9rem;
+  border: 1px solid var(--line, rgba(255, 255, 255, 0.12));
+  border-radius: 0.5rem;
+  background: var(--panel, rgba(255, 255, 255, 0.03));
+}
+.cd-stat__n { font-size: 1.6rem; font-weight: 700; line-height: 1.1; }
+.cd-stat__l { font-size: 0.8rem; opacity: 0.7; }
+
+.cd-note { font-size: 0.85rem; opacity: 0.75; line-height: 1.5; }
+.cd-note code {
+  padding: 0.05rem 0.3rem;
+  border-radius: 0.25rem;
+  background: var(--panel, rgba(255, 255, 255, 0.06));
+  font-size: 0.95em;
+}
+
+.cd-filters { display: flex; flex-wrap: wrap; gap: 0.5rem 0.75rem; align-items: center; margin: 0.5rem 0 1rem; }
+.cd-filters__label { font-size: 0.8rem; opacity: 0.7; }
+.cd-filters__select,
+.cd-browse__input,
+.cd-dialog__select,
+.cd-dialog__input,
+.cd-dialog__text {
+  padding: 0.4rem 0.6rem;
+  border: 1px solid var(--line, rgba(255, 255, 255, 0.15));
+  border-radius: 0.35rem;
+  background: var(--panel, rgba(0, 0, 0, 0.2));
+  color: inherit;
+  font: inherit;
+}
+
+.cd-browse { margin: 0.5rem 0 1rem; }
+.cd-browse__label { display: block; font-size: 0.8rem; opacity: 0.7; margin-bottom: 0.3rem; }
+.cd-browse__input { width: 100%; max-width: 34rem; }
+
+.cd-list { display: flex; flex-direction: column; gap: 0.6rem; }
+.cd-empty { padding: 1rem; opacity: 0.65; font-size: 0.9rem; }
+
+.cd-card {
+  padding: 0.85rem 1rem;
+  border: 1px solid var(--line, rgba(255, 255, 255, 0.12));
+  border-radius: 0.5rem;
+  background: var(--panel, rgba(255, 255, 255, 0.03));
+}
+.cd-card--slim { padding: 0.6rem 0.8rem; }
+.cd-card__head { display: flex; flex-wrap: wrap; gap: 0.4rem; align-items: center; margin-bottom: 0.4rem; }
+.cd-card__target { margin: 0.2rem 0 0.45rem; line-height: 1.5; }
+.cd-card__actions { display: flex; flex-wrap: wrap; gap: 0.5rem; align-items: center; justify-content: flex-end; margin-top: 0.5rem; }
+
+/* The quoted string is the product's own words, shown as evidence — so it is
+   visually set apart from this page's own voice. Wrapping is preserved because
+   leading and trailing space in a string is often exactly what is wrong. */
+.cd-quote {
+  quotes: '"' '"';
+  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+  font-size: 0.9em;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+.cd-where { font-size: 0.8rem; opacity: 0.6; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
+.cd-byline { font-size: 0.8rem; opacity: 0.65; margin-left: auto; }
+.cd-reason { margin: 0.3rem 0 0; line-height: 1.55; }
+.cd-snapshot-label { font-size: 0.8rem; opacity: 0.6; }
+.cd-closed { margin: 0.5rem 0 0; font-size: 0.85rem; opacity: 0.8; line-height: 1.5; }
+.cd-places { margin: 0.3rem 0 0; padding-left: 1.1rem; font-size: 0.8rem; opacity: 0.65; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
+
+.cd-tag {
+  display: inline-block;
+  padding: 0.1rem 0.45rem;
+  border: 1px solid var(--line, rgba(255, 255, 255, 0.18));
+  border-radius: 999px;
+  font-size: 0.72rem;
+  letter-spacing: 0.02em;
+  opacity: 0.85;
+}
+.cd-tag--kind { font-weight: 600; opacity: 1; }
+/* 'untouched' is the only state that is WORK, so it is the only one that carries
+   colour — a queue where everything is highlighted highlights nothing. */
+.cd-tag--untouched { border-color: currentColor; opacity: 1; }
+.cd-tag--flagged,
+.cd-tag--settled,
+.cd-tag--moved { opacity: 0.6; }
+.cd-tag--gone { opacity: 0.75; font-style: italic; }
+
+.cd-dialog {
+  width: min(34rem, 92vw);
+  padding: 1.25rem;
+  border: 1px solid var(--line, rgba(255, 255, 255, 0.18));
+  border-radius: 0.6rem;
+  background: var(--bg, #12131a);
+  color: inherit;
+}
+.cd-dialog::backdrop { background: rgba(0, 0, 0, 0.55); }
+.cd-dialog__h { margin: 0 0 0.5rem; font-size: 1.1rem; }
+.cd-dialog__target { margin: 0 0 0.9rem; line-height: 1.5; }
+.cd-dialog__label { display: block; margin: 0.75rem 0 0.25rem; font-size: 0.85rem; font-weight: 600; }
+.cd-dialog__hint { display: block; font-weight: 400; font-size: 0.78rem; opacity: 0.65; line-height: 1.45; margin-top: 0.1rem; }
+.cd-dialog__select, .cd-dialog__input, .cd-dialog__text { width: 100%; }
