@bongos/core 1.19.492 → 1.19.494

package/clients/bongos-client/bongos-client.global.js

@@ -287,6 +287,8 @@ function createClient(opts = {}) {
       postCopyDeskFlags: (args) => request("POST", "/copy-desk/flags", { hasBody: true }, args),
       // POST /copy-desk/flags/{id}/close — rank: any-builder — POST /copy-desk/flags/:id/close
       postCopyDeskFlagsIdClose: (args) => request("POST", "/copy-desk/flags/{id}/close", { hasBody: true }, args),
+      // POST /copy-desk/proposals — rank: any-builder — POST /copy-desk/proposals
+      postCopyDeskProposals: (args) => request("POST", "/copy-desk/proposals", { hasBody: true }, args),
       // GET /copy-desk/queue — rank: any-builder — GET /copy-desk/queue
       getCopyDeskQueue: (args) => request("GET", "/copy-desk/queue", { hasBody: false }, args),
       // GET /copy-desk/strings — rank: any-builder — GET /copy-desk/strings

package/clients/bongos-client/index.cjs

@@ -286,6 +286,8 @@ function createClient(opts = {}) {
       postCopyDeskFlags: (args) => request("POST", "/copy-desk/flags", { hasBody: true }, args),
       // POST /copy-desk/flags/{id}/close — rank: any-builder — POST /copy-desk/flags/:id/close
       postCopyDeskFlagsIdClose: (args) => request("POST", "/copy-desk/flags/{id}/close", { hasBody: true }, args),
+      // POST /copy-desk/proposals — rank: any-builder — POST /copy-desk/proposals
+      postCopyDeskProposals: (args) => request("POST", "/copy-desk/proposals", { hasBody: true }, args),
       // GET /copy-desk/queue — rank: any-builder — GET /copy-desk/queue
       getCopyDeskQueue: (args) => request("GET", "/copy-desk/queue", { hasBody: false }, args),
       // GET /copy-desk/strings — rank: any-builder — GET /copy-desk/strings

package/clients/bongos-client/index.d.ts

@@ -230,6 +230,8 @@ export interface PostCopyDeskFlagsIdCloseRequest { status: string; resolution_no
 export interface PostCopyDeskFlagsIdCloseResponse { ok: boolean; flag: unknown }
 export interface PostCopyDeskFlagsRequest { scope?: string; surface: string; string_id?: string; reason: string; kind?: string }
 export interface PostCopyDeskFlagsResponse { ok: boolean; flag: unknown }
+export interface PostCopyDeskProposalsRequest { string_id: string; proposed_text: string; why: string; file?: string; line?: number; flag_id?: number }
+export interface PostCopyDeskProposalsResponse { ok: boolean; task: unknown; created: boolean; patch?: unknown }
 export interface PostCostRequest { task_id?: number; amount_usd: number; category: string; description?: string; source?: string; source_ref?: string; recorded_at?: string; fresh_input_usd?: number; cache_read_usd?: number; cache_write_usd?: number; output_usd?: number; builder_id?: number; skill_name?: string }
 export interface PostCostResponse { skipped?: boolean; reason?: unknown; id?: unknown; recorded_at?: unknown }
 export interface PostDependenciesResponse { ok: boolean; dependency: unknown }
@@ -595,6 +597,8 @@ export interface BongosClient {
     postCopyDeskFlags(args: RequestArgs & { body: PostCopyDeskFlagsRequest }): Promise<PostCopyDeskFlagsResponse>;
     /** POST /copy-desk/flags/{id}/close — rank: any-builder */
     postCopyDeskFlagsIdClose(args: RequestArgs & { body: PostCopyDeskFlagsIdCloseRequest }): Promise<PostCopyDeskFlagsIdCloseResponse>;
+    /** POST /copy-desk/proposals — rank: any-builder */
+    postCopyDeskProposals(args: RequestArgs & { body: PostCopyDeskProposalsRequest }): Promise<PostCopyDeskProposalsResponse>;
     /** GET /copy-desk/queue — rank: any-builder */
     getCopyDeskQueue(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /copy-desk/strings — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -283,6 +283,8 @@ export function createClient(opts = {}) {
       postCopyDeskFlags: (args) => request("POST", "/copy-desk/flags", { hasBody: true }, args),
       // POST /copy-desk/flags/{id}/close — rank: any-builder — POST /copy-desk/flags/:id/close
       postCopyDeskFlagsIdClose: (args) => request("POST", "/copy-desk/flags/{id}/close", { hasBody: true }, args),
+      // POST /copy-desk/proposals — rank: any-builder — POST /copy-desk/proposals
+      postCopyDeskProposals: (args) => request("POST", "/copy-desk/proposals", { hasBody: true }, args),
       // GET /copy-desk/queue — rank: any-builder — GET /copy-desk/queue
       getCopyDeskQueue: (args) => request("GET", "/copy-desk/queue", { hasBody: false }, args),
       // GET /copy-desk/strings — rank: any-builder — GET /copy-desk/strings

