@bongos/core 1.19.422 → 1.19.424

package/docs/copy-inventory.md

@@ -65,13 +65,13 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `87fa099f5068` | 2x | '; } html += ' | modules/hall-ui/public/md-reader.js:192, modules/hall-ui/public/primer.js:282 |
 | `3ac2eb36ba97` | 2x | (no sections) | modules/hall-ui/public/drachmae.js:85, modules/hall-ui/public/primer.js:375 |
 | `22825067f4c5` | 2x | 1 builder | public-landing/index.html:747, public-landing/index.html:752 |
-| `3e5a62bc4887` | 2x | A GitHub username is needed. | modules/hall-ui/public/hall-render.js:358, modules/hall-ui/public/watch.js:222 |
+| `3e5a62bc4887` | 2x | A GitHub username is needed. | modules/hall-ui/public/hall-render.js:358, modules/hall-ui/public/watch.js:231 |
 | `996edffc1966` | 2x | Access requests | modules/hall-ui/public/watch.html:38, modules/hall-ui/public/watch.html:53 |
 | `bea7817e57a4` | 2x | All surfaces | modules/hall-ui/public/copy-desk.html:48, modules/hall-ui/public/copy-desk.js:191 |
 | `a072071b893c` | 2x | All time | modules/status-ui/public/index.html:286, modules/status-ui/public/index.html:313 |
 | `490b73a0c6e8` | 2x | Approve your Dev Box app — {{worldName}} | modules/hall-ui/public/pair.html:6, modules/hall-ui/public/pair.html:6 |
 | `b71a26e6fb37` | 2x | Archons only | modules/hall-ui/public/sessions.html:28, modules/hall-ui/public/watch.html:31 |
-| `b2656d0b2402` | 2x | Asked {…} | modules/hall-ui/public/collab.js:36, modules/hall-ui/public/watch.js:257 |
+| `b2656d0b2402` | 2x | Asked {…} | modules/hall-ui/public/collab.js:36, modules/hall-ui/public/watch.js:266 |
 | `08afb1257b71` | 2x | Back to home | modules/hall-ui/public/primer.html:68, modules/hall-ui/public/primer.js:516 |
 | `563d29ed86d8` | 2x | Bulk actions | modules/hall-ui/public/goals.html:148, modules/hall-ui/public/work.html:118 |
 | `46b33550d52b` | 2x | Bulk claim | modules/hall-ui/public/goals.html:151, modules/hall-ui/public/work.html:121 |
@@ -117,7 +117,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `477235450d2b` | certain | 5 · Versioning | `modules/hall-ui/public/diagrams.html:91` |
 | `8ffdf4995e81` | certain | A Full Idea answers five questions, so that someone else can deliver against it without having to interview yo | `modules/hall-ui/public/ideas.html:44` |
 | `3e5a62bc4887` | certain | A GitHub username is needed. | `modules/hall-ui/public/hall-render.js:358` |
-| `3e5a62bc4887` | certain | A GitHub username is needed. | `modules/hall-ui/public/watch.js:222` |
+| `3e5a62bc4887` | certain | A GitHub username is needed. | `modules/hall-ui/public/watch.js:231` |
 | `2c23271d5d71` | certain | A device is asking to act as you | `modules/hall-ui/public/pair.html:26` |
 | `a22df5ebbd5e` | certain | A flag needs a reason an artist can act on. What is wrong with it, and what would better look like? | `modules/hall-ui/public/copy-desk.js:262` |
 | `634738746b81` | certain | A fresh box has a | `modules/hall-ui/public/harbor.js:122` |
@@ -165,12 +165,12 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4195d0d114e4` | certain | Archons only. | `modules/hall-ui/public/harbor.html:26` |
 | `4195d0d114e4` | certain | Archons only. | `modules/hall-ui/public/harbor.js:314` |
 | `4195d0d114e4` | certain | Archons only. | `modules/hall-ui/public/sessions.js:97` |
-| `4195d0d114e4` | certain | Archons only. | `modules/hall-ui/public/watch.js:891` |
+| `4195d0d114e4` | certain | Archons only. | `modules/hall-ui/public/watch.js:900` |
 | `5fcfdf8975cf` | certain | As configuration: | `modules/hall-ui/public/government.js:680` |
 | `01a0f29ff406` | certain | As first filed | `modules/hall-ui/public/idea.js:237` |
 | `688cc6dd38ee` | certain | Asked of you | `modules/hall-ui/public/collab.html:32` |
 | `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/collab.js:36` |
-| `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/watch.js:257` |
+| `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/watch.js:266` |
 | `8c8ec2597036` | certain | Assigned {…} to builder {…}. | `modules/hall-ui/public/government.js:423` |
 | `46714066f2da` | certain | Audit log | `modules/hall-ui/public/watch.html:127` |
 | `7fef0ae0ef9a` | certain | Awaiting the grader / a confirmation before it can ship. | `modules/hall-ui/public/task.js:290` |
@@ -246,7 +246,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9b16a22bf24c` | certain | Connect Discord & join the server | `modules/hall-ui/public/settings.js:912` |
 | `9f8d8e07224f` | certain | Connect your Claude Desktop to your dev box with a one-time pairing code — the guided flow lives on its own pa | `modules/hall-ui/public/settings.html:234` |
 | `c07898571b24` | certain | Connects to | `modules/hall-ui/public/atlas.js:275` |
-| `3983ee271e7a` | certain | Container cost is tracked for oversight — not charged in the early stage. | `modules/hall-ui/public/watch.js:633` |
