@bongos/core 1.19.504 → 1.19.505

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.504",
-  "core_contract": "1.19.504",
-  "source_commit": "96482f8fb1d0169f219d074f71df3fc67a9cd326",
+  "core_version": "1.19.505",
+  "core_contract": "1.19.505",
+  "source_commit": "3ab4e5ad43e20da1374af1e120d51911fd799680",
   "source_ref": "HEAD",
-  "built_at": "2026-09-03T17:25:18.511Z",
+  "built_at": "2026-09-03T17:32:35.678Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 427,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 1943,
+    "functional_verbatim": 1944,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2394,
-  "tree_sha256": "26ec04b40be6bdbd60cbf3e985893d173d7e24138984ffab8e1e13255d298d00",
+  "file_count": 2395,
+  "tree_sha256": "1bc57733b6267db17eb8b78650effda973d902370c46f3be51c0764e1858de00",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1727,12 +1727,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "b88ee6e73282179c6c4234af8361227cbe2c790ca46822d202bc29297a813b9d"
+      "sha256": "276273f5edb4e920ce7ffdf33707b3e08c259ab22a45427ebde2f4f1bfdc2831"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "e2c273686958a096eb60708dfb2181f61ef120ff150345e614616c48e5367560"
+      "sha256": "b6bf1dcc9d8b2bbef68d5ff7b8f2e2b9a3e5d2d504562c21cacd0e3b9a0e9905"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2577,7 +2577,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "daf79599dc6cea40dcd488676b8b8673c8d8651bcf46c492ce9d1cff7b110941"
+      "sha256": "6e57f6714292cf1ab9df6ec0c481390848d08ee35f399719ec5833d2699ed8bd"
     },
     {
       "path": "docs/modules-contract.md",
@@ -5052,7 +5052,7 @@
     {
       "path": "modules/hall-ui/public/task-detail.js",
       "mode": "0000644",
-      "sha256": "911cd948103fcebe94c0388bea01675b2dbb796b63a7d5ce176f70e0062912a2"
+      "sha256": "5a88cd76fb6da7058ba109c3467f11c20c973daff8b03f4ed1b4be67b8807a87"
     },
     {
       "path": "modules/hall-ui/public/task-lib.js",
@@ -7227,12 +7227,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "1d0767945801b150d2f8d7b3559e15e69c27db9dfd559618b1a2c6eaeb81ecef"
+      "sha256": "5b46ca655ee12c47c36c6d2e05baea5d10bdf139404a931c041225e7e0343426"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "a3e1829e516c862e34180c932552d5df7912352f685c83d84137022c22ca3e9f"
+      "sha256": "54330892dd305c453d6e4f8b18051ba2116277c101651f912da36c07b15e314c"
     },
     {
       "path": "public-docs/index.html",
@@ -8902,7 +8902,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "e34fd7bf26cd87df1b86dd3e28e2b345eecf5c902c64639157fb49b310126b90"
+      "sha256": "da3ceeaa7c239b0ec879e2724b32c30d3efae1ef2440d5d8defa0a729f18c69d"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -11097,7 +11097,7 @@
     {
       "path": "tests/promote_goal_id.mjs",
       "mode": "0000644",
-      "sha256": "24471b652054a82e985b86fdbbe2dc281114cf9829aed6c9b91348217e7f2460"
+      "sha256": "29d69119eb019e74e5f5407855080c908820f06fca70b93146694d4b57d1e25d"
     },
     {
       "path": "tests/prose_edits.mjs",
@@ -11794,6 +11794,11 @@
       "mode": "0000644",
       "sha256": "1e4d480e64d915be750d5bb9581f2da83767800daa7769a551103bc00ca79497"
     },
+    {
+      "path": "tests/task_detail_ui.mjs",
+      "mode": "0000644",
+      "sha256": "5e7150f8651a3c147b17f51800f5f8afa1e9534b3ec545584e5c37792475b2aa"
+    },
     {
       "path": "tests/task_goal_link.mjs",
       "mode": "0000644",

package/docs/copy-inventory.md

@@ -337,7 +337,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `28ec06f6060a` | certain | Counted, not judged: each question is worth the same, and earns its share in proportion to how much real text  | `modules/hall-ui/public/ideas.html:167` |
 | `38827a954f3b` | certain | Create a custom rank first. | `modules/hall-ui/public/government.js:466` |
 | `dd8ead7adc9a` | certain | Create rank | `modules/hall-ui/public/government.html:94` |
-| `d7beb841395e` | certain | Create task | `modules/hall-ui/public/task-detail.js:367` |
+| `d7beb841395e` | certain | Create task | `modules/hall-ui/public/task-detail.js:372` |
 | `533f24219487` | certain | Create your | `modules/hall-ui/public/hall-render.js:744` |
 | `e91a4d2e3e1c` | certain | Created rank {…}. | `modules/hall-ui/public/government.js:449` |
 | `a55e423263f0` | certain | Cross-project record | `modules/hall-ui/public/profile.html:94` |
@@ -382,7 +382,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8d2b4f119ee3` | certain | End session | `modules/hall-ui/public/settings-sessions.js:46` |
 | `8e82771e5b63` | certain | Ending a session takes effect immediately; the token stops working on its very next request. | `modules/hall-ui/public/settings.html:174` |
 | `58d381535285` | certain | Engagement reports | `modules/hall-ui/public/watch.html:133` |
-| `bd7a40639a1c` | certain | Estimate (min) | `modules/hall-ui/public/task-detail.js:362` |
+| `bd7a40639a1c` | certain | Estimate (min) | `modules/hall-ui/public/task-detail.js:367` |
 | `c15d1f0ddfb6` | certain | Estimation accuracy | `modules/hall-ui/public/watch.html:151` |
 | `44f928d13699` | certain | Event sounds | `modules/hall-ui/public/settings.html:328` |
 | `8690c6424585` | certain | Every builder in {{worldName}} — rank, {{currency}}, karma, and active claims. | `modules/hall-ui/public/watch.html:69` |
@@ -418,7 +418,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `448d00771dc8` | certain | Flagged. It is in the queue. | `modules/hall-ui/public/copy-desk.js:391` |
 | `6149e9ca69f7` | certain | Fleet summary | `modules/hall-ui/public/harbor.html:44` |
 | `617f13fa3fdb` | certain | Flip the switch. | `modules/hall-ui/public/hall-render.js:744` |
-| `42cee5cb3584` | certain | Fold this idea into # | `modules/hall-ui/public/task-detail.js:457` |
+| `42cee5cb3584` | certain | Fold this idea into # | `modules/hall-ui/public/task-detail.js:462` |
 | `647bcfcfdb03` | certain | Fresh CLI token issued. Paste it in your terminal: | `modules/hall-ui/public/settings.js:988` |
 | `55c71d76a94c` | certain | From creation to production — and the exact step where {{currency}} are awarded (at | `modules/hall-ui/public/diagrams.html:52` |
 | `d32c5e058d1e` | certain | From the system | `modules/hall-ui/public/hall-render.js:623` |
@@ -538,7 +538,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ceec2218efe3` | certain | Loading the roadmap… | `modules/hall-ui/public/roadmap.html:33` |
 | `db04803d9e72` | certain | Loading the roster… | `modules/hall-ui/public/roster.html:39` |
 | `0cdad42009e6` | certain | Loading the task | `modules/hall-ui/public/task.html:46` |
-| `d28d321e8a1e` | certain | Loading versions… | `modules/hall-ui/public/task-detail.js:320` |
+| `d28d321e8a1e` | certain | Loading versions… | `modules/hall-ui/public/task-detail.js:325` |
