@bongos/core 1.19.622 → 1.19.623

package/modules/hall-ui/public/government.js

@@ -25,39 +25,41 @@
 // gated server-side on the `government.manage` atom (archon floor). On 401 →
 // web sign-in.
 //
-// SINCE R15 (goal 1000069, ADR 0175) this page carries a three-section IA,
-// because Government is the page that answers "how is this project governed"
-// and administration is only one part of that answer. Task 1003269 reordered
-// the tabs to Permissions · Board Room · Constitution (the administering Archon
-// works from the first of those, and it used to sit last) and shortened the
-// "Ranks & Permissions" label to "Permissions". Tabs are OTBKit.makeTabs with
-// hash deep links, and the HASH IDS DID NOT CHANGE with that reorder
-// (#constitution / #board-room / #ranks) — they are linked from Discord and
-// docs.
+// SINCE ADR 0266 THIS PAGE CARRIES TWO SECTIONS, not three: Permissions and
+// Constitution. Government is still the page that answers "how is this project
+// governed", and administration is only one part of that answer — but the BOARD
+// ROOM, which used to be the third section, is now its own page at /board-room
+// (modules/hall-ui/public/board-room.js), gated on the `board.vote.cast`
+// permission instead of this page's rank floor, so the room's reach equals the
+// right to vote. Task 1003269 had earlier reordered the tabs and shortened
+// "Ranks & Permissions" to "Permissions"; what survives from that is the
+// ordering rule — the administering Archon works from the first tab.
 //
-// The Constitution and Board Room sections began as FRAMES (named here by
-// section, not by position, so a reorder like 1003269's cannot make this
-// comment lie): R18 filled Constitution with the live values + change history,
-// R19 added the charter library, and R16/R17 filled the Board Room with open
-// items and the vote. Until a frame is filled it states what belongs there
-// and shows an honest kit empty state — never a fake or a hardcoded value that
-// could drift from the real config.
+// Tabs are OTBKit.makeTabs with hash deep links. #constitution and #ranks are
+// unchanged and still linked from Discord and docs. #board-room is NOT a
+// section here any more: redirectLegacyBoardHash() in init() forwards it to
+// /board-room, preserving ?item=N. That redirect is CLIENT-SIDE on purpose — a
+// fragment never reaches the server, so no route could ever catch it — and it
+// stays for at least one release, because Discord announcements already in
+// channel history carry the old form forever.
 //
-// TASK 1003270 rebuilt the BOARD ROOM CARD around one claim: the idea is the
-// subject, everything else is apparatus. So the idea's title renders at title
-// size and its five sections render open as prose; the ballot sits directly
-// beneath the title; and the government apparatus — who votes, how it passes,
-// the clock, the open ballot — moved behind one summary that still shows the
-// tally. Two rules came out of it and should survive the next edit here:
-//   • NO RAW CONFIG KEY REACHES A READER. `first_ratifier` / `rank:archon` /
-//     `why_matters` are grammar for the server; a person gets the sentence
-//     (decidedByHtml, rankNames, SECTION_LABELS). The single exception is a
-//     membership predicate that cannot be PARSED, where the broken string is
-//     the actionable fact.
+// The Constitution section began as a FRAME (named here by section, not by
+// position, so a reorder like 1003269's cannot make this comment lie): R18
+// filled it with the live values + change history, R19 added the charter
+// library, and task 1003739 (ADR 0268) added the divergence warning that fires
+// when the board ratified a constitution that is not the one in force. Until a
+// frame is filled it states what belongs there and shows an honest kit empty
+// state — never a fake or a hardcoded value that could drift from the real
+// config. The Board Room's own history — R16/R17's open items and vote, and
+// task 1003270's card — moved to board-room.js with the room; read it there.
+//
+// Two rules from task 1003270 outlived that move and still govern this page:
+//   • NO RAW CONFIG KEY REACHES A READER. `first_ratifier` / `rank:archon` are
+//     grammar for the server; a person gets the sentence (membershipSentence,
+//     passRuleSentence, windowSentence, fieldValueHtml, rankNames). The single
+//     exception is a membership predicate that cannot be PARSED, where the
+//     broken string is the actionable fact.
 //   • COPY THAT EXPLAINS THE UI TO ITSELF IS DELETED, not shortened.
-// What simplifying may NOT touch is ADR 0175 §8: an objection still carries a
-// reason and names one section. That requirement is why voting lives in the
-// hall and not on a chat reaction.
 //
 // TASK 1003469 put the page in the chrome world's COMPOSITION, not just its
 // tokens: every section is a shell .scroll panel with the display-voice heading,
@@ -65,7 +67,7 @@
 // five unrelated lists that shared `.gov-assign-row` each render as the row they
 // are, the permission grid's bordered boxes became hairline groups, and a rank's
 // DESCRIPTION — collected by the create form and never shown — is the row's sub
-// line. Nothing about the data, the locks, the tab ids or the ballot changed.
+// line. Nothing about the data, the locks or the tab ids changed.
 