+| `3983ee271e7a` | certain | Container cost is tracked for oversight — not charged in the early stage. | `modules/hall-ui/public/watch.js:642` |
 | `915d03bc9689` | certain | Context Layer | `modules/hall-ui/public/atlas.html:30` |
 | `06da803fba59` | certain | Contribute a module upstream | `modules/hall-ui/public/modules.html:54` |
 | `296eb6da10ca` | certain | Contribution to this goal | `modules/hall-ui/public/goals-render.js:645` |
@@ -269,8 +269,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7bcaeffb742f` | certain | Could not approve: {…} | `modules/hall-ui/public/gate.js:101` |
 | `c922293e668c` | certain | Could not assign: {…} | `modules/hall-ui/public/government.js:428` |
 | `94763c4d5a94` | certain | Could not block: {…} | `modules/hall-ui/public/harbor.js:166` |
-| `e1fc7cedf4e7` | certain | Could not change rank: {…} | `modules/hall-ui/public/watch.js:571` |
-| `b9e53fbd90e6` | certain | Could not change standing: {…} | `modules/hall-ui/public/watch.js:594` |
+| `e1fc7cedf4e7` | certain | Could not change rank: {…} | `modules/hall-ui/public/watch.js:580` |
+| `b9e53fbd90e6` | certain | Could not change standing: {…} | `modules/hall-ui/public/watch.js:603` |
 | `1ef1efc15b6c` | certain | Could not change that just now. | `modules/hall-ui/public/goals-render.js:993` |
 | `78e18ea59b9f` | certain | Could not close: {…} | `modules/hall-ui/public/harbor.js:134` |
 | `c3f99e7c6e6b` | certain | Could not copy automatically — select and copy manually. ({…}) | `modules/hall-ui/public/settings.js:979` |
@@ -281,7 +281,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `fa309d1d0104` | certain | Could not create rank: {…} | `modules/hall-ui/public/government.js:408` |
 | `7054cd87b5ec` | certain | Could not end that session: {…} | `modules/hall-ui/public/settings-sessions.js:85` |
 | `01f0308c66e0` | certain | Could not invite that builder just now. | `modules/hall-ui/public/goals-render.js:947` |
-| `71da00d47492` | certain | Could not invite: {…} | `modules/hall-ui/public/watch.js:232` |
+| `71da00d47492` | certain | Could not invite: {…} | `modules/hall-ui/public/watch.js:241` |
 | `0adbf0652899` | certain | Could not load #{…} | `modules/hall-ui/public/task.js:346` |
 | `dec4b11f316d` | certain | Could not load dev boxes just now. | `modules/hall-ui/public/harbor.js:288` |
 | `0f7c244312b1` | certain | Could not load government data just now. | `modules/hall-ui/public/government.js:1064` |
@@ -301,14 +301,14 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8b69e445592a` | certain | Could not load the question labels; showing the answers as stored. | `modules/hall-ui/public/idea.js:229` |
 | `edd5bafbe075` | certain | Could not load the queue just now. | `modules/hall-ui/public/ideas.js:387` |
 | `02bb0570996a` | certain | Could not load the ranks. | `modules/hall-ui/public/ranks.js:197` |
-| `2878778cf9f3` | certain | Could not load this page. | `modules/hall-ui/public/watch.js:937` |
+| `2878778cf9f3` | certain | Could not load this page. | `modules/hall-ui/public/watch.js:946` |
 | `4b0c8d94541c` | certain | Could not load your account. Reload the page to try again. | `modules/hall-ui/public/settings.js:1357` |
 | `2a9fb4046bc4` | certain | Could not load your rank. Return to the hall and try again. | `modules/hall-ui/public/ranks.js:196` |
 | `9d533e811dec` | certain | Could not load your sessions: {…} | `modules/hall-ui/public/settings-sessions.js:114` |
 | `64f9d51f0fa2` | certain | Could not load your settings. | `modules/hall-ui/public/settings.js:1360` |
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:497` |
 | `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:204` |
-| `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:396` |
+| `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:405` |
 | `8b470cebf53d` | certain | Could not remove your key. Try again. | `modules/hall-ui/public/settings.js:1179` |
 | `4cf6bc8b377b` | certain | Could not remove. Try again. | `modules/hall-ui/public/settings.js:1178` |
 | `7a778d188e87` | certain | Could not remove: {…} | `modules/hall-ui/public/government.js:336` |
@@ -340,7 +340,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d4601887a058` | certain | Could not sign out everywhere: {…} | `modules/hall-ui/public/settings-sessions.js:102` |
 | `b1602d01f4bb` | certain | Could not unblock: {…} | `modules/hall-ui/public/harbor.js:187` |
 | `3db890b074a7` | certain | Could not update visibility just now. | `modules/hall-ui/public/goals-render.js:977` |
-| `112d12b24879` | certain | Could not verify your access. Go back and try again. | `modules/hall-ui/public/watch.js:936` |
+| `112d12b24879` | certain | Could not verify your access. Go back and try again. | `modules/hall-ui/public/watch.js:945` |
 | `6bd74fd20311` | certain | Could not verify your access. Try again. | `modules/hall-ui/public/sessions.js:206` |
 | `278e8281c82f` | certain | Could not vote: {…} | `modules/hall-ui/public/government.js:913` |
