@bongos/core 1.19.489 → 1.19.491

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.489",
-  "core_contract": "1.19.489",
-  "source_commit": "3506481b0b600021907f5446133f6d663e294300",
+  "core_version": "1.19.491",
+  "core_contract": "1.19.491",
+  "source_commit": "7c6f9058ca961e49439235e4aec6dd39a3ffe68a",
   "source_ref": "HEAD",
-  "built_at": "2026-09-02T21:52:48.302Z",
+  "built_at": "2026-09-02T22:49:35.926Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 422,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2301,
-  "tree_sha256": "2c5e88df303f5244bd7b5940fab359f3e11425e9e63a9f0ab6f83de29087057d",
+  "tree_sha256": "f8d28b162d783a50b0d62ba88bf1ac779f94f646c0b53e4d58b7553bc1385804",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1707,12 +1707,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "771d81a06ad4902935fc2efcc600928cae46beb88a444b0a1014a864bc6e1ff6"
+      "sha256": "86eb1bbcd8457069f957c6d46244481450e177ead7dff06bfb4db0e81eab7ee3"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "d81d1e8c002faec92f9c2d7014ee0ba5a08251a0036c9a781c56e5dbc65c6036"
+      "sha256": "0fe9dc2df8e22113b9d5ae7d18b762be3e0f05d546989905e6ba2cd37c72049b"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2162,7 +2162,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "77ac9fa31b1d7a011d9a9a886c2d31075357cc091f2362b0cce9a7842a5eac76"
+      "sha256": "946a1c2234ae65a5474c6c60871c5c82e0ca9e3726cf02f099b7c43fa3c22c02"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4472,7 +4472,7 @@
     {
       "path": "modules/hall-ui/public/profile-charts.js",
       "mode": "0000644",
-      "sha256": "eb09aa6816138d934a117577b4d2a2a5ca662bc265b4c3ef98afae965b947f48"
+      "sha256": "865df71a66dd944006b01dfb1317778a1d733d9320b4486efd8ee1ed3ea76f19"
     },
     {
       "path": "modules/hall-ui/public/profile-connections.js",
@@ -4497,7 +4497,7 @@
     {
       "path": "modules/hall-ui/public/profile.js",
       "mode": "0000644",
-      "sha256": "561186d432caf2ed6ca3c713da0211571d6fb622370865e92c31d0777b8cc012"
+      "sha256": "15d0f56fa577161ed5ad78ae4117e6e8324f9b35cf7f2ffff51d8fc7bed4e382"
     },
     {
       "path": "modules/hall-ui/public/profile.states.json",
@@ -6797,12 +6797,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "d03ddd3947795df0340ece2ac8c1b7e63fc042eb60f5d042a77a1f0bdd66a905"
+      "sha256": "ca75c416a0104e2e57e5b9c45d2b74b1c6ddbf5de524ff487df095134634b53d"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "b03444ad929ff36ff840783ccfc753dd9fed6a1d973cb6eb66be8851fb62afbb"
+      "sha256": "91a2d397dca70394d2ca4d7f40e942f18672449781d8f08446ab8fdd8ddd9437"
     },
     {
       "path": "public-docs/index.html",
@@ -8087,12 +8087,12 @@
     {
       "path": "scripts/hall-preview/refresh-fixtures.js",
       "mode": "0000644",
-      "sha256": "b5819ccfabd209ced41613c6f9109faa2723a49c017c115a27383d907f777f3b"
+      "sha256": "7f4c827ec125a719686f71b0d8abf5177062fef9d06b78fabe2993871f69c964"
     },
     {
       "path": "scripts/hall-preview/server.js",
       "mode": "0000644",
-      "sha256": "fb7e575fe38ea1cc9808eaece549670d6a3cbc6bb0ff6258dfc1ca00bfbba726"
+      "sha256": "8f2b9f348d7372db1a5c9be3cdd9c14d48f20884b3f816b664ff3e590fa3b951"
     },
     {
       "path": "scripts/migrate.sh",
@@ -8462,7 +8462,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "5f6456c747feac5626b882b25a9686a1038fe13aca4b3418e7c00e9086fafd11"
+      "sha256": "ad32edff429153aa8a1231a90be444f349bdbcd38b4940011a10f41c86b2e2fb"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -9887,7 +9887,7 @@
     {
       "path": "tests/hall_profile_world.mjs",
       "mode": "0000644",
-      "sha256": "1497c135cf064a1465290a319391714608f2c33b1cd6f9db7b43f6b17cad7fbe"
+      "sha256": "9e5047b39d55875e167c992157c6c04a9a766ec331c1a3bf343fe7ea194a8309"
     },
     {
       "path": "tests/hall_reading_world.mjs",

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1589 strings** across 3 surfaces · 1380 distinct pieces of copy · 1589 certain, 0 heuristic · 150 shown in more than one place.
+**1590 strings** across 3 surfaces · 1381 distinct pieces of copy · 1590 certain, 0 heuristic · 150 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 73 | 1146 |
+| `builders-hall` | `modules/hall-ui/public` | 73 | 1147 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 98 |
 | `landing` | `modules/public-landing/public` | 5 | 345 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `563d29ed86d8` | 2x | Bulk actions | modules/hall-ui/public/goals.html:172, modules/hall-ui/public/work.html:129 |
 | … | | _110 more in the JSON registry_ | |
 