 | `3c43f157035e` | certain | Loading your goals… | `modules/hall-ui/public/goals.js:95` |
 | `7a239a17afc8` | certain | Loading your preferences… | `modules/hall-ui/public/settings.html:32` |
 | `04df1bd30129` | certain | Loading your rank… | `modules/hall-ui/public/ranks.html:30` |
@@ -609,7 +609,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2c19f41704b9` | certain | Not yet available — {{worldName}} | `modules/hall-ui/public/not-ready.html:6` |
 | `2c19f41704b9` | certain | Not yet available — {{worldName}} | `modules/hall-ui/public/not-ready.html:6` |
 | `571b9b22dbda` | certain | Not yet ready — blocked by dependencies or awaiting promotion. These become claimable when their blockers ship | `modules/hall-ui/public/work.html:98` |
-| `0c59d118db9b` | certain | Note (optional) | `modules/hall-ui/public/task-detail.js:460` |
+| `0c59d118db9b` | certain | Note (optional) | `modules/hall-ui/public/task-detail.js:465` |
 | `cd652d04d616` | certain | Nothing changes yet. This files a task carrying your wording; whoever claims it lands the diff, and it ships g | `modules/hall-ui/public/copy-desk.html:168` |
 | `fec5d78497e8` | certain | Nothing in the backlog right now. | `modules/hall-ui/public/work.js:1055` |
 | `2c6e0dfbd781` | certain | Nothing is waiting on you. Requests reach you by your craft — set yours in | `modules/hall-ui/public/collab.html:44` |
@@ -699,7 +699,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `26e6c9879035` | certain | Reading the diagrams | `modules/hall-ui/public/diagrams.html:39` |
 | `81cd2cdf954d` | certain | Reading the request… | `modules/hall-ui/public/pair.html:28` |
 | `5b581cca590f` | certain | Ready — tasks to do | `modules/hall-ui/public/work.html:64` |
-| `9ea556e7b78b` | certain | Reason (optional) | `modules/hall-ui/public/task-detail.js:511` |
+| `9ea556e7b78b` | certain | Reason (optional) | `modules/hall-ui/public/task-detail.js:516` |
 | `7df3fd4ebf41` | certain | Reason (shown to the builder) | `modules/hall-ui/public/harbor.js:148` |
 | `4f619c19a8e7` | certain | Rebase owed | `modules/hall-ui/public/hall-render.js:603` |
 | `06cbba1440b1` | certain | Rebase owed — new claims paused | `modules/hall-ui/public/hall-render.js:488` |
@@ -1074,7 +1074,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `06aab18fc3b5` | certain | holds the repo. Follow the numbered path to see how a credential-less box gets its work to prod. This is the l | `modules/hall-ui/public/diagrams.html:74` |
 | `17ab8db79e1f` | certain | holds the worker, the code, and your local memory; the | `modules/hall-ui/public/diagrams.html:74` |
 | `7d5cbe3d81e4` | certain | how long a vote stays open | `modules/hall-ui/public/government.html:55` |
-| `dacb901c4f10` | certain | idea number | `modules/hall-ui/public/task-detail.js:458` |
+| `dacb901c4f10` | certain | idea number | `modules/hall-ui/public/task-detail.js:463` |
 | `7df22e74c87a` | certain | idea {…} | `modules/hall-ui/public/idea.js:210` |
 | `7df22e74c87a` | certain | idea {…} | `modules/hall-ui/public/ideas.js:348` |
 | `2123a62d69e3` | certain | if this stays empty. | `modules/hall-ui/public/collab.html:45` |
@@ -1090,7 +1090,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c767b3e07826` | certain | is only the screen; the | `modules/hall-ui/public/diagrams.html:74` |
 | `aa530bd15088` | certain | itself). The registry stays the single source of truth for what the hall shows; a fitness check (scripts/gds/f | `modules/hall-ui/public/index.html:53` |
 | `9018bf6e99eb` | certain | last used {…} · signed in {…} | `modules/hall-ui/public/settings-sessions.js:46` |
-| `2ce7738b1eb0` | certain | loading goals… | `modules/hall-ui/public/task-detail.js:384` |
+| `2ce7738b1eb0` | certain | loading goals… | `modules/hall-ui/public/task-detail.js:389` |
 | `754bdec368ed` | certain | lowest credits | `modules/hall-ui/public/hall-widgets.js:136` |
 | `cffba8409070` | certain | manage its visibility in Settings → Cross-project record | `modules/hall-ui/public/profile.js:261` |
 | `5c3fdd34cd02` | certain | means expressible through the real configuration — a rank-based membership plus a pass rule — with no new code | `modules/hall-ui/public/government.js:721` |
@@ -1173,8 +1173,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e72c90163726` | certain | what's blocking | `modules/hall-ui/public/goals-render.js:161` |
 | `81f05d9b2bbf` | certain | what's wrong, or what you'd like to see | `modules/hall-ui/public/ideas.html:69` |
 | `1651cb1876f5` | certain | who sits on the board | `modules/hall-ui/public/government.html:55` |
-| `143f77e2b782` | certain | why these are the same | `modules/hall-ui/public/task-detail.js:461` |
-| `ec7c228cb4ce` | certain | why this isn’t worth doing | `modules/hall-ui/public/task-detail.js:512` |
+| `143f77e2b782` | certain | why these are the same | `modules/hall-ui/public/task-detail.js:466` |
+| `ec7c228cb4ce` | certain | why this isn’t worth doing | `modules/hall-ui/public/task-detail.js:517` |
 | `66d979d0db89` | certain | your vote | `modules/hall-ui/public/government.js:819` |
 | `50d4a70a2eb2` | certain | {…} Access is invite-based: an Archon approves each new builder. To begin, request access below. | `modules/hall-ui/public/hall-render.js:278` |
 | `9aac280c89ec` | certain | {…} Anyone with a GitHub account can join: sign in and you're in, starting at the newcomer rank. | `modules/hall-ui/public/hall-render.js:261` |
@@ -1236,7 +1236,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4a5ff4f662df` | certain | — ${…} of ${…} this month ({…}%). {…} | `modules/hall-ui/public/hall-render.js:455` |
 | `a6ae9cbdee30` | certain | — all builders — | `modules/hall-ui/public/builders.js:671` |
 | `729d4ce22b99` | certain | — any — | `modules/hall-ui/public/hall-widgets.js:132` |
-| `9ac518dfa95e` | certain | — none (the version's general bucket) — | `modules/hall-ui/public/task-detail.js:315` |
+| `9ac518dfa95e` | certain | — none (the version's general bucket) — | `modules/hall-ui/public/task-detail.js:320` |
 | `da9962dc1729` | certain | — or open any diagram fullscreen. | `modules/hall-ui/public/diagrams.html:33` |
 | `d4ff85363f89` | certain | — so if Claude Desktop then says | `modules/hall-ui/public/box-panel.js:160` |
 | `e5c5e94152b3` | certain | — that's all the tooling you need up front. | `modules/hall-ui/public/hall-render.js:811` |
@@ -1254,7 +1254,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:195` |
 | `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:207` |
 | `1e7cf7b1e64e` | certain | ← Newer | `modules/hall-ui/public/sessions.html:68` |
-| `2180e0ecf138` | certain | → no idea # | `modules/hall-ui/public/task-detail.js:479` |