 (() => {
   'use strict';
@@ -487,14 +489,16 @@
   // "Ranks & Permissions"; ranks are still what the panel lists, but permissions
   // are the atom (ADR 0151) and the shorter label is the clearer one.
   //
-  // THE HASH IDS ARE LOAD-BEARING AND MUST NOT CHANGE: the Discord board
-  // announcement deep-links ?item=<id>#board-room (board-broadcast.js, and the
-  // reader in loadBoard below), and #constitution/#ranks are linked from docs.
-  // Reorder and relabel freely; the ids are the contract.
+  // THE HASH IDS ARE LOAD-BEARING AND MUST NOT CHANGE: #constitution and #ranks
+  // are linked from docs. Reorder and relabel freely; the ids are the contract.
+  //
+  // TWO ROOMS SINCE ADR 0266, not three — the Board Room moved to /board-room.
+  // `#board-room` is therefore no longer a tab id here, and redirectLegacyBoardHash
+  // below carries the old link across.
   //
   // A non-archon still lands on the Constitution (the page's IA claim: this is
   // the page that answers "how is this project governed"); the Archon still
-  // lands on their working surface, which is now also the first tab.
+  // lands on their working surface, which is also the first tab.
   function wireTabs({ isArchon }) {
     window.OTBKit.makeTabs({
       mount: document.getElementById('gov-tabs'),
@@ -502,12 +506,30 @@
       initial: isArchon ? 'ranks' : 'constitution',
       tabs: [
         { id: 'ranks', label: 'Permissions', panel: 'gov-panel-ranks' },
-        { id: 'board-room', label: 'Board Room', panel: 'gov-panel-board' },
         { id: 'constitution', label: 'Constitution', panel: 'gov-panel-constitution' },
       ],
     });
   }
 
+  // The compatibility path for every `#board-room` link already in the world —
+  // Discord announcements sitting in channel history, bookmarks, older docs
+  // (ADR 0266).
+  //
+  // IT HAS TO BE HERE, in the browser. A URL fragment is never sent to the
+  // server, so no route or redirect in serve-internal.js can see `#board-room`;
+  // adding one looks like the obvious fix and silently never fires. The `?item=N`
+  // query IS sent, and board-room.js reads it, so it is carried across intact.
+  //
+  // Runs before anything else in init() so the reader never sees this page paint.
+  // Keep it for at least one release: announcements in Discord history carry the
+  // old form forever.
+  function redirectLegacyBoardHash() {
+    if (window.location.hash !== '#board-room') return false;
+    const item = new URLSearchParams(window.location.search).get('item');
+    window.location.replace(`/board-room${item ? `?item=${encodeURIComponent(item)}` : ''}`);
+    return true;
+  }
+
   // ---- the Constitution panel (R18) -------------------------------------------
 
   // Plain language over the three dials, straight from the SERVER's resolved
@@ -660,6 +682,19 @@
     close_early_on_full_turnout: 'Closing early on full turnout',
   };
 
+  // A list of rank keys as their display labels, in a phrase a person would say
+  // ("Metic or Archon"). Carved-region residue with a twist (ADR 0266): the copy
+  // that lived here went to board-room.js with the sitting card, and this one
+  // came BACK because the divergence warning below (task 1003739, ADR 0268)
+  // landed a new reader on the Constitution side while the room was moving out.
+  // Its only caller is fieldValueHtml; membershipSentence above spells its own
+  // labels inline, so do not route that through here expecting one wording.
+  function rankNames(keys) {
+    const labels = keys.map((k) => escapeHtml(window.OTB.rankLabel(k)));
+    if (labels.length === 1) return labels[0];
+    return `${labels.slice(0, -1).join(', ')} or ${labels[labels.length - 1]}`;
+  }
+
   // One constitution VALUE, in the words a person would use — the same rule the
   // dials keep, applied to the two halves of a divergence. Without this the
   // warning would be the one place on the page reading "ratified as
@@ -681,6 +716,33 @@
 
