@bongos/core 1.19.275 → 1.19.277

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.275",
-  "core_contract": "1.19.275",
-  "source_commit": "0f1493b2557fe16041d30d15fb064fc7c15448d0",
+  "core_version": "1.19.277",
+  "core_contract": "1.19.277",
+  "source_commit": "35b30c3a1c2a68136a144277b48bb750148995a4",
   "source_ref": "HEAD",
-  "built_at": "2026-08-21T14:30:08.138Z",
+  "built_at": "2026-08-21T16:28:45.099Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 318,
     "agent_docs_stubbed": 22,
-    "functional_verbatim": 1374,
+    "functional_verbatim": 1376,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1714,
-  "tree_sha256": "4f04f6243896e821ad5b920694493985f5a485aaf9684204a398105333baadb3",
+  "file_count": 1716,
+  "tree_sha256": "42012dded2c6108d84ebdea4781e6cf78523e2f6c93cf2eebbc16e032b8a33b2",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -87,7 +87,7 @@
     {
       "path": ".claude/skills/builder-sequence/SKILL.md",
       "mode": "0000644",
-      "sha256": "4284bc0184dd27752202ce02974fa8909fc462f546ee3cae38fa26b4ca071f81"
+      "sha256": "838648912f0f058c58c42d943282346e2c35a90aea507b0ec136e9b0fbda50b0"
     },
     {
       "path": ".claude/skills/builder-setup/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "687cc799954164a882f70587922fa313a836eb90aae32f99a4e0c3a0e7333e9c"
+      "sha256": "28ea93104b710162845534c03881affa2ebfa5e9e622c195ef5332fb919762c4"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "2985a6dfb923b6b974aed3da0d6fe0915ae1d439a48c4ee7607062e4fbdc182f"
+      "sha256": "8b6c0691763e21272008f0cb5c24e40d7bc65b297d81e4d1c1b2f58d5f1ab657"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "9ec1876369ac9d53ebf9f742b276314c8731cad32b17e8ed068dc180074098c9"
+      "sha256": "3b7b24b5ced8eead07e1d758e4c1b59321b0fb0f2108aefefd0e4b73bb7cc78b"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "d78827e8ec5ad4e27dfd5b0ad33fd3a9e9ef48f3fa62f28320374ba7fcc78422"
+      "sha256": "183d88c492aae87e1a06a1cb69ba5227db6b023057676637025fee0a77bddd88"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "c6d64e8c7efbad95471f0d68a07e5ee4b83d8122ca1d68cf3ea6a614f3fa396f"
+      "sha256": "0348faad8b08aefdc42d7bdff79a97a94f547f824c3ec37ed7642cde357a6950"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1397,12 +1397,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "da411a477344816c800f05b84740517a14394c9cbcf985a03ef7d4c178f55161"
+      "sha256": "1f499b7f98aba5e51d30f7e3a76c00a3c1b535fe676eb03a31f1eb559d9a0f13"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "09784dfef8f31071e4611374c3fc592793d0194492ac51896974debbcfecdeec"
+      "sha256": "7fa333bb7864fa72672b463f5c53ae9340bd5ecad808bbfe193e835e57ae3e8d"
     },
     {
       "path": "docs/architecture.md",
@@ -1427,12 +1427,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "47ba743c5ce981d8afafa22013cf596f0ccd26e3f25a43c656188ccd105fafdb"
+      "sha256": "5d38acb7694c5e60631e0ba4ad00f9ce79fd7b761434e6c55de9b1034b62722e"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "473494d43714c9d300487ce7fe976997c3c8d8c3b2d1daeea6481d18cb1997ec"
+      "sha256": "6d4123b12211e88f62337fb4f76743459af1af9629a1e6215676fdcc19a2f71f"
     },
     {
       "path": "docs/design-contract.md",
@@ -2787,7 +2787,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "9ec1876369ac9d53ebf9f742b276314c8731cad32b17e8ed068dc180074098c9"
+      "sha256": "3b7b24b5ced8eead07e1d758e4c1b59321b0fb0f2108aefefd0e4b73bb7cc78b"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3377,7 +3377,7 @@