-## `builders-hall` — 1146 strings
+## `builders-hall` — 1147 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -284,7 +284,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:187` |
 | `7775fec0fa85` | certain | Could not load sessions. | `modules/hall-ui/public/sessions.js:226` |
 | `b2147cc90e36` | certain | Could not load the idea template. Reload, or file from the terminal with capture.js. | `modules/hall-ui/public/ideas.js:438` |
-| `7604af13c40e` | certain | Could not load the profile. | `modules/hall-ui/public/profile.js:758` |
+| `7604af13c40e` | certain | Could not load the profile. | `modules/hall-ui/public/profile.js:759` |
 | `8b69e445592a` | certain | Could not load the question labels; showing the answers as stored. | `modules/hall-ui/public/idea.js:244` |
 | `edd5bafbe075` | certain | Could not load the queue just now. | `modules/hall-ui/public/ideas.js:387` |
 | `02bb0570996a` | certain | Could not load the ranks. | `modules/hall-ui/public/ranks.js:197` |
@@ -533,7 +533,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7a239a17afc8` | certain | Loading your preferences… | `modules/hall-ui/public/settings.html:32` |
 | `04df1bd30129` | certain | Loading your rank… | `modules/hall-ui/public/ranks.html:30` |
 | `c27711f9eb4d` | certain | Locked until you reach the end of the article above. | `modules/hall-ui/public/primer.html:103` |
-| `4017ee030bc2` | certain | Lookback window | `modules/hall-ui/public/profile-charts.js:356` |
+| `4017ee030bc2` | certain | Lookback window | `modules/hall-ui/public/profile-charts.js:410` |
 | `a93ca2841b96` | certain | Mac (Intel) | `modules/hall-ui/public/hall-render.js:744` |
 | `06b4ede3fb58` | certain | Machine principals | `modules/hall-ui/public/government.html:124` |
 | `6b3d660e0e31` | certain | Map view | `modules/hall-ui/public/atlas.html:46` |
@@ -1004,7 +1004,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `181d339c9318` | certain | and build right here in the browser — no remote control needed. Either way, reopening the online terminal late | `modules/hall-ui/public/hall-render.js:744` |
 | `bc960f460250` | certain | and install dependencies ( | `modules/hall-ui/public/hall-render.js:785` |
 | `b867876e8b6c` | certain | and press Enter. | `modules/hall-ui/public/hall-render.js:744` |
-| `b4033000c537` | certain | as a table | `modules/hall-ui/public/profile-charts.js:191` |
+| `b4033000c537` | certain | as a table | `modules/hall-ui/public/profile-charts.js:204` |
 | `d7c511423bc0` | certain | as configuration: {…} | `modules/hall-ui/public/government.js:707` |
 | `09db3fd4355b` | certain | asked by {…} | `modules/hall-ui/public/collab.js:69` |
 | `63bd14f73960` | certain | author trusted | `modules/hall-ui/public/gate.js:141` |
@@ -1081,6 +1081,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3916a3dc8e98` | certain | not started | `modules/hall-ui/public/roadmap.js:108` |
 | `3916a3dc8e98` | certain | not started | `modules/hall-ui/public/roadmap.js:263` |
 | `b5567b42fa52` | certain | not yet | `modules/hall-ui/public/not-ready.html:25` |
+| `8ca0a499ec86` | certain | nothing recorded yet · {…} | `modules/hall-ui/public/profile-charts.js:222` |
 | `e2c643fbf4d6` | certain | npm install | `modules/hall-ui/public/hall-render.js:785` |
 | `e90b5601ce16` | certain | objected to | `modules/hall-ui/public/government.js:824` |
 | `351d56b80a6c` | certain | of all in-flight tasks shipped | `modules/hall-ui/public/roadmap.js:273` |
@@ -1107,8 +1108,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9bec9eb4829e` | certain | scope: {…} | `modules/hall-ui/public/goals-render.js:774` |
 | `a6f55d7aa6f7` | certain | shipped (live) | `modules/hall-ui/public/roadmap.js:273` |
 | `026ba1289d4d` | certain | shipped · | `modules/hall-ui/public/goals-render.js:696` |
-| `ec6d8c900bc8` | certain | sign in | `modules/hall-ui/public/profile-charts.js:418` |
-| `ec6d8c900bc8` | certain | sign in | `modules/hall-ui/public/profile-charts.js:430` |
+| `ec6d8c900bc8` | certain | sign in | `modules/hall-ui/public/profile-charts.js:472` |
+| `ec6d8c900bc8` | certain | sign in | `modules/hall-ui/public/profile-charts.js:484` |
 | `0215b2cdca8c` | certain | submit for review | `modules/hall-ui/public/modules.js:132` |
 | `da30b952a60b` | certain | system / unattributed | `modules/hall-ui/public/goals-page.js:249` |
 | `da30b952a60b` | certain | system / unattributed | `modules/hall-ui/public/work.js:498` |
@@ -1121,7 +1122,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `bd3402efa59e` | certain | task{…} shipped | `modules/hall-ui/public/goals-render.js:737` |
 | `95854f8315ca` | certain | the page everyone else reads | `modules/hall-ui/public/profile.html:32` |
 | `632527db5bca` | certain | this session | `modules/hall-ui/public/settings-sessions.js:44` |
-| `130c3731ad83` | certain | this week | `modules/hall-ui/public/profile-charts.js:273` |
+| `130c3731ad83` | certain | this week | `modules/hall-ui/public/profile-charts.js:298` |
 | `ee431f143549` | certain | three tasks | `modules/hall-ui/public/not-ready.html:33` |
 | `d70c287bcd7f` | certain | to authenticate this machine, then | `modules/hall-ui/public/hall-render.js:785` |
 | `65702f92a8c8` | certain | to claim your first task. | `modules/hall-ui/public/hall-render.js:785` |
@@ -1190,8 +1191,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2a2728a4ec4f` | certain | {…}% of tasks complete | `modules/hall-ui/public/roadmap.js:70` |
 | `15e545eb3ce2` | certain | {…}, no such task | `modules/hall-ui/public/task.js:505` |
 | `c43050b62297` | certain | {…}/100 complete | `modules/hall-ui/public/idea.js:87` |
-| `afea9a3a8e9e` | certain | {…}: {…} as of today; arrow keys walk the days | `modules/hall-ui/public/profile-charts.js:223` |
-| `b3d764eaf258` | certain | {…}: {…} in {…} weeks; arrow keys walk the weeks | `modules/hall-ui/public/profile-charts.js:273` |
+| `afea9a3a8e9e` | certain | {…}: {…} as of today; arrow keys walk the days | `modules/hall-ui/public/profile-charts.js:248` |
+| `b3d764eaf258` | certain | {…}: {…} in {…} weeks; arrow keys walk the weeks | `modules/hall-ui/public/profile-charts.js:298` |
 | `8e8c7da4f7f5` | certain | {…}criteria met · awaiting review | `modules/hall-ui/public/goals-render.js:155` |
 | `1e275ee0299c` | certain | {…}s only | `modules/hall-ui/public/government.js:1121` |
 | `499916045b19` | certain | {…}{…} asks to join | `modules/hall-ui/public/goal-inbox.js:69` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1589,
-    "unique_ids": 1380,
-    "certain": 1589,
+    "strings": 1590,
+    "unique_ids": 1381,
+    "certain": 1590,
     "heuristic": 0,
     "duplicate_ids": 150
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 73,
-      "strings": 1146
+      "strings": 1147
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -1443,8 +1443,8 @@
       "text": "sign in",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/profile-charts.js:418",
-        "modules/hall-ui/public/profile-charts.js:430"
+        "modules/hall-ui/public/profile-charts.js:472",
+        "modules/hall-ui/public/profile-charts.js:484"
       ]
     },
     {
@@ -3422,7 +3422,7 @@
       "surface": "builders-hall",
       "text": "Could not load the profile.",
       "file": "modules/hall-ui/public/profile.js",
-      "line": 758,
+      "line": 759,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -5663,7 +5663,7 @@
       "surface": "builders-hall",
       "text": "Lookback window",
       "file": "modules/hall-ui/public/profile-charts.js",
-      "line": 356,
+      "line": 410,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9902,7 +9902,7 @@
       "surface": "builders-hall",
       "text": "as a table",
       "file": "modules/hall-ui/public/profile-charts.js",
-      "line": 191,
+      "line": 204,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10590,6 +10590,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "8ca0a499ec86",
+      "surface": "builders-hall",
+      "text": "nothing recorded yet · {…}",
+      "file": "modules/hall-ui/public/profile-charts.js",
+      "line": 222,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "e2c643fbf4d6",
       "surface": "builders-hall",
@@ -10829,7 +10838,7 @@
       "surface": "builders-hall",
       "text": "sign in",
       "file": "modules/hall-ui/public/profile-charts.js",
-      "line": 418,
+      "line": 472,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10838,7 +10847,7 @@
       "surface": "builders-hall",
       "text": "sign in",
       "file": "modules/hall-ui/public/profile-charts.js",
-      "line": 430,
+      "line": 484,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10955,7 +10964,7 @@
       "surface": "builders-hall",
       "text": "this week",
       "file": "modules/hall-ui/public/profile-charts.js",
-      "line": 273,
+      "line": 298,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11576,7 +11585,7 @@
       "surface": "builders-hall",
       "text": "{…}: {…} as of today; arrow keys walk the days",
       "file": "modules/hall-ui/public/profile-charts.js",
-      "line": 223,
+      "line": 248,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11585,7 +11594,7 @@
       "surface": "builders-hall",
       "text": "{…}: {…} in {…} weeks; arrow keys walk the weeks",
       "file": "modules/hall-ui/public/profile-charts.js",
-      "line": 273,
+      "line": 298,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1415,5 +1415,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.487 with no explicit bump. run 33686951657. (task 1002620)
   1.19.489 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.488 with no explicit bump. run 33687461982. (task 1002620)
+  1.19.490 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.489 with no explicit bump. run 33691767867. (task 1002620)
+  1.19.491 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.490 with no explicit bump. run 33692191645. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/profile-charts.js