   // One dial, one row: the dial's name as the title, the live sentence as the
   // sub line. The sentence is trusted HTML from the helpers above.
+  // A sitting length in the unit a person would say it in. The config stores
+  // minutes; "2880 minutes" is a number nobody converts in their head.
+  //
+  // Lived in the Board Room region until ADR 0266 carved that room onto its own
+  // page. It stayed because windowSentence above reads it; board-room.js keeps
+  // its own copy for the sitting card. Two readers, two files, one wording — if
+  // you change the phrasing here, change it there.
+  function fmtWindow(minutes) {
+    const m = Number(minutes);
+    if (!Number.isFinite(m) || m <= 0) return `${escapeHtml(String(minutes))} minutes`;
+    const plural = (n, word) => `${n} ${word}${n === 1 ? '' : 's'}`;
+    if (m % 1440 === 0) return plural(m / 1440, 'day');
+    if (m % 60 === 0) return plural(m / 60, 'hour');
+    return plural(m, 'minute');
+  }
+
+  // The short name of a pass rule, for a place a whole sentence will not fit —
+  // the change-history line below. Also carved-region residue (ADR 0266): the
+  // sentence-length twin PASS_RULE_PLAIN went to board-room.js with the card,
+  // this one stayed with its only reader, historyRow.
+  const PASS_RULE_NAME = {
+    first_ratifier: 'by first ratifier',
+    consent: 'by consent',
+    majority: 'by majority',
+    unanimous: 'by unanimous agreement',
+  };
+
   function dialRow(name, sentenceHtml) {
     return `<li class="ov-row"><div class="ov-row__main"><span class="ov-row__title">${escapeHtml(name)}</span><p class="ov-row__sub">${sentenceHtml}</p></div></li>`;
   }
@@ -843,337 +905,25 @@
     `;
   }
 