 | `a48e9f098392` | certain | Could not {…} just now. | `modules/hall-ui/public/goals-render.js:963` |
@@ -487,7 +487,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `75cfcdd41661` | certain | In this primer | `modules/hall-ui/public/primer.html:45` |
 | `3102d1d90c98` | certain | Intel Mac? | `modules/hall-ui/public/settings.html:217` |
 | `dad3388b49c9` | certain | Invitation rescinded. | `modules/hall-ui/public/goals-page.js:692` |
-| `24f9e88c21f6` | certain | Invite by GitHub username | `modules/hall-ui/public/watch.js:205` |
+| `24f9e88c21f6` | certain | Invite by GitHub username | `modules/hall-ui/public/watch.js:214` |
 | `d176de7857f3` | certain | Invited. | `modules/hall-ui/public/goals-render.js:936` |
 | `b9cb720ad5d1` | certain | Invited? Sign in | `modules/hall-ui/public/hall-render.js:267` |
 | `2170b74c6526` | certain | Isometric map of the repository | `modules/hall-ui/public/atlas.html:39` |
@@ -508,7 +508,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `93c17262bacf` | certain | Key storage is being set up by an Archon — check back shortly. {…} | `modules/hall-ui/public/settings.js:1053` |
 | `2a3c9e501f8e` | certain | Key storage isn't set up yet. As an Archon you can turn it on now — the server generates and safely stores the | `modules/hall-ui/public/settings.js:1049` |
 | `7d6eaa8d4514` | certain | Kinds of work shipped | `modules/hall-ui/public/hall-render.js:1089` |
-| `d7b4392e0ea6` | certain | Largest files | `modules/hall-ui/public/watch.js:848` |
+| `d7b4392e0ea6` | certain | Largest files | `modules/hall-ui/public/watch.js:857` |
 | `81f62e066dbf` | certain | Last 14 days: {…} / 10 average across {…} graded work{…} ({…} passed). | `modules/hall-ui/public/builders.js:586` |
 | `35a15eb0a117` | certain | Last 30 days | `modules/hall-ui/public/hall-widgets.js:129` |
 | `9be8b839eff8` | certain | Last 7 days | `modules/hall-ui/public/hall-widgets.js:129` |
@@ -517,8 +517,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1526a7ae8c85` | certain | Latest version: v{…}. | `modules/hall-ui/public/settings.js:1443` |
 | `7c9b7a89353b` | certain | Leave goal | `modules/hall-ui/public/goals-render.js:785` |
 | `f192ff6563f9` | certain | Leave your GitHub username and an Archon will let you in. No coding needed to start — once you're approved, si | `modules/hall-ui/public/hall-render.js:275` |
-| `64f37809350f` | certain | Lifecycle: {…} | `modules/hall-ui/public/watch.js:327` |
-| `913b848753ea` | certain | Lines by directory | `modules/hall-ui/public/watch.js:823` |
+| `64f37809350f` | certain | Lifecycle: {…} | `modules/hall-ui/public/watch.js:336` |
+| `913b848753ea` | certain | Lines by directory | `modules/hall-ui/public/watch.js:832` |
 | `a53e0cde7ff7` | certain | Link first — your rank role is set the moment you join. | `modules/hall-ui/public/settings.js:913` |
 | `64e85f1691f9` | certain | Link your Discord account and you're added to the {{worldName}} server with your rank role already set — no in | `modules/hall-ui/public/settings.html:53` |
 | `9a31cf5fe05b` | certain | Linking opens Discord's consent screen; unlinking applies at once. | `modules/hall-ui/public/settings.html:58` |
@@ -575,7 +575,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7fcc2583c372` | certain | New custom rank | `modules/hall-ui/public/government.html:65` |
 | `9e06c14d155a` | certain | New here — request access | `modules/hall-ui/public/hall-render.js:275` |
 | `ccf08aecab86` | certain | New here — sign in to join | `modules/hall-ui/public/hall-render.js:258` |
-| `6ff07874edef` | certain | Newest first. The fifty most recent write operations. | `modules/hall-ui/public/watch.js:486` |
+| `6ff07874edef` | certain | Newest first. The fifty most recent write operations. | `modules/hall-ui/public/watch.js:495` |
 | `de1713edd4aa` | certain | Next page | `modules/hall-ui/public/hall-kit.js:71` |
 | `659d8256139c` | certain | Next up — ready to claim | `modules/hall-ui/public/hall-widgets.js:103` |
 | `f52ba261d930` | certain | Next › | `modules/hall-ui/public/hall-kit.js:71` |
@@ -673,7 +673,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b95918d421ae` | certain | People — {{worldName}} | `modules/hall-ui/public/people.html:6` |
 | `b95918d421ae` | certain | People — {{worldName}} | `modules/hall-ui/public/people.html:6` |
 | `4a46b478edaf` | certain | Per page | `modules/hall-ui/public/hall-kit.js:71` |
-| `7fe2f2f29238` | certain | Per-day: ships graded · avg score. | `modules/hall-ui/public/watch.js:739` |
+| `7fe2f2f29238` | certain | Per-day: ships graded · avg score. | `modules/hall-ui/public/watch.js:748` |
 | `e1e10dc5e357` | certain | Permissions is the Archon administration surface. The Constitution and the Board Room are yours to read. | `modules/hall-ui/public/government.js:1033` |
 | `2ec5f77eb6f0` | certain | Preferred disciplines | `modules/hall-ui/public/settings.html:117` |