+.cd-dialog__text { resize: vertical; line-height: 1.5; }
+.cd-dialog__err { min-height: 1.2rem; margin: 0.5rem 0 0; font-size: 0.85rem; color: var(--danger, #ff8080); line-height: 1.45; }
+.cd-dialog__actions { display: flex; gap: 0.5rem; justify-content: flex-end; margin-top: 0.9rem; }

package/modules/hall-ui/public/copy-desk.html

@@ -0,0 +1,139 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Copy desk — {{worldName}}</title>
+  <meta name="description" content="The artist's queue over the words this project shows people: flagged copy, who flagged it and why, and the duplicated strings nobody has looked at yet.">
+  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
+  <link rel="stylesheet" href="/builders/copy-desk.css">
+</head>
+<body data-page="copy-desk" data-page-title="Copy desk">
+
+<div class="app">
+  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
+  <div class="app-scrim" id="app-scrim" hidden></div>
+  <div class="app-body">
+    <header class="app-topbar" id="app-topbar"></header>
+    <div class="app-content">
+      <div class="page-head"><p class="page-head__sub" id="cd-sub">Loading the copy desk…</p></div>
+
+      <main>
+        <!-- The counts. Deliberately four numbers and not a dashboard: open work,
+             the fast pile (targets that have since been edited away), untouched
+             duplicates, and how big the inventory is. -->
+        <section class="scroll" id="cd-summary-scroll" aria-labelledby="cd-summary-h">
+          <h2 id="cd-summary-h" class="scroll__h">Where the words stand</h2>
+          <div class="cd-stats" id="cd-stats"></div>
+          <p class="cd-note" id="cd-registry-note"></p>
+        </section>
+
+        <!-- The queue. -->
+        <section class="scroll" id="cd-flags-scroll" aria-labelledby="cd-flags-h">
+          <h2 id="cd-flags-h" class="scroll__h">Flagged</h2>
+          <p class="scroll__lede">Copy someone has judged as needing attention, with their reason. Anyone can file one; closing it needs Metic+, or that it is your own.</p>
+          <div class="cd-filters">
+            <label class="cd-filters__label" for="cd-status">Show</label>
+            <select id="cd-status" class="cd-filters__select">
+              <option value="open" selected>Open</option>
+              <option value="resolved">Resolved</option>
+              <option value="dismissed">Dismissed</option>
+              <option value="all">Everything</option>
+            </select>
+            <label class="cd-filters__label" for="cd-surface">Surface</label>
+            <select id="cd-surface" class="cd-filters__select"><option value="">All surfaces</option></select>
+          </div>
+          <div class="cd-list" id="cd-flags"><div class="cd-empty">Loading…</div></div>
+        </section>
+
+        <!-- The one signal a machine can compute with no judgement layer at all
+             (R01's registry computes it; this only subtracts what has been dealt
+             with). Stale and off-voice need a person or a judge — this does not. -->
+        <section class="scroll" id="cd-dupes-scroll" aria-labelledby="cd-dupes-h">
+          <h2 id="cd-dupes-h" class="scroll__h">Said more than once</h2>
+          <p class="scroll__lede">The same sentence, in several places. Sometimes that is right and the answer is to dismiss it; sometimes it is seven copies of an error message that should have been one. Nobody has looked at the ones marked untouched.</p>
+          <div class="cd-list" id="cd-dupes"><div class="cd-empty">Loading…</div></div>
+        </section>
+
+        <!-- Find any string in the product and flag it. Without this the queue
+             could only ever contain what a machine had already noticed. -->
+        <section class="scroll" id="cd-find-scroll" aria-labelledby="cd-find-h">
+          <h2 id="cd-find-h" class="scroll__h">Find something to flag</h2>
+          <p class="scroll__lede">Search every string the product shows a person, by what it says or the file it lives in.</p>
+          <div class="cd-browse">
+            <label class="cd-browse__label" for="cd-search">Search the copy</label>