package/docs/adr/0233-a-copy-proposal-is-a-task-carrying-a-patch.md

@@ -0,0 +1,151 @@
+# 0233 — A copy proposal is a task carrying a patch, and the applier is the only writer
+
+- **Status:** Accepted
+- **Date:** 2026-09-02
+- **Tasks:** [#1003114](https://cloudbongos.com/builders#/task/1003114) (R03 of goal 1000074, the artist's loop) — builds on [#1003112](https://cloudbongos.com/builders#/task/1003112) (R01, the registry) and [#1003113](https://cloudbongos.com/builders#/task/1003113) (R02, the flag and the queue)
+- **Extends:** [ADR 0081](<redacted>.md) — the repo is the source of truth, with swappable tool adapters that land their output as a committed diff. This applies that contract to TEXT.
+- **Extends:** [ADR 0178](<redacted>.md) — which pinned that `copy_desk_flags` may never hold replacement text, and named this task as the one that would have to keep that true while adding an editing affordance.
+- **Related:** 0083 (module system, ports), 0086 (goals), 0016 (authority resolved server-side), 0162 (a verdict is advisory, never self-executing), 0197 (the ui-design module)
+
+## Context
+
+Goal 1000074 asks for two things that pull against each other, and says so in its own text.
+
+The artist must be able to **change copy without an engineer** — that is the criterion
+`artist-edits-land-as-tasks`. And there must be **no live CMS**: "every copy change is a claimed,
+graded, shipped GDS task ... never a write path that bypasses the ledger."
+
+R02 built the half that needs no reconciliation: the **flag**, a judgement with a pointer. It
+deliberately shipped with no way to say what the copy *should* say, because the obvious place to put
+that — a column beside the flag — is one plausible read away from making the copy desk a copy source.
+ADR 0178 §3 pinned the absence and named the erosion path: not a dramatic "add a CMS" commit, but one
+plausible column, then one plausible read of it, and the ledger rule is dead with nobody having
+decided to kill it.
+
+So R03 is the load-bearing one. An affordance that edits, and a ledger that must record every edit,
+are one bad column apart from being incompatible.
+
+## Decision
+
+### 1. The shape is borrowed from the design half, not invented
+
+ADR 0081 already solved this exact problem for *form*. A tool authors; `adapter.export()` lands the
+tool's output into the repo as a committed diff under a claimed task, inside a path guard; the repo
+stays the source of truth and the tool never writes to production. The `ui-design` module has run
+that contract for design tokens and component surfaces since ADR 0197.
+
+**A copy proposal is that same contract for text.** The artist is the tool, the copy desk is where
+they author, and the proposal is the export. Nothing about this needed a new idea — it needed the
+existing one applied to the other half of the design contract, which is what makes the two halves
+read as one system rather than two features that happen to share a goal.
+
+### 2. The proposal lives on the TASK, as a fenced patch — not in a table
+
+`POST /copy-desk/proposals` creates a **GDS task** whose description carries a ```` ```copy-proposal ````
+block: schema, string id, surface, file, line, render path, the current wording and the proposed one.
+
+This is the whole answer to the tension, and every part of it is doing work:
+
+- **The ledger is where a proposal belongs anyway.** The methodology already requires every change to
+  be a claimed task. A proposal is a change that has not happened yet, so the task IS the record —
+  not a shadow of one kept somewhere else and reconciled later.
+- **Nothing renders a task description as product copy**, so the wording has no path to a reader that
+  does not pass through a claim, a diff and a grade.
+- **A fenced block is readable by the reviewer and parseable by the applier.** The point of a proposal
+  is that it is arguable before it lands; a reviewer has to be able to see the change without running
+  anything.
+- **`copy-desk` gains no migration.** `tests/copy_no_cms.mjs` asserts the module still has exactly one,
+  because the obvious-but-wrong implementation of R03 is a `copy_desk_proposals` table — which is
+  ADR 0178's forbidden column with extra steps.
+
+The module's manifest gains `consumes: ["lifecycle"]` and calls `lifecycle.createTask` through the
+kernel port. That direction is the safe one and is the point: this module can put a work request
+**into** the ledger, and nothing can pull copy **out** of this module. `provides` stays empty.
+
+### 3. The applier re-derives the position; the registry never stores one
+
+`scripts/gds/copy-apply.js` is what whoever claims the task runs. It does **not** trust the patch's
+line number. It re-runs R01's own extractor over the working tree, finds the occurrence there, and
+replaces exactly the characters that string occupies.
+
+That required teaching the extractor to record a **source span** alongside every string it finds —
+and deliberately **dropping it from the committed registry**. An offset goes stale the moment anything
+above it in the file changes, while the registry's id is designed to survive precisely that movement;
+a committed offset would be wrong far more often than the id ever is. So the span is a live fact,
+recomputed at the moment of the edit, by the same code that decided the string was copy in the first
+place. One set of matching rules, in one file, used by both the inventory and the applier — which is
+what stops the applier from editing a byte the inventory would never have called copy.
+
+The registry's committed bytes are unchanged by this; `--check` and `tests/copy_inventory.mjs` are
+what prove it.
+
+### 4. The placeholder arithmetic is the rule that makes a patch mechanical
+
+The registry writes `{…}` where the source has `${expr}`, so an artist edits a readable sentence with
+holes in it. The applier puts the source's **own** expressions back, the k-th hole taking the k-th
+expression — so an artist may move a value within a sentence (`Hello ${name}, welcome back` →
+`Good to see you, ${name} — welcome back`) but may not add or drop one. The count is checked when the
+proposal is made **and again against the real source** at apply time, because the source is what is
+about to be written.
+
+That single rule is what turns "a note for an engineer" into "a change that lands with one command",
+which is the difference between meeting the criterion and describing it.
+
+### 5. Every ambiguity is a named refusal, because a wrong edit is worse than no edit
+
+The applier refuses, by name and with the reason on one line, when: the wording is already gone
+(`target_gone`), the sentence appears at several sites and the line does not disambiguate
+(`ambiguous_target`), the literal is escaped so no exact span exists (`no_exact_span`), the
+placeholder count does not hold (`placeholder_mismatch`), or the file is outside the surface the
+registry defines (`path_outside_surface` — the direct analogue of the design adapter's path-escape
+guard, derived from R01's own `SURFACES` rather than a second list).
+
+None of these means the wording was wrong. They mean a person should look. And after writing, the
+applier regenerates the registry and **checks that what it wrote is what the inventory now reads** —
+an independent read of the file it just edited.
+
+### 6. The command takes no id, because the task cannot know its own
+
+A proposal task has to print the exact line that lands it, and its description is composed *before*
+the row exists. Every way of closing that gap is worse than the rule it would paper over — a
+placeholder is a step for the claimer to get wrong, and a second write to patch the description in
+afterwards buys a port widening and a failure mode for a string.
+
+So the bare call, `node scripts/gds/copy-apply.js`, acts on **the task the caller is holding**.
+Holding no claim is a named refusal that says to claim it first. The command may only run under a
+claim — that is the whole feature — and a claim already names a task, so the constraint and the
+ergonomics are the same fact. `--task <id>` remains for someone holding several.
+
+### 7. Proposing is open to every rank, and lands in `backlog`
+
+Same floor as filing, for ADR 0178 §4's reason: an artist is a craft, not a rank, and a rank floor
+would hide the loop from the people most likely to use it. The quality gates are the required `why`
+(the same judgement floor a flag's reason carries), the placeholder arithmetic, and the fact that the
+target is resolved **server-side from the registry** — a caller cannot describe a change to a
+sentence that does not exist.
+
+The task is created at `backlog`, so a proposal is a *request*: it needs the board's ordinary triage
+before anyone can claim it. Landing it `ready` would let anyone with an opinion mint claimable work.
+
+## Consequences
+
+- **The write surface of `copy-desk` is now three verbs, not two**, and `tests/copy_no_cms.mjs` says so
+  in a diff a reviewer can see — which is exactly what R02 built that list for.
+- **`scripts/gds/copy-apply.js` is the only thing in this feature that writes a surface file**, it is a
+  command rather than a route, and the test asserts no file in the module's request path imports it.
+  Naming it is fine and required: the task tells its claimer the exact line to run.
+- **The `lifecycle` port gained `findTaskBySourceRef`** so a double-submitted proposal resolves to the
+  task it already made. A genuinely different second attempt at the same string is a new task, which
+  is right — two people can disagree about the fix, and the board should hold both.
+- **A proposal targets ONE occurrence.** When a string is shown in several places the caller must say
+  which, and the refusal points at the duplicates the copy desk already surfaces. Rewording a sentence
+  said in seven places is usually the wrong answer to it being said seven times.
+- **A quoted literal containing an escape has no span**, so ~9 of ~1,600 inventoried strings cannot be
+  patched by command and are refused by name. Buying them would mean an escape-aware index map — a
+  second place for the escaping rules to be wrong, for nine strings.
+- **The copy desk route file moved off `console.error` to the doorway's `api.logger`**, the seam
+  builder-settings / dev-box / ideas / government already use. Structured, attributable, and it keeps
+  an error's stack instead of stringifying it.
+- **R05 still owns the hard question.** Nothing here gates a ship. Whether an artist's judgement can
+  ever block, and how that coexists with ADR 0162, is R05's to decide — a proposal is a work request
+  by construction until it does.