+| `2180e0ecf138` | certain | → no idea # | `modules/hall-ui/public/task-detail.js:484` |
 | `d5d76f1c0dfe` | certain | ○ reserved | `modules/hall-ui/public/diagrams.html:44` |
 | `97b0773e72a5` | certain | ● LIVE | `modules/hall-ui/public/diagrams.html:42` |
 | `1375334c77f6` | certain | ⚠ This box is running | `modules/hall-ui/public/box-panel.js:202` |

package/docs/copy-registry.json

@@ -3900,7 +3900,7 @@
       "surface": "builders-hall",
       "text": "Create task",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 367,
+      "line": 372,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4305,7 +4305,7 @@
       "surface": "builders-hall",
       "text": "Estimate (min)",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 362,
+      "line": 367,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4629,7 +4629,7 @@
       "surface": "builders-hall",
       "text": "Fold this idea into #",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 457,
+      "line": 462,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5709,7 +5709,7 @@
       "surface": "builders-hall",
       "text": "Loading versions…",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 320,
+      "line": 325,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6348,7 +6348,7 @@
       "surface": "builders-hall",
       "text": "Note (optional)",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 460,
+      "line": 465,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7158,7 +7158,7 @@
       "surface": "builders-hall",
       "text": "Reason (optional)",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 511,
+      "line": 516,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10533,7 +10533,7 @@
       "surface": "builders-hall",
       "text": "idea number",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 458,
+      "line": 463,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10677,7 +10677,7 @@
       "surface": "builders-hall",
       "text": "loading goals…",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 384,
+      "line": 389,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11424,7 +11424,7 @@
       "surface": "builders-hall",
       "text": "why these are the same",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 461,
+      "line": 466,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11433,7 +11433,7 @@
       "surface": "builders-hall",
       "text": "why this isn’t worth doing",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 512,
+      "line": 517,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11991,7 +11991,7 @@
       "surface": "builders-hall",
       "text": "— none (the version's general bucket) —",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 315,
+      "line": 320,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12153,7 +12153,7 @@
       "surface": "builders-hall",
       "text": "→ no idea #",
       "file": "modules/hall-ui/public/task-detail.js",
-      "line": 479,
+      "line": 484,
       "origin": "js-text-assign",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1445,5 +1445,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.502 with no explicit bump. run 33783963947. (task 1002620)
   1.19.504 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.503 with no explicit bump. run 33784387586. (task 1002620)
+  1.19.505 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.504 with no explicit bump. run 33785121177. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/task-detail.js

@@ -271,11 +271,16 @@
     // triage path: the STORED hint (idea.suggested_goal_id, written by
     // inbox.captureIdea precisely so triage inherits the guess) wins; the R07
     // suggester only fills in when there is no hint. Returns option HTML.
-    async function goalOptionsFor(versionId) {
+    // `allowHint` scopes the stored hint to the version it was filed against. A
+    // goal belongs to exactly ONE version and POST /tasks 400s `bad_goal_id` on a
+    // goal from another one, so carrying the hint across a version change offered
+    // — pre-selected — the single option guaranteed to fail (found by
+    // tests/task_detail_ui.mjs, task 1003516).
+    async function goalOptionsFor(versionId, allowHint) {
       // Number() so a junk stored value cannot reach the DOM as value="NaN" and
       // then be POSTed as a goal id.
       var raw = Number(idea.suggested_goal_id);
-      var hint = Number.isFinite(raw) && raw > 0 ? raw : null;
+      var hint = allowHint && Number.isFinite(raw) && raw > 0 ? raw : null;
       var suggestions = [];
       // The suggester is a convenience, so an outage degrades to "no suggestions"
       // and must not stop a triage verdict — the hint and the opt-out below are
@@ -348,7 +353,7 @@
       // Fetched for the PREFERRED version; the change listener below re-fetches,
       // because goals belong to a version and showing another version's goals
       // would offer a home the server would reject.
-      var goalOptions = await goalOptionsFor(preferred);
+      var goalOptions = await goalOptionsFor(preferred, true);
       var priOptions = [1, 2, 3, 4, 5].map(function (p) {
         return '<option value="' + p + '"' + (p === pri ? ' selected' : '') + '>P' + p + '</option>';
       }).join('');
@@ -382,7 +387,7 @@
           var mine = ++goalFetch;
           gsel.disabled = true;
           gsel.innerHTML = '<option value="">loading goals…</option>';
-          var html = await goalOptionsFor(vsel.value);
+          var html = await goalOptionsFor(vsel.value, vsel.value === preferred);
           if (mine !== goalFetch) return;
           gsel.innerHTML = html;
           gsel.disabled = false;

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.504",
+  "version": "1.19.505",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.504",
+      "version": "1.19.505",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.504",
+  "version": "1.19.505",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -45,7 +45,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.504'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.505'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/promote_goal_id.mjs

@@ -294,7 +294,10 @@ await test('DEGRADES: the hall re-fetches goals when the version changes, newest
   // Goals belong to a version; keeping stale options would offer a home the
   // server would reject.
   assert.match(HALL, /vsel\.addEventListener\('change'/);
-  assert.match(HALL, /await goalOptionsFor\(vsel\.value\)/);
+  // The second argument (task 1003516) scopes the filed goal hint to the version
+  // it was filed against — matched loosely so this pins the re-fetch, not the
+  // argument list.
