@bongos/core 1.19.475 → 1.19.477

package/docs/module-api-changelog.md

@@ -1387,5 +1387,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.473 with no explicit bump. run 33650008858. (task 1002620)
   1.19.475 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.474 with no explicit bump. run 33653632532. (task 1002620)
+  1.19.476 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.475 with no explicit bump. run 33655706909. (task 1002620)
+  1.19.477 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.476 with no explicit bump. run 33662059275. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/goals-page.js

@@ -1067,10 +1067,11 @@
     if (copyBtn) { copyPromptForTask(copyBtn.dataset.copyTask, copyBtn); return; }
     const releaseBtn = e.target.closest('[data-release-claim]');
     if (releaseBtn) { e.stopPropagation(); doGoalRelease(releaseBtn.dataset.releaseClaim, releaseBtn.dataset.releaseTask, releaseBtn); return; }
-    const openBtn = e.target.closest('.task__open');
-    if (openBtn && openBtn.dataset.taskId && window.OTBTaskDetail) { window.OTBTaskDetail.open(openBtn.dataset.taskId); return; }
+    // task 1003468: the title is the way into the record — a real link the
+    // browser follows (it carries where it was opened from); let it be.
+    if (e.target.closest('.task__link')) return;
     // Click elsewhere: a ready card toggles its selection; a read-only (active /
-    // backlog) card opens the detail overlay (board affordance, work.js:1268-1271).
+    // backlog) card opens the record (the board's affordance, work.js).
     const card = e.target.closest('.task');
     if (!card || !card.dataset.taskId) return;
     if (card.classList.contains('task--readonly')) {

package/modules/hall-ui/public/goals-render.js

@@ -47,6 +47,9 @@
   };
   const taskSettled = (t) => window.OTBBranding?.taskSettled?.(t) ?? (!!t && (t.status === 'confirmed' || t.status === 'shipped'));
   const creditVal = (t) => Number(window.OTBBranding?.taskCreditValue?.(t) ?? t?.credits_reward) || 0;
+  // task 1003468 — the record link a card's title carries; it names where it
+  // was opened from so the record can offer the way back (task-detail.js).
+  const taskHref = (id) => window.OTBTaskDetail.href(id);
   function statusBadge(status) {
     const cls = status === 'achieved' ? 'goal-badge--achieved'
       : (status === 'archived' ? 'goal-badge--archived' : 'goal-badge--open');
@@ -327,7 +330,7 @@
       ? `<input type="checkbox" class="task__select" data-task-id="${escapeHtml(id)}" aria-label="Select task ${escapeHtml(id)} for bulk claim"${selected ? ' checked' : ''}>`
       : `<span class="task__tag" title="Task status">${escapeHtml(t.status || '')}</span>`;
     // Actions: ready → Claim + copy; mine-active → Release; other's active →
-    // "claimed · @who"; anything else → nothing (open via the ⤢ button / card).
+    // "claimed · @who"; anything else → nothing (open via the title / card).
     let actions = '';
     if (isReady) {
       actions = `<button class="task__claim" type="button" data-claim-task="${escapeHtml(id)}" aria-label="Claim task ${escapeHtml(id)}">Claim</button>`
@@ -343,10 +346,9 @@
         <div class="task__id">
           ${lead}
           <span>#${escapeHtml(id)}</span>
-          <button class="task__open" type="button" data-task-id="${escapeHtml(id)}" title="Open task details" aria-label="Open details for task ${escapeHtml(id)}">⤢</button>
         </div>
         <div class="task__body">
-          <p class="task__title">${escapeHtml(t.title || '')}</p>
+          <p class="task__title"><a class="task__link" href="${escapeHtml(taskHref(id))}">${escapeHtml(t.title || '')}</a></p>
           <div class="task__meta">
             <span class="task__tag">${escapeHtml(t.version_id || '?')}</span>
             <span class="task__tag">${escapeHtml(t.kind || 'unclassified')}</span>

