@bongos/core 1.19.448 → 1.19.450

package/modules/hall-ui/public/task.js

@@ -141,12 +141,77 @@
     return `${Math.floor(sec / 86400)}d ago`;
   }
 
+  // The status vocabulary, which is the ONE sanctioned exception to the world's
+  // Fifteen Rule (DESIGN.md §Reuse) — a lifecycle state is verification state, so
+  // it keeps green/amber/red and never borrows the accent. The accent is for what
+  // is pressable or live, and a status pill is neither.
+  //
+  // `backlog` is DELIBERATELY absent, and that is a change: the retired inline
+  // block painted it amber, identically to `blocked`. Those are not the same
+  // fact. Amber says "something is wrong here", which is true of a task blocked
+  // behind an unshipped dependency and false of one simply not scheduled yet, and
+  // conflating them made every unscheduled task read as a problem. Backlog takes
+  // the neutral pill; the lifecycle rail's first beat carries the distinction in
+  // words ("not ready to be claimed yet" vs "waiting on another task").
+  const PILL_TONE = {
+    shipped: 'ok', confirmed: 'ok',
+    active: 'info', completed: 'info', ready: 'info',
+    blocked: 'warn',
+  };
+  function statusPill(status, extraClass) {
+    const s = String(status || 'unknown');
+    const tone = PILL_TONE[s];
+    return `<span class="rec-pill${tone ? ` rec-pill--${tone}` : ''}${extraClass ? ` ${extraClass}` : ''}">${escapeHtml(s)}</span>`;
+  }
+
   function depList(kindWord, items) {
     const rows = items.map((d) => {
-      const status = d.status ? `<span class="td-dep-status">${escapeHtml(d.status)}</span>` : '';
-      return `<li><a class="td-dep" href="${hallBase()}/task/${escapeHtml(String(d.id))}">#${escapeHtml(String(d.id))} — ${escapeHtml(d.title || 'task')}</a>${status}</li>`;
+      const status = d.status ? statusPill(d.status, 'rec-pill--sm') : '';
+      return `<li><a class="rec-dep" href="${hallBase()}/task/${escapeHtml(String(d.id))}">` +
+        `<b class="rec-dep__id">${escapeHtml(String(d.id))}</b>${escapeHtml(d.title || 'task')}</a>${status}</li>`;
     }).join('');
-    return `<div class="td-deps"><p class="td-section-h">${escapeHtml(kindWord)}</p><ul class="td-dep-list">${rows}</ul></div>`;
+    return `<section><p class="rec-sec__h">${escapeHtml(kindWord)}</p><ul class="rec-deplist">${rows}</ul></section>`;
+  }
+
+  // The lifecycle rail: five beats, exactly one lit. Six GDS statuses fold into
+  // five because backlog / blocked / ready all mean "no builder holds it yet";
+  // the first beat's caption is what says WHICH of the three it is, so the rail
+  // never implies a claim that has not happened.
+  const RAIL_AT = { active: 1, completed: 2, confirmed: 3, shipped: 4 };
+  const CLAIM_CAPTION = {
+    backlog: 'not ready to be claimed yet',
+    blocked: 'waiting on another task',
+    ready: 'waiting for a builder',
+  };
+  function lifecycleRail(t, credits) {
+    const at = RAIL_AT[t.status] ?? 0;
+    const landed = t.status === 'shipped' && credits != null;
+    const beats = [
+      ['Claim', CLAIM_CAPTION[t.status] || 'one builder, one worktree'],
+      ['Build', 'the code and the docs'],
+      ['Grade', 'the panel reads the diff'],
+      ['Ship', 'merged, then deployed'],
+      ['Credit', landed ? `${credits} ${window.OTBBranding?.taskCreditLabel?.(t) ?? curLabel()} landed` : 'credits land on the merge'],
+    ];
+    const steps = beats.map(([name, caption], i) =>
+      `<li class="tk-step"${i === at ? ' aria-current="step"' : ''}>` +
+      `<div class="tk-step__dot"></div><span class="tk-step__n">${escapeHtml(name)}</span>` +
+      `<span class="tk-step__c">${escapeHtml(caption)}</span></li>`).join('');
+    return `<ol class="tk-rail" aria-label="Lifecycle">${steps}</ol>`;
+  }
+
+  // The figure band — v2's stat-tile grid, the reference for any figure row the
+  // hall renders. Only figures the record actually CARRIES are drawn: most tasks
+  // have no recorded actual, and a band of dashes reads as a broken record
+  // rather than an honest one. Under two figures there is no band at all.
+  function figureBand(figs) {
+    const present = figs.filter((f) => f && f[1] != null && f[1] !== '');
+    if (present.length < 2) return '';
+    const cells = present.map(([label, value, unit]) =>
+      `<div class="rec-fig"><span class="rec-fig__l">${escapeHtml(label)}</span>` +
+      `<span class="rec-fig__v">${escapeHtml(String(value))}` +
+      `${unit ? `<u class="rec-fig__u">${escapeHtml(unit)}</u>` : ''}</span></div>`).join('');
+    return `<div class="rec-figs">${cells}</div>`;
   }
 