package/docs/adr/README.md

@@ -320,4 +320,6 @@ This keeps the decision history honest and traceable.
 | 0226 | [**One stale-claim timer; reporting degrades where enforcement refuses** ([task 1003476](https://cloudbongos.com/builders#/task/1003476), goal 1000072, criterion `legibility-sort-and-staleness`). "How long may a claim go silent" had FOUR answers and none of them was the project's: the sweeper that actually releases a claim read `GDS_STALE_CLAIM_HOURS` (else 6h); `GET /builders/roster` and `GET /builders/:id/active-claims` each hardcoded 24h in byte-identical blocks; and the two `session_pulses` helpers defaulted to 30 minutes. The 6-vs-24 pair is the harm: the roster is the screen an Archon opens to decide whether to intervene, and for **eighteen hours** after the sweeper had released a claim, stamped its session log `[auto-released:stale]` and returned the task to `ready`, that screen still showed it healthy — while the roster's own comment claimed to "mirror" the sweeper, true of the definition and false of the number. Decision: ONE resolver, `src/stale-timer.js` (a KERNEL file, the `instance-config.js`/`branding.js` category — host config a module reads, never hardcodes), reached by modules through the doorway and by core routes and the CLI directly. Precedence: explicit override (`--threshold-hours`, `?stale_hours=` — a LENS, labelled `query`, never a reconfiguration) → `<PREFIX>_STALE_CLAIM_HOURS` via `instance-config.resolveEnv`, whose legacy prefix chain still honours the live `GDS_STALE_CLAIM_HOURS` so **nothing in a running deployment has to change** (and which is the channel ADR 0190's runner already patches into `web.env`) → **6**, the SWEEP's historical number and deliberately not the roster's 24, because the sweep is the surface that acts and unifying on 24 would have made every project three times more patient with a dead claim under cover of a refactor. Bound 1..720h — the range `/builders/roster` has published since V3.R14; one timer, one bound. Every surface that prints the timer prints its PROVENANCE (`stale_hours_source`, the sweep header, the auto-release note): a number without it is exactly what let 6 and 24 coexist unnoticed. **The fail posture is asymmetric and that is the decision**: the resolver reports an unusable value rather than throwing, then a surface that only READS degrades to the default and names the bad var (500-ing the roster an Archon opened to find the problem would hide the problem), while the SWEEP refuses to run at all (it releases other people's claims and stamps their logs; no reload undoes that) — a surface that only reads may guess and say so, a surface that acts may not guess. Both routes now share one `staleHoursFor(req, res)`; two copies of a literal is how the drift happened twice inside one file. Rejected: a new `config/stale.json` tier (the env route already IS the per-project channel); making 24 the shared default; throwing from the resolver (forces a second reader — the original bug); folding in the boards' 14/30/60-DAY task buckets (a different question — days, about a task, a browsing lens with no enforcement behind it); a DB row + settings UI (a reasonable next step, but the defect was four numbers, not a missing knob — a row added before the readers agreed would have been a fifth).](<redacted>.md) | GDS / claims + ops |
 | 0232 | [**Rot is derived, not swept; and `water` is the only new verb** ([task 1003279](https://cloudbongos.com/builders#/task/1003279) · goal 1000072, criterion `legibility-sort-and-staleness`). The inbox half [ADR 0226](<redacted>.md) split out and left open. Owner decision (2026-08-25): a goal or task past the timer raises a **needs-attention line** — not an automatic status change (it mutates real work with no human in the loop, and a wrong timer then silently freezes it) and not a nightly digest (a notification is not an action, and one you scroll past is indistinguishable from the silent decay it was meant to fix). The build note asked for an idempotent poller; the decision is that **there is no poller and no items table** — a line is a `SELECT` comparing the thing's rot clock to the timer, so "exactly one item per stale thing, not one per sweep" is true by arithmetic rather than by deduplication code that must be written correctly and then stay correct, and clearing falls out for free (an edit moves `updated_at`, a decision moves `status`, watering moves the mark). A stored item would have been a cache of a query whose inputs it could not observe. **The exclusions are the load-bearing part**: rot is work nobody picked up (`backlog`/`ready`, and `open` goals), and `active` is deliberately excluded because the claim-silence timer already reports it in hours — listing it here in days would put one rot in two inboxes under two numbers, the 6h-vs-24h split one tier up; `blocked`, `completed`/`confirmed` and the terminal states are excluded for the same reason, each naming the surface that owns it. The clock is **not a new definition of touched** — it is `task-lib.js`'s published `max(updated_at, shipped_at)` (task 1003278) plus a water mark, pinned by a test asserting the domain expression appears verbatim in migration `core_231`'s index expressions, because drift there is silent. The timer is a **second** timer and defends itself as a different question (days vs hours, DB vs env, asks a human vs releases a claim), stored in a new unseeded generic `project_settings` table — no row means "never configured", which is what lets a settings page tell that apart from "set to the default" — with ADR 0226's precedence and its reporting-degrades fail posture, and an unreachable DB explicitly not treated as a bad value. Three of the four verbs (**prioritise/prune/kill**) reuse `promote`/`demote`/`abandon`/`archive`, the task-1003066 precedent, so they add no permission; only `water` is new, gated on ownership OR `builder.roster.read` inside the handler (a creator holding no atom must still get through). Verbs are **served with each row** rather than hardcoded, since a goal legitimately gets two where a task gets four. Rejected: an items table, a sweep, a digest, auto-demotion, and a fourth verb on goals that would render a dead button.](<redacted>.md) | GDS / legibility + hall |
 
