@bongos/core 1.19.474 → 1.19.476

package/modules/hall-ui/public/roster.js

@@ -0,0 +1,227 @@
+// roster.js — the Builders page: who builds on THIS project, ranked.
+//
+// Task 1003441 (goal 1000075, criterion community-is-one-builders-page). This
+// was the `#leaderboard` HASH VIEW on index.html, which is why the hall's
+// Community nav group read as one real page plus a link into the home page. It
+// is a page now, and `/#leaderboard` redirects here (shell.js VIEW_REDIRECTS).
+//
+// PROJECT-OWN, not cross-project. /people is the cross-project directory behind
+// `project.curate`; this is the project's own ledger and is deliberately
+// ungated, because its one data source — GET /leaderboard
+// (modules/economy/routes/leaderboard.js) — is deliberately unauthenticated and
+// mirrors the public status surface. No visibility predicate is applied and that
+// is CORRECT: privacy suppresses cross-project surfaces only, so a builder
+// marked `private` still appears on the roster of a project they build on
+// (owner, 2026-08-30; ADR 0225, task 1003443).
+//
+// The laurels (ACH_EMOJI + achRowHtml) and the sort lenses MOVED here from
+// hall-render.js rather than being copied — the leaderboard row was their only
+// caller, so the home page is left carrying no dead renderer.
+(function () {
+  'use strict';
+  var kit = window.OTBKit;
+  var OTB = window.OTB;
+  var esc = kit.esc;
+  var body = document.getElementById('roster-body');
+  var sub = document.getElementById('roster-sub');
+  var countPill = document.getElementById('roster-count');
+
+  var fmtInt = function (n) { return OTB && OTB.fmtInt ? OTB.fmtInt(n) : String(n == null ? 0 : n); };
+  var rankLabel = function (r) { return OTB && OTB.rankLabel ? OTB.rankLabel(r) : r; };
+  var currencyLabel = function () {
+    var b = window.OTBBranding;
+    return (b && b.currencyLabel && b.currencyLabel({ caps: true })) || 'Credits';
+  };
+
+  // Local, the way builders.js and goals-render.js each keep their own — a
+  // four-entry ladder constant, not a shared module's worth of behaviour.
+  var RANK_ORDER = { archon: 4, metic: 3, thetes: 2, xenos: 1 };
+  function rankWeight(r) { return RANK_ORDER[r] != null ? RANK_ORDER[r] : -1; }
+  function rankBadgeHtml(rank) {
+    var variant = RANK_ORDER[rank] ? 'rank-badge--' + rank : 'rank-badge--unknown';
+    var aria = rank ? 'Rank: ' + rankLabel(rank) : 'Rank not yet recorded';
+    return '<span class="rank-badge ' + variant + '" aria-label="' + esc(aria) + '">' + esc(rankLabel(rank)) + '</span>';
+  }
+
+  var ACH_EMOJI = {
+    'first-ship': '\u{1F6A2}',
+    'first-claim': '\u{1FA99}',
+    'first-parallel-claim': '⚓',
+    'streak-3': '\u{1F525}',
+    'streak-7': '\u{1F30B}',
+    'art-pipeline-shipper': '\u{1F3A8}',
+    'gds-shipper': '⚙️',
+    'breaking-the-100c-bar': '\u{1F4AF}',
+  };
+  function achRowHtml(ids) {
+    if (!Array.isArray(ids) || !ids.length) return '';
+    var inner = ids.map(function (id) {
+      var emoji = ACH_EMOJI[id];
+      // Title is the achievement id (kebab) — terse enough that hover discloses
+      // the laurel without overstating the prose.
+      return emoji ? '<span class="lb-ach" title="' + esc(id) + '" aria-label="' + esc(id) + '">' + emoji + '</span>' : '';
+    }).join('');
+    return inner ? '<span class="lb-ach-row" aria-label="achievements">' + inner + '</span>' : '';
+  }
+
+  function builderName(b) { return b.display_name || b.github_login || ('#' + b.id); }
+  function initialOf(b) {