@@ -15,20 +15,30 @@
 //
 // Data: GET /builders/:id/activity?section=tasks — any signed-in viewer, any
 // builder; paged, followed to `total` up to MAX_ROWS. Its rows carry
-// shipped_at, credits_awarded (credits_reward as the estimate when unpaid) and
-// discipline, so all three public series derive client-side. The ship rate is
-// GET /analytics/builder/:id, own-or-archon; it is asked for only when the
-// viewer IS the builder and renders nothing elsewhere — never a 403 toast.
+// shipped_at and discipline, so the works and craft series derive client-side.
+// The drachmae series is the CREDITS LEDGER (task 1003491): GET /me/credits on
+// your own profile, GET /builders/:id/credits on another's (builder.roster.read,
+// metic+), each row a `delta` at `recorded_at`, cumulated by day — the curve
+// that ends at the headline balance. On a cost-plus instance (ADR 0146) the
+// per-task award is structurally 0 and the pay is the session token reward,
+// which only the ledger records; a series summed from per-task awards went
+// flat the day per-task payout stopped. A viewer the ledger refuses (403)
+// gets the activity rows' credits_reward ESTIMATE instead, cumulated and
+// labelled so. The ship rate is GET /analytics/builder/:id, own-or-archon; it
+// is asked for only when the viewer IS the builder and renders nothing
+// elsewhere — never a 403 toast.
 //
 // Exposed as window.OTBProfileCharts: render({ api, API, builderId, selfId,
 // signedIn, now? }) plus the pure series builders (cumulativeByDay, craftMix,
-// weeklyBuckets, creditsOf, clipToWindow) so tests can pin the arithmetic
+// weeklyBuckets, estimateOf, clipToWindow) so tests can pin the arithmetic
 // without a DOM.
 (() => {
   'use strict';
 
