@bongos/core 1.19.495 → 1.19.497

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1612,
-    "unique_ids": 1403,
-    "certain": 1612,
+    "strings": 1615,
+    "unique_ids": 1406,
+    "certain": 1615,
     "heuristic": 0,
     "duplicate_ids": 150
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 73,
-      "strings": 1169
+      "strings": 1172
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -234,10 +234,10 @@
       "text": "Task {…}",
       "occurrences": 4,
       "at": [
-        "modules/hall-ui/public/task.js:436",
-        "modules/hall-ui/public/task.js:439",
-        "modules/hall-ui/public/task.js:620",
-        "modules/hall-ui/public/task.js:632"
+        "modules/hall-ui/public/task.js:454",
+        "modules/hall-ui/public/task.js:463",
+        "modules/hall-ui/public/task.js:691",
+        "modules/hall-ui/public/task.js:703"
       ]
     },
     {
@@ -315,8 +315,8 @@
       "text": "Copy prompt",
       "occurrences": 3,
       "at": [
-        "modules/hall-ui/public/task.js:573",
-        "modules/hall-ui/public/task.js:593",
+        "modules/hall-ui/public/task.js:617",
+        "modules/hall-ui/public/task.js:637",
         "modules/hall-ui/public/work.js:548"
       ]
     },
@@ -473,8 +473,8 @@
       "text": "Back to {…}",
       "occurrences": 2,
       "at": [
-        "modules/hall-ui/public/task.js:170",
-        "modules/hall-ui/public/task.js:179"
+        "modules/hall-ui/public/task.js:188",
+        "modules/hall-ui/public/task.js:197"
       ]
     },
     {
@@ -2333,7 +2333,7 @@
       "surface": "builders-hall",
       "text": "Awaiting the grader, or a confirmation, before it can ship.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 563,
+      "line": 607,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2405,7 +2405,7 @@
       "surface": "builders-hall",
       "text": "Back to {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 170,
+      "line": 188,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2414,7 +2414,7 @@
       "surface": "builders-hall",
       "text": "Back to {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 179,
+      "line": 197,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -2706,6 +2706,15 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
+    {
+      "id": "b3d0e2af5176",
+      "surface": "builders-hall",
+      "text": "Choose a goal first.",
+      "file": "modules/hall-ui/public/task.js",
+      "line": 666,
+      "origin": "js-notice",
+      "confidence": "certain"
+    },
     {
       "id": "1c6b0e3ffc0e",
       "surface": "builders-hall",
@@ -2999,7 +3008,7 @@
       "surface": "builders-hall",
       "text": "Confirm that verification for #{…} actually passed?",
       "file": "modules/hall-ui/public/task.js",
-      "line": 608,
+      "line": 652,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -3125,7 +3134,7 @@
       "surface": "builders-hall",
       "text": "Copy prompt",
       "file": "modules/hall-ui/public/task.js",
-      "line": 573,
+      "line": 617,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -3134,7 +3143,7 @@
       "surface": "builders-hall",
       "text": "Copy prompt",
       "file": "modules/hall-ui/public/task.js",
-      "line": 593,
+      "line": 637,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3359,7 +3368,7 @@
       "surface": "builders-hall",
       "text": "Could not load",
       "file": "modules/hall-ui/public/task.js",
-      "line": 639,
+      "line": 710,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3503,7 +3512,7 @@
       "surface": "builders-hall",
       "text": "Could not load {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 632,
+      "line": 703,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4610,7 +4619,7 @@
       "surface": "builders-hall",
       "text": "Full log",
       "file": "modules/hall-ui/public/task.js",
-      "line": 425,
+      "line": 443,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5411,7 +5420,7 @@
       "surface": "builders-hall",
       "text": "Last claimed by",
       "file": "modules/hall-ui/public/task.js",
-      "line": 503,
+      "line": 549,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5847,6 +5856,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "e52ae74f0052",
+      "surface": "builders-hall",
+      "text": "Move to goal",
+      "file": "modules/hall-ui/public/task.js",
+      "line": 510,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "ae84ebe1d735",
       "surface": "builders-hall",
@@ -6072,6 +6090,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "421ae031594e",
+      "surface": "builders-hall",
+      "text": "No open goals in this version",
+      "file": "modules/hall-ui/public/task.js",
+      "line": 509,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "2a6d7552e21f",
       "surface": "builders-hall",
@@ -6185,7 +6212,7 @@
       "surface": "builders-hall",