+    var n = String(builderName(b)).replace(/^[@#]/, '');
+    return (n.charAt(0) || '?').toUpperCase();
+  }
+  // Defence in depth on the avatar src. Escaping alone cannot stop a non-http
+  // scheme reaching an attribute the browser resolves; <img> would not execute
+  // javascript: in any current browser, but the allowlist costs one test and
+  // removes the question. Falls back to the initial rather than rendering a
+  // src the page did not vouch for.
+  function httpUrl(u) {
+    return /^https?:\/\//i.test(String(u || '')) ? String(u) : null;
+  }
+  // The identity cell, shared with /people through people.css. The name opens
+  // the builder's profile PAGE here: this is a project surface, so a local
+  // profile id exists — unlike the cross-project directory, which can only
+  // offer GitHub. Guarded on b.id so a row without one degrades to plain text
+  // rather than a broken /profile?id=undefined link (task 1467).
+  function whoHtml(b) {
+    var name = esc(builderName(b));
+    var src = httpUrl(b.avatar_url);
+    var avatar = src
+      ? '<img class="dir-avatar" src="' + esc(src) + '" alt="" loading="lazy">'
+      : '<span class="dir-avatar dir-avatar--initial" aria-hidden="true">' + esc(initialOf(b)) + '</span>';
+    var nameHtml = b.id != null
+      ? '<a class="lb-name dir-name" href="/profile?id=' + encodeURIComponent(b.id) + '">' + name + '</a>'
+      : '<span class="dir-name">' + name + '</span>';
+    var login = b.github_login ? '<span class="dir-login">@' + esc(b.github_login) + '</span>' : '';
+    return '<span class="dir-who">' + avatar + '<span class="dir-who__t">' + nameHtml + login + '</span></span>';
+  }
+
+  var all = [];
+  var query = '';
+  var sortBy = '';
+
+  // PLACE IS CANONICAL, not the row's position in the current sort.
+  // hall-render's leaderboardPlace() already defines a builder's place as
+  // credits-descending "independent of whatever column the table is currently
+  // sorted by", and the Standing card still says "#N on the leaderboard" from
+  // that definition — so a Place column that renumbered itself under the karma
+  // lens disagreed with the card about the same builder. Stamped once, at load.
+  function stampPlaces(rows) {
+    rows.slice()
+      .sort(function (a, b) { return (Number(b.total_credits) || 0) - (Number(a.total_credits) || 0); })
+      .forEach(function (b, i) { b.__place = i + 1; });
+    // The efficiency title is stamped here too, so the division and the string
+    // work happen ONCE per load rather than per visible row per render (every
+    // sort, search keystroke and page turn re-renders).
+    rows.forEach(function (b) { b.__eff = efficiencyTitle(b); });
+    return rows;
+  }
+
+  function matches(b) {
+    if (!query) return true;
+    var hay = ((b.github_login || '') + ' ' + (b.display_name || '')).toLowerCase();
+    return hay.indexOf(query) !== -1;
+  }
+  // The server returns credits-DESC, which is also the default lens; the others
+  // re-order the loaded set client-side, ties keeping the server's order so
+  // equal-value rows do not jitter between renders.
+  var SORTS = {
+    '': null,
+    rank: function (b) { return -rankWeight(b.rank); },
+    karma: function (b) { return -(Number(b.karma) || 0); },
+    tokens: function (b) { return -(Number(b.tokens_used) || 0); },
+  };
+  function ordered(rows) {
+    var key = SORTS[sortBy];
+    if (!key) return rows;
+    return rows.map(function (b, i) { return { b: b, i: i }; })