     {
       "path": "modules/hall-ui/public/goal-inbox.js",
       "mode": "0000644",
-      "sha256": "6b3c03ab796597eb6293f28cee278e61c291d58fc3b6468e53b5185d08f97fb3"
+      "sha256": "ede756a5c11c8c6a9eca4c841f2110a5e05293b0fbd6d34a5c90a05dc02943c4"
     },
     {
       "path": "modules/hall-ui/public/goals-page.js",
@@ -3682,7 +3682,7 @@
     {
       "path": "modules/ideas/inbox.js",
       "mode": "0000644",
-      "sha256": "e132a1ebab662aba91113f8bfe60c7df6a8818f4d3743b5819903904fdef52fb"
+      "sha256": "379a6e51a8865dcf52061d858e7e2f3b572f16bc04473aba163e52cadcaf1873"
     },
     {
       "path": "modules/ideas/migrations/ideas_001_grades.sql",
@@ -3699,6 +3699,11 @@
       "mode": "0000644",
       "sha256": "8edeeb0bbf5bac57111008357fc287f8dc14e6907d7bc218264c40633778b9c3"
     },
+    {
+      "path": "modules/ideas/migrations/ideas_004_lineage_route_index.sql",
+      "mode": "0000644",
+      "sha256": "eb1393f0ee8dccc57efcfe0acd0fdac7857389b74e0cb734042bb4293768b8e8"
+    },
     {
       "path": "modules/ideas/module.json",
       "mode": "0000644",
@@ -3712,12 +3717,12 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "f4f1003c7cdc0d103fb052f1dc50b76291362b53ddd6b76b561c6d872d2d7a91"
+      "sha256": "9c7027f70daba8cb956ab540567972afcec96900ce8d7f7793647bc58c13abdd"
     },
     {
       "path": "modules/ideas/routing.js",
       "mode": "0000644",
-      "sha256": "25ecd991b874353b757fcd9b8773d6135a76af37f699c4f854c66e196caf06f0"
+      "sha256": "2ca0adb68b0fd44a65b9637c177848648ecd20ecd8ef67e65527c17b7a46414d"
     },
     {
       "path": "modules/ideas/templates.js",
@@ -3867,7 +3872,7 @@
     {
       "path": "modules/lifecycle/ship-card.js",
       "mode": "0000644",
-      "sha256": "c2c4f75c6fec8a51befbe9e08f9fdb15b47a637654791a98d5eac6ed4a319ece"
+      "sha256": "c08ee0e89f67a2db7ea049353a12bdd6e5d97c6a7ec9039d19bdd797f66c112e"
     },
     {
       "path": "modules/lifecycle/ship-preflight.js",
@@ -4482,12 +4487,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "eb3ac31abdc6eef09c4a19ddca7e03320280e889792f4ccbf09004695225b8a6"
+      "sha256": "296343fcb5f99b8dc4fb410e8b7c983d8c27da94bb23a64ffae6e246b87634d1"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "f6d4dd4520d0b22fd2c0effa16c1aea034cb8e32a0520f11c27eb7b5461b4d73"
+      "sha256": "0fa3267232afe7bfab282670e735d0cdd313d21614128c7666a10368f302ae2e"
     },
     {
       "path": "public-docs/index.html",
@@ -6132,7 +6137,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ebdca46e67df3c28972e28e78a20bf3fb6a88d96c9763cd502e29a6e7573d545"
+      "sha256": "3068c942e43140df9169a36c39acb9b3daffb182d2a7f33e89180b3926abfd37"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -7417,7 +7422,7 @@
     {
       "path": "tests/idea_routing.mjs",
       "mode": "0000644",
-      "sha256": "3ba1fba0951121f23aa073b886f532dc30e0ed863c2a097db019320f70856118"
+      "sha256": "7bea2d388fad9a6b186c4712d6921a554f1d24c70dcae5760b381782149068e7"
     },
     {
       "path": "tests/idea_task_lineage.mjs",
@@ -8189,6 +8194,11 @@
       "mode": "0000644",
       "sha256": "e76a3baf5fb2cdee08ffe8d80c55630b5ab4f708046f3c63c07c480926ccda31"
     },
+    {
+      "path": "tests/session_boundary_handoff.mjs",
+      "mode": "0000644",
+      "sha256": "8789eb59b2c3984500b4b2eb24d1e812e0ce6c970fc6fc940c06a6daf2613ec2"
+    },
     {
       "path": "tests/session_caps.mjs",
       "mode": "0000644",