   const MAX_ROWS = 500;   // five pages: a prolific builder's whole record, bounded
   const PAGE = 100;
+  const LEDGER_PAGE = 200;        // the ledger route's MAX_LIMIT
+  const LEDGER_MAX_ROWS = 2000;   // ten pages; the busiest builder's ledger is ~600 rows
   const DAY = 86400000;
   const WEEK = 7 * DAY;
   const MIX_MAX = 7;      // bars past this fold into "other" — never an eighth hue
@@ -72,24 +82,27 @@
 
   // ---- series ---------------------------------------------------------------
 
-  // What a shipped row paid. credits_awarded is the ledger; when it is absent
-  // (not yet paid, or a cost-plus instance that never fills it) the estimate
-  // stands in, and the caller is told so it can say "estimated" (ADR 0146).
-  function creditsOf(row) {
-    const a = row.credits_awarded;
-    if (a !== null && a !== undefined && Number.isFinite(Number(a))) return { value: Number(a), estimated: false };
-    const e = Number(row.credits_reward);
-    return { value: Number.isFinite(e) ? e : 0, estimated: true };
+  // The ESTIMATE of what a shipped row pays — credits_reward, the figure the
+  // task carried before it shipped. The FALLBACK only: the drachmae series is
+  // the ledger wherever the viewer may read it, and this stands in, labelled
+  // "estimated" (ADR 0146), when the ledger answers 403. Never the per-task
+  // award column — on a cost-plus instance it is 0 for every task, and summing
+  // it is the flatline this file was fixed for.
+  function estimateOf(row) {
+    const e = Number(row && row.credits_reward);
+    return Number.isFinite(e) ? e : 0;
   }
 
   // rows → [{ day, value }] ascending by day, value cumulative over the WHOLE
-  // record. Two ships on one day are one point; a row with no parsable
-  // shipped_at is skipped, not zeroed. The lookback clips this for drawing
-  // (clipToWindow) rather than re-accumulating, so the running total stays true.
-  function cumulativeByDay(rows, valueOf) {
+  // record. dateOf names the row's timestamp: shipped_at for activity rows (the
+  // default), recorded_at for ledger rows. Two entries on one day are one
+  // point; a row with no parsable date is skipped, not zeroed. The lookback
+  // clips this for drawing (clipToWindow) rather than re-accumulating, so the
+  // running total stays true.
+  function cumulativeByDay(rows, valueOf, dateOf = (r) => r && r.shipped_at) {
     const byDay = new Map();
     for (const r of rows || []) {
-      const t = Date.parse(r && r.shipped_at);
+      const t = Date.parse(dateOf(r));
       if (!Number.isFinite(t)) continue;
       const d = midnight(t);
       byDay.set(d, (byDay.get(d) || 0) + Number(valueOf(r)) || 0);
@@ -201,6 +214,18 @@
   // then runs flat out to the window's end. The first drawn point enters at its
   // running height (clipToWindow), the last value carries the only direct label.
   function timeChart({ id, title, points, valueText, footer, now, windowStart }) {
+    // A series with nothing in it (a ledger no drachma has reached yet) is one
+    // honest line under the title, not a crash on points[0].
+    if (!points.length) {
+      return {
+        id,
+        html: `<figure class="pchart" id="${esc(id)}">
+      <figcaption class="pchart__title">${esc(title)}</figcaption>
+      <p class="pchart__foot">nothing recorded yet · ${esc(footer)}</p>
+    </figure>`,
+        wire() {},
+      };
+    }
     const today = midnight(now);
     const x0 = windowStart != null ? windowStart : points[0].day;
     const x1 = Math.max(today, x0 + WEEK);
@@ -335,6 +360,35 @@
     return { signedOut: false, rows };
   }
 