   // task 1003109 (goal 1000072, "Human legibility") — the ship-time visual.
@@ -164,11 +229,11 @@
     if (!/^\/api\/(gds|bongos)\/task-visuals\/task-\d+-[0-9a-f]{16}\.(png|jpg|gif|webp)$/.test(url)) return '';
     const alt = String(t.visual_alt || `Visual for task ${t.id}`);
     const caption = t.visual_alt
-      ? `<figcaption class="td-visual__caption">${escapeHtml(t.visual_alt)}</figcaption>`
+      ? `<figcaption class="tk-visual__caption">${escapeHtml(t.visual_alt)}</figcaption>`
       : '';
-    return `<figure class="td-visual">` +
+    return `<figure class="tk-visual">` +
       `<a href="${escapeHtml(url)}" target="_blank" rel="noopener">` +
-      `<img class="td-visual__img" src="${escapeHtml(url)}" alt="${escapeHtml(alt)}" loading="lazy">` +
+      `<img class="tk-visual__img" src="${escapeHtml(url)}" alt="${escapeHtml(alt)}" loading="lazy">` +
       `</a>${caption}</figure>`;
   }
 
@@ -196,29 +261,33 @@
   function renderTask(t, lastClaim, viewer, goal) {
     document.title = `#${t.id} — ${t.title || 'Task'} — ${document.title.split(' — ').pop()}`;
     const sub = $('#task-sub');
-    if (sub) sub.textContent = `Task #${t.id}`;
+    if (sub) sub.textContent = `Task ${t.id}`;
 
     const parts = [];
-    parts.push(`<p class="deeplink-card__kind">TASK <span class="task-status-pill task-status-pill--${escapeHtml(t.status || '')}">${escapeHtml(t.status || 'unknown')}</span></p>`);
-    parts.push(`<h1 class="deeplink-card__title" id="task-h">#${t.id}${t.title ? ' — ' + escapeHtml(t.title) : ''}</h1>`);
+    parts.push(`<p class="rec-kind">Task ${statusPill(t.status)}</p>`);
+    parts.push(`<h1 class="rec-title" id="task-h"><span class="rec-title__id">${escapeHtml(String(t.id))}</span>${escapeHtml(t.title || 'Untitled task')}</h1>`);
 
+    // The facts that place the task, in one line: what it belongs to, what KIND
+    // of work it is, and who is allowed to take it. The figures moved out of this
+    // run into the band below — a credit total set as one more comma-separated
+    // word is the thing the round's stat-tile reference exists to fix.
     const meta = [];
-    if (t.version_id) meta.push(escapeHtml(t.version_id));
+    if (t.version_id) meta.push(`<b>${escapeHtml(t.version_id)}</b>`);
     if (t.kind) meta.push(escapeHtml(t.kind));
     if (t.discipline && t.discipline !== 'unclassified') meta.push(escapeHtml(t.discipline));
-    if (t.priority != null) meta.push('P' + escapeHtml(String(t.priority)));
-    meta.push('min: ' + escapeHtml(rankText(t.requires_rank)));
-    const creditVal = window.OTBBranding?.taskCreditValue?.(t) ?? t.credits_reward;
-    if (creditVal != null) meta.push(`${creditVal} ${window.OTBBranding?.taskCreditLabel?.(t) ?? curLabel()}`);
-    if (t.est_minutes) meta.push(`${t.est_minutes}m`);
-    parts.push(`<p class="deeplink-card__meta">${meta.join(' · ')}</p>`);
+    // rankText() answers "any rank" for an open task, which read as
+    // "min rank any rank" once the label was prefixed. An open floor is not a
+    // minimum, so it is said as the absence of one.
+    const floor = rankText(t.requires_rank);
+    meta.push(escapeHtml(floor === 'any rank' ? 'open to any rank' : `min rank ${floor}`));
+    parts.push(`<p class="rec-meta">${meta.join(' &middot; ')}</p>`);
 