+  assert.match(HALL, /await goalOptionsFor\(vsel\.value/);
 });
 
 await test('the CLI uses the GENERATED typed client method, not the raw escape hatch', () => {

package/tests/task_detail_ui.mjs

@@ -0,0 +1,710 @@
+// tests/task_detail_ui.mjs — the hall's idea overlay, EXECUTED (task 1003516).
+//
+// modules/hall-ui/public/task-detail.js carries the whole in-hall idea-triage
+// surface: the Promote / Merge / Discard disclosure forms (task 1002447), the
+// version picker, and the goal picker with its hint-beats-suggester precedence
+// and out-of-order-fetch race guard (task 1003071). Until this file its only
+// test asserted on the SOURCE TEXT, so a ReferenceError inside a submit handler
+// passed the suite and 500'd at click time — the class of gap behind the task
+// 1003102 blocker. Browser code fails when a human clicks, and only a harness
+// that clicks can see that.
+//
+// Why a vm harness rather than jsdom: there is no jsdom in this repo. The
+// precedent is tests/goal_criterion_confirm_ui.mjs (after tests/hall_signout.mjs),
+// which runs the real page script inside `vm` under a hand-built DOM stub. This
+// stub goes one step further than those: it PARSES the markup the file writes
+// into innerHTML, so `querySelector('[data-goal-select]')` resolves only if the
+// element is genuinely there, form fields carry the real values the file
+// rendered (escaping included), and every handler runs for real.
+//
+// Covers:
+//   • the overlay boots from the hash and renders the Metic triage panel
+//   • promote with a goal chosen — POST /tasks carries goal_id, the idea is then
+//     PATCHed promoted, and the panel links the created task
+//   • promote opting out — NO goal_id key at all (the server's catch-all bucket
+//     applies only when the key is absent)
+//   • the version change re-fetches that version's goals and repaints the picker;
+//     a raced pair of changes lets only the newest write
+//   • the two-write failure path — the task is created, the idea PATCH fails, and
+//     the created task id survives in the message the builder reads
+//   • merge and discard submit their PATCH, announce, and close the overlay
+//   • a 403 is read out of the NESTED error envelope rather than swallowed
+//
+// Run:  node tests/task_detail_ui.mjs
+
+import { strict as assert } from 'node:assert';
+import fs from 'node:fs';
+import path from 'node:path';
+import vm from 'node:vm';
+import { fileURLToPath } from 'node:url';
+import { makeRunner } from './helpers.mjs';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const SRC = fs.readFileSync(path.join(ROOT, 'modules/hall-ui/public/task-detail.js'), 'utf8');
+
+const { test, summary } = makeRunner();
+
+// ===========================================================================
+// A minimal DOM that actually parses what the file writes.
+// ===========================================================================
+
+const VOID_TAGS = new Set(['input', 'br', 'img', 'hr', 'meta', 'link']);
+
+function decodeEntities(s) {
+  return String(s)
+    .replace(/&lt;/g, '<').replace(/&gt;/g, '>')
+    .replace(/&quot;/g, '"').replace(/&#39;/g, "'")
+    .replace(/&amp;/g, '&');
+}
+
+function parseAttrs(text) {
+  const out = {};
+  const re = /([\w:-]+)(?:\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+)))?/g;
+  let m;
+  while ((m = re.exec(text))) {
+    const raw = m[2] !== undefined ? m[2] : m[3] !== undefined ? m[3] : m[4] !== undefined ? m[4] : '';
+    out[m[1].toLowerCase()] = decodeEntities(raw);
+  }
+  return out;
+}
+
+// Compound selectors only (tag / .class / #id / [attr] / [attr="v"], comma lists)
+// — that is every selector task-detail.js uses, and refusing anything richer
+// keeps the stub honest about what it can prove.
+function matchesOne(el, sel) {
+  let ok = true;
+  const re = /([a-zA-Z][\w-]*)|\.([\w-]+)|#([\w-]+)|\[([\w:-]+)(?:=["']([^"']*)["'])?\]/g;
+  let m;
+  while ((m = re.exec(sel))) {
+    if (m[1]) ok = ok && el.tagName === m[1].toLowerCase();
+    else if (m[2]) ok = ok && String(el.className || '').split(/\s+/).includes(m[2]);
+    else if (m[3]) ok = ok && el.id === m[3];
+    else if (m[4]) {
+      const have = el.attrs[m[4].toLowerCase()];
+      ok = ok && (m[5] === undefined ? have !== undefined : have === m[5]);
+    }
+  }
+  return ok;
+}
+const matches = (el, sel) => String(sel).split(',').map((s) => s.trim()).filter(Boolean).some((s) => matchesOne(el, s));
+
+function walk(el, fn) {
+  for (const child of el.children) {
+    const hit = fn(child);
+    if (hit) return hit;
+    const deeper = walk(child, fn);
+    if (deeper) return deeper;
+  }
+  return null;
+}
+
+function makeEl(tagName, attrs = {}) {
+  const el = {
+    tagName: String(tagName).toLowerCase(),
+    attrs,
+    children: [],
+    parentNode: null,
+    className: attrs.class || '',
+    id: attrs.id || '',
+    name: attrs.name,
+    dataset: {},
+    disabled: 'disabled' in attrs,
+    style: {},
+    listeners: {},
+    _text: '',
+    _html: null,
+    _value: null,
+
+    get value() {
+      if (this._value !== null) return this._value;
+      if (this.tagName === 'select') {
+        const opts = this.querySelectorAll('option');
+        const chosen = opts.find((o) => 'selected' in o.attrs) || opts[0];
+        return chosen ? (chosen.attrs.value !== undefined ? chosen.attrs.value : chosen.textContent) : '';
+      }
+      return this.attrs.value !== undefined ? this.attrs.value : '';
+    },
+    set value(v) { this._value = String(v); },
+
+    get textContent() { return this._text + this.children.map((c) => c.textContent).join(''); },
+    set textContent(v) { this._text = String(v == null ? '' : v); this.children = []; this._html = null; },
+
+    get innerHTML() { return this._html === null ? '' : this._html; },
+    set innerHTML(v) { this._html = String(v); this._value = null; parseInto(this, this._html); },
+
+    setAttribute(k, v) { this.attrs[String(k).toLowerCase()] = String(v); },
+    getAttribute(k) { const v = this.attrs[String(k).toLowerCase()]; return v === undefined ? null : v; },
+    removeAttribute(k) { delete this.attrs[String(k).toLowerCase()]; },
+    appendChild(child) { child.parentNode = this; this.children.push(child); return child; },
+    remove() {
+      const p = this.parentNode;
+      if (!p) return;
+      p.children = p.children.filter((c) => c !== this);
+      this.parentNode = null;
+    },
+    querySelector(sel) { return walk(this, (c) => (matches(c, sel) ? c : null)); },
+    querySelectorAll(sel) {
+      const out = [];
+      walk(this, (c) => { if (matches(c, sel)) out.push(c); return null; });
+      return out;
+    },
+    closest(sel) {
+      let node = this;
+      while (node) { if (matches(node, sel)) return node; node = node.parentNode; }
+      return null;
+    },
+    addEventListener(type, fn) { (this.listeners[type] = this.listeners[type] || []).push(fn); },
+    focus() {},
+    fire(type, event) { (this.listeners[type] || []).forEach((fn) => fn(event)); },
+  };
+  for (const [k, v] of Object.entries(attrs)) {
+    if (!k.startsWith('data-')) continue;
+    el.dataset[k.slice(5).replace(/-([a-z])/g, (_, c) => c.toUpperCase())] = v;
+  }
+  return el;
+}
+
+// The reserved names a <form>'s named-field shorthand (form.title.value) must
+// never shadow — everything else on the element is fair game, same as the DOM.