+  // The credits ledger, first page to `total`, bounded: /me/credits on your own
+  // profile, /builders/:id/credits on another's. The SERVER decides who may
+  // read another builder's ledger (builder.roster.read is a delegable atom, so
+  // no rank is hard-coded here): a refusal comes back as `denied` and the
+  // caller falls back to the estimate rather than the section failing. Any
+  // other failure reads the same way — a ledger the page could not read is
+  // still a ledger it must not pretend to have.
+  async function fetchLedger(api, API, builderId, isOwn) {
+    const base = isOwn
+      ? `${API}/me/credits`
+      : `${API}/builders/${encodeURIComponent(builderId)}/credits`;
+    const rows = [];
+    let total = Infinity;
+    try {
+      while (rows.length < Math.min(total, LEDGER_MAX_ROWS)) {
+        const res = await api.request('GET', `${base}?limit=${LEDGER_PAGE}&offset=${rows.length}`);
+        if (!res.ok) return { denied: true, rows: [] };
+        const page = (res.data && res.data.rows) || [];
+        total = Number(res.data && res.data.page && res.data.page.total) || 0;
+        rows.push(...page);
+        if (!page.length) break;
+      }
+    } catch (err) {
+      console.error('[profile] credits ledger failed', err);
+      return { denied: true, rows: [] };
+    }
+    return { denied: false, rows };
+  }
+
   async function fetchOwnRate(api, API, builderId, days) {
     try {
       const q = days ? `?days=${encodeURIComponent(days)}` : '';
@@ -360,7 +414,7 @@
 
   // Draw every figure for one lookback window into #charts-grid. Split from
   // render() so the range buttons can re-draw without re-fetching the record.
-  async function draw({ api, API, builderId, isOwn, rows, now, rangeId }) {
+  async function draw({ api, API, builderId, isOwn, rows, paidFull, estimated, now, rangeId }) {
     const grid = $('#charts-grid');
     if (!grid) return;
     const range = RANGES.find((r) => r.id === rangeId) || RANGES[RANGES.length - 1];
@@ -369,8 +423,6 @@
     const span = range.days == null ? 'all time' : `the last ${range.label}`;
 
     const worksFull = cumulativeByDay(rows, () => 1);
-    let estimated = false;
-    const paidFull = cumulativeByDay(rows, (r) => { const c = creditsOf(r); estimated = estimated || c.estimated; return c.value; });
     const works = clipToWindow(worksFull, windowStart);
     const paid = clipToWindow(paidFull, windowStart);
     const mix = craftMix(inWindow);
@@ -384,7 +436,9 @@
       timeChart({
         id: 'chart-drachmae', title: `${curLabel(true)} earned`, points: paid, now, windowStart,
         valueText: (v) => `${fmtNum(v)} ${curLabel()}`,
-        footer: `from shipped work${estimated ? ' · some still estimated' : ''}`,
+        footer: estimated
+          ? `estimated from shipped work, not the ledger · ${span}`
+          : `${fmtNum(paidFull.length ? paidFull[paidFull.length - 1].value : 0)} paid, from the credits ledger · ${span}`,
       }),
       mixChart({
         id: 'chart-mix', title: 'Works by craft', mix,
@@ -436,6 +490,15 @@
       return;
     }
 
+    // The drachmae series: the ledger wherever the viewer may read it, the
+    // estimate (labelled) where the server refuses. Fetched once, like the
+    // record; the lookback only clips it.
+    const ledger = await fetchLedger(api, API, builderId, isOwn);
+    const estimated = ledger.denied;
+    const paidFull = estimated
+      ? cumulativeByDay(rows, estimateOf)
+      : cumulativeByDay(ledger.rows, (r) => r && r.delta, (r) => r && r.recorded_at);
+
     // The lookback control. Its choice is remembered per viewer; changing it
     // re-draws from the rows already in hand — the record is not re-fetched.
     let rangeId = readRange();
@@ -451,11 +514,11 @@
           b.classList.toggle('is-active', on);
           b.setAttribute('aria-pressed', String(on));
         });
-        draw({ api, API, builderId, isOwn, rows, now, rangeId });
+        draw({ api, API, builderId, isOwn, rows, paidFull, estimated, now, rangeId });
       });
     }
-    await draw({ api, API, builderId, isOwn, rows, now, rangeId });
+    await draw({ api, API, builderId, isOwn, rows, paidFull, estimated, now, rangeId });
   }
 
-  window.OTBProfileCharts = { render, cumulativeByDay, craftMix, weeklyBuckets, creditsOf, clipToWindow };
+  window.OTBProfileCharts = { render, cumulativeByDay, craftMix, weeklyBuckets, estimateOf, clipToWindow };
 })();

package/modules/hall-ui/public/profile.js

@@ -653,8 +653,9 @@
     showMessage(`${name} — ${rankLabel(normalizeRank(builder.rank))} · ${fmtNum(shipped)} work${shipped === 1 ? '' : 's'} shipped`);
     renderHead(builder);
     renderNumbers(data.shipped_count, data.achievements);
-    // The charts (task 1003489) read the activity route, so they need the same
-    // session the ledgers do; on the viewer's own profile they add the pace.
+    // The charts (task 1003489) read the activity route and the credits ledger
+    // (task 1003491), so they need the same session the ledgers do; on the
+    // viewer's own profile they add the pace.
     if (window.OTBProfileCharts) window.OTBProfileCharts.render({ api, API, builderId: builder.id, selfId, signedIn: selfId != null });
     renderCrossProject(data, selfId);
     renderAchievements(data.achievements);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.489",
+  "version": "1.19.491",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.489",
+      "version": "1.19.491",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.489",
+  "version": "1.19.491",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/hall-preview/refresh-fixtures.js