+      .sort(function (x, y) { return (key(x.b) - key(y.b)) || (x.i - y.i); })
+      .map(function (x) { return x.b; });
+  }
+
+  var pager = kit.makePager('roster', 'hall-roster-per-page', { defaultPerPage: 25 });
+  var ledger = null;
+
+  function efficiencyTitle(b) {
+    var credits = Number(b.total_credits) || 0;
+    var one = currencyLabel().toLowerCase().replace(/s$/, '');
+    if (credits <= 0) return 'no ' + currencyLabel().toLowerCase() + ' earned yet';
+    return fmtInt(Math.round((Number(b.tokens_used) || 0) / credits)) + ' tokens per ' + one;
+  }
+
+  function rowHtml(b) {
+    return '<tr>'
+      + '<td class="ledger__num">' + esc(String(b.__place || '—')) + '</td>'
+      + '<td>' + whoHtml(b) + achRowHtml(b.achievements) + '</td>'
+      + '<td class="ledger__rank">' + rankBadgeHtml(b.rank) + '</td>'
+      + '<td class="ledger__num">' + esc(fmtInt(b.total_credits)) + '</td>'
+      + '<td class="ledger__num">' + esc(fmtInt(b.karma)) + '</td>'
+      + '<td class="ledger__num" title="' + esc(b.__eff || '') + '">' + esc(fmtInt(b.tokens_used)) + '</td>'
+      + '</tr>';
+  }
+
+  function rerender() {
+    if (ledger) ledger.render(ordered(all.filter(matches)));
+  }
+
+  function notice(msg) {
+    body.innerHTML = '';
+    body.className = 'note';
+    body.textContent = msg;
+  }
+
+  function mountRoster(rows) {
+    all = stampPlaces(Array.isArray(rows) ? rows : []);
+    if (!all.length) {
+      notice('Nobody has earned anything on this project yet. A builder joins the roster the '
+        + 'first time they ship a claimed task.');
+      return;
+    }
+    if (countPill) { countPill.textContent = String(all.length); countPill.hidden = false; }
+    if (sub) {
+      sub.textContent = fmtInt(all.length) + ' builder' + (all.length === 1 ? '' : 's')
+        + ' on this project, ranked by ' + currencyLabel().toLowerCase() + ' earned. This '
+        + 'project’s own ledger — everyone who builds here is listed.';
+    }
+    kit.makeFilterBar({
+      mount: document.getElementById('roster-filters'),
+      search: { id: 'roster-q', label: 'Search', placeholder: 'name or login' },
+      primary: [
+        { id: 'roster-sort',
+          label: 'Sort',
+          options: [
+            { value: '', label: 'place' },
+            { value: 'rank', label: 'rank' },
+            { value: 'karma', label: 'most karma' },
+            { value: 'tokens', label: 'most tokens' },
+          ] },
+      ],
+      onChange: function (vals) {
+        query = String(vals['roster-q'] || '').trim().toLowerCase();
+        sortBy = String(vals['roster-sort'] || '');
+        pager.page = 1;
+        rerender();
+      },
+    });
+    body.textContent = '';
+    body.className = '';
+    ledger = kit.makeLedger({
+      mount: body,
+      columns: ['Place', 'Builder', 'Rank',
+        { label: currencyLabel(), class: 'ledger__num' },
+        { label: 'Karma', class: 'ledger__num' },
+        { label: 'Tokens', class: 'ledger__num' }],
+      rowHtml: rowHtml,
+      emptyMsg: 'No builder on the roster matches that search.',
+      pager: pager,
+    });
+    rerender();
+  }
+
+  fetch('/api/gds/leaderboard', { headers: { Accept: 'application/json' } })
+    .then(function (r) {
+      if (!r.ok) throw new Error('http ' + r.status);
+      return r.json();
+    })
+    .then(function (data) { mountRoster(data && data.leaderboard); })
+    .catch(function () { notice('Couldn’t load the roster right now.'); });
+}());