     // task 1002955: when was this written? The panel showed a shipped date but
     // never a created one, so an untouched task carried no age at all. Absolute
     // date first (the panel has the room the card chip doesn't), age after it.
     if (t.created_at) {
       const age = fmtRel(t.created_at);
-      parts.push(`<p class="deeplink-card__note">Created ${escapeHtml(fmtDate(t.created_at))}${age ? ` — ${escapeHtml(age)}` : ''}.</p>`);
+      parts.push(`<p class="rec-note">Created ${escapeHtml(fmtDate(t.created_at))}${age ? `, ${escapeHtml(age)}` : ''}.</p>`);
     }
 
     if (t.goal_id) {
@@ -227,24 +296,35 @@
       // read "Goal #1000072", which tells a person nothing they didn't already
       // know, and the chip answers "what kind of work is this" without opening
       // the goal. Marked inherited because a task carries no category of its own.
-      const goalName = goal && goal.title ? ` — ${escapeHtml(goal.title)}` : '';
+      const goalName = goal && goal.title ? `, ${escapeHtml(goal.title)}` : '';
       const catChip = window.OTB.categoryChip(goal && goal.category, { inherited: true });
-      parts.push(`<p class="td-goal">Goal: <a href="/goals#/goal/${encodeURIComponent(t.goal_id)}">Goal #${escapeHtml(String(t.goal_id))}</a>${goalName}${catChip}</p>`);
+      parts.push(`<p class="rec-goal">Goal <a href="/goals#/goal/${encodeURIComponent(t.goal_id)}">${escapeHtml(String(t.goal_id))}${goalName}</a>${catChip}</p>`);
     }
 
+    const creditVal = window.OTBBranding?.taskCreditValue?.(t) ?? t.credits_reward;
+    parts.push(figureBand([
+      [window.OTBBranding?.taskCreditLabel?.(t) ?? curLabel(), creditVal],
+      ['Estimated', t.est_minutes, 'm'],
+      ['Actual', t.actual_minutes, 'm'],
+      ['Priority', t.priority == null ? null : 'P' + t.priority],
+    ]));
+    parts.push(lifecycleRail(t, creditVal));
+
     // Claim history (task 751 — best-effort: the API surfaces the most recent
     // claim holder, not the full ledger of every past claim).
     if (lastClaim) {
       const who = escapeHtml(lastClaim.github_login || 'a builder');
       const when = lastClaim.claimed_at ? fmtDate(lastClaim.claimed_at, { time: true }) : '';
       const state = lastClaim.released_at
-        ? (lastClaim.outcome ? `released (${escapeHtml(lastClaim.outcome)})` : 'released')
+        ? (lastClaim.outcome ? `released, outcome ${escapeHtml(lastClaim.outcome)}` : 'released')
         : 'holding this claim';
-      parts.push(`<p class="task-detail__claim">Last claimed by <strong>${who}</strong> ${when ? 'on ' + escapeHtml(when) : ''} — ${state}.</p>`);
+      parts.push(`<section class="rec-sec"><p class="rec-sec__h">Claim</p>` +
+        `<p class="rec-body">Last claimed by <b>${who}</b>${when ? ' on ' + escapeHtml(when) : ''}. ${state}.` +
+        ` The task feed carries the most recent claim only, never the full ledger.</p></section>`);
     }
 
     if (t.value_summary) {
-      parts.push(`<p class="td-goal"><strong>Value:</strong> ${escapeHtml(t.value_summary)}</p>`);
+      parts.push(`<section class="rec-sec"><p class="rec-sec__h">Value</p><p class="rec-body">${escapeHtml(t.value_summary)}</p></section>`);
     }
 