package/modules/hall-ui/public/style.css

@@ -2352,26 +2352,28 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
    light). The checked box is already an accent fill on every selected row;
    a second one per row is what made it shout. */
 .task--selected { border-color: var(--accent); }
-/* task 1869: the explicit open-detail hitbox — clicking the card body toggles
-   selection, so this is the only way from a claimable card into the overlay. */
-.task__open {
-  flex: none;
-  width: 26px;
-  height: 26px;
-  display: inline-flex;
-  align-items: center;
-  justify-content: center;
-  background: none;
-  border: none;
-  color: var(--ink-faint);
-  font-size: 12px;
-  line-height: 1;
-  cursor: pointer;
-  border-radius: var(--radius-sm);
-}
-.task__open:hover { color: var(--ink); background: var(--glass); }
 .task__body { min-width: 0; padding-top: 2px; }
 .task__title { font-weight: 400; font-size: 14.5px; line-height: 1.4; margin: 0 0 7px; color: var(--ink); }
+/* task 1003468 — the title is the way into the record. The card body toggles
+   selection (bulk claim has been the primary card interaction since 1759), so
+   the door has to be a control of its own — and task 1869's 26px ⤢ glyph in
+   --ink-faint was one the owner never found. A title is the door everywhere
+   else in the hall (.gr-title, the ledger rows), so this needs no teaching.
+   Once a control it owes the 24px floor on both axes: the padding buys the
+   height, the equal negative margin hands the room back so the card's line
+   does not re-space (the .scroll__lede a recipe above). Ink at rest, not the
+   link colour — sixty accent titles would take the board over. */
+.task__link {
+  display: inline-block;
+  color: inherit;
+  text-decoration: none;
+  min-width: 24px;
+  min-height: 24px;
+  padding: 2px 4px;
+  margin: -2px -4px;
+  overflow-wrap: anywhere;
+}
+.task__link:hover { color: var(--accent-ink); text-decoration: underline; text-underline-offset: 3px; }
 .task__meta { display: flex; flex-wrap: wrap; align-items: center; gap: 6px 8px; font-size: 12px; color: var(--ink-faint); margin-top: 0; }
 /* The label voice, outlined — a tag is a fact about the task, never a fill. */
 .task__tag {

package/modules/hall-ui/public/task-detail.js

@@ -655,11 +655,23 @@
   if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', boot);
   else boot();
 
+  // task 1003468 — the record's way back. A list that opens a task writes WHERE
+  // it was opened from onto the link (path + query + hash, so a goal's #/goal/N
+  // survives the trip) and task.js offers that as the exit. A query param, not
+  // memory: it has to outlive a reload and a copied link.
+  function taskHref(id) {
+    var from = location.pathname + location.search + location.hash;
+    return hallBase() + '/task/' + encodeURIComponent(id) + '?from=' + encodeURIComponent(from);
+  }
+
   window.OTBTaskDetail = {
     resolve: resolve,
-    // Every existing caller (Work Board's open-detail button + backlog rows,
-    // the Goals page) passes a TASK id — navigate straight to the real page
-    // rather than round-tripping through the hash redirect above.
-    open: function (id) { location.href = hallBase() + '/task/' + encodeURIComponent(id); },
+    // The link a list writes on a task title (the Work Board's cards, the goal
+    // pane's cards) — the same target open() navigates to.
+    href: taskHref,
+    // Every existing caller (the Work Board's backlog rows, the Goals page's
+    // ledger rows and read-only cards) passes a TASK id — navigate straight to
+    // the real page rather than round-tripping through the hash redirect above.
+    open: function (id) { location.href = taskHref(id); },
   };
 })();

package/modules/hall-ui/public/task.html

@@ -26,10 +26,12 @@
       <div class="page-head">
         <!-- task 2175: the breadcrumb sits in the page head, above the card, so a
              deep-linked visitor (this page is deliberately not in the nav) has a
-             way back before the task body has loaded. -->
+             way back before the task body has loaded. task 1003468: task.js
+             points it at where the reader came from (?from=, then the
+             referrer); /work is only the fallback it ships with. -->
         <div class="rec-crumb">
-          <a class="rec-back" href="/work">
-            <svg class="rec-back__ic" viewBox="0 0 16 16" aria-hidden="true"><path d="M9.4 3.6 5 8l4.4 4.4"/><path d="M5 8h7.2"/></svg>Back to tasks</a>
+          <a class="rec-back" id="task-back" href="/work">
+            <svg class="rec-back__ic" viewBox="0 0 16 16" aria-hidden="true"><path d="M9.4 3.6 5 8l4.4 4.4"/><path d="M5 8h7.2"/></svg><span id="task-back-label">Back to tasks</span></a>
           <p class="rec-sub" id="task-sub">Loading task</p>
         </div>
       </div>