 | `ed8edd684547` | certain | Preferred work: | `modules/hall-ui/public/hall-render.js:504` |
@@ -696,7 +696,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `cd7dc83871b6` | certain | Prompt for #{…} copied. | `modules/hall-ui/public/work.js:559` |
 | `3f85bdc47099` | certain | Protected module scope — join by request; an Archon admits members | `modules/hall-ui/public/goals-render.js:737` |
 | `e5c292c8b361` | certain | Provides (seams) | `modules/hall-ui/public/atlas.js:273` |
-| `b9c6def6b120` | certain | Rank set to {…}. | `modules/hall-ui/public/watch.js:565` |
+| `b9c6def6b120` | certain | Rank set to {…}. | `modules/hall-ui/public/watch.js:574` |
 | `ff50a1395cbc` | certain | Rank: {…} | `modules/hall-ui/public/profile.js:38` |
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
@@ -711,7 +711,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7df3fd4ebf41` | certain | Reason (shown to the builder) | `modules/hall-ui/public/harbor.js:146` |
 | `06cbba1440b1` | certain | Rebase owed — new claims paused | `modules/hall-ui/public/hall-render.js:485` |
 | `58fb6fe4b47e` | certain | Recent history could not be loaded right now. | `modules/hall-ui/public/work.js:1152` |
-| `3c41dbf7c212` | certain | Recent ledger | `modules/hall-ui/public/watch.js:631` |
+| `3c41dbf7c212` | certain | Recent ledger | `modules/hall-ui/public/watch.js:640` |
 | `fbce2d89706b` | certain | Recent works | `modules/hall-ui/public/profile.html:61` |
 | `0b2d1327608f` | certain | Recently shipped | `modules/hall-ui/public/hall-widgets.js:107` |
 | `cd2bffe2e5b9` | certain | Recognize your peers’ finished work. A vote up (+) or down (−) shapes their karma after a one-week cooling per | `modules/hall-ui/public/hall-widgets.js:169` |
@@ -734,7 +734,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7d4149cee474` | certain | Repo Atlas — a self-drawing map of the codebase | `modules/hall-ui/public/atlas.html:6` |
 | `7d4149cee474` | certain | Repo Atlas — a self-drawing map of the codebase | `modules/hall-ui/public/atlas.html:6` |
 | `52d7d4309540` | certain | Repo health | `modules/hall-ui/public/watch.html:101` |
-| `e6629398d47c` | certain | Report {…}. | `modules/hall-ui/public/watch.js:334` |
+| `e6629398d47c` | certain | Report {…}. | `modules/hall-ui/public/watch.js:343` |
 | `ab456f09c0f6` | certain | Request access | `modules/hall-ui/public/hall-render.js:275` |
 | `ab456f09c0f6` | certain | Request access | `modules/hall-ui/public/hall-render.js:405` |
 | `967f6d1ac068` | certain | Request dev box | `modules/hall-ui/public/box-panel.js:357` |
@@ -831,7 +831,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d71b721636ae` | certain | Submit one of this project's own modules for review, so it can join the shared Cloud Bongos catalog with your  | `modules/hall-ui/public/modules.html:55` |
 | `1e40f33483eb` | certain | Switch theme | `modules/hall-ui/public/shell.js:322` |
 | `93fa2e97dd35` | certain | System default for this skill | `modules/hall-ui/public/settings.js:74` |
-| `1cc5e12dde31` | certain | System oversight. Every panel below is Archon-only. | `modules/hall-ui/public/watch.js:950` |
+| `1cc5e12dde31` | certain | System oversight. Every panel below is Archon-only. | `modules/hall-ui/public/watch.js:959` |
 | `5f45e431346f` | certain | Task #{…} | `modules/hall-ui/public/task.js:199` |
 | `dfc967a63d57` | certain | Task lifecycle from backlog to shipped, showing states and transitions and the edge where credits are awarded. | `modules/hall-ui/public/diagrams.html:60` |
 | `10cc12f37636` | certain | Task sections | `modules/hall-ui/public/work.html:48` |
@@ -912,7 +912,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f158ed1c24a2` | certain | Toggle fullscreen | `modules/hall-ui/public/diagram-viewer.js:101` |
 | `7dfdc26f9f79` | certain | Tokens refresh on use; re-issuing never signs you out anywhere else. | `modules/hall-ui/public/settings.html:146` |
 | `c19344f5ce38` | certain | Tool errs | `modules/hall-ui/public/sessions.html:48` |
-| `2059342a3490` | certain | Totals by builder | `modules/hall-ui/public/watch.js:629` |
+| `2059342a3490` | certain | Totals by builder | `modules/hall-ui/public/watch.js:638` |
 | `77db3684aba9` | certain | Tracked for transparency — not charged in the early stage. | `modules/hall-ui/public/box-panel.js:237` |
 | `b6e04e9bc86f` | certain | Try reloading in a moment. | `modules/hall-ui/public/task.js:346` |
 | `1a64679fbb42` | certain | Typo or grammar | `modules/hall-ui/public/copy-desk.html:96` |
@@ -957,7 +957,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `045c629729b7` | certain | Who’s on this goal, and what they’ve contributed to it. | `modules/hall-ui/public/goals.html:174` |
 | `6e8a3151ec76` | certain | Why \u2014 the reason the author will act on | `modules/hall-ui/public/government.js:885` |
 | `a3ac116b499a` | certain | Why? | `modules/hall-ui/public/copy-desk.html:99` |