package/modules/hall-ui/public/roster.states.json

@@ -0,0 +1,100 @@
+{
+  "_": "Builders — this project's OWN roster, ranked by credits earned (task 1003441, goal 1000075). Was the #leaderboard hash view on index.html; /#leaderboard now redirects here. Deliberately UNGATED, because its one data source (GET /leaderboard) is deliberately unauthenticated and mirrors the public status surface — so unlike people.states.json the `out` state below renders the real page rather than a seal. Populated look: the hall-preview harness (scripts/hall-preview/fixtures/leaderboard.json carries thirteen builders with avatars, ranks, karma and tokens).",
+  "page": "/builders/roster",
+  "surface": "hall-ui",
+  "stub": {
+    "prefix": "/builders/"
+  },
+  "modeQuery": false,
+  "_feeds": "The kit's own stub carries no feed for this page, so against it the page renders its EMPTY and SKELETON states — which is the point: those are states the floors must hold in. Against the hall-preview harness the same states render populated. Every declared 404 below is a fixture the harness does not carry, named rather than hidden.",
+  "ignoreRequests": [
+    "/api/(gds|bongos)/me$",
+    "/api/(gds|bongos)/me/",
+    "/api/(gds|bongos)/goals",
+    "/api/(gds|bongos)/inbox/",
+    "/api/(gds|bongos)/versions",
+    "/api/(gds|bongos)/builders",
+    "/api/(gds|bongos)/leaderboard",
+    "/api/(gds|bongos)/public/"
+  ],
+  "ignoreConsole": [
+    "/api/(gds|bongos)/",
+    "\\b401\\b",
+    "\\b403\\b",
+    "\\b404\\b",
+    "\\b501\\b",
+    "Unauthorized",
+    "Forbidden",
+    "Not Found",
+    "Not Implemented",
+    "load failed"
+  ],
+  "states": {
+    "roster": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          700
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#roster-scroll"
+        ]
+      }
+    },
+    "search": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          700
+        ],
+        [
+          "fill",
+          "#roster-q",
+          "prev"
+        ],
+        [
+          "wait",
+          200
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#roster-scroll"
+        ],
+        "value": [
+          [
+            "#roster-q",
+            "prev"
+          ]
+        ]
+      }
+    },
+    "out": {
+      "auth": false,
+      "actions": [
+        [
+          "wait",
+          700
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#roster-scroll"
+        ]
+      }
+    }
+  },
+  "reducedMotion": {
+    "auth": true,
+    "actions": [
+      [
+        "wait",
+        600
+      ]
+    ]
+  }
+}

package/modules/hall-ui/public/shell.js

@@ -13,8 +13,9 @@
 //     (#app-sidebar / #app-topbar / #app-foot) every hall page carries;
 //   - rank-gate nav items COSMETICALLY (server-side page gates remain the real
 //     access control — serve-internal.js requireGovernmentPage etc.);
-//   - on the index (body[data-page="home"]) route the three views (#home,
-//     #standing, #leaderboard) plus the #achievements alias into Standing. The
+//   - on the index (body[data-page="home"]) route the two views (#home,
+//     #standing) plus the #achievements alias into Standing, and REDIRECT the
+//     retired #leaderboard hash to the /roster page (task 1003441). The
 //     `#/task|idea|blocker/N` deep-link hashes belong to builders.js and are
 //     deliberately ignored here;
 //   - expose window.OTBShell.applyAccess(...) so builders.js (index) or the
@@ -30,7 +31,10 @@
   var brand = window.__BRANDING__ || {};
   var PAGE = (document.body && document.body.dataset.page) || '';
   var IS_INDEX = PAGE === 'home';
-  var VIEWS = ['home', 'standing', 'leaderboard'];
+  // task 1003441: 'leaderboard' left this list — the Roll is the /roster PAGE
+  // now. Its hash is not an alias (there is no host view to land on) but a
+  // REDIRECT, declared in VIEW_REDIRECTS below.
+  var VIEWS = ['home', 'standing'];
   // task 2174: #achievements retired as a view — the achievements grid folded
   // into Standing's Achievements rail section; task 2175 then retired its nav
   // entry. Old links (bookmarks, the stat tiles) keep working: the hash resolves
@@ -47,6 +51,16 @@
     'standing-progress': { view: 'standing', anchor: 'standing-progress' },
     'standing-achievements': { view: 'standing', anchor: 'standing-achievements' },
   };
+  // A retired view whose content moved to its OWN PAGE, so there is no host
+  // view to alias onto. Every existing #leaderboard link — bookmarks, the
+  // Standing card's stat tiles, profile.js's prose link — lands on the roster
+  // instead of silently falling through to Home (task 1003441).
+  // Object.create(null): the key is an attacker-controlled hash string, so a
+  // plain object would answer for "constructor"/"toString" as well as the real
+  // entries. Harmless with one literal key, wrong to leave as the pattern.
+  var VIEW_REDIRECTS = Object.assign(Object.create(null), {
+    leaderboard: '/roster',
+  });
   // builders.js owns these hashes (deep-link overlay) — never route them.
   var DEEPLINK_RE = /^#\/(task|idea|blocker)\/(\d+)$/;
 