package/modules/hall-ui/public/task.js

@@ -126,6 +126,59 @@
     return m ? m[1] : null;
   }
 
+  // task 1003468 — where the reader came from, so the record can send them back
+  // there rather than always to the work board. Precedence: `?from=` (written
+  // by the list that opened the record — a query param so it survives a reload
+  // and a copied link) → a same-origin referrer → the work board. A value is
+  // honoured only as a path on THIS host: one leading slash (a second is another
+  // origin), no backslash (browsers read `/\host` as `//host`), no whitespace,
+  // never the API and never this same record.
+  const EXIT_MAX_LEN = 2048;
+  function safeHallPath(v) {
+    if (typeof v !== 'string' || !v || v.length > EXIT_MAX_LEN) return null;
+    if (!/^\/(?!\/)/.test(v) || /[\\\s]/.test(v)) return null;
+    if (/^(\/builders)?\/(api|lib)\//.test(v)) return null;
+    if (v.split(/[?#]/)[0] === location.pathname) return null;
+    return v;
+  }
+  function referrerPath() {
+    let u;
+    try { u = new URL(document.referrer); } catch (_) { return null; }
+    if (u.origin !== location.origin) return null;
+    return safeHallPath(u.pathname + u.search + u.hash);
+  }
+  // "goal 1000081", "task 12", "the work board", "sessions" — said the way the
+  // sidebar says it, so the exit reads as a place and not as a URL.
+  function exitLabel(href) {
+    const rel = href.replace(/^\/builders(?=[/?#]|$)/, '');
+    let m;
+    if ((m = /#\/goal\/(\d+)/.exec(rel))) return `goal ${m[1]}`;
+    if ((m = /^\/(task|idea)\/(\d+)/.exec(rel))) return `${m[1]} ${m[2]}`;
+    const seg = (/^\/([a-z][a-z-]*)/.exec(rel) || [])[1];
+    if (!seg) return 'home';
+    if (seg === 'work') return 'the work board';
+    return seg.replace(/-/g, ' ');
+  }
+  function exitTarget() {
+    let from = null;
+    try { from = new URLSearchParams(location.search).get('from'); } catch (_) { /* no query */ }
+    const href = safeHallPath(from) || referrerPath() || `${hallBase()}/work`;
+    return { href, label: exitLabel(href) };
+  }
+  function exitLinkHtml() {
+    const { href, label } = exitTarget();
+    return `<a class="td-btn" href="${escapeHtml(href)}">Back to ${escapeHtml(label)}</a>`;
+  }
+  // The crumb in the page head is set before the fetch, so the way back exists
+  // in every state — loading, not found, failed — not just the happy one.
+  function applyExit() {
+    const { href, label } = exitTarget();
+    const back = $('#task-back');
+    if (back) back.href = href;
+    const lbl = $('#task-back-label');
+    if (lbl) lbl.textContent = `Back to ${label}`;
+  }
+
   function rankText(rr) {
     const r = (rr || 'xenos').toLowerCase();
     if (r === 'xenos') return 'any rank';
@@ -389,7 +442,7 @@
         <div class="rec-actions">
           ${lifecycle}
           <button class="td-btn" type="button" id="copy-prompt-btn">Copy prompt</button>
-          <a class="td-btn" href="${hallBase()}/work">Open the work board</a>
+          ${exitLinkHtml()}
         </div>
       </section>
     `);
@@ -434,7 +487,7 @@
       <p class="rec-kind">Task ${statusPill('no such task')}</p>
       <h1 class="rec-big" id="task-h">${escapeHtml(String(id))}, no such task</h1>
       <p class="rec-body">Tasks in the ledger are numbered separately from GitHub pull requests, so this may be a PR number rather than a task. The work board lists everything that does exist.</p>
-      <div class="rec-actions rec-sec"><a class="td-btn" href="${hallBase()}/work">Open the work board</a></div>
+      <div class="rec-actions rec-sec">${exitLinkHtml()}</div>
     `;
     const sub = $('#task-sub');
     if (sub) sub.textContent = 'Not found';
@@ -445,14 +498,15 @@
     if (body) body.innerHTML = `
       <p class="rec-kind">Task ${statusPill('feed unavailable')}</p>
       <h1 class="rec-big" id="task-h">Could not load ${escapeHtml(String(id))}</h1>
-      <p class="rec-body">The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment, or open the work board.</p>
-      <div class="rec-actions rec-sec"><a class="td-btn" href="${hallBase()}/work">Open the work board</a></div>
+      <p class="rec-body">The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment, or go back.</p>
+      <div class="rec-actions rec-sec">${exitLinkHtml()}</div>
     `;
     const sub = $('#task-sub');
     if (sub) sub.textContent = 'Could not load';
   }
 