@@ -17,8 +17,14 @@ const FIXTURES = path.join(__dirname, 'fixtures');
 
 // [api path (no /api prefix, no query), fixture name, optional trim fn]
 const trimList = (key, n) => (d) => (Array.isArray(d?.[key]) ? { ...d, [key]: d[key].slice(0, n) } : d);
+// A paged ledger is one page of a longer record, and the harness ignores query
+// strings — so a fixture whose page.total exceeds its rows would send the
+// profile charts' pager back for the same page until "total". Pin total to
+// what the snapshot holds.
+const selfPaged = (d) => (Array.isArray(d?.rows) && d.page ? { ...d, page: { ...d.page, total: d.rows.length } } : d);
 const SNAPSHOTS = [
   ['me', 'me'],
+  ['me/credits?limit=200', 'me__credits', selfPaged],
   ['me/recent-ships?limit=30', 'me__recent-ships'],
   ['achievements', 'achievements'],
   ['versions', 'versions'],

package/scripts/hall-preview/server.js

@@ -111,6 +111,9 @@ const FIXTURE_FALLBACKS = [
   [/^analytics\/builder\/\d+$/, 'analytics__builder'],
   [/^builders\/\d+\/active-claims$/, 'builders__active-claims'],
   [/^builders\/\d+\/profile$/, 'builders__profile'],
+  // the profile's drachmae chart reads the credits ledger (task 1003491): one
+  // ledger fixture serves your own (/me/credits, exact match) and any other id.
+  [/^builders\/\d+\/credits$/, 'me__credits'],
   // the profile's per-craft activity log (task 1003281). One fixture per SECTION
   // rather than per id, because the section is what changes the row shape; the
   // craft and the page window are query string, which fixture matching ignores.

package/src/module-api.js

@@ -45,7 +45,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.489'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.491'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/hall_profile_world.mjs

@@ -17,10 +17,16 @@
 //     public latest-works strip and the cross-project record; the craft
 //     ledgers are one key over, so the first screen is a screen.
 //   * THE CHARTS ARE ARITHMETIC FIRST. cumulativeByDay folds two ships on one
-//     day into one point and accumulates; craftMix folds the tail past seven
-//     into "other" rather than minting an eighth hue; weeklyBuckets is a time
-//     axis (every week present, empty or not); creditsOf falls back to the
-//     estimate and SAYS so.
+//     day into one point and accumulates, over whichever timestamp the caller
+//     names; craftMix folds the tail past seven into "other" rather than
+//     minting an eighth hue; weeklyBuckets is a time axis (every week present,
+//     empty or not).
+//   * DRACHMAE COME FROM THE LEDGER (task 1003491). The earned line is the
+//     credits ledger — /me/credits on your own profile, /builders/:id/credits
+//     on another's — `delta` cumulated by `recorded_at`, so it ends at the
+//     balance. Per-task credits_awarded is 0 on a cost-plus instance and is no
+//     longer read at all (the owner's chart had flatlined since July on it).
+//     A viewer the ledger refuses gets the credits_reward estimate, labelled.
 //   * NO NUMBER IS PICTURE-ONLY. Every time chart carries a table twin with a
 //     row per plotted day; the readout is written with textContent.
 //   * OWN-ONLY MEANS OWN-ONLY. /analytics/builder/:id is asked for only when
@@ -163,14 +169,29 @@ test('cumulativeByDay folds a day\'s ships into one point and accumulates, skipp
     { day: day('2026-08-10'), value: 3 },
   ]);
   assert.deepEqual(plain(C.cumulativeByDay([], () => 1)), []);
+  // the ledger's rows are stamped recorded_at, not shipped_at — the caller names the timestamp
+  const ledger = [
+    { delta: 12, recorded_at: '2026-08-02T22:17:01Z' },
+    { delta: 39, recorded_at: '2026-08-01T21:52:51Z' },
+    { delta: 19, recorded_at: '2026-08-01T22:05:00Z' },
+  ];
+  assert.deepEqual(plain(C.cumulativeByDay(ledger, (r) => r.delta, (r) => r.recorded_at)), [
+    { day: day('2026-08-01'), value: 58 },
+    { day: day('2026-08-02'), value: 70 },
+  ], 'newest-first ledger rows still accumulate oldest-first, by their own timestamp');
 });
 
-test('creditsOf pays the ledger, and falls back to the estimate while saying so', () => {
+test('estimateOf is the credits_reward figure and nothing else — the per-task award column is not read anywhere', () => {
   const C = bootCharts();
-  assert.deepEqual(plain(C.creditsOf({ credits_awarded: 58, credits_reward: 60 })), { value: 58, estimated: false });
-  assert.deepEqual(plain(C.creditsOf({ credits_awarded: 0, credits_reward: 60 })), { value: 0, estimated: false });
-  assert.deepEqual(plain(C.creditsOf({ credits_awarded: null, credits_reward: 60 })), { value: 60, estimated: true });
-  assert.deepEqual(plain(C.creditsOf({})), { value: 0, estimated: true });
+  assert.equal(C.estimateOf({ credits_awarded: 58, credits_reward: 60 }), 60, 'the estimate ignores what was awarded');
+  assert.equal(C.estimateOf({ credits_awarded: 0, credits_reward: 45 }), 45, 'a cost-plus 0 award does not zero the estimate');
+  assert.equal(C.estimateOf({}), 0);
+  assert.equal(C.estimateOf(null), 0);
+  assert.equal(C.creditsOf, undefined, 'the old ledger-or-estimate picker is gone');
+  // The whole reason for task 1003491: on a cost-plus instance every task's
+  // credits_awarded is 0, so a drachmae series summed from it flatlines the day
+  // per-task payout stops. The column must not be read by the charts at all.
+  assert.ok(!chartsJs.includes('credits_awarded'), 'profile-charts.js never mentions credits_awarded');
 });
 
 test('craftMix sorts by count and folds the tail past seven into "other" — never an eighth hue', () => {
@@ -216,7 +237,10 @@ test('clipToWindow (the lookback) enters the window at the running height, not a
 