-  // ---- the Board Room panel (R16) --------------------------------------------
-
-  // The room renders what the server assembled: open items with the database's
-  // own countdown, the OPEN BALLOT (people, directions, timestamps, objections),
-  // and the closed history. Nothing here decides anything — casting arrives with
-  // R17; this panel is the accountability surface (§9: a board whose votes are
-  // invisible constrains nobody).
-
-  function fmtRemaining(seconds) {
-    if (seconds === null || seconds === undefined) return null;
-    const s = Number(seconds);
-    if (!Number.isFinite(s) || s <= 0) return 'closing…';
-    if (s < 90) return `closes in ${Math.max(1, Math.round(s))}s`;
-    if (s < 5400) return `closes in ${Math.round(s / 60)}m`;
-    return `closes in ${(s / 3600).toFixed(1)}h`;
-  }
-
-  function subjectLine(item) {
-    if (item.subject_type === 'full_idea') {
-      const title = item.subject ? item.subject.title : `idea ${item.subject_id}`;
-      return `<a href="/#/idea/${escapeHtml(String(item.subject_id))}">${escapeHtml(title)}</a> ${pill('quiet', 'Full Idea')}`;
-    }
-    return `Constitutional amendment ${pill('quiet', 'amendment')}`;
-  }
-
-  function clockLine(item) {
-    if (item.closes_at) {
-      const rem = fmtRemaining(item.remaining_seconds);
-      return rem || 'timed sitting';
-    }
-    const rule = item.constitution && item.constitution.pass_rule;
-    if (rule === 'first_ratifier') return 'no clock — closes on the first vote';
-    // A clockless majority sitting is worth naming honestly: without a deadline
-    // it waits indefinitely for a majority, which is a real state a project can
-    // configure itself into (task 1003273).
-    if (rule === 'majority') return 'no clock — waits for a majority';
-    // Same honesty for unanimity: with no deadline it waits indefinitely for
-    // someone to be in favour, which is a state a project can configure (ADR 0267).
-    if (rule === 'unanimous') return 'no clock — waits for a unanimous yes';
-    return 'no clock';
-  }
-
-  // The open ballot: one voter, one dense row — who, then the direction pill
-  // and the time as facts, and an objection's section and reason as the sub line.
-  function ballotHtml(item, viewerId) {
-    if (!item.votes.length) {
-      return emptyStateHtml(`No votes yet${item.closed_at ? '. Closed unopposed' : ''}.`);
-    }
-    const rows = item.votes.map((v) => {
-      const who = escapeHtml(v.display_name || v.github_login || `builder ${v.voter_id}`);
-      const mine = String(v.voter_id) === String(viewerId) ? ' <span class="gov-held-note">your vote</span>' : '';
-      // Task 1003270: the faulted section by its LABEL — the words the author
-      // wrote under and the objector picked from. `why_matters` is a jsonb key,
-      // not something a reader should have to decode.
-      const objection = v.direction === 'no'
-        ? `<p class="ov-row__sub">objected to <strong>${escapeHtml(SECTION_LABELS[v.section_key] || v.section_key || 'the idea')}</strong>: ${escapeHtml(v.reason_md || '')}</p>`
-        : '';
-      return `<li class="ov-row ov-row--dense"><div class="ov-row__main">
-        <span class="ov-row__title">${who}${mine}</span>
-        ${objection}
-        <div class="ov-row__facts">${v.direction === 'no' ? pill('danger', 'objected') : pill('ok', 'yes')}<span class="ov-row__when">${when(v.cast_at)}</span></div>
-      </div></li>`;
-    }).join('');
-    return `<ul class="ov-rows">${rows}</ul>`;
-  }
-
-  // ---- the vote form (R17) -----------------------------------------------------
-
-  // The five section labels, mirrored from the base template declaration
-  // (modules/ideas/templates.js — the words the author saw when writing; a test
-  // holds the two equal, since browser code cannot import a server module).
-  const SECTION_LABELS = {
-    purpose: 'Purpose of Idea',
-    big_picture: 'What does the Big Picture look like',
-    why_had: 'Why did you have the Idea',
-    why_matters: 'Why does the Idea Matter',
-    fit: 'How does the Idea Fit into the big picture of the project',
-  };
-
-  // The idea's five sections, IN FRONT of the voter — the entire reason voting
-  // happens in the hall rather than on a reaction. Rendered in template order.
-  //
-  // TASK 1003270 — OPEN, AND SET AS PROSE. This used to be a <details> summarised
-  // "The idea, in full · completeness 100/100": the substance the vote is about
-  // sat behind a click while the constitutional metadata above it stayed expanded,
-  // which is exactly backwards. The labels were <code> pills over
-  // `.gov-perm__guards`, so an author's answers were styled as config rows. The
-  // score moved into the collapsed metadata (decidedByHtml) — it describes the
-  // grade the idea cleared, not the idea.
-  function ideaSectionsHtml(item) {