   async function load() {
+    applyExit();
     const id = taskIdFromPath();
     if (!id) { renderNotFound(''); return; }
     try {

package/modules/hall-ui/public/task.states.json

@@ -8,6 +8,7 @@
   "ignoreConsole": ["/api/(gds|bongos)/", "\b401\b", "\b404\b", "Unauthorized", "Not Found", "load failed"],
   "states": {
     "record": { "auth": true, "actions": [["wait", 600]], "expect": { "visible": ["#task-body", "#copy-prompt-btn"] } },
+    "from-goal": { "auth": true, "url": "/task/2166?from=%2Fgoals%23%2Fgoal%2F1000081", "actions": [["wait", 600]], "expect": { "visible": ["#task-back", "#copy-prompt-btn"], "attr": [["#task-back", "href", "/goals#/goal/1000081"]] } },
     "missing": { "auth": true, "url": "/task/1003999", "actions": [["wait", 600]], "expect": { "visible": ["#task-h"] } }
   },
   "reducedMotion": { "auth": true, "actions": [["wait", 600]] }

package/modules/hall-ui/public/work.js

@@ -87,6 +87,9 @@
   const BACKLOG_LIMIT = 500;
   const fmtDate = (iso) => window.OTB.fmtDate(iso);
   const toast = (msg) => window.OTB.toast(msg, { duration: 2200, clear: true });
+  // task 1003468 — the record link a card's title carries; it names where it
+  // was opened from so the record can offer the way back (task-detail.js).
+  const taskHref = (id) => window.OTBTaskDetail.href(id);
   const curLabel = (caps) => { const l = (window.__BRANDING__ && window.__BRANDING__.currency && window.__BRANDING__.currency.label) || 'credits'; return caps ? l.charAt(0).toUpperCase() + l.slice(1) : l; };
 
   // Coarse relative time ("just now", "3h", "2d") for how long a claim's been
@@ -404,10 +407,9 @@
           <div class="task__id">
             <input type="checkbox" class="task__select" data-task-id="${t.id}" aria-label="Select task ${t.id} for bulk actions"${selected ? ' checked' : ''}>
             <span class="task__num">#${t.id}</span>
-            <button class="task__open" type="button" data-task-id="${t.id}" title="Open task details" aria-label="Open details for task ${t.id}">⤢</button>
           </div>
           <div class="task__body">
-            <p class="task__title">${escapeHtml(t.title)}</p>
+            <p class="task__title"><a class="task__link" href="${escapeHtml(taskHref(t.id))}">${escapeHtml(t.title)}</a></p>
             <div class="task__meta">
               <span class="task__tag">${escapeHtml(t.version_id || '?')}</span>
               <span class="task__tag">${escapeHtml(t.kind || 'unclassified')}</span>
@@ -1334,15 +1336,12 @@
       if (claimBtn) { doClaim(claimBtn.dataset.taskId, claimBtn); return; }
       const copyBtn = e.target.closest('.task__copy');
       if (copyBtn) { copyPromptForTask(copyBtn.dataset.taskId, copyBtn); return; }
-      // task 1869: the explicit open-detail hitbox — now the ONLY way to open
-      // the shared task-detail overlay from a claimable card (the card body
-      // itself toggles selection below, since multi-select is the primary card
-      // interaction now that 1759 shipped).
-      const openBtn = e.target.closest('.task__open');
-      if (openBtn && openBtn.dataset.taskId && window.OTBTaskDetail) {
-        window.OTBTaskDetail.open(openBtn.dataset.taskId);
-        return;
-      }
+      // task 1003468: the title is the way into the record — a real link, so
+      // the browser navigates (and a middle-click opens a tab); let it be.
+      // Task 1869's ⤢ glyph used to be the only door and the owner never found
+      // it; the card body still toggles selection below, since multi-select is
+      // the primary card interaction now that 1759 shipped.
+      if (e.target.closest('.task__link')) return;
       // task 1869: clicking the card anywhere else toggles its selection
       // checkbox (matches the affordance a checkbox already implies).
       const card = e.target.closest('.task');