@@ -157,7 +171,11 @@
       // Community because the group is picked by WHOSE data it is, and this is
       // other builders reaching you — not your own numbers (that is You).
       { id: 'collab', label: 'Collab', icon: 'leaderboard', href: '/collab', gate: 'member' },
-      { id: 'leaderboard', label: 'Leaderboard', icon: 'leaderboard', href: '/#leaderboard', view: 'leaderboard', gate: 'member' },
+      // task 1003441: was the #leaderboard hash view on the home page, which is
+      // why this group read as one real page plus a link into index.html. Now a
+      // page, so no `view` key. Labelled Builders — 'roster' is the word
+      // modules/hall-ui/CLAUDE.md uses, but Builders is what a reader scans for.
+      { id: 'roster', label: 'Builders', icon: 'leaderboard', href: '/roster', gate: 'member' },
       // task 1002577: the cross-project builder directory (/scouting graduated
       // into the hall). Gated to MATCH its data — /api/gds/scouting checks
       // `project.curate`, whose catalog floor is METIC. This read 'archon' until
@@ -566,6 +584,12 @@
   }
 
   function route(opts) {
+    // The redirect runs BEFORE the view lookup: #leaderboard is no longer a
+    // view, so viewFromHash would return nothing and route() would leave the
+    // page on Home — a dead link that looks like it worked. replace() rather
+    // than assign() so Back does not bounce the reader between the two.
+    var redirect = IS_INDEX && VIEW_REDIRECTS[String(window.location.hash || "").replace(/^#/, "")];
+    if (redirect) { window.location.replace(redirect); return; }
     var target = viewFromHash(window.location.hash);
     if (target) {
       // An aliased hash owns its scroll position, so suppress setView's

package/modules/hall-ui/public/style.css

@@ -2352,26 +2352,28 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
    light). The checked box is already an accent fill on every selected row;
    a second one per row is what made it shout. */
 .task--selected { border-color: var(--accent); }
-/* task 1869: the explicit open-detail hitbox — clicking the card body toggles
-   selection, so this is the only way from a claimable card into the overlay. */
-.task__open {
-  flex: none;
-  width: 26px;
-  height: 26px;
-  display: inline-flex;
-  align-items: center;
-  justify-content: center;
-  background: none;
-  border: none;
-  color: var(--ink-faint);
-  font-size: 12px;
-  line-height: 1;
-  cursor: pointer;
-  border-radius: var(--radius-sm);
-}
-.task__open:hover { color: var(--ink); background: var(--glass); }
 .task__body { min-width: 0; padding-top: 2px; }
 .task__title { font-weight: 400; font-size: 14.5px; line-height: 1.4; margin: 0 0 7px; color: var(--ink); }
+/* task 1003468 — the title is the way into the record. The card body toggles
+   selection (bulk claim has been the primary card interaction since 1759), so
+   the door has to be a control of its own — and task 1869's 26px ⤢ glyph in
+   --ink-faint was one the owner never found. A title is the door everywhere
+   else in the hall (.gr-title, the ledger rows), so this needs no teaching.
+   Once a control it owes the 24px floor on both axes: the padding buys the
+   height, the equal negative margin hands the room back so the card's line
+   does not re-space (the .scroll__lede a recipe above). Ink at rest, not the
+   link colour — sixty accent titles would take the board over. */
+.task__link {
+  display: inline-block;
+  color: inherit;
+  text-decoration: none;
+  min-width: 24px;
+  min-height: 24px;
+  padding: 2px 4px;
+  margin: -2px -4px;
+  overflow-wrap: anywhere;
+}
+.task__link:hover { color: var(--accent-ink); text-decoration: underline; text-underline-offset: 3px; }
 .task__meta { display: flex; flex-wrap: wrap; align-items: center; gap: 6px 8px; font-size: 12px; color: var(--ink-faint); margin-top: 0; }
 /* The label voice, outlined — a tag is a fact about the task, never a fill. */
 .task__tag {