+| 0233 | [**A copy proposal is a task carrying a patch, and the applier is the only writer** ([task 1003114](https://cloudbongos.com/builders#/task/1003114) · goal 1000074, criterion `artist-edits-land-as-tasks`). Goal 1000074 asks for two things that pull against each other in its own text: the artist must change copy WITHOUT an engineer, and there must be NO LIVE CMS because every copy change is a claimed, graded, shipped task. R02 shipped the half that needs no reconciliation (the flag) and [ADR 0178](<redacted>.md) §3 pinned the absence of any column that could hold replacement text, naming this task as the one that would have to keep it true. Decisions: (1) the shape is **borrowed from the design half, not invented** — ADR 0081 already has a tool authoring and an `adapter.export()` landing the output as a committed diff under a claim inside a path guard, so the artist is the tool, the copy desk is where they author, and the proposal is the export. (2) A proposal is a **TASK carrying a fenced `copy-proposal` patch**, never a row: the ledger is where a proposal belongs anyway, nothing renders a task description as product copy, a reviewer can read the change without running anything, and `copy-desk` gains NO migration (the obvious-but-wrong R03 is a `copy_desk_proposals` table, which is the forbidden column with extra steps). The module gains `consumes: ["lifecycle"]` and calls `createTask` through the port — it can put a request INTO the ledger and nothing can pull copy OUT of it. (3) `scripts/gds/copy-apply.js` **re-derives the position** rather than trusting the patch, which required teaching R01s extractor to record a source SPAN and deliberately dropping it from the committed registry: an offset goes stale the moment anything above it changes, while the id is designed to survive exactly that movement, so the span is recomputed at the moment of the edit by the same code that decided the string was copy. (4) The **placeholder arithmetic** is what makes a patch mechanical rather than a note for an engineer — the applier puts the sources own `${expr}` back, k-th hole to k-th expression, so an artist may MOVE a value within a sentence but never add or drop one, checked at proposal time and again against the real source. (5) Every ambiguity is a **named refusal** (`target_gone`, `ambiguous_target`, `no_exact_span`, `placeholder_mismatch`, `path_outside_surface` — the design adapters path guard, derived from R01s own SURFACES), because a wrong edit is worse than no edit; after writing, the applier regenerates the registry and checks that what it wrote is what the inventory now reads. (6) Proposing is **open to every rank** (an artist is a craft, not a rank) and lands at `backlog`, so a proposal is a request that passes ordinary triage. Rejected: a proposals table, a column beside the flag, trusting the patchs line number, an escape-aware index map to buy spans for nine strings, auto-closing the flag a proposal answers.](<redacted>.md) | copy-desk / the artist loop |
+
 > ⚠️ **Numbering collisions are now machine-enforced, not narrated.** Twenty numbers are shared by two ADRs each — assigned in parallel sessions before anything checked. The files keep their filenames (renumbering would break every existing citation, and a number once assigned is never reused), and this table disambiguates each pair as `NNNN-a` / `NNNN-b`. The authoritative list is `LEGACY_DUPLICATE_ADRS` in [`scripts/gds/adr-namespace.js`](../../scripts/gds/adr-namespace.js), frozen by exact filename: a **new** collision — or a third file joining a legacy number, or a rename of either half — hard-fails the `unit` CI gate, as does an index row that points at no file or an ADR with no row. The list may only shrink. This paragraph used to narrate the collisions one by one and had fallen eight behind reality; see [ADR 0195](<redacted>.md) for why the check exists and why the pairs are grandfathered rather than renumbered.