+const FORM_FIELD_RESERVED = new Set(['tagName', 'attrs', 'children', 'parentNode', 'className', 'id', 'dataset',
+  'disabled', 'style', 'listeners', 'value', 'textContent', 'innerHTML', 'name']);
+
+function parseInto(host, html) {
+  host.children = [];
+  host._text = '';
+  const stack = [host];
+  const re = /<(\/?)([a-zA-Z][\w-]*)([^>]*?)(\/?)>/g;
+  let last = 0;
+  let m;
+  const addText = (raw) => { if (raw) stack[stack.length - 1]._text += decodeEntities(raw); };
+  while ((m = re.exec(html))) {
+    addText(html.slice(last, m.index));
+    last = re.lastIndex;
+    const tag = m[2].toLowerCase();
+    if (m[1]) {
+      for (let i = stack.length - 1; i > 0; i--) if (stack[i].tagName === tag) { stack.length = i; break; }
+      continue;
+    }
+    const el = makeEl(tag, parseAttrs(m[3]));
+    stack[stack.length - 1].appendChild(el);
+    if (!m[4] && !VOID_TAGS.has(tag)) stack.push(el);
+  }
+  addText(html.slice(last));
+  // Named-field access on every form the markup just produced.
+  walk(host, (el) => {
+    if (el.tagName !== 'form') return null;
+    for (const field of el.querySelectorAll('input, select, textarea')) {
+      if (!field.name || FORM_FIELD_RESERVED.has(field.name) || field.name in el) continue;
+      el[field.name] = field;
+    }
+    return null;
+  });
+}
+
+// ===========================================================================
+// The harness: run the real file against a scripted API and hand back handles.
+// ===========================================================================
+
+const IDEA_ID = 1000817;
+const DEFAULT_IDEA = {
+  id: IDEA_ID,
+  status: 'open',
+  title: 'Cover the overlay\'s "promote" & <merge> handlers',
+  body_md: 'The overlay has no executing test.',
+  kind: 'blocker-resolution',
+  suggested_version: 'BV2',
+  suggested_priority: 2,
+  suggested_goal_id: 1000071,
+};
+const DEFAULT_VERSIONS = [
+  { id: 'BV1', name: 'Platform one', status: 'planning' },
+  { id: 'BV2', name: 'Platform two', status: 'active' },
+  { id: 'OLD', name: 'Already out', status: 'shipped' },
+];
+const DEFAULT_SUGGESTIONS = {
+  BV1: [{ id: 1000058, title: 'Consumer path', score: 4, matched_terms: ['overlay'] }],
+  BV2: [{ id: 1000062, title: 'Idea surfaces', score: 6, matched_terms: ['promote', 'merge'] }],
+};
+
+const escapeHtml = (s) => String(s == null ? '' : s).replace(/[&<>"']/g,
+  (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
+
+const tick = (ms = 0) => new Promise((r) => setTimeout(r, ms));
+async function settle(extraMs = 0) {
+  if (extraMs) await tick(extraMs);
+  for (let i = 0; i < 30; i++) await tick(0);
+}
+
+function fail(status, code, message) {
+  return { status, ok: false, data: { error: { code, message } } };
+}
+
+async function boot(opts = {}) {
+  const {
+    idea = DEFAULT_IDEA,
+    rank = 'metic',
+    versions = DEFAULT_VERSIONS,
+    suggestions = DEFAULT_SUGGESTIONS,
+    suggestDelayMs = {},
+    suggestThrows = false,
+    createdTask = { id: 1003600, title: 'Cover the overlay handlers' },
+    createFails = null,
+    patchFails = null,
+    mergeTargets = { 1000900: { id: 1000900, title: 'The canonical idea' } },
+  } = opts;
+
+  const requests = [];
+  const toasts = [];
+  const events = [];
+  const navigations = [];
+
+  const ok = (data) => ({ status: 200, ok: true, data });
+  const api = {
+    async request(method, p, init) {
+      const body = init && init.body;
+      requests.push({ method, path: p, body });
+      const url = p.replace('/api/bongos', '');
+      const [route, query] = url.split('?');
+      if (method === 'GET' && route === '/me') return ok({ builder: { id: 1, rank } });
+      if (method === 'GET' && route === '/versions') return ok({ versions });
+      if (method === 'GET' && route === '/goals/suggestions') {
+        const version = new URLSearchParams(query || '').get('version');
+        const delay = suggestDelayMs[version] || 0;
+        if (delay) await tick(delay);
+        if (suggestThrows) return { status: 503, ok: false, data: null };
+        return ok({ suggestions: suggestions[version] || [] });
+      }
+      if (method === 'GET' && route.startsWith('/inbox/')) {
+        const id = Number(route.slice('/inbox/'.length));
+        if (id === Number(idea.id)) return ok({ idea });
+        if (mergeTargets[id]) return ok({ idea: mergeTargets[id] });
+        return { status: 404, ok: false, data: null };
+      }
+      if (method === 'POST' && route === '/tasks') return createFails || ok({ task: { ...createdTask, title: body.title } });
+      if (method === 'PATCH' && route.startsWith('/inbox/')) return patchFails || ok({ idea: { ...idea, status: body.status } });
+      return ok({});
+    },
+  };
+
+  const locationObj = {
+    hostname: 'builders.example.test',
+    pathname: '/builders',
+    search: '',
+    hash: `#/idea/${idea.id}`,
+    href: '',
+    assign(u) { navigations.push(['assign', u]); },
+    replace(u) { navigations.push(['replace', u]); },
+  };
+  const documentObj = {
+    readyState: 'complete',
+    body: makeEl('body'),
+    documentElement: makeEl('html'),
+    createElement: (tag) => makeEl(tag),
+    getElementById(id) { return walk(this.body, (el) => (el.id === id ? el : null)); },
+    querySelector(sel) { return this.body.querySelector(sel); },
+    querySelectorAll(sel) { return this.body.querySelectorAll(sel); },
+    createTextNode(text) { const n = makeEl('#text'); n._text = String(text); return n; },
+    addEventListener() {},
+  };
+  const windowObj = {
+    OTB: { escapeHtml, toast: (m) => toasts.push(m) },
+    BongosClient: { createClient: () => api },
+    location: locationObj,
+    addEventListener() {},
+    dispatchEvent(ev) { events.push(ev); return true; },
+  };
+  class CustomEvent {
+    constructor(type, init) { this.type = type; this.detail = init && init.detail; }
+  }
+
+  const sandbox = {
+    window: windowObj, document: documentObj, location: locationObj, CustomEvent,
+    history: { replaceState() {} },
+    sessionStorage: { getItem: () => null, setItem() {}, removeItem() {} },
+    console, setTimeout, clearTimeout, Promise, Date, Math, JSON, Error,
+    Number, String, Object, Array, Boolean, Set, Map, RegExp, encodeURIComponent,
+  };
+  sandbox.globalThis = sandbox;
+  vm.createContext(sandbox);
+  vm.runInContext(SRC, sandbox, { filename: 'task-detail.js' });
+  await settle();
+
+  const overlay = () => documentObj.getElementById('deeplink-card');
+  const panel = () => { const o = overlay(); return o ? o.querySelector('.td-triage') : null; };
+  const errText = () => { const p = panel(); const e = p && p.querySelector('[data-err]'); return e ? e.textContent : null; };
+  const requestsTo = (method, re) => requests.filter((r) => r.method === method && re.test(r.path));
+
+  // A real delegated click: the panel's own listener, handed a target whose
+  // closest() walks the parsed tree — exactly what the browser passes it.