-| `6108c16edece` | certain | Window: last {…} days. | `modules/hall-ui/public/watch.js:681` |
+| `6108c16edece` | certain | Window: last {…} days. | `modules/hall-ui/public/watch.js:690` |
 | `0dcb485477b6` | certain | Windows (ARM) | `modules/hall-ui/public/hall-render.js:650` |
 | `c5fd76a9e03d` | certain | Won {…} | `modules/hall-ui/public/builders.js:482` |
 | `c5fd76a9e03d` | certain | Won {…} | `modules/hall-ui/public/profile.js:115` |
@@ -1042,7 +1042,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `16d18b40bd23` | certain | drag to pan · ⌘/ctrl + scroll to zoom · ⤢ fullscreen | `modules/hall-ui/public/diagram-viewer.js:121` |
 | `1f80614e6960` | certain | drag to pan, scroll to zoom, or open it fullscreen | `modules/hall-ui/public/diagrams.html:83` |
 | `77b0b2b446a1` | certain | e.g. octocat | `modules/hall-ui/public/hall-render.js:275` |
-| `77b0b2b446a1` | certain | e.g. octocat | `modules/hall-ui/public/watch.js:207` |
+| `77b0b2b446a1` | certain | e.g. octocat | `modules/hall-ui/public/watch.js:216` |
 | `89cc9754d633` | certain | e.g. runaway cost — paused pending review | `modules/hall-ui/public/harbor.js:146` |
 | `12a23cc46ace` | certain | ends every session including this one — you will be asked to sign in again. | `modules/hall-ui/public/settings.html:163` |
 | `5321f9da0841` | certain | exists in schema, no behavior yet | `modules/hall-ui/public/diagrams.html:53` |

package/docs/copy-registry.json

@@ -79,7 +79,7 @@
         "modules/hall-ui/public/harbor.html:26",
         "modules/hall-ui/public/harbor.js:314",
         "modules/hall-ui/public/sessions.js:97",
-        "modules/hall-ui/public/watch.js:891"
+        "modules/hall-ui/public/watch.js:900"
       ]
     },
     {
@@ -384,7 +384,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/hall-render.js:358",
-        "modules/hall-ui/public/watch.js:222"
+        "modules/hall-ui/public/watch.js:231"
       ]
     },
     {
@@ -444,7 +444,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/collab.js:36",
-        "modules/hall-ui/public/watch.js:257"
+        "modules/hall-ui/public/watch.js:266"
       ]
     },
     {
@@ -1414,7 +1414,7 @@
       "occurrences": 2,
       "at": [
         "modules/hall-ui/public/hall-render.js:275",
-        "modules/hall-ui/public/watch.js:207"
+        "modules/hall-ui/public/watch.js:216"
       ]
     },
     {
@@ -1969,7 +1969,7 @@
       "surface": "builders-hall",
       "text": "A GitHub username is needed.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 222,
+      "line": 231,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -2401,7 +2401,7 @@
       "surface": "builders-hall",
       "text": "Archons only.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 891,
+      "line": 900,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -2446,7 +2446,7 @@
       "surface": "builders-hall",
       "text": "Asked {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 257,
+      "line": 266,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3130,7 +3130,7 @@
       "surface": "builders-hall",
       "text": "Container cost is tracked for oversight — not charged in the early stage.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 633,
+      "line": 642,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3337,7 +3337,7 @@
       "surface": "builders-hall",
       "text": "Could not change rank: {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 571,
+      "line": 580,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3346,7 +3346,7 @@
       "surface": "builders-hall",
       "text": "Could not change standing: {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 594,
+      "line": 603,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3445,7 +3445,7 @@
       "surface": "builders-hall",
       "text": "Could not invite: {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 232,
+      "line": 241,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3625,7 +3625,7 @@
       "surface": "builders-hall",
       "text": "Could not load this page.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 937,
+      "line": 946,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3688,7 +3688,7 @@
       "surface": "builders-hall",
       "text": "Could not read the report: {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 396,
+      "line": 405,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3976,7 +3976,7 @@
       "surface": "builders-hall",
       "text": "Could not verify your access. Go back and try again.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 936,
+      "line": 945,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5299,7 +5299,7 @@
       "surface": "builders-hall",
       "text": "Invite by GitHub username",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 205,
+      "line": 214,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5488,7 +5488,7 @@