package/modules/hall-ui/public/task-detail.js

@@ -655,11 +655,23 @@
   if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', boot);
   else boot();
 
+  // task 1003468 — the record's way back. A list that opens a task writes WHERE
+  // it was opened from onto the link (path + query + hash, so a goal's #/goal/N
+  // survives the trip) and task.js offers that as the exit. A query param, not
+  // memory: it has to outlive a reload and a copied link.
+  function taskHref(id) {
+    var from = location.pathname + location.search + location.hash;
+    return hallBase() + '/task/' + encodeURIComponent(id) + '?from=' + encodeURIComponent(from);
+  }
+
   window.OTBTaskDetail = {
     resolve: resolve,
-    // Every existing caller (Work Board's open-detail button + backlog rows,
-    // the Goals page) passes a TASK id — navigate straight to the real page
-    // rather than round-tripping through the hash redirect above.
-    open: function (id) { location.href = hallBase() + '/task/' + encodeURIComponent(id); },
+    // The link a list writes on a task title (the Work Board's cards, the goal
+    // pane's cards) — the same target open() navigates to.
+    href: taskHref,
+    // Every existing caller (the Work Board's backlog rows, the Goals page's
+    // ledger rows and read-only cards) passes a TASK id — navigate straight to
+    // the real page rather than round-tripping through the hash redirect above.
+    open: function (id) { location.href = taskHref(id); },
   };
 })();

package/modules/hall-ui/public/task.html

@@ -26,10 +26,12 @@
       <div class="page-head">
         <!-- task 2175: the breadcrumb sits in the page head, above the card, so a
              deep-linked visitor (this page is deliberately not in the nav) has a
-             way back before the task body has loaded. -->
+             way back before the task body has loaded. task 1003468: task.js
+             points it at where the reader came from (?from=, then the
+             referrer); /work is only the fallback it ships with. -->
         <div class="rec-crumb">
-          <a class="rec-back" href="/work">
-            <svg class="rec-back__ic" viewBox="0 0 16 16" aria-hidden="true"><path d="M9.4 3.6 5 8l4.4 4.4"/><path d="M5 8h7.2"/></svg>Back to tasks</a>
+          <a class="rec-back" id="task-back" href="/work">
+            <svg class="rec-back__ic" viewBox="0 0 16 16" aria-hidden="true"><path d="M9.4 3.6 5 8l4.4 4.4"/><path d="M5 8h7.2"/></svg><span id="task-back-label">Back to tasks</span></a>
           <p class="rec-sub" id="task-sub">Loading task</p>
         </div>
       </div>