package/docs/api/openapi.json

@@ -3923,6 +3923,55 @@
         ]
       }
     },
+    "/copy-desk/proposals": {
+      "post": {
+        "operationId": "post_copy_desk_proposals",
+        "tags": [
+          "copy-desk"
+        ],
+        "summary": "POST /copy-desk/proposals",
+        "description": "------------------------------------------------------------------------- POST /copy-desk/proposals — an artist proposes new wording, and it becomes a TASK (task 1003114 / R03 of goal 1000074). Body: { string_id, proposed_text, why, file?, line?, flag_id? } rank: any signed-in builder — the same floor as filing, for the same reason (an artist is a craft, not a rank; see the header). THIS IS THE ROUTE THE NON-GOAL IS ABOUT, so read what it does NOT do. It writes no file. It stores no wording in any table of this module — ADR 0178 §3 pins that copy_desk_flags can never hold replacement text, and this route's whole design is what makes that pin survivable rather than merely strict. What it produces is a TASK carrying a patch, in the ledger every change already has to pass through, which nothing renders from. The wording reaches a person only after somebody claims that task, runs `node scripts/gds/copy-apply.js --task <id>`, and ships the resulting diff through the normal pipeline with the grader reading it. The shape is borrowed, not invented: it is `adapter.export()` from the design half (ADR 0081) applied to text. See modules/copy-desk/proposals.js. -------------------------------------------------------------------------\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/copy-desk/routes/copy-desk.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostCopyDeskProposalsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostCopyDeskProposalsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/copy-desk/queue": {
       "get": {
         "operationId": "get_copy_desk_queue",
@@ -18804,6 +18853,60 @@
           "flag"
         ]
       },
+      "PostCopyDeskProposalsRequest": {
+        "type": "object",
+        "properties": {
+          "string_id": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64
+          },
+          "proposed_text": {
+            "type": "string",
+            "minLength": 1
+          },
+          "why": {
+            "type": "string",
+            "minLength": 1
+          },
+          "file": {
+            "type": "string",
+            "maxLength": 400
+          },
+          "line": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "flag_id": {
+            "type": "integer",
+            "minimum": 1
+          }
+        },
+        "required": [
+          "string_id",
+          "proposed_text",
+          "why"
+        ],
+        "additionalProperties": false
+      },
+      "PostCopyDeskProposalsResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "task": {},
+          "created": {
+            "type": "boolean"
+          },
+          "patch": {}
+        },
+        "required": [
+          "ok",
+          "task",
+          "created"
+        ]
+      },
       "PostCostRequest": {
         "type": "object",
         "properties": {
@@ -21649,9 +21752,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 344,
-  "x-schema-count": 375,
+  "x-endpoint-count": 345,
+  "x-schema-count": 377,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 256,
+  "x-response-schemas": 257,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 344 endpoints across 56 route files.
+> **Generated from the live route files** — the route file is authoritative. 345 endpoints across 56 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -166,12 +166,13 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/connections/degree/:handle` | `any-builder` | — | the degree label between the CALLER and one handle, plus the mutuals it was computed from (own-scope read, D4 §4). |
 | GET | `/api/bongos/connections/requests` | `any-builder` | — | MY pending requests, both directions (own data). |
 
-## `copy-desk` (4)
+## `copy-desk` (5)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | POST | `/api/bongos/copy-desk/flags` | `any-builder` | `scope`, `surface`, `string_id`, `reason`, `kind` | ------------------------------------------------------------------------- POST /copy-desk/flags — file a flag. |
 | POST | `/api/bongos/copy-desk/flags/:id/close` | `any-builder` | `status`, `resolution_note`, `resolved_task_id` | ------------------------------------------------------------------------- POST /copy-desk/flags/:id/close — resolve or dismiss. |
+| POST | `/api/bongos/copy-desk/proposals` | `any-builder` | `string_id`, `proposed_text`, `why`, `file`, `line`, `flag_id` | ------------------------------------------------------------------------- POST /copy-desk/proposals — an artist proposes new wording, and… |
 | GET | `/api/bongos/copy-desk/queue` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/queue — the artist's working list. |
 | GET | `/api/bongos/copy-desk/strings` | `any-builder` | — | ------------------------------------------------------------------------- GET /copy-desk/strings — search the inventory, to find somethin… |
 

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1600 strings** across 3 surfaces · 1391 distinct pieces of copy · 1600 certain, 0 heuristic · 150 shown in more than one place.
+**1612 strings** across 3 surfaces · 1403 distinct pieces of copy · 1612 certain, 0 heuristic · 150 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 73 | 1157 |
+| `builders-hall` | `modules/hall-ui/public` | 73 | 1169 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 98 |
 | `landing` | `modules/public-landing/public` | 5 | 345 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `563d29ed86d8` | 2x | Bulk actions | modules/hall-ui/public/goals.html:172, modules/hall-ui/public/work.html:129 |
 | … | | _110 more in the JSON registry_ | |
 