package/.claude/skills/builder-sequence/SKILL.md

@@ -35,7 +35,20 @@ This skill owns the **loop and the halt discipline**. It does not re-derive how
 
 5. **Ship it** — `/builder-ship`. The task must reach `shipped`, not stall at `completed` or `confirmed`. A ship that does not land has not unblocked anything, so the chain cannot advance; treat it as a halt (see `ship_failed` below).
 
-6. **Go back to step 2.** The ship you just landed is what promotes the next task to `ready`.
+6. **Hand the chain off before the next link — the chain gets slower otherwise.** This is the step that makes a long run stay fast, and it is easy to skip because nothing breaks without it.
+
+   Every turn re-reads the whole conversation, so a chain worked in one window pays more per turn the further down it goes. Measured on a three-task run (2026-08-21): 11.3M cached tokens on the first task, 36.1M on the second, 78.1M on the third. The third task was not twice the work of the second — it re-processed twice the context.
+
+   A shipped task is the moment almost all of that context turns into dead weight: superseded diffs, resolved test failures, closed grade rounds. **The chain's state is already durable** — dependencies and claims live in the GDS, and `--next` re-derives the plan from them — so a fresh window loses nothing that matters.
+
+   So, when the ship card shows a **heavy session** (it says so itself: `⚠ heavy session (NNM cached) — run /session-handoff…`), or when you have landed **three or more links** in one window:
+
+   - Run `/session-handoff`, scoped to the REMAINDER of the chain — the next task id, the chain's tail, and any decision from the links already landed that the rest depends on. Do not summarise the finished work in detail; it is shipped, and the GDS is its record.
+   - Hand the user that prompt and say plainly that the chain continues in a fresh session. Then **stop.** Do not claim the next task in this window.
+
+   `/session-handoff` composes text and changes nothing, so this is safe at any point — and it cannot be automated away: a hook cannot clear a conversation, which is exactly why this step is the runner's job.
+
+7. **Otherwise, go back to step 2.** The ship you just landed is what promotes the next task to `ready`.
 
 Between passes, report progress in one line — which task landed, what is next, how much of the chain remains. The user is following a long run; they should never have to ask where it is.
 
@@ -73,6 +86,8 @@ node scripts/gds/sequence.js --check <task-id>
 
 ## What NOT to do
 
+- **Do not run a long chain to exhaustion in one window** to avoid the handoff in step 6. It feels like progress and it is the single biggest reason a long run drags: the last link can cost several times the first for identical work. Handing off is not an interruption of the chain; it is how the chain stays cheap.
+
 - **Do not skip a halted task and continue down the chain.** The owner chose stop-and-report precisely so a blocked predecessor does not silently strand its dependents.
 - **Do not batch-claim.** See "The one rule".
 - **Do not widen a task's `touches[]`** to make the chain flow. File a new task instead (`node scripts/gds/capture.js`).