     // task 1003109: the ship-time VISUAL — the same claim as the value summary in
@@ -252,23 +332,29 @@
     // isn't. Absent on almost every task, and that is not an omission: a task with
     // no visual must never look incomplete, so nothing is drawn at all when there
     // is none — no placeholder, no empty frame, no "no visual" line.
-    if (t.visual_url) parts.push(taskVisualHtml(t));
+    if (t.visual_url) parts.push(`<section class="rec-sec">${taskVisualHtml(t)}</section>`);
 
     if (t.description) {
-      parts.push(`<div class="td-desc">${escapeHtml(t.description)}</div>`);
+      parts.push(`<section class="rec-sec"><p class="rec-sec__h">Description</p><p class="rec-desc">${escapeHtml(t.description)}</p></section>`);
     }
 
     const touches = Array.isArray(t.touches) ? t.touches : [];
-    if (touches.length) parts.push(`<p class="td-touches">✎ ${touches.map(escapeHtml).join(', ')}</p>`);
+    if (touches.length) {
+      const files = touches.map((f) => `<li>${escapeHtml(f)}</li>`).join('');
+      parts.push(`<section class="rec-sec"><p class="rec-sec__h">Touches <em>${touches.length} ${touches.length === 1 ? 'file' : 'files'}</em></p>` +
+        `<ul class="rec-files">${files}</ul></section>`);
+    }
 
     const deps = Array.isArray(t.dependencies) ? t.dependencies : [];
     const dependents = Array.isArray(t.dependents) ? t.dependents : [];
-    if (deps.length) parts.push(depList('Blocked by', deps));
-    if (dependents.length) parts.push(depList('Blocks', dependents));
+    if (deps.length || dependents.length) {
+      parts.push(`<div class="rec-sec rec-depcols">${deps.length ? depList('Blocked by', deps) : ''}${dependents.length ? depList('Blocks', dependents) : ''}</div>`);
+    }
 
     if (t.shipped_at) {
-      const by = t.shipped_by ? ` by builder #${escapeHtml(String(t.shipped_by))}` : '';
-      parts.push(`<p class="deeplink-card__note">Shipped ${escapeHtml(fmtRel(t.shipped_at))}${by}.</p>`);
+      const by = t.shipped_by ? ` by builder ${escapeHtml(String(t.shipped_by))}` : '';
+      parts.push(`<section class="rec-sec"><p class="rec-sec__h">Shipped</p>` +
+        `<p class="rec-body">Shipped ${escapeHtml(fmtDate(t.shipped_at))}${by}, ${escapeHtml(fmtRel(t.shipped_at))}.</p></section>`);
     }
 
     // task 759: lifecycle action from the browser (no /builder-* CLI). The server
@@ -287,17 +373,25 @@
     } else if (t.status === 'completed') {
       lifecycle = rank === 'archon'
         ? `<button class="td-btn td-btn--primary" type="button" id="confirm-btn">Confirm</button>`
-        : `<p class="td-action-note">Awaiting the grader / a confirmation before it can ship.</p>`;
+        : `<p class="rec-actnote">Awaiting the grader, or a confirmation, before it can ship.</p>`;
+    } else if (t.status === 'shipped') {
+      // A shipped task has no lifecycle control left, so the row says so in words
+      // rather than leaving a gap a reader has to interpret. Nothing here is
+      // pressable-or-live, so nothing here is warm — the One Warm Thing Rule.
+      lifecycle = `<p class="rec-actnote">This task has shipped and its credits have landed. Neither Ship it nor Confirm is available.</p>`;
     }
 
     // Copy prompt (the "ship link") — the same claim/build/ship prompt the Work
     // Board hands an agent. Purely client-side (clipboard write, no server call).
     parts.push(`
-      <div class="td-actions">
-        ${lifecycle}
-        <button class="td-btn" type="button" id="copy-prompt-btn">Copy prompt</button>
-        <a class="td-btn" href="${hallBase()}/work">Open the Work Board</a>
-      </div>
+      <section class="rec-sec">
+        <p class="rec-sec__h">Actions</p>
+        <div class="rec-actions">
+          ${lifecycle}
+          <button class="td-btn" type="button" id="copy-prompt-btn">Copy prompt</button>
+          <a class="td-btn" href="${hallBase()}/work">Open the work board</a>
+        </div>
+      </section>
     `);
 