 // ---- the charts: what render asks for and draws ---------------------------------
 
-function bootRender({ rows, status = 200, analytics = null }) {
+// `ledger` is what the credits routes answer: an array of rows (paged by the
+// route's 200 in the real shape, { rows, page: { total } }), or 'denied' for the
+// 403 a viewer without builder.roster.read gets on someone else's ledger.
+function bootRender({ rows, status = 200, analytics = null, ledger = [] }) {
   const requests = [];
   const mount = { innerHTML: '', querySelector: () => null };
   const controls = { innerHTML: '', addEventListener() {}, querySelectorAll: () => [] };
@@ -229,6 +253,11 @@ function bootRender({ rows, status = 200, analytics = null }) {
         const offset = Number(new URL(`http://x${url}`).searchParams.get('offset')) || 0;
         return { status: 200, ok: true, data: { total: rows.length, rows: rows.slice(offset, offset + 100) } };
       }
+      if (url.includes('/credits')) {
+        if (ledger === 'denied') return { status: 403, ok: false, data: null };
+        const offset = Number(new URL(`http://x${url}`).searchParams.get('offset')) || 0;
+        return { status: 200, ok: true, data: { rows: ledger.slice(offset, offset + 200), page: { limit: 200, offset, total: ledger.length } } };
+      }
       if (url.includes('/analytics/')) return analytics ? { status: 200, ok: true, data: analytics } : { status: 403, ok: false, data: null };
       return { status: 404, ok: false, data: null };
     },
@@ -253,12 +282,18 @@ function bootRender({ rows, status = 200, analytics = null }) {
 }
 
 const ship = (d, extra = {}) => ({ shipped_at: `${d}T10:00:00Z`, discipline: 'engineer', credits_awarded: 10, credits_reward: 12, ...extra });
+// a credits-ledger row: what the instance actually paid, when
+const pay = (d, delta, extra = {}) => ({ delta, reason: 'session.token_reward', recorded_at: `${d}T22:00:00Z`, ...extra });
 
 test('render draws three public figures with a table twin per time chart, and no own-only one for another builder', async () => {
-  const b = bootRender({ rows: [ship('2026-08-01'), ship('2026-08-01'), ship('2026-08-20', { discipline: 'ui' })] });
+  const b = bootRender({
+    rows: [ship('2026-08-01'), ship('2026-08-01'), ship('2026-08-20', { discipline: 'ui' })],
+    ledger: [pay('2026-08-01', 20), pay('2026-08-20', 30)],
+  });
   await b.C.render({ api: b.api, API: '/api/bongos', builderId: 95, selfId: 7, signedIn: true, now: NOW });
   const out = b.mount.innerHTML;
   assert.ok(out.includes('id="chart-works"') && out.includes('id="chart-drachmae"') && out.includes('id="chart-mix"'), 'the three public charts');
+  assert.ok(out.includes('<td>2026-08-20</td><td class="ledger__num">50 drachmae</td>'), 'the drachmae twin reads the ledger, not the 30 of per-task awards');
   assert.ok(!out.includes('id="chart-rate"'), 'no pace chart on someone else\'s profile');
   assert.ok(!b.requests.some((u) => u.includes('/analytics/')), 'and /analytics was never asked for');
   assert.equal((out.match(/<details class="pchart__twin">/g) || []).length, 2, 'a table twin under each time chart');
@@ -272,6 +307,8 @@ test('render asks for the pace chart on the viewer\'s own profile only', async (
   const own = bootRender({ rows: [ship('2026-08-01')], analytics });
   await own.C.render({ api: own.api, API: '/api/bongos', builderId: 95, selfId: '95', signedIn: true, now: NOW });
   assert.ok(own.requests.some((u) => u.includes('/analytics/builder/95')), 'own profile: the analytics read');
+  assert.ok(own.requests.some((u) => u.includes('/me/credits?')), 'own profile: your own ledger');
+  assert.ok(!own.requests.some((u) => u.includes('/builders/95/credits')), 'never through the roster route for yourself');
   assert.ok(own.mount.innerHTML.includes('id="chart-rate"'), 'and the pace chart draws');
   assert.ok(own.mount.innerHTML.includes('only you see this one'), 'saying plainly that it is private');
 });
@@ -325,6 +362,64 @@ test('a 30-day window drops the older ships from the craft mix and clips the axi
   assert.equal(C.craftMix(within).length, 1, 'only the recent craft survives a 30-day window');
 });
 