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.475",
+  "version": "1.19.477",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.475",
+      "version": "1.19.477",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.475",
+  "version": "1.19.477",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -34,7 +34,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.475'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.477'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/hall_board_world.mjs

@@ -34,6 +34,7 @@ import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import fs from 'node:fs';
 import path from 'node:path';
+import vm from 'node:vm';
 import { fileURLToPath } from 'node:url';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
@@ -151,3 +152,71 @@ test('both re-skinned pages have a states file, so the floors are reproducible',
     assert.ok(Object.keys(json.states).length >= 4, `${f} renders more than the default state`);
   }
 });
+
+// ---- 7. the way INTO a record is the title ----------------------------------
+//
+// task 1003468. Since 1759/1869 the card body toggles selection (bulk claim is
+// the primary card interaction) and the only door into the record was a 26px ⤢
+// glyph in --ink-faint — one the owner never found. The title is now a real
+// link on both surfaces that render the card, the board and the goal pane, and
+// the glyph is gone. A title that becomes a control owes the 24px floor on both
+// axes, and the card's line must not re-space to pay for it. The link also
+// carries WHERE it was opened from, which is the record's way back (§10 of
+// tests/hall_record_world.mjs).
+
+const cardWorkJs = read('work.js');
+const cardGoalsRenderJs = read('goals-render.js');
+const cardGoalsPageJs = read('goals-page.js');
+const cardTaskDetailJs = read('task-detail.js');
+
+test('the task title is a link on the board and on the goal pane, and the ⤢ glyph is gone', () => {
+  for (const [name, src] of [['work.js', cardWorkJs], ['goals-render.js', cardGoalsRenderJs]]) {
+    assert.match(src, /<p class="task__title"><a class="task__link" href="\$\{escapeHtml\(taskHref\(/,
+      `${name} renders the title as the door`);
+    assert.doesNotMatch(src, /task__open/, `${name} still renders the glyph`);
+  }
+  assert.doesNotMatch(cardGoalsPageJs, /task__open/, 'goals-page.js still listens for the glyph');
+  assert.doesNotMatch(styleCss.replace(/\/\*[\s\S]*?\*\//g, ''), /\.task__open/, 'style.css still styles a glyph nothing renders');
+});
+
+test('both click handlers let the title link through instead of toggling selection under it', () => {
+  for (const [name, src] of [['work.js', cardWorkJs], ['goals-page.js', cardGoalsPageJs]]) {
+    assert.match(src, /if \(e\.target\.closest\('\.task__link'\)\) return;/, `${name} returns before the card-body toggle`);
+  }
+});
+
+test('.task__link buys the 24px floor on both axes and hands the room back', () => {
+  const link = rule(styleCss, '.task__link');
+  assert.ok(link, '.task__link has a rule');
+  assert.match(link, /display:\s*inline-block/, 'inline-block, so min-height applies to a run of text');
+  assert.match(link, /min-width:\s*24px/, 'width is half the floor');
+  assert.match(link, /min-height:\s*24px/, 'height is the other half');
+  const pad = /padding:\s*(\d+)px\s+(\d+)px/.exec(link);
+  const mar = /margin:\s*-(\d+)px\s+-(\d+)px/.exec(link);
+  assert.ok(pad && mar, 'padding and a negative margin are both declared');
+  assert.deepEqual([mar[1], mar[2]], [pad[1], pad[2]], 'the negative margin equals the padding, so the card does not re-space');
+  assert.match(link, /color:\s*inherit/, 'ink at rest — sixty accent titles would take the board over');
+});
+
+test('the link a list writes carries WHERE it was opened from — path, query and hash', () => {
+  const sandbox = {
+    window: { BongosClient: { createClient: () => ({}) }, addEventListener() {}, OTB: {} },
+    document: { readyState: 'complete', addEventListener() {}, getElementById() { return null; }, body: {} },
+    location: { hostname: 'cloudbongos.com', pathname: '/builders/goals', search: '', hash: '#/goal/1000081', href: '' },
+    sessionStorage: { getItem() { return null; }, setItem() {}, removeItem() {} },
+    console, setTimeout, clearTimeout, Date,
+  };
+  sandbox.globalThis = sandbox;
+  sandbox.window.location = sandbox.location;
+  vm.createContext(sandbox);
+  vm.runInContext(cardTaskDetailJs, sandbox, { filename: 'task-detail.js' });
+  const api = sandbox.window.OTBTaskDetail;
+  assert.equal(api.href('1003468'), '/builders/task/1003468?from=%2Fbuilders%2Fgoals%23%2Fgoal%2F1000081',
+    'the goal\'s #/goal/N rides the query, where a reload and a copied link keep it');
+  api.open('1003468');
+  assert.equal(sandbox.location.href, api.href('1003468'), 'open() navigates to the same link the title carries');
+  sandbox.location.hostname = 'builders.cloudbongos.com';
+  sandbox.location.pathname = '/work';
+  sandbox.location.hash = '#backlog';
+  assert.equal(api.href('7'), '/task/7?from=%2Fwork%23backlog', 'on the builders host the hall is mounted at /');
+});