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 289 operations across 47 resource groups
+- 290 operations across 47 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -401,6 +401,8 @@ function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
+      getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/clients/bongos-client/index.cjs

@@ -400,6 +400,8 @@ function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
+      getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/clients/bongos-client/index.d.ts

@@ -47,6 +47,7 @@ export interface GetGovernmentPermissionsResponse { permissions: unknown; princi
 export interface GetGovernmentRanksResponse { ranks: unknown }
 export interface GetGradesByBuilderResponse { window_days: unknown; builders: unknown }
 export interface GetHealthzResponse { ok: boolean; auth_configured: unknown }
+export interface GetInboxAwaitingNodResponse { awaiting: unknown; count: unknown }
 export interface GetInboxIdResponse { idea: unknown }
 export interface GetInboxResponse { ideas: unknown; open_count: unknown }
 export interface GetLeaderboardResponse { leaderboard: unknown; page: unknown }
@@ -659,6 +660,8 @@ export interface BongosClient {
     postInboxIdRatify(args?: RequestArgs & { body?: PostInboxIdRatifyRequest }): Promise<ApiResponse>;
     /** POST /inbox/{id}/resubmit — rank: any-builder */
     postInboxIdResubmit(args: RequestArgs & { body: PostInboxIdResubmitRequest }): Promise<ApiResponse>;
+    /** GET /inbox/awaiting-nod — rank: metic+archon */
+    getInboxAwaitingNod(args?: RequestArgs): Promise<GetInboxAwaitingNodResponse>;
   };
   "instance": {
     /** GET /instance — rank: public */

package/clients/bongos-client/index.mjs

@@ -397,6 +397,8 @@ export function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
+      getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/docs/api/openapi.json

@@ -6151,6 +6151,47 @@
         ]
       }
     },
+    "/inbox/awaiting-nod": {
+      "get": {
+        "operationId": "get_inbox_awaiting_nod",
+        "tags": [
+          "inbox"
+        ],
+        "summary": "GET /inbox/awaiting-nod",
+        "description": "GET /inbox/awaiting-nod — the NOD QUEUE (task 1003066, BV1.R05). REGISTERED BEFORE /inbox/:id ON PURPOSE. Express matches in registration order, so a literal segment declared after the wildcard is unreachable — this would arrive as /inbox/:id with id='awaiting-nod' and 400 on parseId. rank: metic+ via the EXISTING idea.triage permission, deliberately reused rather than minting a new one. Owner interview Q3: \"any Metic+ gives the nod, in the existing Needs-your-attention slice. No new surface, no new permission.\" The act this queue leads to is POST /tasks/:id/promote, itself gated task.promote (Metic+), so a reader who can see this queue can act on it — the two gates agree by construction instead of by coincidence. Placed on /inbox rather than /tasks because the row is defined by its LINEAGE (origin='route'), and ideas_task_lineage is an ideas-owned table — the lifecycle module must not query it, and this module must not query it from there. \"A task at backlog that a person reported\" is an ideas question.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `idea.triage` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/ideas/routes/inbox.js",
+        "x-permissions": [
+          "idea.triage"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetInboxAwaitingNodResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/inbox/{id}": {
       "get": {
         "operationId": "get_inbox_id",
@@ -13658,6 +13699,17 @@
           "auth_configured"
         ]
       },
+      "GetInboxAwaitingNodResponse": {
+        "type": "object",
+        "properties": {
+          "awaiting": {},
+          "count": {}
+        },
+        "required": [
+          "awaiting",
+          "count"
+        ]
+      },
       "GetInboxIdResponse": {
         "type": "object",
         "properties": {
@@ -18301,9 +18353,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 289,
-  "x-schema-count": 325,
+  "x-endpoint-count": 290,
+  "x-schema-count": 326,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 217,
+  "x-response-schemas": 218,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 289 endpoints across 47 route files.
+> **Generated from the live route files** — the route file is authoritative. 290 endpoints across 47 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -255,7 +255,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 |---|---|---|---|---|
 | GET | `/api/bongos/healthz` | `public` | — | liveness probe; status.example.com hits this anonymously. |
 