     const body = $('#task-body');
@@ -331,11 +425,16 @@
     }
   }
 
+  // The two honest failures. Both keep the <h1> — the empty and error renders are
+  // renders like any other, and a page whose only heading lives on the happy path
+  // has none in the states a reader is most likely to hit.
   function renderNotFound(id) {
     const body = $('#task-body');
     if (body) body.innerHTML = `
-      <p class="deeplink-card__title" id="task-h">#${escapeHtml(String(id))} — no such task</p>
-      <p class="deeplink-card__note">Tasks are numbered separately from GitHub pull requests, so this may be a PR rather than a GDS task.</p>
+      <p class="rec-kind">Task ${statusPill('no such task')}</p>
+      <h1 class="rec-big" id="task-h">${escapeHtml(String(id))}, no such task</h1>
+      <p class="rec-body">Tasks in the ledger are numbered separately from GitHub pull requests, so this may be a PR number rather than a task. The work board lists everything that does exist.</p>
+      <div class="rec-actions rec-sec"><a class="td-btn" href="${hallBase()}/work">Open the work board</a></div>
     `;
     const sub = $('#task-sub');
     if (sub) sub.textContent = 'Not found';
@@ -344,9 +443,13 @@
   function renderError(id) {
     const body = $('#task-body');
     if (body) body.innerHTML = `
-      <p class="deeplink-card__title" id="task-h">Could not load #${escapeHtml(String(id))}</p>
-      <p class="deeplink-card__note">Try reloading in a moment.</p>
+      <p class="rec-kind">Task ${statusPill('feed unavailable')}</p>
+      <h1 class="rec-big" id="task-h">Could not load ${escapeHtml(String(id))}</h1>
+      <p class="rec-body">The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment, or open the work board.</p>
+      <div class="rec-actions rec-sec"><a class="td-btn" href="${hallBase()}/work">Open the work board</a></div>
     `;
+    const sub = $('#task-sub');
+    if (sub) sub.textContent = 'Could not load';
   }
 
   async function load() {

package/modules/hall-ui/public/task.states.json

@@ -0,0 +1,14 @@
+{
+  "_": "The hall's TASK RECORD through modules/ui-design/kit/render.js (task 1003305). The record's own controls — the dependency links, the lifecycle buttons, the figure band, the way back — only exist once a task has LOADED, so the floors here are run against the hall-preview harness rather than the kit's own stub, which carries the public-landing feeds and not the hall's:\n\n  node scripts/hall-preview/server.js --port 4612 --fixture-me\n  node modules/ui-design/kit/render.js --states modules/hall-ui/public/task.states.json --base-in http://builders.localhost:4612 --base-out http://builders.localhost:4612\n\nRun against the kit's own stubs instead and every state renders `no such task`, which is a real state and is the `missing` one below — just not the one the re-skin changed.",
+  "page": "/task/2166",
+  "surface": "hall-ui",
+  "stub": { "prefix": "/builders/" },
+  "modeQuery": false,
+  "ignoreRequests": ["/api/(gds|bongos)/"],
+  "ignoreConsole": ["/api/(gds|bongos)/", "\b401\b", "\b404\b", "Unauthorized", "Not Found", "load failed"],
+  "states": {
+    "record": { "auth": true, "actions": [["wait", 600]], "expect": { "visible": ["#task-body", "#copy-prompt-btn"] } },
+    "missing": { "auth": true, "url": "/task/1003999", "actions": [["wait", 600]], "expect": { "visible": ["#task-h"] } }
+  },
+  "reducedMotion": { "auth": true, "actions": [["wait", 600]] }
+}

package/modules/hall-ui/public/work.css

@@ -16,21 +16,10 @@
 
    goals.html LOADS THIS SHEET TOO — a change here lands on both pages. */
 
-/* The board's page head, in v3's LABEL voice: the display face is saved for
-   section headings, so the page's own name is quiet (mock: .greeting). It
-   overrides the pre-shell .page-head h1 compat rule in style.css, which is
-   22px/650 and belongs to the pages nobody has re-skinned yet. */
-.page-head--board .page-head__h {
-  margin: 0 0 6px;
-  font-family: var(--label-face);
-  font-size: 14px;
-  font-weight: 400;
-  letter-spacing: var(--label-space);
-  text-transform: var(--label-case);
-  color: var(--ink);
-  text-shadow: var(--type-halo);
-}
-.page-head--board .page-head__sub { font-size: 14px; max-width: var(--measure); }
+/* `.page-head--board` MOVED to style.css (task 1003305) when the ideas composer
+   became its third consumer: a modifier on the shell's own .page-head is shell
+   chrome, and a page sheet that only work.html and goals.html load cannot serve
+   a page that loads neither. Same rule, one home. */
 