       "text": "Not found",
       "file": "modules/hall-ui/public/task.js",
-      "line": 627,
+      "line": 698,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -6464,7 +6491,7 @@
       "surface": "builders-hall",
       "text": "Open in Sessions",
       "file": "modules/hall-ui/public/task.js",
-      "line": 425,
+      "line": 443,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7022,7 +7049,7 @@
       "surface": "builders-hall",
       "text": "Read the handoff notes",
       "file": "modules/hall-ui/public/task.js",
-      "line": 423,
+      "line": 441,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7733,7 +7760,7 @@
       "surface": "builders-hall",
       "text": "Session log{…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 429,
+      "line": 447,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7841,7 +7868,7 @@
       "surface": "builders-hall",
       "text": "Ship it",
       "file": "modules/hall-ui/public/task.js",
-      "line": 559,
+      "line": 603,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7859,7 +7886,7 @@
       "surface": "builders-hall",
       "text": "Shipped {…}{…}, {…}.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 538,
+      "line": 584,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8228,7 +8255,7 @@
       "surface": "builders-hall",
       "text": "Task {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 436,
+      "line": 454,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -8237,7 +8264,7 @@
       "surface": "builders-hall",
       "text": "Task {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 439,
+      "line": 463,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8246,7 +8273,7 @@
       "surface": "builders-hall",
       "text": "Task {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 620,
+      "line": 691,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8255,7 +8282,7 @@
       "surface": "builders-hall",
       "text": "Task {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 632,
+      "line": 703,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8291,7 +8318,7 @@
       "surface": "builders-hall",
       "text": "Tasks in the ledger are numbered separately from GitHub pull requests, so this may be a PR number rather than a task. The work board lists everything that does exist.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 620,
+      "line": 691,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8390,7 +8417,7 @@
       "surface": "builders-hall",
       "text": "The adversarial panel. Each worker reports pass, concerns or fail on its own; the gating workers must all pass before confirmed becomes {…}, and one concerns falls the task through to the manual confirm path.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 373,
+      "line": 391,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8471,7 +8498,7 @@
       "surface": "builders-hall",
       "text": "The grading panel could not run when this task was shipped, so no quality signal was recorded — an outage, not a verdict.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 355,
+      "line": 373,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8750,7 +8777,7 @@
       "surface": "builders-hall",
       "text": "The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment, or go back.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 632,
+      "line": 703,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9011,7 +9038,7 @@
       "surface": "builders-hall",
       "text": "This task has shipped and its credits have landed. Neither Ship it nor Confirm is available.",
       "file": "modules/hall-ui/public/task.js",
-      "line": 568,
+      "line": 612,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11216,7 +11243,7 @@
       "surface": "builders-hall",
       "text": "verdict {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 377,
+      "line": 395,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11432,7 +11459,7 @@
       "surface": "builders-hall",
       "text": "{…} awarded",
       "file": "modules/hall-ui/public/task.js",
-      "line": 420,
+      "line": 438,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11576,7 +11603,7 @@
       "surface": "builders-hall",
       "text": "{…} sessions",
       "file": "modules/hall-ui/public/task.js",
-      "line": 428,
+      "line": 446,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11756,7 +11783,7 @@
       "surface": "builders-hall",
       "text": "{…}, no such task",
       "file": "modules/hall-ui/public/task.js",
-      "line": 620,
+      "line": 691,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11819,7 +11846,7 @@
       "surface": "builders-hall",
       "text": "{…}{…} · {…}",
       "file": "modules/hall-ui/public/task.js",
-      "line": 500,
+      "line": 546,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/file-map.md