package/tests/hall_record_world.mjs

@@ -259,7 +259,7 @@ test('the preview harness can reach both record pages', () => {
 // re-implementation of it.
 const TASK_SRC = read('task.js');
 
-function renderTask(task, { lastClaim = null, viewer = null, goal = null, status = 200 } = {}) {
+function renderTask(task, { lastClaim = null, viewer = null, goal = null, status = 200, search = '', referrer = '' } = {}) {
   const els = new Map();
   const makeEl = () => ({
     dataset: {}, style: {}, textContent: '', hidden: false, disabled: false, _html: '',
@@ -273,6 +273,7 @@ function renderTask(task, { lastClaim = null, viewer = null, goal = null, status
   let onReady = null;
   const documentObj = {
     title: 'Task — Cloud Bongos',
+    referrer,
     body: { dataset: { page: 'task' } },
     documentElement: { dataset: {}, style: {}, classList: { add() {}, remove() {} } },
     getElementById(id) { if (!els.has(id)) els.set(id, makeEl()); return els.get(id); },
@@ -302,17 +303,22 @@ function renderTask(task, { lastClaim = null, viewer = null, goal = null, status
       categoryChip: () => '',
       toast() {},
     },
-    location: { hostname: 'builders.cloudbongos.com', pathname: `/task/${task && task.id ? task.id : '1'}`, origin: 'https://builders.cloudbongos.com', assign() {} },
+    location: { hostname: 'builders.cloudbongos.com', pathname: `/task/${task && task.id ? task.id : '1'}`, search, origin: 'https://builders.cloudbongos.com', assign() {} },
     addEventListener() {},
     confirm: () => true,
     navigator: { clipboard: { writeText: async () => {} } },
   };
-  const sandbox = { window: windowObj, document: documentObj, location: windowObj.location, console, setTimeout, clearTimeout, Date };
+  const sandbox = { window: windowObj, document: documentObj, location: windowObj.location, console, setTimeout, clearTimeout, Date, URL, URLSearchParams };
   sandbox.globalThis = sandbox;
   vm.createContext(sandbox);
   vm.runInContext(TASK_SRC, sandbox, { filename: 'task.js' });
   assert.ok(onReady, 'task.js registers its DOMContentLoaded boot');
-  return { boot: onReady, html: () => documentObj.getElementById('task-body').innerHTML, sub: () => documentObj.getElementById('task-sub').textContent };
+  return {
+    boot: onReady,
+    html: () => documentObj.getElementById('task-body').innerHTML,
+    sub: () => documentObj.getElementById('task-sub').textContent,
+    el: (id) => documentObj.getElementById(id),
+  };
 }
 