-## `builders-hall` — 1157 strings
+## `builders-hall` — 1169 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -116,7 +116,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3e5a62bc4887` | certain | A GitHub username is needed. | `modules/hall-ui/public/hall-render.js:361` |
 | `3e5a62bc4887` | certain | A GitHub username is needed. | `modules/hall-ui/public/watch.js:279` |
 | `2c23271d5d71` | certain | A device is asking to act as you | `modules/hall-ui/public/pair.html:32` |
-| `a22df5ebbd5e` | certain | A flag needs a reason an artist can act on. What is wrong with it, and what would better look like? | `modules/hall-ui/public/copy-desk.js:334` |
+| `a22df5ebbd5e` | certain | A flag needs a reason an artist can act on. What is wrong with it, and what would better look like? | `modules/hall-ui/public/copy-desk.js:372` |
 | `634738746b81` | certain | A fresh box has a | `modules/hall-ui/public/harbor.js:125` |
 | `df5eb70b5a05` | certain | A higher rank. Its details are hidden until you reach the rank directly below it. | `modules/hall-ui/public/ranks.js:125` |
 | `2e17d7e236d9` | certain | A module built here can be submitted upstream for review, so it can join the shared catalog with your name and | `modules/hall-ui/public/modules.html:71` |
@@ -138,7 +138,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `62eded408097` | certain | Add {…} | `modules/hall-ui/public/profile-nudge.js:68` |
 | `8b736e365191` | certain | All builders | `modules/hall-ui/public/hall-render.js:1132` |
 | `b5e03617b319` | certain | All goals | `modules/hall-ui/public/goals.html:53` |
-| `bea7817e57a4` | certain | All surfaces | `modules/hall-ui/public/copy-desk.js:263` |
+| `bea7817e57a4` | certain | All surfaces | `modules/hall-ui/public/copy-desk.js:301` |
 | `627c683a5e5d` | certain | All time | `modules/hall-ui/public/hall-widgets.js:130` |
 | `b38c01691857` | certain | All your work → | `modules/hall-ui/public/hall-widgets.js:110` |
 | `e99cc5d37404` | certain | Already a member? | `modules/hall-ui/public/hall-render.js:330` |
@@ -227,8 +227,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `512ab32e3bf2` | certain | Close box | `modules/hall-ui/public/box-panel.js:226` |
 | `70f6a704d504` | certain | Close it | `modules/hall-ui/public/copy-desk.html:140` |
 | `d12a2fb5730d` | certain | Close this flag | `modules/hall-ui/public/copy-desk.html:116` |
-| `3d148e19e03a` | certain | Closed. | `modules/hall-ui/public/copy-desk.js:393` |
-| `2654dc3ded21` | certain | Closing is a judgement too — say what you decided, so the next person does not re-litigate it. | `modules/hall-ui/public/copy-desk.js:378` |
+| `3d148e19e03a` | certain | Closed. | `modules/hall-ui/public/copy-desk.js:510` |
+| `2654dc3ded21` | certain | Closing is a judgement too — say what you decided, so the next person does not re-litigate it. | `modules/hall-ui/public/copy-desk.js:495` |
 | `f8a914076098` | certain | Closing the terminal tab keeps your session running — reopen to resume right where you left off. To shut the b | `modules/hall-ui/public/box-panel.js:226` |
 | `cfe0f4c4fcc2` | certain | Closing your box… (a few seconds) | `modules/hall-ui/public/box-panel.js:265` |
 | `cfe0f4c4fcc2` | certain | Closing your box… (a few seconds) | `modules/hall-ui/public/box-panel.js:370` |
@@ -395,6 +395,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `647513e4838a` | certain | Everything this builder has shipped. Seen one craft at a time, with goals and ideas, under | `modules/hall-ui/public/profile.html:108` |
 | `efdb46f76b02` | certain | Everything this instance can run: what the core ships, what this project built, and who keeps each one true as | `modules/hall-ui/public/modules.html:32` |
 | `d629e152f074` | certain | Expires {…} · refreshes on use. | `modules/hall-ui/public/settings.js:992` |
+| `0c4632f983db` | certain | File the change | `modules/hall-ui/public/copy-desk.html:173` |
 | `536a7e99640a` | certain | File the flag | `modules/hall-ui/public/copy-desk.html:108` |
 | `077cf99f49f6` | certain | File this idea | `modules/hall-ui/public/ideas.html:90` |
 | `1def0e7c716e` | certain | Find something to flag | `modules/hall-ui/public/copy-desk.html:64` |
@@ -407,8 +408,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `78107a76a755` | certain | Five diagrams that show, at a glance, how work flows through {{worldName}}'s development system. | `modules/hall-ui/public/diagrams.html:33` |
 | `18ab1be9d3ad` | certain | Five questions, and a score that counts how much of each you actually answered. | `modules/hall-ui/public/ideas.js:448` |
 | `b9267033b1f1` | certain | Flag this copy | `modules/hall-ui/public/copy-desk.html:83` |
-| `82149b1deacd` | certain | Flag this… | `modules/hall-ui/public/copy-desk.js:146` |
-| `448d00771dc8` | certain | Flagged. It is in the queue. | `modules/hall-ui/public/copy-desk.js:353` |
+| `82149b1deacd` | certain | Flag this… | `modules/hall-ui/public/copy-desk.js:164` |
+| `448d00771dc8` | certain | Flagged. It is in the queue. | `modules/hall-ui/public/copy-desk.js:391` |
 | `6149e9ca69f7` | certain | Fleet summary | `modules/hall-ui/public/harbor.html:44` |
 | `617f13fa3fdb` | certain | Flip the switch. | `modules/hall-ui/public/hall-render.js:744` |
 | `42cee5cb3584` | certain | Fold this idea into # | `modules/hall-ui/public/task-detail.js:457` |
@@ -494,6 +495,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2bfc5a50ce88` | certain | Jump to a page or record | `modules/hall-ui/public/shell.js:344` |
 | `eba610d25523` | certain | Jump to… | `modules/hall-ui/public/shell.js:346` |
 | `bc779353aa0c` | certain | Karma — peer recognition and approvals, a separate counter from {…}. | `modules/hall-ui/public/profile.js:65` |
+| `de0e1590667f` | certain | Keep all {…} {…} — they are the values the code drops in, and the change cannot land without them. | `modules/hall-ui/public/copy-desk.js:442` |
 | `32d25ef2182d` | certain | Keep box | `modules/hall-ui/public/box-panel.js:164` |