@@ -185,7 +185,7 @@
 │       ├── box.js               ← (#598/ADR 0031) per-builder dev box lifecycle CLI: provision·park·wake·deprovision·sweep-idle·sweep-dormant·status (dry-run default, --apply to act; rank-gated)
 │       ├── smoke-box.sh         ← (#598) hermetic box-lifecycle smoke (no DB/DO/network): runs tests/boxes.mjs + tests/cf_tunnel.mjs (#771 named tunnel) + route-rank + module-load
 │       ├── recall.js            ← `/recall` CLI: two-call progressive-disclosure search (summary → `--expand <id>`) over Bongos retrieval layer (ADR 0060); `node scripts/gds/recall.js <query>`
-│       ├── capture.js           ← file an idea_inbox row from the CLI (the ideas.capture kernel port); backs the "capture a tangent" flow across skills. Task 1002927 / R151 taught it the GRADES: `--full --fields-file f.json` files a Full Idea, `--spark` is capture-then-mark (two requests — the route refuses a pre-marked capture), and after a plain quick capture it OFFERS to develop further. That offer is TTY-gated (`--no-prompt` too): capture.js is run by agents with no terminal and reads its body from stdin, so an unguarded prompt would hang every non-interactive caller
+│       ├── capture.js           ← file an idea_inbox row from the CLI (the ideas.capture kernel port); backs the "capture a tangent" flow across skills. Task 1002927 / R151 taught it the GRADES: `--full --fields-file f.json` files a Full Idea, `--spark` is capture-then-mark (two requests — the route refuses a pre-marked capture), and after a plain quick capture it OFFERS to develop further. That offer is TTY-gated (`--no-prompt` too): capture.js is run by agents with no terminal and reads its body from stdin, so an unguarded prompt would hang every non-interactive caller. Task 1003070 / R09 (goal 1000071) taught it capture-time ROUTING: `--goal N` sends goal_id, `--goal none` opts out explicitly, and with neither it defaults to the caller's active claim's goal, else prints a one-line R07 suggester hint
 │       ├── spark.js            ← (tasks 1002920 / R144 + 1002921 / R145 + 1002922 / R146) the whole spark handoff from the terminal: mark one of your OWN quick ideas as a Big Idea Spark (`--undo` withdraws it), `--list` is the SPARK QUEUE, `--template` prints the five Full Idea fields, `--develop <id> --fields-file <json>` is the PICKUP (any builder; author + developer both recorded). Author-only server-side for the mark (it is the consent); its own command because sparking acts on an EXISTING idea, which is why capture.js refuses grade='spark'
 │       ├── stale-worktrees.js   ← (task 1003365) the per-claim worktrees whose branch already landed on origin/main or is gone — pure git facts, no API; `--line` is the SessionStart probe, `/worktree-clean` walks the list through worktree.js remove
 │       ├── worktree-claim-guard.js ← (task 1002579) the PURE decision behind worktree-per-claim, enforced at claim time: claiming in the MAIN CHECKOUT is refused (escape hatch `--here` → loud warning), a linked worktree passes, an unclassifiable tree fails open. Stops the ship-time "the main checkout is on <branch>, not main" strand at its cause

package/docs/module-api-changelog.md

@@ -1427,5 +1427,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.493 with no explicit bump. run 33697218855. (task 1002620)
   1.19.495 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.494 with no explicit bump. run 33766103175. (task 1002620)
+  1.19.496 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.495 with no explicit bump. run 33766363834. (task 1002620)
+  1.19.497 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.496 with no explicit bump. run 33767382661. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/discord/discord-inbound.js