 .kbd {
   display: inline-block;

package/modules/ui-design/kit/serve.js

@@ -288,7 +288,13 @@ const server = http.createServer((req, res) => {
   const under = p.startsWith(PREFIX) ? p.slice(PREFIX.length) : (PREFIX !== '/' && (p === PREFIX.slice(0, -1)) ? '' : p.replace(/^\//, ''));
   const asset = fileUnder(DIR, under);
   if (asset && !asset.endsWith('.html')) return sendFile(asset, res);
-  const name = under === '' ? 'index' : under.replace(/\/$/, '').replace(/\.html$/, '');
+  const under2 = under.replace(/\/$/, '').replace(/\.html$/, '');
+  // A record page is `<page>/<id>` — the hall serves /builders/task/2166 and
+  // /builders/idea/12 from task.html and idea.html (serve-internal.js's two
+  // TASK_DETAIL_PAGE_RE / IDEA_DETAIL_PAGE_RE routes). Without this the states
+  // for those pages could only be rendered at a URL production never serves, and
+  // a page script that reads its id out of location.pathname would see none.
+  const name = under2 === '' ? 'index' : (fs.existsSync(path.join(DIR, under2 + '.html')) ? under2 : under2.replace(/\/[^/]+$/, ''));
   if (!name.includes('/') && fs.existsSync(path.join(DIR, name + '.html'))) {
     try { res.writeHead(200, { 'content-type': MIME['.html'], 'cache-control': 'no-store' }); return res.end(page(name + '.html').html); }
     catch (e) { res.writeHead(500, { 'content-type': 'text/plain' }); return res.end('render failed: ' + e.stack); }

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.448",
+  "version": "1.19.450",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.448",
+      "version": "1.19.450",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.448",
+  "version": "1.19.450",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/hall-preview/server.js

@@ -222,11 +222,45 @@ function sendPage(res, name) {
 }
 
 app.get('/', (req, res, next) => { if (!sendPage(res, 'index.html')) next(); });
+// The two RECORD pages are the hall's only two-segment page routes
+// (serve-internal.js TASK_DETAIL_PAGE_RE / IDEA_DETAIL_PAGE_RE). /idea/:id was
+// missing here, so the idea record could not be previewed at all — the harness
+// fell through to the real gate and 302'd to sign-in (task 1003305).
 app.get(/^\/task\/\d+$/, (req, res, next) => { if (!sendPage(res, 'task.html')) next(); });
+app.get(/^\/idea\/\d+$/, (req, res, next) => { if (!sendPage(res, 'idea.html')) next(); });
 app.get(/^\/([a-z-]+)$/, (req, res, next) => {
   if (!sendPage(res, `${req.params[0]}.html`)) next();
 });
 
+// What the READING ROOMS read (task 1003306): the two long-form documents and
+// the generated diagrams. All three live outside modules/hall-ui/public and are
+// served by serve-internal.js from docs/onboarding/ — but the hall's page gate
+// sits in front of them, so in the harness every one of those fetches 302'd to
+// sign-in and the primer could only ever be previewed in its FAILURE state and
+// the diagrams index with five broken images. Same gap task 1003305 closed for
+// the record pages' own routes. Served here, ahead of the gate, from the same
+// canonical files prod reads.
+// NEVER hand-edit a diagram: the .svg/.png pair and assertions.json are written
+// in lockstep by scripts/gds/gen-diagrams.js.
+// Both prefixes, and that is not belt-and-braces. The diagrams page references
+// its figures RELATIVELY (src="diagrams/01-….png"), which prod resolves under
+// /builders/diagrams because the page is served at /builders/diagrams; the
+// harness serves its pages at the root, so the same markup resolves at
+// /diagrams. Mount one and the populated page renders five broken images.
+for (const prefix of ['/builders/diagrams', '/diagrams']) {
+  app.use(prefix, express.static(path.join(ROOT, 'docs/onboarding/diagrams')));
+}
+for (const [route, file] of [
+  ['/builders/primer.md', 'docs/onboarding/primer.md'],
+  ['/builders/drachmae-and-karma.md', 'docs/onboarding/drachmae-and-karma.md'],
+]) {
+  app.get(route, (req, res, next) => {
+    const abs = path.join(ROOT, file);
+    if (!fs.existsSync(abs)) return next();
+    res.type('text/markdown; charset=utf-8').send(fs.readFileSync(abs, 'utf8'));
+  });
+}
+
 // Everything else — /builders/*.css|js assets, /lib/bongos-client.js, diagram
 // PNGs — falls through to the real internal-surface mounting. Our handlers
 // above registered first, so the hall's auth gates in there never fire for