 | `fbe40b5818a3` | certain | Key removed. | `modules/hall-ui/public/settings.js:1193` |
 | `93c17262bacf` | certain | Key storage is being set up by an Archon — check back shortly. {…} | `modules/hall-ui/public/settings.js:1072` |
@@ -598,6 +600,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2c19f41704b9` | certain | Not yet available — {{worldName}} | `modules/hall-ui/public/not-ready.html:6` |
 | `571b9b22dbda` | certain | Not yet ready — blocked by dependencies or awaiting promotion. These become claimable when their blockers ship | `modules/hall-ui/public/work.html:98` |
 | `0c59d118db9b` | certain | Note (optional) | `modules/hall-ui/public/task-detail.js:460` |
+| `cd652d04d616` | certain | Nothing changes yet. This files a task carrying your wording; whoever claims it lands the diff, and it ships g | `modules/hall-ui/public/copy-desk.html:168` |
 | `fec5d78497e8` | certain | Nothing in the backlog right now. | `modules/hall-ui/public/work.js:1055` |
 | `2c6e0dfbd781` | certain | Nothing is waiting on you. Requests reach you by your craft — set yours in | `modules/hall-ui/public/collab.html:44` |
 | `2ec0fbb20a42` | certain | Nothing is waiting. A spark appears here when its author offers a quick idea up for development. | `modules/hall-ui/public/ideas.js:365` |
@@ -669,6 +672,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `dd4bc23c7759` | certain | Prompt for #{…} copied to your clipboard. | `modules/hall-ui/public/work.js:550` |
 | `cd7dc83871b6` | certain | Prompt for #{…} copied. | `modules/hall-ui/public/goals-page.js:373` |
 | `cd7dc83871b6` | certain | Prompt for #{…} copied. | `modules/hall-ui/public/work.js:561` |
+| `fe7f3488fda8` | certain | Propose new wording | `modules/hall-ui/public/copy-desk.html:152` |
+| `abee9a18325d` | certain | Propose wording… | `modules/hall-ui/public/copy-desk.js:179` |
 | `3f85bdc47099` | certain | Protected module scope — join by request; an Archon admits members | `modules/hall-ui/public/goals-render.js:792` |
 | `e5c292c8b361` | certain | Provides (seams) | `modules/hall-ui/public/atlas.js:288` |
 | `b9c6def6b120` | certain | Rank set to {…}. | `modules/hall-ui/public/watch.js:625` |
@@ -739,8 +744,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `11486793742e` | certain | Saves the moment you toggle; applies from your next session. | `modules/hall-ui/public/settings.html:284` |
 | `e8e4e49fe8f4` | certain | Saves when you press Save; shows everywhere at once. | `modules/hall-ui/public/settings.html:88` |
 | `42cbc20a6ec8` | certain | Saves when you press Save; your next | `modules/hall-ui/public/settings.html:136` |
+| `fc9d783ed0f5` | certain | Say why it is better. Whoever reviews this decides it from your reason, without asking you. | `modules/hall-ui/public/copy-desk.js:446` |
 | `46711f7bc3df` | certain | Search every string the product shows a person, by what it says or the file it lives in. | `modules/hall-ui/public/copy-desk.html:65` |
-| `5d2ba8e72fa1` | certain | Search failed. | `modules/hall-ui/public/copy-desk.js:305` |
+| `5d2ba8e72fa1` | certain | Search failed. | `modules/hall-ui/public/copy-desk.js:343` |
 | `373a7639bcb9` | certain | Sections in this primer | `modules/hall-ui/public/primer.html:52` |
 | `00ca4e3c7c7d` | certain | Sections in this reference | `modules/hall-ui/public/drachmae.html:49` |
 | `ab8af800f2bb` | certain | Security reports | `modules/hall-ui/public/watch.html:47` |
@@ -825,6 +831,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `44579eef0c8d` | certain | Tasks — {{worldName}} | `modules/hall-ui/public/work.html:6` |
 | `2f4f047dc1b4` | certain | Text size | `modules/hall-ui/public/shell.js:349` |
 | `545c59c1deb7` | certain | That is the session you are using right now. Ending it signs you out of this page. | `modules/hall-ui/public/settings-sessions.js:74` |
+| `282c3fa2d456` | certain | That is the wording it already has. Change something, or file a flag instead if you only want to mark it. | `modules/hall-ui/public/copy-desk.js:438` |
 | `c0e28f30524d` | certain | That project's own standing, as reported by that project. | `modules/hall-ui/public/profile.js:285` |
 | `e99d4a811e92` | certain | That request is no longer available. | `modules/hall-ui/public/profile-connections.js:270` |
 | `50198c465225` | certain | The 16-value rank enum in three bands, which ranks are live, and the permissions each rank holds. | `modules/hall-ui/public/diagrams.html:59` |
@@ -871,7 +878,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7d016f4a65bf` | certain | The system is mid-build. These diagrams deliberately separate what stands today from what is yet planned, so t | `modules/hall-ui/public/diagrams.html:40` |
 | `198ba9353bf6` | certain | The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment,  | `modules/hall-ui/public/task.js:632` |
 | `34555793f33e` | certain | The task list could not be loaded right now. | `modules/hall-ui/public/work.js:1215` |
-| `a42a37c43bfb` | certain | The words this project shows people — what has been flagged, and what nobody has looked at. | `modules/hall-ui/public/copy-desk.js:290` |
+| `a42a37c43bfb` | certain | The words this project shows people — what has been flagged, and what nobody has looked at. | `modules/hall-ui/public/copy-desk.js:328` |
 | `bcdbded93d4e` | certain | The work board failed to load. Reload to try again. | `modules/hall-ui/public/work.js:1401` |
 | `25794c439321` | certain | Then copy the project onto your machine and run the one-shot bootstrap (it checks your setup, installs depende | `modules/hall-ui/public/hall-render.js:811` |
 | `df316c3484de` | certain | Then drive it however you like: | `modules/hall-ui/public/hall-render.js:744` |
@@ -897,6 +904,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9a685b01e2c6` | certain | This page opens at a higher rank. | `modules/hall-ui/public/watch.html:40` |
 | `87f1c2e07790` | certain | This page unlocks as you advance. | `modules/hall-ui/public/not-ready.html:26` |