-## `inbox` (6)
+## `inbox` (7)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -265,6 +265,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | PATCH | `/api/bongos/inbox/:id` | `metic+archon` | `status`, `kind`, `promoted_to_task_id`, `reviewed_at`, `merged_into_idea_id`, `triage_note` | Metic+ (task 360 / ADR 0018): idea triage (promote/discard/merge) shapes the backlog. |
 | POST | `/api/bongos/inbox/:id/ratify` | `metic+archon` | `notes_md` | V3.R31 (task 252) — Archon ratifies a criterion-proposal idea, atomically: - INSERT done_when_criteria row on the target version - UPDATE… |
 | POST | `/api/bongos/inbox/:id/resubmit` | `any-builder` | `field_values`, `template_key` | RESUBMIT a Full Idea after a rejection (R13 of goal 1000069, criterion C2: an idea never dies and never stalls). |
+| GET | `/api/bongos/inbox/awaiting-nod` | `metic+archon` | — | GET /inbox/awaiting-nod — the NOD QUEUE (task 1003066, BV1.R05). |
 
 ## `instance` (1)
 

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1335 strings** across 3 surfaces · 1184 distinct pieces of copy · 1335 certain, 0 heuristic · 121 shown in more than one place.
+**1337 strings** across 3 surfaces · 1186 distinct pieces of copy · 1337 certain, 0 heuristic · 121 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 60 | 1051 |
+| `builders-hall` | `modules/hall-ui/public` | 60 | 1053 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 98 |
 | `landing` | `public-landing` | 2 | 186 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7775fec0fa85` | 2x | Could not load sessions. | modules/hall-ui/public/sessions.js:168, modules/hall-ui/public/sessions.js:207 |
 | … | | _81 more in the JSON registry_ | |
 
-## `builders-hall` — 1051 strings
+## `builders-hall` — 1053 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -398,6 +398,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2ae2114b61db` | certain | Get a free key ↗ | `modules/hall-ui/public/settings.js:917` |
 | `4794a991de3d` | certain | Getting started | `modules/hall-ui/public/hall-widgets.js:59` |
 | `a28b1a567f1a` | certain | GitHub username | `modules/hall-ui/public/builders.js:553` |
+| `79934b879a12` | certain | Give the nod | `modules/hall-ui/public/goal-inbox.js:231` |
 | `51bd60197133` | certain | Go back | `modules/hall-ui/public/drachmae.js:162` |
 | `51bd60197133` | certain | Go back | `modules/hall-ui/public/primer.js:620` |
 | `13acaeb4b0bf` | certain | Goal #{…} | `modules/hall-ui/public/task.js:202` |
@@ -518,7 +519,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `670aa6cee309` | certain | My Projects — {{worldName}} | `modules/hall-ui/public/my-projects.html:6` |
 | `ae84ebe1d735` | certain | Name cannot be blank. | `modules/hall-ui/public/settings.js:730` |
 | `31e91ee6ce03` | certain | Name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:735` |
-| `7def635421ea` | certain | Needs your attention | `modules/hall-ui/public/goal-inbox.js:204` |
+| `7def635421ea` | certain | Needs your attention | `modules/hall-ui/public/goal-inbox.js:274` |
 | `7fcc2583c372` | certain | New custom rank | `modules/hall-ui/public/government.html:58` |
 | `9e06c14d155a` | certain | New here — request access | `modules/hall-ui/public/builders.js:553` |
 | `6ff07874edef` | certain | Newest first. The fifty most recent write operations. | `modules/hall-ui/public/watch.js:433` |
@@ -1111,6 +1112,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `68b547166d48` | certain | — {…} confirmed {…} can't land yet, so {…} reward is pending (it lands on ship). Rebase + re-ship or release { | `modules/hall-ui/public/builders.js:752` |
 | `ff6b84565e10` | certain | — {…}{…} | `modules/hall-ui/public/government.js:605` |
 | `5b9fa7cb4fb0` | certain | …and {…} more waiting — | `modules/hall-ui/public/goal-inbox.js:121` |
+| `b2a04abfead0` | certain | …{…} more awaiting a nod. | `modules/hall-ui/public/goal-inbox.js:251` |
 | `e35f11bdc5d7` | certain | …{…} more open ideas — triage clears them one at a time. | `modules/hall-ui/public/builders.js:1874` |
 | `de8fa5223aee` | certain | ‹ Prev | `modules/hall-ui/public/hall-kit.js:71` |
 | `d4b84b7fbdeb` | certain | ← All goals | `modules/hall-ui/public/goals.html:56` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1335,
-    "unique_ids": 1184,
-    "certain": 1335,
+    "strings": 1337,
+    "unique_ids": 1186,
+    "certain": 1337,
     "heuristic": 0,
     "duplicate_ids": 121
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 60,
-      "strings": 1051
+      "strings": 1053
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -4124,6 +4124,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "79934b879a12",
+      "surface": "builders-hall",
+      "text": "Give the nod",
+      "file": "modules/hall-ui/public/goal-inbox.js",
+      "line": 231,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "51bd60197133",
       "surface": "builders-hall",
@@ -5209,7 +5218,7 @@
       "surface": "builders-hall",
       "text": "Needs your attention",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 204,
+      "line": 274,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10541,6 +10550,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "b2a04abfead0",
+      "surface": "builders-hall",
+      "text": "…{…} more awaiting a nod.",
+      "file": "modules/hall-ui/public/goal-inbox.js",
+      "line": 251,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "e35f11bdc5d7",
       "surface": "builders-hall",