+            <input type="search" id="cd-search" class="cd-browse__input" autocomplete="off"
+                   placeholder="a phrase you saw, or a file name…">
+            <p class="cd-note" id="cd-search-count" role="status" aria-live="polite"></p>
+          </div>
+          <div class="cd-list" id="cd-results"></div>
+        </section>
+      </main>
+
+      <footer class="app-foot" id="app-foot"></footer>
+    </div>
+  </div>
+</div>
+
+<!-- The flag composer. A dialog rather than an inline field because the reason is
+     the point: a one-line input invites "typo", and the queue is only worth
+     reading if the reasons are. -->
+<dialog id="cd-dialog" class="cd-dialog">
+  <form method="dialog" id="cd-form">
+    <h3 class="cd-dialog__h" id="cd-dialog-h">Flag this copy</h3>
+    <p class="cd-dialog__target" id="cd-dialog-target"></p>
+    <label class="cd-dialog__label" for="cd-kind">What kind of wrong?</label>
+    <select id="cd-kind" class="cd-dialog__select">
+      <option value="off-voice">Off voice — says it in the wrong register</option>
+      <option value="slop">Slop — reads as machine-written</option>
+      <option value="unclear">Unclear — a person would not know what to do</option>
+      <option value="stale">Stale — describes something that changed</option>
+      <option value="duplicate">Duplicate — should be said once, in one place</option>
+      <option value="typo">Typo or grammar</option>
+      <option value="other" selected>Something else</option>
+    </select>
+    <label class="cd-dialog__label" for="cd-reason">Why? <span class="cd-dialog__hint">The artist reads this instead of guessing. A pointer with no judgement costs them a look and tells them nothing.</span></label>
+    <textarea id="cd-reason" class="cd-dialog__text" rows="4" minlength="10" required
+              placeholder="What is wrong with it, and what would better look like?"></textarea>
+    <p class="cd-dialog__err" id="cd-dialog-err" role="alert"></p>
+    <div class="cd-dialog__actions">
+      <button type="button" class="btn btn--ghost" id="cd-cancel">Cancel</button>
+      <button type="button" class="btn" id="cd-submit">File the flag</button>
+    </div>
+  </form>
+</dialog>
+
+<!-- Closing a flag asks for a note for the same reason opening one does. -->
+<dialog id="cd-close-dialog" class="cd-dialog">
+  <form method="dialog" id="cd-close-form">
+    <h3 class="cd-dialog__h">Close this flag</h3>
+    <p class="cd-dialog__target" id="cd-close-target"></p>
+    <label class="cd-dialog__label" for="cd-close-status">Outcome</label>
+    <select id="cd-close-status" class="cd-dialog__select">
+      <option value="resolved" selected>Resolved — the copy was changed</option>
+      <option value="dismissed">Dismissed — looked at, leaving it as it is</option>
+    </select>
+    <label class="cd-dialog__label" for="cd-close-task">Task that carried the fix <span class="cd-dialog__hint">Optional. This is the ledger link — a copy change ships as a task like every other change.</span></label>
+    <input type="number" id="cd-close-task" class="cd-dialog__input" placeholder="e.g. 1003113" min="1">
+    <label class="cd-dialog__label" for="cd-close-note">Note <span class="cd-dialog__hint">The next person to notice this sentence reads your note instead of re-litigating it.</span></label>
+    <textarea id="cd-close-note" class="cd-dialog__text" rows="3" minlength="10" required></textarea>
+    <p class="cd-dialog__err" id="cd-close-err" role="alert"></p>
+    <div class="cd-dialog__actions">
+      <button type="button" class="btn btn--ghost" id="cd-close-cancel">Cancel</button>
+      <button type="button" class="btn" id="cd-close-submit">Close it</button>
+    </div>
+  </form>
+</dialog>
+
+<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
+
+<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<script src="/builders/palette.js" defer></script>
+<script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
+<script src="/builders/copy-desk.js?v=2026-08-18-r02"></script>
+</body>
+</html>