       "surface": "builders-hall",
       "text": "Largest files",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 848,
+      "line": 857,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5569,7 +5569,7 @@
       "surface": "builders-hall",
       "text": "Lifecycle: {…}",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 327,
+      "line": 336,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5578,7 +5578,7 @@
       "surface": "builders-hall",
       "text": "Lines by directory",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 823,
+      "line": 832,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6091,7 +6091,7 @@
       "surface": "builders-hall",
       "text": "Newest first. The fifty most recent write operations.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 486,
+      "line": 495,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6973,7 +6973,7 @@
       "surface": "builders-hall",
       "text": "Per-day: ships graded · avg score.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 739,
+      "line": 748,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7180,7 +7180,7 @@
       "surface": "builders-hall",
       "text": "Rank set to {…}.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 565,
+      "line": 574,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -7315,7 +7315,7 @@
       "surface": "builders-hall",
       "text": "Recent ledger",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 631,
+      "line": 640,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7522,7 +7522,7 @@
       "surface": "builders-hall",
       "text": "Report {…}.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 334,
+      "line": 343,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -8395,7 +8395,7 @@
       "surface": "builders-hall",
       "text": "System oversight. Every panel below is Archon-only.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 950,
+      "line": 959,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -9124,7 +9124,7 @@
       "surface": "builders-hall",
       "text": "Totals by builder",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 629,
+      "line": 638,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9529,7 +9529,7 @@
       "surface": "builders-hall",
       "text": "Window: last {…} days.",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 681,
+      "line": 690,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10294,7 +10294,7 @@
       "surface": "builders-hall",
       "text": "e.g. octocat",
       "file": "modules/hall-ui/public/watch.js",
-      "line": 207,
+      "line": 216,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/file-map.md

@@ -351,6 +351,8 @@ tests/
 ├── own_scope_guard.mjs           ← (task 1003343, goal 1000045 criterion own-scope-held-by-a-test): the OWN-SCOPE structural guard, generalised out of memory_isolation.mjs. An explicit inventory of own-scoped route files; inside them the route's declared PATH decides — a path naming no builder must never read a subject from the request (direct, optional-chained, destructured, aliased, computed-key or header), a path that DOES name one needs a per-route exemption whose gate the guard verifies is present. Repo-wide backstop: any file mounting a `/me` route must be in the inventory. Source-grepping, so it runs in the DB-free `unit` lane.
 ├── account_existence_rate_limit.mjs ← (task 1003339, goal 1000045, ADR 0209): the two PUBLIC account-existence probes (onboarding GET /access-requests/status + core GET /auth/web/admission-status) share ONE per-IP budget. Counts to the limit on each route, proves the budget is shared in both directions and when alternated, moves Date.now to prove the window slides on the real mounted route, and proves a refused probe issues no query. DB-free; mutation-checked three ways.
 ├── effective_visibility_predicate.mjs ← (task 1002967, goal 1000045): the EFFECTIVE-VISIBILITY structural guard over `modules/platform-identity/account-visibility.js` (the file task 1002295 landed and this task ADOPTED rather than duplicating). Three layers — SQL and JS agree row-for-row over the privacy-spec D2 matrix; that file is the only one allowed to compare `profile_state`/`account_visibility`/`hide_stats` to a literal (per-occurrence exemptions, each with a reason and a checked obligation); and every `SELECT` on `platform_identity_accounts` is enumerated FROM SOURCE and must join a shared predicate, be declared non-public, or be a checked deferral to a named caller — so a read that does not exist yet (hub search, the sitemap) fails the build until its author classifies it. Behavioural half runs the real `/profiles/:handle` route over an in-memory accounts table filtered by each statement's own WHERE clause: private → 404 (never 403), byte-identical to stranger and owner alike. DB-free `unit` lane.