-    const fv = item.subject && item.subject.field_values;
-    if (!fv) return '';
-    const rows = Object.keys(SECTION_LABELS).map((key) => {
-      // An unanswered section is dropped rather than rendered as a bare heading:
-      // a graded Full Idea has all five, and a blank one is only noise.
-      const body = String(fv[key] ?? '').trim();
-      if (!body) return '';
-      return `<h4 class="ov-prose__l">${escapeHtml(SECTION_LABELS[key])}</h4>
-        <p class="ov-prose__p gov-idea__body">${escapeHtml(body)}</p>`;
-    }).join('');
-    return rows
-      ? `<div class="ov-prose gov-idea">${rows}</div>`
-      : emptyStateHtml('This idea has no written sections.');
-  }
-
-  // ---- the sitting's rules, in plain words (task 1003270) --------------------
-
-  // The card used to carry `tally: 0 yes · 0 no — sitting under <first_ratifier>,
-  // membership <rank:archon>` — raw config keys, in a reader's face, ABOVE the
-  // idea they were being asked to decide. These say the same thing in the words
-  // a person thinks in, filed under a summary where secondary information
-  // belongs.
-  //
-  // Read from the item's SNAPSHOT constitution (the rules in force when the
-  // window opened), never today's config — the same rules the server tallies
-  // under. Rank KEYS never surface: the display label comes from the branding
-  // pack via OTB.rankLabel, as on every other hall surface. The one place a raw
-  // predicate still shows is an UNREADABLE one, where the broken string is the
-  // actionable fact and hiding it would help nobody.
-  function rankNames(keys) {
-    const labels = keys.map((k) => escapeHtml(window.OTB.rankLabel(k)));
-    if (labels.length === 1) return labels[0];
-    return `${labels.slice(0, -1).join(', ')} or ${labels[labels.length - 1]}`;
-  }
-
-  // A sitting length in the unit a person would say it in. The config stores
-  // minutes; "2880 minutes" is a number nobody converts in their head.
-  function fmtWindow(minutes) {
-    const m = Number(minutes);
-    if (!Number.isFinite(m) || m <= 0) return `${escapeHtml(String(minutes))} minutes`;
-    const plural = (n, word) => `${n} ${word}${n === 1 ? '' : 's'}`;
-    if (m % 1440 === 0) return plural(m / 1440, 'day');
-    if (m % 60 === 0) return plural(m / 60, 'hour');
-    return plural(m, 'minute');
-  }
-
-  // The short name of a pass rule, for a place a whole sentence will not fit.
-  const PASS_RULE_NAME = {
-    first_ratifier: 'by first ratifier',
-    consent: 'by consent',
-    majority: 'by majority',
-    unanimous: 'by unanimous agreement',
-  };
-
-  const PASS_RULE_PLAIN = {
-    first_ratifier: 'The first vote decides it: a yes ratifies, an objection returns it to its author.',
-    consent: 'It passes unless someone objects — silence is agreement, and one reasoned objection returns it.',
-    majority: 'It passes only when more than half the board votes yes. Silence is not agreement here.',
-    unanimous: 'Everyone who votes must vote yes, and at least one member must. One objection sends it back for revision.',
-  };
-
-  function decidedByHtml(item) {
-    const c = item.constitution || {};
-    const past = !!item.closed_at;
-    const keys = membershipRankKeys(c.membership);
-    const who = keys
-      ? `Every active <strong>${rankNames(keys)}</strong> ${past ? 'could vote on this' : 'may vote on this'}.`
-      : `Nobody ${past ? 'could vote' : 'may vote'} — the membership setting <code>${escapeHtml(String(c.membership || 'unset'))}</code> cannot be read.`;
-    const rule = PASS_RULE_PLAIN[c.pass_rule] || 'How this sitting passes could not be read.';
-    const clock = c.window_minutes === null || c.window_minutes === undefined
-      ? `No deadline — it ${past ? 'stayed' : 'stays'} open until a vote decides it.`
-      : `The sitting ${past ? 'ran' : 'runs'} ${fmtWindow(c.window_minutes)}${c.close_early_on_full_turnout ? ', closing early once every member has voted' : ''}.`;
-    const score = item.subject ? item.subject.completeness_score : null;
-    const grade = score == null
-      ? ''
-      : `<p class="gov-grid-note">It cleared the completeness grade at ${escapeHtml(String(score))}/100.</p>`;
-    return `<p class="gov-grid-note">${who}</p>
-      <p class="gov-grid-note">${rule}</p>
-      <p class="gov-grid-note">${clock}</p>${grade}`;
-  }
-
-  // TASK 1003270: the ballot is the point of the card, so its copy earns its
-  // place or goes. What stayed is the ADR 0175 §8 requirement itself — an
-  // objection carries a REASON and names ONE SECTION — because that requirement
-  // is the whole reason voting lives in the hall instead of on a chat reaction.
-  // Simplifying may not weaken it, so the reason box and the five-way picker are
-  // untouched; only the sentences around them shrank.
-  function voteFormHtml(item, viewerId) {