@@ -20,6 +20,25 @@
 //
 // Requires (go-live): the Message Content PRIVILEGED intent (to read message
 // text) + DISCORD_IDEAS_CHANNEL_ID. Inert until both are set.
+//
+// ROUTING HINTS, NEVER ROUTING (task 1003068, BV1.R12; goal 1000071 criterion
+// C5, deliberately not C1/C3). Unlike #bugs (discord-bugs.js, R11), this vector
+// never routes: a Discord author is outside the trust boundary (ADR 0016,
+// ADR 0032), so their message may SUGGEST a goal but must never BIND one. The
+// suggester (modules/lifecycle/goal-suggest.js, resolved through the same
+// `lifecycle` port #bugs already consumes) supplies a candidate goal; its id
+// rides onto the row as the advisory `suggested_goal_id` hint (core_222) and its
+// `version_id` as `suggested_version` — both read-only guesses for /idea-triage
+// (R13), never `goalId`, which is what would make captureIdea actually route.
+//
+// suggested_version DEFAULTS even without a goal match: when the classifier
+// finds no confident goal, `suggested_version` falls back to whichever open
+// version most recently started `status='building'` — the version a filer is
+// overwhelmingly likely to mean when they post right now, absent any other
+// signal. A matched goal's OWN version always wins over the default (the two
+// travel together elsewhere in this goal — a routed capture binds to the
+// goal's version, never a caller-supplied one), so the fallback only fires
+// when there is truly nothing more specific to say.
 
 // captureIdea is no longer a doorway export (retired at BV1.R78 / ADR 0093 §5).
 // We resolve the `ideas.capture` kernel PORT the ideas module registers — the
@@ -31,6 +50,7 @@ const auth = require('./auth');
 const attachments = require('./bug-attachments');
 const { createMessageAggregator } = require('./discord-message-buffer');
 const { LIMITS } = api;
+const log = api.logger('discord');
 
 // Auto-pairing window for #ideas (task #979) — same default as #bugs. Env
 // DISCORD_IDEAS_PAIR_WINDOW_MS overrides.
@@ -68,10 +88,37 @@ const realDeps = {
   // Lazy: resolve the `ideas.capture` port at CALL time, so the ideas module's
   // registration (at its route-factory mount) need not precede this module's load.
   captureIdea: (...a) => api.resolve('ideas.capture')(...a),
+  // resolveOptional, not resolve: a vanilla instance without the lifecycle
+  // module has no goals to suggest, and that is a reason to skip the hint —
+  // never a reason to lose the idea (the discord-bugs.js precedent).
+  suggestGoalForCapture: async (...a) => {
+    const lifecycle = api.resolveOptional && api.resolveOptional('lifecycle');
+    if (!lifecycle || !lifecycle.suggestGoalForCapture) return null;
+    return lifecycle.suggestGoalForCapture(...a);
+  },
+  // Same resolveOptional posture — a vanilla instance without lifecycle has no
+  // versions to default to, which is a reason to skip the default, never the idea.
+  listVersions: async () => {
+    const lifecycle = api.resolveOptional && api.resolveOptional('lifecycle');
+    if (!lifecycle || !lifecycle.listVersions) return [];
+    return lifecycle.listVersions();
+  },
   insertAuditLog: db.insertAuditLog,
   persistImages: attachments.persistImages,
 };
 
+// mostRecentBuildingVersionId — PURE: the id of whichever `status='building'`
+// version most recently started, or null. The suggested_version fallback for a
+// filing whose classifier found no confident goal (see header). `started_at` is
+// a timestamp string/Date; String() comparison is wrong for it, so this compares
+// parsed dates explicitly rather than relying on default sort.
+function mostRecentBuildingVersionId(versions) {
+  const building = (Array.isArray(versions) ? versions : []).filter((v) => v && v.status === 'building');
+  if (building.length === 0) return null;
+  building.sort((a, b) => new Date(b.started_at) - new Date(a.started_at));
+  return building[0].id;
+}
+
 // File one inbound message as an idea. NEVER throws (the caller is a gateway
 // event handler). Returns a small status object for logging/tests.
 async function recordInboundIdea({ discordUserId, content, imageUrls = [], messageId }, deps = realDeps) {
@@ -114,12 +161,34 @@ async function recordInboundIdea({ discordUserId, content, imageUrls = [], messa
     }
     bodyMd = bodyMd.slice(0, LIMITS.DESCRIPTION);
 