+test('the drachmae line is the credits ledger: /me/credits on your own profile, cumulated by recorded_at, ending at the balance', async () => {
+  const rows = [ship('2026-08-01'), ship('2026-08-20')]; // per-task awards would sum to 20
+  const ledger = [pay('2026-09-01', 12), pay('2026-08-20', 39), pay('2026-08-20', 19), pay('2026-07-05', 30)]; // balance 100
+  const b = bootRender({ rows, ledger });
+  await b.C.render({ api: b.api, API: '/api/bongos', builderId: 95, selfId: 95, signedIn: true, now: NOW });
+  assert.ok(b.requests.some((u) => u.includes('/me/credits?limit=200&offset=0')), 'own profile: /me/credits, paged');
+  assert.ok(!b.requests.some((u) => u.includes('/builders/95/credits')), 'not the roster route');
+  const out = b.mount.innerHTML;
+  const fig = out.slice(out.indexOf('id="chart-drachmae"'), out.indexOf('id="chart-mix"'));
+  assert.ok(fig.includes('>100 drachmae</text>'), 'the endpoint is the ledger balance, not the 20 of per-task awards');
+  assert.ok(fig.includes('<td>2026-07-05</td><td class="ledger__num">30 drachmae</td>'), 'a paid day with no ship is still a point');
+  assert.ok(fig.includes('<td>2026-08-20</td><td class="ledger__num">88 drachmae</td>'), 'two payments on one day fold into one point');
+  assert.match(fig, /100 paid, from the credits ledger/);
+  assert.doesNotMatch(fig, /estimated/);
+});
+
+test('another builder\'s ledger is read from /builders/:id/credits, paged by 200 to total', async () => {
+  const ledger = Array.from({ length: 450 }, (_, i) => pay(`2026-08-${String(1 + (i % 28)).padStart(2, '0')}`, 1));
+  const b = bootRender({ rows: [ship('2026-08-01')], ledger });
+  await b.C.render({ api: b.api, API: '/api/bongos', builderId: 95, selfId: 7, signedIn: true, now: NOW });
+  const pages = b.requests.filter((u) => u.includes('/builders/95/credits'));
+  assert.equal(pages.length, 3, 'three pages of 200 for 450 rows');
+  assert.ok(!b.requests.some((u) => u.includes('/me/credits')), 'never your own ledger for someone else\'s chart');
+  assert.ok(b.mount.innerHTML.includes('>450 drachmae</text>'), 'and every row counted once');
+});
+
+test('a viewer the ledger refuses gets the credits_reward estimate, cumulated and labelled estimated', async () => {
+  // the cost-plus shape: every award 0, the estimate is all there is to show
+  const rows = [ship('2026-08-01', { credits_awarded: 0, credits_reward: 45 }), ship('2026-08-20', { credits_awarded: 0, credits_reward: 55 })];
+  const b = bootRender({ rows, ledger: 'denied' });
+  await b.C.render({ api: b.api, API: '/api/bongos', builderId: 95, selfId: 7, signedIn: true, now: NOW });
+  const out = b.mount.innerHTML;
+  const fig = out.slice(out.indexOf('id="chart-drachmae"'), out.indexOf('id="chart-mix"'));
+  assert.ok(fig.includes('>100 drachmae</text>'), 'the estimate climbs where the 0 awards would have flatlined');
+  assert.match(fig, /estimated from shipped work, not the ledger/);
+  assert.ok(!out.includes('id="chart-rate"'), 'the pace chart stays own-only');
+  assert.ok(!out.includes('Could not load'), 'a 403 on the ledger is a fallback, not a failure');
+});
+
+test('a readable ledger with nothing in it draws one honest line, not a crash', async () => {
+  const b = bootRender({ rows: [ship('2026-08-01')], ledger: [] });
+  await b.C.render({ api: b.api, API: '/api/bongos', builderId: 95, selfId: 95, signedIn: true, now: NOW });
+  const out = b.mount.innerHTML;
+  const fig = out.slice(out.indexOf('id="chart-drachmae"'), out.indexOf('id="chart-mix"'));
+  assert.match(fig, /nothing recorded yet/);
+  assert.ok(out.includes('id="chart-works"') && out.includes('id="chart-mix"'), 'the other charts are untouched');
+});
+
+test('the harness carries a credits-ledger fixture the chart can climb on, self-paged, serving both routes', () => {
+  const fx = JSON.parse(fs.readFileSync(path.join(ROOT, 'scripts', 'hall-preview', 'fixtures', 'me__credits.json'), 'utf8'));
+  assert.ok(Array.isArray(fx.rows) && fx.rows.length > 1, 'rows to draw');
+  assert.equal(fx.page.total, fx.rows.length, 'total pinned to the rows here, or the pager would loop on the same page');
+  assert.ok(fx.rows.every((r) => Number.isFinite(r.delta) && Number.isFinite(Date.parse(r.recorded_at))), 'every row is a delta at a time');
+  assert.ok(new Set(fx.rows.map((r) => r.recorded_at.slice(0, 10))).size > 1, 'across more than one day, so the line is not flat');
+  const server = fs.readFileSync(path.join(ROOT, 'scripts', 'hall-preview', 'server.js'), 'utf8');
+  assert.ok(server.includes("[/^builders\\/\\d+\\/credits$/, 'me__credits']"), 'the roster route falls back to the same ledger');
+});
+
 test('the readout is written with textContent — the hover layer never builds markup from data', () => {
   const fn = chartsJs.slice(chartsJs.indexOf('function wireReadout'), chartsJs.indexOf('function twinHtml'));
   assert.match(fn, /read\.textContent = /);