-    if (item.closed_at) return '';
-    const mine = item.votes.find((v) => String(v.voter_id) === String(viewerId));
-    if (mine) return '';
-    // TASK 1003273: the author gets a REAL ballot. The old branch returned a note
-    // and no form, which is what made the Board Room show nine sittings and no
-    // way to vote on any of them — every one of them was the reader's own. They
-    // may now cast; what they cannot do is decide alone (the close trigger needs
-    // a voice that is not theirs, and a majority made only of them cannot carry).
-    // The note says so instead of refusing, so the limit is visible rather than
-    // discovered by clicking.
-    const isOwnIdea = item.subject_type === 'full_idea'
-      && item.subject && String(item.subject.author_id) === String(viewerId);
-    const sections = Object.keys(SECTION_LABELS).map((key) => `
-      <label class="gov-vote__section"><input type="radio" name="vote-section-${escapeHtml(item.id)}" value="${escapeHtml(key)}"> <span>${escapeHtml(SECTION_LABELS[key])}</span></label>`).join('');
-    const ownNote = isOwnIdea
-      ? `<p class="gov-grid-note">Your own idea. You may vote, but it can’t be decided by your vote alone, and a vote on your own idea earns no karma.</p>`
-      : '';
-    return `<div class="gov-vote" data-item="${escapeHtml(item.id)}">
-      ${ownNote}
-      <button type="button" class="btn-accent" data-vote="yes">Vote yes</button>
-      <details class="gov-vote__no">
-        <summary class="btn-ghost">Object…</summary>
-        <p class="gov-grid-note">This sends the idea back to its author. Say why, and which section.</p>
-        <textarea data-vote-reason placeholder="Why — the reason the author will act on" maxlength="5000" rows="3"></textarea>
-        <div class="gov-vote__sections">${sections}</div>
-        <button type="button" class="btn-ghost btn-ghost--danger" data-vote="no">Cast objection</button>
-      </details>
-    </div>`;
-  }
-
-  async function castVoteFromRoom(itemId, direction, container) {
-    const body = { direction };
-    if (direction === 'no') {
-      const reason = (container.querySelector('[data-vote-reason]') || {}).value || '';
-      const picked = container.querySelector(`input[name="vote-section-${itemId}"]:checked`);
-      body.reason_md = reason;
-      if (picked) body.section_key = picked.value;
-    }
-    try {
-      const out = await sendJson('POST', `/government/board/items/${encodeURIComponent(itemId)}/votes`, body);
-      toast(out.item_closed
-        ? `Vote cast — the sitting closed: ${out.outcome}.`
-        : 'Vote cast.');
-    } catch (err) {
-      if (err && err.kind === '401') return;
-      toast(`Could not vote: ${err.message || err}`);
-    }
-    loadBoard(); // re-render either way — the room shows what stands
-  }
-
-  // ONE SITTING, ONE DECISION (task 1003270). The card reads top-down in the
-  // order a person actually needs it:
+  // ---- the Board Room: MOVED OUT (ADR 0266) ---------------------------------
   //
-  //   1. what is being decided — the idea's TITLE, at title size. It used to
-  //      render through `.gov-section__head`, i.e. 11.5px uppercase letterspaced:
-  //      the subject of the vote styled as a table header.
-  //   2. the ACTION, immediately under it. Everything that used to sit between
-  //      the two — a tally of raw config keys, a sentence explaining that the UI
-  //      had no vote form (it does), and a collapsed idea — is gone or moved, so
-  //      "Vote yes" lands above the fold on an ordinary window instead of below
-  //      a wall of prose.
-  //   3. the idea itself, open (ideaSectionsHtml).
-  //   4. the constitutional metadata, collapsed — who votes, how it passes, the
-  //      clock, and the open ballot. Still one click away, never invisible: the
-  //      tally rides the summary, which is the part of it a reader scans for
-  //      (ADR 0175 §9 — a board whose votes are invisible constrains nobody).
+  // The Board Room was this page's `#board-room` tab. It now has its own page
+  // at /board-room (modules/hall-ui/public/board-room.js), gated on the
+  // `board.vote.cast` atom instead of this page's `page.view.government`, so
+  // the room's reach equals the right to vote. Two things drove the move: this
+  // page's nav item is labelled "Permissions" and gated archon, so a Metic who
+  // sat on the board had no door to the room at all; and the vote atom floors
+  // at xenos on purpose, so widening membership below Metic produced members
+  // who could cast through the API and not load the page to cast on.
   //
-  // A CLOSED sitting has no action and no idea body: its head carries the
-  // outcome and the record lives under the same summary.
+  // What stayed behind, and why, so neither reads as a leftover:
+  //   • fmtWindow      — windowSentence (the Constitution's clock dial) reads it.