+    // HINTS ONLY (see header). Neither lookup throws into the filing — a
+    // suggester/version-list outage must not cost the idea, only the hints.
+    let hint = null;
+    try {
+      hint = await deps.suggestGoalForCapture({ title: derived.title, body: derived.bodyMd });
+    } catch (e) {
+      log.warn({ err: e && e.message }, 'idea goal suggestion failed — filing without a goal hint');
+    }
+    let suggestedVersion = hint ? hint.version_id : null;
+    if (!suggestedVersion) {
+      try {
+        suggestedVersion = mostRecentBuildingVersionId(await deps.listVersions());
+      } catch (e) {
+        log.warn({ err: e && e.message }, 'default-version lookup failed — filing without a version hint');
+      }
+    }
+
     const idea = await deps.captureIdea({
       title: derived.title,
       bodyMd,
       capturedBy: builder ? builder.id : null,
       // kind left null → inbox.captureIdea auto-classifies. We never pass
       // 'criterion-proposal' (the rank-gated kind) from this path.
+      // suggestedGoalId/suggestedVersion are ADVISORY-ONLY columns — this call
+      // deliberately never names the routing parameter (see header + F12 in
+      // tests/filing_abuse_matrix.mjs, which greps this exact call for it).
+      suggestedGoalId: hint ? hint.id : null,
+      suggestedVersion,
     });
 
     await auditDiscordBot(deps, {
@@ -144,4 +213,7 @@ function createIdeaAggregator({ onFlush, windowMs = pairWindowMs(), timers = glo
   return createMessageAggregator({ onFlush, windowMs, timers });
 }
 
-module.exports = { deriveIdea, recordInboundIdea, createIdeaAggregator, pairWindowMs, realDeps };
+module.exports = {
+  deriveIdea, recordInboundIdea, createIdeaAggregator, pairWindowMs, realDeps,
+  mostRecentBuildingVersionId,
+};

package/modules/hall-ui/public/task.js

@@ -66,6 +66,24 @@
     return data;
   }
 
+  // task 1003063 (R10): mutating call for the move-to-goal affordance. Same
+  // posture as postJSON — resolves to the parsed 2xx body, throws an Error
+  // carrying { status, data } on a non-2xx so the caller can read the server's
+  // own refusal sentence (ADR 0016 enforces; this only surfaces it).
+  async function patchJSON(path, body) {
+    const res = await api.request('PATCH', path, { body: body || {} });
+    if (res.status === 401) { toAuth(); throw new Error('redirecting to auth'); }
+    let data = null;
+    try { data = res.data; } catch (_) { /* empty / non-JSON body */ }
+    if (!res.ok) {
+      const err = new Error(`${path} → ${res.status}`);
+      err.status = res.status;
+      err.data = data || {};
+      throw err;
+    }
+    return data;
+  }
+
   // Map the server's typed lifecycle-error to a builder-readable line. Codes are
   // exactly those POST /tasks/:id/ship + /confirm can return. The server is the
   // authority (ADR 0016); the UI only surfaces the refusal.
@@ -430,11 +448,17 @@
   }
 
   function renderTask(t, lastClaim, viewer, goal, extras) {
-    const { grade = null, sessionLogs = null, claims = null } = extras || {};
+    const { grade = null, sessionLogs = null, claims = null, goalsList = null } = extras || {};
     document.title = `#${t.id} — ${t.title || 'Task'} — ${document.title.split(' — ').pop()}`;
     const sub = $('#task-sub');
     if (sub) sub.textContent = `Task ${t.id}`;
 