package/modules/hall-ui/public/task.js

@@ -126,6 +126,59 @@
     return m ? m[1] : null;
   }
 
+  // task 1003468 — where the reader came from, so the record can send them back
+  // there rather than always to the work board. Precedence: `?from=` (written
+  // by the list that opened the record — a query param so it survives a reload
+  // and a copied link) → a same-origin referrer → the work board. A value is
+  // honoured only as a path on THIS host: one leading slash (a second is another
+  // origin), no backslash (browsers read `/\host` as `//host`), no whitespace,
+  // never the API and never this same record.
+  const EXIT_MAX_LEN = 2048;
+  function safeHallPath(v) {
+    if (typeof v !== 'string' || !v || v.length > EXIT_MAX_LEN) return null;
+    if (!/^\/(?!\/)/.test(v) || /[\\\s]/.test(v)) return null;
+    if (/^(\/builders)?\/(api|lib)\//.test(v)) return null;
+    if (v.split(/[?#]/)[0] === location.pathname) return null;
+    return v;
+  }
+  function referrerPath() {
+    let u;
+    try { u = new URL(document.referrer); } catch (_) { return null; }
+    if (u.origin !== location.origin) return null;
+    return safeHallPath(u.pathname + u.search + u.hash);
+  }
+  // "goal 1000081", "task 12", "the work board", "sessions" — said the way the
+  // sidebar says it, so the exit reads as a place and not as a URL.
+  function exitLabel(href) {
+    const rel = href.replace(/^\/builders(?=[/?#]|$)/, '');
+    let m;
+    if ((m = /#\/goal\/(\d+)/.exec(rel))) return `goal ${m[1]}`;
+    if ((m = /^\/(task|idea)\/(\d+)/.exec(rel))) return `${m[1]} ${m[2]}`;
+    const seg = (/^\/([a-z][a-z-]*)/.exec(rel) || [])[1];
+    if (!seg) return 'home';
+    if (seg === 'work') return 'the work board';
+    return seg.replace(/-/g, ' ');
+  }
+  function exitTarget() {
+    let from = null;
+    try { from = new URLSearchParams(location.search).get('from'); } catch (_) { /* no query */ }
+    const href = safeHallPath(from) || referrerPath() || `${hallBase()}/work`;
+    return { href, label: exitLabel(href) };
+  }
+  function exitLinkHtml() {
+    const { href, label } = exitTarget();
+    return `<a class="td-btn" href="${escapeHtml(href)}">Back to ${escapeHtml(label)}</a>`;
+  }
+  // The crumb in the page head is set before the fetch, so the way back exists
+  // in every state — loading, not found, failed — not just the happy one.
+  function applyExit() {
+    const { href, label } = exitTarget();
+    const back = $('#task-back');
+    if (back) back.href = href;
+    const lbl = $('#task-back-label');
+    if (lbl) lbl.textContent = `Back to ${label}`;
+  }
+
   function rankText(rr) {
     const r = (rr || 'xenos').toLowerCase();
     if (r === 'xenos') return 'any rank';
@@ -389,7 +442,7 @@
         <div class="rec-actions">
           ${lifecycle}
           <button class="td-btn" type="button" id="copy-prompt-btn">Copy prompt</button>
-          <a class="td-btn" href="${hallBase()}/work">Open the work board</a>
+          ${exitLinkHtml()}
         </div>
       </section>
     `);
@@ -434,7 +487,7 @@
       <p class="rec-kind">Task ${statusPill('no such task')}</p>
       <h1 class="rec-big" id="task-h">${escapeHtml(String(id))}, no such task</h1>
       <p class="rec-body">Tasks in the ledger are numbered separately from GitHub pull requests, so this may be a PR number rather than a task. The work board lists everything that does exist.</p>
-      <div class="rec-actions rec-sec"><a class="td-btn" href="${hallBase()}/work">Open the work board</a></div>
+      <div class="rec-actions rec-sec">${exitLinkHtml()}</div>
     `;
     const sub = $('#task-sub');
     if (sub) sub.textContent = 'Not found';
@@ -445,14 +498,15 @@
     if (body) body.innerHTML = `
       <p class="rec-kind">Task ${statusPill('feed unavailable')}</p>
       <h1 class="rec-big" id="task-h">Could not load ${escapeHtml(String(id))}</h1>
-      <p class="rec-body">The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment, or open the work board.</p>
-      <div class="rec-actions rec-sec"><a class="td-btn" href="${hallBase()}/work">Open the work board</a></div>
+      <p class="rec-body">The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment, or go back.</p>
+      <div class="rec-actions rec-sec">${exitLinkHtml()}</div>
     `;
     const sub = $('#task-sub');
     if (sub) sub.textContent = 'Could not load';
   }
 
   async function load() {
+    applyExit();
     const id = taskIdFromPath();
     if (!id) { renderNotFound(''); return; }
     try {