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -400,6 +400,8 @@ function createClient(opts = {}) {
       postInboxIdRatify: (args) => request("POST", "/inbox/{id}/ratify", { hasBody: true }, args),
       // POST /inbox/{id}/resubmit — rank: any-builder — POST /inbox/:id/resubmit
       postInboxIdResubmit: (args) => request("POST", "/inbox/{id}/resubmit", { hasBody: true }, args),
+      // GET /inbox/awaiting-nod — rank: metic+archon — GET /inbox/awaiting-nod
+      getInboxAwaitingNod: (args) => request("GET", "/inbox/awaiting-nod", { hasBody: false }, args),
     },
     "instance": {
       // GET /instance — rank: public — GET /instance

package/modules/hall-ui/public/goal-inbox.js

@@ -146,14 +146,18 @@
   // count-pill/live counter re-derive from the fresh inbox). Disable while in flight
   // so a double-click can't fire the resolve twice (the server 409s a re-resolve, but
   // the UI shouldn't invite it).
-  async function act(fn, okMsg) {
+  // `refresh` defaults to the goals slice's own load(). task 1003066 (BV1.R05):
+  // the nod action lives in a DIFFERENT slice, so it passes its own — otherwise
+  // giving a nod would repaint the goals list and leave the nodded row sitting
+  // there, still asking to be nodded.
+  async function act(fn, okMsg, refresh = load) {
     if (busy) return;
     busy = true;
     host.querySelectorAll('button').forEach((b) => { b.disabled = true; });
     try {
       await fn();
       toast(okMsg);
-      await load();
+      await refresh();
     } catch (err) {
       toast((err && err.data && err.data.message) || 'Could not do that just now — refresh and retry.');
       host.querySelectorAll('button').forEach((b) => { b.disabled = false; });
@@ -163,6 +167,17 @@
   }
 
   function onClick(e) {
+    // task 1003066 (BV1.R05): the nod. It reuses the EXISTING promote route —
+    // POST /tasks/:id/promote, already Metic+ via task.promote — so giving a nod
+    // adds no endpoint and no permission. Handled before the membership branches
+    // because a nod row is a TASK row that merely carries data-goal for styling.
+    const nod = e.target.closest('[data-nod-task]');
+    if (nod) {
+      act(() => postJSON(`${API}/tasks/${encodeURIComponent(nod.dataset.nodTask)}/promote`, {}),
+        'Nodded — it’s claimable now.', loadNodQueue);
+      return;
+    }
+
     const item = e.target.closest('.ginbox__item');
     const goalId = item && item.dataset.goal;
     if (!goalId) return;
@@ -192,6 +207,61 @@
     }
   }
 