 const settle = () => new Promise((r) => setTimeout(r, 0));
@@ -410,3 +416,76 @@ test('the idea grade badge IS the archetype pill, not a private copy of it', ()
   assert.doesNotMatch(decomment(ideaCss), /\.ig-grade(?![\w-])/,
     'idea.css carried a near-verbatim copy of .rec-pill down to the token triples — a hundred lines waiting to drift');
 });
+
+// ---- 10. the way out — the record exits to where it was opened from ----------
+//
+// task 1003468. task.js hardcoded "Open the work board" in three places and
+// task.html's crumb a fourth, so a builder who walked goal → task had only the
+// browser's own Back, and the two failure renders sent them somewhere they had
+// never been. The list that opens a record now writes `?from=` on the link
+// (task-detail.js's href()) and the record offers THAT as its exit — in the
+// crumb before the fetch lands, and in the actions row of every render
+// including the two failures. A same-origin referrer is the fallback for a link
+// written without it; the board is the fallback for a reader with no history.
+// Every value is honoured only as a path on this host.
+
+const FROM_GOAL = '?from=' + encodeURIComponent('/goals#/goal/1000081');
+
+test('opened from a goal, the record exits to that goal — crumb and actions row alike', async () => {
+  const r = renderTask(BASE_TASK, { search: FROM_GOAL });
+  await r.boot(); await settle();
+  assert.match(r.html(), /<a class="td-btn" href="\/goals#\/goal\/1000081">Back to goal 1000081<\/a>/);
+  assert.doesNotMatch(r.html(), /Open the work board/, 'the hardcoded exit is gone from the happy path');
+  assert.equal(r.el('task-back').href, '/goals#/goal/1000081', 'the crumb points at the goal');
+  assert.equal(r.el('task-back-label').textContent, 'Back to goal 1000081');
+});
+
+test('opened from the board, the exit is the board — on the tab it was opened from', async () => {
+  const r = renderTask(BASE_TASK, { search: '?from=' + encodeURIComponent('/work#backlog') });
+  await r.boot(); await settle();
+  assert.match(r.html(), /href="\/work#backlog">Back to the work board</);
+});
+
+test('without ?from=, a same-origin referrer is the way back', async () => {
+  const r = renderTask(BASE_TASK, { referrer: 'https://builders.cloudbongos.com/sessions?page=2' });
+  await r.boot(); await settle();
+  assert.match(r.html(), /href="\/sessions\?page=2">Back to sessions</);
+});
+
+test('a cross-origin referrer, a broken one, or none, falls back to the work board', async () => {
+  for (const referrer of ['', 'https://example.org/elsewhere', 'not a url']) {
+    const r = renderTask(BASE_TASK, { referrer });
+    await r.boot(); await settle();
+    assert.match(r.html(), /href="\/work">Back to the work board</, `referrer ${JSON.stringify(referrer)}`);
+    assert.equal(r.el('task-back').href, '/work');
+  }
+});
+
+test('a hostile or useless ?from= is refused, never followed', async () => {
+  const bad = [
+    '//evil.example', '/\\evil.example', 'javascript:alert(1)', 'https://evil.example/x',
+    '/api/gds/auth/web/callback', '/lib/bongos-client.js',
+    '/task/1003305',          // this same record — a loop, not a way back
+    'work', '/ work', '',
+  ];
+  for (const from of bad) {
+    const r = renderTask(BASE_TASK, { search: '?from=' + encodeURIComponent(from) });
+    await r.boot(); await settle();
+    assert.match(r.html(), /href="\/work">Back to the work board</, `from=${JSON.stringify(from)}`);
+    assert.equal(r.el('task-back').href, '/work', `the crumb refuses from=${JSON.stringify(from)} too`);
+  }
+});
+
+test('the two honest failures exit the same way the record does', async () => {
+  for (const status of [404, 500]) {
+    const r = renderTask(BASE_TASK, { status, search: FROM_GOAL });
+    await r.boot(); await settle();
+    assert.match(r.html(), /href="\/goals#\/goal\/1000081">Back to goal 1000081</, `status ${status}`);
+    assert.doesNotMatch(r.html(), /Open the work board/, `status ${status} still hardcodes the board`);
+  }
+});
+
+test('the crumb is an element task.js can point, with its label apart from the icon', () => {
+  assert.match(taskHtml, /<a class="rec-back" id="task-back" href="\/work">/, 'the static href is the fallback the page ships with');
+  assert.match(taskHtml, /<span id="task-back-label">Back to tasks<\/span>/, 'the label is its own node, so the icon survives a relabel');
+});