+├── application_lifecycle.mjs     ← (task 1002284, goal 1000045, ADR 0201 D1/D3.2/D4 + ADR 0208): the application lifecycle EXECUTED — apply, list-pending, approve, decline, RESCIND (`invited → dismissed`), idempotency on the state already held, and the two things that must never happen: a builder without `access_request.review` moving the queue, and a VOUCH buying admission. Real router, REAL `requirePermission` resolving against the real government catalog's rank seed, and the REAL `hasInvitedAccessRequest` from `src/bongos/db-kernel.js` pointed at the same in-memory `access_requests` table (a stubbed `./pool`), whose filter is built from each statement's own WHERE clause and which refuses a predicate it cannot read. The no-authority proof seeds a vouched row and asserts the approve path and the admission read are byte-identical to the unvouched twin, and that no statement on either path names `applicant_github_id`/`vouched_at`. DB-free `unit` lane.
+├── application_echo.mjs          ← (task 1002284, goal 1000045, ADR 0201 D1.3/D1.4): the hub's STATUSLESS echo of an application. Part A pins the domain functions — the read binds `APPLICATION_ECHO_WINDOW_DAYS` itself (one 30, not three), the write is an upsert on the pair, neither statement mentions a status, and a non-numeric principal is refused before any query (ADR 0171 D2). Part B runs the real `POST /my-projects/join` and `GET /my-projects` over an in-memory `platform_identity_application_echoes` table with the relay's answer scripted: only an accepted application leaves a trace — a standing membership, either door refusal, a members-only project and an unreachable project leave none — and best-effort is asserted in both directions (a failed echo write still reports the filed application; a failed echo read still lands the memberships listing). DB-free `unit` lane.
 └── public_task_resolver.mjs      ← (#604): the public `/public/tasks/:id` projection — title/value_summary exposed only for shipped|confirmed; withheld for in-flight so unshipped/security task names can't leak.
 ```
 

package/docs/module-api-changelog.md

@@ -1281,5 +1281,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.420 with no explicit bump. run 33266605270. (task 1002620)
   1.19.422 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.421 with no explicit bump. run 33267393283. (task 1002620)
+  1.19.423 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.422 with no explicit bump. run 33269205170. (task 1002620)
+  1.19.424 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.423 with no explicit bump. run 33270353952. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/migrations/core_230_access_requests_applicant_vouch.sql

@@ -0,0 +1,79 @@
+-- core_230_access_requests_applicant_vouch.sql — an access request can carry a
+-- VOUCHED platform identity beside the GitHub username it has always carried
+-- (task 1002284, R08 of goal 1000045; ADR 0201 D1.2).
+--
+-- WHAT PROBLEM THIS SOLVES. POST /api/gds/access-requests is the one public,
+-- unauthenticated write on the GDS: it presents nothing the applicant could not
+-- have typed into the project's own landing page. Goal criterion C4 wants the
+-- reviewer to see the applicant's cross-project track record beside the ask —
+-- and attaching a record to a `github_login` that nobody vouched for turns the
+-- queue into an impersonation surface (file a request naming a well-known
+-- builder, the owner reads that builder's excellent record, approves, and
+-- whoever holds that GitHub account walks in). So the record cannot exist
+-- without a vouch, and the vouch needs somewhere to land. That is this file.
+--
+-- `applicant_github_id IS NOT NULL` **IS** the vouch mark. There is deliberately
+-- no `source`/`vouched` enum beside it: a second column would be free to
+-- disagree with the first, and the row would then have two answers to one
+-- question. `vouched_at` records WHEN the vouch was verified, which is audit
+-- data, never the mark itself.
+--
+-- `text`, not `bigint`, because core `builders.github_id` is `text`
+-- (`003_pms.sql`) and this column must join it without a cast. The hub's own
+-- tables hold github ids as `bigint`; that numeric cast is the hub module's
+-- concern (ADR 0171 D2 already handles non-numeric principals there), not this
+-- table's.
+--
+-- BOTH NULLABLE, AND THAT IS THE COMPATIBILITY STORY. A vouch that is absent or
+-- invalid is never a refusal (ADR 0201 D2.3) — the row is simply written
+-- unvouched, exactly as this table has always written it. An older hub, a
+-- standalone instance with no hub public key, and a stranger filling in the
+-- project's own landing form all produce NULL here and keep working unchanged.
+--
+-- NOTHING HERE IS AUTHORITY (ADR 0016 / ADR 0141). No admission decision reads
+-- these columns. `hasInvitedAccessRequest` (src/bongos/db-kernel.js) still reads
+-- `status = 'invited'` and nothing else; `firstTimeAdmissionBlocked` remains the
+-- single gate all four sign-in paths call. A vouch is DESCRIPTIVE — it says "the
+-- hub confirmed who this is", never "this person may enter". A vouched
+-- application and an unvouched one are approved by the identical statement and
+-- admit on the identical read; `tests/application_lifecycle.mjs` executes both
+-- and asserts they are byte-identical, so the day someone wires a vouch into the
+-- gate, that test goes red.