+  //   • PASS_RULE_NAME — historyRow (the amendment history line) reads it.
+  // Both are duplicated in board-room.js rather than shared; a hall page script
+  // is a self-contained IIFE, which is the convention here.
   //
-  // In v3 a sitting IS the panel (task 1003469): the card is the shell's .scroll,
-  // its title the panel's display-voice heading.
-  function itemCard(item, viewerId) {
-    const yes = item.votes.filter((v) => v.direction === 'yes').length;
-    const no = item.votes.filter((v) => v.direction === 'no').length;
-    const isOpen = !item.closed_at;
-    const state = isOpen
-      ? `${pill('info', 'open')} <span>${escapeHtml(clockLine(item))}</span>`
-      : (item.outcome === 'passed' ? pill('ok', item.outcome) : pill('warn', item.outcome || ''));
-    const amendmentDetail = item.subject_type === 'constitutional_amendment' && item.subject
-      ? `<p class="gov-item__amend">Proposes <code>${escapeHtml(JSON.stringify(item.subject.proposed))}</code>${item.subject.rationale_md ? ` — ${escapeHtml(item.subject.rationale_md)}` : ''}</p>`
-      : '';
-    const mine = item.votes.find((v) => String(v.voter_id) === String(viewerId));
-    // A voter who has cast sees WHAT they cast where the buttons were. The line
-    // that used to fill this slot for everyone else — announcing that the reader
-    // had not voted and that casting was still to come — is deleted outright: it
-    // explained the UI to itself, and the form it promised shipped in R17.
-    const action = !isOpen ? ''
-      : mine
-        ? `<p class="gov-item__cast">You ${mine.direction === 'no' ? 'objected' : 'voted yes'}. One vote per member.</p>`
-        : voteFormHtml(item, viewerId);
-    const tally = `${yes} yes · ${no} objection${no === 1 ? '' : 's'}`;
-    return `<section class="scroll gov-item" id="board-item-${escapeHtml(item.id)}">
-      <div class="gov-item__head">
-        <h3 class="gov-item__title">${subjectLine(item)}</h3>
-        <span class="gov-item__state">${state}</span>
-      </div>
-      ${amendmentDetail}
-      ${action ? `<div class="gov-item__act">${action}</div>` : ''}
-      ${isOpen ? ideaSectionsHtml(item) : ''}
-      <details class="gov-item__meta">
-        <summary class="gov-item__summary">${tally} · who votes, and how it ${isOpen ? 'passes' : 'passed'}</summary>
-        <div class="gov-item__metabody">
-          ${decidedByHtml(item)}
-          ${ballotHtml(item, viewerId)}
-        </div>
-      </details>
-    </section>`;
-  }
-
-  async function loadBoard() {
-    const box = document.getElementById('gov-board');
-    let data;
-    try {
-      data = await fetchJson('/government/board/items');
-    } catch (err) {
-      if (err && err.kind === '401') return;
-      box.innerHTML = emptyStateHtml('Could not load the Board Room just now.');
-      return;
-    }
-    const viewerId = data.viewer_id;
-    const openItems = data.open || [];
-    const closedItems = data.closed || [];
-    const open = openItems.map((i) => itemCard(i, viewerId)).join('');
-    const closed = closedItems.map((i) => itemCard(i, viewerId)).join('');
-    box.innerHTML =
-      (open || `<section class="scroll">${emptyStateHtml('Nothing is before the board. When a Full Idea clears the completeness grade, its window opens here.')}</section>`)
-      + `<div class="gov-board__divider">${groupHead('Closed sittings', closedItems.length)}</div>`
-      + (closed || `<section class="scroll">${emptyStateHtml('No sitting has closed yet.')}</section>`);
-    // R21: the Discord announcement deep-links ?item=<id>#board-room — land the
-    // reader on THAT sitting. Query, not hash (the hash is the tab, makeTabs
-    // owns it); a missing or unknown id is simply the room as usual. The mark is
-    // the world's lit grammar: the accent, and only on the one live thing.
-    const wanted = new URLSearchParams(window.location.search).get('item');
-    if (wanted) {
-      const el = document.getElementById(`board-item-${wanted}`);
-      if (el) {
-        el.scrollIntoView({ block: 'start' });
-        el.style.outline = '2px solid var(--accent)';
-        el.style.outlineOffset = '2px';
-      }
-    }
-    // R17: the cast buttons. One delegated listener; the SERVER refuses every
-    // illegitimate cast regardless (membership, anti-self, closed, expired) —
-    // the form is a courtesy, the route is the wall.
-    box.querySelectorAll('.gov-vote [data-vote]').forEach((btn) => {
-      btn.addEventListener('click', () => {
-        const wrap = btn.closest('.gov-vote');
-        btn.disabled = true;
-        castVoteFromRoom(wrap.dataset.item, btn.dataset.vote, wrap);
-      });
-    });
-  }
+  // The old deep link is redirected below in init() — a fragment never reaches
+  // the server, so #board-room could not be caught by a route.
 