 | `69e8beced2ff` | certain | This sends the idea back to its author. Say why, and which section. | `modules/hall-ui/public/government.js:962` |
+| `09256febc32d` | certain | This sentence has {…} {…} where a value is dropped in when it is shown. | `modules/hall-ui/public/copy-desk.js:422` |
 | `c9e50a67988a` | certain | This task has shipped and its credits have landed. Neither Ship it nor Confirm is available. | `modules/hall-ui/public/task.js:568` |
 | `7217c4f1769d` | certain | This will {…} | `modules/hall-ui/public/harbor.js:125` |
 | `2ad5823d2cd7` | certain | Three dials, all settings rather than code: | `modules/hall-ui/public/government.html:55` |
@@ -933,6 +941,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `70dc106494cf` | certain | What is wrong with it, and what would better look like? | `modules/hall-ui/public/copy-desk.html:101` |
 | `ae44a375e814` | certain | What it unlocks | `modules/hall-ui/public/ranks.js:109` |
 | `00dc1f0f83e1` | certain | What kind of wrong? | `modules/hall-ui/public/copy-desk.html:87` |
+| `9a85f2c19b48` | certain | What should it say? | `modules/hall-ui/public/copy-desk.html:156` |
+| `2dd116d2d817` | certain | What the current wording gets wrong, and what yours does about it. | `modules/hall-ui/public/copy-desk.html:166` |
 | `5f2b989bbf6a` | certain | What this builder has done, seen one craft at a time. | `modules/hall-ui/public/profile.html:134` |
 | `32d675a2b022` | certain | What this rank is for (optional) | `modules/hall-ui/public/government.html:92` |
 | `3dade88f0584` | certain | What your box would cost: | `modules/hall-ui/public/box-panel.js:235` |
@@ -947,6 +957,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `fe85463560e0` | certain | Who builds on this project, ranked by work shipped. This project's own ledger — unlike the cross-project direc | `modules/hall-ui/public/roster.html:28` |
 | `7dbdb882e967` | certain | Who can find you. Your profile page can be public or private, and recruiters looking for builders are allowed  | `modules/hall-ui/public/settings.html:111` |
 | `045c629729b7` | certain | Who’s on this goal, and what they’ve contributed to it. | `modules/hall-ui/public/goals.html:198` |
+| `62ab2e60f629` | certain | Why is this better? | `modules/hall-ui/public/copy-desk.html:164` |
 | `fbd8a815b808` | certain | Why — the reason the author will act on | `modules/hall-ui/public/government.js:962` |
 | `a3ac116b499a` | certain | Why? | `modules/hall-ui/public/copy-desk.html:99` |
 | `0dcb485477b6` | certain | Windows (ARM) | `modules/hall-ui/public/hall-render.js:744` |
@@ -957,6 +968,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0e6b8e8f26cc` | certain | Works completed | `modules/hall-ui/public/profile.html:140` |
 | `52e5fe3c6075` | certain | Write a Full Idea | `modules/hall-ui/public/ideas.html:52` |
 | `7664f4373d1f` | certain | Write one | `modules/hall-ui/public/idea.js:258` |
+| `47f61e576454` | certain | Write the wording you want instead. | `modules/hall-ui/public/copy-desk.js:436` |
 | `c368b56ecf40` | certain | Xenos builders start with a focused set of pages — ship your first | `modules/hall-ui/public/not-ready.html:31` |
 | `b6b0fcb2bcee` | certain | You already have a pending request or invitation for this goal. | `modules/hall-ui/public/goals-render.js:1059` |
 | `52e93bbc07a6` | certain | You are already a member of this goal. | `modules/hall-ui/public/goals-render.js:1060` |
@@ -1040,7 +1052,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `df941da50c7c` | certain | fell short | `modules/hall-ui/public/builders.js:568` |
 | `31735e119a04` | certain | first vote | `modules/hall-ui/public/government.js:584` |
 | `9563bd9f4971` | certain | first — your username is all we need. | `modules/hall-ui/public/hall-render.js:278` |
-| `2e111f3a4912` | certain | flagged by | `modules/hall-ui/public/copy-desk.js:130` |
+| `2e111f3a4912` | certain | flagged by | `modules/hall-ui/public/copy-desk.js:148` |
 | `1874087e6d87` | certain | for Mac or Windows, sign in with your | `modules/hall-ui/public/hall-render.js:744` |
 | `836646d95f03` | certain | for a link that runs this session in Claude's own web/app interface, the same UI you'd use on a computer. | `modules/hall-ui/public/hall-render.js:744` |
 | `50eb308666b2` | certain | for version-level progress and goals. | `modules/hall-ui/public/work.html:84` |
@@ -1110,7 +1122,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f83f0a9d6b6a` | certain | recorded, on the Operations tab | `modules/hall-ui/public/watch.html:49` |
 | `26da1df6fd4a` | certain | reflects it. | `modules/hall-ui/public/settings.html:136` |
 | `594962dc9ec3` | certain | s into the view containers below (falling back to | `modules/hall-ui/public/index.html:52` |
-| `2a42549b34ae` | certain | said, when flagged: | `modules/hall-ui/public/copy-desk.js:120` |
+| `2a42549b34ae` | certain | said, when flagged: | `modules/hall-ui/public/copy-desk.js:124` |
 | `9bec9eb4829e` | certain | scope: {…} | `modules/hall-ui/public/goals-render.js:774` |
 | `a6f55d7aa6f7` | certain | shipped (live) | `modules/hall-ui/public/roadmap.js:273` |
 | `026ba1289d4d` | certain | shipped · | `modules/hall-ui/public/goals-render.js:696` |
@@ -1119,7 +1131,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0215b2cdca8c` | certain | submit for review | `modules/hall-ui/public/modules.js:132` |
 | `da30b952a60b` | certain | system / unattributed | `modules/hall-ui/public/goals-page.js:249` |
 | `da30b952a60b` | certain | system / unattributed | `modules/hall-ui/public/work.js:498` |
-| `a6e803a31a4d` | certain | task #{…} | `modules/hall-ui/public/copy-desk.js:101` |
+| `a6e803a31a4d` | certain | task #{…} | `modules/hall-ui/public/copy-desk.js:105` |
 | `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/gate.js:142` |
 | `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/hall-render.js:599` |
 | `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/idea.js:207` |