+  async function clickGo(mode) {
+    const p = panel();
+    assert.ok(p, 'the triage panel must be rendered before a click');
+    const btn = p.querySelector(`[data-go="${mode}"]`);
+    assert.ok(btn, `no [data-go="${mode}"] control in the panel — got: ${p.innerHTML}`);
+    p.fire('click', { target: btn });
+    await settle();
+    return btn;
+  }
+
+  async function submitForm(which) {
+    const form = panel().querySelector(`[data-form="${which}"]`);
+    assert.ok(form, `no ${which} form rendered`);
+    let prevented = false;
+    form.fire('submit', { preventDefault() { prevented = true; }, target: form });
+    await settle();
+    // The handler is wired with preventDefault() first: if this is false the
+    // submit listener never ran and every assertion below would be vacuous.
+    assert.equal(prevented, true, `the ${which} submit handler did not execute`);
+    return form;
+  }
+
+  async function changeVersion(versionId, { wait = 0 } = {}) {
+    const sel = panel().querySelector('select[name="version"]');
+    assert.ok(sel, 'the promote form must offer a version picker');
+    sel.value = versionId;
+    sel.fire('change', {});
+    if (wait) await settle(wait);
+    return sel;
+  }
+
+  return {
+    requests, requestsTo, toasts, events, navigations,
+    overlay, panel, errText, clickGo, submitForm, changeVersion, settle,
+    goalSelect: () => panel().querySelector('[data-goal-select]'),
+    field: (which, name) => panel().querySelector(`[data-form="${which}"]`)[name],
+  };
+}
+
+// ===========================================================================
+// The overlay boots and offers the triage panel
+// ===========================================================================
+
+await test('the overlay boots off the hash and renders the panel for a Metic', async () => {
+  const h = await boot();
+  assert.ok(h.overlay(), 'a #deeplink-card overlay is mounted');
+  assert.ok(h.panel(), 'and an open idea carries the triage panel');
+  const verbs = h.panel().querySelectorAll('[data-go]').map((b) => b.dataset.go);
+  assert.deepEqual(verbs, ['promote', 'merge', 'discard'], 'all three verdicts are reachable');
+});
+
+await test('a Xenos gets the card but no triage panel (the server gate is mirrored, not trusted)', async () => {
+  const h = await boot({ rank: 'xenos' });
+  assert.ok(h.overlay(), 'the record is still readable');
+  assert.equal(h.panel(), null, 'the actions are not offered below Metic');
+});
+
+await test('a closed idea offers no triage panel', async () => {
+  const h = await boot({ idea: { ...DEFAULT_IDEA, status: 'promoted' } });
+  assert.equal(h.panel(), null, 'a settled idea has nothing left to decide');
+});
+
+// ===========================================================================
+// Promote — the form the version and goal pickers live on
+// ===========================================================================
+
+await test('opening Promote loads open versions only, and preselects the idea\'s suggested one', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  const vsel = h.panel().querySelector('select[name="version"]');
+  const ids = vsel.querySelectorAll('option').map((o) => o.attrs.value);
+  assert.deepEqual(ids, ['BV1', 'BV2'], 'a shipped version would 409 the create, so it is not offered');
+  assert.equal(vsel.value, 'BV2', 'the idea\'s suggested_version is honoured');
+});
+
+await test('the goal picker leads with the STORED hint, then the suggester, then the opt-out', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  const opts = h.goalSelect().querySelectorAll('option');
+  assert.equal(opts[0].attrs.value, '1000071', 'the hint carried from the filing comes first');
+  assert.ok('selected' in opts[0].attrs, 'and it is what the form will submit');
+  assert.match(opts[0].textContent, /carried from the filing/);
+  assert.equal(opts[1].attrs.value, '1000062', 'the suggester fills in below it');
+  assert.match(opts[1].textContent, /matched: promote, merge/, 'with the evidence for judging it');
+  assert.equal(opts[opts.length - 1].attrs.value, '', 'the opt-out is always available');
+});
+
+await test('with no stored hint the top suggestion is preselected instead', async () => {
+  const h = await boot({ idea: { ...DEFAULT_IDEA, suggested_goal_id: null } });
+  await h.clickGo('promote');
+  assert.equal(h.goalSelect().value, '1000062', 'the suggester supplies the default when nothing was named');
+});
+
+await test('a suggester outage degrades to the opt-out rather than blocking the verdict', async () => {
+  const h = await boot({ suggestThrows: true, idea: { ...DEFAULT_IDEA, suggested_goal_id: null } });
+  await h.clickGo('promote');
+  const opts = h.goalSelect().querySelectorAll('option');
+  assert.equal(opts.length, 1, 'only the opt-out remains');
+  assert.equal(h.goalSelect().value, '', 'and it is selected, so the form is still submittable');
+});
+
+await test('promote with a goal chosen POSTs goal_id, then marks the idea promoted', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  await h.submitForm('promote');
+
+  const posts = h.requestsTo('POST', /\/tasks$/);
+  assert.equal(posts.length, 1, `exactly one create — got ${JSON.stringify(h.requests.map((r) => r.method + ' ' + r.path))}`);