+--
+-- NO `applicant_handle` HERE — DELIBERATE, AND THE ONE PLACE ADR 0201 CONTRADICTS
+-- ITSELF. D1.2 says this migration adds "exactly" two columns; D2.6 says the
+-- handle at apply time is stored on the row. Both cannot be true of one file. The
+-- ADR's own dependency table routes **D2 wholesale** — "the assertion, the header,
+-- the live browser read, the handle" — to R09 (task 1002285), so the handle
+-- arrives with its WRITER rather than ahead of it. A column no code writes is
+-- worse than no column: it reads NULL for reasons that have nothing to do with
+-- the applicant actually lacking a handle, and any reader added in between
+-- renders "no record" for the wrong reason. R09 adds `applicant_handle` in its
+-- own additive migration, in the same change that first writes one.
+--
+-- The console wave (spike 1002786 R2) adds `kind` / `created_by` to this table in
+-- a SEPARATE additive migration. The two waves must not both add `kind`; neither
+-- touches the other's columns, so either order works.
+--
+-- PURELY ADDITIVE + idempotent. Forward-safe: the previous code release ignores
+-- both columns and runs unchanged against this schema, so a replay or a rollback
+-- is a no-op. Fresh-DB-replay safe; no hard-coded builder ids (learning 1238).
+-- access_requests is a CORE-owned table (created in 060_access_requests), so this
+-- lives in core migrations/, core_-namespaced (ADR 0108 §5: a core migration
+-- numbered above LEGACY_BARE_CORE_MAX=187 must carry the core_ prefix).
+-- migrate.sh records this file's stem in schema_migrations — the file does not
+-- self-insert.
+
+BEGIN;
+
+ALTER TABLE access_requests
+  ADD COLUMN IF NOT EXISTS applicant_github_id text,
+  ADD COLUMN IF NOT EXISTS vouched_at          timestamptz;
+
+COMMENT ON COLUMN access_requests.applicant_github_id IS
+  'The platform account the hub VOUCHED for at apply time (ADR 0201 D1.2), or NULL for an unvouched request — a stranger off the landing page, an older hub, or a non-federated instance. NOT NULL is itself the vouch mark; there is no second flag to disagree with it. text to join builders.github_id without a cast. DESCRIPTIVE ONLY — no admission path reads this (ADR 0016): status=''invited'' is still the entire gate.';
+
+COMMENT ON COLUMN access_requests.vouched_at IS
+  'When the hub assertion accompanying this request was verified (ADR 0201 D1.2). Audit data — the vouch MARK is applicant_github_id IS NOT NULL, never this timestamp. NULL on every unvouched row.';
+
+COMMIT;

package/modules/discord/discord-approvals.js

@@ -56,8 +56,13 @@ function parseApprovalMarker(content) {
 
 // DB — resolve a pending access request to 'invited' | 'dismissed', stamping the
 // approving Archon. GUARDED on status='pending' (idempotent: a second reaction,
-// or one on an already-resolved request, matches nothing → null), exactly like
-// the PATCH /access-requests/:id route. Returns the updated row or null.
+// or one on an already-resolved request, matches nothing → null). This is NARROWER
+// than the PATCH /access-requests/:id route, which since task 1002284 also RESCINDS
+// an approval (invited → dismissed) and is idempotent on the state already held.
+// The reaction path stays pending-only ON PURPOSE: a Discord 👎 carries no
+// confirmation step and no ownership check beyond rank, so letting a stray reaction
+// un-admit somebody is a worse failure than making the Archon open the hall to undo
+// an approval. Returns the updated row or null.
 async function resolveAccessRequest({ id, status, builderId }) {
   const { rows } = await pool.query(
     `UPDATE access_requests

package/modules/hall-ui/public/watch.js

@@ -80,7 +80,16 @@
     const res = await api.request('PATCH', `${API}${path}`, { body });
     if (res.status === 401) { window.location.assign(`${API}/auth/web/start`); throw { kind: '401' }; }
     const data = res.data || {};
-    if (!res.ok) throw new Error(data.message || data.error || `${path} → ${res.status}`);
+    if (!res.ok) {
+      // The ADR 0116 envelope nests the sentence under `error`, so `data.error` is
+      // an OBJECT and interpolating it rendered every refusal as "[object Object]".
+      // Unwrapped exactly as postJson below already does — the refusals this route
+      // raises (already_member naming /builder-exit, already_dismissed naming the
+      // invite route) exist to tell the owner what to do instead, and a sentence
+      // nobody can read does not.
+      const env = data.error && typeof data.error === 'object' ? data.error : null;
+      throw new Error((env && env.message) || data.message || (typeof data.error === 'string' ? data.error : '') || `${path} → ${res.status}`);
+    }
     return data;
   }