package/modules/hall-ui/public/task.states.json

@@ -8,6 +8,7 @@
   "ignoreConsole": ["/api/(gds|bongos)/", "\b401\b", "\b404\b", "Unauthorized", "Not Found", "load failed"],
   "states": {
     "record": { "auth": true, "actions": [["wait", 600]], "expect": { "visible": ["#task-body", "#copy-prompt-btn"] } },
+    "from-goal": { "auth": true, "url": "/task/2166?from=%2Fgoals%23%2Fgoal%2F1000081", "actions": [["wait", 600]], "expect": { "visible": ["#task-back", "#copy-prompt-btn"], "attr": [["#task-back", "href", "/goals#/goal/1000081"]] } },
     "missing": { "auth": true, "url": "/task/1003999", "actions": [["wait", 600]], "expect": { "visible": ["#task-h"] } }
   },
   "reducedMotion": { "auth": true, "actions": [["wait", 600]] }

package/modules/hall-ui/public/work.js

@@ -87,6 +87,9 @@
   const BACKLOG_LIMIT = 500;
   const fmtDate = (iso) => window.OTB.fmtDate(iso);
   const toast = (msg) => window.OTB.toast(msg, { duration: 2200, clear: true });
+  // task 1003468 — the record link a card's title carries; it names where it
+  // was opened from so the record can offer the way back (task-detail.js).
+  const taskHref = (id) => window.OTBTaskDetail.href(id);
   const curLabel = (caps) => { const l = (window.__BRANDING__ && window.__BRANDING__.currency && window.__BRANDING__.currency.label) || 'credits'; return caps ? l.charAt(0).toUpperCase() + l.slice(1) : l; };
 
   // Coarse relative time ("just now", "3h", "2d") for how long a claim's been
@@ -404,10 +407,9 @@
           <div class="task__id">
             <input type="checkbox" class="task__select" data-task-id="${t.id}" aria-label="Select task ${t.id} for bulk actions"${selected ? ' checked' : ''}>
             <span class="task__num">#${t.id}</span>
-            <button class="task__open" type="button" data-task-id="${t.id}" title="Open task details" aria-label="Open details for task ${t.id}">⤢</button>
           </div>
           <div class="task__body">
-            <p class="task__title">${escapeHtml(t.title)}</p>
+            <p class="task__title"><a class="task__link" href="${escapeHtml(taskHref(t.id))}">${escapeHtml(t.title)}</a></p>
             <div class="task__meta">
               <span class="task__tag">${escapeHtml(t.version_id || '?')}</span>
               <span class="task__tag">${escapeHtml(t.kind || 'unclassified')}</span>
@@ -1334,15 +1336,12 @@
       if (claimBtn) { doClaim(claimBtn.dataset.taskId, claimBtn); return; }
       const copyBtn = e.target.closest('.task__copy');
       if (copyBtn) { copyPromptForTask(copyBtn.dataset.taskId, copyBtn); return; }
-      // task 1869: the explicit open-detail hitbox — now the ONLY way to open
-      // the shared task-detail overlay from a claimable card (the card body
-      // itself toggles selection below, since multi-select is the primary card
-      // interaction now that 1759 shipped).
-      const openBtn = e.target.closest('.task__open');
-      if (openBtn && openBtn.dataset.taskId && window.OTBTaskDetail) {
-        window.OTBTaskDetail.open(openBtn.dataset.taskId);
-        return;
-      }
+      // task 1003468: the title is the way into the record — a real link, so
+      // the browser navigates (and a middle-click opens a tab); let it be.
+      // Task 1869's ⤢ glyph used to be the only door and the owner never found
+      // it; the card body still toggles selection below, since multi-select is
+      // the primary card interaction now that 1759 shipped.
+      if (e.target.closest('.task__link')) return;
       // task 1869: clicking the card anywhere else toggles its selection
       // checkbox (matches the affordance a checkbox already implies).
       const card = e.target.closest('.task');

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.474",
+  "version": "1.19.476",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.474",
+      "version": "1.19.476",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",