+  const body = posts[0].body;
+  assert.equal(body.goal_id, 1000071, 'the chosen goal reaches the server as a number');
+  assert.equal(body.version_id, 'BV2');
+  assert.equal(body.priority, 2, 'suggested_priority is carried, clamped into the 1-5 the column allows');
+  assert.equal(body.source_ref, `idea:${IDEA_ID}`, 'provenance makes a retried promote idempotent');
+  assert.equal(body.kind, 'blocker-resolution', 'the idea\'s kind saves the classifier a guess');
+  assert.match(body.description, /Promoted from idea/, 'the task says where it came from');
+  assert.ok(!('est_minutes' in body) && !('credits_reward' in body), 'blank number fields are omitted, not sent as 0');
+
+  const patches = h.requestsTo('PATCH', new RegExp(`/inbox/${IDEA_ID}$`));
+  assert.equal(patches.length, 1, 'the idea is linked to the task it became');
+  assert.equal(patches[0].body.status, 'promoted');
+  assert.equal(patches[0].body.promoted_to_task_id, 1003600);
+
+  assert.match(h.panel().innerHTML, /Promoted to task/, 'the panel reports the result');
+  assert.match(h.panel().innerHTML, /href="\/task\/1003600"/, 'and links the task it made');
+  assert.ok(h.events.some((e) => e.type === 'otb:idea-triaged' && e.detail.verdict === 'promoted'),
+    'home\'s attention inbox is told so the queue advances behind the overlay');
+});
+
+await test('the title survives escaping — what the form renders is what gets created', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  await h.submitForm('promote');
+  assert.equal(h.requestsTo('POST', /\/tasks$/)[0].body.title, DEFAULT_IDEA.title,
+    'quotes and angle brackets must round-trip through the value attribute unmangled');
+});
+
+await test('promote opting OUT of a goal sends no goal_id key at all', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  h.goalSelect().value = '';
+  await h.submitForm('promote');
+  const body = h.requestsTo('POST', /\/tasks$/)[0].body;
+  assert.ok(!('goal_id' in body),
+    'the version\'s general bucket applies only on an ABSENT key — sending null or "" would be a different create');
+});
+
+await test('an empty title is refused in the browser, before a doomed request', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  h.panel().querySelector('[name="title"]').value = '   ';
+  await h.submitForm('promote');
+  assert.equal(h.requestsTo('POST', /\/tasks$/).length, 0, 'nothing is sent');
+  assert.match(h.errText(), /A task needs a title/);
+});
+
+// ===========================================================================
+// The version change re-fetches goals (task 1003071's race guard)
+// ===========================================================================
+
+await test('changing the version re-fetches THAT version\'s goals and repaints the picker', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  const before = h.requestsTo('GET', /\/goals\/suggestions/).length;
+  await h.changeVersion('BV1', { wait: 5 });
+
+  const fetches = h.requestsTo('GET', /\/goals\/suggestions/);
+  assert.equal(fetches.length, before + 1, 'exactly one re-fetch');
+  assert.match(fetches[fetches.length - 1].path, /version=BV1/, 'for the version now selected');
+
+  const opts = h.goalSelect().querySelectorAll('option').map((o) => o.attrs.value);
+  assert.ok(opts.includes('1000058'), `BV1's goals are painted — got ${JSON.stringify(opts)}`);
+  assert.ok(!opts.includes('1000062'), 'and BV2\'s are gone — offering them would be a home the server rejects');
+  assert.equal(h.goalSelect().disabled, false, 'the control is handed back to the builder');
+});
+
+await test('two quick version changes: only the NEWEST is allowed to write', async () => {
+  // The slow reply belongs to the abandoned selection; if it were allowed to
+  // land it would paint the wrong version's goals over the right ones.
+  const h = await boot({ suggestDelayMs: { BV1: 40 } });
+  await h.clickGo('promote');
+  await h.changeVersion('BV1');
+  await h.changeVersion('BV2');
+  await h.settle(80);
+
+  const opts = h.goalSelect().querySelectorAll('option').map((o) => o.attrs.value);
+  assert.ok(opts.includes('1000062'), `the newest request's goals stand — got ${JSON.stringify(opts)}`);
+  assert.ok(!opts.includes('1000058'), 'the stale reply is dropped, not painted');
+  assert.equal(h.goalSelect().disabled, false, 'and the newest request re-enabled the control');
+});
+
+await test('after a version change the promoted task is created against the NEW version', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  await h.changeVersion('BV1', { wait: 5 });
+  await h.submitForm('promote');
+  const body = h.requestsTo('POST', /\/tasks$/)[0].body;
+  assert.equal(body.version_id, 'BV1');
+  assert.equal(body.goal_id, 1000058, 'and against a goal that belongs to it');
+});
+
+await test('the filed goal hint does NOT survive a version change — it would 400', async () => {
+  // The defect this harness was built to find. A goal belongs to exactly one
+  // version and POST /tasks rejects a foreign one with bad_goal_id, so carrying
+  // the filing's hint onto another version offered the one option guaranteed to
+  // fail — pre-selected, as the default the builder would submit.