+    // Metic+ is the floor for both the lifecycle supervisor controls below and
+    // the move-to-goal affordance (task 1003063 / R10) — hoisted so the two
+    // gates read the same rank once, rather than risking drift between copies.
+    const rank = (viewer && viewer.rank) ? String(viewer.rank).toLowerCase() : '';
+    const isSupervisor = rank === 'metic' || rank === 'archon';
+
     const parts = [];
     parts.push(`<p class="rec-kind">Task ${statusPill(t.status)}</p>`);
     parts.push(`<h1 class="rec-title" id="task-h"><span class="rec-title__id">${escapeHtml(String(t.id))}</span>${escapeHtml(t.title || 'Untitled task')}</h1>`);
@@ -473,6 +497,28 @@
       parts.push(`<p class="rec-goal">Goal <a href="/goals#/goal/${encodeURIComponent(t.goal_id)}">${escapeHtml(String(t.goal_id))}${goalName}</a>${catChip}</p>`);
     }
 
+    // task 1003063 (R10): the reassignment affordance — so a wrong routing pick
+    // is one PATCH away, never a re-file. Metic+ only (the server's own floor on
+    // PATCH /tasks/:id, ADR 0090); goalsList is fetched by load() scoped to this
+    // task's own version, because the server refuses a cross-version move
+    // (goal_version_mismatch, 409) and there is no point offering one.
+    if (isSupervisor && t.version_id) {
+      const openGoals = (Array.isArray(goalsList) ? goalsList : []).filter((g) => g.status !== 'archived');
+      const goalOpts = openGoals.length
+        ? openGoals.map((g) => `<option value="${escapeHtml(String(g.id))}"${String(g.id) === String(t.goal_id) ? ' selected' : ''}>${escapeHtml(String(g.id))} — ${escapeHtml(g.title || '')}</option>`).join('')
+        : '<option value="">No open goals in this version</option>';
+      parts.push(`
+        <div class="td-form" id="move-goal-form">
+          <label class="td-field td-field--wide"><span>Move to goal</span>
+            <select id="move-goal-select">${goalOpts}</select>
+          </label>
+          <div class="td-actions">
+            <button type="button" class="td-btn" id="move-goal-btn">Move</button>
+          </div>
+        </div>
+      `);
+    }
+
     const creditVal = window.OTBBranding?.taskCreditValue?.(t) ?? t.credits_reward;
     parts.push(figureBand([
       [window.OTBBranding?.taskCreditLabel?.(t) ?? curLabel(), creditVal],
@@ -550,8 +596,6 @@
     // toast. `confirmed → shipped` is the any-builder-supervisor / own-claim ship;
     // `completed → confirmed` is the Archon-only grader-bypass confirm (others see
     // a read-only note — the grader/Archon still has to act).
-    const rank = (viewer && viewer.rank) ? String(viewer.rank).toLowerCase() : '';
-    const isSupervisor = rank === 'metic' || rank === 'archon';
     const ownsLastClaim = !!(viewer && lastClaim && lastClaim.github_login &&
       lastClaim.github_login === viewer.github_login);
     let lifecycle = '';
@@ -610,6 +654,33 @@
         runLifecycle(confirmBtn, `${API}/tasks/${encodeURIComponent(t.id)}/confirm`, body, `#${t.id} confirmed.`);
       });
     }
+
+    // task 1003063 (R10): PATCH goal_id, then a full reload so the goal line, the
+    // picker's preselected option and everything else on the record re-render
+    // against the server's own state — no local patchwork of the DOM.
+    const moveGoalBtn = $('#move-goal-btn');
+    if (moveGoalBtn) {
+      moveGoalBtn.addEventListener('click', async () => {
+        const sel = $('#move-goal-select');
+        const goalId = sel ? Number(sel.value) : NaN;
+        if (!Number.isInteger(goalId) || goalId <= 0) { toast('Choose a goal first.'); return; }
+        const orig = moveGoalBtn.textContent;
+        moveGoalBtn.disabled = true;
+        moveGoalBtn.textContent = '…';
+        try {
+          await patchJSON(`${API}/tasks/${encodeURIComponent(t.id)}`, { goal_id: goalId });
+          toast(`#${t.id} moved to goal ${goalId}.`);
+          await load();
+        } catch (err) {
+          if (err && err.message === 'redirecting to auth') return;
+          // The server's own sentence, verbatim (a rank_forbidden 403 or a
+          // goal_version_mismatch 409 both say exactly what went wrong).
+          toast(errMessage(err && err.data) || `Could not move that task (${(err && err.status) || '?'}). Try again.`);
+          moveGoalBtn.disabled = false;
+          moveGoalBtn.textContent = orig;
+        }
+      });
+    }
   }
 