+  // ---- the nod queue (task 1003066, BV1.R05) --------------------------------
+  //
+  // A routed filing that soft-landed is a task at 'backlog' in its goal, one
+  // Metic+ promote from claimable — owner interview Q3: any Metic+ gives the nod,
+  // through the EXISTING promote route, in this EXISTING card. No new surface, no
+  // new permission.
+  //
+  // WITHOUT THIS SLICE THE SOFT LANDING IS A SILENT DROP: the filing looks
+  // accepted, nothing tells anyone a human is the blocker, and it sits at backlog
+  // forever. Criterion C2's "one Metic+ promote away" is only true if somebody can
+  // SEE it. The copy says "awaiting a nod", never "triage" — triage is the inbox's
+  // word, and this work already has a home.
+  //
+  // No client-side rank gate: GET /inbox/awaiting-nod is Metic+ server-side, so a
+  // non-triager's fetch 403s and the slice renders nothing. One gate, on the
+  // server, beats a client check that can disagree with it.
+  function nodRowHtml(r) {
+    const title = escapeHtml(r.title || `task #${r.task_id}`);
+    const kind = r.kind ? `<span class="ginbox__sub">${escapeHtml(r.kind)}</span>` : '';
+    const who = r.filed_by_login ? ` · filed by ${escapeHtml(r.filed_by_login)}` : '';
+    const goal = r.goal_title ? escapeHtml(r.goal_title) : `goal ${escapeHtml(String(r.goal_id))}`;
+    return `<li class="ginbox__item" data-goal="${escapeHtml(String(r.goal_id))}">
+        <div class="ginbox__main">
+          <a class="ginbox__goal" href="/task/${encodeURIComponent(r.task_id)}">${title}</a>
+          <span class="ginbox__sub">${goal}${who}</span>
+        </div>
+        ${kind}
+        <div class="ginbox__acts">
+          <button class="btn-ghost" type="button" data-nod-task="${escapeHtml(String(r.task_id))}">Give the nod</button>
+        </div>
+      </li>`;
+  }
+
+  function renderNodQueue(data) {
+    const box = host && host.querySelector('#attention-nod');
+    if (!box) return;
+    const rows = (data && Array.isArray(data.awaiting) ? data.awaiting : []);
+    const count = data && data.count != null ? data.count : rows.length;
+    if (!rows.length) {
+      box.innerHTML = '';
+    } else {
+      const more = count > 5 ? `<p class="ginbox__pending">…${count - 5} more awaiting a nod.</p>` : '';
+      box.innerHTML = '<h3 class="ginbox__sec-h">Reported work awaiting a nod '
+        + `<span class="count-pill">${count}</span></h3>`
+        + `<ul class="ginbox__list">${rows.slice(0, 5).map(nodRowHtml).join('')}</ul>${more}`;
+    }
+    window.OTBAttention?.refresh();
+  }
+
+  function loadNodQueue() {
+    return getJSON(`${API}/inbox/awaiting-nod`)
+      .then((data) => renderNodQueue(data))
+      .catch(() => { /* a non-triager's 403, or a hiccup: never break the hall */ });
+  }
+
   // task 2169: this widget IS the "Needs your attention" card — ONE capped
   // summary hosting every actionable item class: goal invitations +
   // join-requests (this file) and ideas awaiting triage (builders.js renders
@@ -203,9 +273,17 @@
     host.innerHTML =
       '<h2 id="attention-h" class="scroll__h">Needs your attention<span class="count-pill" id="attention-count" hidden></span></h2>' +
       '<div id="attention-goals"></div>' +
-      '<div id="attention-ideas"></div>';
+      '<div id="attention-ideas"></div>' +
+      // task 1003066 (BV1.R05): routed filings that SOFT-LANDED — a reported bug
+      // now sitting at 'backlog' in a real goal, one Metic+ nod from claimable.
+      // Rendered by renderNodQueue above: this file owns the card, and a task
+      // awaiting a nod inside a goal sits nearer the goals slice than idea
+      // triage. Its rows carry the shared .ginbox__item class, so refresh()
+      // counts them with no change to the selector below.
+      '<div id="attention-nod"></div>';
     host.addEventListener('click', onClick);
     load();
+    loadNodQueue();
   }
 
   // The card's shared visibility contract: any slice renderer calls refresh()