+  const h = await boot();
+  await h.clickGo('promote');
+  await h.changeVersion('BV1', { wait: 5 });
+  const opts = h.goalSelect().querySelectorAll('option').map((o) => o.attrs.value);
+  assert.ok(!opts.includes('1000071'), `the other version's hint is not offered — got ${JSON.stringify(opts)}`);
+});
+
+await test('changing BACK to the filed version restores the hint as the default', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  await h.changeVersion('BV1', { wait: 5 });
+  await h.changeVersion('BV2', { wait: 5 });
+  assert.equal(h.goalSelect().value, '1000071', 'the filing\'s guess is honoured wherever it is valid');
+});
+
+// ===========================================================================
+// The two-write failure path
+// ===========================================================================
+
+await test('create succeeds but the idea PATCH fails: the task id is NOT lost', async () => {
+  const h = await boot({ patchFails: fail(500, 'internal_error', 'boom') });
+  await h.clickGo('promote');
+  await h.submitForm('promote');
+
+  assert.equal(h.requestsTo('POST', /\/tasks$/).length, 1, 'the task was created');
+  const msg = h.errText();
+  assert.match(msg, /1003600/, 'the created task id is in front of the builder — "could not create" would send them to make a twin');
+  assert.match(msg, /Press Create task again/, 'and the retry is named as the fix');
+  assert.match(msg, /it does not make a second one/, 'because the create is idempotent on source_ref');
+  assert.match(h.panel().innerHTML, /data-form="promote"/, 'the form is still standing to retry from');
+  assert.equal(h.panel().querySelector('[data-submit]').disabled, false, 'and the button is usable again');
+  assert.equal(h.panel().querySelector('[data-submit]').textContent, 'Create task', 'restored from its busy label');
+  assert.ok(!h.events.some((e) => e.type === 'otb:idea-triaged'),
+    'nothing is announced — the idea is still open');
+});
+
+await test('retrying after that failure re-sends the SAME create rather than a second one', async () => {
+  const h = await boot({ patchFails: fail(500, 'internal_error', 'boom') });
+  await h.clickGo('promote');
+  await h.submitForm('promote');
+  await h.submitForm('promote');
+  const posts = h.requestsTo('POST', /\/tasks$/);
+  assert.equal(posts.length, 2, 'the retry goes back through the create');
+  assert.equal(posts[0].body.source_ref, posts[1].body.source_ref,
+    'with the same idempotency key, so the server resolves it to one task');
+});
+
+await test('a failed create reports the server\'s reason and leaves the idea alone', async () => {
+  const h = await boot({ createFails: fail(409, 'version_closed', 'nope') });
+  await h.clickGo('promote');
+  await h.submitForm('promote');
+  assert.equal(h.requestsTo('PATCH', /\/inbox\//).length, 0, 'no idea is marked promoted against a task that does not exist');
+  assert.match(h.errText(), /That version has shipped/, 'the code is mapped to something a human can act on');
+});
+
+await test('a 403 is read out of the NESTED error envelope, not swallowed', async () => {
+  // err.data.error is an OBJECT: reading it as a string would make every code
+  // comparison silently miss and fall through to the generic message.
+  const h = await boot({ createFails: fail(403, 'permission_forbidden', 'no') });
+  await h.clickGo('promote');
+  await h.submitForm('promote');
+  assert.match(h.errText(), /Only Metic\+ can triage ideas/);
+});
+
+// ===========================================================================
+// Merge and Discard
+// ===========================================================================
+
+await test('merge PATCHes the fold, announces it, and closes the overlay', async () => {
+  const h = await boot();
+  await h.clickGo('merge');
+  h.field('merge', 'target').value = '1000900';
+  h.field('merge', 'note').value = 'same request, twice';
+  await h.submitForm('merge');
+
+  const patch = h.requestsTo('PATCH', new RegExp(`/inbox/${IDEA_ID}$`))[0];
+  assert.equal(patch.body.status, 'merged');
+  assert.equal(patch.body.merged_into_idea_id, 1000900);
+  assert.equal(patch.body.triage_note, 'same request, twice');
+  assert.ok(h.events.some((e) => e.detail.verdict === 'merged'), 'the queue behind the overlay is told');
+  assert.ok(h.toasts.some((t) => /merged into/.test(t)), `the verdict is confirmed — got ${JSON.stringify(h.toasts)}`);
+  assert.equal(h.overlay(), null, 'a verdict that leaves nothing to look at closes the card');
+});
+
+await test('the merge form echoes the target idea\'s title so a typo is visible', async () => {
+  const h = await boot();
+  await h.clickGo('merge');
+  const input = h.field('merge', 'target');
+  input.value = '1000900';
+  input.fire('change', {});
+  await h.settle();
+  assert.match(h.panel().querySelector('[data-target-name]').textContent, /The canonical idea/);
+
+  input.value = '999999';
+  input.fire('change', {});
+  await h.settle();
+  assert.match(h.panel().querySelector('[data-target-name]').textContent, /no idea/, 'an unknown number says so');
+});
+
+await test('merge refuses a blank target in the browser', async () => {
+  const h = await boot();
+  await h.clickGo('merge');
+  await h.submitForm('merge');
+  assert.equal(h.requestsTo('PATCH', /\/inbox\//).length, 0);
+  assert.match(h.errText(), /Give the idea number/);
+});
+
+await test('discard PATCHes the reason and closes the overlay', async () => {
+  const h = await boot();
+  await h.clickGo('discard');
+  h.field('discard', 'note').value = 'already covered elsewhere';
+  await h.submitForm('discard');
+  const patch = h.requestsTo('PATCH', new RegExp(`/inbox/${IDEA_ID}$`))[0];
+  assert.equal(patch.body.status, 'discarded');
+  assert.equal(patch.body.triage_note, 'already covered elsewhere');
+  assert.ok(h.events.some((e) => e.detail.verdict === 'discarded'));
+  assert.equal(h.overlay(), null);
+});
+
+await test('a discard with no reason sends null, not an empty string', async () => {
+  const h = await boot();
+  await h.clickGo('discard');
+  await h.submitForm('discard');
+  assert.equal(h.requestsTo('PATCH', /\/inbox\//)[0].body.triage_note, null);
+});
+
+await test('a failed discard keeps the form up with the reason typed into it', async () => {
+  // No envelope at all (a proxy 500, a dropped body): the fallback sentence has
+  // to stand in, because an empty message would leave the panel silent.
+  const h = await boot({ patchFails: { status: 500, ok: false, data: null } });
+  await h.clickGo('discard');
+  h.field('discard', 'note').value = 'no longer wanted';
+  await h.submitForm('discard');
+  assert.ok(h.overlay(), 'the overlay stays open on a failure');
+  assert.match(h.errText(), /Could not discard that idea/);
+  assert.equal(h.field('discard', 'note').value, 'no longer wanted', 'the typed reason is not thrown away');
+});
+
+await test('a server message in the envelope is shown verbatim rather than replaced', async () => {
+  const h = await boot({ patchFails: fail(422, 'unprocessable', 'That idea was already triaged.') });
+  await h.clickGo('discard');
+  await h.submitForm('discard');
+  assert.equal(h.errText(), 'That idea was already triaged.',
+    'an unmapped code still tells the builder what the server said');
+});
+
+// ===========================================================================
+// Getting back out of a form
+// ===========================================================================
+
+await test('Cancel returns to the three verbs without sending anything', async () => {
+  const h = await boot();
+  await h.clickGo('promote');
+  await h.clickGo('idle');
+  const verbs = h.panel().querySelectorAll('[data-go]').map((b) => b.dataset.go);
+  assert.deepEqual(verbs, ['promote', 'merge', 'discard']);
+  assert.equal(h.requestsTo('POST', /\/tasks$/).length, 0);
+});
+
+await test('a version list that will not load offers a way back rather than a dead panel', async () => {
+  const h = await boot({ versions: [] });
+  await h.clickGo('promote');
+  assert.match(h.panel().textContent, /No open version/);
+  assert.ok(h.panel().querySelector('[data-go="idle"]'), 'a builder is never stranded mid-panel');
+});
+
+summary();