   // The two honest failures. Both keep the <h1> — the empty and error renders are
@@ -664,6 +735,18 @@
           goal = (g && g.goal) ? g.goal : null;
         } catch (_) { /* cosmetic — the goal link still resolves without it */ }
       }
+      // task 1003063 (R10): the move-to-goal picker's options, fetched only for
+      // the rank that can act on it and scoped to this task's own version (the
+      // server refuses a cross-version move). Best-effort: a failed read just
+      // means an empty picker, never a blocked page.
+      let goalsList = null;
+      const viewerRank = (viewer && viewer.rank) ? String(viewer.rank).toLowerCase() : '';
+      if ((viewerRank === 'metic' || viewerRank === 'archon') && d.task.version_id) {
+        try {
+          const gl = await getJSON(`${API}/goals?version=${encodeURIComponent(d.task.version_id)}`, { softAuth: true });
+          goalsList = Array.isArray(gl && gl.goals) ? gl.goals : [];
+        } catch (_) { /* cosmetic — the picker just has nothing to offer */ }
+      }
       // The repo bases a description's relative paths resolve onto (the primer's
       // and drachmae's pattern). Best-effort: without them a path passes through.
       try {
@@ -675,6 +758,7 @@
         grade: d.grade || null,
         sessionLogs: Array.isArray(d.session_logs) ? d.session_logs : null,
         claims: Array.isArray(d.claims) ? d.claims : null,
+        goalsList,
       });
     } catch (err) {
       if (err && err.code === AUTH_NEEDED) { toAuth(); return; }

package/modules/ideas/inbox.js

@@ -240,6 +240,13 @@ async function captureIdea({
   // (a hall filing surface, a Discord classifier) can, and when it does the
   // goal's scope wall is applied to it verbatim. See ./routing.js.
   touches = null,
+  // task 1003068 (BV1.R12): a HINT-ONLY goal guess — NEVER fed to decideLanding,
+  // only recorded as the advisory suggested_goal_id column. `goalId` is a
+  // caller's routing DECISION; this is a machine guess with no such authority
+  // (the Discord #ideas classifier has no human behind it to have decided
+  // anything). Ignored when `goalId` is already set, so every existing caller
+  // is untouched.
+  suggestedGoalId = null,
 }, deps = {}) {
   if (!title || typeof title !== 'string') {
     throw { code: 'TITLE_REQUIRED' };
@@ -277,7 +284,7 @@ async function captureIdea({
              $7)
      RETURNING ${IDEA_COLS}`,
     [title, bodyMd, resolvedKind, suggestedVersion, suggestedPriority, capturedBy,
-      goalId ?? null]
+      goalId ?? suggestedGoalId ?? null]
   );
   // A brand-new idea has no ideas_grades row, so it is quick by definition —
   // no join needed to know that. Grading it (R143's Full Idea capture) is a