package/src/module-api.js

@@ -33,7 +33,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.448'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.450'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/hall_audit.mjs

@@ -29,13 +29,17 @@ const pages = () => fs.readdirSync(HALL).filter((f) => f.endsWith('.html'));
 // rather than "predates the program" — knowing WHY is what tells the next
 // reader whether promoting it would actually fix anything.
 const INLINE_STYLE_BUDGET = {
-  'task.html': 27,        // the task-751 detail-page block, deliberate
+  // (task.html's 27-line task-751 block was the last substantive inline style in
+  // the hall. Task 1003305 promoted it to task.css + record.css when the re-skin
+  // needed room the ratchet would not give, so the exception is gone with it —
+  // task.html now carries none and passes on the default.)
   // (my-projects + scouting were carried here as standalone surfaces until task
   // 1002868 adopted them into the shell; their exceptions are gone with them.)
-  // Genuinely page-local, and already token-derived. One line over the default;
-  // a whole stylesheet for the legend strip is not worth the extra request, and
-  // diagram-viewer.css is shared with primer.html so it is the wrong home.
-  'diagrams.html': 16,
+  // (diagrams.html's 16-line legend + figure block was the hall's last inline
+  // style. Task 1003306 promoted it: the figure frame became the reading-room
+  // archetype's, shared with the primer, and the legend got diagrams.css — so
+  // the "not worth an extra request" reasoning stopped holding the moment the
+  // page needed a sheet anyway. No page carries an exception now.)
 };
 const DEFAULT_INLINE_BUDGET = 15;
 
@@ -147,18 +151,21 @@ test('the phone-width overflow guards are all still in place', () => {
     // top level, so finding one means the nearest @media is not the enclosing
     // one and the rule is really live everywhere.
     assert.ok(!/\n\}/.test(between), `${re} sits AFTER its nearest @media closed — it is live at every width`);
-    // Pin the EXACT breakpoint, not a band: style.css guards at 640, primer.css
-    // at 760 (its only breakpoint, the one primer.js's matchMedia mirrors).
-    // Narrowing primer's to 640 "for consistency" would silently reopen the
-    // 641–760px band the rule exists to cover, so a tolerant regex would hide
-    // the very drift this test is here to catch.
+    // Pin the EXACT breakpoint, not a band: style.css guards at 640, the
+    // reading room at 760 (its only breakpoint, the one primer.js's matchMedia
+    // mirrors). Narrowing the room's to 640 "for consistency" would silently
+    // reopen the 641–760px band the rule exists to cover, so a tolerant regex
+    // would hide the very drift this test is here to catch.
+    // The room's rule moved sheets in task 1003306 — primer.css → room.css,
+    // when the archetype was factored out for the diagrams index to share. The
+    // ASSERTION is unchanged; only the file it reads moved with the rule.
     assert.match(between, new RegExp(`max-width:\\s*${breakpoint}px`),
       `${re} must sit in the max-width: ${breakpoint}px media query`);
   };
   scoped(css, /:has\(>\s*\.ledger\)\s*\{[^}]*overflow-x:\s*auto/, 640);
   scoped(css, /\.ledger th\s*\{[^}]*position:\s*static/, 640);
   scoped(css, /\.rank-tip\s*\{\s*display:\s*none/, 640);
-  scoped(read('primer.css'), /\.primer-article table\s*\{[^}]*overflow-x:\s*auto/, 760);
+  scoped(read('room.css'), /\.primer-article table\s*\{[^}]*overflow-x:\s*auto/, 760);
 });
 
 // The strip has to hold BOTH invariants, and the second one is the easy one to