   // ---- init ----------------------------------------------------------------
 
@@ -1205,6 +955,9 @@
   }
 
   async function init() {
+    // Before anything paints: an old #board-room link goes to the room's own
+    // page now (ADR 0266). Returns true when it navigated, so nothing else runs.
+    if (redirectLegacyBoardHash()) return;
     let me;
     try {
       me = await fetchJson('/me');
@@ -1221,8 +974,7 @@
     document.getElementById('gov-sub').textContent = 'How this project is governed.';
     document.getElementById('gov-body').hidden = false;
     wireTabs({ isArchon });
-    loadBoard();        // the room loads for everyone the page admits
-    loadConstitution(); // so does the rule it runs under (R18)
+    loadConstitution(); // the rule this project runs under (R18)
 
     if (!isArchon) { sealRanksPanel(); return; }
     wireForms();

package/modules/hall-ui/public/palette.js

@@ -30,7 +30,7 @@
   // Anchors must stay in step with their source of truth; the test asserts it:
   //   standing   → builders.js STANDING_GROUPS (+ shell.js VIEW_ALIASES)
   //   work       → work.js makeTabs ids
-  //   government → government.js makeTabs ids (the R15 three-section IA)
+  //   government → government.js makeTabs ids (two rooms since ADR 0266)
   //   settings   → settings.js RAIL_GROUPS
   var SECTIONS = [
     { parent: 'Standing', gate: 'nav-standing', items: [
@@ -45,9 +45,12 @@
       { label: 'Backlog', href: '/work#backlog' },
       { label: 'Completed', href: '/work#completed' },
     ] },
+    // Two entries, not three: the Board Room is a PAGE since ADR 0266, so it is
+    // read live from the sidebar like every other page and must not be declared
+    // here as well — a sub-destination and a page of the same name would offer
+    // the reader two rows to the same room.
     { parent: 'Government', gate: 'nav-government', items: [
       { label: 'Constitution', href: '/government#constitution' },
-      { label: 'Board Room', href: '/government#board-room' },
       { label: 'Ranks & Permissions', href: '/government#ranks' },
     ] },
     { parent: 'Settings', gate: 'shell-user', items: [

package/modules/hall-ui/public/shell.js

@@ -246,6 +246,22 @@
     // Archon-only, so a group header reading "Archon" over items a Metic can open
     // would misdescribe the ladder to the builders most likely to be learning it.
     { group: 'Government', gate: 'government', items: [
+      // FIRST in the group because it is the one page here you ACT on — the
+      // Community group's ordering rule, applied (a sitting waits on a decision;
+      // the rest of this group is monitoring). Carved out of the /government tab
+      // strip by ADR 0266, which is also why it needs its own item at all: while
+      // it was a tab, the group's only door to it was labelled "Permissions".
+      //
+      // THE GATE HERE IS COSMETIC AND DELIBERATELY CONSERVATIVE. The page's real
+      // wall is `board.vote.cast` (auth.js requireBoardVotePage), which floors at
+      // xenos so a widened board can reach the room. This nav gate cannot say
+      // that: gateAllows() speaks rank, not permission. It is set to the group's
+      // floor because today's constitution seats `rank:archon`, so no sub-Metic
+      // member exists to hide the link from. An instance that widens membership
+      // below Metic gets a room it can reach by URL and by the board_votes need's
+      // deep link, but no sidebar entry — teaching the shell a permission-aware
+      // gate is filed rather than guessed at here.
+      { id: 'board-room', label: 'Board Room', icon: 'admin', href: '/board-room', gate: 'government' },
       { id: 'watch', label: 'Watch', icon: 'admin', href: '/watch', gate: 'government' },
       { id: 'harbor', label: 'Harbor', icon: 'admin', href: '/harbor', gate: 'government', module: 'dev-box' },
       { id: 'gate', label: 'Gate', icon: 'admin', href: '/gate', gate: 'government' },

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.622",
+  "version": "1.19.623",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.622",
+      "version": "1.19.623",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",